Fixed packages 36
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream | qt5-qtbase | 0:5.12.5-9.el8_4.3 |
| Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream | qt5-qtbase-common | 0:5.12.5-9.el8_4.3 |
| Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream | qt5-qtbase-debuginfo | 0:5.12.5-9.el8_4.3 |
| Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream | qt5-qtbase-debugsource | 0:5.12.5-9.el8_4.3 |
| Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream | qt5-qtbase-devel | 0:5.12.5-9.el8_4.3 |
| Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream | qt5-qtbase-devel-debuginfo | 0:5.12.5-9.el8_4.3 |
| Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream | qt5-qtbase-examples | 0:5.12.5-9.el8_4.3 |
| Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream | qt5-qtbase-examples-debuginfo | 0:5.12.5-9.el8_4.3 |
| Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream | qt5-qtbase-gui | 0:5.12.5-9.el8_4.3 |
| Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream | qt5-qtbase-gui-debuginfo | 0:5.12.5-9.el8_4.3 |
| Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream | qt5-qtbase-mysql | 0:5.12.5-9.el8_4.3 |
| Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream | qt5-qtbase-mysql-debuginfo | 0:5.12.5-9.el8_4.3 |
| Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream | qt5-qtbase-odbc | 0:5.12.5-9.el8_4.3 |
| Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream | qt5-qtbase-odbc-debuginfo | 0:5.12.5-9.el8_4.3 |
| Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream | qt5-qtbase-postgresql | 0:5.12.5-9.el8_4.3 |
| Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream | qt5-qtbase-postgresql-debuginfo | 0:5.12.5-9.el8_4.3 |
| Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream | qt5-qtbase-private-devel | 0:5.12.5-9.el8_4.3 |
| Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream | qt5-qtbase-tests-debuginfo | 0:5.12.5-9.el8_4.3 |
| Red Hat · RHEL 8.4 EUS Long Life rhel_eus_long_life:8.4::appstream | qt5-qtbase | 0:5.12.5-9.el8_4.3 |
| Red Hat · RHEL 8.4 EUS Long Life rhel_eus_long_life:8.4::appstream | qt5-qtbase-common | 0:5.12.5-9.el8_4.3 |
| Red Hat · RHEL 8.4 EUS Long Life rhel_eus_long_life:8.4::appstream | qt5-qtbase-debuginfo | 0:5.12.5-9.el8_4.3 |
| Red Hat · RHEL 8.4 EUS Long Life rhel_eus_long_life:8.4::appstream | qt5-qtbase-debugsource | 0:5.12.5-9.el8_4.3 |
| Red Hat · RHEL 8.4 EUS Long Life rhel_eus_long_life:8.4::appstream | qt5-qtbase-devel | 0:5.12.5-9.el8_4.3 |
| Red Hat · RHEL 8.4 EUS Long Life rhel_eus_long_life:8.4::appstream | qt5-qtbase-devel-debuginfo | 0:5.12.5-9.el8_4.3 |
| Red Hat · RHEL 8.4 EUS Long Life rhel_eus_long_life:8.4::appstream | qt5-qtbase-examples | 0:5.12.5-9.el8_4.3 |
| Red Hat · RHEL 8.4 EUS Long Life rhel_eus_long_life:8.4::appstream | qt5-qtbase-examples-debuginfo | 0:5.12.5-9.el8_4.3 |
| Red Hat · RHEL 8.4 EUS Long Life rhel_eus_long_life:8.4::appstream | qt5-qtbase-gui | 0:5.12.5-9.el8_4.3 |
| Red Hat · RHEL 8.4 EUS Long Life rhel_eus_long_life:8.4::appstream | qt5-qtbase-gui-debuginfo | 0:5.12.5-9.el8_4.3 |
| Red Hat · RHEL 8.4 EUS Long Life rhel_eus_long_life:8.4::appstream | qt5-qtbase-mysql | 0:5.12.5-9.el8_4.3 |
| Red Hat · RHEL 8.4 EUS Long Life rhel_eus_long_life:8.4::appstream | qt5-qtbase-mysql-debuginfo | 0:5.12.5-9.el8_4.3 |
| Red Hat · RHEL 8.4 EUS Long Life rhel_eus_long_life:8.4::appstream | qt5-qtbase-odbc | 0:5.12.5-9.el8_4.3 |
| Red Hat · RHEL 8.4 EUS Long Life rhel_eus_long_life:8.4::appstream | qt5-qtbase-odbc-debuginfo | 0:5.12.5-9.el8_4.3 |
| Red Hat · RHEL 8.4 EUS Long Life rhel_eus_long_life:8.4::appstream | qt5-qtbase-postgresql | 0:5.12.5-9.el8_4.3 |
| Red Hat · RHEL 8.4 EUS Long Life rhel_eus_long_life:8.4::appstream | qt5-qtbase-postgresql-debuginfo | 0:5.12.5-9.el8_4.3 |
| Red Hat · RHEL 8.4 EUS Long Life rhel_eus_long_life:8.4::appstream | qt5-qtbase-private-devel | 0:5.12.5-9.el8_4.3 |
| Red Hat · RHEL 8.4 EUS Long Life rhel_eus_long_life:8.4::appstream | qt5-qtbase-tests-debuginfo | 0:5.12.5-9.el8_4.3 |
Vulnerabilities 2
-
High 7.1
Uncontrolled recursion in QDomDocument/QDomNode serialization causes stack exhaustion (QtXml)
Uncontrolled recursion (CWE-674) in the QDomDocument/QDomNode serialization path of the Qt XML module (QtXml, qtbase). QDomElementPrivate::save() and QDomNodePrivate::save() recurse mutually, consuming one stack frame per level of element nesting with no dept…
-
High 7.1
Unbounded recursion vulnerability in the QDomNode destructor of Qt XML impacts Qt
QDomDocument XML parsing is vulnerable to a remotely-triggerable denial-of-service crash when processing untrusted input.
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2529762
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2535011
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_96086.json
-
report
https://access.redhat.com/security/cve/CVE-2026-11573
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-11573
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-11573
-
article
https://codereview.qt-project.org/c/qt/qtbase/+/606899
-
report
https://access.redhat.com/security/cve/CVE-2026-19248
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-19248
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-19248
-
article
https://codereview.qt-project.org/c/qt/qtbase/+/740427