alsa-2026:93924
osv_almalinux
Description
Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. Security Fix(es): * qtbase: qt5-qtbase: qt6-qtbase: qtbase: Denial of Service via uncontrolled recursion in XML serialization (CVE-2026-11573) * qt5-qtbase: qt6-qtbase: Qt: Denial of Service vulnerability in XML parsing (CVE-2026-19248) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Timeline
- Published
- unknown
- Last Modified
- unknown
CVSS Details
CVSS details not available.
Affected Products
No product information available.
References
Linked Vulnerabilities
No linked vulnerabilities found.
{
"affected": [
{
"database_specific": {
"source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:93924.json"
},
"package": {
"ecosystem": "AlmaLinux:8",
"name": "qt5-qtbase",
"purl": "pkg:rpm/almalinux/qt5-qtbase"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.3-10.el8_10"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"database_specific": {
"source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:93924.json"
},
"package": {
"ecosystem": "AlmaLinux:8",
"name": "qt5-qtbase-common",
"purl": "pkg:rpm/almalinux/qt5-qtbase-common"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.3-10.el8_10"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"database_specific": {
"source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:93924.json"
},
"package": {
"ecosystem": "AlmaLinux:8",
"name": "qt5-qtbase-devel",
"purl": "pkg:rpm/almalinux/qt5-qtbase-devel"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.3-10.el8_10"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"database_specific": {
"source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:93924.json"
},
"package": {
"ecosystem": "AlmaLinux:8",
"name": "qt5-qtbase-examples",
"purl": "pkg:rpm/almalinux/qt5-qtbase-examples"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.3-10.el8_10"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"database_specific": {
"source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:93924.json"
},
"package": {
"ecosystem": "AlmaLinux:8",
"name": "qt5-qtbase-gui",
"purl": "pkg:rpm/almalinux/qt5-qtbase-gui"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.3-10.el8_10"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"database_specific": {
"source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:93924.json"
},
"package": {
"ecosystem": "AlmaLinux:8",
"name": "qt5-qtbase-mysql",
"purl": "pkg:rpm/almalinux/qt5-qtbase-mysql"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.3-10.el8_10"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"database_specific": {
"source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:93924.json"
},
"package": {
"ecosystem": "AlmaLinux:8",
"name": "qt5-qtbase-odbc",
"purl": "pkg:rpm/almalinux/qt5-qtbase-odbc"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.3-10.el8_10"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"database_specific": {
"source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:93924.json"
},
"package": {
"ecosystem": "AlmaLinux:8",
"name": "qt5-qtbase-postgresql",
"purl": "pkg:rpm/almalinux/qt5-qtbase-postgresql"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.3-10.el8_10"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"database_specific": {
"source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:93924.json"
},
"package": {
"ecosystem": "AlmaLinux:8",
"name": "qt5-qtbase-private-devel",
"purl": "pkg:rpm/almalinux/qt5-qtbase-private-devel"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.3-10.el8_10"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"database_specific": {
"source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:93924.json"
},
"package": {
"ecosystem": "AlmaLinux:8",
"name": "qt5-qtbase-static",
"purl": "pkg:rpm/almalinux/qt5-qtbase-static"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.3-10.el8_10"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"details": "Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. \n\nSecurity Fix(es): \n\n * qtbase: qt5-qtbase: qt6-qtbase: qtbase: Denial of Service via uncontrolled recursion in XML serialization (CVE-2026-11573)\n * qt5-qtbase: qt6-qtbase: Qt: Denial of Service vulnerability in XML parsing (CVE-2026-19248)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n",
"id": "ALSA-2026:93924",
"modified": "2026-11-03T12:15:02.396865754Z",
"published": "2026-11-02T00:00:00Z",
"references": [
{
"type": "ADVISORY",
"url": "https://access.redhat.com/errata/RHSA-2026:93924"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-11573"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-19248"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2529762"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2535011"
},
{
"type": "ADVISORY",
"url": "https://errata.almalinux.org/8/ALSA-2026-93924.html"
}
],
"related": [
"CVE-2026-11573",
"CVE-2026-19248"
],
"schema_version": "1.9.2",
"summary": "Important: qt5-qtbase security update",
"upstream": [
"CVE-2026-11573",
"CVE-2026-19248"
]
}