Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Fedora 42: FEDORA-2025-c546fd3f09 critical: qt6-qtvirtualkeyboard DoS

fedora
Calendar Grey June 11, 2025
Dist Fedora Esm H88
The recent update for qt6-qtvirtualkeyboard in Fedora features important bug corrections and security enhancements, targeting Denial of Service vulnerabilities.
Qt 6.9.1 bugfix release.

Summary

The Qt Virtual Keyboard project provides an input framework and reference keyboard frontend

for Qt 6. Key features include:

* Customizable keyboard layouts and styles with dynamic switching.

* Predictive text input with word selection.

* Character preview and alternative character view.

* Automatic capitalization and space insertion.

* Scalability to different resolutions.

* Support for different character sets (Latin, Simplified/Traditional Chinese, Hindi, Japanese, Arabic, Korean, and others).

* Support for most common input languages, with possibility to easily extend the language support.

* Left-to-right and right-to-left input.

* Hardware key support for 2-way and 5-way navigation.

* Handwriting support, with gestures for fullscreen input.

* Audio feedback.

Update Information:

Qt 6.9.1 bugfix release.

Change Log

* Mon Jun 2 2025 Jan Grulich - 6.9.1-1 - 6.9.1

References


[ 1 ] Bug #2369872 - CVE-2025-5455 qt6: QtCore Assertion Failure Denial of Service [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2369872 [ 2 ] Bug #2371133 - CVE-2025-5683 qt5: Qt ICNS Image Crash Vulnerability [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2371133

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-c546fd3f09' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: qt6-qtvirtualkeyboard
Product: Fedora 42
Version: 6.9.1
Release: 1.fc42
Summary: Qt6 - VirtualKeyboard component

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here