nginx: upgrade 1.28.1 -> 1.28.2

Changelog:
- Security: an attacker might inject plain text data in the response
  from an SSL backend (CVE-2026-1642).
- Bugfix: use-after-free might occur after switching to the next gRPC
  or HTTP/2 backend.
- Bugfix: fixed warning when compiling with MSVC 2022 x86.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
This commit is contained in:
Gyorgy Sarvari 2026-02-16 17:28:05 +01:00 committed by Anuj Mittal
parent 24a99d095d
commit 35db95f565
No known key found for this signature in database
GPG Key ID: 4340AEFE69F5085C

View File

@ -2,6 +2,6 @@ require nginx.inc
LIC_FILES_CHKSUM = "file://LICENSE;md5=3dc49537b08b14c8b66ad247bb4c4593"
SRC_URI[sha256sum] = "40e7a0916d121e8905ef50f2a738b675599e42b2224a582dd938603fed15788e"
SRC_URI[sha256sum] = "20e5e0f2c917acfb51120eec2fba9a4ba4e1e10fd28465067cc87a7d81a829a3"
CVE_STATUS[CVE-2025-53859] = "cpe-stable-backport: Fix is included in 1.28.1"