> USN-8398-4: nginx vulnerability
[DATE: 02/07/2026 12:03]
[LANGUAGE: EN]
USN-8398-3 fixed a vulnerability in nginx. This update provides the
corresponding fix for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu
18.04 LTS, and Ubuntu 20.04 LTS.
Original advisory details:
It was discovered that nginx incorrectly handled certain cookie headers in
the HTTP/2 implementation. A remote attacker could possibly use this issue
to cause nginx to consume excessive resources, resulting in a denial of
service.