Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

CVE-2017-6504 — MEDIUM severity vulnerability | Release Alert

qBittorrent is a free software cross-platform BitTorrent client GUI written with Qt4. The program uses libtorrent-rasterbar library for the torrent back-end (network communication) functionality. It is developed by Christophe Dumez, from the University of Technology of Belfort-Montbeliard in France. It was started in March 2006 and has been in active development ever since. qBittorrent aims to have a small foot-print, to be powerful, intuitive and visually attractive going beyond the current functions widely provided by other applications. qBittorrent is an attempt to provide a µTorrent equivalent that is open-source and multi-platform adding a streaming-like function to let users download-and-play video files. qBittorrent is currently offering functionality comparable to more popular BitTorrent clients such as Vuze but without requiring the Java Virtual Machine. qBittorrent requires Python only for the search engine while other clients such as Deluge and BitTornado require it for the BitTorrent protocol itself. ## Features - Polished µTorrent-like User Interface - Well-integrated and extensible Search Engine - Simultaneous search in most famous BitTorrent search sites - Per-category-specific search requests (e.g. Books, Music, Movies) - All Bittorrent extensions - DHT, Peer Exchange, Full encryption, Magnet/BitComet URIs, ... - Remote control through a Web user interface - Nearly identical to the regular UI, all in Ajax - Advanced control over trackers, peers and torrents - Torrents queueing and prioritizing - Torrent content selection and prioritizing - UPnP / NAT-PMP port forwarding support - Available in ~41 languages (Unicode support) - Torrent creation tool - Advanced RSS support with download filters (inc. regex) - Bandwidth scheduler - IP Filtering (eMule and PeerGuardian compatible) - IPv6 compliant - Sequential downloading (aka "Download in order") - Available on most platforms: Linux, Mac OS X, Windows, OS/2, FreeBSD ## Notes - This version includes the 64-bit version of qbittorrent, if you wish to continue using the 32-bit version you need to pass `--x86` when calling `choco install/update` - Beginning with v4.5.0, only 64-bit version is offered. If you have the 32-bit version installed, pin the version to 4.4.5 with command `choco pin add --name="'qbittorrent'" --version="'4.4.5'"` ![qbittorrent screenshot](https://cdn.rawgit.com/chocolatey/chocolatey-coreteampackages/798547edb9c6cb22a4a58e08361da4450f0ab14c/automatic/qbittorrent/screenshot.png)

Security Advisories

CVE-2017-6504

Description

More on this CVE