Ubuntu extends nginx security fixes to older LTS releases, covering six CVEs
VULNERABILITYNGINXredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
nginx is a widely used piece of software that runs many websites. Several flaws in it could let an attacker crash the server or, in some cases, run their own code. Ubuntu has released updates to fix them on older versions of its system.
Like I’m new · Written by AI from 1 source · Wrong?
What to do
- Update nginx to the fixed package for your Ubuntu release using the USN-8955-2 notice.
- Prioritise CVE-2026-97629 if you use a shared SSL session cache without explicit ticket key rotation and rely on client certificate verification.
Written by AI from the sources, checked against them
Full story timeline · 1 update
- Thu 5 NovemberUSN-8955-2: nginx vulnerabilitiesUbuntu Security Notices
Who reported · 1 outlet
Ubuntu Security Notices