CVE-2024-51774:
(needs triaging)
qBittorrent before 5.0.1 proceeds with use of https URLs even after certificate validation errors.
CVE-2025-54310:
(needs triaging)
qBittorrent before 5.1.2 does not prevent access to a local file that is referenced in a link URL. This affects rsswidget.cpp and searchjobwidget.cpp.
This package will soon be part of the auto-openssl transition. You might want to ensure that your package is ready for it.
You can probably find supplementary information in the
debian-release
archives or in the corresponding
release.debian.org
bug.
![[bug history graph]](https://qa.debian.org/data/bts/graphs/q/qbittorrent.png){kind=link}