CVSROOT: /cvs
Module name: ports
Changes by: [email protected] 2026/05/14 00:57:09
Modified files:
www/nginx : Makefile distinfo
Log message:
security update to 1.30.1;
- HTTP/2 request injection vulnerability in the ngx_http_proxy_module
(CVE-2026-42926)
- buffer overflow vulnerability in the ngx_http_rewrite_module
(CVE-2026-42945)
- buffer overread vulnerability in the ngx_http_scgi_module and
ngx_http_uwsgi_module
(CVE-2026-42946)
- buffer overread vulnerability in the ngx_http_charset_module
(CVE-2026-42934)
- address spoofing vulnerability in HTTP/3
(CVE-2026-40460)
- use-after-free vulnerability in OCSP requests to resolver
(CVE-2026-40701)
