Merge branch 'release/v1.26.3-1'

Author: root

CHANGELOG.md

@@ -7,6 +7,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [v1.26.3-1] - 2025-02-25
+### Changed
+- [#119] Upgrade nginx Version to v1.26.3
+### Security
+- [#119] Fix [CVE-2025-23419](https://mailman.nginx.org/pipermail/nginx-announce/2025/NYEUJX7NCBCGJGXDFVXNMAAMJDFSE45G.html)
+
 ## [v1.26.2-4] - 2025-02-12
 ### Added
 - Add missing container configuration keys for resource limits and requests (#117)

Dockerfile

@@ -2,7 +2,7 @@ FROM node:lts-alpine as templating
 
 ENV WORKDIR=/template \
     # Used in template to invalidate caches - do not remove. The release script will auto update this line
-    VERSION="1.26.2-4"
+    VERSION="1.26.3-1"
 
 RUN mkdir -p ${WORKDIR}
 WORKDIR ${WORKDIR}
@@ -18,8 +18,8 @@ FROM registry.cloudogu.com/official/base:3.21.0-1 as builder
 LABEL maintainer="hello@cloudogu.com"
 
 # dockerfile is based on https://github.com/dockerfile/nginx and https://github.com/bellycard/docker-loadbalancer
-ENV NGINX_VERSION=1.26.2 \
-    NGINX_TAR_SHA256="627fe086209bba80a2853a0add9d958d7ebbdffa1a8467a5784c9a6b4f03d738" \
+ENV NGINX_VERSION=1.26.3 \
+    NGINX_TAR_SHA256="69ee2b237744036e61d24b836668aad3040dda461fe6f570f1787eab570c75aa" \
     CES_CONFD_VERSION=0.11.0 \
     CES_CONFD_TAR_SHA256="85809a3e9e0b56d58c53f958872809eab1026124a73a06eedfcdeba9ca73ec9a" \
     WARP_MENU_VERSION=2.0.3 \
@@ -68,11 +68,11 @@ RUN wget --progress=bar:force:noscroll -O /tmp/warp.zip https://github.com/cloud
 FROM registry.cloudogu.com/official/base:3.21.0-1
 LABEL maintainer="hello@cloudogu.com" \
       NAME="official/nginx" \
-      VERSION="1.26.2-4"
+      VERSION="1.26.3-1"
 
 ENV CES_MAINTENANCE_MODE=false \
     # Used in template to invalidate caches - do not remove. The release script will auto update this line
-    VERSION="1.26.2-4"
+    VERSION="1.26.3-1"
 
 RUN set -x -o errexit \
  && set -o nounset \

docs/gui/release_notes_de.md

@@ -6,6 +6,10 @@ Technische Details zu einem Release finden Sie im zugehörigen [Changelog](https
 
 ## [Unreleased]
 
+## [v1.26.3-1] - 2025-02-25
+- Sicherheitsupdate: Behebung einer Schwachstelle in der SSL-Sitzungswiederverwendung (CVE-2025-23419).
+- Update auf eine Patch-Version
+
 ## [v1.26.2-4] - 2025-02-12
 - Wir haben nur technische Änderungen vorgenommen. Näheres finden Sie in den Changelogs.
 

docs/gui/release_notes_en.md

@@ -6,6 +6,10 @@ Technical details on a release can be found in the corresponding [Changelog](htt
 
 ## [Unreleased]
 
+## [v1.26.3-1] - 2025-02-25
+- Security update: Fix for a vulnerability in SSL session reuse (CVE-2025-23419).
+- nginx was updated with a patch version.
+
 ## [v1.26.2-4] - 2025-02-12
 - We have only made technical changes. You can find more details in the changelogs.
 - 

dogu.json

@@ -1,6 +1,6 @@
 {
   "Name": "official/nginx",
-  "Version": "1.26.2-4",
+  "Version": "1.26.3-1",
   "DisplayName": "Nginx",
   "Description": "Nginx WebServer.",
   "Logo": "https://cloudogu.com/images/dogus/nginx.png",