git: 31f7f2a661ff - main - www/nginx*: Security update to 1.30.5 and 1.31.6
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Wed, 16 Sep 2026 12:25:03 UTC
The branch main has been updated by joneum:
URL: https://cgit.FreeBSD.org/ports/commit/?id=31f7f2a661ff5a885fb067bdfc742df2ffa313aa
commit 31f7f2a661ff5a885fb067bdfc742df2ffa313aa
Author: Jochen Neumeister <joneum@FreeBSD.org>
AuthorDate: 2026-09-16 08:31:12 +0000
Commit: Jochen Neumeister <joneum@FreeBSD.org>
CommitDate: 2026-09-16 12:24:52 +0000
www/nginx*: Security update to 1.30.5 and 1.31.6
Changes with nginx 1.30.5 15 Sep 2026
*) Security: a heap memory buffer overflow might occur in a worker
process under certain configurations when using HTTP/3 with OpenSSL
3.5.0 and earlier (CVE-2026-90439).
Thanks to Banny Liao.
*) Change: now the QUIC transport parameters extension received in an
SSL connection is always ignored.
Changes with nginx 1.31.6 15 Sep 2026
*) Security: a heap memory buffer overflow might occur in a worker
process under certain configurations when using HTTP/3 with OpenSSL
3.5.0 and earlier (CVE-2026-90439).
Thanks to Banny Liao.
*) Change: now the QUIC transport parameters extension received in an
SSL connection is always ignored.
*) Bugfix: binary upgrade refused to work if the control API socket was
specified and the new nginx executable was built with the
ngx_http_perl_module.
*) Bugfix: an error while evaluating a predicate in a predicate location
was ignored and the predicate was treated as false.
*) Bugfix: an error during a nested location lookup might be ignored if
locations given by regular expressions or predicates were configured
at the current level.
*) Bugfix: a segmentation fault might occur while reading configuration
if the "geo" directive with the "ranges" parameter was used and the
corresponding binary base file was corrupted.
Security: CVE-2026-90439
Sponsored by: Netzkommune GmbH
---
www/nginx-acme/Makefile | 2 +-
www/nginx-acme/distinfo | 10 +++++-----
www/nginx-devel/Makefile | 1 -
www/nginx-devel/distinfo | 6 +++---
www/nginx-devel/version.mk | 2 +-
www/nginx-full/Makefile | 1 -
www/nginx-lite/Makefile | 1 -
www/nginx-naxsi/Makefile | 1 -
www/nginx/Makefile | 1 -
www/nginx/distinfo | 6 +++---
www/nginx/version.mk | 2 +-
11 files changed, 14 insertions(+), 19 deletions(-)
diff --git a/www/nginx-acme/Makefile b/www/nginx-acme/Makefile
index f7589c7c8722..0a7078e50486 100644
--- a/www/nginx-acme/Makefile
+++ b/www/nginx-acme/Makefile
@@ -1,6 +1,6 @@
PORTNAME= acme
PORTVERSION= 0.4.1
-PORTREVISION= 3
+PORTREVISION= 4
CATEGORIES= www
MASTER_SITES= https://github.com/nginx/nginx-${PORTNAME}/releases/download/v${PORTVERSION}/:acme \
https://nginx.org/download/:nginx
diff --git a/www/nginx-acme/distinfo b/www/nginx-acme/distinfo
index 8fdd8bab0d65..bdd7cc35fd75 100644
--- a/www/nginx-acme/distinfo
+++ b/www/nginx-acme/distinfo
@@ -1,10 +1,10 @@
-TIMESTAMP = 1788452434
+TIMESTAMP = 1789547160
SHA256 (nginx-acme-0.4.1.tar.gz) = b4f99f971bd0bebc89b2037f3afeaa3281004fe434de558df87d69cab2be1f22
SIZE (nginx-acme-0.4.1.tar.gz) = 111064
-SHA256 (nginx-1.30.4.tar.gz) = 4261dc90e9e47c1c4041276e9aaa3d48ebe2e664f728e14fa95ae6c67d57a08b
-SIZE (nginx-1.30.4.tar.gz) = 1328314
-SHA256 (nginx-1.31.5.tar.gz) = e951607d534836624bd36b6b45a71dbfb055237deae3738da6bbf3270dada279
-SIZE (nginx-1.31.5.tar.gz) = 1371858
+SHA256 (nginx-1.30.5.tar.gz) = 6c20565aa2325cb82216ae804f4a4ff1875179014759a381c42ddc8e11c4906d
+SIZE (nginx-1.30.5.tar.gz) = 1328600
+SHA256 (nginx-1.31.6.tar.gz) = 974ed5298a5e398e008704ed5db284e655fc270c596493dbccada452448fc9f1
+SIZE (nginx-1.31.6.tar.gz) = 1373124
SHA256 (rust/crates/aho-corasick-1.1.4.crate) = ddd31a130427c27518df266943a5308ed92d4b226cc639f5a8f1002816174301
SIZE (rust/crates/aho-corasick-1.1.4.crate) = 184015
SHA256 (rust/crates/allocator-api2-0.3.1.crate) = c583acf993cf4245c4acb0a2cc2ab1f9cc097de73411bb6d3647ff6af2b1013d
diff --git a/www/nginx-devel/Makefile b/www/nginx-devel/Makefile
index 1ba3f1699871..c43863520e42 100644
--- a/www/nginx-devel/Makefile
+++ b/www/nginx-devel/Makefile
@@ -1,7 +1,6 @@
PORTNAME?= nginx
PORTVERSION= ${NGINX_VERSION}
.include "version.mk"
-PORTREVISION= 4
CATEGORIES= www
MASTER_SITES= https://nginx.org/download/
PKGNAMESUFFIX?= -devel
diff --git a/www/nginx-devel/distinfo b/www/nginx-devel/distinfo
index 259707f52b20..4d75c43b576a 100644
--- a/www/nginx-devel/distinfo
+++ b/www/nginx-devel/distinfo
@@ -1,6 +1,6 @@
-TIMESTAMP = 1789412673
-SHA256 (nginx-1.31.5.tar.gz) = e951607d534836624bd36b6b45a71dbfb055237deae3738da6bbf3270dada279
-SIZE (nginx-1.31.5.tar.gz) = 1371858
+TIMESTAMP = 1789538673
+SHA256 (nginx-1.31.6.tar.gz) = 974ed5298a5e398e008704ed5db284e655fc270c596493dbccada452448fc9f1
+SIZE (nginx-1.31.6.tar.gz) = 1373124
SHA256 (nginx_mogilefs_module-1.0.4.tar.gz) = 7ac230d30907f013dff8d435a118619ea6168aa3714dba62c6962d350c6295ae
SIZE (nginx_mogilefs_module-1.0.4.tar.gz) = 11208
SHA256 (passenger-6.1.2.tar.gz) = 94400a52e536cfdd8acf2accb47badb7a67dc309452f1b05600da67343f25bf8
diff --git a/www/nginx-devel/version.mk b/www/nginx-devel/version.mk
index 9937ad4b4883..1c7dd0e6c93d 100644
--- a/www/nginx-devel/version.mk
+++ b/www/nginx-devel/version.mk
@@ -1 +1 @@
-NGINX_VERSION= 1.31.5
+NGINX_VERSION= 1.31.6
diff --git a/www/nginx-full/Makefile b/www/nginx-full/Makefile
index 410be4618d27..60b95d86ad56 100644
--- a/www/nginx-full/Makefile
+++ b/www/nginx-full/Makefile
@@ -1,5 +1,4 @@
PORTNAME= nginx
-PORTREVISION= 2
PKGNAMESUFFIX= -full
MAINTAINER= joneum@FreeBSD.org
diff --git a/www/nginx-lite/Makefile b/www/nginx-lite/Makefile
index 8d69c431ea6c..658aa3ae6b5d 100644
--- a/www/nginx-lite/Makefile
+++ b/www/nginx-lite/Makefile
@@ -1,5 +1,4 @@
PORTNAME= nginx
-PORTREVISION= 0
PKGNAMESUFFIX= -lite
MAINTAINER= joneum@FreeBSD.org
diff --git a/www/nginx-naxsi/Makefile b/www/nginx-naxsi/Makefile
index ee3412933fba..9ca86a078778 100644
--- a/www/nginx-naxsi/Makefile
+++ b/www/nginx-naxsi/Makefile
@@ -1,5 +1,4 @@
PORTNAME= nginx
-PORTREVISION= 0
PKGNAMESUFFIX= -naxsi
MAINTAINER= joneum@FreeBSD.org
diff --git a/www/nginx/Makefile b/www/nginx/Makefile
index e2d71fd80266..ca20011f9020 100644
--- a/www/nginx/Makefile
+++ b/www/nginx/Makefile
@@ -1,7 +1,6 @@
PORTNAME= nginx
PORTVERSION= ${NGINX_VERSION}
.include "version.mk"
-PORTREVISION= 11
PORTEPOCH= 3
CATEGORIES= www
MASTER_SITES= https://nginx.org/download/ \
diff --git a/www/nginx/distinfo b/www/nginx/distinfo
index 379c340274f7..6d426bf5de01 100644
--- a/www/nginx/distinfo
+++ b/www/nginx/distinfo
@@ -1,6 +1,6 @@
-TIMESTAMP = 1789412663
-SHA256 (nginx-1.30.4.tar.gz) = 4261dc90e9e47c1c4041276e9aaa3d48ebe2e664f728e14fa95ae6c67d57a08b
-SIZE (nginx-1.30.4.tar.gz) = 1328314
+TIMESTAMP = 1789538671
+SHA256 (nginx-1.30.5.tar.gz) = 6c20565aa2325cb82216ae804f4a4ff1875179014759a381c42ddc8e11c4906d
+SIZE (nginx-1.30.5.tar.gz) = 1328600
SHA256 (nginx_mogilefs_module-1.0.4.tar.gz) = 7ac230d30907f013dff8d435a118619ea6168aa3714dba62c6962d350c6295ae
SIZE (nginx_mogilefs_module-1.0.4.tar.gz) = 11208
SHA256 (ngx_http_redis-0.3.9.tar.gz) = 21f87540f0a44b23ffa5df16fb3d788bc90803b255ef14f9c26e3847a6f26f46
diff --git a/www/nginx/version.mk b/www/nginx/version.mk
index 43c73eedcbd4..a320ad13b589 100644
--- a/www/nginx/version.mk
+++ b/www/nginx/version.mk
@@ -1 +1 @@
-NGINX_VERSION= 1.30.4
+NGINX_VERSION= 1.30.5