Skip to content
OpenAdvisories
Medium RHSA-2026:67977 1 CVE

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published Sep 22, 2026 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 12

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 nginx 2:1.30.5-4.hum1
Red Hat · Hardened Images 1 hummingbird:1 nginx-all-modules 2:1.30.5-4.hum1
Red Hat · Hardened Images 1 hummingbird:1 nginx-core 2:1.30.5-4.hum1
Red Hat · Hardened Images 1 hummingbird:1 nginx-filesystem 2:1.30.5-4.hum1
Red Hat · Hardened Images 1 hummingbird:1 nginx-mod-devel 2:1.30.5-4.hum1
Red Hat · Hardened Images 1 hummingbird:1 nginx-mod-http-geoip 2:1.30.5-4.hum1
Red Hat · Hardened Images 1 hummingbird:1 nginx-mod-http-image-filter 2:1.30.5-4.hum1
Red Hat · Hardened Images 1 hummingbird:1 nginx-mod-http-perl 2:1.30.5-4.hum1
Red Hat · Hardened Images 1 hummingbird:1 nginx-mod-http-xslt-filter 2:1.30.5-4.hum1
Red Hat · Hardened Images 1 hummingbird:1 nginx-mod-mail 2:1.30.5-4.hum1
Red Hat · Hardened Images 1 hummingbird:1 nginx-mod-stream 2:1.30.5-4.hum1
Red Hat · Hardened Images 1 hummingbird:1 nginx-mod-stream-geoip 2:1.30.5-4.hum1

Vulnerabilities 1

  • Medium 6.5
    CVE-2026-90439

    NGINX ngx_http_v3_module vulnerability

    NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_v3_module module. When using HTTP/3 with OpenSSL versions <= OpenSSL 3.5.0 under certain configurations, a limited heap buffer overflow could happen while processing a TLS handshake. This c…

    F5 NGINX Plus NGINX Open Source nginx Network devices Debian Alpine Wolfi

References

  • article
    https://images.redhat.com/
  • report
    https://access.redhat.com/security/cve/CVE-2026-90439
  • article
    https://access.redhat.com/security/updates/classification/
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_67977.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2533856
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-90439
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-90439
  • article
    https://my.f5.com/manage/s/article/K000162604