ELSA-2025-22394

ELSA-2025-22394 - qt6-qtsvg security update

Type:SECURITY
Impact:MODERATE
Release Date:2025-12-02

Description


[6.9.1-2.2]
- Fix CVE-2025-10728: Replace quadratic cycle check with linear recursion
guard to prevent stack overflow
Resolves: RHEL-119719

[6.9.1-2.1]
- Fix CVE-2025-10729: Prevent dangling pointers in SVG group node creation
Resolves: RHEL-119699


Related CVEs


CVE-2025-10728

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 10 (aarch64) qt6-qtsvg-6.9.1-2.el10_1.2.src.rpmaadc191c203ab8b394451fe2c8b38930287a048897ad4e662aa0666d690fe00a-ol10_aarch64_appstream
qt6-qtsvg-6.9.1-2.el10_1.2.src.rpmaadc191c203ab8b394451fe2c8b38930287a048897ad4e662aa0666d690fe00a-ol10_aarch64_codeready_builder
qt6-qtsvg-6.9.1-2.el10_1.2.aarch64.rpmfe0588a7643a1447ffbfed4f6d70fa565a8a45500a3a841483333cbdcadc6f99-ol10_aarch64_appstream
qt6-qtsvg-devel-6.9.1-2.el10_1.2.aarch64.rpme04d6522cfb76c86df5807d3b5f58b05323b51144520f3ff35d1e5b6f98c3a01-ol10_aarch64_appstream
qt6-qtsvg-examples-6.9.1-2.el10_1.2.aarch64.rpm4dbf0bf6160bd31a93cc7cd2373a034a203b394e630ef9c6e754abe5b90e754e-ol10_aarch64_codeready_builder
Oracle Linux 10 (x86_64) qt6-qtsvg-6.9.1-2.el10_1.2.src.rpmaadc191c203ab8b394451fe2c8b38930287a048897ad4e662aa0666d690fe00a-ol10_x86_64_appstream
qt6-qtsvg-6.9.1-2.el10_1.2.src.rpmaadc191c203ab8b394451fe2c8b38930287a048897ad4e662aa0666d690fe00a-ol10_x86_64_codeready_builder
qt6-qtsvg-6.9.1-2.el10_1.2.x86_64.rpm4a9ac2766a2535123dae343369dc03800c9250302a27d9cfd2f7d370d0bb0852-ol10_x86_64_appstream
qt6-qtsvg-devel-6.9.1-2.el10_1.2.x86_64.rpm32782afb1676c6c0004dcd016ec9eeeee4e372840f5b9f8c99a426e438489b13-ol10_x86_64_appstream
qt6-qtsvg-examples-6.9.1-2.el10_1.2.x86_64.rpmaa6cb69d8b02a01e14504fbc8cee42a781ef6a240a4fade04693e1668581a805-ol10_x86_64_codeready_builder



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete