Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

This advisory from Red Hat Product Security announces an update to Red Hat Hardened Images RPMs that includes fixes and enhancements for qt6-related packages. The update addresses CVE-2026-19395, which is associated with CWE-617 (Reachable Assertion). The packages updated are qt6-filesystem-6.11.2-1.hum1 for aarch64 and x86_64 architectures, qt6-rpm-macros-6.11.2-1.hum1 and qt6-srpm-macros-6.11.2-1.hum1 (both noarch), and qt6-6.11.2-1.hum1 source package. The advisory does not provide detailed technical information about the vulnerability or its impact beyond the CWE classification.

The vulnerability is classified under CWE-617 (Reachable Assertion), which generally indicates that an assertion in the code can be triggered under certain conditions, potentially leading to denial of service or other impacts. The advisory does not describe any known exploits in the wild or specific impact scenarios. The severity is rated high by Red Hat, indicating a significant security concern that warrants prompt attention.

Red Hat has released updated RPM packages that fix the vulnerability. Users of Red Hat Hardened Images should apply the qt6 package updates (version 6.11.2-1.hum1) as provided in the advisory. Detailed update instructions are available at https://images.redhat.com/. No additional mitigation steps are specified or required beyond applying the official update.