Peter Marko ac8179c9b1 nginx: set CVE_STATUS for CVE-2026-95101 and CVE-2026-97629 ...

These CVEs are fixed in latest release however still show-up in open
CVE reports. Reason is that the DB contains entries:
  {
    "lessThan": "*",
    "status": "affected",
    "version": "1.23.3",
    "versionType": "custom"
  }

Which should mean that the first affected release is 1.23.3, however
without the upper limit it will match all higher releases.
The entry with >= 1.30.0 && < 1.30.6 cannot change the result as it
works by flagging CVEs where at least one version match is present.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
(cherry picked from commit 959f4c8f09)
Tested-by: Mohammad Abdoli <mominux@gmail.com>
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>

2026-10-24 23:30:19 +13:00

..

files

nginx: upgrade 1.28.0 -> 1.28.1

2026-01-04 11:06:41 -08:00

nginx_1.30.6.bb

nginx: set CVE_STATUS for CVE-2026-95101 and CVE-2026-97629

2026-10-24 23:30:19 +13:00

nginx.inc

nginx: set CVE_PRODUCT

2026-01-04 11:34:49 -08:00