git: 66b8e4adfe0e - 2026Q3 - www/angie-module-njs: Security update to 1.0.1

The branch 2026Q3 has been updated by joneum:

URL: https://cgit.FreeBSD.org/ports/commit/?id=66b8e4adfe0edfc3344b561345852bf52e0f00cb

commit 66b8e4adfe0edfc3344b561345852bf52e0f00cb
Author:     Sebastian Oswald <sko@rostwald.de>
AuthorDate: 2026-09-18 13:09:15 +0000
Commit:     Jochen Neumeister <joneum@FreeBSD.org>
CommitDate: 2026-09-19 06:29:22 +0000

    www/angie-module-njs: Security update to 1.0.1
    
    This maintenance update of njs fixes three security issues:
    
    - Access control bypass in js_access when an asynchronous request body
      continuation threw an exception or produced an unhandled rejection
      (CVE-2026-18329). Previously, nginx could continue processing the
      request as though the js_access check had succeeded. Affects
      0.9.9-1.0.0. Thanks to Ta Duc Thien.
    
    - Worker process crash when reading Response.statusText after an
      upstream server returned a status line with an empty reason phrase
      (CVE-2026-78222). Affects 0.5.1-1.0.0.
    
    - Heap buffer overflow while parsing namespace prefix lists passed to
      xml.exclusiveC14n() (CVE-2026-78689). Affects 0.7.10-1.0.0. Thanks to
      Vladimir, Vulnerability Research Tech Lead @ Cyera, evilgensec.
    
    PR:             298637
    Changes:        https://github.com/nginx/njs/releases/tag/1.0.1
    Security:       6cf326a2-b38c-11f1-a655-3497f65b111b
    Sponsored by:   Netzkommune GmbH
    
    (cherry picked from commit 2c7dcffde5e2e02b572e2f2d3935d328a2e72478)
---
 www/angie-module-njs/Makefile | 4 ++--
 www/angie/distinfo            | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/www/angie-module-njs/Makefile b/www/angie-module-njs/Makefile
index e11c4b154c6b..ebadbca55992 100644
--- a/www/angie-module-njs/Makefile
+++ b/www/angie-module-njs/Makefile
@@ -1,6 +1,6 @@
 PORTNAME=	angie-module-njs
-MODULE_VERSION=	1.0.0
-MODULE_PORTREVISION=	1
+MODULE_VERSION=	1.0.1
+MODULE_PORTREVISION=	0
 GH_TUPLE=	nginx:njs:${MODULE_VERSION}:module
 
 COMMENT=	Angie NJS dynamic module
diff --git a/www/angie/distinfo b/www/angie/distinfo
index 7754ec025f77..bb9d652908a5 100644
--- a/www/angie/distinfo
+++ b/www/angie/distinfo
@@ -37,8 +37,8 @@ SHA256 (openresty-stream-lua-nginx-module-v0.0.17R4_GH0.tar.gz) = 214927614eef96
 SIZE (openresty-stream-lua-nginx-module-v0.0.17R4_GH0.tar.gz) = 417131
 SHA256 (vision5-ngx_devel_kit-v0.3.4_GH0.tar.gz) = 14a28063294f645d457b1eb10e3c23bbba44398f1c5f021421b58b6f8ab31662
 SIZE (vision5-ngx_devel_kit-v0.3.4_GH0.tar.gz) = 66474
-SHA256 (nginx-njs-1.0.0_GH0.tar.gz) = 56fe6560549cbcb7fb5740534b541bb153250d8772aa16ac18bc30eb0cc498dd
-SIZE (nginx-njs-1.0.0_GH0.tar.gz) = 1011616
+SHA256 (nginx-njs-1.0.1_GH0.tar.gz) = 74372cfcbf11eb0a71bc555e19dc785f61d561d5663d254474da6c8c9e50a6a7
+SIZE (nginx-njs-1.0.1_GH0.tar.gz) = 1003218
 SHA256 (FRiCKLE-ngx_postgres-1.0rc7_GH0.tar.gz) = c942e674a7273ab87caab4dcad626ab54852be192c29b1add50d2cb535e3cbb9
 SIZE (FRiCKLE-ngx_postgres-1.0rc7_GH0.tar.gz) = 40742
 SHA256 (openresty-redis2-nginx-module-v0.15_GH0.tar.gz) = d255571bcfb9939b78099df39cb4d42f174d789aec8c8e5e47b93942b0299438