Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Fixed packages 4

Vulnerabilities 1

• High 7.1
  CVE-2026-8168

  Denial-of-service vulnerability in the SVG parser and renderer impacts Qt

  Uncontrolled recursion in the SVG parser and renderer of the Qt SVG module (QtSvg) in Qt Group Qt allows attackers to cause a denial of service (application crash via stack exhaustion) via a crafted SVG file with deeply nested elements.

  Qt Project Qt qt6-svg qtsvg-opensource-src Debian Ubuntu Azure Linux
  Oct 19, 2026

References

• article
  https://images.redhat.com/
• report
  https://access.redhat.com/security/cve/CVE-2026-8168
• article
  https://access.redhat.com/security/updates/classification/
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_80569.json
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2555573
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-8168
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-8168
• article
  https://codereview.qt-project.org/c/qt/qtsvg/+/730501
• article
  https://codereview.qt-project.org/c/qt/qtsvg/+/730590
• article
  https://codereview.qt-project.org/c/qt/qtsvg/+/730591
• article
  https://codereview.qt-project.org/c/qt/qtsvg/+/730892
• article
  https://codereview.qt-project.org/c/qt/qtsvg/+/731257
• article
  https://codereview.qt-project.org/c/qt/qtsvg/+/733245
• article
  https://codereview.qt-project.org/c/qt/qtsvg/+/738811
• article
  https://codereview.qt-project.org/c/qt/qtsvg/+/743488
• article
  https://codereview.qt-project.org/c/qt/qtsvg/+/748966
• article
  https://codereview.qt-project.org/c/qt/qtsvg/+/756512
• article
  https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-8168: