USN-3114-2
nginx regression
USN-3114-1 fixed a vulnerability in nginx. A packaging issue prevented nginx from being reinstalled or upgraded to a subsequent release. This update fixes the problem.
We apologize for the inconvenience.
Original advisory details:
Dawid Golunski discovered that the nginx package incorrectly handled log file permissions. A remote attacker could possibly use this issue to obtain root privileges.
What each source reports
OSV No score
nginx regression
USN-3114-1 fixed a vulnerability in nginx. A packaging issue prevented nginx from being reinstalled or upgraded to a subsequent release. This update fixes the problem.
We apologize for the inconvenience.
Original advisory details:
Dawid Golunski discovered that the nginx package incorrectly handled log file permissions. A remote attacker could possibly use this issue to obtain root privileges.
- Record
USN-3114-2- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
nginxUbuntu:14.04:LTS |
before 1.4.6-1ubuntu3.7, plus listed versions 1.4.1-3ubuntu11.4.3-2ubuntu11.4.4-1ubuntu11.4.4-2ubuntu11.4.4-4ubuntu1 Show 9 moreShow less1.4.5-1ubuntu11.4.6-1ubuntu21.4.6-1ubuntu31.4.6-1ubuntu3.11.4.6-1ubuntu3.21.4.6-1ubuntu3.31.4.6-1ubuntu3.41.4.6-1ubuntu3.51.4.6-1ubuntu3.6 |
1.4.6-1ubuntu3.7 |
nginxUbuntu:16.04:LTS |
before 1.10.0-0ubuntu0.16.04.4, plus listed versions 1.9.3-1ubuntu11.9.6-2ubuntu11.9.6-2ubuntu21.9.9-0ubuntu11.9.9-1ubuntu1 Show 11 moreShow less1.9.10-0ubuntu11.9.10-1ubuntu11.9.11-0ubuntu11.9.11-0ubuntu21.9.12-0ubuntu11.9.13-0ubuntu11.9.14-0ubuntu11.9.15-0ubuntu11.10.0-0ubuntu0.16.04.11.10.0-0ubuntu0.16.04.21.10.0-0ubuntu0.16.04.3 |
1.10.0-0ubuntu0.16.04.4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-3114-2 is a vulnerability with no CVSS score yet in nginx, published October 27, 2016. No source lists public exploit code. Fixed in nginx 1.4.6-1ubuntu3.7.