Subject: CVS commit: pkgsrc/www/nginx-devel
From: Sergey A. Osokin
Date: 2024-02-16 16:46:36
Message id: 20240216154637.12DCDF9F2@cvs.NetBSD.org

Log Message:
www/nginx-devel: update 1.25.3 -> 1.25.4

<ChangeLog>

*) Security: when using HTTP/3 a segmentation fault might occur in a
   worker process while processing a specially crafted QUIC session
   (CVE-2024-24989, CVE-2024-24990).

*) Bugfix: connections with pending AIO operations might be closed
   prematurely during graceful shutdown of old worker processes.

*) Bugfix: socket leak alerts no longer logged when fast shutdown was
   requested after graceful shutdown of old worker processes.

*) Bugfix: a socket descriptor error, a socket leak, or a segmentation
   fault in a worker process (for SSL proxying) might occur if AIO was
   used in a subrequest.

*) Bugfix: a segmentation fault might occur in a worker process if SSL
   proxying was used along with the "image_filter" directive and errors
   with code 415 were redirected with the "error_page" directive.

*) Bugfixes and improvements in HTTP/3.

</ChangeLog>

Files:
RevisionActionfile
1.120modifypkgsrc/www/nginx-devel/Makefile
1.103modifypkgsrc/www/nginx-devel/distinfo