freebsd-ports/www/nginx-devel
Sergey A. Osokin 38d9ad236d www/nginx-devel: security update from 1.26.0 to 1.27.0
Update third-party passenger module to 6.0.22.

<ChangeLog>

    *) Security: when using HTTP/3, processing of a specially crafted QUIC
       session might cause a worker process crash, worker process memory
       disclosure on systems with MTU larger than 4096 bytes, or might have
       potential other impact (CVE-2024-32760, CVE-2024-31079,
       CVE-2024-35200, CVE-2024-34161).
       Thanks to Nils Bars of CISPA.

    *) Feature: variables support in the "proxy_limit_rate",
       "fastcgi_limit_rate", "scgi_limit_rate", and "uwsgi_limit_rate"
       directives.

    *) Bugfix: reduced memory consumption for long-lived requests if "gzip",
       "gunzip", "ssi", "sub_filter", or "grpc_pass" directives are used.

    *) Bugfix: nginx could not be built by gcc 14 if the --with-atomic
       option was used.
       Thanks to Edgar Bonet.

    *) Bugfixes in HTTP/3.

<ChangeLog>
2024-05-29 13:18:49 -04:00
..
files www/nginx-devel: security update from 1.26.0 to 1.27.0 2024-05-29 13:18:49 -04:00
Makefile www/nginx-devel: security update from 1.26.0 to 1.27.0 2024-05-29 13:18:49 -04:00
Makefile.extmod www/nginx-devel: security update from 1.26.0 to 1.27.0 2024-05-29 13:18:49 -04:00
Makefile.options.desc www/nginx-devel: remove third-party opentracing module (+) 2024-02-29 15:52:44 -05:00
distinfo www/nginx-devel: security update from 1.26.0 to 1.27.0 2024-05-29 13:18:49 -04:00
pkg-descr
pkg-plist www/nginx-devel: remove third-party opentracing module (+) 2024-02-29 15:52:44 -05:00