An update for qt is now available for openEuler-22.03-LTS-SP4 Security Advisory openeuler-security@openeuler.org openEuler security committee openEuler-SA-2026-4797 Final 1.0 1.0 2026-11-11 Initial 2026-11-11 2026-11-11 openEuler SA Tool V1.0 2026-11-11 qt security update An update for qt is now available for openEuler-22.03-LTS-SP4 Qt (pronounced as "cute", not "cu-tee") is a cross-platform framework that is usually used as a graphical toolkit, although it is also very helpful in creating CLI applications. It runs on the three major desktop OSes, as well as on mobile OSes, such as Symbian, Nokia Belle, Meego Harmattan, MeeGo or BB10, and on embedded devices. Ports for Android (Necessitas) and iOS are also in development Security Fix(es): Uncontrolled recursion in Qt's QDomDocument serialization (QtXml) lets deeply nested untrusted XML crash the app via stack exhaustion (DoS only).(CVE-2026-11573) An update for qt is now available for master/openEuler-20.03-LTS-SP4/openEuler-22.03-LTS-SP4/openEuler-24.03-LTS-Next/openEuler-24.03-LTS-SP1/openEuler-24.03-LTS-SP3/openEuler-24.03-LTS-SP4. openEuler Security has rated this update as having a security impact of high. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. High qt https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4797 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-11573 https://nvd.nist.gov/vuln/detail/CVE-2026-11573 openEuler-22.03-LTS-SP4 qt-4.8.7-60.oe2203sp4.aarch64.rpm qt-debuginfo-4.8.7-60.oe2203sp4.aarch64.rpm qt-debugsource-4.8.7-60.oe2203sp4.aarch64.rpm qt-devel-4.8.7-60.oe2203sp4.aarch64.rpm qt-4.8.7-60.oe2203sp4.src.rpm qt-4.8.7-60.oe2203sp4.x86_64.rpm qt-debuginfo-4.8.7-60.oe2203sp4.x86_64.rpm qt-debugsource-4.8.7-60.oe2203sp4.x86_64.rpm qt-devel-4.8.7-60.oe2203sp4.x86_64.rpm Uncontrolled recursion in Qt's QDomDocument serialization (QtXml) lets deeply nested untrusted XML crash the app via stack exhaustion (DoS only). 2026-11-11 CVE-2026-11573 openEuler-22.03-LTS-SP4 High 7.1 AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X qt security update 2026-11-11 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4797