CVSROOT: /cvs
Module name: ports
Changes by: [email protected] 2026/10/15 00:43:17
Modified files:
www/nginx : Tag: OPENBSD_8_0 Makefile distinfo
Log message:
update to 1.30.6; fixes multiple CVEs; from Mark Patruck
- buffer overflow vulnerability when using alias with rewrite
(CVE-2026-15176)
- buffer overflow vulnerability when evaluating string expressions
with variables (CVE-2026-93479)
- request body injection vulnerability in HTTP/3 (CVE-2026-95101)
- session forgery vulnerability when using TLS session ticket key
rotation (CVE-2026-97629)
- use-after-free vulnerability when using ngx_http_ssi_module with
AIO (CVE-2026-97205)
