SUSE-SU-2026:3116-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2026:3116-1

MEDIUM4.4

Security update for libqt4

Published Jul 17, 2026

Modified 1 weeks ago

Fix available

Details

Description of the patch:

This update for libqt4 fixes the following issue

CVE-2025-14575: local user can load rogue CA certificates as trusted system authority via a crafted file placed in the application's working directory (bsc#1265896).

Affected Packages(15 packages)

libqt4

SUSE Linux Enterprise Server LTSS Extended Security 12 SP5

Fixed in:

4.8.7-8.25.1

libqt4-32bit

SUSE Linux Enterprise Server LTSS Extended Security 12 SP5

Fixed in:

4.8.7-8.25.1

libqt4-devel

SUSE Linux Enterprise Server LTSS Extended Security 12 SP5

Fixed in:

4.8.7-8.25.1

libqt4-devel-doc

SUSE Linux Enterprise Server LTSS Extended Security 12 SP5

Fixed in:

4.8.7-8.25.1

libqt4-devel-doc-data

SUSE Linux Enterprise Server LTSS Extended Security 12 SP5

Fixed in:

4.8.7-8.25.1

libqt4-private-headers-devel

SUSE Linux Enterprise Server LTSS Extended Security 12 SP5

Fixed in:

4.8.7-8.25.1

libqt4-qt3support

SUSE Linux Enterprise Server LTSS Extended Security 12 SP5

Fixed in:

4.8.7-8.25.1

libqt4-qt3support-32bit

SUSE Linux Enterprise Server LTSS Extended Security 12 SP5

Fixed in:

4.8.7-8.25.1

libqt4-sql

SUSE Linux Enterprise Server LTSS Extended Security 12 SP5

Fixed in:

4.8.7-8.25.1

libqt4-sql-32bit

SUSE Linux Enterprise Server LTSS Extended Security 12 SP5

Fixed in:

4.8.7-8.25.1

References

https://bugzilla.suse.com/1265896

https://lists.suse.com/pipermail/sle-updates/2026-July/048431.html

https://www.suse.com/security/cve/CVE-2025-14575/

https://www.suse.com/support/security/rating/

https://www.suse.com/support/update/announcement/2026/suse-su-20263116-1/

CVSS Analysis

CVSS v3.1

4.4

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

Scope

UnchangedS:U

Impact

Confidentiality

LowC:L

Integrity

LowI:L

Availability

NoneA:N

4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Upstream

Ecosystems

SUSE Linux Enterprise Server LTSS Extended Security 12 SP5

Timeline

PublishedJul 17, 2026

ModifiedJul 17, 2026