Re: [meta-webserver][scarthgap][PATCH] nginx: backport fix for CVE-2026-42533

Hello,

On 7/24/26 18:30, João Marcos Costa wrote:
> This fix was made available with v1.30.4 [1] version of nginx:
> 
> https://github.com/nginx/nginx/commit/b99f804ad38a60ceb07bc429598d5b2c4e70e336
> 
> and the CVE is further described here: https://nvd.nist.gov/vuln/detail/CVE-2026-42533
> 
> [1]: https://github.com/nginx/nginx/releases/tag/release-1.30.4
> 
> Signed-off-by: João Marcos Costa (Schneider Electric) <[email protected]>
> ---
>   .../nginx/files/CVE-2026-42533.patch          | 52 +++++++++++++++++++
>   meta-webserver/recipes-httpd/nginx/nginx.inc  |  1 +
>   2 files changed, 53 insertions(+)
>   create mode 100644 meta-webserver/recipes-httpd/nginx/files/CVE-2026-42533.patch
> 

The fix for this CVE needs more patches than this single one, so please 
disregard this patch for now. Thanks!

-- 
Best regards,
João Marcos Costa