ALSA-2026:87082
ALSA-2026:87082 · Important: qt5-qtbase security update
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. Security Fix(es): * qtbase: qt5-qtbase: qt6-qtbase: qtbase: Denial of Service via uncontrolled recursion in XML serialization (CVE-2026-11573) * qt5-qtbase: qt6-qtbase: Qt: Denial of Service vulnerability in XML parsing (CVE-2026-19248) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fix available
- Published
- Updated
Stack: system
Affected products and versions
qt5-qtbase AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.15.9-11.el9_8.2
Update to 5.15.9-11.el9_8.2
qt5-qtbase-common AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.15.9-11.el9_8.2
Update to 5.15.9-11.el9_8.2
qt5-qtbase-devel AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.15.9-11.el9_8.2
Update to 5.15.9-11.el9_8.2
qt5-qtbase-examples AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.15.9-11.el9_8.2
Update to 5.15.9-11.el9_8.2
qt5-qtbase-gui AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.15.9-11.el9_8.2
Update to 5.15.9-11.el9_8.2
qt5-qtbase-mysql AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.15.9-11.el9_8.2
Update to 5.15.9-11.el9_8.2
qt5-qtbase-odbc AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.15.9-11.el9_8.2
Update to 5.15.9-11.el9_8.2
qt5-qtbase-postgresql AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.15.9-11.el9_8.2
Update to 5.15.9-11.el9_8.2
qt5-qtbase-private-devel AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.15.9-11.el9_8.2
Update to 5.15.9-11.el9_8.2
qt5-qtbase-static AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.15.9-11.el9_8.2
Update to 5.15.9-11.el9_8.2
Original sources
- https://access.redhat.com/errata/RHSA-2026:87082
- https://access.redhat.com/security/cve/CVE-2026-11573
- https://access.redhat.com/security/cve/CVE-2026-19248
- https://bugzilla.redhat.com/2529762
- https://bugzilla.redhat.com/2535011
- https://errata.almalinux.org/9/ALSA-2026-87082.html
- https://osv.dev/vulnerability/ALSA-2026:87082