File _patchinfo of Package patchinfo.40448
<patchinfo incident="40448">
<issue tracker="bnc" id="1243958">VUL-0: CVE-2025-5455: libqt5-qtbase,qt6-base: qtbase: crash when qDecodeDataUrl() is called with malformed data and assertions are enabled</issue>
<issue tracker="bnc" id="1239896">VUL-0: CVE-2025-30348: libqt5-qtbase,qt6-base: qtbase: low performance when processing XML data due to encodeText in QDom using a complex algorithm</issue>
<issue tracker="cve" id="2025-30348"/>
<issue tracker="cve" id="2025-5455"/>
<packager>alarrosa</packager>
<rating>moderate</rating>
<category>security</category>
<summary>Security update for qt6-base</summary>
<description>This update for qt6-base fixes the following issues:
- CVE-2025-5455: processing of malformed data in `qDecodeDataUrl()` can trigger assertion and cause a crash
(bsc#1243958).
- CVE-2025-30348: complex algorithm used in `encodeText` in QDom when processing XML data can cause low performance
(bsc#1239896).
</description>
</patchinfo>