Ubuntu USN-8338-1: Apache HTTP Server Security Fix (HTTP Response Splitting/DoS)

Vulnerability Overview Vulnerability ID: USN-8338-1 Publication Date: 28 May 2026 Vulnerability Description: - The Apache HTTP Server contains an error when processing certain response headers, which could lead to HTTP response splitting attacks. - In the Apache HTTP Server’s HTTP/2 implementation, memory is not correctly reclaimed when a stream is reset by the client, which could lead to denial-of-service attacks. - The Apache HTTP Server contains an error when processing certain response headers, which could lead to HTTP response splitting attacks. Affected Versions Affected Versions: - Ubuntu 14.04 LTS - Ubuntu 18.04 LTS Fix Information Package Versions: - Ubuntu 20.04 LTS (focal): - Ubuntu 18.04 LTS (bionic): - Ubuntu 16.04 LTS (xenial): - Ubuntu 14.04 LTS (trusty): Update Method: - Standard system updates are sufficient to apply all necessary changes. - Updates can be performed using the following commands: References CVE-2025-66200 CVE-2025-65082 CVE-2025-58098 CVE-2025-55753 CVE-2025-49812 CVE-2024-47252 CVE-2024-43204 CVE-2024-42516 CVE-2024-39573 CVE-2024-38477 Related Notices USN-7968-1 USN-7639-1 USN-7639-2 USN-6885-1 USN-6885-3 USN-6729-1 USN-6729-2 USN-6729-3 USN-6506-1 Risk Mitigation Ubuntu Pro provides ten years of security coverage, encompassing over 25,000 packages in the Main and Universe repositories, and can be used free of charge for up to five machines. Link to obtain Ubuntu Pro: Get Ubuntu Pro Additional Information For more information on how to obtain the fixes, see Learn more about how to get the fixes. Contact For further questions, contact the team: Talk to a member of the team Footer Copyright © 2026 Canonical Ltd. Ubuntu and Canonical are registered trademarks of Canonical Ltd. Legal Statement --- The above is a summary of key information about the vulnerability from the webpage screenshot.

Goal Reached Thanks to every supporter — we hit 100%!

Ubuntu USN-8338-1: Apache HTTP Server Security Fix (HTTP Response Splitting/DoS)

More from this source