NGINX
ProductAm I affected?
Checked against NVD affected-version data on our server. Nothing you type is stored.
Security timeline
- Vulnerability reported by Ubuntu Security NoticesUbuntu extends nginx security fixes to older LTS releases, covering six CVEs
Recent news
Ubuntu extends nginx security fixes to older LTS releases, covering six CVEs
Ubuntu's USN-8955-2 extends earlier nginx fixes to 20.04, 18.04, 16.04 and 14.04 LTS and adds a fix for CVE-2026-42533. The flaws include crashes and possible code execution via map directives, alias with rewrite rules and Server Side Includes, plus HTTP/3 data injection on 26.04 and 26.10. Forged SSL sessions that bypass client certificate checks affect 24.04, 26.04 and 26.10 when a shared session cache is used without ticket key rotation.
Trimming unneeded components from container images to reduce vulnerabilities
Standard container images often include operating-system packages, development tools, debugging utilities and libraries the application does not need. The article cites an NGINX image that contained 274 categorised vulnerabilities straight from download, and argues that scanning reveals these findings but does not by itself reduce risk.