Skip to content

images/nginx: bump nginx 1.30.1 → 1.30.2 (security fix)#3

Merged
samudm98 merged 2 commits into
mainfrom
feat/upgrade-nginx-1.30.2
May 25, 2026
Merged

images/nginx: bump nginx 1.30.1 → 1.30.2 (security fix)#3
samudm98 merged 2 commits into
mainfrom
feat/upgrade-nginx-1.30.2

Conversation

@samudm98

Copy link
Copy Markdown

Summary

Upgrades nginx from 1.30.1 → 1.30.2 on the stable 1.30.x branch.

nginx 1.30.2 is a patch release that fixes a buffer overflow vulnerability in ngx_http_rewrite_module. No breaking changes or API differences from 1.30.1.

Changes

File Change
images/nginx/rootfs/build.sh NGINX_VERSION 1.30.1 → 1.30.2, SHA256 updated
images/nginx/TAG v2.3.0v2.4.0
images/nginx/rootfs/patches/ 33 patches renamed *nginx-1.30.1**nginx-1.30.2*

Patch validation

All 34 custom patches were dry-run validated against the nginx 1.30.2 source tree before committing — 0 failures.

Module versions

No module version changes required. All modules are already current and the 1.30.x patch release introduces no API changes:

Module Version
NJS 0.9.9
lua-nginx-module v0.10.29
stream-lua-nginx-module v0.0.17
lua-resty-core v0.1.32
ModSecurity-nginx v1.0.4
headers-more v0.37
ngx_brotli pinned commit
OpenTelemetry pinned commit

Test plan

  • Release images workflow passes on merge to main
  • Published image reports nginx/1.30.2 via nginx -v
  • All dynamic modules load (auth_digest, brotli, geoip2, modsecurity, njs, otel)

🤖 Generated with Claude Code

Samu and others added 2 commits May 25, 2026 13:02
nginx 1.30.2 is the latest stable release and contains a security fix
for a buffer overflow in ngx_http_rewrite_module. This is a patch-level
upgrade on the 1.30.x stable branch.

Changes:
- NGINX_VERSION: 1.30.1 → 1.30.2
- SHA256: updated to 7df3090907fca3cc0e456d6dc00ceb230da74ea88026ceff0affc29dbbd9ac4c
- images/nginx/TAG: v2.3.0 → v2.4.0
- Renamed 33 patches from *nginx-1.30.1* → *nginx-1.30.2*
- Dry-run validated: all 34 patches apply cleanly against nginx 1.30.2

No module version changes required (NJS 0.9.9, lua-nginx v0.10.29,
stream-lua v0.0.17, lua-resty-core v0.1.32 remain current).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
- Fork changes table: add v2.4.0 row (1.30.2 in progress) and mark
  v2.3.0 (1.30.1) as validated
- Versions table: promote 1.30.1 to its own validated row (mercadona-v2.3.0),
  bump the "next" row to nginx 1.30.2

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@samudm98 samudm98 merged commit aac822b into main May 25, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant