From 37f60b95f0dc197701759cafe3c90d7755cddc08 Mon Sep 17 00:00:00 2001 From: Ankur Tyagi Date: Mon, 30 Mar 2026 23:38:34 +1300 Subject: [PATCH] nginx: upgrade 1.29.1 -> 1.29.2 Changes with nginx 1.29.2 *) Feature: now nginx can be built with AWS-LC. *) Bugfix: now the "ssl_protocols" directive works in a virtual server different from the default server when using OpenSSL 1.1.1 or newer. *) Bugfix: SSL handshake always failed when using TLSv1.3 with OpenSSL and client certificates and resuming a session with a different SNI value; the bug had appeared in 1.27.4. *) Bugfix: the "ignoring stale global SSL error" alerts might appear in logs when using QUIC and the "ssl_reject_handshake" directive; the bug had appeared in 1.29.0. *) Bugfix: in delta-seconds processing in the "Cache-Control" backend response header line. *) Bugfix: an XCLIENT command didn't use the xtext encoding. *) Bugfix: in SSL certificate caching during reconfiguration. https://nginx.org/en/CHANGES Signed-off-by: Ankur Tyagi Signed-off-by: Anuj Mittal --- .../recipes-httpd/nginx/{nginx_1.29.1.bb => nginx_1.29.2.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-webserver/recipes-httpd/nginx/{nginx_1.29.1.bb => nginx_1.29.2.bb} (77%) diff --git a/meta-webserver/recipes-httpd/nginx/nginx_1.29.1.bb b/meta-webserver/recipes-httpd/nginx/nginx_1.29.2.bb similarity index 77% rename from meta-webserver/recipes-httpd/nginx/nginx_1.29.1.bb rename to meta-webserver/recipes-httpd/nginx/nginx_1.29.2.bb index 0282388817..bc98f638fb 100644 --- a/meta-webserver/recipes-httpd/nginx/nginx_1.29.1.bb +++ b/meta-webserver/recipes-httpd/nginx/nginx_1.29.2.bb @@ -6,6 +6,6 @@ DEFAULT_PREFERENCE = "-1" LIC_FILES_CHKSUM = "file://LICENSE;md5=3dc49537b08b14c8b66ad247bb4c4593" -SRC_URI[sha256sum] = "c589f7e7ed801ddbd904afbf3de26ae24eb0cce27c7717a2e94df7fb12d6ad27" +SRC_URI[sha256sum] = "5669e3c29d49bf7f6eb577275b86efe4504cf81af885c58a1ed7d2e7b8492437" SRC_URI += "file://CVE-2026-1642.patch"