On Sat, 02 Feb 2019 00:53:59 +0100
Moritz Muehlenhoff <j...@debian.org> wrote:

> Package: telegram-desktop
> Severity: important
> Tags: security
> 
> This got assigned CVE-2018-17613:
> https://seclists.org/oss-sec/2018/q3/280
> 

This CVE looks really strange:

Using client you can add SOCKS5 proxy with login and password, then
press "share proxy" and this proxy will be shared _with credentials_.

But it's supposed to work in this way.

I suggest to close the bugreport as invalid.


-- 
Best regards,
 Alexander Gerasiov

 Contacts:
 e-mail: g...@cs.msu.su  WWW: http://gerasiov.net  TG/Skype: gerasiov
 PGP fingerprint: 04B5 9D90 DF7C C2AB CD49  BAEA CA87 E9E8 2AAC 33F1

Reply via email to