Hi,

trivial update for 3 CVEs (CVE-2018-16843, CVE-2018-16844 &
CVE-2018-16845), see http://nginx.org/en/CHANGES-1.14 for
other changes. Remove a libressl patch merged upstream in
http://hg.nginx.org/nginx/rev/2cf1d945bbb3

builds and runs locally on amd64.

Landry
Index: Makefile
===================================================================
RCS file: /cvs/ports/www/nginx/Makefile,v
retrieving revision 1.128
diff -u -r1.128 Makefile
--- Makefile    27 Nov 2018 14:55:07 -0000      1.128
+++ Makefile    6 Dec 2018 08:12:05 -0000
@@ -15,7 +15,7 @@
 COMMENT-perl=          nginx perl scripting module
 COMMENT-passenger=     nginx passenger (ruby/python/nodejs) integration module
 
-VERSION=       1.14.1
+VERSION=       1.14.2
 DISTNAME=      nginx-${VERSION}
 CATEGORIES=    www
 
@@ -31,7 +31,6 @@
 PKGNAME-headers_more=  nginx-headers-more-${VERSION}
 PKGNAME-perl=          nginx-perl-${VERSION}
 PKGNAME-passenger=     nginx-passenger-${VERSION}
-REVISION-perl=0
 
 MASTER_SITES=  https://nginx.org/download/
 MASTER_SITES0= https://github.com/simpl/ngx_devel_kit/archive/
Index: distinfo
===================================================================
RCS file: /cvs/ports/www/nginx/distinfo,v
retrieving revision 1.67
diff -u -r1.67 distinfo
--- distinfo    10 Nov 2018 08:43:34 -0000      1.67
+++ distinfo    6 Dec 2018 08:12:05 -0000
@@ -2,13 +2,13 @@
 SHA256 (lua-nginx-module-v0.10.11.tar.gz) = 
wPuR/P0cbn3sNMpkgm74H/66/e9hdNJURnY284BWZiY=
 SHA256 (naxsi-0.55.3.tar.gz) = CzyV0lB3Lcia2LSeR8HgJMWuLHbAz/pEXp/gXE3RNJU=
 SHA256 (nginx-1.14.0-chroot.patch) = 
6dERcspRpgEau5QbXHC+K0r5C9Ogy/df6j8BpYrStL0=
-SHA256 (nginx-1.14.1.tar.gz) = vwmXQTDA1BwKgR3swXqW7C9Yzci7rLdx3o04yboUpKQ=
+SHA256 (nginx-1.14.2.tar.gz) = AC2fYVTjMYhqLdTmBlhjycHPgpGul6ElUwhXLAK+l5c=
 SHA256 (nginx-auth-ldap-0.20170725.tar.gz) = 
gNbM6amHfVHewvhaEc580l7b0tYFwovChofsxWlSKe4=
 SHA256 (ngx_devel_kit-v0.3.0.tar.gz) = 
iOBamainQZBm9a51lm+x78QJutRSLRSYbaB0VUrmFhk=
 SIZE (headers-more-nginx-module-v0.33.tar.gz) = 28130
 SIZE (lua-nginx-module-v0.10.11.tar.gz) = 616653
 SIZE (naxsi-0.55.3.tar.gz) = 187416
 SIZE (nginx-1.14.0-chroot.patch) = 8220
-SIZE (nginx-1.14.1.tar.gz) = 1014040
+SIZE (nginx-1.14.2.tar.gz) = 1015384
 SIZE (nginx-auth-ldap-0.20170725.tar.gz) = 18457
 SIZE (ngx_devel_kit-v0.3.0.tar.gz) = 66455
Index: patches/patch-src_event_ngx_event_openssl_h
===================================================================
RCS file: patches/patch-src_event_ngx_event_openssl_h
diff -N patches/patch-src_event_ngx_event_openssl_h
--- patches/patch-src_event_ngx_event_openssl_h 28 Sep 2018 14:36:16 -0000      
1.4
+++ /dev/null   1 Jan 1970 00:00:00 -0000
@@ -1,20 +0,0 @@
-$OpenBSD: patch-src_event_ngx_event_openssl_h,v 1.4 2018/09/28 14:36:16 sthen 
Exp $
-
-LibreSSL now has enough of the 1.1 API for nginx
-
-Index: src/event/ngx_event_openssl.h
---- src/event/ngx_event_openssl.h.orig
-+++ src/event/ngx_event_openssl.h
-@@ -34,12 +34,6 @@
- #define NGX_SSL_NAME     "OpenSSL"
- 
- 
--#if (defined LIBRESSL_VERSION_NUMBER && OPENSSL_VERSION_NUMBER == 0x20000000L)
--#undef OPENSSL_VERSION_NUMBER
--#define OPENSSL_VERSION_NUMBER  0x1000107fL
--#endif
--
--
- #if (OPENSSL_VERSION_NUMBER >= 0x10100001L)
- 
- #define ngx_ssl_version()       OpenSSL_version(OPENSSL_VERSION)

Reply via email to