Upgrade default nginx to latest version to address Rift vulnerability

[josharian]

Author: _galacto
Channel: #feedback
Link: https://discord.com/channels/1405685085923049482/1405686161791516873/1506901922995769354

---

Issue

The default nginx version is vulnerable to nginx Rift and should be upgraded to the latest version.

Original Request

please consider upgrading default nginx to latest - the default version is vulnerable to nginx Rift

_Source: Discord message from galacto on 2026-05-21

Context

This security vulnerability requires timely patching to ensure system security.

[josharian]

Has Ubuntu backported the patch yet? Don’t see it on a first look…

[galacto]

Ubuntu security does list it here - https://ubuntu.com/security/CVE-2026-42945

Mentions that you can get it by getting security updates. Exe dev has a custom image i believe!?

[josharian]

Indeed, thanks. This should be fixed for all new VMs very shortly.