Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · Hardened Images 1 hummingbird:1 | nginx | 2:1.30.4-2.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | nginx-all-modules | 2:1.30.4-2.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | nginx-core | 2:1.30.4-2.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | nginx-filesystem | 2:1.30.4-2.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | nginx-mod-devel | 2:1.30.4-2.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | nginx-mod-http-geoip | 2:1.30.4-2.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | nginx-mod-http-image-filter | 2:1.30.4-2.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | nginx-mod-http-perl | 2:1.30.4-2.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | nginx-mod-http-xslt-filter | 2:1.30.4-2.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | nginx-mod-mail | 2:1.30.4-2.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | nginx-mod-stream | 2:1.30.4-2.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | nginx-mod-stream-geoip | 2:1.30.4-2.hum1 |
Vulnerabilities 3
-
High 8.2
NGINX ngx_http_slice_module vulnerability
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_slice_module module. When the slice directive and unnamed regex captures are configured or when a background cache update happens, unauthenticated attackers can send requests that may cause…
-
High 8.1CVE-2026-42533 Public exploit
NGINX Map directive and Regex matching vulnerability
A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achiev…
-
Medium 6.5
NGINX ngx_http_ssi_module vulnerability
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ssi_module module. This vulnerability may exist when the Server-Side Includes (SSI), proxy_pass, and proxy_buffering off directives are configured. With this configuration, an unauthenticat…
References
-
article
https://images.redhat.com/
-
report
https://access.redhat.com/security/cve/CVE-2026-56434
-
article
https://access.redhat.com/security/updates/classification/
-
report
https://access.redhat.com/security/cve/CVE-2026-60005
-
report
https://access.redhat.com/security/cve/CVE-2026-42533
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_46012.json
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2500967
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-42533
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-42533
-
article
https://my.f5.com/manage/s/article/K000162097
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2500960
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-56434
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-56434
-
article
https://my.f5.com/manage/s/article/K000162098
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2500992
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-60005
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-60005
-
article
https://my.f5.com/manage/s/article/K000162100