Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

#

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Jump to bottom

Nginx CVE - Support for Nginx 1.27.x to fix the CVEs #13153

Open
ganeshkanyal opened this issue Apr 2, 2025 · 1 comment
Open

Nginx CVE - Support for Nginx 1.27.x to fix the CVEs #13153

ganeshkanyal opened this issue Apr 2, 2025 · 1 comment
Labels
kind/feature Categorizes issue or PR as related to a new feature. needs-priority needs-triage Indicates an issue or PR lacks a `triage/foo` label and requires one.

Comments

@ganeshkanyal
Copy link

Ingress controller to support NGIINX VERSION 1.27.X

CVE-2024-7347 - Affected NGINX Open Source Version from 1.15.3 to 1.26.2 [excluding] and 1.27.0
CVE-2025-23419 - Affected NGINX Open Source Version from 1.11.4 to 1.27.4 [excluding]

CVE reported on Nginx 1.25.x

https://nvd.nist.gov/vuln/detail/cve-2024-7347
https://nvd.nist.gov/vuln/detail/CVE-2025-23419

Latest available Nginx version 1.27.4 - https://github.com/nginx/nginx/releases/tag/release-1.27.4
@ganeshkanyal ganeshkanyal added the kind/feature Categorizes issue or PR as related to a new feature. label Apr 2, 2025
@k8s-ci-robot k8s-ci-robot added the needs-triage Indicates an issue or PR lacks a `triage/foo` label and requires one. label Apr 2, 2025
@k8s-ci-robot
Copy link
Contributor

This issue is currently awaiting triage.

If Ingress contributors determines this is a relevant issue, they will accept it by applying the triage/accepted label and provide further guidance.

The triage/accepted label can be added by org members by writing /triage accepted in a comment.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

# for free to join this conversation on GitHub. Already have an account? # to comment
Assignees
No one assigned
Labels
kind/feature Categorizes issue or PR as related to a new feature. needs-priority needs-triage Indicates an issue or PR lacks a `triage/foo` label and requires one.
Projects
[SIG Network] Ingress NGINX
Status: No status
Milestone
No milestone
Development

No branches or pull requests
2 participants
@ganeshkanyal @k8s-ci-robot