From 0eae757f68af963d1574ee3aa7a8a22b9d915ace Mon Sep 17 00:00:00 2001 From: "bhavin.shah" Date: Sat, 4 Jul 2026 04:16:38 +0530 Subject: [PATCH 1/2] Security: Upgrade nginx from 1.26.1 to 1.30.3 to fix CVE-2025-23419 and CVE-2026-42945 --- dependencies.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/dependencies.yml b/dependencies.yml index a3f464ded..c730c545f 100644 --- a/dependencies.yml +++ b/dependencies.yml @@ -79,10 +79,10 @@ dependencies: version: 8.24.0 nginx: artifact: nginx_{{ version }}_linux_x64_{{ fs }}_{{ commit }}.tgz - commit: b1316f75 + commit: 7930a869 fs: cflinuxfs4 cpe: cpe:2.3:a:f5:nginx:{{ version }}:*:*:*:*:*:*:* - version: 1.26.1 + version: 1.30.3 ruby: artifact: ruby/ruby_{{ version }}_linux_x64_{{ fs }}_{{ commit }}.tgz commit: 5fed98f8 From 7e1a2221696ed17cb920e8e6264189865adc472c Mon Sep 17 00:00:00 2001 From: "bhavin.shah" Date: Sat, 4 Jul 2026 04:25:59 +0530 Subject: [PATCH 2/2] Revert "Security: Upgrade nginx from 1.26.1 to 1.30.3 to fix CVE-2025-23419 and CVE-2026-42945" This reverts commit 0eae757f68af963d1574ee3aa7a8a22b9d915ace. --- dependencies.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/dependencies.yml b/dependencies.yml index c730c545f..a3f464ded 100644 --- a/dependencies.yml +++ b/dependencies.yml @@ -79,10 +79,10 @@ dependencies: version: 8.24.0 nginx: artifact: nginx_{{ version }}_linux_x64_{{ fs }}_{{ commit }}.tgz - commit: 7930a869 + commit: b1316f75 fs: cflinuxfs4 cpe: cpe:2.3:a:f5:nginx:{{ version }}:*:*:*:*:*:*:* - version: 1.30.3 + version: 1.26.1 ruby: artifact: ruby/ruby_{{ version }}_linux_x64_{{ fs }}_{{ commit }}.tgz commit: 5fed98f8