Skip to content
OpenAdvisories
High RHSA-2025:11841 1 CVE

Red Hat Security Advisory: qt5-qtbase security update

Published Jul 29, 2025 · Updated Oct 17, 2026

Ecosystem: Red Hat

Fixed packages 28

ReleasePackageFixed in
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream qt5-qtbase 0:5.15.9-11.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream qt5-qtbase-common 0:5.15.9-11.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream qt5-qtbase-debuginfo 0:5.15.9-11.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream qt5-qtbase-debugsource 0:5.15.9-11.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream qt5-qtbase-devel 0:5.15.9-11.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream qt5-qtbase-devel-debuginfo 0:5.15.9-11.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream qt5-qtbase-examples 0:5.15.9-11.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream qt5-qtbase-examples-debuginfo 0:5.15.9-11.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream qt5-qtbase-gui 0:5.15.9-11.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream qt5-qtbase-gui-debuginfo 0:5.15.9-11.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream qt5-qtbase-mysql 0:5.15.9-11.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream qt5-qtbase-mysql-debuginfo 0:5.15.9-11.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream qt5-qtbase-odbc 0:5.15.9-11.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream qt5-qtbase-odbc-debuginfo 0:5.15.9-11.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream qt5-qtbase-postgresql 0:5.15.9-11.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream qt5-qtbase-postgresql-debuginfo 0:5.15.9-11.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream qt5-qtbase-private-devel 0:5.15.9-11.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream qt5-qtbase-tests-debuginfo 0:5.15.9-11.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::crb qt5-qtbase-debuginfo 0:5.15.9-11.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::crb qt5-qtbase-debugsource 0:5.15.9-11.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::crb qt5-qtbase-devel-debuginfo 0:5.15.9-11.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::crb qt5-qtbase-examples-debuginfo 0:5.15.9-11.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::crb qt5-qtbase-gui-debuginfo 0:5.15.9-11.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::crb qt5-qtbase-mysql-debuginfo 0:5.15.9-11.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::crb qt5-qtbase-odbc-debuginfo 0:5.15.9-11.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::crb qt5-qtbase-postgresql-debuginfo 0:5.15.9-11.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::crb qt5-qtbase-static 0:5.15.9-11.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::crb qt5-qtbase-tests-debuginfo 0:5.15.9-11.el9_4

Vulnerabilities 1

  • High 8.4
    CVE-2025-5455

    Possible denial of service when passing malformed data in a URL to qDecodeDataUrl

    An issue was found in the private API function qDecodeDataUrl() in QtCore, which is used in QTextDocument and QNetworkReply, and, potentially, in user code. If the function was called with malformed data, for example, an URL that contained a "charset" paramet…

    Qt Project Qt qtbase-opensource-src qtbase-opensource-src Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2369722
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_11841.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-5455
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-5455
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-5455
  • article
    https://codereview.qt-project.org/c/qt/qtbase/+/642006