From nobody Wed Feb 05 17:13:38 2025 X-Original-To: dev-commits-ports-main@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4Yp6Jf6272z5n3pK; Wed, 05 Feb 2025 17:13:38 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4Yp6Jf5R4lz47Sq; Wed, 05 Feb 2025 17:13:38 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1738775618; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=KAc7zNHna2xIzgW4QagNr1sjKT1ylaIv7AO/zoDuna8=; b=yxlYeCq/f0ObumRCBnY0u0/6th4K8bOBd4Mh7aywK+Pl4THfWM6nnWSHgLQjYPKuApt1/I VGPqi8FhUJtSlUBqZMhmXbmuI1zxKOdeBqmovNuQRZFF2vsQ/oXsu+Jqw+jYxJY4bP925I EdRd3eyO+Yrc4QHLCf6T4DctbO96vOuZwllnrpBb+jHFEg8WFFCCID5eSj0Q2toPjSsN4W FVhCYXKEZF7DWYMtJyQ+fUtIrt+Rd/WaFQKsbAcjdcoTUaYUARxxRTJ0sKUSfrjvpmYMXv u77hk7ufWIXeuV6IeL/PODZAva1f4zcq1s4uAtBKa5gDFuKZK4l1w0TZ4Skhtg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1738775618; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=KAc7zNHna2xIzgW4QagNr1sjKT1ylaIv7AO/zoDuna8=; b=g9lejc65WiihVId+VrV+mMx3pPGVpSLZ9V+sV7NK55sy7Ps8wTOmd72vW1KklcV6v5mZfi dcBu3/3GPjT7Hq0vH8J4e7KcZ7Mc2cty/QGVzc9/Ldr53VSQdVOZcFzW/fl7W2hoZvXloN sKOCZ86kxbbkhFa0C7UiyTWi30yXUOJ9lSgA0k+qXSOMBlbLCuIUTgZtLqbt1hrXqN7p9Q mHm2JbMljdmq9gezQ7z+gyIuRmCriFX6Jx6m/O2k8dbOeC2kYhQgcAQAj4VKEznscam3DE /m2k9wjDg8Z688Qj65XgOnvSa0VMRMQ0OhiUM9BtnTRw7lxlA9tpx/C4iur9wQ== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1738775618; a=rsa-sha256; cv=none; b=mRtKEIxu/u0B7YTeZrrrwA6bTUpS9taSuOwvNe13p0nIOwSBMr9qqS0bWJoSzSEMoxqWgX EMW+ak8XHmHP//cEHG1nddwYwJx+eyrp6Z7idUr+1XZEccsOeZP6dAEEBcT/OjSW5tD4sT AU4SEOMM0M7K0e5xq+r94yzT2UvnnmaFG2xnqHR+dDwKAcAPGphE/+jNCN460kwlSCmzSG GkmMm/Zau2/prXOL0KxUo9eY3SUP2ZhjuXBm+Vkxy5CQ7hlcDtDno50sh/4R1zsyCTk0M3 5nRRRIb8V16t78STrEQLqy1xV9ZJj+uL+luECluF/F7wfodKONbqhO/9Gc/e/w== ARC-Authentication-Results: i=1; mx1.freebsd.org; none Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4Yp6Jf4jtTz11Jj; Wed, 05 Feb 2025 17:13:38 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from gitrepo.freebsd.org ([127.0.1.44]) by gitrepo.freebsd.org (8.18.1/8.18.1) with ESMTP id 515HDcmI086785; Wed, 5 Feb 2025 17:13:38 GMT (envelope-from git@gitrepo.freebsd.org) Received: (from git@localhost) by gitrepo.freebsd.org (8.18.1/8.18.1/Submit) id 515HDcLA086782; Wed, 5 Feb 2025 17:13:38 GMT (envelope-from git) Date: Wed, 5 Feb 2025 17:13:38 GMT Message-Id: <202502051713.515HDcLA086782@gitrepo.freebsd.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org From: "Sergey A. Osokin" Subject: git: 5f85ff777104 - main - www/nginx-devel: security update from 1.27.3 to 1.27.4 List-Id: Commits to the main branch of the FreeBSD ports repository List-Archive: https://lists.freebsd.org/archives/dev-commits-ports-main List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-ports-main@freebsd.org Sender: owner-dev-commits-ports-main@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: osa X-Git-Repository: ports X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: 5f85ff77710430288ed6b79c97817c73e57262c1 Auto-Submitted: auto-generated The branch main has been updated by osa: URL: https://cgit.FreeBSD.org/ports/commit/?id=5f85ff77710430288ed6b79c97817c73e57262c1 commit 5f85ff77710430288ed6b79c97817c73e57262c1 Author: Sergey A. Osokin AuthorDate: 2025-02-05 17:13:16 +0000 Commit: Sergey A. Osokin CommitDate: 2025-02-05 17:13:33 +0000 www/nginx-devel: security update from 1.27.3 to 1.27.4 *) Security: insufficient check in virtual servers handling with TLSv1.3 SNI allowed to reuse SSL sessions in a different virtual server, to bypass client SSL certificates verification (CVE-2025-23419). *) Feature: the "ssl_object_cache_inheritable", "ssl_certificate_cache", "proxy_ssl_certificate_cache", "grpc_ssl_certificate_cache", and "uwsgi_ssl_certificate_cache" directives. *) Feature: the "keepalive_min_timeout" directive. *) Workaround: "gzip filter failed to use preallocated memory" alerts appeared in logs when using zlib-ng. *) Bugfix: nginx could not build libatomic library using the library sources if the --with-libatomic=DIR option was used. *) Bugfix: QUIC connection might not be established when using 0-RTT; the bug had appeared in 1.27.1. *) Bugfix: nginx now ignores QUIC version negotiation packets from clients. *) Bugfix: nginx could not be built on Solaris 10 and earlier with the ngx_http_v3_module. *) Bugfixes in HTTP/3. --- www/nginx-devel/Makefile | 3 +-- www/nginx-devel/distinfo | 6 +++--- 2 files changed, 4 insertions(+), 5 deletions(-) diff --git a/www/nginx-devel/Makefile b/www/nginx-devel/Makefile index 5ebd37de56ca..278df8f9b182 100644 --- a/www/nginx-devel/Makefile +++ b/www/nginx-devel/Makefile @@ -1,6 +1,5 @@ PORTNAME?= nginx -PORTVERSION= 1.27.3 -PORTREVISION= 17 +PORTVERSION= 1.27.4 CATEGORIES= www MASTER_SITES= https://nginx.org/download/ \ LOCAL/osa diff --git a/www/nginx-devel/distinfo b/www/nginx-devel/distinfo index 26605b17c153..9937a8544151 100644 --- a/www/nginx-devel/distinfo +++ b/www/nginx-devel/distinfo @@ -1,6 +1,6 @@ -TIMESTAMP = 1738717656 -SHA256 (nginx-1.27.3.tar.gz) = ba23a9568f442036b61cd0e29bd66a47b90634efa91e0b2cf2d719057a9b7903 -SIZE (nginx-1.27.3.tar.gz) = 1271526 +TIMESTAMP = 1738774691 +SHA256 (nginx-1.27.4.tar.gz) = 294816f879b300e621fa4edd5353dd1ec00badb056399eceb30de7db64b753b2 +SIZE (nginx-1.27.4.tar.gz) = 1277177 SHA256 (nginx_mogilefs_module-1.0.4.tar.gz) = 7ac230d30907f013dff8d435a118619ea6168aa3714dba62c6962d350c6295ae SIZE (nginx_mogilefs_module-1.0.4.tar.gz) = 11208 SHA256 (ngx_http_redis-0.3.9.tar.gz) = 21f87540f0a44b23ffa5df16fb3d788bc90803b255ef14f9c26e3847a6f26f46