This Red Hat security advisory (RHSA-2026:27197) addresses vulnerabilities in Red Hat Hardened Images RPMs, specifically multiple nginx-related packages updated to version 1.30.3-2.hum1 for architectures aarch64 and x86_64, and noarch where applicable. The vulnerabilities correspond to CVE-2026-42055 and CVE-2026-48142, involving buffer size miscalculations and out-of-bounds reads (CWE-131 and CWE-125). The advisory lists the updated RPMs but does not specify exact affected versions or detailed technical exploit information. No CVSS scores are provided, and no known active exploitation has been reported. The update is intended as a bug fix and enhancement to mitigate these issues.

The vulnerabilities involve memory handling errors that could potentially lead to security issues such as crashes or information disclosure if exploited. However, no known exploits in the wild have been reported. The impact is considered high severity based on the advisory classification and the nature of the CWEs involved, which can lead to serious security consequences if exploited.

Red Hat has released updated RPM packages (nginx 1.30.3-2.hum1 and related modules) as part of this advisory. Users of Red Hat Hardened Images should apply these updates to remediate the vulnerabilities. Since this is an official Red Hat security advisory, the fix is available through the updated RPMs. Refer to https://images.redhat.com/ and the Red Hat advisory RHSA-2026:27197 for detailed update instructions. No additional mitigation steps are specified or required beyond applying the update.