./www/nostromo, Fast, secure HTTP/1.1 CGI/1.1 SSL IPv4/IPv6 webserver

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]


Branch: CURRENT, Version: 2.1nb2, Package name: nostromo-2.1nb2, Maintainer: ast

Nostromo aka nhttpd is a simple, fast and secure HTTP server. It
runs as a single process, handling connections with select(2). For
CGIs and directory listing it does fork(2). The minimum of HTTP/1.1
and CGI/1.1 are implemented. Also supported are: chroot, setuid,
basic authentication, SSL, IPv6, custom responses, aliases, and
virtual hosts. The access log is written in standard CLF format.


Required to build:
[pkgtools/cwrappers]

Master sites:

Filesize: 53.775 KB

Version history: (Expand)


CVS history: (Expand)


   2023-10-25 00:11:51 by Thomas Klausner | Files touched by this commit (2298)
Log message:
*: bump for openssl 3
   2023-03-26 15:08:36 by Adrian Steinmann | Files touched by this commit (2)
Log message:
www/nostromo: Upgrade to 2.1 from 1.9.9
This fixes a vulnerability where access to files or CGI outside of
the server root directory was possible when the sevrer had the
homedirs option enabled (and not run in a chrooted enviroment).
   2021-10-26 13:31:15 by Nia Alarie | Files touched by this commit (1030)
Log message:
www: Replace RMD160 checksums with BLAKE2s checksums

All checksums have been double-checked against existing RMD160 and
SHA512 hashes

Not committed (merge conflicts):
www/nghttp2/distinfo

Unfetchable distfiles (almost certainly fetched conditionally...):
./www/nginx-devel/distinfo array-var-nginx-module-0.05.tar.gz
./www/nginx-devel/distinfo echo-nginx-module-0.62.tar.gz
./www/nginx-devel/distinfo encrypted-session-nginx-module-0.08.tar.gz
./www/nginx-devel/distinfo form-input-nginx-module-0.12.tar.gz
./www/nginx-devel/distinfo headers-more-nginx-module-0.33.tar.gz
./www/nginx-devel/distinfo lua-nginx-module-0.10.19.tar.gz
./www/nginx-devel/distinfo naxsi-1.3.tar.gz
./www/nginx-devel/distinfo nginx-dav-ext-module-3.0.0.tar.gz
./www/nginx-devel/distinfo nginx-rtmp-module-1.2.2.tar.gz
./www/nginx-devel/distinfo nginx_http_push_module-1.2.10.tar.gz
./www/nginx-devel/distinfo ngx_cache_purge-2.5.1.tar.gz
./www/nginx-devel/distinfo ngx_devel_kit-0.3.1.tar.gz
./www/nginx-devel/distinfo ngx_http_geoip2_module-3.3.tar.gz
./www/nginx-devel/distinfo njs-0.5.0.tar.gz
./www/nginx-devel/distinfo set-misc-nginx-module-0.32.tar.gz
./www/nginx/distinfo array-var-nginx-module-0.05.tar.gz
./www/nginx/distinfo echo-nginx-module-0.62.tar.gz
./www/nginx/distinfo encrypted-session-nginx-module-0.08.tar.gz
./www/nginx/distinfo form-input-nginx-module-0.12.tar.gz
./www/nginx/distinfo headers-more-nginx-module-0.33.tar.gz
./www/nginx/distinfo lua-nginx-module-0.10.19.tar.gz
./www/nginx/distinfo naxsi-1.3.tar.gz
./www/nginx/distinfo nginx-dav-ext-module-3.0.0.tar.gz
./www/nginx/distinfo nginx-rtmp-module-1.2.2.tar.gz
./www/nginx/distinfo nginx_http_push_module-1.2.10.tar.gz
./www/nginx/distinfo ngx_cache_purge-2.5.1.tar.gz
./www/nginx/distinfo ngx_devel_kit-0.3.1.tar.gz
./www/nginx/distinfo ngx_http_geoip2_module-3.3.tar.gz
./www/nginx/distinfo njs-0.5.0.tar.gz
./www/nginx/distinfo set-misc-nginx-module-0.32.tar.gz
   2021-10-07 17:09:00 by Nia Alarie | Files touched by this commit (1033)
Log message:
www: Remove SHA1 hashes for distfiles
   2021-05-14 12:28:21 by Nia Alarie | Files touched by this commit (1)
Log message:
nostromo: fix build.
   2020-12-03 11:45:54 by Adrian Steinmann | Files touched by this commit (1) | Package updated
Log message:
The nostromo pkgsrc package contained patches against upstream
v1.9.6 for CVE-2019-16278 and CVE-2019-16279 which were later
integrated by the nostromo author in version v1.9.7.

A while later, the author also released v1.9.8 and then re-released
it as v1.9.9 containing the security patches (including one more to
catch a potential buffer overflow in libmy, part of nostromo).

This update obviates the need for pkgsrc patches as they are included
in v1.9.9 now.

No functional changes to nostromo between v1.9.6 and v.1.9.9.
   2020-05-10 16:03:02 by Roland Illig | Files touched by this commit (1)
Log message:
www/nostromo: remove outdated SUBST_MESSAGE
   2020-04-27 07:12:10 by Roland Illig | Files touched by this commit (1)
Log message:
www/nostromo: remove no-op filename patterns from SUBST_FILES