Skip to content
OpenAdvisories
Medium RHSA-2026:41387 1 CVE

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published Oct 6, 2026 · Updated Oct 16, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 qt5 0:5.15.18-3.hum1
Red Hat · Hardened Images 1 hummingbird:1 qt5-filesystem 0:5.15.18-3.hum1
Red Hat · Hardened Images 1 hummingbird:1 qt5-rpm-macros 0:5.15.18-3.hum1
Red Hat · Hardened Images 1 hummingbird:1 qt5-srpm-macros 0:5.15.18-3.hum1

Vulnerabilities 1

  • Medium 6.6
    CVE-2026-19395

    An empty <img> attribute value in styled text triggers a parser error that halts the device.

    In Qt for MCUs, a Text element that displays styled text halts the device if an <img> tag in the text contains an attribute with an empty value. The text parser passes the empty value to an internal check that only accepts non-empty values. The check fails an…

    Qt Project Qt for MCUs

References

  • article
    https://images.redhat.com/
  • report
    https://access.redhat.com/security/cve/CVE-2026-19395
  • article
    https://access.redhat.com/security/updates/classification/
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_41387.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2545853
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-19395
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-19395
  • article
    https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-19395: