SUSE Package Hub - SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2025-3599

Update Info

SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2025-3599

Security update for qt6-base

Type: security

Severity: moderate

Issued: 2025-10-15

Description:

This update for qt6-base fixes the following issues:

- CVE-2025-5455: processing of malformed data in `qDecodeDataUrl()` can trigger assertion and cause a crash
  (bsc#1243958).
- CVE-2025-30348: complex algorithm used in `encodeText` in QDom when processing XML data can cause low performance
  (bsc#1239896).

References

CVE: CVE-2025-5455
CVE: CVE-2025-30348
Bugzilla: 1243958 VUL-0: CVE-2025-5455: libqt5-qtbase,qt6-base: qtbase: crash when qDecodeDataUrl() is called with malformed data and assertions are enabled
Bugzilla: 1239896 VUL-0: CVE-2025-30348: libqt5-qtbase,qt6-base: qtbase: low performance when processing XML data due to encodeText in QDom using a complex algorithm

Packages

qt6-base-6.6.3-150600.3.6.1

qt6-base-docs-6.6.3-150600.3.6.1