From 529267f1ecb2a7778ff930b7272c9eba7c156870 Mon Sep 17 00:00:00 2001 From: Chris Rendle-Short Date: Mon, 18 Dec 2023 15:18:44 +1100 Subject: [PATCH] SECURITY: Bump Nginx to 1.25.3 (#763) The updated version contains mitigations against CVE-2023-44487 (HTTP/2 rapid reset attack). Upstream changelog: https://nginx.org/en/CHANGES --- image/base/install-nginx | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/image/base/install-nginx b/image/base/install-nginx index aa24338c0..7697ae545 100755 --- a/image/base/install-nginx +++ b/image/base/install-nginx @@ -2,8 +2,8 @@ set -e # version check: https://nginx.org/en/download.html -VERSION=1.23.3 -HASH="75cb5787dbb9fae18b14810f91cc4343f64ce4c24e27302136fb52498042ba54" +VERSION=1.25.3 +HASH="64c5b975ca287939e828303fa857d22f142b251f17808dfe41733512d9cded86" cd /tmp wget -q https://nginx.org/download/nginx-$VERSION.tar.gz