What is RHSA-2026:67977?

RHSA-2026:67977 is a security advisory published by Red Hat Product Security with Medium severity. Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Which CVE IDs does RHSA-2026:67977 cover?

RHSA-2026:67977 covers the following CVE IDs: CVE-2026-90439. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2026:67977?

RHSA-2026:67977 has a CVSS v3 base score of 6.5, published by Red Hat Product Security.

Which products are affected by RHSA-2026:67977?

RHSA-2026:67977 affects 26 products, including: Red Hat Hardened Images; nginx-0:1.30.5-4.hum1@aarch64 as a component of Red Hat Hardened Images; nginx-0:1.30.5-4.hum1@src as a component of Red Hat Hardened Images; nginx-0:1.30.5-4.hum1@x86_64 as a component of Red Hat Hardened Images; nginx-all-modules-0:1.30.5-4.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images; and others — see the full list on the advisory page.

RHSA-2026:67977MediumCVSS 6.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Vendor

Red Hat Product Security

Published

September 16, 2026

Last Modified

September 21, 2026

🔗 CVE IDs covered (1)

CVE-2026-90439 →

📋 Description

CVE-2026-90439 — nginx: NGINX ngx_http_v3_module: Denial of Service via TLS handshake heap buffer overflow

🎯 Affected products26

Red Hat Hardened Images
nginx-0:1.30.5-4.hum1@aarch64 as a component of Red Hat Hardened Images
nginx-0:1.30.5-4.hum1@src as a component of Red Hat Hardened Images
nginx-0:1.30.5-4.hum1@x86_64 as a component of Red Hat Hardened Images
nginx-all-modules-0:1.30.5-4.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images
nginx-all-modules-0:1.30.5-4.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images
nginx-core-0:1.30.5-4.hum1@aarch64 as a component of Red Hat Hardened Images
nginx-core-0:1.30.5-4.hum1@x86_64 as a component of Red Hat Hardened Images
nginx-filesystem-0:1.30.5-4.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images
nginx-filesystem-0:1.30.5-4.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images
nginx-mod-devel-0:1.30.5-4.hum1@aarch64 as a component of Red Hat Hardened Images
nginx-mod-devel-0:1.30.5-4.hum1@x86_64 as a component of Red Hat Hardened Images
nginx-mod-http-geoip-0:1.30.5-4.hum1@aarch64 as a component of Red Hat Hardened Images
nginx-mod-http-geoip-0:1.30.5-4.hum1@x86_64 as a component of Red Hat Hardened Images
nginx-mod-http-image-filter-0:1.30.5-4.hum1@aarch64 as a component of Red Hat Hardened Images
nginx-mod-http-image-filter-0:1.30.5-4.hum1@x86_64 as a component of Red Hat Hardened Images
nginx-mod-http-perl-0:1.30.5-4.hum1@aarch64 as a component of Red Hat Hardened Images
nginx-mod-http-perl-0:1.30.5-4.hum1@x86_64 as a component of Red Hat Hardened Images
nginx-mod-http-xslt-filter-0:1.30.5-4.hum1@aarch64 as a component of Red Hat Hardened Images
nginx-mod-http-xslt-filter-0:1.30.5-4.hum1@x86_64 as a component of Red Hat Hardened Images
nginx-mod-mail-0:1.30.5-4.hum1@aarch64 as a component of Red Hat Hardened Images
nginx-mod-mail-0:1.30.5-4.hum1@x86_64 as a component of Red Hat Hardened Images
nginx-mod-stream-0:1.30.5-4.hum1@aarch64 as a component of Red Hat Hardened Images
nginx-mod-stream-0:1.30.5-4.hum1@x86_64 as a component of Red Hat Hardened Images
nginx-mod-stream-geoip-0:1.30.5-4.hum1@aarch64 as a component of Red Hat Hardened Images
nginx-mod-stream-geoip-0:1.30.5-4.hum1@x86_64 as a component of Red Hat Hardened Images

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/

🔗 CVE IDs covered (1)

📋 Description

🎯 Affected products26

✅ Remediation

🔗 References (5)