Summary
Qt5 - QtDeclarative component.
Security Fix(es):
* qt5-qtdeclarative: qt6-qtdeclarative: Improper validation of <img> tag size in Text component parser (CVE-2025-12385)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 38
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 9 | qt5-qtdeclarative | 0:5.15.9-3.el9_9.1 |
| Rocky Linux · 9 | qt5-qtdeclarative | 0:5.15.9-3.el9_9.1 |
| Rocky Linux · 9 | qt5-qtdeclarative | 0:5.15.9-3.el9_9.1 |
| Rocky Linux · 9 | qt5-qtdeclarative | 0:5.15.9-3.el9_9.1 |
| Rocky Linux · 9 | qt5-qtdeclarative | 0:5.15.9-3.el9_9.1 |
| Rocky Linux · 9 | qt5-qtdeclarative-debuginfo | 0:5.15.9-3.el9_9.1 |
| Rocky Linux · 9 | qt5-qtdeclarative-debuginfo | 0:5.15.9-3.el9_9.1 |
| Rocky Linux · 9 | qt5-qtdeclarative-debuginfo | 0:5.15.9-3.el9_9.1 |
| Rocky Linux · 9 | qt5-qtdeclarative-debuginfo | 0:5.15.9-3.el9_9.1 |
| Rocky Linux · 9 | qt5-qtdeclarative-debuginfo | 0:5.15.9-3.el9_9.1 |
| Rocky Linux · 9 | qt5-qtdeclarative-debugsource | 0:5.15.9-3.el9_9.1 |
| Rocky Linux · 9 | qt5-qtdeclarative-debugsource | 0:5.15.9-3.el9_9.1 |
| Rocky Linux · 9 | qt5-qtdeclarative-debugsource | 0:5.15.9-3.el9_9.1 |
| Rocky Linux · 9 | qt5-qtdeclarative-debugsource | 0:5.15.9-3.el9_9.1 |
| Rocky Linux · 9 | qt5-qtdeclarative-debugsource | 0:5.15.9-3.el9_9.1 |
| Rocky Linux · 9 | qt5-qtdeclarative-devel | 0:5.15.9-3.el9_9.1 |
| Rocky Linux · 9 | qt5-qtdeclarative-devel | 0:5.15.9-3.el9_9.1 |
| Rocky Linux · 9 | qt5-qtdeclarative-devel | 0:5.15.9-3.el9_9.1 |
| Rocky Linux · 9 | qt5-qtdeclarative-devel | 0:5.15.9-3.el9_9.1 |
| Rocky Linux · 9 | qt5-qtdeclarative-devel | 0:5.15.9-3.el9_9.1 |
| Rocky Linux · 9 | qt5-qtdeclarative-devel-debuginfo | 0:5.15.9-3.el9_9.1 |
| Rocky Linux · 9 | qt5-qtdeclarative-devel-debuginfo | 0:5.15.9-3.el9_9.1 |
| Rocky Linux · 9 | qt5-qtdeclarative-devel-debuginfo | 0:5.15.9-3.el9_9.1 |
| Rocky Linux · 9 | qt5-qtdeclarative-devel-debuginfo | 0:5.15.9-3.el9_9.1 |
| Rocky Linux · 9 | qt5-qtdeclarative-devel-debuginfo | 0:5.15.9-3.el9_9.1 |
| Rocky Linux · 9 | qt5-qtdeclarative-examples | 0:5.15.9-3.el9_9.1 |
| Rocky Linux · 9 | qt5-qtdeclarative-examples | 0:5.15.9-3.el9_9.1 |
| Rocky Linux · 9 | qt5-qtdeclarative-examples | 0:5.15.9-3.el9_9.1 |
| Rocky Linux · 9 | qt5-qtdeclarative-examples | 0:5.15.9-3.el9_9.1 |
| Rocky Linux · 9 | qt5-qtdeclarative-examples-debuginfo | 0:5.15.9-3.el9_9.1 |
| Rocky Linux · 9 | qt5-qtdeclarative-examples-debuginfo | 0:5.15.9-3.el9_9.1 |
| Rocky Linux · 9 | qt5-qtdeclarative-examples-debuginfo | 0:5.15.9-3.el9_9.1 |
| Rocky Linux · 9 | qt5-qtdeclarative-examples-debuginfo | 0:5.15.9-3.el9_9.1 |
| Rocky Linux · 9 | qt5-qtdeclarative-static | 0:5.15.9-3.el9_9.1 |
| Rocky Linux · 9 | qt5-qtdeclarative-static | 0:5.15.9-3.el9_9.1 |
| Rocky Linux · 9 | qt5-qtdeclarative-static | 0:5.15.9-3.el9_9.1 |
| Rocky Linux · 9 | qt5-qtdeclarative-static | 0:5.15.9-3.el9_9.1 |
| Rocky Linux · 9 | qt5-qtdeclarative-static | 0:5.15.9-3.el9_9.1 |
Vulnerabilities 1
-
High 8.7
Improper validation of <img> tag size in Text component parser
Allocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability in The Qt Company Qt on Windows, MacOS, Linux, iOS, Android, x86, ARM, 64 bit, 32 bit allows Excessive Allocation. This issue affects users …