CVS commit: pkgsrc/www/nginx-devel

["Sergey A. Osokin" <osa%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   osa
Date:           Wed Feb  5 18:16:07 UTC 2025

Modified Files:
        pkgsrc/www/nginx-devel: Makefile distinfo

Log Message:
www/nginx-devel: security update 1.27.3 -> 1.27.4

<ChangeLog>

*) Security: insufficient check in virtual servers handling with TLSv1.3
   SNI allowed to reuse SSL sessions in a different virtual server, to
   bypass client SSL certificates verification (CVE-2025-23419).

*) Feature: the "ssl_object_cache_inheritable", "ssl_certificate_cache",
   "proxy_ssl_certificate_cache", "grpc_ssl_certificate_cache", and
   "uwsgi_ssl_certificate_cache" directives.

*) Feature: the "keepalive_min_timeout" directive.

*) Workaround: "gzip filter failed to use preallocated memory" alerts
   appeared in logs when using zlib-ng.

*) Bugfix: nginx could not build libatomic library using the library
   sources if the --with-libatomic=DIR option was used.

*) Bugfix: QUIC connection might not be established when using 0-RTT;
   the bug had appeared in 1.27.1.

*) Bugfix: nginx now ignores QUIC version negotiation packets from
   clients.

*) Bugfix: nginx could not be built on Solaris 10 and earlier with the
   ngx_http_v3_module.

*) Bugfixes in HTTP/3.

</ChangeLog>


To generate a diff of this commit:
cvs rdiff -u -r1.142 -r1.143 pkgsrc/www/nginx-devel/Makefile
cvs rdiff -u -r1.118 -r1.119 pkgsrc/www/nginx-devel/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/nginx-devel/Makefile
diff -u pkgsrc/www/nginx-devel/Makefile:1.142 pkgsrc/www/nginx-devel/Makefile:1.143
--- pkgsrc/www/nginx-devel/Makefile:1.142       Tue Jan 14 17:45:00 2025
+++ pkgsrc/www/nginx-devel/Makefile     Wed Feb  5 18:16:06 2025
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.142 2025/01/14 17:45:00 osa Exp $
+# $NetBSD: Makefile,v 1.143 2025/02/05 18:16:06 osa Exp $
 
-DISTNAME=      nginx-1.27.3
-PKGREVISION=   4
+DISTNAME=      nginx-1.27.4
 PKGNAME=       ${DISTNAME:S/-/-devel-/1}
 CATEGORIES=    www
 MASTER_SITES=  https://nginx.org/download/

Index: pkgsrc/www/nginx-devel/distinfo
diff -u pkgsrc/www/nginx-devel/distinfo:1.118 pkgsrc/www/nginx-devel/distinfo:1.119
--- pkgsrc/www/nginx-devel/distinfo:1.118       Tue Jan 14 17:45:00 2025
+++ pkgsrc/www/nginx-devel/distinfo     Wed Feb  5 18:16:06 2025
@@ -1,4 +1,4 @@
-$NetBSD: distinfo,v 1.118 2025/01/14 17:45:00 osa Exp $
+$NetBSD: distinfo,v 1.119 2025/02/05 18:16:06 osa Exp $
 
 BLAKE2s (1ac658f44afc9240f13e9d6c1c9d5a7816299e8e.patch) = 6c3880dc781886fb1f4190fa9b8f1459246cc5d157aaed3b9a24cc7abaf7c5a1
 SHA512 (1ac658f44afc9240f13e9d6c1c9d5a7816299e8e.patch) = b780bea19736f5db844f11b0b407c159cc6ba7326b50177cefde6f8ee875238d3618e50d29b132a66fe98103cb5656f33895e5989d98d4cdc26cfeaa7f12865f
@@ -27,9 +27,9 @@ Size (naxsi-1.6-src-with-deps.tar.gz) = 
 BLAKE2s (nchan-1.3.7.tar.gz) = 27da0a52c9123186a321a01b02cb004eed0623110aafa6737dd43ceeff766010
 SHA512 (nchan-1.3.7.tar.gz) = 585c6f9107b84354e7f6c587f85cf554dd5c213b1e3baa75e0aee0b28520afb9cffff1812c32e81541a1f25773fc58d1b92ce6bd9d85accc12f37841633eb79b
 Size (nchan-1.3.7.tar.gz) = 665133 bytes
-BLAKE2s (nginx-1.27.3.tar.gz) = ce5c314c3acc202e57f8fad321651e80f5a6f6024f645a55c86ae339d1ebe81b
-SHA512 (nginx-1.27.3.tar.gz) = 5536d41ead0da71b6593cb361fd3da79707362919e6b6e71ec64816b5c2205903af0cd151796c942b32dfca0f8e8e3ffd9dcb3acf993144342ca671330b1a0dc
-Size (nginx-1.27.3.tar.gz) = 1271526 bytes
+BLAKE2s (nginx-1.27.4.tar.gz) = 8ea537b48b7a06082f28fe33fec6f8fd21cb87d62315792a618eabea8080209b
+SHA512 (nginx-1.27.4.tar.gz) = 3785797d3c8f96b930c11a445c68ce88b584af9645f41b8929a779ef1507b74831fa91e9144f3a56599737517cbf1864954d91e312d12cc59e23e4db72c2c716
+Size (nginx-1.27.4.tar.gz) = 1277177 bytes
 BLAKE2s (nginx-dav-ext-module-3.0.0.tar.gz) = 8e823ffd605d4fca00eb3ca92a0954ca35fb178397e0b990fea7d47580ee582f
 SHA512 (nginx-dav-ext-module-3.0.0.tar.gz) = d0193ba90f1ef46c4e470630c4394bdf99d94fd2e3bd8be6cb2ba1655ec59944b1269025f032b79dc2c6dad366e54389ef6a6da2ddeb91d535a4027f2162fbde
 Size (nginx-dav-ext-module-3.0.0.tar.gz) = 14558 bytes