RHSA-2026:83427HighCVSS 8.1

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published
October 15, 2026
Last Modified
October 26, 2026

🔗 CVE IDs covered (4)

CVE-2026-95101 →CVE-2026-97205 →CVE-2026-97629 →CVE-2026-15176 →

📋 Description

CVE-2026-15176 — nginx: nginx: heap-based buffer overflow in ngx_http_core_module via alias with rewrite referencing $request_filename CVE-2026-95101 — nginx: nginx: Data injection in proxied requests via HTTP/3 request buffering CVE-2026-97205 — nginx: NGINX ngx_http_core_module vulnerability CVE-2026-97629 — nginx: nginx: Client certificate verification bypass via forged SSL sessions

🎯 Affected products38

  • Red Hat Hardened Images
  • nginx-0:1.30.6-1.hum1@aarch64 as a component of Red Hat Hardened Images
  • nginx-0:1.30.6-1.hum1@s390x as a component of Red Hat Hardened Images
  • nginx-0:1.30.6-1.hum1@src as a component of Red Hat Hardened Images
  • nginx-0:1.30.6-1.hum1@x86_64 as a component of Red Hat Hardened Images
  • nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images
  • nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-s390x-rpms as a component of Red Hat Hardened Images
  • nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images
  • nginx-core-0:1.30.6-1.hum1@aarch64 as a component of Red Hat Hardened Images
  • nginx-core-0:1.30.6-1.hum1@s390x as a component of Red Hat Hardened Images
  • nginx-core-0:1.30.6-1.hum1@x86_64 as a component of Red Hat Hardened Images
  • nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images
  • nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-s390x-rpms as a component of Red Hat Hardened Images
  • nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images
  • nginx-mod-devel-0:1.30.6-1.hum1@aarch64 as a component of Red Hat Hardened Images
  • nginx-mod-devel-0:1.30.6-1.hum1@s390x as a component of Red Hat Hardened Images
  • nginx-mod-devel-0:1.30.6-1.hum1@x86_64 as a component of Red Hat Hardened Images
  • nginx-mod-http-geoip-0:1.30.6-1.hum1@aarch64 as a component of Red Hat Hardened Images
  • nginx-mod-http-geoip-0:1.30.6-1.hum1@s390x as a component of Red Hat Hardened Images
  • nginx-mod-http-geoip-0:1.30.6-1.hum1@x86_64 as a component of Red Hat Hardened Images
  • nginx-mod-http-image-filter-0:1.30.6-1.hum1@aarch64 as a component of Red Hat Hardened Images
  • nginx-mod-http-image-filter-0:1.30.6-1.hum1@s390x as a component of Red Hat Hardened Images
  • nginx-mod-http-image-filter-0:1.30.6-1.hum1@x86_64 as a component of Red Hat Hardened Images
  • nginx-mod-http-perl-0:1.30.6-1.hum1@aarch64 as a component of Red Hat Hardened Images
  • nginx-mod-http-perl-0:1.30.6-1.hum1@s390x as a component of Red Hat Hardened Images
  • nginx-mod-http-perl-0:1.30.6-1.hum1@x86_64 as a component of Red Hat Hardened Images
  • nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@aarch64 as a component of Red Hat Hardened Images
  • nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@s390x as a component of Red Hat Hardened Images
  • nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@x86_64 as a component of Red Hat Hardened Images
  • nginx-mod-mail-0:1.30.6-1.hum1@aarch64 as a component of Red Hat Hardened Images
  • +8 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/ Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Workaround: Disable HTTP/3 by removing the quic parameter from all listen directives, or configure proxy_request_buffering off; within the relevant http, server, or location blocks. Workaround: To mitigate this vulnerability, based on your environment requirements, you can either disable asynchronous file I/O (AIO) or Server Side Includes (SSI). Workaround: Disable TLS session tickets by specifying ssl_session_tickets off; within the server or http configuration blocks. Alternatively, configure the ssl_session_ticket_key directive to point to a managed key file and rotate the secret out-of-band.

🔗 References (8)