Skip to content
OpenAdvisories
High RHSA-2025:9486 1 CVE

Red Hat Security Advisory: qt6-qtbase security update

Published Jun 25, 2025 · Updated Oct 17, 2026

Ecosystem: Red Hat

Fixed packages 19

ReleasePackageFixed in
Red Hat · RHEL 10 enterprise_linux:10.0 qt6-qtbase 0:6.8.1-9.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 qt6-qtbase-common 0:6.8.1-9.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 qt6-qtbase-debuginfo 0:6.8.1-9.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 qt6-qtbase-debugsource 0:6.8.1-9.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 qt6-qtbase-devel 0:6.8.1-9.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 qt6-qtbase-devel-debuginfo 0:6.8.1-9.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 qt6-qtbase-examples 0:6.8.1-9.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 qt6-qtbase-examples-debuginfo 0:6.8.1-9.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 qt6-qtbase-gui 0:6.8.1-9.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 qt6-qtbase-gui-debuginfo 0:6.8.1-9.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 qt6-qtbase-mysql 0:6.8.1-9.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 qt6-qtbase-mysql-debuginfo 0:6.8.1-9.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 qt6-qtbase-odbc 0:6.8.1-9.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 qt6-qtbase-odbc-debuginfo 0:6.8.1-9.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 qt6-qtbase-postgresql 0:6.8.1-9.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 qt6-qtbase-postgresql-debuginfo 0:6.8.1-9.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 qt6-qtbase-private-devel 0:6.8.1-9.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 qt6-qtbase-static 0:6.8.1-9.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 qt6-qtbase-tests-debuginfo 0:6.8.1-9.el10_0

Vulnerabilities 1

  • High 8.4
    CVE-2025-5455

    Possible denial of service when passing malformed data in a URL to qDecodeDataUrl

    An issue was found in the private API function qDecodeDataUrl() in QtCore, which is used in QTextDocument and QNetworkReply, and, potentially, in user code. If the function was called with malformed data, for example, an URL that contained a "charset" paramet…

    Qt Project Qt qtbase-opensource-src qtbase-opensource-src Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2369722
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_9486.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-5455
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-5455
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-5455
  • article
    https://codereview.qt-project.org/c/qt/qtbase/+/642006