gahusb/web-page-backend
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

merge: nginx CVE-2026-9256 대응 (1.30.2 상향)

Browse Source
This commit is contained in:
gahusb
2026-06-01 17:35:40 +09:00
parent d98cd9afbe 5ad0adf719
commit b89e92440a
1 changed files with 5 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
docker-compose.yml
View File

@@ -380,9 +380,11 @@ services:
retries: 3 retries: 3
frontend: frontend:
# CVE-2026-42945 (NGINX Rift, ngx_http_rewrite_module heap overflow, CVSS 9.2) # ngx_http_rewrite_module 힙 오버플로우 2건 대응 (미고정 nginx:alpine → 패치 stable 고정)
# 대응: 미고정 nginx:alpine → 패치 stable 버전 고정 (fix in 1.30.1 / 1.31.0) # - CVE-2026-42945 (NGINX Rift, CVSS 9.2): fixed in 1.30.1+ / 1.31.0+
image: nginx:1.30.1-alpine # - CVE-2026-9256 (nginx-poolslip, 영향 ~1.31.0): fixed in 1.30.2+ / 1.31.1+
# → 둘 다 커버하는 최소 stable = 1.30.2
image: nginx:1.30.2-alpine
container_name: frontend container_name: frontend
restart: unless-stopped restart: unless-stopped
depends_on: depends_on: