Back to Security Advisories

Qt5-Qtbase Security Update — AlmaLinux 8 (ALSA-2026:98103)

ALSA-2026:98103 updates qt: on AlmaLinux 8, resolving 1 CVEs — qt: Denial of Service via crafted XML parsing in QXmlStreamReader (CVE-2026-16762). Apply the errata with dnf; service restarts where the component runs as one.

High
AlmaLinux 8

What this means under a SharedLicense license

qt: on AlmaLinux 8 is the exposure surface; the advisory's own severity data tops out at CVSS .

Type:

security

Severity:

important

Release date:

2026-11-11

Description:

Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt.

Security Fix(es):

* qt: qt: Denial of Service via crafted XML parsing in QXmlStreamReader (CVE-2026-16762)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References:

Updated packages listed below:

Architecture Package Checksum
noarch qt5-qtbase-common-5.15.3-11.el8_10.noarch.rpm 5dee470c1e1c106f10de21720ea89374fcca2be3f29048b640b426f59701b462

Notes:

This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.

Frequently Asked Questions

What does ALSA-2026:98103 fix?
1 CVEs in qt:, including qt: Denial of Service via crafted XML parsing in QXmlStreamReader (CVE-2026-16762).
Which release is covered?
AlmaLinux 8.
How do I apply it?
dnf update qt: — restart the service if it runs persistently.

Check your system for vulnerabilities

Select your product and operating system to see the exact fix commands that apply to you.

Check Your System