Ankur Tyagi 24459e3f5c nginx: fix CVE-2026-27654 ...

As per the advisory[1] mentioned in NVD[2], version 1.28.3 contains the fix.
Backport the commit[3] from 1.28.3 changelog matching the description.

[1] https://my.f5.com/manage/s/article/K000160382
[2] https://nvd.nist.gov/vuln/detail/CVE-2026-27654
[3] https://github.com/nginx/nginx/commit/a1d18284e0a173c4ef2b28425535d0f640ae0a82

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>

2026-04-15 14:12:18 +05:30

..

apache2

apache2: upgrade 2.4.65 -> 2.4.66

2025-12-11 08:00:53 +05:30

apache-mod

mod-dnssd: update SRC_URI

2025-09-23 16:30:15 +08:00

cherokee

recipes: drop ${SRCPV} usage

2024-02-09 09:52:12 -08:00

hiawatha

hiawatha: fix SRC_URI

2026-03-24 08:52:12 +05:30

monkey

monkey: ignore CVE-2013-1771

2025-10-30 14:43:36 +08:00

nginx

nginx: fix CVE-2026-27654

2026-04-15 14:12:18 +05:30

sthttpd

sthttpd: Update status for CVE-2017-10671

2024-04-30 11:00:34 -07:00