{"id":"CLSA-2026-1778107793","summary":"qt5-qtbase: Fix of 3 CVEs","details":"- CVE-2025-5455: fix qDecodeDataUrl crash on malformed data URL with charset\n- CVE-2024-25580: fix KTX file reading buffer overflow\n- CVE-2024-39936: delay HTTP/2 communication until encrypted() can be\n  responded to (includes prerequisite to emit encrypted() on H2 path)","modified":"2026-06-01T00:32:29.199403354Z","published":"2026-05-06T22:50:01Z","upstream":["CVE-2025-5455","CVE-2024-25580","CVE-2024-39936"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1778107793.html"}],"affected":[{"package":{"name":"qt5-qtbase","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/qt5-qtbase?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-1.el9.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1778107793.json"}},{"package":{"name":"qt5-qtbase-common","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/qt5-qtbase-common?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-1.el9.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1778107793.json"}},{"package":{"name":"qt5-qtbase-devel","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/qt5-qtbase-devel?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-1.el9.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1778107793.json"}},{"package":{"name":"qt5-qtbase-examples","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/qt5-qtbase-examples?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-1.el9.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1778107793.json"}},{"package":{"name":"qt5-qtbase-gui","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/qt5-qtbase-gui?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-1.el9.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1778107793.json"}},{"package":{"name":"qt5-qtbase-mysql","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/qt5-qtbase-mysql?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-1.el9.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1778107793.json"}},{"package":{"name":"qt5-qtbase-odbc","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/qt5-qtbase-odbc?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-1.el9.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1778107793.json"}},{"package":{"name":"qt5-qtbase-postgresql","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/qt5-qtbase-postgresql?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-1.el9.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1778107793.json"}},{"package":{"name":"qt5-qtbase-private-devel","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/qt5-qtbase-private-devel?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-1.el9.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1778107793.json"}},{"package":{"name":"qt5-qtbase-static","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/qt5-qtbase-static?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-1.el9.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1778107793.json"}},{"package":{"name":"qt5-qtbase-tests","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/qt5-qtbase-tests?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-1.el9.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1778107793.json"}}],"schema_version":"1.7.5"}