From: Peter Marko <[email protected]> These CVEs were fixed in 1.30.3 but still showing in cve reports. Fixed version information is e.g. in [1].
[1] https://nginx.org/en/security_advisories.html Signed-off-by: Peter Marko <[email protected]> --- meta-webserver/recipes-httpd/nginx/nginx_1.30.4.bb | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta-webserver/recipes-httpd/nginx/nginx_1.30.4.bb b/meta-webserver/recipes-httpd/nginx/nginx_1.30.4.bb index bef176949f..7b24e05f0d 100644 --- a/meta-webserver/recipes-httpd/nginx/nginx_1.30.4.bb +++ b/meta-webserver/recipes-httpd/nginx/nginx_1.30.4.bb @@ -5,3 +5,6 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=79da1c70d587d3a199af9255ad393f99" SRC_URI[sha256sum] = "4261dc90e9e47c1c4041276e9aaa3d48ebe2e664f728e14fa95ae6c67d57a08b" inherit upstream-version-is-even + +CVE_STATUS[CVE-2026-42055] = "fixed-version: Fixed since 1.30.3" +CVE_STATUS[CVE-2026-48142] = "fixed-version: Fixed since 1.30.3"
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#128284): https://lists.openembedded.org/g/openembedded-devel/message/128284 Mute This Topic: https://lists.openembedded.org/mt/120363301/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
