git: a6440935658f - main - www/nginx-devel: security update from 1.29.0 to 1.29.1
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Fri, 15 Aug 2025 16:12:39 UTC
The branch main has been updated by osa:
URL: https://cgit.FreeBSD.org/ports/commit/?id=a6440935658f86a10be651a8a32f6a259a9dae03
commit a6440935658f86a10be651a8a32f6a259a9dae03
Author: Sergey A. Osokin <osa@FreeBSD.org>
AuthorDate: 2025-08-15 15:56:49 +0000
Commit: Sergey A. Osokin <osa@FreeBSD.org>
CommitDate: 2025-08-15 15:56:49 +0000
www/nginx-devel: security update from 1.29.0 to 1.29.1
*) Security: processing of a specially crafted login/password when using
the "none" authentication method in the ngx_mail_smtp_module might
cause worker process memory disclosure to the authentication server
(CVE-2025-53859).
<ChangeLog>
*) Change: now TLSv1.3 certificate compression is disabled by default.
*) Feature: the "ssl_certificate_compression" directive.
*) Feature: support for 0-RTT in QUIC when using OpenSSL 3.5.1 or newer.
*) Bugfix: the 103 response might be buffered when using HTTP/2 and the
"early_hints" directive.
*) Bugfix: in handling "Host" and ":authority" header lines with equal
values when using HTTP/2; the bug had appeared in 1.17.9.
*) Bugfix: in handling "Host" header lines with a port when using
HTTP/3.
*) Bugfix: nginx could not be built on NetBSD 10.0.
*) Bugfix: in the "none" parameter of the "smtp_auth" directive.
</ChangeLog>
---
www/nginx-devel/Makefile | 6 +-----
www/nginx-devel/distinfo | 8 +++-----
2 files changed, 4 insertions(+), 10 deletions(-)
diff --git a/www/nginx-devel/Makefile b/www/nginx-devel/Makefile
index 319417f48cad..1761547744f6 100644
--- a/www/nginx-devel/Makefile
+++ b/www/nginx-devel/Makefile
@@ -1,15 +1,11 @@
PORTNAME?= nginx
-PORTVERSION= 1.29.0
-PORTREVISION= 5
+PORTVERSION= 1.29.1
CATEGORIES= www
MASTER_SITES= https://nginx.org/download/ \
LOCAL/osa
PKGNAMESUFFIX?= -devel
DISTFILES= ${DISTNAME}${EXTRACT_SUFX}
-PATCH_SITES= https://github.com/nginx/nginx/commit/
-PATCHFILES= 0bb7489cb2fcc60ce24fae2d5581c7441bfa0931.patch:-p1
-
MAINTAINER?= osa@FreeBSD.org
COMMENT?= Robust and small WWW server
WWW= https://nginx.com/
diff --git a/www/nginx-devel/distinfo b/www/nginx-devel/distinfo
index a94ffeeeea56..7e16c9cce58b 100644
--- a/www/nginx-devel/distinfo
+++ b/www/nginx-devel/distinfo
@@ -1,6 +1,6 @@
-TIMESTAMP = 1752290893
-SHA256 (nginx-1.29.0.tar.gz) = 109754dfe8e5169a7a0cf0db6718e7da2db495753308f933f161e525a579a664
-SIZE (nginx-1.29.0.tar.gz) = 1284291
+TIMESTAMP = 1755187799
+SHA256 (nginx-1.29.1.tar.gz) = c589f7e7ed801ddbd904afbf3de26ae24eb0cce27c7717a2e94df7fb12d6ad27
+SIZE (nginx-1.29.1.tar.gz) = 1285529
SHA256 (nginx_mogilefs_module-1.0.4.tar.gz) = 7ac230d30907f013dff8d435a118619ea6168aa3714dba62c6962d350c6295ae
SIZE (nginx_mogilefs_module-1.0.4.tar.gz) = 11208
SHA256 (osokin-ngx_http_redis-0.4.0_GH0.tar.gz) = e5b699243035575cb8ffcd26fc3a8287bcd11ff414e30fd0a52c96729fd22d0d
@@ -141,5 +141,3 @@ SHA256 (openresty-xss-nginx-module-de2d87a_GH0.tar.gz) = f830c9300d751046e2592c7
SIZE (openresty-xss-nginx-module-de2d87a_GH0.tar.gz) = 12779
SHA256 (tokers-zstd-nginx-module-f4ba115_GH0.tar.gz) = 20045e8ac80e2cc9fd3659573153cb1f22d98a653a10fe939a4be0e90160826a
SIZE (tokers-zstd-nginx-module-f4ba115_GH0.tar.gz) = 55848
-SHA256 (0bb7489cb2fcc60ce24fae2d5581c7441bfa0931.patch) = 2b2eea23d23fa70b80cb7cf8468d404e851e9cab023639969c7bb1df328914ab
-SIZE (0bb7489cb2fcc60ce24fae2d5581c7441bfa0931.patch) = 1132