diff mbox series

[meta-webserver] nginx: set status for CVE-2026-42055 and CVE-2026-48142

Message ID 20260720174602.18893-1-peter.marko@siemens.com
State Under Review
Headers show
Series [meta-webserver] nginx: set status for CVE-2026-42055 and CVE-2026-48142 | expand

Commit Message

Marko, Peter July 20, 2026, 5:46 p.m. UTC 
From: Peter Marko <peter.marko@siemens.com>

These CVEs were fixed in 1.30.3 but still showing in cve reports.
Fixed version information is e.g. in [1].

[1] https://nginx.org/en/security_advisories.html

Signed-off-by: Peter Marko <peter.marko@siemens.com>
---
 meta-webserver/recipes-httpd/nginx/nginx_1.30.4.bb | 3 +++
 1 file changed, 3 insertions(+)
diff mbox series

Patch

diff --git a/meta-webserver/recipes-httpd/nginx/nginx_1.30.4.bb b/meta-webserver/recipes-httpd/nginx/nginx_1.30.4.bb
index bef176949f..7b24e05f0d 100644
--- a/meta-webserver/recipes-httpd/nginx/nginx_1.30.4.bb
+++ b/meta-webserver/recipes-httpd/nginx/nginx_1.30.4.bb
@@ -5,3 +5,6 @@  LIC_FILES_CHKSUM = "file://LICENSE;md5=79da1c70d587d3a199af9255ad393f99"
 SRC_URI[sha256sum] = "4261dc90e9e47c1c4041276e9aaa3d48ebe2e664f728e14fa95ae6c67d57a08b"
 
 inherit upstream-version-is-even
+
+CVE_STATUS[CVE-2026-42055] = "fixed-version: Fixed since 1.30.3"
+CVE_STATUS[CVE-2026-48142] = "fixed-version: Fixed since 1.30.3"