MGASA-2024-0359
Updated qbittorrent packages fix security vulnerabilities
qBittorrent, on all platforms, did not verify any SSL certificates in its DownloadManager class from 2010 until October 2024. If it failed to verify a cert, it simply logged an error and proceeded.
What each source reports
OSV No score
Updated qbittorrent packages fix security vulnerabilities
qBittorrent, on all platforms, did not verify any SSL certificates in its DownloadManager class from 2010 until October 2024. If it failed to verify a cert, it simply logged an error and proceeded.
- Record
MGASA-2024-0359- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
qbittorrentMageia:9 |
before 4.6.7-1.mga9 | 4.6.7-1.mga9 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
MGASA-2024-0359 is a vulnerability with no CVSS score yet in qbittorrent, published November 12, 2024. No source lists public exploit code. Fixed in qbittorrent 4.6.7-1.mga9.