svn commit: r347157 - head/www/nginx-devel

[Martin Wilke]

Hi,

Can you please mfc this one and r347158?

thx


On Thu, Mar 6, 2014 at 8:07 AM, Sergey A. Osokin <osa at freebsd.org> wrote:

> Author: osa
> Date: Thu Mar  6 00:07:54 2014
> New Revision: 347157
> URL: http://svnweb.freebsd.org/changeset/ports/347157
> QAT: https://qat.redports.org/buildarchive/r347157/
>
> Log:
>   Update from 1.5.10 to 1.5.11.
>
>   <ChangeLog>
>
>   *) Security: memory corruption might occur in a worker process on 32-bit
>      platforms while handling a specially crafted request by
>      ngx_http_spdy_module, potentially resulting in arbitrary code
>      execution (CVE-2014-0088); the bug had appeared in 1.5.10.
>      Thanks to Lucas Molas, researcher at Programa STIC, Fundación Dr.
>      Manuel Sadosky, Buenos Aires, Argentina.
>
>   *) Feature: the $ssl_session_reused variable.
>
>   *) Bugfix: the "client_max_body_size" directive might not work when
>      reading a request body using chunked transfer encoding; the bug had
>      appeared in 1.3.9.
>      Thanks to Lucas Molas.
>
>   *) Bugfix: a segmentation fault might occur in a worker process when
>      proxying WebSocket connections.
>
>   *) Bugfix: a segmentation fault might occur in a worker process if the
>      ngx_http_spdy_module was used on 32-bit platforms; the bug had
>      appeared in 1.5.10.
>
>   *) Bugfix: the $upstream_status variable might contain wrong data if the
>      "proxy_cache_use_stale" or "proxy_cache_revalidate" directives were
>      used.
>      Thanks to Piotr Sikora.
>
>   *) Bugfix: a segmentation fault might occur in a worker process if
>      errors with code 400 were redirected to a named location using the
>      "error_page" directive.
>
>   *) Bugfix: nginx/Windows could not be built with Visual Studio 2013.
>
>   </ChangeLog>
>
> Modified:
>   head/www/nginx-devel/Makefile
>   head/www/nginx-devel/distinfo
>
> Modified: head/www/nginx-devel/Makefile
>
> ==============================================================================
> --- head/www/nginx-devel/Makefile       Thu Mar  6 00:01:07 2014
>  (r347156)
> +++ head/www/nginx-devel/Makefile       Thu Mar  6 00:07:54 2014
>  (r347157)
> @@ -2,7 +2,7 @@
>  # $FreeBSD$
>
>  PORTNAME=      nginx
> -PORTVERSION=   1.5.10
> +PORTVERSION=   1.5.11
>  CATEGORIES=    www
>  MASTER_SITES=  http://nginx.org/download/
>  MASTER_SITES+= ${MASTER_SITE_LOCAL}
>
> Modified: head/www/nginx-devel/distinfo
>
> ==============================================================================
> --- head/www/nginx-devel/distinfo       Thu Mar  6 00:01:07 2014
>  (r347156)
> +++ head/www/nginx-devel/distinfo       Thu Mar  6 00:07:54 2014
>  (r347157)
> @@ -1,5 +1,5 @@
> -SHA256 (nginx-1.5.10.tar.gz) =
> 1799c3111f71f08db0e1395f4c6f769c863c8e63f763a0b41b192126bc651c9e
> -SIZE (nginx-1.5.10.tar.gz) = 798612
> +SHA256 (nginx-1.5.11.tar.gz) =
> 9ae09b6b7c8917d49e227497ba722cdb275abe4e75e761832c1cf2ad7c6036d1
> +SIZE (nginx-1.5.11.tar.gz) = 799312
>  SHA256 (giom-nginx_accept_language_module-2f69842.tar.gz) =
> fbcdf792160a1eff7b9549aeb5209d6e76716ff8e86b05e42c90b2d2f858e011
>  SIZE (giom-nginx_accept_language_module-2f69842.tar.gz) = 3399
>  SHA256 (nginx-accesskey-2.0.3.tar.gz) =
> d9e94321e78a02de16c57f3e048fd31059fd8116ed03d6de7180f435c52502b1
>
>