Red Hat Security Advisory

RHSA-2026:7846

Red Hat Hardened Images RPMs bug fix and enhancement update

Released 2026-04-13 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Hardened Images qt6-6.11.0-1.hum1@src, qt6-filesystem-6.11.0-1.hum1@aarch64, qt6-filesystem-6.11.0-1.hum1@x86_64 +4

Fixes 1 record

TI-2025-13317 CVE-2025-14576 · GHSA-4hpm-v49g-rq7q

Possible QML code injection in VectorImage component

LOW 34

Insufficient validation of node IDs in Qt SVG module allows arbitrary QML/JavaScript code injection when loading malicious SVG files through the VectorImage component in Qt Quick.

CVSS 4.0HIGH 7.4 Local No auth User interaction EPSS 0.00224 Published 2026-04-30 Fixed CWE-20