commit 0c0fe53886f0424d4624293ed33b501b6e1e9224 Author: Matt Housh <jaeger@crux.ninja> Date: Wed Oct 19 14:20:21 2022 -0500 [notify] nginx: updated to version 1.23.2; fixes for CVE-2022-41741 and CVE-2022-41742 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41741 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41742 diff --git a/nginx/.signature b/nginx/.signature index b6e14fa7d..71e79b796 100644 --- a/nginx/.signature +++ b/nginx/.signature @@ -1,7 +1,7 @@ untrusted comment: verify with /etc/ports/contrib.pub -RWSagIOpLGJF3/OC3Dfc+MlnzSOYoWBQZVYsqUkD17WPGmqJwvyi/NyDMQJV8c8SX0TNcQHYqQEuDTn2cBu6J0skeImUqLcV6AM= -SHA256 (Pkgfile) = c64c67545d6e60a4ee491afbaa66b89c2fa9ace68c8b4da1651c1d2d5de240b7 +RWSagIOpLGJF322jEhJI4cN5Ph/NteCSNsqWCsEOOCE5b240XyL5rAFWWIOYkG/bFKOJGIx3E0o9IIvRIaStos6fiukZ1wgFlAw= +SHA256 (Pkgfile) = 21f20a953889ccf485a17d6f91d6144a7e2899b6616174f2e82ba58820e34afb SHA256 (.footprint) = 9263dad4ce3a2766b5f9bec00a3a58ac86445f370ba1bb3d5716e6b9dc74ddae -SHA256 (nginx-1.23.1.tar.gz) = 5eee1bd1c23e3b9477a45532f1f36ae6178b43d571a9607e6953cef26d5df1e2 +SHA256 (nginx-1.23.2.tar.gz) = a80cc272d3d72aaee70aa8b517b4862a635c0256790434dbfc4d618a999b0b46 SHA256 (nginx.conf) = 0f9b54e790951f1a09580bbf29ede26c4cc277e535d4df937fc659979a2fb35b SHA256 (nginx.rc) = bac096145be15bc5d87817e2d3440d930288aea06dfd6736e43289b4a352595b diff --git a/nginx/Pkgfile b/nginx/Pkgfile index 52ac1200f..f4971da53 100644 --- a/nginx/Pkgfile +++ b/nginx/Pkgfile @@ -4,7 +4,7 @@ # Depends on: libpcre zlib openssl name=nginx -version=1.23.1 +version=1.23.2 release=1 source=(http://nginx.org/download/$name-$version.tar.gz \ $name.conf $name.rc)