From 6093ccb5476e4c3d8d722e808309cc31e89bc7f9 Mon Sep 17 00:00:00 2001 From: Ankur Tyagi Date: Mon, 7 Sep 2026 22:22:59 +1200 Subject: [PATCH] nginx: mark CVE-2026-1642 patched Debian[1] also identified the commit[2] Details: https://nvd.nist.gov/vuln/detail/cve-2026-1642 [1]https://security-tracker.debian.org/tracker/CVE-2026-1642 [2]https://github.com/nginx/nginx/commit/784fa05025cb8cd0c770f99bc79d2794b9f85b6e Signed-off-by: Ankur Tyagi Signed-off-by: Anuj Mittal --- meta-webserver/recipes-httpd/nginx/nginx_1.28.3.bb | 1 + 1 file changed, 1 insertion(+) diff --git a/meta-webserver/recipes-httpd/nginx/nginx_1.28.3.bb b/meta-webserver/recipes-httpd/nginx/nginx_1.28.3.bb index 9872a6de3b..f797f4a289 100644 --- a/meta-webserver/recipes-httpd/nginx/nginx_1.28.3.bb +++ b/meta-webserver/recipes-httpd/nginx/nginx_1.28.3.bb @@ -5,3 +5,4 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=3dc49537b08b14c8b66ad247bb4c4593" SRC_URI[sha256sum] = "2c96a946bfb0882a21744ed429770a2123ae1828c7c48665092993ddee91a918" CVE_STATUS[CVE-2025-53859] = "cpe-stable-backport: Fix is included in 1.28.1" +CVE_STATUS[CVE-2026-1642] = "fixed-version: fixed since v1.28.2"