Wed Oct 19 14:15:30 2022 UTC ()
www/nginx: security update 1.22.0 -> 1.22.1

<ChangeLog>

*) Security: processing of a specially crafted mp4 file by the
   ngx_http_mp4_module might cause a worker process crash, worker
   process memory disclosure, or might have potential other impact
   (CVE-2022-41741, CVE-2022-41742).

</ChangeLog>


(osa)
diff -r1.124 -r1.125 pkgsrc/www/nginx/Makefile
diff -r1.101 -r1.102 pkgsrc/www/nginx/distinfo
cvs diff -r1.124 -r1.125 pkgsrc/www/nginx/Makefile (expand / switch to unified diff)

--- pkgsrc/www/nginx/Makefile 2022/09/25 15:10:11 1.124
+++ pkgsrc/www/nginx/Makefile 2022/10/19 14:15:30 1.125
@@ -1,17 +1,16 @@ @@ -1,17 +1,16 @@
1# $NetBSD: Makefile,v 1.124 2022/09/25 15:10:11 osa Exp $ 1# $NetBSD: Makefile,v 1.125 2022/10/19 14:15:30 osa Exp $
2 2
3DISTNAME= nginx-1.22.0 3DISTNAME= nginx-1.22.1
4PKGREVISION= 7 
5CATEGORIES= www 4CATEGORIES= www
6MASTER_SITES= http://nginx.org/download/ 5MASTER_SITES= http://nginx.org/download/
7DISTFILES= ${DEFAULT_DISTFILES} 6DISTFILES= ${DEFAULT_DISTFILES}
8 7
9MAINTAINER= osa@NetBSD.org 8MAINTAINER= osa@NetBSD.org
10HOMEPAGE= https://nginx.org/ 9HOMEPAGE= https://nginx.org/
11COMMENT= Lightweight HTTP server and mail proxy server 10COMMENT= Lightweight HTTP server and mail proxy server
12LICENSE= 2-clause-bsd 11LICENSE= 2-clause-bsd
13 12
14CONFLICTS= nginx-devel-[0-9]* 13CONFLICTS= nginx-devel-[0-9]*
15 14
16.include "../../mk/bsd.prefs.mk" 15.include "../../mk/bsd.prefs.mk"
17 16
cvs diff -r1.101 -r1.102 pkgsrc/www/nginx/distinfo (expand / switch to unified diff)

--- pkgsrc/www/nginx/distinfo 2022/09/25 15:10:11 1.101
+++ pkgsrc/www/nginx/distinfo 2022/10/19 14:15:30 1.102
@@ -1,42 +1,42 @@ @@ -1,42 +1,42 @@
1$NetBSD: distinfo,v 1.101 2022/09/25 15:10:11 osa Exp $ 1$NetBSD: distinfo,v 1.102 2022/10/19 14:15:30 osa Exp $
2 2
3BLAKE2s (array-var-nginx-module-0.05.tar.gz) = 2f9af1e0eb209b7c20aa58cd8ec2afb1eb1cc122c5f4ea169e34131c463c1c26 3BLAKE2s (array-var-nginx-module-0.05.tar.gz) = 2f9af1e0eb209b7c20aa58cd8ec2afb1eb1cc122c5f4ea169e34131c463c1c26
4SHA512 (array-var-nginx-module-0.05.tar.gz) = 7c9fa9b76bc7cd2473ceae6d5ffb8de26993be9293ea967908d6c4550e086affa7016df4c936fb0b79f1142dc0aa1a5f2058d417e6433b5a3497a45d7e866e84 4SHA512 (array-var-nginx-module-0.05.tar.gz) = 7c9fa9b76bc7cd2473ceae6d5ffb8de26993be9293ea967908d6c4550e086affa7016df4c936fb0b79f1142dc0aa1a5f2058d417e6433b5a3497a45d7e866e84
5Size (array-var-nginx-module-0.05.tar.gz) = 11280 bytes 5Size (array-var-nginx-module-0.05.tar.gz) = 11280 bytes
6BLAKE2s (echo-nginx-module-0.62.tar.gz) = 8dc4bfc7e905f35b12cd432dca98067b03fd6f2cffd36ffe93158738ab5d32dc 6BLAKE2s (echo-nginx-module-0.62.tar.gz) = 8dc4bfc7e905f35b12cd432dca98067b03fd6f2cffd36ffe93158738ab5d32dc
7SHA512 (echo-nginx-module-0.62.tar.gz) = 240896b1c559a71ca6ca87136d8535edd25b1d65ebb80d46080ad41c09ed1cec9737828f9efe260782294d660cea66cf402f4e75bba3fed26f3a94de0ae2f89b 7SHA512 (echo-nginx-module-0.62.tar.gz) = 240896b1c559a71ca6ca87136d8535edd25b1d65ebb80d46080ad41c09ed1cec9737828f9efe260782294d660cea66cf402f4e75bba3fed26f3a94de0ae2f89b
8Size (echo-nginx-module-0.62.tar.gz) = 53329 bytes 8Size (echo-nginx-module-0.62.tar.gz) = 53329 bytes
9BLAKE2s (encrypted-session-nginx-module-0.09.tar.gz) = 696be087d7aa0144d212f2753423489677e78ba3bb97dbfeb30cadbe08cd7b0a 9BLAKE2s (encrypted-session-nginx-module-0.09.tar.gz) = 696be087d7aa0144d212f2753423489677e78ba3bb97dbfeb30cadbe08cd7b0a
10SHA512 (encrypted-session-nginx-module-0.09.tar.gz) = 399ce2690e85ee27802e8031954a1a3aa3fdc9246e17323a72a298d235931a8dbebdcb121ac8788e074872df0ef5b5a8a3d512b17fbe860b38f696ce42de3655 10SHA512 (encrypted-session-nginx-module-0.09.tar.gz) = 399ce2690e85ee27802e8031954a1a3aa3fdc9246e17323a72a298d235931a8dbebdcb121ac8788e074872df0ef5b5a8a3d512b17fbe860b38f696ce42de3655
11Size (encrypted-session-nginx-module-0.09.tar.gz) = 11847 bytes 11Size (encrypted-session-nginx-module-0.09.tar.gz) = 11847 bytes
12BLAKE2s (form-input-nginx-module-0.12.tar.gz) = b08fc95c3e15bfdc0846e2d1e8157171954f353bd301f4ac4aca56113620e91d 12BLAKE2s (form-input-nginx-module-0.12.tar.gz) = b08fc95c3e15bfdc0846e2d1e8157171954f353bd301f4ac4aca56113620e91d
13SHA512 (form-input-nginx-module-0.12.tar.gz) = 1c5c5ab74156cac09da44a2dcdd84f7c03c9919a23a847e63613e00e3781ecd73d5ad12446174b4fdef9d064257a31570a8dbcccc00d8266f7048e3dcde0362e 13SHA512 (form-input-nginx-module-0.12.tar.gz) = 1c5c5ab74156cac09da44a2dcdd84f7c03c9919a23a847e63613e00e3781ecd73d5ad12446174b4fdef9d064257a31570a8dbcccc00d8266f7048e3dcde0362e
14Size (form-input-nginx-module-0.12.tar.gz) = 11090 bytes 14Size (form-input-nginx-module-0.12.tar.gz) = 11090 bytes
15BLAKE2s (headers-more-nginx-module-0.33.tar.gz) = f5eeb6e12026236b9d4ab78866e33d5a81ed5f86344641407ce3a4f8b3310afd 15BLAKE2s (headers-more-nginx-module-0.33.tar.gz) = f5eeb6e12026236b9d4ab78866e33d5a81ed5f86344641407ce3a4f8b3310afd
16SHA512 (headers-more-nginx-module-0.33.tar.gz) = 13165b1b8d4be281b8bd2404fa48d456013d560bace094c81da08a35dc6a4f025a809a3ae3a42be6bbf67abbcbe41e0730aba06f905220f3baeb01e1192a7d37 16SHA512 (headers-more-nginx-module-0.33.tar.gz) = 13165b1b8d4be281b8bd2404fa48d456013d560bace094c81da08a35dc6a4f025a809a3ae3a42be6bbf67abbcbe41e0730aba06f905220f3baeb01e1192a7d37
17Size (headers-more-nginx-module-0.33.tar.gz) = 28130 bytes 17Size (headers-more-nginx-module-0.33.tar.gz) = 28130 bytes
18BLAKE2s (lua-nginx-module-0.10.22.tar.gz) = 745f552a68bdccc5a3ea869970ebaad7dcf7c850b41124233871ea2168d58761 18BLAKE2s (lua-nginx-module-0.10.22.tar.gz) = 745f552a68bdccc5a3ea869970ebaad7dcf7c850b41124233871ea2168d58761
19SHA512 (lua-nginx-module-0.10.22.tar.gz) = 03e2504e8bc80efaf4af819ed9345285ca42ceecc647eda225e3be3b1e3617435f3949aa8034341955d8cce4826af9d1a8615b914109834f6b6b20e78be35ef9 19SHA512 (lua-nginx-module-0.10.22.tar.gz) = 03e2504e8bc80efaf4af819ed9345285ca42ceecc647eda225e3be3b1e3617435f3949aa8034341955d8cce4826af9d1a8615b914109834f6b6b20e78be35ef9
20Size (lua-nginx-module-0.10.22.tar.gz) = 690975 bytes 20Size (lua-nginx-module-0.10.22.tar.gz) = 690975 bytes
21BLAKE2s (naxsi-1.3.tar.gz) = d3c819d8fbd2a896c56138f028b92fa4b26a51168ff24334f76e3d1d07626927 21BLAKE2s (naxsi-1.3.tar.gz) = d3c819d8fbd2a896c56138f028b92fa4b26a51168ff24334f76e3d1d07626927
22SHA512 (naxsi-1.3.tar.gz) = d7aac69b5eceeb1b0db4741201159ade1e0e7f6f7c3e8c4afa2f8959c6c00c3b5285d5185747c2fb0b1400efda02e96799836315e7e492bb4a059b14acb2142d 22SHA512 (naxsi-1.3.tar.gz) = d7aac69b5eceeb1b0db4741201159ade1e0e7f6f7c3e8c4afa2f8959c6c00c3b5285d5185747c2fb0b1400efda02e96799836315e7e492bb4a059b14acb2142d
23Size (naxsi-1.3.tar.gz) = 235626 bytes 23Size (naxsi-1.3.tar.gz) = 235626 bytes
24BLAKE2s (nchan-1.3.0.tar.gz) = fd45ccebd86c9808522dabefb8c202747f428ed04b46225282f344fbfd52f0b2 24BLAKE2s (nchan-1.3.0.tar.gz) = fd45ccebd86c9808522dabefb8c202747f428ed04b46225282f344fbfd52f0b2
25SHA512 (nchan-1.3.0.tar.gz) = c8cd3eb0b06fc0f17b5a9013d32f5a6d5a8252015b3ac27fbf74a7a1b97bc7ae78c5c8cdd7372e36f5f9d137b59635f007d836746282c85c4a972b6984ba2bef 25SHA512 (nchan-1.3.0.tar.gz) = c8cd3eb0b06fc0f17b5a9013d32f5a6d5a8252015b3ac27fbf74a7a1b97bc7ae78c5c8cdd7372e36f5f9d137b59635f007d836746282c85c4a972b6984ba2bef
26Size (nchan-1.3.0.tar.gz) = 745161 bytes 26Size (nchan-1.3.0.tar.gz) = 745161 bytes
27BLAKE2s (nginx-1.22.0.tar.gz) = 4d1b3995f370925e767fefb1a8744db73f77ef7089479e7f765c136719bda370 27BLAKE2s (nginx-1.22.1.tar.gz) = aada12ce0d9f0b9bf5b1ef0c814855a5cf7199061fa6f9f288eb667cde77ca82
28SHA512 (nginx-1.22.0.tar.gz) = 074782dba9cd5f8f493fbb57e20bda6dc9171814d919a47ee9f825d93f12c9f9d496e25d063c983191b55ad6a236bcef252ce16ecc1d253dc8b23433557559b1 28SHA512 (nginx-1.22.1.tar.gz) = 1d468dcfa9bbd348b8a5dc514ac1428a789e73a92384c039b73a51ce376785f74bf942872c5594a9fcda6bbf44758bd727ce15ac2395f1aa989c507014647dcc
29Size (nginx-1.22.0.tar.gz) = 1073322 bytes 29Size (nginx-1.22.1.tar.gz) = 1073948 bytes
30BLAKE2s (nginx-dav-ext-module-3.0.0.tar.gz) = 8e823ffd605d4fca00eb3ca92a0954ca35fb178397e0b990fea7d47580ee582f 30BLAKE2s (nginx-dav-ext-module-3.0.0.tar.gz) = 8e823ffd605d4fca00eb3ca92a0954ca35fb178397e0b990fea7d47580ee582f
31SHA512 (nginx-dav-ext-module-3.0.0.tar.gz) = d0193ba90f1ef46c4e470630c4394bdf99d94fd2e3bd8be6cb2ba1655ec59944b1269025f032b79dc2c6dad366e54389ef6a6da2ddeb91d535a4027f2162fbde 31SHA512 (nginx-dav-ext-module-3.0.0.tar.gz) = d0193ba90f1ef46c4e470630c4394bdf99d94fd2e3bd8be6cb2ba1655ec59944b1269025f032b79dc2c6dad366e54389ef6a6da2ddeb91d535a4027f2162fbde
32Size (nginx-dav-ext-module-3.0.0.tar.gz) = 14558 bytes 32Size (nginx-dav-ext-module-3.0.0.tar.gz) = 14558 bytes
33BLAKE2s (nginx-rtmp-module-1.2.2.tar.gz) = 5de03b71bb16b4129f1a2a99446f65ef6eeb3fd48bfc925e94fc27e99da3c069 33BLAKE2s (nginx-rtmp-module-1.2.2.tar.gz) = 5de03b71bb16b4129f1a2a99446f65ef6eeb3fd48bfc925e94fc27e99da3c069
34SHA512 (nginx-rtmp-module-1.2.2.tar.gz) = 3f8c803221854c4b1a06aadc6313fbfec74bd7179c0ee51d4365b26ffa8875881a6e1e48f777a9c9efbb9170ab7478a82920d5448a2c2df485503d37bb03ab81 34SHA512 (nginx-rtmp-module-1.2.2.tar.gz) = 3f8c803221854c4b1a06aadc6313fbfec74bd7179c0ee51d4365b26ffa8875881a6e1e48f777a9c9efbb9170ab7478a82920d5448a2c2df485503d37bb03ab81
35Size (nginx-rtmp-module-1.2.2.tar.gz) = 519934 bytes 35Size (nginx-rtmp-module-1.2.2.tar.gz) = 519934 bytes
36BLAKE2s (nginx-upload-module-2.3.0.tar.gz) = cf47b0c86487450473223a5ec793e294b1dd3dcf8a22a02c2a7a0014aff25545 36BLAKE2s (nginx-upload-module-2.3.0.tar.gz) = cf47b0c86487450473223a5ec793e294b1dd3dcf8a22a02c2a7a0014aff25545
37SHA512 (nginx-upload-module-2.3.0.tar.gz) = a0da355888398f86a6b5d065e58c05f9e057589ee785be9f515d77d7a020ae5a7b0656f5af30fb3b026f457326db2e26f4fed29026221ec5fc8156ef8586da25 37SHA512 (nginx-upload-module-2.3.0.tar.gz) = a0da355888398f86a6b5d065e58c05f9e057589ee785be9f515d77d7a020ae5a7b0656f5af30fb3b026f457326db2e26f4fed29026221ec5fc8156ef8586da25
38Size (nginx-upload-module-2.3.0.tar.gz) = 40139 bytes 38Size (nginx-upload-module-2.3.0.tar.gz) = 40139 bytes
39BLAKE2s (ngx_cache_purge-2.5.1.tar.gz) = f89badfa0dbc3c338129291d7c56f978d6db0348d5aaa0d723000881ae9b7b8d 39BLAKE2s (ngx_cache_purge-2.5.1.tar.gz) = f89badfa0dbc3c338129291d7c56f978d6db0348d5aaa0d723000881ae9b7b8d
40SHA512 (ngx_cache_purge-2.5.1.tar.gz) = 3ad37b4a251fb85a9a384f87fea5ca640166e3d7173c6ed9a857b191ae5f2e93819483b5d423fcafe8a10239b571677b342cc2d2d5d62315816f1316d7d5bb76 40SHA512 (ngx_cache_purge-2.5.1.tar.gz) = 3ad37b4a251fb85a9a384f87fea5ca640166e3d7173c6ed9a857b191ae5f2e93819483b5d423fcafe8a10239b571677b342cc2d2d5d62315816f1316d7d5bb76
41Size (ngx_cache_purge-2.5.1.tar.gz) = 16614 bytes 41Size (ngx_cache_purge-2.5.1.tar.gz) = 16614 bytes
42BLAKE2s (ngx_devel_kit-0.3.1.tar.gz) = e059ff3e7706eb444be721b28cc9989568c842db5ffcca7985203ed3368509f4 42BLAKE2s (ngx_devel_kit-0.3.1.tar.gz) = e059ff3e7706eb444be721b28cc9989568c842db5ffcca7985203ed3368509f4