Skip to content
OpenAdvisories
High ELSA-2026-98103 1 CVE

Important: qt5-qtbase security update (Oracle Linux 8)

Published Nov 12, 2026 · Updated Nov 12, 2026

Ecosystem: Oracle Linux

Summary

[5.15.3-11]
- CVE-2026-16762 qt5: qt: Denial of Service via crafted XML parsing in QXmlStreamReader
Resolves: RHEL-291031

Fixed packages 10

ReleasePackageFixed in
Oracle Linux · 8 qt5-qtbase 0:5.15.3-11.el8_10
Oracle Linux · 8 qt5-qtbase-common 0:5.15.3-11.el8_10
Oracle Linux · 8 qt5-qtbase-devel 0:5.15.3-11.el8_10
Oracle Linux · 8 qt5-qtbase-examples 0:5.15.3-11.el8_10
Oracle Linux · 8 qt5-qtbase-gui 0:5.15.3-11.el8_10
Oracle Linux · 8 qt5-qtbase-mysql 0:5.15.3-11.el8_10
Oracle Linux · 8 qt5-qtbase-odbc 0:5.15.3-11.el8_10
Oracle Linux · 8 qt5-qtbase-postgresql 0:5.15.3-11.el8_10
Oracle Linux · 8 qt5-qtbase-private-devel 0:5.15.3-11.el8_10
Oracle Linux · 8 qt5-qtbase-static 0:5.15.3-11.el8_10

Vulnerabilities 1

  • High 8.7
    CVE-2026-16762

    Denial-of-service vulnerability in the Qt Core QXmlStream parser (QXmlStreamReader) impacts Qt

    An attacker able to supply a crafted XML document to an application using QXmlStreamReader can cause disproportionate CPU consumption during parsing, making the application unresponsive (denial of service). Exploitation requires only that the application pars…

    Qt Project Qt qtbase-opensource-src qt6-base Debian Ubuntu Azure Linux