This Red Hat security advisory (RHSA-2026:46012) covers bug fixes and enhancements for Red Hat Hardened Images RPMs, specifically updating nginx packages to version 1.30.4-2.hum1 across multiple architectures and modules. The advisory addresses three CVEs (CVE-2026-42533, CVE-2026-56434, CVE-2026-60005) involving memory safety issues such as buffer size miscalculations and out-of-bounds memory access (CWE-131, CWE-125, CWE-824). These vulnerabilities could potentially lead to security risks if exploited. The advisory references updated RPMs but does not explicitly list affected versions or detailed exploitability information. No known exploits in the wild have been reported. The update is available from Red Hat Hardened Images repositories.

The vulnerabilities involve memory safety errors that could lead to potential security issues such as crashes or unauthorized memory access in nginx components within Red Hat Hardened Images. The severity is rated high by Red Hat Product Security. However, there are no known exploits in the wild currently. The impact is limited to affected nginx RPMs in the hardened images environment.

Red Hat has released updated RPM packages for nginx and its modules as part of the Hardened Images update (version 1.30.4-2.hum1). Users of Red Hat Hardened Images should apply these updates promptly to remediate the vulnerabilities. Detailed update instructions and packages are available at https://images.redhat.com/. Since this is not a cloud service, remediation is the responsibility of the system administrators. Patch status is confirmed by the vendor advisory.