RHSA-2026:74653HighCVSS 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published
October 1, 2026
Last Modified
October 31, 2026

🔗 CVE IDs covered (1)

CVE-2026-11573 →

📋 Description

CVE-2026-11573 — qtbase: qt5-qtbase: qt6-qtbase: qtbase: Denial of Service via uncontrolled recursion in XML serialization

🎯 Affected products24

  • Red Hat Hardened Images
  • qt6-qtbase-0:6.11.2-3.hum1@aarch64 as a component of Red Hat Hardened Images
  • qt6-qtbase-0:6.11.2-3.hum1@src as a component of Red Hat Hardened Images
  • qt6-qtbase-0:6.11.2-3.hum1@x86_64 as a component of Red Hat Hardened Images
  • qt6-qtbase-common-0:6.11.2-3.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images
  • qt6-qtbase-common-0:6.11.2-3.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images
  • qt6-qtbase-devel-0:6.11.2-3.hum1@aarch64 as a component of Red Hat Hardened Images
  • qt6-qtbase-devel-0:6.11.2-3.hum1@x86_64 as a component of Red Hat Hardened Images
  • qt6-qtbase-examples-0:6.11.2-3.hum1@aarch64 as a component of Red Hat Hardened Images
  • qt6-qtbase-examples-0:6.11.2-3.hum1@x86_64 as a component of Red Hat Hardened Images
  • qt6-qtbase-gui-0:6.11.2-3.hum1@aarch64 as a component of Red Hat Hardened Images
  • qt6-qtbase-gui-0:6.11.2-3.hum1@x86_64 as a component of Red Hat Hardened Images
  • qt6-qtbase-ibase-0:6.11.2-3.hum1@aarch64 as a component of Red Hat Hardened Images
  • qt6-qtbase-ibase-0:6.11.2-3.hum1@x86_64 as a component of Red Hat Hardened Images
  • qt6-qtbase-mysql-0:6.11.2-3.hum1@aarch64 as a component of Red Hat Hardened Images
  • qt6-qtbase-mysql-0:6.11.2-3.hum1@x86_64 as a component of Red Hat Hardened Images
  • qt6-qtbase-odbc-0:6.11.2-3.hum1@aarch64 as a component of Red Hat Hardened Images
  • qt6-qtbase-odbc-0:6.11.2-3.hum1@x86_64 as a component of Red Hat Hardened Images
  • qt6-qtbase-postgresql-0:6.11.2-3.hum1@aarch64 as a component of Red Hat Hardened Images
  • qt6-qtbase-postgresql-0:6.11.2-3.hum1@x86_64 as a component of Red Hat Hardened Images
  • qt6-qtbase-private-devel-0:6.11.2-3.hum1@aarch64 as a component of Red Hat Hardened Images
  • qt6-qtbase-private-devel-0:6.11.2-3.hum1@x86_64 as a component of Red Hat Hardened Images
  • qt6-qtbase-static-0:6.11.2-3.hum1@aarch64 as a component of Red Hat Hardened Images
  • qt6-qtbase-static-0:6.11.2-3.hum1@x86_64 as a component of Red Hat Hardened Images

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/ Workaround: To mitigate this issue, applications that use Qt's QDomDocument for XML serialization should avoid processing untrusted XML input. If processing untrusted XML is unavoidable, implement robust input validation and sanitization to prevent deeply nested structures before passing the data to the QtXml component. This requires application-level changes or careful operational procedures to ensure only trusted XML is processed.

🔗 References (5)