CVS commit: pkgsrc/www/nginx

["Sergey A. Osokin" <osa%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   osa
Date:           Wed Feb  5 18:23:26 UTC 2025

Modified Files:
        pkgsrc/www/nginx: Makefile distinfo

Log Message:
www/nginx: security update from 1.26.2 to 1.26.3

<ChangeLog>

*) Security: insufficient check in virtual servers handling with TLSv1.3
   SNI allowed to reuse SSL sessions in a different virtual server, to
   bypass client SSL certificates verification (CVE-2025-23419).

*) Bugfix: in the ngx_http_mp4_module.
   Thanks to Nils Bars.

*) Workaround: "gzip filter failed to use preallocated memory" alerts
   appeared in logs when using zlib-ng.

*) Bugfix: nginx could not build libatomic library using the library
   sources if the --with-libatomic=DIR option was used.

*) Bugfix: nginx now ignores QUIC version negotiation packets from
   clients.

*) Bugfix: nginx could not be built on Solaris 10 and earlier with the
   ngx_http_v3_module.

*) Bugfixes in HTTP/3.

</ChangeLog>


To generate a diff of this commit:
cvs rdiff -u -r1.171 -r1.172 pkgsrc/www/nginx/Makefile
cvs rdiff -u -r1.129 -r1.130 pkgsrc/www/nginx/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/nginx/Makefile
diff -u pkgsrc/www/nginx/Makefile:1.171 pkgsrc/www/nginx/Makefile:1.172
--- pkgsrc/www/nginx/Makefile:1.171     Tue Jan 14 17:45:00 2025
+++ pkgsrc/www/nginx/Makefile   Wed Feb  5 18:23:26 2025
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.171 2025/01/14 17:45:00 osa Exp $
+# $NetBSD: Makefile,v 1.172 2025/02/05 18:23:26 osa Exp $
 
-DISTNAME=      nginx-1.26.2
-PKGREVISION=   10
+DISTNAME=      nginx-1.26.3
 CATEGORIES=    www
 MASTER_SITES=  https://nginx.org/download/
 DISTFILES=     ${DEFAULT_DISTFILES}

Index: pkgsrc/www/nginx/distinfo
diff -u pkgsrc/www/nginx/distinfo:1.129 pkgsrc/www/nginx/distinfo:1.130
--- pkgsrc/www/nginx/distinfo:1.129     Tue Jan 14 17:45:00 2025
+++ pkgsrc/www/nginx/distinfo   Wed Feb  5 18:23:26 2025
@@ -1,4 +1,4 @@
-$NetBSD: distinfo,v 1.129 2025/01/14 17:45:00 osa Exp $
+$NetBSD: distinfo,v 1.130 2025/02/05 18:23:26 osa Exp $
 
 BLAKE2s (1ac658f44afc9240f13e9d6c1c9d5a7816299e8e.patch) = 6c3880dc781886fb1f4190fa9b8f1459246cc5d157aaed3b9a24cc7abaf7c5a1
 SHA512 (1ac658f44afc9240f13e9d6c1c9d5a7816299e8e.patch) = b780bea19736f5db844f11b0b407c159cc6ba7326b50177cefde6f8ee875238d3618e50d29b132a66fe98103cb5656f33895e5989d98d4cdc26cfeaa7f12865f
@@ -27,9 +27,9 @@ Size (naxsi-1.6-src-with-deps.tar.gz) = 
 BLAKE2s (nchan-1.3.7.tar.gz) = 27da0a52c9123186a321a01b02cb004eed0623110aafa6737dd43ceeff766010
 SHA512 (nchan-1.3.7.tar.gz) = 585c6f9107b84354e7f6c587f85cf554dd5c213b1e3baa75e0aee0b28520afb9cffff1812c32e81541a1f25773fc58d1b92ce6bd9d85accc12f37841633eb79b
 Size (nchan-1.3.7.tar.gz) = 665133 bytes
-BLAKE2s (nginx-1.26.2.tar.gz) = 7f2324c3df5eef71c4e4ee11c0a135d17fb751d354ffd654f0e5ee3251ab20d5
-SHA512 (nginx-1.26.2.tar.gz) = 470efe9ae5d6150ecbf133979c6c36415679a2156499a3b6820a85eb8f3038a8aa06f7b28ddd834cffb0e982f3ddc89e4b1649d536eba4f84019a72d4cfa3539
-Size (nginx-1.26.2.tar.gz) = 1244789 bytes
+BLAKE2s (nginx-1.26.3.tar.gz) = 9c2092ecd456538171132739dd0f7fa13a6cef8ea62d91f0803a125bbae3fc08
+SHA512 (nginx-1.26.3.tar.gz) = cd780e495796bf7413e54a6730d11d55127b0ca6563acf5c75eb2698f62cddbbf5ba61820c57b2316c0bb789fcfd17f98a27a84b525ed50f304d1b1043ffa05d
+Size (nginx-1.26.3.tar.gz) = 1260179 bytes
 BLAKE2s (nginx-dav-ext-module-3.0.0.tar.gz) = 8e823ffd605d4fca00eb3ca92a0954ca35fb178397e0b990fea7d47580ee582f
 SHA512 (nginx-dav-ext-module-3.0.0.tar.gz) = d0193ba90f1ef46c4e470630c4394bdf99d94fd2e3bd8be6cb2ba1655ec59944b1269025f032b79dc2c6dad366e54389ef6a6da2ddeb91d535a4027f2162fbde
 Size (nginx-dav-ext-module-3.0.0.tar.gz) = 14558 bytes