Index | Thread | Search

From:
Landry Breuil <landry@openbsd.org>
Subject:
[update] www/nginx 1.26.2
To:
ports@openbsd.org, robert@openbsd.org
Date:
Mon, 19 Aug 2024 10:43:59 +0200

Download raw body.

Thread
hi,

simple update:
    *) Security: processing of a specially crafted mp4 file by the
       ngx_http_mp4_module might cause a worker process crash
       (CVE-2024-7347).

builds fine here


? nginx-1.18.0.diff
? nginx-mjs.diff
Index: Makefile
===================================================================
RCS file: /cvs/ports/www/nginx/Makefile,v
diff -u -r1.182 Makefile
--- Makefile	8 Jul 2024 20:42:28 -0000	1.182
+++ Makefile	19 Aug 2024 08:42:29 -0000
@@ -18,15 +18,9 @@
 COMMENT-rtmp=		nginx module for RTMP streaming
 COMMENT-securelink=	nginx HMAC secure link module
 
-VERSION=	1.26.1
+VERSION=	1.26.2
 DISTNAME=	nginx-${VERSION}
 CATEGORIES=	www
-REVISION-geoip2= 0
-REVISION-lua=	0
-REVISION-main=	1
-REVISION-njs=	0
-REVISION-passenger= 0
-REVISION-rtmp=	0
 
 PKGNAME-main=		${DISTNAME}
 PKGNAME-image_filter=	nginx-image_filter-${VERSION}
Index: distinfo
===================================================================
RCS file: /cvs/ports/www/nginx/distinfo,v
diff -u -r1.86 distinfo
--- distinfo	8 Jul 2024 20:42:28 -0000	1.86
+++ distinfo	19 Aug 2024 08:42:29 -0000
@@ -3,7 +3,7 @@
 SHA256 (leev-ngx_http_geoip2_module-3.4.tar.gz) = rXL8IzSNcVozCZSYRTH6ubNgbhYEgyNnN/mkppV9lFI=
 SHA256 (nbs-system-naxsi-d714f1636ea49a9a9f4f06dba14aee003e970834.tar.gz) = 2+IXdBFFfxy6mO5Gc84xh2mUrQa9zl7MDuZjhO8OQg4=
 SHA256 (nginx-1.20.1-chroot.patch) = SS1TB0j8N4/dn5pUTGT6WvkN3aAUuKz5+R0Nt+MG0gk=
-SHA256 (nginx-1.26.1.tar.gz) = +Rh0aP8usVkmC/1Thnwl/44zRyYjes8ie56HDlPT42s=
+SHA256 (nginx-1.26.2.tar.gz) = Yn/ghiCbuoCihToK3Z2VjX673/oahGeleEyaa08D1zg=
 SHA256 (nginx-modules-ngx_http_hmac_secure_link_module-48c4625fbbf51ed5a95bfec23fa444f6c3702e50.tar.gz) = ZXpA2rODS1enIREzlD1OqWwpWcv3NOUXH4eUOgOAmqg=
 SHA256 (nginx-njs-0.8.4.tar.gz) = /hl+JUIEwV6fHfCs83Wt1XvjQWkB7I17hzGdzLSQ+Q0=
 SHA256 (openresty-headers-more-nginx-module-v0.34.tar.gz) = DA0s7SzolbP0XrKyMM2QUIqyp3MpnxU94UpD5EwSCbM=
@@ -14,7 +14,7 @@
 SIZE (leev-ngx_http_geoip2_module-3.4.tar.gz) = 8877
 SIZE (nbs-system-naxsi-d714f1636ea49a9a9f4f06dba14aee003e970834.tar.gz) = 237272
 SIZE (nginx-1.20.1-chroot.patch) = 8783
-SIZE (nginx-1.26.1.tar.gz) = 1244738
+SIZE (nginx-1.26.2.tar.gz) = 1244789
 SIZE (nginx-modules-ngx_http_hmac_secure_link_module-48c4625fbbf51ed5a95bfec23fa444f6c3702e50.tar.gz) = 6159
 SIZE (nginx-njs-0.8.4.tar.gz) = 743910
 SIZE (openresty-headers-more-nginx-module-v0.34.tar.gz) = 28827