Received: by mail.netbsd.org (Postfix, from userid 605) id A4E7784EB2; Wed, 19 Oct 2022 14:10:26 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id D556084D2C for ; Wed, 19 Oct 2022 14:10:25 +0000 (UTC) X-Virus-Scanned: amavisd-new at netbsd.org Received: from mail.netbsd.org ([IPv6:::1]) by localhost (mail.netbsd.org [IPv6:::1]) (amavisd-new, port 10025) with ESMTP id nDW2Xv2YLz4R for ; Wed, 19 Oct 2022 14:10:25 +0000 (UTC) Received: from cvs.NetBSD.org (ivanova.NetBSD.org [IPv6:2001:470:a085:999:28c:faff:fe03:5984]) by mail.netbsd.org (Postfix) with ESMTP id 2E72784CF9 for ; Wed, 19 Oct 2022 14:10:25 +0000 (UTC) Received: by cvs.NetBSD.org (Postfix, from userid 500) id 2603BFA90; Wed, 19 Oct 2022 14:10:25 +0000 (UTC) Content-Transfer-Encoding: 7bit Content-Type: multipart/mixed; boundary="_----------=_1666188625208010" MIME-Version: 1.0 Date: Wed, 19 Oct 2022 14:10:25 +0000 From: "Sergey A. Osokin" Subject: CVS commit: pkgsrc/www/nginx-devel To: pkgsrc-changes@NetBSD.org Reply-To: osa@netbsd.org X-Mailer: log_accum Message-Id: <20221019141025.2603BFA90@cvs.NetBSD.org> Sender: pkgsrc-changes-owner@NetBSD.org List-Id: Precedence: bulk List-Unsubscribe: This is a multi-part message in MIME format. --_----------=_1666188625208010 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="US-ASCII" Module Name: pkgsrc Committed By: osa Date: Wed Oct 19 14:10:25 UTC 2022 Modified Files: pkgsrc/www/nginx-devel: Makefile distinfo Log Message: www/nginx-devel: security update 1.23.1 -> 1.23.2 *) Security: processing of a specially crafted mp4 file by the ngx_http_mp4_module might cause a worker process crash, worker process memory disclosure, or might have potential other impact (CVE-2022-41741, CVE-2022-41742). *) Feature: the "$proxy_protocol_tlv_..." variables. *) Feature: TLS session tickets encryption keys are now automatically rotated when using shared memory in the "ssl_session_cache" directive. *) Change: the logging level of the "bad record type" SSL errors has been lowered from "crit" to "info". Thanks to Murilo Andrade. *) Change: now when using shared memory in the "ssl_session_cache" directive the "could not allocate new session" errors are logged at the "warn" level instead of "alert" and not more often than once per second. *) Bugfix: nginx/Windows could not be built with OpenSSL 3.0.x. *) Bugfix: in logging of the PROXY protocol errors. Thanks to Sergey Brester. *) Workaround: shared memory from the "ssl_session_cache" directive was spent on sessions using TLS session tickets when using TLSv1.3 with OpenSSL. *) Workaround: timeout specified with the "ssl_session_timeout" directive did not work when using TLSv1.3 with OpenSSL or BoringSSL. To generate a diff of this commit: cvs rdiff -u -r1.90 -r1.91 pkgsrc/www/nginx-devel/Makefile cvs rdiff -u -r1.84 -r1.85 pkgsrc/www/nginx-devel/distinfo Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. --_----------=_1666188625208010 Content-Disposition: inline Content-Length: 2535 Content-Transfer-Encoding: binary Content-Type: text/x-diff; charset=us-ascii Modified files: Index: pkgsrc/www/nginx-devel/Makefile diff -u pkgsrc/www/nginx-devel/Makefile:1.90 pkgsrc/www/nginx-devel/Makefile:1.91 --- pkgsrc/www/nginx-devel/Makefile:1.90 Sun Sep 25 15:10:11 2022 +++ pkgsrc/www/nginx-devel/Makefile Wed Oct 19 14:10:24 2022 @@ -1,7 +1,6 @@ -# $NetBSD: Makefile,v 1.90 2022/09/25 15:10:11 osa Exp $ +# $NetBSD: Makefile,v 1.91 2022/10/19 14:10:24 osa Exp $ -DISTNAME= nginx-1.23.1 -PKGREVISION= 2 +DISTNAME= nginx-1.23.2 PKGNAME= ${DISTNAME:S/-/-devel-/1} CATEGORIES= www MASTER_SITES= https://nginx.org/download/ Index: pkgsrc/www/nginx-devel/distinfo diff -u pkgsrc/www/nginx-devel/distinfo:1.84 pkgsrc/www/nginx-devel/distinfo:1.85 --- pkgsrc/www/nginx-devel/distinfo:1.84 Sun Sep 25 15:10:11 2022 +++ pkgsrc/www/nginx-devel/distinfo Wed Oct 19 14:10:24 2022 @@ -1,4 +1,4 @@ -$NetBSD: distinfo,v 1.84 2022/09/25 15:10:11 osa Exp $ +$NetBSD: distinfo,v 1.85 2022/10/19 14:10:24 osa Exp $ BLAKE2s (array-var-nginx-module-0.05.tar.gz) = 2f9af1e0eb209b7c20aa58cd8ec2afb1eb1cc122c5f4ea169e34131c463c1c26 SHA512 (array-var-nginx-module-0.05.tar.gz) = 7c9fa9b76bc7cd2473ceae6d5ffb8de26993be9293ea967908d6c4550e086affa7016df4c936fb0b79f1142dc0aa1a5f2058d417e6433b5a3497a45d7e866e84 @@ -21,9 +21,9 @@ Size (nbs-system-naxsi-29793dc_GH.tar.gz BLAKE2s (nchan-1.3.0.tar.gz) = fd45ccebd86c9808522dabefb8c202747f428ed04b46225282f344fbfd52f0b2 SHA512 (nchan-1.3.0.tar.gz) = c8cd3eb0b06fc0f17b5a9013d32f5a6d5a8252015b3ac27fbf74a7a1b97bc7ae78c5c8cdd7372e36f5f9d137b59635f007d836746282c85c4a972b6984ba2bef Size (nchan-1.3.0.tar.gz) = 745161 bytes -BLAKE2s (nginx-1.23.1.tar.gz) = c4703fa30a7e41510b2dba8381adc1ec49b8219b4d6856a3267bb7005f433ed2 -SHA512 (nginx-1.23.1.tar.gz) = 62d6b3d5282f4e4cc23adf23b3dc26e06fc4574cae3c18381c406d0cf0f8c68e7dfa86af0c3c1c1485214c548f3b45015eb219e62bfe04e0aaa5edaad82e6706 -Size (nginx-1.23.1.tar.gz) = 1104352 bytes +BLAKE2s (nginx-1.23.2.tar.gz) = d566d6b784d87843372aedf282ba1137bf1a07113ee882892ab05b7775f8c637 +SHA512 (nginx-1.23.2.tar.gz) = 4a5413c0ec251c02fb73dfb4d351045f857a36d45ebb7ae2c29f4a4f320a6543d0a049b147b08318de0b7b0406773c329dbf43bf98bb088f76e506ea532cd8ef +Size (nginx-1.23.2.tar.gz) = 1108243 bytes BLAKE2s (nginx-dav-ext-module-3.0.0.tar.gz) = 8e823ffd605d4fca00eb3ca92a0954ca35fb178397e0b990fea7d47580ee582f SHA512 (nginx-dav-ext-module-3.0.0.tar.gz) = d0193ba90f1ef46c4e470630c4394bdf99d94fd2e3bd8be6cb2ba1655ec59944b1269025f032b79dc2c6dad366e54389ef6a6da2ddeb91d535a4027f2162fbde Size (nginx-dav-ext-module-3.0.0.tar.gz) = 14558 bytes --_----------=_1666188625208010--