Skip to content
OpenAdvisories
Medium RHSA-2026:82382 2 CVEs

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Published Oct 14, 2026 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 11

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 qt6-qtbase 0:6.11.2-3.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 qt6-qtbase-common 0:6.11.2-3.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 qt6-qtbase-devel 0:6.11.2-3.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 qt6-qtbase-examples 0:6.11.2-3.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 qt6-qtbase-gui 0:6.11.2-3.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 qt6-qtbase-ibase 0:6.11.2-3.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 qt6-qtbase-mysql 0:6.11.2-3.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 qt6-qtbase-odbc 0:6.11.2-3.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 qt6-qtbase-postgresql 0:6.11.2-3.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 qt6-qtbase-private-devel 0:6.11.2-3.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 qt6-qtbase-static 0:6.11.2-3.1.hum1

Vulnerabilities 2

  • Medium 4.6
    CVE-2026-76151

    Out-of-bounds read (buffer over-read) vulnerability in HTTP Cache-Control response header parsing impacts Qt Framework (QtNetwork module)

    Out-of-bounds read (buffer over-read) in the HTTP Cache-Control response header parsing in the QtNetwork module in Qt Group Qt 6.0.0 through 6.8.8, and 6.9.0 through 6.11.1, allows remote attackers to cause a denial of service (application crash) via an exces…

    Qt Project Qt qtbase-opensource-src qt6-base Debian Ubuntu
  • Low 2.9
    CVE-2026-15037

    XML injection vulnerability in QDom comment, CDATA and processing-instruction serialization

    Improper output neutralization (XML injection) in QDom comment, CDATA, and processing-instruction serialization in Qt XML from 4.0.0 through 6.11 allows untrusted text serialized by an application into those nodes to inject arbitrary XML markup, because the n…

    Qt Project Qt qtbase-opensource-src qtbase-opensource-src Debian Ubuntu Azure Linux

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-15037
  • article
    https://access.redhat.com/security/updates/classification/
  • article
    https://images.redhat.com/
  • report
    https://access.redhat.com/security/cve/CVE-2026-76151
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_82382.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2506397
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-15037
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-15037
  • article
    https://codereview.qt-project.org/c/qt/qtbase/+/748323
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2535100
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-76151
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-76151
  • article
    https://codereview.qt-project.org/c/qt/qtbase/+/752129