High ELSA-2026-96075 1 CVE

Important: qt5-qtdeclarative security update (Oracle Linux 8)

Published Nov 9, 2026 · Updated Nov 9, 2026

Ecosystem: Oracle Linux

Summary

[5.15.3-3]
- CVE-2025-12385 qt5-qtdeclarative: Improper validation of <img> tag size in Text component parser
Resolves: RHEL-287799

Fixed packages 4

Release	Package	Fixed in
Oracle Linux · 8	qt5-qtdeclarative	0:5.15.3-3.el8_10
Oracle Linux · 8	qt5-qtdeclarative-devel	0:5.15.3-3.el8_10
Oracle Linux · 8	qt5-qtdeclarative-examples	0:5.15.3-3.el8_10
Oracle Linux · 8	qt5-qtdeclarative-static	0:5.15.3-3.el8_10

Vulnerabilities 1

High 8.7

CVE-2025-12385

Improper validation of <img> tag size in Text component parser

Allocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability in The Qt Company Qt on Windows, MacOS, Linux, iOS, Android, x86, ARM, 64 bit, 32 bit allows Excessive Allocation. This issue affects users …

Qt Project Qt qt6-declarative qtdeclarative-opensource-src Debian Ubuntu Azure Linux

Dec 3, 2025