Bug 256172

Summary: www/nginx: update to 1.20.1
Product: Ports & Packages Reporter: Christos Chatzaras <chris>
Component: Individual Port(s)Assignee: Brad Davis <brd>
Status: Closed FIXED    
Severity: Affects Only Me CC: joneum, kirill, rob2g2-freebsd
Priority: --- Flags: bugzilla: maintainer-feedback? (joneum)
Version: Latest   
Hardware: Any   
OS: Any   
Attachments:
Description Flags
nginx-1.20.1 update patch none

Description Christos Chatzaras 2021-05-26 15:56:01 UTC
Created attachment 225280 [details]
nginx-1.20.1 update patch

2021-05-25: nginx-1.20.1 stable and nginx-1.21.0 mainline versions have been released, with a fix for the 1-byte memory overwrite vulnerability in resolver (CVE-2021-23017).
Comment 1 Christos Chatzaras 2021-06-16 09:26:21 UTC
Any news about this update?
Comment 2 commit-hook freebsd_committer freebsd_triage 2021-06-21 23:00:03 UTC
A commit in branch main references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=c8540e27153f1ea2ee438b9aaf367ea0def9ef29

commit c8540e27153f1ea2ee438b9aaf367ea0def9ef29
Author:     Brad Davis <brd@FreeBSD.org>
AuthorDate: 2021-06-21 22:08:14 +0000
Commit:     Brad Davis <brd@FreeBSD.org>
CommitDate: 2021-06-21 22:08:14 +0000

    www/nginx: Update to 1.20.1

    PR:             256172
    Reported by:    Christos Chatzaras <chris@cretaforce.gr>
    Reviewed by:    garga
    Approved by:    maintainer timeout
    MFH:            2021Q2
    Security:       0882f019-bd60-11eb-9bdd-8c164567ca3c
    Sponsored by:   Rubicon Communications, LLC ("Netgate")

 www/nginx/Makefile | 4 ++--
 www/nginx/distinfo | 6 +++---
 2 files changed, 5 insertions(+), 5 deletions(-)
Comment 3 Jochen Neumeister freebsd_committer freebsd_triage 2021-07-05 07:11:29 UTC
PR further to @brd - if he already wrongly committed, he should also take over the MFH
Comment 4 Jochen Neumeister freebsd_committer freebsd_triage 2021-08-21 06:10:44 UTC
ping
Comment 5 Tobias Kortkamp freebsd_committer freebsd_triage 2021-08-21 07:23:22 UTC
Isn't the MFH already done by virtue of rolling over to 2021Q3? The
commit was in June, i.e, in 2021Q2.