diff mbox series

[blacksail,36/60] nginx: upgrade 1.30.5 -> 1.30.6

Message ID	3ee18e1a429a409bfeef263a84dc3012f02aa69e.1793161233.git.ankur.tyagi85@gmail.com
State	New
Headers	show Received: from mail-pj1-f46.google.com (mail-pj1-f46.google.com [209.85.216.46]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.36064.1793161531099155735 for <openembedded-devel@lists.openembedded.org>; Tue, 27 Oct 2026 21:25:31 -0700 ip: 209.85.216.46, mailfrom: ankur.tyagi85@gmail.com) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Peter Marko <peter.marko@siemens.com>, Khem Raj <khem.raj@oss.qualcomm.com>, Ankur Tyagi <ankur.tyagi85@gmail.com> Subject: [blacksail][PATCH 36/60] nginx: upgrade 1.30.5 -> 1.30.6 Date: Wed, 28 Oct 2026 17:23:34 +1300 Message-ID: <3ee18e1a429a409bfeef263a84dc3012f02aa69e.1793161233.git.ankur.tyagi85@gmail.com> In-Reply-To: <cover.1793161233.git.ankur.tyagi85@gmail.com> References: <cover.1793161233.git.ankur.tyagi85@gmail.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="utf-8"
Series	[blacksail,01/60] zeroconf: ignore CVEs \| expand [blacksail,01/60] zeroconf: ignore CVEs [blacksail,02/60] udisks2: patch CVE-2026-7867 [blacksail,03/60] tmate: patch CVE-2026-4751 [blacksail,04/60] tinyproxy: patch CVE-2026-54388 [blacksail,05/60] flatpak: upgrade 1.18.0 -> 1.18.4 [blacksail,06/60] xdg-dbus-proxy: upgrade 0.1.7 -> 0.1.9 [blacksail,07/60] swagger-ui: upgrade 5.33.1 -> 5.33.2 [blacksail,08/60] freerdp3: upgrade 3.32.1 -> 3.32.2 [blacksail,09/60] spitools: upgrade 1.1.0 -> 1.1.1 [blacksail,10/60] libspdm: upgrade 3.8.2 -> 3.8.3 [blacksail,11/60] libmikmod: upgrade 3.3.14 -> 3.3.15 [blacksail,12/60] libxmp: upgrade 4.7.3 -> 4.7.4 [blacksail,13/60] python3-pyjwt: upgrade 2.13.0 -> 2.14.0 [blacksail,14/60] python3-cbor2: upgrade 6.1.4 -> 6.1.5 [blacksail,15/60] samba: ignore CVE-2026-2340 [blacksail,16/60] rapidjson: mark CVE-2024-38517 fixed [blacksail,17/60] psqlodbc: patch CVE-2026-109448 [blacksail,18/60] proftpd: mark CVE-2026-53994 fixed [blacksail,19/60] postfix: ignore CVE-2023-32182 [blacksail,20/60] poppler: patch CVE-2026-102621 [blacksail,21/60] poppler: patch CVE-2026-102620 [blacksail,22/60] opensc: patch CVE-2026-103531 [blacksail,23/60] pjproject: mark CVE-2026-26967 fixed [blacksail,24/60] pjproject: patch CVE-2026-57160 [blacksail,25/60] pjproject: patch CVE-2026-57161 [blacksail,26/60] pjproject: patch CVE-2026-57162 [blacksail,27/60] pjproject: patch CVE-2026-57163 [blacksail,28/60] pjproject: patch CVE-2026-57164 [blacksail,29/60] pjproject: patch CVE-2026-57165 [blacksail,30/60] pjproject: patch CVE-2026-57166 [blacksail,31/60] pjproject: patch CVE-2026-77396 [blacksail,32/60] pjproject: patch CVE-2026-84975 [blacksail,33/60] nmap: patch CVE-2026-58058 [blacksail,34/60] nmap: patch CVE-2026-72712 [blacksail,35/60] netdata: mark CVE-2026-83602 fixed [blacksail,36/60] nginx: upgrade 1.30.5 -> 1.30.6 [blacksail,37/60] nginx: set CVE_STATUS for CVE-2026-95101 and CVE-2026-97629 [blacksail,38/60] mtr: patch CVE-2026-14461 [blacksail,39/60] ncp: ignore CVE-2025-14577 and CVE-2026-35087 [blacksail,40/60] libvncserver: patch CVE-2026-44988 [blacksail,41/60] libvncserver: patch CVE-2026-32854 [blacksail,42/60] libvncserver: patch CVE-2026-32853 [blacksail,43/60] libvncserver: patch CVE-2026-50538 [blacksail,44/60] swagger-ui: upgrade 5.33.2 -> 5.33.3 [blacksail,45/60] nss: remove compromised eMudhra certificates [blacksail,46/60] grpc: update gRPC repo roots [blacksail,47/60] python3-grpcio: update gRPC repo roots [blacksail,48/60] libmspack: patch CVE-2026-110602 [blacksail,49/60] unbound: upgrade 1.26.1 -> 1.26.2 [blacksail,50/60] ntpsec: upgrade 1.2.5 -> 1.2.6 [blacksail,51/60] brotli: upgrade 1.2.0 -> 1.2.1 [blacksail,52/60] php: upgrade 8.5.11 -> 8.5.12 [blacksail,53/60] apache2: upgrade 2.4.68 -> 2.4.69 [blacksail,54/60] 7zip: upgrade 26.03 -> 26.04 [blacksail,55/60] 7zip: upgrade 26.04 -> 26.05 [blacksail,56/60] python3-brotli: upgrade 1.2.0 -> 1.2.1 [blacksail,57/60] python3-oauthlib: patch CVE-2026-49265 [blacksail,58/60] c-ares: backport security fixes from 1.34.9 [blacksail,59/60] mctp: upgrade 2.6 -> 2.6.1 [blacksail,60/60] redis: upgrade 8.10.2 -> 8.10.3

Commit Message

Ankur Tyagi Oct. 28, 2026, 4:23 a.m. UTC

From: Peter Marko <peter.marko@siemens.com>

2026-10-14 nginx-1.30.6 stable and nginx-1.31.7 mainline versions have
been released, with fixes for buffer overflow vulnerability when using
alias with rewrite (CVE-2026-15176), buffer overflow vulnerability when
evaluating string expressions with variables (CVE-2026-93479), request
body injection vulnerability in HTTP/3 (CVE-2026-95101), session forgery
vulnerability when using TLS session ticket key rotation
(CVE-2026-97629), and use-after-free vulnerability when using
ngx_http_ssi_module with AIO (CVE-2026-97205).

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
(cherry picked from commit 6cdd413248db5aed93c6cc138cbfe0f83ed81f56)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
 .../recipes-httpd/nginx/{nginx_1.30.5.bb => nginx_1.30.6.bb}    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta-webserver/recipes-httpd/nginx/{nginx_1.30.5.bb => nginx_1.30.6.bb} (81%)

diff mbox series

Patch

diff --git a/meta-webserver/recipes-httpd/nginx/nginx_1.30.5.bb b/meta-webserver/recipes-httpd/nginx/nginx_1.30.6.bb
similarity index 81%
rename from meta-webserver/recipes-httpd/nginx/nginx_1.30.5.bb
rename to meta-webserver/recipes-httpd/nginx/nginx_1.30.6.bb
index 6b638cdd96..5d699e63ce 100644
--- a/meta-webserver/recipes-httpd/nginx/nginx_1.30.5.bb
+++ b/meta-webserver/recipes-httpd/nginx/nginx_1.30.6.bb
@@ -2,7 +2,7 @@  require nginx.inc
 
 LIC_FILES_CHKSUM = "file://LICENSE;md5=79da1c70d587d3a199af9255ad393f99"
 
-SRC_URI[sha256sum] = "6c20565aa2325cb82216ae804f4a4ff1875179014759a381c42ddc8e11c4906d"
+SRC_URI[sha256sum] = "3cf46f5ed7504d460125866b7bea99fb357f31d887e2e63b35503310e9b8b6c8"
 
 inherit upstream-version-is-even