ALSA-2026:96075: Important: qt5-qtdeclarative security update
Qt5 - QtDeclarative component.
Security Fix(es):
qt5-qtdeclarative: qt6-qtdeclarative: Improper validation of <img> tag size in Text component parser (CVE-2025-12385)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
almalinux/qt5-qtdeclarativeto a version that resolves this vulnerability.Fixed in 5.15.3-3.el8_10 - Upgrade
Upgrade
almalinux/qt5-qtdeclarative-develto a version that resolves this vulnerability.Fixed in 5.15.3-3.el8_10 - Upgrade
Upgrade
almalinux/qt5-qtdeclarative-examplesto a version that resolves this vulnerability.Fixed in 5.15.3-3.el8_10 - Upgrade
Upgrade
almalinux/qt5-qtdeclarative-staticto a version that resolves this vulnerability.Fixed in 5.15.3-3.el8_10
Event History
Frequently Asked Questions
Which installed packages are covered by this update?
The advisory covers almalinux/qt5-qtdeclarative, almalinux/qt5-qtdeclarative-devel, almalinux/qt5-qtdeclarative-examples, and almalinux/qt5-qtdeclarative-static.
What component and input are involved in the issue?
The issue is an improper validation of img tag size in the Text component parser of QtDeclarative. The advisory identifies it as CVE-2025-12385.