RHSA-2026:46012HighCVSS 8.2

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published
July 26, 2026
Last Modified
August 18, 2026

🔗 CVE IDs covered (3)

CVE-2026-42533 →CVE-2026-56434 →CVE-2026-60005 →

📋 Description

CVE-2026-42533 — nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-56434 — nginx: NGINX: Heap buffer over-read allows memory modification or denial of service CVE-2026-60005 — nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module

🎯 Affected products5

  • Red Hat Hardened Images
  • nginx-main@aarch64 as a component of Red Hat Hardened Images
  • nginx-main@noarch as a component of Red Hat Hardened Images
  • nginx-main@src as a component of Red Hat Hardened Images
  • nginx-main@x86_64 as a component of Red Hat Hardened Images

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/ Workaround: To mitigate this vulnerability, do not use unnamed captures. Use named captures instead and only use them in the same block with the regex match. Red Hat recommends updating nginx to the latest version when a fix is available. Workaround: To prevent exploitation, avoid configuring NGINX with `ngx_http_ssi_module` when `proxy_pass` and `proxy_buffering off` are simultaneously active. If Server-Side Includes (SSI) are not essential, disable the `ngx_http_ssi_module` by removing or commenting out the `ssi on;` directive. Alternatively, ensure `proxy_buffering` is explicitly enabled (`proxy_buffering on;`) when `proxy_pass` is used with SSI. A reload or restart of the NGINX service is necessary for configuration changes to apply, which may cause a brief service interruption. Workaround: To mitigate this issue, disable the ngx_http_slice_module entirely if it is not required. If the module must be used, avoid unnamed regex captures with the slice directive and explicitly disable proxy_cache_background_update. Reload or restart the NGINX service to apply these changes. Please note this may cause a brief service interruption.

🔗 References (7)