Qt5-Qtbase Security Update — AlmaLinux 8 (ALSA-2026:93924)
ALSA-2026:93924 updates qt5-qtbase on AlmaLinux 8, fixing CVE-2026-11573 and CVE-2026-19248 in the Qt base libraries (string, XML and network handling). Update with dnf update qt5-qtbase and restart applications linking Qt.
What this means under a SharedLicense license
qtbase contains the string, XML and network primitives every Qt application uses — flaws there are reachable from any input those applications process.
Type:
security
Severity:
important
Release date:
2026-11-03
Description:
Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt.
Security Fix(es):
* qtbase: qt5-qtbase: qt6-qtbase: qtbase: Denial of Service via uncontrolled recursion in XML serialization (CVE-2026-11573)
* qt5-qtbase: qt6-qtbase: Qt: Denial of Service vulnerability in XML parsing (CVE-2026-19248)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
| Architecture | Package | Checksum |
| aarch64 | qt5-qtbase-mysql-5.15.3-10.el8_10.aarch64.rpm | 2b7002a7f4a5c45ab8753294b1ebf628a63e60c0efe7f651e8447d95acead55f |
| aarch64 | qt5-qtbase-gui-5.15.3-10.el8_10.aarch64.rpm | 34c28fe2a89afc6fafe7638569aa842c1754e08dbc30893bd9748e68cbd4a720 |
| aarch64 | qt5-qtbase-private-devel-5.15.3-10.el8_10.aarch64.rpm | 69b850b5644005d07b6218b1fa5d3fccc1805ac293cdcaf04b8677f626e76f52 |
| aarch64 | qt5-qtbase-devel-5.15.3-10.el8_10.aarch64.rpm | 75803523016a4b6b1c1238b832c5d892041018e372be0787fb95160b61304e88 |
| aarch64 | qt5-qtbase-odbc-5.15.3-10.el8_10.aarch64.rpm | 7737129980cca7c85c176ca4571051ea53e34d41e43b04a15c9a167fc61ceb5c |
| aarch64 | qt5-qtbase-postgresql-5.15.3-10.el8_10.aarch64.rpm | 7e3a459efc339ca4eb98e8979bbfd03e8c6209edd3d0e7b6ae33bf6865c357d9 |
| aarch64 | qt5-qtbase-5.15.3-10.el8_10.aarch64.rpm | 7fd32abaae47e5a303f829b946b43dfae6d9a1bfa0591cf1d8090f95174e83d1 |
| aarch64 | qt5-qtbase-examples-5.15.3-10.el8_10.aarch64.rpm | b936051de6df1d13994e32e2ac9af2a7990dd1f46b4091c01ac7269f5912aeed |
| aarch64 | qt5-qtbase-static-5.15.3-10.el8_10.aarch64.rpm | dc597672b58a817c1edcf8fc51668442fb92170d2a09b69f5fcb691b4114bb0e |
| i686 | qt5-qtbase-mysql-5.15.3-10.el8_10.i686.rpm | 044024638ece43a54227757d5c772afde2453735a95eb583c9ebe7140378da22 |
| i686 | qt5-qtbase-examples-5.15.3-10.el8_10.i686.rpm | 246ba28232b352e2022d902d1a5754365426486c119ef740d1ce99cd2f2d426c |
| i686 | qt5-qtbase-gui-5.15.3-10.el8_10.i686.rpm | 34e7ce87b48aae2e476f1cb72872ecd3dc46bbd096fea1dfa6c60379525cfdd0 |
| i686 | qt5-qtbase-5.15.3-10.el8_10.i686.rpm | 4b7e2136103e502ca15953533422e8eb9b3ed2c71a74ca8d6f8441d350208478 |
| i686 | qt5-qtbase-static-5.15.3-10.el8_10.i686.rpm | 72a755515fedd2e248ef1ba565b06199c945e56c7face7a14262b91113973d35 |
| i686 | qt5-qtbase-odbc-5.15.3-10.el8_10.i686.rpm | 800a100782f868c50649cdf17d16dfc49a3df272223c50a80f71e2c175c3d385 |
| i686 | qt5-qtbase-postgresql-5.15.3-10.el8_10.i686.rpm | 82ed23fe195aa83570967b50515caa8c087f6b0843bfe02929e85577960bc156 |
| i686 | qt5-qtbase-devel-5.15.3-10.el8_10.i686.rpm | aa17026d9c58a8e04a6396813f62a6927c63cf6032c1391488163ab40d7338a8 |
| i686 | qt5-qtbase-private-devel-5.15.3-10.el8_10.i686.rpm | b4241ae87c7d32ff589d01f44ed4bd1eac7cb2f3dc6437e4a98e62f57e0a11fb |
| noarch | qt5-qtbase-common-5.15.3-10.el8_10.noarch.rpm | 805d58b0e36070d8482b286ef828182c085169feb5b53351ebc833ecc729ccd8 |
| ppc64le | qt5-qtbase-gui-5.15.3-10.el8_10.ppc64le.rpm | 2a8838e7001e40dd0a5548b18e4cbc05e42e37c1bc6420ec4724c31dc07f0634 |
| ppc64le | qt5-qtbase-mysql-5.15.3-10.el8_10.ppc64le.rpm | 4b9a8f003a32020effae0ad1033ff482085d50f2820beed8998f198683733f9b |
| ppc64le | qt5-qtbase-postgresql-5.15.3-10.el8_10.ppc64le.rpm | 64ce17d4e9a695003eeb3a7e97936dd70f45c4bc4da467c007eaea384fea03a1 |
| ppc64le | qt5-qtbase-odbc-5.15.3-10.el8_10.ppc64le.rpm | 7e55331b8ad15b8d206881218dba87dade38099c832e4a589bb7e93ab1561cad |
| ppc64le | qt5-qtbase-static-5.15.3-10.el8_10.ppc64le.rpm | c6e893844f42b30e612dd1d630d307727dde7be452e00ec169cd4c934b3df55e |
| ppc64le | qt5-qtbase-private-devel-5.15.3-10.el8_10.ppc64le.rpm | c8e53995bbf3b6711ac879ed87724bd650db4965f083462053ae26bbb3dac2cb |
| ppc64le | qt5-qtbase-examples-5.15.3-10.el8_10.ppc64le.rpm | e965fa5d870aa5923395ea186008a9c39d71849891277aa8c1edb735424a75ab |
| ppc64le | qt5-qtbase-5.15.3-10.el8_10.ppc64le.rpm | f4172ea76fed9325e96a6792861c0da26933edd838e84021e99d0d41063736e8 |
| ppc64le | qt5-qtbase-devel-5.15.3-10.el8_10.ppc64le.rpm | f7f7845f96a9077f648be08aa20bc31006ad71ed027fa2558c368960fa6bf225 |
| s390x | qt5-qtbase-examples-5.15.3-10.el8_10.s390x.rpm | 42d31c5e42e91ff876085c1d4a7441b2509cf35d2c3752fd584bfeb2bb4dd83f |
| s390x | qt5-qtbase-mysql-5.15.3-10.el8_10.s390x.rpm | 4eaebcb3d9a092b008e550cd189ffe42a6dd27b32b9ca976f4d8f9a838386012 |
| s390x | qt5-qtbase-static-5.15.3-10.el8_10.s390x.rpm | 7d18976c6dbf4d44189dafb7733937f0b99fef0b31f5b2c4850b50925377654e |
| s390x | qt5-qtbase-odbc-5.15.3-10.el8_10.s390x.rpm | 7f72432eb92e02c042d4591b5015a6f25039badf8a2f56b59bf10e137fb9bef3 |
| s390x | qt5-qtbase-gui-5.15.3-10.el8_10.s390x.rpm | 944154745233bed0b2e62a6757ae5d18045ede9cb9a2f95b524edb6342df4f98 |
| s390x | qt5-qtbase-postgresql-5.15.3-10.el8_10.s390x.rpm | 9ce759e57ee66ae732e3e692e091d4449687f072d71b814996f186a03eff6622 |
| s390x | qt5-qtbase-private-devel-5.15.3-10.el8_10.s390x.rpm | b01802401bb32ea1c385282c0bc8d3a44e57a1ef4e8b5f680df6c6453c2b6aa4 |
| s390x | qt5-qtbase-devel-5.15.3-10.el8_10.s390x.rpm | b42506131b779b199ad60c53d5f26d70bd1a79022ad02ffb9a3e031b9297296e |
| s390x | qt5-qtbase-5.15.3-10.el8_10.s390x.rpm | d07fbdece803cd4fd2fa83f8a138df333c9cedb262e206a34be45585231c4f19 |
| x86_64 | qt5-qtbase-gui-5.15.3-10.el8_10.x86_64.rpm | 05bf7f6edf69ad12c712b6ecd028f0c7d1a8a2ec643ec05fd5423a0859f204c5 |
| x86_64 | qt5-qtbase-examples-5.15.3-10.el8_10.x86_64.rpm | 1b47b2bbb190212e242a4872c6f5257fa5055091bdbbafa7a539ca305bec34df |
| x86_64 | qt5-qtbase-static-5.15.3-10.el8_10.x86_64.rpm | 2a88e605db169362be1950563ae18d1f6d5e8b3754ee19a537093c37dad34b4c |
| x86_64 | qt5-qtbase-odbc-5.15.3-10.el8_10.x86_64.rpm | 4eeda2208f03cd04a50dda36aa57727326eeb7efbb1085e93235540902f54311 |
| x86_64 | qt5-qtbase-mysql-5.15.3-10.el8_10.x86_64.rpm | 5d85cc8b2da078d8e869fc05da2173f26fb340645b20499b2c67f7459f6e4eed |
| x86_64 | qt5-qtbase-postgresql-5.15.3-10.el8_10.x86_64.rpm | 638ae8cc8bc39a7c1c81bc98b0bc8e3c9f80e4239a773d0949c76635bf1db2e1 |
| x86_64 | qt5-qtbase-5.15.3-10.el8_10.x86_64.rpm | 8eefa8d18603d759ee4c4b2dfc42653870fd4618fe9521487ca658e7de43f22c |
| x86_64 | qt5-qtbase-private-devel-5.15.3-10.el8_10.x86_64.rpm | a16969ef9d03141512d1ccc316af6573e14d9dc232be1627e307fc6beda744c8 |
| x86_64 | qt5-qtbase-devel-5.15.3-10.el8_10.x86_64.rpm | b2871bb980db6e36367f7d2dc70c8d6044f63c89b9b613118d45c4e21d3e0207 |
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.
Frequently Asked Questions
What is ALSA-2026:93924?
Who is affected?
How do I apply the fix?
Do hosting servers need Qt?
Check your system for vulnerabilities
Select your product and operating system to see the exact fix commands that apply to you.
Check Your System