Subject: CVS commit: pkgsrc/www/nginx
From: Sergey A. Osokin
Date: 2024-05-29 22:00:24
Message id: 20240529200024.3563AFA2C@cvs.NetBSD.org

Log Message:
www/nginx: security update from 1.26.0 to 1.26.1

<ChangeLog>

*) Security: when using HTTP/3, processing of a specially crafted QUIC
   session might cause a worker process crash, worker process memory
   disclosure on systems with MTU larger than 4096 bytes, or might have
   potential other impact (CVE-2024-32760, CVE-2024-31079,
   CVE-2024-35200, CVE-2024-34161).
   Thanks to Nils Bars of CISPA.

*) Bugfix: reduced memory consumption for long-lived requests if "gzip",
   "gunzip", "ssi", "sub_filter", or \ 
"grpc_pass" directives are used.

*) Bugfix: nginx could not be built by gcc 14 if the --with-atomic
   option was used.
   Thanks to Edgar Bonet.

*) Bugfix: in HTTP/3.

</ChangeLog>

Files:
RevisionActionfile
1.155modifypkgsrc/www/nginx/Makefile
1.119modifypkgsrc/www/nginx/distinfo