RHSA-2026:20351 - Security Advisory

Topic

An update for Red Hat Hardened Images RPMs is now available.

Description

This update includes the following RPMs:

nginx:

• nginx-1.30.2-1.hum1 (aarch64, x86_64)
• nginx-all-modules-1.30.2-1.hum1 (noarch)
• nginx-core-1.30.2-1.hum1 (aarch64, x86_64)
• nginx-filesystem-1.30.2-1.hum1 (noarch)
• nginx-mod-devel-1.30.2-1.hum1 (aarch64, x86_64)
• nginx-mod-http-geoip-1.30.2-1.hum1 (aarch64, x86_64)
• nginx-mod-http-image-filter-1.30.2-1.hum1 (aarch64, x86_64)
• nginx-mod-http-perl-1.30.2-1.hum1 (aarch64, x86_64)
• nginx-mod-http-xslt-filter-1.30.2-1.hum1 (aarch64, x86_64)
• nginx-mod-mail-1.30.2-1.hum1 (aarch64, x86_64)
• nginx-mod-stream-1.30.2-1.hum1 (aarch64, x86_64)
• nginx-mod-stream-geoip-1.30.2-1.hum1 (aarch64, x86_64)
• nginx-1.30.2-1.hum1.src (src)

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://images.redhat.com/

Fixes

CVEs

(none)

References

• https://images.redhat.com/
• https://access.redhat.com/security/cve/CVE-2026-40460
• https://access.redhat.com/security/updates/classification/
• https://access.redhat.com/security/cve/CVE-2026-42926
• https://access.redhat.com/security/cve/CVE-2026-9256