You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@devlake.apache.org by "bujjibabukatta (via GitHub)" <gi...@apache.org> on 2026/06/18 09:16:31 UTC

[PR] fix(security): update nginx-unprivileged to 1.30.3 [devlake]

bujjibabukatta opened a new pull request, #8940:
URL: https://github.com/apache/devlake/pull/8940

   ## Summary
   Bumps nginx base image in config-ui/Dockerfile from 1.29 to 1.30.3 to fix CVE-2026-49975 (HTTP/2 Bomb DoS vulnerability).
   
   ## Changes
   - `config-ui/Dockerfile`: updated nginx-unprivileged from 1.29 → 1.30.3
   
   ## References
   - CVE: https://www.cvedetails.com/cve/CVE-2026-49975


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@devlake.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] fix(security): update nginx-unprivileged to 1.30.3 [devlake]

Posted by "klesh (via GitHub)" <gi...@apache.org>.

klesh merged PR #8940:
URL: https://github.com/apache/devlake/pull/8940


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@devlake.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org