Skip to content
OpenAdvisories
High RLSA-2026:98535 1 CVE

Important: qt5-qtbase security update

Published Nov 13, 2026 · Updated Nov 13, 2026

Ecosystem: Rocky Linux

Summary

Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt.

Security Fix(es):

* qt: qt: Denial of Service via crafted XML parsing in QXmlStreamReader (CVE-2026-16762)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 86

ReleasePackageFixed in
Rocky Linux · 9 qt5-qtbase 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-common 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-debuginfo 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-debuginfo 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-debuginfo 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-debuginfo 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-debuginfo 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-debugsource 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-debugsource 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-debugsource 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-debugsource 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-debugsource 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-devel 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-devel 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-devel 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-devel 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-devel 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-devel-debuginfo 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-devel-debuginfo 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-devel-debuginfo 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-devel-debuginfo 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-devel-debuginfo 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-examples 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-examples 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-examples 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-examples 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-examples 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-examples-debuginfo 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-examples-debuginfo 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-examples-debuginfo 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-examples-debuginfo 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-examples-debuginfo 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-gui 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-gui 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-gui 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-gui 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-gui 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-gui-debuginfo 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-gui-debuginfo 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-gui-debuginfo 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-gui-debuginfo 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-gui-debuginfo 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-mysql 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-mysql 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-mysql 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-mysql 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-mysql 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-mysql-debuginfo 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-mysql-debuginfo 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-mysql-debuginfo 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-mysql-debuginfo 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-mysql-debuginfo 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-odbc 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-odbc 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-odbc 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-odbc 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-odbc 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-odbc-debuginfo 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-odbc-debuginfo 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-odbc-debuginfo 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-odbc-debuginfo 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-odbc-debuginfo 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-postgresql 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-postgresql 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-postgresql 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-postgresql 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-postgresql 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-postgresql-debuginfo 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-postgresql-debuginfo 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-postgresql-debuginfo 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-postgresql-debuginfo 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-postgresql-debuginfo 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-private-devel 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-private-devel 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-private-devel 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-private-devel 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-private-devel 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-static 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-static 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-static 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-static 0:5.15.9-12.el9_9.2
Rocky Linux · 9 qt5-qtbase-static 0:5.15.9-12.el9_9.2

Vulnerabilities 1

  • High 8.7
    CVE-2026-16762

    Denial-of-service vulnerability in the Qt Core QXmlStream parser (QXmlStreamReader) impacts Qt

    An attacker able to supply a crafted XML document to an application using QXmlStreamReader can cause disproportionate CPU consumption during parsing, making the application unresponsive (denial of service). Exploitation requires only that the application pars…

    Qt Project Qt qtbase-opensource-src qt6-base Debian Ubuntu Azure Linux

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2559538
  • advisory
    https://access.redhat.com/errata/RHSA-2026:98535