Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Nginx CVE - Support for Nginx 1.27.x to fix the CVEs #13153

Open
ganeshkanyal opened this issue Apr 2, 2025 · 1 comment
Open

Nginx CVE - Support for Nginx 1.27.x to fix the CVEs #13153

ganeshkanyal opened this issue Apr 2, 2025 · 1 comment
Labels
kind/feature Categorizes issue or PR as related to a new feature. needs-priority needs-triage Indicates an issue or PR lacks a `triage/foo` label and requires one.

Comments

@ganeshkanyal
Copy link

Ingress controller to support NGIINX VERSION 1.27.X

CVE-2024-7347 - Affected NGINX Open Source Version from 1.15.3 to 1.26.2 [excluding] and 1.27.0
CVE-2025-23419 - Affected NGINX Open Source Version from 1.11.4 to 1.27.4 [excluding]

CVE reported on Nginx 1.25.x

https://nvd.nist.gov/vuln/detail/cve-2024-7347
https://nvd.nist.gov/vuln/detail/CVE-2025-23419

Latest available Nginx version 1.27.4 - https://github.com/nginx/nginx/releases/tag/release-1.27.4
@ganeshkanyal ganeshkanyal added the kind/feature Categorizes issue or PR as related to a new feature. label Apr 2, 2025
@k8s-ci-robot k8s-ci-robot added the needs-triage Indicates an issue or PR lacks a `triage/foo` label and requires one. label Apr 2, 2025
@k8s-ci-robot
Copy link
Contributor

This issue is currently awaiting triage.

If Ingress contributors determines this is a relevant issue, they will accept it by applying the triage/accepted label and provide further guidance.

The triage/accepted label can be added by org members by writing /triage accepted in a comment.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
kind/feature Categorizes issue or PR as related to a new feature. needs-priority needs-triage Indicates an issue or PR lacks a `triage/foo` label and requires one.
Projects
[SIG Network] Ingress NGINX
Status: No status
Milestone
No milestone
Development

No branches or pull requests
2 participants
@ganeshkanyal @k8s-ci-robot