Index | Thread | Search

From:
Stuart Henderson <stu@spacehopper.org>
Subject:
Re: [update] www/nginx 1.26.2
To:
Landry Breuil <landry@openbsd.org>
Cc:
ports@openbsd.org, robert@openbsd.org
Date:
Mon, 19 Aug 2024 15:50:43 +0100

Download raw body.

Thread
ok

On 2024/08/19 11:10, Landry Breuil wrote:
> Le Mon, Aug 19, 2024 at 10:43:59AM +0200, Landry Breuil a écrit :
> > hi,
> > 
> > simple update:
> >     *) Security: processing of a specially crafted mp4 file by the
> >        ngx_http_mp4_module might cause a worker process crash
> >        (CVE-2024-7347).
> > 
> > builds fine here
> 
> updated diff after stuart's commit
> 

> ? nginx-1.18.0.diff
> ? nginx-mjs.diff
> Index: Makefile
> ===================================================================
> RCS file: /cvs/ports/www/nginx/Makefile,v
> diff -u -r1.183 Makefile
> --- Makefile	19 Aug 2024 08:50:45 -0000	1.183
> +++ Makefile	19 Aug 2024 09:08:20 -0000
> @@ -19,11 +19,9 @@
>  COMMENT-stream=		nginx TCP/UDP proxy module
>  COMMENT-xslt=		nginx XSLT filter module
>  
> -VERSION=	1.26.1
> +VERSION=	1.26.2
>  DISTNAME=	nginx-${VERSION}
>  CATEGORIES=	www
> -REVISION-main=	2
> -REVISION=	1
>  
>  PKGNAME-main=		${DISTNAME}
>  PKGNAME-cache_purge=	nginx-cache_purge-${VERSION}
> Index: distinfo
> ===================================================================
> RCS file: /cvs/ports/www/nginx/distinfo,v
> diff -u -r1.87 distinfo
> --- distinfo	19 Aug 2024 08:50:45 -0000	1.87
> +++ distinfo	19 Aug 2024 09:08:20 -0000
> @@ -4,7 +4,7 @@
>  SHA256 (leev-ngx_http_geoip2_module-3.4.tar.gz) = rXL8IzSNcVozCZSYRTH6ubNgbhYEgyNnN/mkppV9lFI=
>  SHA256 (nbs-system-naxsi-d714f1636ea49a9a9f4f06dba14aee003e970834.tar.gz) = 2+IXdBFFfxy6mO5Gc84xh2mUrQa9zl7MDuZjhO8OQg4=
>  SHA256 (nginx-1.20.1-chroot.patch) = SS1TB0j8N4/dn5pUTGT6WvkN3aAUuKz5+R0Nt+MG0gk=
> -SHA256 (nginx-1.26.1.tar.gz) = +Rh0aP8usVkmC/1Thnwl/44zRyYjes8ie56HDlPT42s=
> +SHA256 (nginx-1.26.2.tar.gz) = Yn/ghiCbuoCihToK3Z2VjX673/oahGeleEyaa08D1zg=
>  SHA256 (nginx-modules-ngx_http_hmac_secure_link_module-48c4625fbbf51ed5a95bfec23fa444f6c3702e50.tar.gz) = ZXpA2rODS1enIREzlD1OqWwpWcv3NOUXH4eUOgOAmqg=
>  SHA256 (nginx-njs-0.8.4.tar.gz) = /hl+JUIEwV6fHfCs83Wt1XvjQWkB7I17hzGdzLSQ+Q0=
>  SHA256 (openresty-headers-more-nginx-module-v0.34.tar.gz) = DA0s7SzolbP0XrKyMM2QUIqyp3MpnxU94UpD5EwSCbM=
> @@ -16,7 +16,7 @@
>  SIZE (leev-ngx_http_geoip2_module-3.4.tar.gz) = 8877
>  SIZE (nbs-system-naxsi-d714f1636ea49a9a9f4f06dba14aee003e970834.tar.gz) = 237272
>  SIZE (nginx-1.20.1-chroot.patch) = 8783
> -SIZE (nginx-1.26.1.tar.gz) = 1244738
> +SIZE (nginx-1.26.2.tar.gz) = 1244789
>  SIZE (nginx-modules-ngx_http_hmac_secure_link_module-48c4625fbbf51ed5a95bfec23fa444f6c3702e50.tar.gz) = 6159
>  SIZE (nginx-njs-0.8.4.tar.gz) = 743910
>  SIZE (openresty-headers-more-nginx-module-v0.34.tar.gz) = 28827