RHSA-2026:83427
Vulnerability from csaf_redhat - Published: 2026-10-15 02:42 - Updated: 2026-10-26 16:36Summary
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Severity
Important
Notes
Topic: An update for Red Hat Hardened Images RPMs is now available.
Details: This update includes the following RPMs:
nginx:
* nginx-1.30.6-1.hum1 (aarch64, s390x, x86_64)
* nginx-all-modules-1.30.6-1.hum1 (noarch)
* nginx-core-1.30.6-1.hum1 (aarch64, s390x, x86_64)
* nginx-filesystem-1.30.6-1.hum1 (noarch)
* nginx-mod-devel-1.30.6-1.hum1 (aarch64, s390x, x86_64)
* nginx-mod-http-geoip-1.30.6-1.hum1 (aarch64, s390x, x86_64)
* nginx-mod-http-image-filter-1.30.6-1.hum1 (aarch64, s390x, x86_64)
* nginx-mod-http-perl-1.30.6-1.hum1 (aarch64, s390x, x86_64)
* nginx-mod-http-xslt-filter-1.30.6-1.hum1 (aarch64, s390x, x86_64)
* nginx-mod-mail-1.30.6-1.hum1 (aarch64, s390x, x86_64)
* nginx-mod-stream-1.30.6-1.hum1 (aarch64, s390x, x86_64)
* nginx-mod-stream-geoip-1.30.6-1.hum1 (aarch64, s390x, x86_64)
* nginx-1.30.6-1.hum1.src (src)
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in nginx. A remote, unauthenticated attacker can trigger a heap-based buffer overflow by sending crafted HTTP requests to a server configured with specific alias and rewrite directives that reference the request filename variable. Successful exploitation may allow an attacker to achieve arbitrary code execution or cause a Denial of Service (DoS) by crashing worker processes.
8.1 (High)
Affected products
Fixed
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-aarch64-rpms | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-s390x-rpms | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-x86_64-rpms | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-aarch64-rpms | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-s390x-rpms | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-x86_64-rpms | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in NGINX. When HTTP/3 is used with proxy request buffering enabled, an unauthenticated remote attacker can inject arbitrary data into proxied requests. This vulnerability allows an attacker to manipulate traffic forwarded to backend servers, compromising data integrity.
5.3 (Medium)
Affected products
Fixed
37 products, the same list as for
CVE-2026-15176
Threats
Impact
Moderate
A flaw was found in NGINX. In certain configurations using asynchronous file I/O and SSI pages with include virtual commands, request processing can access freed memory in a worker process. A remote attacker may trigger memory corruption or a worker crash. Arbitrary code execution may be possible if ASLR is disabled or bypassed.
8.1 (High)
Affected products
Fixed
37 products, the same list as for
CVE-2026-15176
Threats
Impact
Important
A flaw was found in nginx. Under specific configurations where shared SSL session caching is enabled without explicit session ticket key rotation, a remote unauthenticated attacker may be able to forge client Secure Sockets Layer (SSL) sessions. This flaw allows an attacker to bypass client certificate verification and gain unauthorized access to protected resources and sensitive information.
6.5 (Medium)
Affected products
Fixed
37 products, the same list as for
CVE-2026-15176
Threats
Impact
Moderate
References
28 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for Red Hat Hardened Images RPMs is now available.",
"title": "Topic"
},
{
"category": "general",
"text": "This update includes the following RPMs:\n\nnginx:\n * nginx-1.30.6-1.hum1 (aarch64, s390x, x86_64)\n * nginx-all-modules-1.30.6-1.hum1 (noarch)\n * nginx-core-1.30.6-1.hum1 (aarch64, s390x, x86_64)\n * nginx-filesystem-1.30.6-1.hum1 (noarch)\n * nginx-mod-devel-1.30.6-1.hum1 (aarch64, s390x, x86_64)\n * nginx-mod-http-geoip-1.30.6-1.hum1 (aarch64, s390x, x86_64)\n * nginx-mod-http-image-filter-1.30.6-1.hum1 (aarch64, s390x, x86_64)\n * nginx-mod-http-perl-1.30.6-1.hum1 (aarch64, s390x, x86_64)\n * nginx-mod-http-xslt-filter-1.30.6-1.hum1 (aarch64, s390x, x86_64)\n * nginx-mod-mail-1.30.6-1.hum1 (aarch64, s390x, x86_64)\n * nginx-mod-stream-1.30.6-1.hum1 (aarch64, s390x, x86_64)\n * nginx-mod-stream-geoip-1.30.6-1.hum1 (aarch64, s390x, x86_64)\n * nginx-1.30.6-1.hum1.src (src)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:83427",
"url": "https://access.redhat.com/errata/RHSA-2026:83427"
},
{
"category": "external",
"summary": "https://images.redhat.com/",
"url": "https://images.redhat.com/"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-15176",
"url": "https://access.redhat.com/security/cve/CVE-2026-15176"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-97205",
"url": "https://access.redhat.com/security/cve/CVE-2026-97205"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-97629",
"url": "https://access.redhat.com/security/cve/CVE-2026-97629"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-95101",
"url": "https://access.redhat.com/security/cve/CVE-2026-95101"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_83427.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
"tracking": {
"current_release_date": "2026-10-26T16:36:42+00:00",
"generator": {
"date": "2026-10-26T16:36:42+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.3"
}
},
"id": "RHSA-2026:83427",
"initial_release_date": "2026-10-15T02:42:54+00:00",
"revision_history": [
{
"date": "2026-10-15T02:42:54+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-10-19T11:48:54+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-10-26T16:36:42+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Hardened Images",
"product": {
"name": "Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:hummingbird:1"
}
}
}
],
"category": "product_family",
"name": "Red Hat Hardened Images"
},
{
"branches": [
{
"category": "product_version",
"name": "nginx-0:1.30.6-1.hum1@aarch64",
"product": {
"name": "nginx-0:1.30.6-1.hum1@aarch64",
"product_id": "nginx-0:1.30.6-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nginx@1.30.6-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "nginx-core-0:1.30.6-1.hum1@aarch64",
"product": {
"name": "nginx-core-0:1.30.6-1.hum1@aarch64",
"product_id": "nginx-core-0:1.30.6-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nginx-core@1.30.6-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "nginx-mod-devel-0:1.30.6-1.hum1@aarch64",
"product": {
"name": "nginx-mod-devel-0:1.30.6-1.hum1@aarch64",
"product_id": "nginx-mod-devel-0:1.30.6-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nginx-mod-devel@1.30.6-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "nginx-mod-http-geoip-0:1.30.6-1.hum1@aarch64",
"product": {
"name": "nginx-mod-http-geoip-0:1.30.6-1.hum1@aarch64",
"product_id": "nginx-mod-http-geoip-0:1.30.6-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nginx-mod-http-geoip@1.30.6-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "nginx-mod-http-image-filter-0:1.30.6-1.hum1@aarch64",
"product": {
"name": "nginx-mod-http-image-filter-0:1.30.6-1.hum1@aarch64",
"product_id": "nginx-mod-http-image-filter-0:1.30.6-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nginx-mod-http-image-filter@1.30.6-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "nginx-mod-http-perl-0:1.30.6-1.hum1@aarch64",
"product": {
"name": "nginx-mod-http-perl-0:1.30.6-1.hum1@aarch64",
"product_id": "nginx-mod-http-perl-0:1.30.6-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nginx-mod-http-perl@1.30.6-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@aarch64",
"product": {
"name": "nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@aarch64",
"product_id": "nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nginx-mod-http-xslt-filter@1.30.6-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "nginx-mod-mail-0:1.30.6-1.hum1@aarch64",
"product": {
"name": "nginx-mod-mail-0:1.30.6-1.hum1@aarch64",
"product_id": "nginx-mod-mail-0:1.30.6-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nginx-mod-mail@1.30.6-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "nginx-mod-stream-0:1.30.6-1.hum1@aarch64",
"product": {
"name": "nginx-mod-stream-0:1.30.6-1.hum1@aarch64",
"product_id": "nginx-mod-stream-0:1.30.6-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nginx-mod-stream@1.30.6-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "nginx-mod-stream-geoip-0:1.30.6-1.hum1@aarch64",
"product": {
"name": "nginx-mod-stream-geoip-0:1.30.6-1.hum1@aarch64",
"product_id": "nginx-mod-stream-geoip-0:1.30.6-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nginx-mod-stream-geoip@1.30.6-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "nginx-0:1.30.6-1.hum1@s390x",
"product": {
"name": "nginx-0:1.30.6-1.hum1@s390x",
"product_id": "nginx-0:1.30.6-1.hum1@s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nginx@1.30.6-1.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
}
}
},
{
"category": "product_version",
"name": "nginx-core-0:1.30.6-1.hum1@s390x",
"product": {
"name": "nginx-core-0:1.30.6-1.hum1@s390x",
"product_id": "nginx-core-0:1.30.6-1.hum1@s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nginx-core@1.30.6-1.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
}
}
},
{
"category": "product_version",
"name": "nginx-mod-devel-0:1.30.6-1.hum1@s390x",
"product": {
"name": "nginx-mod-devel-0:1.30.6-1.hum1@s390x",
"product_id": "nginx-mod-devel-0:1.30.6-1.hum1@s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nginx-mod-devel@1.30.6-1.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
}
}
},
{
"category": "product_version",
"name": "nginx-mod-http-geoip-0:1.30.6-1.hum1@s390x",
"product": {
"name": "nginx-mod-http-geoip-0:1.30.6-1.hum1@s390x",
"product_id": "nginx-mod-http-geoip-0:1.30.6-1.hum1@s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nginx-mod-http-geoip@1.30.6-1.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
}
}
},
{
"category": "product_version",
"name": "nginx-mod-http-image-filter-0:1.30.6-1.hum1@s390x",
"product": {
"name": "nginx-mod-http-image-filter-0:1.30.6-1.hum1@s390x",
"product_id": "nginx-mod-http-image-filter-0:1.30.6-1.hum1@s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nginx-mod-http-image-filter@1.30.6-1.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
}
}
},
{
"category": "product_version",
"name": "nginx-mod-http-perl-0:1.30.6-1.hum1@s390x",
"product": {
"name": "nginx-mod-http-perl-0:1.30.6-1.hum1@s390x",
"product_id": "nginx-mod-http-perl-0:1.30.6-1.hum1@s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nginx-mod-http-perl@1.30.6-1.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
}
}
},
{
"category": "product_version",
"name": "nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@s390x",
"product": {
"name": "nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@s390x",
"product_id": "nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nginx-mod-http-xslt-filter@1.30.6-1.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
}
}
},
{
"category": "product_version",
"name": "nginx-mod-mail-0:1.30.6-1.hum1@s390x",
"product": {
"name": "nginx-mod-mail-0:1.30.6-1.hum1@s390x",
"product_id": "nginx-mod-mail-0:1.30.6-1.hum1@s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nginx-mod-mail@1.30.6-1.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
}
}
},
{
"category": "product_version",
"name": "nginx-mod-stream-0:1.30.6-1.hum1@s390x",
"product": {
"name": "nginx-mod-stream-0:1.30.6-1.hum1@s390x",
"product_id": "nginx-mod-stream-0:1.30.6-1.hum1@s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nginx-mod-stream@1.30.6-1.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
}
}
},
{
"category": "product_version",
"name": "nginx-mod-stream-geoip-0:1.30.6-1.hum1@s390x",
"product": {
"name": "nginx-mod-stream-geoip-0:1.30.6-1.hum1@s390x",
"product_id": "nginx-mod-stream-geoip-0:1.30.6-1.hum1@s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nginx-mod-stream-geoip@1.30.6-1.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "nginx-0:1.30.6-1.hum1@src",
"product": {
"name": "nginx-0:1.30.6-1.hum1@src",
"product_id": "nginx-0:1.30.6-1.hum1@src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nginx@1.30.6-1.hum1?arch=src\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-source-rpms"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "nginx-0:1.30.6-1.hum1@x86_64",
"product": {
"name": "nginx-0:1.30.6-1.hum1@x86_64",
"product_id": "nginx-0:1.30.6-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nginx@1.30.6-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "nginx-core-0:1.30.6-1.hum1@x86_64",
"product": {
"name": "nginx-core-0:1.30.6-1.hum1@x86_64",
"product_id": "nginx-core-0:1.30.6-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nginx-core@1.30.6-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "nginx-mod-devel-0:1.30.6-1.hum1@x86_64",
"product": {
"name": "nginx-mod-devel-0:1.30.6-1.hum1@x86_64",
"product_id": "nginx-mod-devel-0:1.30.6-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nginx-mod-devel@1.30.6-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "nginx-mod-http-geoip-0:1.30.6-1.hum1@x86_64",
"product": {
"name": "nginx-mod-http-geoip-0:1.30.6-1.hum1@x86_64",
"product_id": "nginx-mod-http-geoip-0:1.30.6-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nginx-mod-http-geoip@1.30.6-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "nginx-mod-http-image-filter-0:1.30.6-1.hum1@x86_64",
"product": {
"name": "nginx-mod-http-image-filter-0:1.30.6-1.hum1@x86_64",
"product_id": "nginx-mod-http-image-filter-0:1.30.6-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nginx-mod-http-image-filter@1.30.6-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "nginx-mod-http-perl-0:1.30.6-1.hum1@x86_64",
"product": {
"name": "nginx-mod-http-perl-0:1.30.6-1.hum1@x86_64",
"product_id": "nginx-mod-http-perl-0:1.30.6-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nginx-mod-http-perl@1.30.6-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@x86_64",
"product": {
"name": "nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@x86_64",
"product_id": "nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nginx-mod-http-xslt-filter@1.30.6-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "nginx-mod-mail-0:1.30.6-1.hum1@x86_64",
"product": {
"name": "nginx-mod-mail-0:1.30.6-1.hum1@x86_64",
"product_id": "nginx-mod-mail-0:1.30.6-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nginx-mod-mail@1.30.6-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "nginx-mod-stream-0:1.30.6-1.hum1@x86_64",
"product": {
"name": "nginx-mod-stream-0:1.30.6-1.hum1@x86_64",
"product_id": "nginx-mod-stream-0:1.30.6-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nginx-mod-stream@1.30.6-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "nginx-mod-stream-geoip-0:1.30.6-1.hum1@x86_64",
"product": {
"name": "nginx-mod-stream-geoip-0:1.30.6-1.hum1@x86_64",
"product_id": "nginx-mod-stream-geoip-0:1.30.6-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nginx-mod-stream-geoip@1.30.6-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product": {
"name": "nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product_id": "nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nginx-all-modules@1.30.6-1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-s390x-rpms",
"product": {
"name": "nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-s390x-rpms",
"product_id": "nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-s390x-rpms",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nginx-all-modules@1.30.6-1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
}
}
},
{
"category": "product_version",
"name": "nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product": {
"name": "nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product_id": "nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nginx-all-modules@1.30.6-1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product": {
"name": "nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product_id": "nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nginx-filesystem@1.30.6-1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-s390x-rpms",
"product": {
"name": "nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-s390x-rpms",
"product_id": "nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-s390x-rpms",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nginx-filesystem@1.30.6-1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
}
}
},
{
"category": "product_version",
"name": "nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product": {
"name": "nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product_id": "nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nginx-filesystem@1.30.6-1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "nginx-0:1.30.6-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@aarch64"
},
"product_reference": "nginx-0:1.30.6-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nginx-0:1.30.6-1.hum1@s390x as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@s390x"
},
"product_reference": "nginx-0:1.30.6-1.hum1@s390x",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nginx-0:1.30.6-1.hum1@src as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@src"
},
"product_reference": "nginx-0:1.30.6-1.hum1@src",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nginx-0:1.30.6-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@x86_64"
},
"product_reference": "nginx-0:1.30.6-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-aarch64-rpms"
},
"product_reference": "nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-s390x-rpms as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-s390x-rpms"
},
"product_reference": "nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-s390x-rpms",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-x86_64-rpms"
},
"product_reference": "nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nginx-core-0:1.30.6-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@aarch64"
},
"product_reference": "nginx-core-0:1.30.6-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nginx-core-0:1.30.6-1.hum1@s390x as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@s390x"
},
"product_reference": "nginx-core-0:1.30.6-1.hum1@s390x",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nginx-core-0:1.30.6-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@x86_64"
},
"product_reference": "nginx-core-0:1.30.6-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-aarch64-rpms"
},
"product_reference": "nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-s390x-rpms as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-s390x-rpms"
},
"product_reference": "nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-s390x-rpms",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-x86_64-rpms"
},
"product_reference": "nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nginx-mod-devel-0:1.30.6-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@aarch64"
},
"product_reference": "nginx-mod-devel-0:1.30.6-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nginx-mod-devel-0:1.30.6-1.hum1@s390x as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@s390x"
},
"product_reference": "nginx-mod-devel-0:1.30.6-1.hum1@s390x",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nginx-mod-devel-0:1.30.6-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@x86_64"
},
"product_reference": "nginx-mod-devel-0:1.30.6-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nginx-mod-http-geoip-0:1.30.6-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@aarch64"
},
"product_reference": "nginx-mod-http-geoip-0:1.30.6-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nginx-mod-http-geoip-0:1.30.6-1.hum1@s390x as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@s390x"
},
"product_reference": "nginx-mod-http-geoip-0:1.30.6-1.hum1@s390x",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nginx-mod-http-geoip-0:1.30.6-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@x86_64"
},
"product_reference": "nginx-mod-http-geoip-0:1.30.6-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nginx-mod-http-image-filter-0:1.30.6-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@aarch64"
},
"product_reference": "nginx-mod-http-image-filter-0:1.30.6-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nginx-mod-http-image-filter-0:1.30.6-1.hum1@s390x as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@s390x"
},
"product_reference": "nginx-mod-http-image-filter-0:1.30.6-1.hum1@s390x",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nginx-mod-http-image-filter-0:1.30.6-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@x86_64"
},
"product_reference": "nginx-mod-http-image-filter-0:1.30.6-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nginx-mod-http-perl-0:1.30.6-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@aarch64"
},
"product_reference": "nginx-mod-http-perl-0:1.30.6-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nginx-mod-http-perl-0:1.30.6-1.hum1@s390x as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@s390x"
},
"product_reference": "nginx-mod-http-perl-0:1.30.6-1.hum1@s390x",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nginx-mod-http-perl-0:1.30.6-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@x86_64"
},
"product_reference": "nginx-mod-http-perl-0:1.30.6-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@aarch64"
},
"product_reference": "nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@s390x as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@s390x"
},
"product_reference": "nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@s390x",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@x86_64"
},
"product_reference": "nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nginx-mod-mail-0:1.30.6-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@aarch64"
},
"product_reference": "nginx-mod-mail-0:1.30.6-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nginx-mod-mail-0:1.30.6-1.hum1@s390x as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@s390x"
},
"product_reference": "nginx-mod-mail-0:1.30.6-1.hum1@s390x",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nginx-mod-mail-0:1.30.6-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@x86_64"
},
"product_reference": "nginx-mod-mail-0:1.30.6-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nginx-mod-stream-0:1.30.6-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@aarch64"
},
"product_reference": "nginx-mod-stream-0:1.30.6-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nginx-mod-stream-0:1.30.6-1.hum1@s390x as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@s390x"
},
"product_reference": "nginx-mod-stream-0:1.30.6-1.hum1@s390x",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nginx-mod-stream-0:1.30.6-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@x86_64"
},
"product_reference": "nginx-mod-stream-0:1.30.6-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nginx-mod-stream-geoip-0:1.30.6-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@aarch64"
},
"product_reference": "nginx-mod-stream-geoip-0:1.30.6-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nginx-mod-stream-geoip-0:1.30.6-1.hum1@s390x as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@s390x"
},
"product_reference": "nginx-mod-stream-geoip-0:1.30.6-1.hum1@s390x",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nginx-mod-stream-geoip-0:1.30.6-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@x86_64"
},
"product_reference": "nginx-mod-stream-geoip-0:1.30.6-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-15176",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"discovery_date": "2026-10-14T14:51:01.008670+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2552352"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in nginx. A remote, unauthenticated attacker can trigger a heap-based buffer overflow by sending crafted HTTP requests to a server configured with specific alias and rewrite directives that reference the request filename variable. Successful exploitation may allow an attacker to achieve arbitrary code execution or cause a Denial of Service (DoS) by crashing worker processes.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nginx: nginx: heap-based buffer overflow in ngx_http_core_module via alias with rewrite referencing $request_filename",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "An IMPORTANT severity heap-based buffer overflow was found in nginx (ngx_http_core_module), affecting the nginx component in Red Hat Enterprise Linux 8, 9, and 10, Red Hat In-Vehicle OS, Red Hat Hardened Images, and Red Hat\u0027s services management platform (cloud.redhat.com). A remote, unauthenticated attacker can send crafted HTTP requests to trigger a heap-based buffer overflow in the nginx worker process on servers configured with a location that uses the alias directive together with rewrite and a set or return directive referencing the $request_filename variable, or where the $request_filename variable is used in an access log format directive. Exploitation requires this specific configuration and conditions beyond the attacker\u0027s control; a successful attack crashes the worker process, causing a denial of service, and may allow code execution on systems with ASLR disabled or where the attacker can bypass ASLR. This is a data plane issue with no control plane exposure. Red Hat rates this flaw as IMPORTANT (CVSS 3.1 score 8.1, AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H), which is lower than the upstream CVSS 4.0 rating of 9.2 CRITICAL, because exploitation depends on a specific server configuration. A fix is being pursued for the affected products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@src",
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-15176"
},
{
"category": "external",
"summary": "RHBZ#2552352",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2552352"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-15176",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-15176"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-15176",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15176"
},
{
"category": "external",
"summary": "https://my.f5.com/manage/s/article/K000162416",
"url": "https://my.f5.com/manage/s/article/K000162416"
}
],
"release_date": "2026-10-14T14:40:26.374000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-15T02:42:54+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@src",
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83427"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@src",
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@src",
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nginx: nginx: heap-based buffer overflow in ngx_http_core_module via alias with rewrite referencing $request_filename"
},
{
"cve": "CVE-2026-95101",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"discovery_date": "2026-10-14T14:51:32.715700+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2552355"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in NGINX. When HTTP/3 is used with proxy request buffering enabled, an unauthenticated remote attacker can inject arbitrary data into proxied requests. This vulnerability allows an attacker to manipulate traffic forwarded to backend servers, compromising data integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nginx: nginx: Data injection in proxied requests via HTTP/3 request buffering",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in NGINX within the HTTP/3 module (ngx_http_v3_module). When HTTP/3 is configured and proxy_request_buffering is active, an unauthenticated remote attacker can inject arbitrary data into proxied client requests. An attacker can exploit this condition to manipulate request payloads forwarded to upstream backend services, compromising data integrity at the proxy layer. Default SELinux confinement (httpd_t) and unprivileged worker execution prevent privilege escalation or container escape, restricting the impact entirely to the proxied HTTP data stream.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@src",
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-95101"
},
{
"category": "external",
"summary": "RHBZ#2552355",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2552355"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-95101",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95101"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-95101",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-95101"
},
{
"category": "external",
"summary": "https://my.f5.com/manage/s/article/K000162613",
"url": "https://my.f5.com/manage/s/article/K000162613"
}
],
"release_date": "2026-10-14T14:40:28.955000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-15T02:42:54+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@src",
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83427"
},
{
"category": "workaround",
"details": "Disable HTTP/3 by removing the quic parameter from all listen directives, or configure proxy_request_buffering off; within the relevant http, server, or location blocks.",
"product_ids": [
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@src",
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@src",
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nginx: nginx: Data injection in proxied requests via HTTP/3 request buffering"
},
{
"cve": "CVE-2026-97205",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2026-10-14T14:52:20.558649+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2552359"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in NGINX. In certain configurations using asynchronous file I/O and SSI pages with include virtual commands, request processing can access freed memory in a worker process. A remote attacker may trigger memory corruption or a worker crash. Arbitrary code execution may be possible if ASLR is disabled or bypassed.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nginx: NGINX ngx_http_core_module vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important severity because an unauthenticated remote attacker could trigger memory corruption and worker crashes, potentially leading to arbitrary code execution. However, successful exploitation requires non-standard configurations where both asynchronous file I/O (aio) and Server Side Includes (ssi) processing are explicitly enabled. Furthermore, Red Hat Enterprise Linux systems enforce Address Space Layout Randomization (ASLR) by default, which substantially limits the feasibility of reliable code execution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@src",
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-97205"
},
{
"category": "external",
"summary": "RHBZ#2552359",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2552359"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-97205",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-97205"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-97205",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-97205"
},
{
"category": "external",
"summary": "https://my.f5.com/manage/s/article/K000162608",
"url": "https://my.f5.com/manage/s/article/K000162608"
}
],
"release_date": "2026-10-14T14:40:27.487000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-15T02:42:54+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@src",
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83427"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, based on your environment requirements, you can either disable asynchronous file I/O (AIO) or Server Side Includes (SSI).",
"product_ids": [
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@src",
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@src",
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nginx: NGINX ngx_http_core_module vulnerability"
},
{
"cve": "CVE-2026-97629",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-10-14T14:53:01.952789+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2552364"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in nginx. Under specific configurations where shared SSL session caching is enabled without explicit session ticket key rotation, a remote unauthenticated attacker may be able to forge client Secure Sockets Layer (SSL) sessions. This flaw allows an attacker to bypass client certificate verification and gain unauthorized access to protected resources and sensitive information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nginx: nginx: Client certificate verification bypass via forged SSL sessions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in NGINX core SSL session handling. When configured with shared SSL session caching (ssl_session_cache shared:...) without explicit session ticket key rotation directives (ssl_session_ticket_key), automatic ticket key management allows client SSL session forgery in a non-deterministic manner. A remote unauthenticated attacker can exploit this condition to forge session tickets, bypassing client certificate verification (mTLS) to gain unauthorized access to protected upstream resources. Default SELinux policies and unprivileged worker confinement prevent process escape, restricting exposure entirely to the TLS termination layer.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@src",
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-97629"
},
{
"category": "external",
"summary": "RHBZ#2552364",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2552364"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-97629",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-97629"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-97629",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-97629"
},
{
"category": "external",
"summary": "https://my.f5.com/manage/s/article/K000162606",
"url": "https://my.f5.com/manage/s/article/K000162606"
}
],
"release_date": "2026-10-14T14:40:26.740000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-15T02:42:54+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@src",
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83427"
},
{
"category": "workaround",
"details": "Disable TLS session tickets by specifying ssl_session_tickets off; within the server or http configuration blocks. Alternatively, configure the ssl_session_ticket_key directive to point to a managed key file and rotate the secret out-of-band.",
"product_ids": [
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@src",
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@src",
"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@x86_64",
"Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@aarch64",
"Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@s390x",
"Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nginx: nginx: Client certificate verification bypass via forged SSL sessions"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.