From c0d6aa9da49dbdc18aa77876ef6ce6aec015a387 Mon Sep 17 00:00:00 2001 From: osa Date: Tue, 16 Sep 2014 17:47:47 +0000 Subject: Security update from 1.6.1 to 1.6.2. *) Security: it was possible to reuse SSL sessions in unrelated contexts if a shared SSL session cache or the same TLS session ticket key was used for multiple "server" blocks (CVE-2014-3616). Thanks to Antoine Delignat-Lavaud. *) Bugfix: requests might hang if resolver was used and a DNS server returned a malformed response; the bug had appeared in 1.5.8. *) Bugfix: requests might hang if resolver was used and a timeout occurred during a DNS request. --- www/nginx/Makefile | 3 +-- www/nginx/distinfo | 4 ++-- 2 files changed, 3 insertions(+), 4 deletions(-) (limited to 'www') diff --git a/www/nginx/Makefile b/www/nginx/Makefile index 231412466256..6960c7c14012 100644 --- a/www/nginx/Makefile +++ b/www/nginx/Makefile @@ -2,8 +2,7 @@ # $FreeBSD$ PORTNAME= nginx -PORTVERSION= 1.6.1 -PORTREVISION= 1 +PORTVERSION= 1.6.2 PORTEPOCH= 2 CATEGORIES= www MASTER_SITES= http://nginx.org/download/ diff --git a/www/nginx/distinfo b/www/nginx/distinfo index 2cb37c3a06be..ba355b868fc1 100644 --- a/www/nginx/distinfo +++ b/www/nginx/distinfo @@ -1,5 +1,5 @@ -SHA256 (nginx-1.6.1.tar.gz) = f5cfe682a1aeef4602c2ca705402d5049b748f946563f41d8256c18674836067 -SIZE (nginx-1.6.1.tar.gz) = 803301 +SHA256 (nginx-1.6.2.tar.gz) = b5608c2959d3e7ad09b20fc8f9e5bd4bc87b3bc8ba5936a513c04ed8f1391a18 +SIZE (nginx-1.6.2.tar.gz) = 804164 SHA256 (giom-nginx_accept_language_module-2f69842.tar.gz) = fbcdf792160a1eff7b9549aeb5209d6e76716ff8e86b05e42c90b2d2f858e011 SIZE (giom-nginx_accept_language_module-2f69842.tar.gz) = 3399 SHA256 (nginx-accesskey-2.0.3.tar.gz) = d9e94321e78a02de16c57f3e048fd31059fd8116ed03d6de7180f435c52502b1 -- cgit