git: 26637e4578ff - 2026Q4 - www/nginx: Security update to 1.30.6
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Thu, 15 Oct 2026 09:31:22 UTC
The branch 2026Q4 has been updated by joneum:
URL: https://cgit.FreeBSD.org/ports/commit/?id=26637e4578ff56655a6c402fc669ba3f40534de9
commit 26637e4578ff56655a6c402fc669ba3f40534de9
Author: Jochen Neumeister <joneum@FreeBSD.org>
AuthorDate: 2026-10-15 09:30:39 +0000
Commit: Jochen Neumeister <joneum@FreeBSD.org>
CommitDate: 2026-10-15 09:30:39 +0000
www/nginx: Security update to 1.30.6
Five security fixes: a buffer overflow with "alias" after "rewrite"
(CVE-2026-15176), a buffer overflow while evaluating string expressions
with variables (CVE-2026-93479), an HTTP/3 frame treated as the request
body (CVE-2026-95101), an uninitialized TLS session ticket key
(CVE-2026-97629), and a use-after-free with AIO and SSI "include virtual"
(CVE-2026-97205).
https://nginx.org/en/CHANGES-1.30
Security: CVE-2026-15176
Security: CVE-2026-93479
Security: CVE-2026-95101
Security: CVE-2026-97629
Security: CVE-2026-97205
Sponsored by: Netzkommune GmbH
---
www/nginx/Makefile | 1 -
www/nginx/distinfo | 6 +++---
www/nginx/version.mk | 2 +-
3 files changed, 4 insertions(+), 5 deletions(-)
diff --git a/www/nginx/Makefile b/www/nginx/Makefile
index debf4ac3fed0..ca20011f9020 100644
--- a/www/nginx/Makefile
+++ b/www/nginx/Makefile
@@ -1,7 +1,6 @@
PORTNAME= nginx
PORTVERSION= ${NGINX_VERSION}
.include "version.mk"
-PORTREVISION= 2
PORTEPOCH= 3
CATEGORIES= www
MASTER_SITES= https://nginx.org/download/ \
diff --git a/www/nginx/distinfo b/www/nginx/distinfo
index 6d426bf5de01..2297a75274d7 100644
--- a/www/nginx/distinfo
+++ b/www/nginx/distinfo
@@ -1,6 +1,6 @@
-TIMESTAMP = 1789538671
-SHA256 (nginx-1.30.5.tar.gz) = 6c20565aa2325cb82216ae804f4a4ff1875179014759a381c42ddc8e11c4906d
-SIZE (nginx-1.30.5.tar.gz) = 1328600
+TIMESTAMP = 1792056580
+SHA256 (nginx-1.30.6.tar.gz) = 3cf46f5ed7504d460125866b7bea99fb357f31d887e2e63b35503310e9b8b6c8
+SIZE (nginx-1.30.6.tar.gz) = 1331698
SHA256 (nginx_mogilefs_module-1.0.4.tar.gz) = 7ac230d30907f013dff8d435a118619ea6168aa3714dba62c6962d350c6295ae
SIZE (nginx_mogilefs_module-1.0.4.tar.gz) = 11208
SHA256 (ngx_http_redis-0.3.9.tar.gz) = 21f87540f0a44b23ffa5df16fb3d788bc90803b255ef14f9c26e3847a6f26f46
diff --git a/www/nginx/version.mk b/www/nginx/version.mk
index a320ad13b589..3c3ac7b0862b 100644
--- a/www/nginx/version.mk
+++ b/www/nginx/version.mk
@@ -1 +1 @@
-NGINX_VERSION= 1.30.5
+NGINX_VERSION= 1.30.6