Skip to content
OpenAdvisories
Medium ELSA-2025-22394 1 CVE

Moderate: qt6-qtsvg security update (Oracle Linux 10)

Published Dec 2, 2025 · Updated Dec 2, 2025

Ecosystem: Oracle Linux

Summary

[6.9.1-2.2]
- Fix CVE-2025-10728: Replace quadratic cycle check with linear recursion
guard to prevent stack overflow
Resolves: RHEL-119719

[6.9.1-2.1]
- Fix CVE-2025-10729: Prevent dangling pointers in SVG group node creation
Resolves: RHEL-119699

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 10 qt6-qtsvg 0:6.9.1-2.el10_1.2
Oracle Linux · 10 qt6-qtsvg-devel 0:6.9.1-2.el10_1.2
Oracle Linux · 10 qt6-qtsvg-examples 0:6.9.1-2.el10_1.2

Vulnerabilities 1

  • Critical 9.4
    CVE-2025-10728

    Uncontrolled recursion in Qt SVG module

    When the module renders a Svg file that contains a <pattern> element, it might end up rendering it recursively leading to stack overflow DoS

    Qt Project Qt qt6-svg qt6-svg Debian Ubuntu