60
USN-8563-5: nginx vulnerability
Ubuntu ships improved nginx fix for CVE-2026-42533 after earlier patch regression; flaw allows remote crash and possible code execution.
USN-8563-5 provides a better fix for CVE-2026-42533 after the original fix from USN-8563-1 was backed out in USN-8563-2 because it caused a regression. The flaw stems from nginx incorrectly handling certain map directives using regex matching and capture variables, allowing a remote attacker to crash nginx, causing denial of service, or possibly execute arbitrary code. The original advisory also described a use-after-free in the ngx_http_ssi_module when configured with Server-Side Includes, proxy_pass, and proxy buffering.
30
60
⚡ Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0
60