nginx: Vulnerable to CVE-2026-42945

[mali1]

Package Name

nginx

Maintainer

Thomas Heil heil@terminal-consulting.de Christian Marangi ansuelsmth@gmail.com

OpenWrt Version

25.12.4

OpenWrt Target/Subtarget

ramips/mt7621, all

Steps to Reproduce

Install nginx-full via apk

Actual Behaviour

Hi,
at the moment the provided package for nginx has the version 1.26.3-r3. Unfortunately it is vulnerable to CVE-2026-42945 and also no longer receives security patches.
The current version would be 1.31 which is not vulnerable https://nginx.org/en/security_advisories.html .
Is there a chance to get this package updated in the official repositories?

Confirmation Checklist

• The package is maintained in this repository.
• I understand that issues related to the base OpenWrt repository or LuCI repository will be closed.
• I am reporting an issue for OpenWrt, not an unsupported fork.

[brada4]

1.31 is NOT stable version.
Why dont you try your hand at 1.30.1 PR. It is just changing checksums, rebasing and removing patches. (also applies to old series öo you dont fall bored)
?

[orangepizza]

made a pr to update it
#29531