Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

This update includes the following RPMs: qt6: * qt6-filesystem-6.12.0-1.hum1 (aarch64, s390x, x86_64) * qt6-rpm-macros-6.12.0-1.hum1 (noarch) * qt6-srpm-macros-6.12.0-1.hum1 (noarch) * qt6-6.12.0-1.hum1.src (src)

• CWE-476NULL Pointer Dereference (opens in a new tab)

  Base weaknessLikelihood of exploit: MediumCWE Top 25 (2025): #13OWASP Top 10 A10:2025: Mishandling of Exceptional Conditions (opens in a new tab)

  The product dereferences a pointer that it expects to be valid but is NULL.

  How to prevent and test

  1. Implementation

     For any pointers that could have been modified or provided from a function that can return NULL, check the pointer for NULL before use. When working with a multithreaded or otherwise asynchronous environment, ensure that proper locking APIs are used to lock before the check, and unlock when it has finished.

  2. Requirements

     Select a programming language that is not susceptible to these issues.

  3. Implementation

     Check the results of all functions that return a value and verify that the value is non-null before acting upon it.

  OWASP Cheat Sheets

  • Logging (opens in a new tab)
  • Error Handling (opens in a new tab)

  OWASP ASVS 4.0.3

  • V11.1.7 (opens in a new tab)

  From MITRE CWE, MITRE CAPEC and OWASP (Top 10, OpenCRE).

• access.redhat.com/errata/RHSA-2026:89193 (opens in a new tab)
• images.redhat.com (opens in a new tab)
• access.redhat.com/security/cve/CVE-2026-95620 (opens in a new tab)
• access.redhat.com/security/updates/classification/ (opens in a new tab)
• access.redhat.com/security/cve/CVE-2026-105923 (opens in a new tab)
• security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_89193.json (opens in a new tab)

• CVE-2026-105923: CWE-476 NULL Pointer Dereference in qt QtMediumVulnerability10/21/2026
• Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Tempo) 3.11.3 releaseHighVulnerability10/22/2026
• Red Hat Security Advisory: ca-certificates security updateCriticalVulnerability10/23/2026
• Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement updateHighVulnerability10/12/2026
• Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement updateHighVulnerability10/20/2026