Alerts This Week
Warning Icon 1 1,308
Alerts This Week
Warning Icon 1 1,308

Ubuntu 25.10 nginx Critical Insertion Security Flaw USN-8038-1

ubuntu
Calendar Grey February 12, 2026
Dist Ubuntu Esm H88
Update nginx on Ubuntu to fix content insertion issue affecting proxied data. Critical security advisory USN-8038-1.
nginx could be made to insert content into proxied server data.

Summary

nginx could be made to insert content into proxied server data.

Software Description:

- nginx: small, powerful, scalable web/proxy server

Details:

It was discovered that nginx incorrectly handled proxying to upstream TLS

servers. An attacker could possibly use this issue to insert plain text

data into the response from an upstream proxied server.

Topics%20covered

Topics Covered

security advisory remote code execution Ubuntu nginx TLS insertion issue

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.10
  nginx                           1.28.0-6ubuntu1.1
  nginx-core                      1.28.0-6ubuntu1.1
  nginx-extras                    1.28.0-6ubuntu1.1
  nginx-full                      1.28.0-6ubuntu1.1
  nginx-light                     1.28.0-6ubuntu1.1

Ubuntu 24.04 LTS
  nginx                           1.24.0-2ubuntu7.6
  nginx-core                      1.24.0-2ubuntu7.6
  nginx-extras                    1.24.0-2ubuntu7.6
  nginx-full                      1.24.0-2ubuntu7.6
  nginx-light                     1.24.0-2ubuntu7.6

Ubuntu 22.04 LTS
  nginx                           1.18.0-6ubuntu14.8
  nginx-core                      1.18.0-6ubuntu14.8
  nginx-extras                    1.18.0-6ubuntu14.8
  nginx-full                      1.18.0-6ubuntu14.8
  nginx-light                     1.18.0-6ubuntu14.8

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-8038-1

CVE-2026-1642

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-8038-1

Topics%20covered

Topics Covered

security advisory remote code execution Ubuntu nginx TLS insertion issue

Package Information

https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.8

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here