CVS commit: pkgsrc/www/nginx-devel

"Adam Ciarcinski" <[email protected]>
Newsgroups gmane.os.netbsd.devel.pkgsrc.cvs
Message-ID <[email protected]> 
Module Name:	pkgsrc
Committed By:	adam
Date:		Thu Aug 13 10:57:14 UTC 2026

Modified Files:
	pkgsrc/www/nginx-devel: Makefile distinfo options.mk

Log Message:
nginx-devel: updated to 1.31.3

1.31.3

fixes for buffer overflow vulnerability when using map with regex
(CVE-2026-42533), memory disclosure vulnerability when using
ngx_http_slice_module (CVE-2026-60005), and use-after-free vulnerability when
using ngx_http_ssi_module (CVE-2026-56434)


To generate a diff of this commit:
cvs rdiff -u -r1.168 -r1.169 pkgsrc/www/nginx-devel/Makefile
cvs rdiff -u -r1.132 -r1.133 pkgsrc/www/nginx-devel/distinfo
cvs rdiff -u -r1.49 -r1.50 pkgsrc/www/nginx-devel/options.mk

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.
(unnamed) (text/x-diff, 10.2 KB) 
Modified files:

Index: pkgsrc/www/nginx-devel/Makefile
diff -u pkgsrc/www/nginx-devel/Makefile:1.168 pkgsrc/www/nginx-devel/Makefile:1.169
--- pkgsrc/www/nginx-devel/Makefile:1.168	Thu Jul 16 19:05:41 2026
+++ pkgsrc/www/nginx-devel/Makefile	Thu Aug 13 10:57:13 2026
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.168 2026/07/16 19:05:41 wiz Exp $
+# $NetBSD: Makefile,v 1.169 2026/08/13 10:57:13 adam Exp $
 
-DISTNAME=	nginx-1.29.6
+DISTNAME=	nginx-1.31.3
 PKGNAME=	${DISTNAME:S/-/-devel-/1}
-PKGREVISION=	1
 CATEGORIES=	www
 MASTER_SITES=	https://nginx.org/download/
 DISTFILES=	${DEFAULT_DISTFILES}

Index: pkgsrc/www/nginx-devel/distinfo
diff -u pkgsrc/www/nginx-devel/distinfo:1.132 pkgsrc/www/nginx-devel/distinfo:1.133
--- pkgsrc/www/nginx-devel/distinfo:1.132	Wed Mar 11 08:48:17 2026
+++ pkgsrc/www/nginx-devel/distinfo	Thu Aug 13 10:57:13 2026
@@ -1,35 +1,35 @@
-$NetBSD: distinfo,v 1.132 2026/03/11 08:48:17 adam Exp $
+$NetBSD: distinfo,v 1.133 2026/08/13 10:57:13 adam Exp $
 
 BLAKE2s (array-var-nginx-module-0.06.tar.gz) = fa6ad2a2ce3c3eba3f69287b224e9c01fcaca29a083394ab74f2f655d3e2138b
 SHA512 (array-var-nginx-module-0.06.tar.gz) = bc72158856a1be18a26ee04c6b5b0f0a20bcce688610a493bf31e2a133e7eb12e11f7c18197a09a72b1513f6a08348ee5281b9d5b84cf43603539040ebd23c26
 Size (array-var-nginx-module-0.06.tar.gz) = 12005 bytes
-BLAKE2s (echo-nginx-module-0.63.tar.gz) = 851331998dffdd3dfa9873c2cce5ae81bf7522047c6066fe805b5c74abb62a08
-SHA512 (echo-nginx-module-0.63.tar.gz) = c325ac4e3f3f735739e156d8c7ada503b34475c62533b4830231ff1b42c25cb0c841aae06b3448b589c2ab35da8d211436ed194d6fd062cad925af8152c5e789
-Size (echo-nginx-module-0.63.tar.gz) = 53421 bytes
-BLAKE2s (encrypted-session-nginx-module-0.09.tar.gz) = 696be087d7aa0144d212f2753423489677e78ba3bb97dbfeb30cadbe08cd7b0a
-SHA512 (encrypted-session-nginx-module-0.09.tar.gz) = 399ce2690e85ee27802e8031954a1a3aa3fdc9246e17323a72a298d235931a8dbebdcb121ac8788e074872df0ef5b5a8a3d512b17fbe860b38f696ce42de3655
-Size (encrypted-session-nginx-module-0.09.tar.gz) = 11847 bytes
+BLAKE2s (echo-nginx-module-0.65.tar.gz) = 25aac302728e74f016ce93d9953621c9b0426e76c247e01c12e20e7e8a57f9e9
+SHA512 (echo-nginx-module-0.65.tar.gz) = 5d63abf0d8c2afc79219755f99bcfa9e079265c8f2d035903c91b60e82f17acf21f1a0b0b06e341102f9360e1a775d3ae28ba4912b9d1ecf4ecf52eb3403d4a0
+Size (echo-nginx-module-0.65.tar.gz) = 53607 bytes
+BLAKE2s (encrypted-session-nginx-module-0.10.tar.gz) = 96c5196b04979513f8ee5f8fc0faadbb92c1e7ce3897b3d95a9ba1aaf30ed702
+SHA512 (encrypted-session-nginx-module-0.10.tar.gz) = 0931ca02e9454f55517bfceba1d8c18fee1ce5ad3c44e46593566e028cc6f56ec0099b20b2c8344de6c0bc2f293580b5c600ecddba9f3330f1e2ed22706aee0d
+Size (encrypted-session-nginx-module-0.10.tar.gz) = 11869 bytes
 BLAKE2s (form-input-nginx-module-0.12.tar.gz) = b08fc95c3e15bfdc0846e2d1e8157171954f353bd301f4ac4aca56113620e91d
 SHA512 (form-input-nginx-module-0.12.tar.gz) = 1c5c5ab74156cac09da44a2dcdd84f7c03c9919a23a847e63613e00e3781ecd73d5ad12446174b4fdef9d064257a31570a8dbcccc00d8266f7048e3dcde0362e
 Size (form-input-nginx-module-0.12.tar.gz) = 11090 bytes
 BLAKE2s (google-ngx_brotli-a71f931_GH.tar.gz) = c30d6cbd94abb6f5c1d48275ed964e32f43d9cadd602f95b227a40e62dadbd0d
 SHA512 (google-ngx_brotli-a71f931_GH.tar.gz) = 1cb73a89b53b29d37cbc4d811d5d5cd7b051ec4db98900f593abc8d5b53761b95713212e083334785d9625d4705a78ed476113b244476a9cd5f46dcd9f1177ff
 Size (google-ngx_brotli-a71f931_GH.tar.gz) = 16376 bytes
-BLAKE2s (headers-more-nginx-module-0.39.tar.gz) = 29c90cc57f236c5e9ff69e0a39522ba3ec0d42d23d1592b730f5e1336aa14d64
-SHA512 (headers-more-nginx-module-0.39.tar.gz) = b73099bc1d088afc2ccb13e97ad8dd2210cdb6c8355b348007042f23c4bb3ec239e9521f29cb4e82d09b930d8b6a46ccdc7fb75438bf180342d8c53727971c1e
-Size (headers-more-nginx-module-0.39.tar.gz) = 29616 bytes
-BLAKE2s (lua-nginx-module-0.10.29.tar.gz) = ac29ff6eec96f1ce2038b0590fc63419d3777b0124fd03558f56df44d5fe04aa
-SHA512 (lua-nginx-module-0.10.29.tar.gz) = c2afd85ec7e16089b01c310b0df45d6d87a47438c470efe25eaef455a4d4acbfb16aa74c4cbbfe1091098345f0ae81a8a0315cc6de03ed0c5fbda33164ce7514
-Size (lua-nginx-module-0.10.29.tar.gz) = 892502 bytes
+BLAKE2s (headers-more-nginx-module-0.40.tar.gz) = 442176548c00e6164a23f3432749eed0bef9637a8a1f84d0b383091efe09ab97
+SHA512 (headers-more-nginx-module-0.40.tar.gz) = 76de5c72f9f9d852d281ea89e63457f63569ec536c14ecc94f5721e69afb04f4a2a6e0ac9be71824154de8ae359ac2d6c79146b38f2e03d572a36cb58e08a569
+Size (headers-more-nginx-module-0.40.tar.gz) = 29982 bytes
+BLAKE2s (lua-nginx-module-0.10.31.tar.gz) = 4c0fb00a8217f4cddfe6e8c948559b592ff59363c315fad743468cf9da67f9ba
+SHA512 (lua-nginx-module-0.10.31.tar.gz) = 884321517ebca1054c63f8ff79d0f5ae1d98481bc5ca34e8fe58d000037fb3e3f71dbf42444e4e8d6a3ea7a31029b09f4d62c08c90810a2a599b1117d5add922
+Size (lua-nginx-module-0.10.31.tar.gz) = 921425 bytes
 BLAKE2s (naxsi-1.7-src-with-deps.tar.gz) = 9283a2193c536ba4ef4b28389313623729e4c0c343f62c8a4d683bf377e0fe4a
 SHA512 (naxsi-1.7-src-with-deps.tar.gz) = 78db1b06e4956854af0e31037db4607c4cc3d06316300af026c1e4349475c85e375bf963718c2def505396d30766f008182128060f0cfc4bb37f06896689fdd2
 Size (naxsi-1.7-src-with-deps.tar.gz) = 3366176 bytes
 BLAKE2s (nchan-1.3.7.tar.gz) = 27da0a52c9123186a321a01b02cb004eed0623110aafa6737dd43ceeff766010
 SHA512 (nchan-1.3.7.tar.gz) = 585c6f9107b84354e7f6c587f85cf554dd5c213b1e3baa75e0aee0b28520afb9cffff1812c32e81541a1f25773fc58d1b92ce6bd9d85accc12f37841633eb79b
 Size (nchan-1.3.7.tar.gz) = 665133 bytes
-BLAKE2s (nginx-1.29.6.tar.gz) = bc18cb758d87d90f60097fc2e600328c4273dd6e90b224c2fad3905df9ca9002
-SHA512 (nginx-1.29.6.tar.gz) = 82a3ab42f8606111ea78c5739c04b0033dcc6a0fad29ebb509661b0d0299728f15bb2443fb7ca0c5e08e6a230aa37ee75a599d29856fa8d8803d3905003f09f8
-Size (nginx-1.29.6.tar.gz) = 1320908 bytes
+BLAKE2s (nginx-1.31.3.tar.gz) = 19e3a64b9ee34b3167bd04b29ba15198cad65aed600e1ad23c4d2b2fa72413ac
+SHA512 (nginx-1.31.3.tar.gz) = ecd1acc9e02fc7ae800607850e1f057f84e1ec32525f19e64235dc6f45e5731fdb19dac91a2f83207e9c0de77b6756341ad41ba806e6c7773898797568a1bdfa
+Size (nginx-1.31.3.tar.gz) = 1344885 bytes
 BLAKE2s (nginx-dav-ext-module-3.0.0.tar.gz) = 8e823ffd605d4fca00eb3ca92a0954ca35fb178397e0b990fea7d47580ee582f
 SHA512 (nginx-dav-ext-module-3.0.0.tar.gz) = d0193ba90f1ef46c4e470630c4394bdf99d94fd2e3bd8be6cb2ba1655ec59944b1269025f032b79dc2c6dad366e54389ef6a6da2ddeb91d535a4027f2162fbde
 Size (nginx-dav-ext-module-3.0.0.tar.gz) = 14558 bytes
@@ -54,9 +54,9 @@ Size (njs-0.9.1.tar.gz) = 966480 bytes
 BLAKE2s (osokin-ngx_http_redis-59eb1c3_GH.tar.gz) = 4970dcfa8b4d51dde1e21b326a0c2a9feda370df9b7081e5e6e480bcfad63607
 SHA512 (osokin-ngx_http_redis-59eb1c3_GH.tar.gz) = 63a488f95167dcd3b87cfc687e68e99beb33766c3f91bbf2eea9d7427e806941d445fa969fcdfae741b6566ef0dc9f95c1be53ce398d6f6d80ea31399f383943
 Size (osokin-ngx_http_redis-59eb1c3_GH.tar.gz) = 12696 bytes
-BLAKE2s (set-misc-nginx-module-0.33.tar.gz) = 306eb7a96ce5650c7e97a91e9cdba48d154d10cf6445d31193ffab889054d893
-SHA512 (set-misc-nginx-module-0.33.tar.gz) = 1ff4c947538a5bd5f9d6adcd87b37f2702f5cc90e3342bc08359cbe8f290b705a3a2daa3dedfb1df3ce4bc19478c8fcac07081c4a53a804fc2862d50078278dc
-Size (set-misc-nginx-module-0.33.tar.gz) = 30084 bytes
+BLAKE2s (set-misc-nginx-module-0.34.tar.gz) = 07b3a8c84d960a700050ea9df98815f72a7731164063ac1123ceddea46a56c75
+SHA512 (set-misc-nginx-module-0.34.tar.gz) = dc7a35985735be1134f192024f5b9a1b85ad3c3be30d9a0835966073c11e8ded2ff1cf35b510995a411e0bb859e0575f59e7b98e0c0756e381d12ce99d7fbf55
+Size (set-misc-nginx-module-0.34.tar.gz) = 30251 bytes
 BLAKE2s (stnoonan-spnego-http-auth-nginx-module-c3dbfbd_GH.tar.gz) = 76f527ac4bab43ad329540fd745139bc13a13a49ed5f13dd72423c853643a0e4
 SHA512 (stnoonan-spnego-http-auth-nginx-module-c3dbfbd_GH.tar.gz) = 0042034ef11f034e1d4eb271212bccfeb755f81f71ea5eba48220a1b3cabd5c7631a18efe97caa51f402315775ab5cc24c88eb25f1c4bf77637436a24353119f
 Size (stnoonan-spnego-http-auth-nginx-module-c3dbfbd_GH.tar.gz) = 33090 bytes

Index: pkgsrc/www/nginx-devel/options.mk
diff -u pkgsrc/www/nginx-devel/options.mk:1.49 pkgsrc/www/nginx-devel/options.mk:1.50
--- pkgsrc/www/nginx-devel/options.mk:1.49	Wed Mar  4 05:56:31 2026
+++ pkgsrc/www/nginx-devel/options.mk	Thu Aug 13 10:57:14 2026
@@ -1,4 +1,4 @@
-# $NetBSD: options.mk,v 1.49 2026/03/04 05:56:31 adam Exp $
+# $NetBSD: options.mk,v 1.50 2026/08/13 10:57:14 adam Exp $
 
 CODELOAD_SITE_GITHUB=		https://codeload.github.com/
 
@@ -207,7 +207,7 @@ DISTFILES+=		${NDK_DISTFILE}
 .endif
 
 .if !empty(PKG_OPTIONS:Mnginx-luajit) || make(makesum) || make(mdi) || make(distclean)
-LUA_VERSION=		0.10.29
+LUA_VERSION=		0.10.31
 LUA_DISTNAME=		lua-nginx-module-${LUA_VERSION}
 LUA_DISTFILE=		${LUA_DISTNAME}.tar.gz
 SITES.${LUA_DISTFILE}=	-${MASTER_SITE_GITHUB:=openresty/lua-nginx-module/archive/}v${LUA_VERSION}.tar.gz
@@ -224,7 +224,7 @@ PLIST.lua=		yes
 .endif
 
 .if !empty(PKG_OPTIONS:Mnginx-echo) || make(makesum) || make(mdi) || make(distclean)
-ECHOMOD_VERSION=		0.63
+ECHOMOD_VERSION=		0.65
 ECHOMOD_DISTNAME=		echo-nginx-module-${ECHOMOD_VERSION}
 ECHOMOD_DISTFILE=		${ECHOMOD_DISTNAME}.tar.gz
 SITES.${ECHOMOD_DISTFILE}=	-${MASTER_SITE_GITHUB:=openresty/echo-nginx-module/archive/}v${ECHOMOD_VERSION}.tar.gz
@@ -234,7 +234,7 @@ PLIST.echo=			yes
 .endif
 
 .if !empty(PKG_OPTIONS:Mnginx-set-misc) || make(makesum) || make(mdi) || make(distclean)
-SETMISC_VERSION=		0.33
+SETMISC_VERSION=		0.34
 SETMISC_DISTNAME=		set-misc-nginx-module-${SETMISC_VERSION}
 SETMISC_DISTFILE=		${SETMISC_DISTNAME}.tar.gz
 SITES.${SETMISC_DISTFILE}=	-${MASTER_SITE_GITHUB:=openresty/set-misc-nginx-module/archive/}v${SETMISC_VERSION}.tar.gz
@@ -265,7 +265,7 @@ PLIST.arrayvar=			yes
 .endif
 
 .if !empty(PKG_OPTIONS:Mnginx-encrypted-session) || make(makesum) || make(mdi) || make(distclean)
-ENCSESS_VERSION=		0.09
+ENCSESS_VERSION=		0.10
 ENCSESS_DISTNAME=		encrypted-session-nginx-module-${ENCSESS_VERSION}
 ENCSESS_DISTFILE=		${ENCSESS_DISTNAME}.tar.gz
 SITES.${ENCSESS_DISTFILE}=	-${MASTER_SITE_GITHUB:=openresty/encrypted-session-nginx-module/archive/}v${ENCSESS_VERSION}.tar.gz
@@ -285,7 +285,7 @@ PLIST.forminput=		yes
 .endif
 
 .if !empty(PKG_OPTIONS:Mnginx-headers-more) || make(makesum) || make(mdi) || make(distclean)
-HEADMORE_VERSION=		0.39
+HEADMORE_VERSION=		0.40
 HEADMORE_DISTNAME=		headers-more-nginx-module-${HEADMORE_VERSION}
 HEADMORE_DISTFILE=		${HEADMORE_DISTNAME}.tar.gz
 SITES.${HEADMORE_DISTFILE}=	-${MASTER_SITE_GITHUB:=openresty/headers-more-nginx-module/archive/}v${HEADMORE_VERSION}.tar.gz
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.