Read the docs
Red Hat Security Advisory

RHSA-2026:89193

Red Hat Hardened Images RPMs bug fix and enhancement update

Released 2026-10-25 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 3 records

Priority LOW 18

A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type.

CVSS 4.0MEDIUM 4.0 Local No auth User interaction EPSS 0.0012 Published 2026-10-21 Partial fix · 6.8.9, 6.11.3 CWE-190
Priority LOW 12

A memory corruption vulnerability in the QMqttClient class of the Qt MQTT module.

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.00263 Published 2026-11-02 Fixed CWE-129
Priority LOW 10

Specially crafted CBOR input passed to QCborValue::fromCbor() in Qt Core can cause an out-of-bounds read, which may crash the application and could expose information.

CVSS 4.0LOW 2.0 Local No auth User interaction EPSS 0.00147 Published 2026-10-26 Partial fix CWE-125