Hetvi Thakar 66ad06b673 nginx: Ignore CVE-2026-60005
Analysis:
- CVE-2026-60005 affects the optional ngx_http_slice_module [1].
- The slice module is not built by default and requires the explicit
  --with-http_slice_module configure option, which neither Wrynose nginx
  recipe enables by default [1][2].
- Mark the CVE not applicable only when that option is absent; report it
  as unpatched when a bbappend enables the module.

Reference:
[1] https://github.com/advisories/GHSA-vxcv-h5wj-jxr5
[2] https://nginx.org/en/docs/configure.html

Signed-off-by: Hetvi Thakar <hthakar@cisco.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-10-28 12:31:45 +05:30
2026-08-24 12:59:00 +05:30
2026-10-28 11:01:32 +05:30
2026-10-28 12:31:31 +05:30
2025-04-10 08:31:06 -07:00
2026-05-29 09:29:32 +05:30

Collection of layers for the OE-core universe

Main layer maintainer: Anuj Mittal anuj.mittal@oss.qualcomm.com

This repository is a collection of layers to supplement OE-Core with additional packages, Each layer have designated maintainer Please see the respective READMEs in the layer subdirectories

S
Description
No description provided
Readme
133 MiB
0 Stars 1 Watchers 0 Forks
Languages
BitBake 85.2%
Shell 5.6%
NASL 3.4%
C 2.6%
Roff 1.8%
Other 1.2%