Advisories » MGASA-2025-0208

Updated qtimageformats6 packages fix security vulnerabilities

Publication date: 15 Jul 2025
Modification date: 15 Jul 2025
Type: security
Affected Mageia releases : 9
CVE: CVE-2025-5683

Description

Loading a specifically-crafted ICNS format image file in QImage
will trigger a crash. This issue affects Qt from versions 6.3.0
through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0.
                

References

• https://bugs.mageia.org/show_bug.cgi?id=34395
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D3F6LZUJWFANK7X5A65ECKBPB2KQ2DCO/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5683

SRPMS

9/core

• qtimageformats6-6.4.1-1.1.mga9