Skip to content
OpenAdvisories
Medium RHSA-2026:89193 10 CVEs

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published Nov 13, 2026 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 qt6 0:6.12.0-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 qt6-filesystem 0:6.12.0-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 qt6-rpm-macros 0:6.12.0-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 qt6-srpm-macros 0:6.12.0-1.hum1

Vulnerabilities 10

  • Medium 6.7
    CVE-2026-103653

    Out-of-bounds read vulnerability in CoAP message parsing impacts Qt CoAP

    An out-of-bounds read vulnerability in the Qt CoAP message parsing (QCoapInternalReply::createFromFrame()) of the Qt CoAP module. Processing a malformed CoAP message can cause an application using Qt CoAP to crash (loss of availability) or to continue operati…

    Qt Project Qt
  • Medium 5.3
    CVE-2026-105946

    Out-of-bounds read vulnerability in NTLM authentication handling impacts Qt

    Out-of-bounds read in the QAuthenticator NTLM authentication handling in the Qt Network module in Qt Group Qt allows remote attackers to obtain sensitive information (heap memory contents) or cause a denial of service (application crash) via a crafted NTLM ch…

    Qt Project Qt qtbase-opensource-src qtbase-opensource-src Debian Ubuntu Azure Linux
  • Medium 4.3
    CVE-2026-107472

    Out-of-bounds read vulnerability in QTextCodec TSCII encoding impacts Qt

    An out-of-bounds read vulnerability in the QTextCodec TSCII encoding of the Qt 5 Compatibility APIs module (Qt Core in Qt 5 and earlier) impacts Qt. Applications that convert text to the TSCII encoding through QTextCodec may read memory outside the input buff…

    Qt Project Qt qtbase-opensource-src qt6-5compat Debian Ubuntu
  • Medium 4.0
    CVE-2026-105923

    Null-pointer dereference in QTriangulator reachable through VectorImage

    A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type.

    Qt Project Qt qtbase-opensource-src qt6-base Debian Ubuntu
  • Low 2.3
    CVE-2026-107457

    Memory corruption vulnerability in QMqttClient impacts Qt MQTT

    A memory corruption vulnerability in the QMqttClient class of the Qt MQTT module. Under certain MQTT 5 connection settings between client and server, QMqttClient may corrupt memory, which can cause the application to crash.

    Qt Project Qt
  • Low 2.1
    CVE-2026-95620

    Use-after-free vulnerability in QNetworkAccessManager HTTP/2 support impacts Qt

    A use-after-free vulnerability in the Qt QNetworkAccessManager HTTP/2 client support of the Qt Network module allows a malicious or compromised HTTP/2 server to cause the client application to crash, affecting availability.

    Qt Project Qt qt6-base qt6-base Debian Ubuntu
  • Low 2.1
    CVE-2026-96432

    Null pointer dereference vulnerability in QNetworkAccessManager impacts Qt

    A malicious or compromised HTTP/2 server withholding SETTINGS ACK can send RST_STREAM on a completed stream, planting a null pointer, and then send a PUSH_PROMISE for that stream, causing a null pointer dereference in the QNetworkAccessManager class of the Qt…

    Qt Project Qt qt6-base qt6-base Debian Ubuntu
  • Low 2.0
    CVE-2026-107157

    Out-of-bounds read vulnerability in QCborValue::fromCbor() impacts Qt Framework

    Specially crafted CBOR input passed to QCborValue::fromCbor() in Qt Core can cause an out-of-bounds read, which may crash the application and could expose information.

    Qt Project Qt qtbase-opensource-src qtbase-opensource-src Debian Ubuntu Azure Linux
  • Low 1.9
    CVE-2026-107590

    Out-of-bounds write vulnerability in QTextCodec iconv-based encoding impacts Qt

    An out-of-bounds write vulnerability in the Qt QTextCodec iconv-based encoding of the Qt 5 Compatibility APIs module (Qt Core in Qt 5 and earlier) impacts Qt. Under certain conditions, encoding text with QTextCodec may write outside an internal buffer. This c…

    Qt Project Qt qtbase-opensource-src qt6-5compat Debian Ubuntu
  • Low 1.7
    CVE-2026-107479

    Integer truncation vulnerability in QTextCodec conversion functions impacts Qt Framework

    An integer truncation vulnerability in the QTextCodec conversion functions of the Qt 5 Core Compatibility APIs module impacts the Qt Framework. An application using the affected functionality could crash.

    Qt Project Qt qtbase-opensource-src qtbase-opensource-src Debian Ubuntu

References

  • article
    https://images.redhat.com/
  • report
    https://access.redhat.com/security/cve/CVE-2026-95620
  • article
    https://access.redhat.com/security/updates/classification/
  • report
    https://access.redhat.com/security/cve/CVE-2026-105923
  • report
    https://access.redhat.com/security/cve/CVE-2026-107157
  • report
    https://access.redhat.com/security/cve/CVE-2026-96432
  • report
    https://access.redhat.com/security/cve/CVE-2026-105946
  • report
    https://access.redhat.com/security/cve/CVE-2026-107472
  • report
    https://access.redhat.com/security/cve/CVE-2026-107590
  • report
    https://access.redhat.com/security/cve/CVE-2026-107457
  • report
    https://access.redhat.com/security/cve/CVE-2026-103653
  • report
    https://access.redhat.com/security/cve/CVE-2026-107479
  • article
    https://access.redhat.com/security/cve/CVE-2026-82292
  • article
    https://access.redhat.com/security/cve/CVE-2026-97845
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_89193.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2559539
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-95620
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-95620
  • article
    https://codereview.qt-project.org/c/qt/qtbase/+/759717
  • article
    https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-95620:
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2560835
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-96432
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-96432
  • article
    https://codereview.qt-project.org/c/qt/qtbase/+/759718
  • article
    https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-96432:
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2565619
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-103653
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-103653
  • article
    https://codereview.qt-project.org/c/qt/qtcoap/+/760652
  • article
    https://codereview.qt-project.org/c/qt/qtcoap/+/761120
  • article
    https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-103653:
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2558168
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-105923
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-105923
  • article
    https://codereview.qt-project.org/c/qt%2Fqtbase/+/762279
  • article
    https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2561557
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-105946
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-105946