Red Hat Security AdvisoryRHSA-2025:22394
qt6-qtsvg security update
Released 2025-12-01 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 10) qt6-qtsvg-6.9.1-2.el10_1.2, qt6-qtsvg-devel-6.9.1-2.el10_1.2
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) qt6-qtsvg-examples-6.9.1-2.el10_1.2
Fixes 1 record
Priority MEDIUM 42
When the module renders a Svg file that contains a <pattern> element, it might end up rendering it recursively leading to stack overflow DoS
CVSS 4.0CRITICAL 9.4· Local · No auth · No interaction · EPSS 0.00218 · Published 2025-10-03 · Partial fix CWE-674