Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 18 Jun 2026 16:00:43 +0000
From:      Jochen Neumeister <joneum@FreeBSD.org>
To:        ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org
Subject:   git: 14b3a97af857 - main - www/nginx: Update to 1.30.3
Message-ID:  <6a34162b.4502c.a03d686@gitrepo.freebsd.org>

index | next in thread | raw e-mail

The branch main has been updated by joneum:

URL: https://cgit.FreeBSD.org/ports/commit/?id=14b3a97af857aa71cbf1b91921e530b34f440c31

commit 14b3a97af857aa71cbf1b91921e530b34f440c31
Author:     Jochen Neumeister <joneum@FreeBSD.org>
AuthorDate: 2026-06-18 15:59:46 +0000
Commit:     Jochen Neumeister <joneum@FreeBSD.org>
CommitDate: 2026-06-18 15:59:46 +0000

    www/nginx: Update to 1.30.3
    
    Changes with nginx 1.30.3                                        17 Jun
    2026
    
        *) Security: a heap memory buffer overflow might occur in a worker
           process when using a configuration with "ignore_invalid_headers
    off;"
           and "large_client_header_buffers" with large configured values
    when
           proxying a specially crafted request to HTTP/2 or gRPC backend,
           allowing an attacker to cause worker process memory corruption or
           segmentation fault in a worker process (CVE-2026-42055).
           Thanks to Mufeed VH of Winfunc Research.
    
        *) Security: a heap memory buffer overread might occur in a worker
           process while handling a specially sent response with decoding
    from
           UTF-8 via the "charset_map" directive, allowing an attacker to
    cause
           a limited disclosure of worker proccess memory or segmentation
    fault
           in a worker process (CVE-2026-48142).
           Thanks to Han Yan of Xiaomi and p4p3r of CYBERONE.
    
    Sponsored by:   Netzkommune GmbH
---
 www/nginx-acme/Makefile | 2 +-
 www/nginx-acme/distinfo | 6 +++---
 www/nginx-full/Makefile | 2 +-
 www/nginx/Makefile      | 2 +-
 www/nginx/distinfo      | 6 +++---
 www/nginx/version.mk    | 2 +-
 6 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/www/nginx-acme/Makefile b/www/nginx-acme/Makefile
index fc6114d11d2f..b0396799a512 100644
--- a/www/nginx-acme/Makefile
+++ b/www/nginx-acme/Makefile
@@ -1,6 +1,6 @@
 PORTNAME=	acme
 PORTVERSION=	0.3.1
-PORTREVISION=	6
+PORTREVISION=	7
 CATEGORIES=	www
 MASTER_SITES=	https://github.com/nginx/nginx-${PORTNAME}/releases/download/v${PORTVERSION}/:acme \
 		https://nginx.org/download/:nginx
diff --git a/www/nginx-acme/distinfo b/www/nginx-acme/distinfo
index 5794c7e363cf..64f0927902a8 100644
--- a/www/nginx-acme/distinfo
+++ b/www/nginx-acme/distinfo
@@ -1,8 +1,8 @@
-TIMESTAMP = 1779465373
+TIMESTAMP = 1781796317
 SHA256 (nginx-acme-0.3.1.tar.gz) = be3d3d10f042930a3bf348731698eadb7003d224a863c53b719ccd28721572c3
 SIZE (nginx-acme-0.3.1.tar.gz) = 99486
-SHA256 (nginx-1.30.2.tar.gz) = 7df3090907fca3cc0e456d6dc00ceb230da74ea88026ceff0affc29dbbd9ac4c
-SIZE (nginx-1.30.2.tar.gz) = 1325247
+SHA256 (nginx-1.30.3.tar.gz) = e5823dc6f45610993def93ebf6cfce68264af4958c77e874b7d20f3709001b8f
+SIZE (nginx-1.30.3.tar.gz) = 1325830
 SHA256 (nginx-1.31.0.tar.gz) = 6d5b00d45393af2e4e7c52a442d2a198f0ccbc7678ed062a46f403edd833ebaa
 SIZE (nginx-1.31.0.tar.gz) = 1337335
 SHA256 (rust/crates/aho-corasick-1.1.4.crate) = ddd31a130427c27518df266943a5308ed92d4b226cc639f5a8f1002816174301
diff --git a/www/nginx-full/Makefile b/www/nginx-full/Makefile
index 947716a0061c..1616fd31d4ee 100644
--- a/www/nginx-full/Makefile
+++ b/www/nginx-full/Makefile
@@ -1,5 +1,5 @@
 PORTNAME=	nginx
-PORTREVISION=	2
+PORTREVISION=	0
 PKGNAMESUFFIX=	-full
 
 MAINTAINER=	joneum@FreeBSD.org
diff --git a/www/nginx/Makefile b/www/nginx/Makefile
index d81fe0d00074..fba1e8e9ce87 100644
--- a/www/nginx/Makefile
+++ b/www/nginx/Makefile
@@ -1,7 +1,7 @@
 PORTNAME=	nginx
 PORTVERSION=	${NGINX_VERSION}
 .include "version.mk"
-PORTREVISION=	3
+PORTREVISION=	0
 PORTEPOCH=	3
 CATEGORIES=	www
 MASTER_SITES=	https://nginx.org/download/ \
diff --git a/www/nginx/distinfo b/www/nginx/distinfo
index ab5314d772fd..7b9098253905 100644
--- a/www/nginx/distinfo
+++ b/www/nginx/distinfo
@@ -1,6 +1,6 @@
-TIMESTAMP = 1779705140
-SHA256 (nginx-1.30.2.tar.gz) = 7df3090907fca3cc0e456d6dc00ceb230da74ea88026ceff0affc29dbbd9ac4c
-SIZE (nginx-1.30.2.tar.gz) = 1325247
+TIMESTAMP = 1781796210
+SHA256 (nginx-1.30.3.tar.gz) = e5823dc6f45610993def93ebf6cfce68264af4958c77e874b7d20f3709001b8f
+SIZE (nginx-1.30.3.tar.gz) = 1325830
 SHA256 (nginx_mogilefs_module-1.0.4.tar.gz) = 7ac230d30907f013dff8d435a118619ea6168aa3714dba62c6962d350c6295ae
 SIZE (nginx_mogilefs_module-1.0.4.tar.gz) = 11208
 SHA256 (ngx_http_redis-0.3.9.tar.gz) = 21f87540f0a44b23ffa5df16fb3d788bc90803b255ef14f9c26e3847a6f26f46
diff --git a/www/nginx/version.mk b/www/nginx/version.mk
index 4ad146d99d54..55882255221d 100644
--- a/www/nginx/version.mk
+++ b/www/nginx/version.mk
@@ -1 +1 @@
-NGINX_VERSION=	1.30.2
+NGINX_VERSION=	1.30.3


home | help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?6a34162b.4502c.a03d686>