Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Fixed packages 12

Vulnerabilities 4

• High 8.1
  CVE-2026-15176 Public exploit

  NGINX ngx_http_core_module vulnerability

  A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the alias directive together with rewrite and a set or return directive referencing the $request_filename variable. Alternatively, the same result could be achi…

  F5 NGINX Plus NGINX Open Source nginx Network devices Debian Ubuntu Azure Linux Alpine Wolfi
  Oct 14, 2026
• High 8.1
  CVE-2026-97205 Public exploit

  NGINX ngx_http_core_module vulnerability

  NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_core_module module. When asynchronous file I/O (AIO) is enabled in certain configurations, processing a Server Side Includes (SSI) page containing “include virtual” commands may trigger a U…

  F5 NGINX Plus NGINX Open Source nginx Network devices Debian Ubuntu Azure Linux Alpine Wolfi
  Oct 14, 2026
• Medium 6.5
  CVE-2026-97629 Public exploit

  NGINX ngx_http_ssl_module vulnerability

  Description When NGINX Plus or NGINX Open Source is configured with ssl_session_cache shared:name:size without an explicit ssl_session_ticket_key file directives to automatically rotate SSL session ticket keys, a remote unauthenticated attacker is able to for…

  F5 NGINX Plus NGINX Open Source nginx Network devices Debian Ubuntu Azure Linux Alpine Wolfi
  Oct 14, 2026
• Medium 5.3
  CVE-2026-95101

  NGINX ngx_http_v3_module vulnerability

  Description NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_v3_module module. When using HTTP/3 with proxy_request_buffering on directive, an unauthenticated attacker may be able to inject data in the proxied request. Impact This vulnera…

  F5 NGINX Plus NGINX Open Source nginx Network devices Debian Ubuntu Azure Linux Alpine Wolfi
  Oct 14, 2026

References

• article
  https://images.redhat.com/
• report
  https://access.redhat.com/security/cve/CVE-2026-15176
• article
  https://access.redhat.com/security/updates/classification/
• report
  https://access.redhat.com/security/cve/CVE-2026-97205
• report
  https://access.redhat.com/security/cve/CVE-2026-97629
• report
  https://access.redhat.com/security/cve/CVE-2026-95101
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_83427.json
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2552352
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-15176
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-15176
• article
  https://my.f5.com/manage/s/article/K000162416
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2552355
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-95101
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-95101
• article
  https://my.f5.com/manage/s/article/K000162613
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2552359
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-97205
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-97205
• article
  https://my.f5.com/manage/s/article/K000162608
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2552364
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-97629
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-97629
• article
  https://my.f5.com/manage/s/article/K000162606