haproxy-openmanager/version.json at 62b1599354fab1f790ac2a0beca09a66fa579b58 - haproxy-openmanager - Grace Solutions

gsadmin/haproxy-openmanager

mirror of https://github.com/taylanbakircioglu/haproxy-openmanager.git synced 2026-09-24 11:26:29 +00:00

Files

T

taylanbakircioglu 62b1599354 fix(security): pin nginx to 1.30.2-alpine for the poolslip advisory (v1.6.4)

The bundled nginx reverse proxy was flagged for the nginx 'poolslip' advisory
(affected: mainline <=1.31.0; fixed: stable 1.30.2+ / mainline 1.31.1+). The
config-level mitigation (named capture groups instead of $1/$2 in rewrite) does
not apply — the product's nginx config (nginx/nginx.conf and the k8s configmap)
has no rewrite capture-group directives, only prefix locations + proxy_pass. So
the fix is the version: pin nginx:alpine -> nginx:1.30.2-alpine in
docker-compose.yml and k8s/manifests/10-nginx.yaml.

No config/schema/behavior change (nginx only reverse-proxies). Version bumped to
1.6.4 across all layers. Verified in Docker: nginx -v=1.30.2; nginx -t OK on both
the compose and production configmap configs; all proxied routes work through
nginx; no nginx errors.

2026-06-03 11:25:55 +03:00

6 lines

118 B

JSON

Raw Blame History

 {
   "version": "1.6.4",
   "releaseName": "nginx security update (poolslip advisory)",
   "releaseDate": "2026-06-02"
 }