Description
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 16.04 LTS | nginx | No fix yet | — |
| Ubuntu Pro 14.04 LTS | nginx | No fix yet | — |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SUSE WebYast 1.3 | nginx-1.0 | 1.0.15-0.34.1 | SUSE-SU-2017:0190-1 |
| SUSE Studio Onsite 1.3 | nginx-1.0 | 1.0.15-0.34.1 | SUSE-SU-2017:0190-1 |
| SUSE Lifecycle Management Server 1.3 | nginx-1.0 | 1.0.15-0.34.1 | SUSE-SU-2017:0190-1 |
Advisories 2
- SUSE-SU-2017:0190-1 Security update for nginx-1.0 SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2025-2522 Mehrere Webserver: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Nov 10, 2025