CVS commit: pkgsrc/www/nginx-devel

["Sergey A. Osokin" <osa%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   osa
Date:           Wed Oct 19 14:10:25 UTC 2022

Modified Files:
        pkgsrc/www/nginx-devel: Makefile distinfo

Log Message:
www/nginx-devel: security update 1.23.1 -> 1.23.2

<ChangeLog>

*) Security: processing of a specially crafted mp4 file by the
   ngx_http_mp4_module might cause a worker process crash, worker
   process memory disclosure, or might have potential other impact
   (CVE-2022-41741, CVE-2022-41742).

*) Feature: the "$proxy_protocol_tlv_..." variables.

*) Feature: TLS session tickets encryption keys are now automatically
   rotated when using shared memory in the "ssl_session_cache"
   directive.

*) Change: the logging level of the "bad record type" SSL errors has
   been lowered from "crit" to "info".
   Thanks to Murilo Andrade.

*) Change: now when using shared memory in the "ssl_session_cache"
   directive the "could not allocate new session" errors are logged at
   the "warn" level instead of "alert" and not more often than once per
   second.

*) Bugfix: nginx/Windows could not be built with OpenSSL 3.0.x.

*) Bugfix: in logging of the PROXY protocol errors.
   Thanks to Sergey Brester.

*) Workaround: shared memory from the "ssl_session_cache" directive was
   spent on sessions using TLS session tickets when using TLSv1.3 with
   OpenSSL.

*) Workaround: timeout specified with the "ssl_session_timeout"
   directive did not work when using TLSv1.3 with OpenSSL or BoringSSL.

</ChangeLog>


To generate a diff of this commit:
cvs rdiff -u -r1.90 -r1.91 pkgsrc/www/nginx-devel/Makefile
cvs rdiff -u -r1.84 -r1.85 pkgsrc/www/nginx-devel/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/nginx-devel/Makefile
diff -u pkgsrc/www/nginx-devel/Makefile:1.90 pkgsrc/www/nginx-devel/Makefile:1.91
--- pkgsrc/www/nginx-devel/Makefile:1.90        Sun Sep 25 15:10:11 2022
+++ pkgsrc/www/nginx-devel/Makefile     Wed Oct 19 14:10:24 2022
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.90 2022/09/25 15:10:11 osa Exp $
+# $NetBSD: Makefile,v 1.91 2022/10/19 14:10:24 osa Exp $
 
-DISTNAME=      nginx-1.23.1
-PKGREVISION=   2
+DISTNAME=      nginx-1.23.2
 PKGNAME=       ${DISTNAME:S/-/-devel-/1}
 CATEGORIES=    www
 MASTER_SITES=  https://nginx.org/download/

Index: pkgsrc/www/nginx-devel/distinfo
diff -u pkgsrc/www/nginx-devel/distinfo:1.84 pkgsrc/www/nginx-devel/distinfo:1.85
--- pkgsrc/www/nginx-devel/distinfo:1.84        Sun Sep 25 15:10:11 2022
+++ pkgsrc/www/nginx-devel/distinfo     Wed Oct 19 14:10:24 2022
@@ -1,4 +1,4 @@
-$NetBSD: distinfo,v 1.84 2022/09/25 15:10:11 osa Exp $
+$NetBSD: distinfo,v 1.85 2022/10/19 14:10:24 osa Exp $
 
 BLAKE2s (array-var-nginx-module-0.05.tar.gz) = 2f9af1e0eb209b7c20aa58cd8ec2afb1eb1cc122c5f4ea169e34131c463c1c26
 SHA512 (array-var-nginx-module-0.05.tar.gz) = 7c9fa9b76bc7cd2473ceae6d5ffb8de26993be9293ea967908d6c4550e086affa7016df4c936fb0b79f1142dc0aa1a5f2058d417e6433b5a3497a45d7e866e84
@@ -21,9 +21,9 @@ Size (nbs-system-naxsi-29793dc_GH.tar.gz
 BLAKE2s (nchan-1.3.0.tar.gz) = fd45ccebd86c9808522dabefb8c202747f428ed04b46225282f344fbfd52f0b2
 SHA512 (nchan-1.3.0.tar.gz) = c8cd3eb0b06fc0f17b5a9013d32f5a6d5a8252015b3ac27fbf74a7a1b97bc7ae78c5c8cdd7372e36f5f9d137b59635f007d836746282c85c4a972b6984ba2bef
 Size (nchan-1.3.0.tar.gz) = 745161 bytes
-BLAKE2s (nginx-1.23.1.tar.gz) = c4703fa30a7e41510b2dba8381adc1ec49b8219b4d6856a3267bb7005f433ed2
-SHA512 (nginx-1.23.1.tar.gz) = 62d6b3d5282f4e4cc23adf23b3dc26e06fc4574cae3c18381c406d0cf0f8c68e7dfa86af0c3c1c1485214c548f3b45015eb219e62bfe04e0aaa5edaad82e6706
-Size (nginx-1.23.1.tar.gz) = 1104352 bytes
+BLAKE2s (nginx-1.23.2.tar.gz) = d566d6b784d87843372aedf282ba1137bf1a07113ee882892ab05b7775f8c637
+SHA512 (nginx-1.23.2.tar.gz) = 4a5413c0ec251c02fb73dfb4d351045f857a36d45ebb7ae2c29f4a4f320a6543d0a049b147b08318de0b7b0406773c329dbf43bf98bb088f76e506ea532cd8ef
+Size (nginx-1.23.2.tar.gz) = 1108243 bytes
 BLAKE2s (nginx-dav-ext-module-3.0.0.tar.gz) = 8e823ffd605d4fca00eb3ca92a0954ca35fb178397e0b990fea7d47580ee582f
 SHA512 (nginx-dav-ext-module-3.0.0.tar.gz) = d0193ba90f1ef46c4e470630c4394bdf99d94fd2e3bd8be6cb2ba1655ec59944b1269025f032b79dc2c6dad366e54389ef6a6da2ddeb91d535a4027f2162fbde
 Size (nginx-dav-ext-module-3.0.0.tar.gz) = 14558 bytes