Skip to content
OpenAdvisories
High ELSA-2025-21037 1 CVE

Important: qt6-qtsvg security update (Oracle Linux 10)

Published Dec 2, 2025 · Updated Dec 2, 2025

Ecosystem: Oracle Linux

Summary

[6.9.1-2.1]
- Fix CVE-2025-10729: Prevent dangling pointers in SVG group node creation
Resolves: RHEL-119699

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 10 qt6-qtsvg 0:6.9.1-2.el10_1.1
Oracle Linux · 10 qt6-qtsvg-devel 0:6.9.1-2.el10_1.1
Oracle Linux · 10 qt6-qtsvg-examples 0:6.9.1-2.el10_1.1

Vulnerabilities 1

  • Critical 9.4
    CVE-2025-10729

    Use-after-free vulnerability in Qt SVG qsvghandler.cpp allows denial of service via crafted SVG

    The module will parse a <pattern> node which is not a child of a structural node. The node will be deleted after creation but might be accessed later leading to a use after free.

    Qt Project Qt qt5-qtsvg qt6-svg Debian Ubuntu Azure Linux