An update for qt5-qtbase is now available for openEuler-22.03-LTS-SP3,openEuler-22.03-LTS-SP4,openEuler-24.03-LTS,openEuler-24.03-LTS-SP1,openEuler-20.03-LTS-SP4 Security Advisory openeuler-security@openeuler.org openEuler security committee openEuler-SA-2025-1654 Final 1.0 1.0 2025-06-20 Initial 2025-06-20 2025-06-20 openEuler SA Tool V1.0 2025-06-20 qt5-qtbase security update An update for qt5-qtbase is now available for openEuler-22.03-LTS-SP3,openEuler-22.03-LTS-SP4,openEuler-24.03-LTS,openEuler-24.03-LTS-SP1,openEuler-20.03-LTS-SP4 Qt is a software toolkit for developing applications. Security Fix(es): An issue was found in the private API function qDecodeDataUrl() in QtCore, which is used in QTextDocument and QNetworkReply, and, potentially, in user code. If the function was called with malformed data, for example, an URL that contained a "charset" parameter that lacked a value (such as "data:charset,"), and Qt was built with assertions enabled, then it would hit an assertion, resulting in a denial of service (abort). This impacts Qt up to 5.15.18, 6.0.0->6.5.8, 6.6.0->6.8.3 and 6.9.0. This has been fixed in 5.15.19, 6.5.9, 6.8.4 and 6.9.1.(CVE-2025-5455) An update for qt5-qtbase is now available for openEuler-22.03-LTS-SP3,openEuler-22.03-LTS-SP4,openEuler-24.03-LTS,openEuler-24.03-LTS-SP1,openEuler-20.03-LTS-SP4. openEuler Security has rated this update as having a security impact of high. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. High qt5-qtbase https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1654 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2025-5455 https://nvd.nist.gov/vuln/detail/CVE-2025-5455 openEuler-22.03-LTS-SP3 openEuler-22.03-LTS-SP4 openEuler-24.03-LTS openEuler-24.03-LTS-SP1 openEuler-20.03-LTS-SP4 qt5-qtbase-5.15.2-18.oe2203sp3.aarch64.rpm qt5-qtbase-debuginfo-5.15.2-18.oe2203sp3.aarch64.rpm qt5-qtbase-debugsource-5.15.2-18.oe2203sp3.aarch64.rpm qt5-qtbase-devel-5.15.2-18.oe2203sp3.aarch64.rpm qt5-qtbase-examples-5.15.2-18.oe2203sp3.aarch64.rpm qt5-qtbase-gui-5.15.2-18.oe2203sp3.aarch64.rpm qt5-qtbase-mysql-5.15.2-18.oe2203sp3.aarch64.rpm qt5-qtbase-odbc-5.15.2-18.oe2203sp3.aarch64.rpm qt5-qtbase-postgresql-5.15.2-18.oe2203sp3.aarch64.rpm qt5-qtbase-private-devel-5.15.2-18.oe2203sp3.aarch64.rpm qt5-qtbase-static-5.15.2-18.oe2203sp3.aarch64.rpm qt5-qtbase-5.15.2-18.oe2203sp4.aarch64.rpm qt5-qtbase-debuginfo-5.15.2-18.oe2203sp4.aarch64.rpm qt5-qtbase-debugsource-5.15.2-18.oe2203sp4.aarch64.rpm qt5-qtbase-devel-5.15.2-18.oe2203sp4.aarch64.rpm qt5-qtbase-examples-5.15.2-18.oe2203sp4.aarch64.rpm qt5-qtbase-gui-5.15.2-18.oe2203sp4.aarch64.rpm qt5-qtbase-mysql-5.15.2-18.oe2203sp4.aarch64.rpm qt5-qtbase-odbc-5.15.2-18.oe2203sp4.aarch64.rpm qt5-qtbase-postgresql-5.15.2-18.oe2203sp4.aarch64.rpm qt5-qtbase-private-devel-5.15.2-18.oe2203sp4.aarch64.rpm qt5-qtbase-static-5.15.2-18.oe2203sp4.aarch64.rpm qt5-qtbase-5.15.10-12.oe2403.aarch64.rpm qt5-qtbase-debuginfo-5.15.10-12.oe2403.aarch64.rpm qt5-qtbase-debugsource-5.15.10-12.oe2403.aarch64.rpm qt5-qtbase-devel-5.15.10-12.oe2403.aarch64.rpm qt5-qtbase-examples-5.15.10-12.oe2403.aarch64.rpm qt5-qtbase-gui-5.15.10-12.oe2403.aarch64.rpm qt5-qtbase-mysql-5.15.10-12.oe2403.aarch64.rpm qt5-qtbase-odbc-5.15.10-12.oe2403.aarch64.rpm qt5-qtbase-postgresql-5.15.10-12.oe2403.aarch64.rpm qt5-qtbase-private-devel-5.15.10-12.oe2403.aarch64.rpm qt5-qtbase-static-5.15.10-12.oe2403.aarch64.rpm qt5-qtbase-5.15.10-12.oe2403sp1.aarch64.rpm qt5-qtbase-debuginfo-5.15.10-12.oe2403sp1.aarch64.rpm qt5-qtbase-debugsource-5.15.10-12.oe2403sp1.aarch64.rpm qt5-qtbase-devel-5.15.10-12.oe2403sp1.aarch64.rpm qt5-qtbase-examples-5.15.10-12.oe2403sp1.aarch64.rpm qt5-qtbase-gui-5.15.10-12.oe2403sp1.aarch64.rpm qt5-qtbase-mysql-5.15.10-12.oe2403sp1.aarch64.rpm qt5-qtbase-odbc-5.15.10-12.oe2403sp1.aarch64.rpm qt5-qtbase-postgresql-5.15.10-12.oe2403sp1.aarch64.rpm qt5-qtbase-private-devel-5.15.10-12.oe2403sp1.aarch64.rpm qt5-qtbase-static-5.15.10-12.oe2403sp1.aarch64.rpm qt5-qtbase-5.11.1-23.oe2003sp4.aarch64.rpm qt5-qtbase-debuginfo-5.11.1-23.oe2003sp4.aarch64.rpm qt5-qtbase-debugsource-5.11.1-23.oe2003sp4.aarch64.rpm qt5-qtbase-devel-5.11.1-23.oe2003sp4.aarch64.rpm qt5-qtbase-gui-5.11.1-23.oe2003sp4.aarch64.rpm qt5-qtbase-mysql-5.11.1-23.oe2003sp4.aarch64.rpm qt5-qtbase-odbc-5.11.1-23.oe2003sp4.aarch64.rpm qt5-qtbase-postgresql-5.11.1-23.oe2003sp4.aarch64.rpm qt5-qtbase-5.15.2-18.oe2203sp3.src.rpm qt5-qtbase-5.15.2-18.oe2203sp4.src.rpm qt5-qtbase-5.15.10-12.oe2403.src.rpm qt5-qtbase-5.15.10-12.oe2403sp1.src.rpm qt5-qtbase-5.11.1-23.oe2003sp4.src.rpm qt5-qtbase-5.15.2-18.oe2203sp3.x86_64.rpm qt5-qtbase-debuginfo-5.15.2-18.oe2203sp3.x86_64.rpm qt5-qtbase-debugsource-5.15.2-18.oe2203sp3.x86_64.rpm qt5-qtbase-devel-5.15.2-18.oe2203sp3.x86_64.rpm qt5-qtbase-examples-5.15.2-18.oe2203sp3.x86_64.rpm qt5-qtbase-gui-5.15.2-18.oe2203sp3.x86_64.rpm qt5-qtbase-mysql-5.15.2-18.oe2203sp3.x86_64.rpm qt5-qtbase-odbc-5.15.2-18.oe2203sp3.x86_64.rpm qt5-qtbase-postgresql-5.15.2-18.oe2203sp3.x86_64.rpm qt5-qtbase-private-devel-5.15.2-18.oe2203sp3.x86_64.rpm qt5-qtbase-static-5.15.2-18.oe2203sp3.x86_64.rpm qt5-qtbase-5.15.2-18.oe2203sp4.x86_64.rpm qt5-qtbase-debuginfo-5.15.2-18.oe2203sp4.x86_64.rpm qt5-qtbase-debugsource-5.15.2-18.oe2203sp4.x86_64.rpm qt5-qtbase-devel-5.15.2-18.oe2203sp4.x86_64.rpm qt5-qtbase-examples-5.15.2-18.oe2203sp4.x86_64.rpm qt5-qtbase-gui-5.15.2-18.oe2203sp4.x86_64.rpm qt5-qtbase-mysql-5.15.2-18.oe2203sp4.x86_64.rpm qt5-qtbase-odbc-5.15.2-18.oe2203sp4.x86_64.rpm qt5-qtbase-postgresql-5.15.2-18.oe2203sp4.x86_64.rpm qt5-qtbase-private-devel-5.15.2-18.oe2203sp4.x86_64.rpm qt5-qtbase-static-5.15.2-18.oe2203sp4.x86_64.rpm qt5-qtbase-5.15.10-12.oe2403.x86_64.rpm qt5-qtbase-debuginfo-5.15.10-12.oe2403.x86_64.rpm qt5-qtbase-debugsource-5.15.10-12.oe2403.x86_64.rpm qt5-qtbase-devel-5.15.10-12.oe2403.x86_64.rpm qt5-qtbase-examples-5.15.10-12.oe2403.x86_64.rpm qt5-qtbase-gui-5.15.10-12.oe2403.x86_64.rpm qt5-qtbase-mysql-5.15.10-12.oe2403.x86_64.rpm qt5-qtbase-odbc-5.15.10-12.oe2403.x86_64.rpm qt5-qtbase-postgresql-5.15.10-12.oe2403.x86_64.rpm qt5-qtbase-private-devel-5.15.10-12.oe2403.x86_64.rpm qt5-qtbase-static-5.15.10-12.oe2403.x86_64.rpm qt5-qtbase-5.15.10-12.oe2403sp1.x86_64.rpm qt5-qtbase-debuginfo-5.15.10-12.oe2403sp1.x86_64.rpm qt5-qtbase-debugsource-5.15.10-12.oe2403sp1.x86_64.rpm qt5-qtbase-devel-5.15.10-12.oe2403sp1.x86_64.rpm qt5-qtbase-examples-5.15.10-12.oe2403sp1.x86_64.rpm qt5-qtbase-gui-5.15.10-12.oe2403sp1.x86_64.rpm qt5-qtbase-mysql-5.15.10-12.oe2403sp1.x86_64.rpm qt5-qtbase-odbc-5.15.10-12.oe2403sp1.x86_64.rpm qt5-qtbase-postgresql-5.15.10-12.oe2403sp1.x86_64.rpm qt5-qtbase-private-devel-5.15.10-12.oe2403sp1.x86_64.rpm qt5-qtbase-static-5.15.10-12.oe2403sp1.x86_64.rpm qt5-qtbase-5.11.1-23.oe2003sp4.x86_64.rpm qt5-qtbase-debuginfo-5.11.1-23.oe2003sp4.x86_64.rpm qt5-qtbase-debugsource-5.11.1-23.oe2003sp4.x86_64.rpm qt5-qtbase-devel-5.11.1-23.oe2003sp4.x86_64.rpm qt5-qtbase-gui-5.11.1-23.oe2003sp4.x86_64.rpm qt5-qtbase-mysql-5.11.1-23.oe2003sp4.x86_64.rpm qt5-qtbase-odbc-5.11.1-23.oe2003sp4.x86_64.rpm qt5-qtbase-postgresql-5.11.1-23.oe2003sp4.x86_64.rpm qt5-qtbase-common-5.15.2-18.oe2203sp3.noarch.rpm qt5-qtbase-common-5.15.2-18.oe2203sp4.noarch.rpm qt5-qtbase-common-5.15.10-12.oe2403.noarch.rpm qt5-qtbase-common-5.15.10-12.oe2403sp1.noarch.rpm qt5-qtbase-common-5.11.1-23.oe2003sp4.noarch.rpm An issue was found in the private API function qDecodeDataUrl() in QtCore, which is used in QTextDocument and QNetworkReply, and, potentially, in user code. If the function was called with malformed data, for example, an URL that contained a "charset" parameter that lacked a value (such as "data:charset,"), and Qt was built with assertions enabled, then it would hit an assertion, resulting in a denial of service (abort). This impacts Qt up to 5.15.18, 6.0.0->6.5.8, 6.6.0->6.8.3 and 6.9.0. This has been fixed in 5.15.19, 6.5.9, 6.8.4 and 6.9.1. 2025-06-20 CVE-2025-5455 openEuler-22.03-LTS-SP3 openEuler-22.03-LTS-SP4 openEuler-24.03-LTS openEuler-24.03-LTS-SP1 openEuler-20.03-LTS-SP4 High 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H qt5-qtbase security update 2025-06-20 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1654