Nginx Vulnerabilities — Ubuntu Security Update (USN-8955-1)
It was discovered that nginx incorrectly handled certain configurations using the alias directive together with rewrite rules. A remote attacker could possibly use this issue to cause nginx to crash, resulting in a denial of service, or execute arbitrary code. (CVE-2026-15176) It was discovered that nginx incorrect…
-
USN-8955-1
Publication date
26 October 2026
Overview
Several security issues were fixed in nginx.
Releases
Open side navigation
Packages
- nginx – small, powerful, scalable web/proxy server
Details
It was discovered that nginx incorrectly handled certain configurations
using the alias directive together with rewrite rules. A remote attacker
could possibly use this issue to cause nginx to crash, resulting in a
denial of service, or execute arbitrary code.
(CVE-2026-15176)
It was discovered that nginx incorrectly handled map directives using
regex matching under certain circumstances. A remote attacker could
possibly use this issue to cause nginx to crash, resulting in a denial
of service, or execute arbitrary code.
(CVE-2026-93479)
It was discovered that nginx incorrectly handled HTTP/3 requests when
proxy_request_buffering was enabled. This issue only affected
Ubuntu 26.04 LTS and Ubuntu 26.10. A remote attacker could possibly use
this issue to inject data into proxied requests.
(
It was discovered that nginx incorrectly handled certain configurations
using the alias directive together with rewrite rules. A remote attacker
could possibly use this issue to cause nginx to crash, resulting in a
denial of service, or execute arbitrary code.
(CVE-2026-15176)
It was discovered that nginx incorrectly handled map directives using
regex matching under certain circumstances. A remote attacker could
possibly use this issue to cause nginx to crash, resulting in a denial
of service, or execute arbitrary code.
(CVE-2026-93479)
It was discovered that nginx incorrectly handled HTTP/3 requests when
proxy_request_buffering was enabled. This issue only affected
Ubuntu 26.04 LTS and Ubuntu 26.10. A remote attacker could possibly use
this issue to inject data into proxied requests.
(CVE-2026-95101)
It was discovered that nginx incorrectly handled asynchronous file I/O
in certain configurations with Server Side Includes pages. A remote
attacker could possibly use this issue to cause nginx to crash,
resulting in a denial of service, or execute arbitrary code.
(CVE-2026-97205)
It was discovered that nginx incorrectly handled SSL session ticket keys
when configured with a shared session cache but without explicit ticket
key rotation. This issue only affected Ubuntu 24.04 LTS, Ubuntu 26.04 LTS,
and Ubuntu 26.10. A remote attacker
could possibly use this issue to forge client SSL sessions and bypass
client certificate verification.
(CVE-2026-97629)
Show more
Show less
Update instructions
In general, a standard system update will make all the necessary changes.
Learn more about how to get the fixes.
The problem can be corrected by updating your system to the following package versions:
| Ubuntu Release | Package Version | ||
|---|---|---|---|
|
26.10
stonking |
nginx – | ||
| nginx-core – | |||
| nginx-extras – | |||
| nginx-full – | |||
| nginx-light – | |||
|
26.04
LTS resolute |
nginx – | ||
| nginx-core – | |||
| nginx-extras – | |||
| nginx-full – | |||
| nginx-light – | |||
|
24.04
LTS noble |
nginx – | ||
| nginx-core – | |||
| nginx-extras – | |||
| nginx-full – | |||
| nginx-light – | |||
|
22.04
LTS jammy |
nginx – | ||
| nginx-core – | |||
| nginx-extras – | |||
| nginx-full – | |||
| nginx-light – | |||
Reduce your security exposure
Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.
References
Referencias
Comprueba tu sistema en busca de vulnerabilidades
Selecciona tu producto y sistema operativo para ver los comandos de corrección exactos que se aplican a ti.
Comprueba tu sistema