CVE-2023-38197
Fixed in a distro release EPSS 1%CVSS 7.5
An issue was discovered in Qt before 5.15.15, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6.5.3. There are infinite loops in recursive entity expansion.
Products: qt, fedoraproject fedora
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | qt5-qtbase | 5.15.3-5.el8 |
| AlmaLinux 8 | qt5-qtbase-common | 5.15.3-5.el8 |
| AlmaLinux 8 | qt5-qtbase-devel | 5.15.3-5.el8 |
| AlmaLinux 8 | qt5-qtbase-examples | 5.15.3-5.el8 |
| AlmaLinux 8 | qt5-qtbase-gui | 5.15.3-5.el8 |
| AlmaLinux 8 | qt5-qtbase-mysql | 5.15.3-5.el8 |
| AlmaLinux 8 | qt5-qtbase-odbc | 5.15.3-5.el8 |
| AlmaLinux 8 | qt5-qtbase-postgresql | 5.15.3-5.el8 |
| AlmaLinux 8 | qt5-qtbase-private-devel | 5.15.3-5.el8 |
| AlmaLinux 8 | qt5-qtbase-static | 5.15.3-5.el8 |
| AlmaLinux 9 | qt5 | 5.15.9-1.el9 |
| AlmaLinux 9 | qt5-devel | 5.15.9-1.el9 |
| AlmaLinux 9 | qt5-qtbase | 5.15.9-7.el9 |
| AlmaLinux 9 | qt5-qtbase-common | 5.15.9-7.el9 |
| AlmaLinux 9 | qt5-qtbase-devel | 5.15.9-7.el9 |
| AlmaLinux 9 | qt5-qtbase-examples | 5.15.9-7.el9 |
| AlmaLinux 9 | qt5-qtbase-gui | 5.15.9-7.el9 |
| AlmaLinux 9 | qt5-qtbase-mysql | 5.15.9-7.el9 |
| AlmaLinux 9 | qt5-qtbase-odbc | 5.15.9-7.el9 |
| AlmaLinux 9 | qt5-qtbase-postgresql | 5.15.9-7.el9 |
| AlmaLinux 9 | qt5-qtbase-private-devel | 5.15.9-7.el9 |
| AlmaLinux 9 | qt5-qtbase-static | 5.15.9-7.el9 |
| AlmaLinux 9 | qt5-rpm-macros | 5.15.9-1.el9 |
| AlmaLinux 9 | qt5-srpm-macros | 5.15.9-1.el9 |
| Debian 10 | qt4-x11 | 4:4.8.7+dfsg-18+deb10u2 |
| Debian 10 | qtbase-opensource-src | 5.11.3+dfsg1-1+deb10u6 |
| Debian 12 | qt6-base | no fix |
| Debian 12 | qtbase-opensource-src | 5.15.8+dfsg-11+deb12u1 |
| Debian 12 | qtbase-opensource-src-gles | no fix |
| Debian 13 | qt6-base | 6.6.2+dfsg-8 |
| Debian 13 | qtbase-opensource-src | 5.15.10+dfsg-3 |
| Debian 13 | qtbase-opensource-src-gles | 5.15.10+dfsg-3 |
| Debian 14 | qt6-base | 6.6.2+dfsg-8 |
| Debian 14 | qtbase-opensource-src | 5.15.10+dfsg-3 |
| Debian 14 | qtbase-opensource-src-gles | 5.15.10+dfsg-3 |
| Red Hat Enterprise Linux 8 | qt5-qtbase | 0:5.15.3-5.el8 |
| Red Hat Enterprise Linux 8 | qt5-qtbase-common | 0:5.15.3-5.el8 |
| Red Hat Enterprise Linux 8 | qt5-qtbase-debuginfo | 0:5.15.3-5.el8 |
| Red Hat Enterprise Linux 8 | qt5-qtbase-debugsource | 0:5.15.3-5.el8 |
| Red Hat Enterprise Linux 8 | qt5-qtbase-devel | 0:5.15.3-5.el8 |
| Red Hat Enterprise Linux 8 | qt5-qtbase-devel-debuginfo | 0:5.15.3-5.el8 |
| Red Hat Enterprise Linux 8 | qt5-qtbase-examples | 0:5.15.3-5.el8 |
| Red Hat Enterprise Linux 8 | qt5-qtbase-examples-debuginfo | 0:5.15.3-5.el8 |
| Red Hat Enterprise Linux 8 | qt5-qtbase-gui | 0:5.15.3-5.el8 |
| Red Hat Enterprise Linux 8 | qt5-qtbase-gui-debuginfo | 0:5.15.3-5.el8 |
| Red Hat Enterprise Linux 8 | qt5-qtbase-mysql | 0:5.15.3-5.el8 |
| Red Hat Enterprise Linux 8 | qt5-qtbase-mysql-debuginfo | 0:5.15.3-5.el8 |
| Red Hat Enterprise Linux 8 | qt5-qtbase-odbc | 0:5.15.3-5.el8 |
| Red Hat Enterprise Linux 8 | qt5-qtbase-odbc-debuginfo | 0:5.15.3-5.el8 |
| Red Hat Enterprise Linux 8 | qt5-qtbase-postgresql | 0:5.15.3-5.el8 |
| Red Hat Enterprise Linux 8 | qt5-qtbase-postgresql-debuginfo | 0:5.15.3-5.el8 |
| Red Hat Enterprise Linux 8 | qt5-qtbase-private-devel | 0:5.15.3-5.el8 |
| Red Hat Enterprise Linux 8 | qt5-qtbase-static | 0:5.15.3-5.el8 |
| Red Hat Enterprise Linux 8 | qt5-qtbase-tests-debuginfo | 0:5.15.3-5.el8 |
| Red Hat Enterprise Linux 9 | qt5 | 0:5.15.9-1.el9 |
| Red Hat Enterprise Linux 9 | qt5-devel | 0:5.15.9-1.el9 |
| Red Hat Enterprise Linux 9 | qt5-qtbase | 0:5.15.9-7.el9 |
| Red Hat Enterprise Linux 9 | qt5-qtbase-common | 0:5.15.9-7.el9 |
| Red Hat Enterprise Linux 9 | qt5-qtbase-debuginfo | 0:5.15.9-7.el9 |
| Red Hat Enterprise Linux 9 | qt5-qtbase-debugsource | 0:5.15.9-7.el9 |
| Red Hat Enterprise Linux 9 | qt5-qtbase-devel | 0:5.15.9-7.el9 |
| Red Hat Enterprise Linux 9 | qt5-qtbase-devel-debuginfo | 0:5.15.9-7.el9 |
| Red Hat Enterprise Linux 9 | qt5-qtbase-examples | 0:5.15.9-7.el9 |
| Red Hat Enterprise Linux 9 | qt5-qtbase-examples-debuginfo | 0:5.15.9-7.el9 |
| Red Hat Enterprise Linux 9 | qt5-qtbase-gui | 0:5.15.9-7.el9 |
| Red Hat Enterprise Linux 9 | qt5-qtbase-gui-debuginfo | 0:5.15.9-7.el9 |
| Red Hat Enterprise Linux 9 | qt5-qtbase-mysql | 0:5.15.9-7.el9 |
| Red Hat Enterprise Linux 9 | qt5-qtbase-mysql-debuginfo | 0:5.15.9-7.el9 |
| Red Hat Enterprise Linux 9 | qt5-qtbase-odbc | 0:5.15.9-7.el9 |
| Red Hat Enterprise Linux 9 | qt5-qtbase-odbc-debuginfo | 0:5.15.9-7.el9 |
| Red Hat Enterprise Linux 9 | qt5-qtbase-postgresql | 0:5.15.9-7.el9 |
| Red Hat Enterprise Linux 9 | qt5-qtbase-postgresql-debuginfo | 0:5.15.9-7.el9 |
| Red Hat Enterprise Linux 9 | qt5-qtbase-private-devel | 0:5.15.9-7.el9 |
| Red Hat Enterprise Linux 9 | qt5-qtbase-static | 0:5.15.9-7.el9 |
| Red Hat Enterprise Linux 9 | qt5-qtbase-tests-debuginfo | 0:5.15.9-7.el9 |
| Red Hat Enterprise Linux 9 | qt5-rpm-macros | 0:5.15.9-1.el9 |
| Red Hat Enterprise Linux 9 | qt5-srpm-macros | 0:5.15.9-1.el9 |
| Rocky Linux 9 | adwaita-qt | 0:1.4.2-1.el9 |
| Rocky Linux 9 | python-pyqt5-sip | 0:12.11.1-1.el9.0.1 |
| Rocky Linux 9 | python-qt5 | 0:5.15.9-1.el9 |
| Rocky Linux 9 | qgnomeplatform | 0:0.9.0-1.el9 |
| Rocky Linux 9 | qt5 | 0:5.15.9-1.el9 |
| Rocky Linux 9 | qt5-doc | 0:5.15.9-1.el9 |
| Rocky Linux 9 | qt5-qtconnectivity | 0:5.15.9-2.el9 |
| Rocky Linux 9 | qt5-qtdeclarative | 0:5.15.9-3.el9 |
| Rocky Linux 9 | qt5-qtdoc | 0:5.15.9-1.el9 |
| Rocky Linux 9 | qt5-qtgraphicaleffects | 0:5.15.9-1.el9 |
| Rocky Linux 9 | qt5-qtimageformats | 0:5.15.9-1.el9 |
| Rocky Linux 9 | qt5-qtlocation | 0:5.15.9-1.el9 |
| Rocky Linux 9 | qt5-qtmultimedia | 0:5.15.9-1.el9 |
| Rocky Linux 9 | qt5-qtquickcontrols | 0:5.15.9-1.el9 |
| Rocky Linux 9 | qt5-qtquickcontrols2 | 0:5.15.9-1.el9 |
| Rocky Linux 9 | qt5-qtscript | 0:5.15.9-1.el9 |
| Rocky Linux 9 | qt5-qtsensors | 0:5.15.9-1.el9 |
| Rocky Linux 9 | qt5-qtserialbus | 0:5.15.9-1.el9 |
| Rocky Linux 9 | qt5-qtserialport | 0:5.15.9-1.el9 |
| Rocky Linux 9 | qt5-qtsvg | 0:5.15.9-2.el9 |
| Rocky Linux 9 | qt5-qttranslations | 0:5.15.9-1.el9 |
| Rocky Linux 9 | qt5-qtwayland | 0:5.15.9-1.el9 |
| Rocky Linux 9 | qt5-qtwebchannel | 0:5.15.9-1.el9 |
| Rocky Linux 9 | qt5-qtwebsockets | 0:5.15.9-2.el9 |
| Rocky Linux 9 | qt5-qtx11extras | 0:5.15.9-1.el9 |
| Rocky Linux 9 | qt5-qtxmlpatterns | 0:5.15.9-2.el9 |
| SUSE Enterprise Storage 7 | libqt5-qtbase | 5.12.7-150200.4.23.1 |
| SUSE Enterprise Storage 7.1 | libqt5-qtbase | 5.12.7-150200.4.23.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | libqt5-qtbase | 5.12.7-150200.4.23.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS | libqt5-qtbase | 5.12.7-150200.4.23.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | libqt5-qtbase | 5.12.7-150200.4.23.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP4 | libqt5-qtbase | 5.15.2+kde294-150400.6.6.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP5 | libqt5-qtbase | 5.15.8+kde185-150500.4.8.1 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP4 | libqt5-qtbase | 5.15.2+kde294-150400.6.6.1 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP5 | libqt5-qtbase | 5.15.8+kde185-150500.4.8.1 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP5 | qt6-base | 6.4.2-150500.3.7.4 |
| SUSE Linux Enterprise Module for Package Hub 15 SP4 | qt6-base | 6.2.2-150400.4.6.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP5 | qt6-base | 6.4.2-150500.3.7.4 |
| SUSE Linux Enterprise Server 12 SP5 | libqt4 | 4.8.7-8.19.1 |
| SUSE Linux Enterprise Server 12 SP5 | libqt4-devel-doc | 4.8.7-8.19.1 |
| SUSE Linux Enterprise Server 12 SP5 | libqt4-sql-plugins | 4.8.7-8.19.1 |
| SUSE Linux Enterprise Server 12 SP5 | libqt5-qtbase | 5.6.2-6.36.1 |
| SUSE Linux Enterprise Server 15 SP2-LTSS | libqt5-qtbase | 5.12.7-150200.4.23.1 |
| SUSE Linux Enterprise Server 15 SP3-LTSS | libqt5-qtbase | 5.12.7-150200.4.23.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | libqt4 | 4.8.7-8.22.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | libqt4-devel-doc | 4.8.7-8.22.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | libqt4-sql-plugins | 4.8.7-8.22.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | libqt4 | 4.8.7-8.19.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | libqt4-devel-doc | 4.8.7-8.19.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | libqt4-sql-plugins | 4.8.7-8.19.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | libqt5-qtbase | 5.6.2-6.36.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP2 | libqt5-qtbase | 5.12.7-150200.4.23.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP3 | libqt5-qtbase | 5.12.7-150200.4.23.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | libqt4 | 4.8.7-8.19.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | libqt4-devel-doc | 4.8.7-8.19.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | libqt4-sql-plugins | 4.8.7-8.19.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | libqt5-qtbase | 5.6.2-6.36.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP5 | libqt4 | 4.8.7-8.19.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP5 | libqt4-sql-plugins | 4.8.7-8.19.1 |
| SUSE Manager Proxy 4.2 | libqt5-qtbase | 5.12.7-150200.4.23.1 |
| SUSE Manager Server 4.2 | libqt5-qtbase | 5.12.7-150200.4.23.1 |
| Ubuntu 22.04 LTS | qt6-base | no fix |
| Ubuntu 24.04 LTS | qt6-base | no fix |
| Ubuntu 25.10 | qt6-base | no fix |
| Ubuntu 26.04 LTS | qt6-base | no fix |
| Ubuntu 26.10 | qt6-base | no fix |
| openSUSE Leap 15.4 | libqt5-qtbase | 5.15.2+kde294-150400.6.6.1 |
| openSUSE Leap 15.4 | qt6-base | 6.2.2-150400.4.6.1 |
| openSUSE Leap 15.4 | qt6-base-docs | 6.2.2-150400.4.6.1 |
| openSUSE Leap 15.5 | libqt5-qtbase | 5.15.8+kde185-150500.4.8.1 |
| openSUSE Leap 15.5 | qt6-base | 6.4.2-150500.3.7.4 |
| openSUSE Leap 15.5 | qt6-base-docs | 6.4.2-150500.3.7.1 |
| openSUSE Tumbleweed | libqt5-qtbase | 5.15.11+kde138-2.1 |
| openSUSE Tumbleweed | qt6-base | 6.5.2-1.1 |