Skip to content
OpenAdvisories
High ELSA-2025-19772 1 CVE

Important: qt6-qtsvg security update (Oracle Linux 10)

Published Nov 5, 2025 · Updated Nov 5, 2025

Ecosystem: Oracle Linux

Summary

[6.8.1-1.1]
- Fix CVE-2025-10729: Prevent dangling pointers from misplaced elements
Resolves: RHEL-119697

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 10 qt6-qtsvg 0:6.8.1-1.el10_0.1
Oracle Linux · 10 qt6-qtsvg-devel 0:6.8.1-1.el10_0.1
Oracle Linux · 10 qt6-qtsvg-examples 0:6.8.1-1.el10_0.1

Vulnerabilities 1

  • Critical 9.4
    CVE-2025-10729

    Use-after-free vulnerability in Qt SVG qsvghandler.cpp allows denial of service via crafted SVG

    The module will parse a <pattern> node which is not a child of a structural node. The node will be deleted after creation but might be accessed later leading to a use after free.

    Qt Project Qt qt5-qtsvg qt6-svg Debian Ubuntu Azure Linux