NGINX is a high performance edge web server with the lowest memory footprint
and the key features to build modern and efficient web infrastructure.
NGINX functionality includes HTTP server, HTTP and mail reverse proxy, caching,
load balancing, compression, request throttling, connection multiplexing and
reuse, SSL offload and HTTP media streaming.
See also: https://nginx.org/
Reason:
Following the rename of security/openssl35 to security/openssl, the
HTTPV3_OSSL35 option has been renamed to HTTPV3_OSSL.
The saved setting does not carry over. If you had the old option
enabled, select the new one and rebuild the port:
# make -C /usr/ports/www/nginx-devel config
Number of commits found: 1303 (showing only 100 on this page) #
Update from 1.17.6 to 1.17.7.
<ChangeLog>
*) Bugfix: a segmentation fault might occur on start or during
reconfiguration if the "rewrite" directive with an empty replacement
string was used in the configuration.
*) Bugfix: a segmentation fault might occur in a worker process if the
"break" directive was used with the "alias" directive or with the
"proxy_pass" directive with a URI.
*) Bugfix: the "Location" response header line might contain garbage if
the request URI was rewritten to the one containing a null character.
(Only the first 15 lines of the commit message are shown above )
Update two third-party modules to their recent versions:
o) modsecurity3
o) vod
Remove the needless patch for the third-party vod module,
it's been added to the upstream.
Bump PORTREVISION.
Update nginx from 1.17.5 to 1.17.6.
Update njs module from 0.3.6 to 0.3.7.
<ChangeLog with nginx 1.17.6>
*) Feature: the $proxy_protocol_server_addr and
$proxy_protocol_server_port variables.
*) Feature: the "limit_conn_dry_run" directive.
*) Feature: the $limit_req_status and $limit_conn_status variables.
</ChangeLog>
<ChangeLog with njs 0.3.7>
(Only the first 15 lines of the commit message are shown above )
When nginx compiled with third-party spnego module, a worker process
may crash due to read-after-free operation. This third-party module
update fix the issue.
Bump PORTREVISION.
PR: 235296
Merge the r517639 for third-party passenger module from the
www/nginx to fix the build. (*)
While I'm here sort pkg-plist.
Bump PORTREVISION.
PR: 241753 (*)
Update third-party modules to their recent versions.
Switch third-party brotli module's github repo back to google
cause eustas repo, the previous one, has been archived by the
owner.
Bump PORTREVISION.
Fix the issue with third-aprty modsecurity2 module, it is not
being built into after selection.
An additional useful file is installed now.
Bump PORTREVISION.
Submitted by: Felipe Zipitria <felipe.zipitria@owasp.org> (in a private mail)
Update nginx from 1.17.4 to 1.17.5.
Update njs module from 0.3.5 to 0.3.6.
Sync third-party fastdfs module version with www/nginx.
<ChangeLog for nginx 1.17.5>
*) Feature: now nginx uses ioctl(FIONREAD), if available, to avoid
reading from a fast connection for a long time.
*) Bugfix: incomplete escaped characters at the end of the request URI
were ignored.
*) Bugfix: "/." and "/.." at the end of the request URI were not
normalized.
(Only the first 15 lines of the commit message are shown above )
Update nginx from 1.17.3 to the latest bugfix release 1.17.4.
Move third-party SLICE_AHEAD knob down to other third-party
knobs. (*)
Requested by: Herbert J. Skuhra <herbert@gojira.at> (*)
<ChangeLog>
*) Change: better detection of incorrect client behavior in HTTP/2.
*) Change: in handling of not fully read client request body when
returning errors in HTTP/2.
*) Bugfix: the "worker_shutdown_timeout" directive might not work when
(Only the first 15 lines of the commit message are shown above )
Update third-party njs module from 0.3.4 to 0.3.5.
Bump PORTREVISION.
<ChangeLog>
Core:
*) Bugfix: fixed module importing using require(). The bug was
introduced in 0.3.4.
*) Bugfix: fixed [[SetPrototypeOf]].
</ChangeLog>
Security update nginx from 1.17.2 to 1.17.3.
<ChangeLog with nginx 1.17.3>
*) Security: when using HTTP/2 a client might cause excessive memory
consumption and CPU usage (CVE-2019-9511, CVE-2019-9513,
CVE-2019-9516).
*) Bugfix: "zero size buf" alerts might appear in logs when using
gzipping; the bug had appeared in 1.17.2.
*) Bugfix: a segmentation fault might occur in a worker process if the
"resolver" directive was used in SMTP proxy.
</ChangeLog>
Update nginx from 1.17.1 to 1.17.2.
Update third-party nchan module from 1.2.3 to 1.2.6.
<ChangeLog with nginx 1.17.2>
*) Change: minimum supported zlib version is 1.2.0.4.
Thanks to Ilya Leoshkevich.
*) Change: the $r->internal_redirect() embedded perl method now expects
escaped URIs.
*) Feature: it is now possible to switch to a named location using the
$r->internal_redirect() embedded perl method.
*) Bugfix: in error handling in embedded perl.
(Only the first 15 lines of the commit message are shown above )
Update nginx from 1.17.0 to 1.17.1.
Update njs module from 0.3.2 to 0.3.3.
<ChangeLog with nginx 1.17.1>
*) Feature: the "limit_req_dry_run" directive.
*) Feature: when using the "hash" directive inside the "upstream" block
an empty hash key now triggers round-robin balancing.
Thanks to Niklas Keller.
*) Bugfix: a segmentation fault might occur in a worker process if
caching was used along with the "image_filter" directive, and errors
with code 415 were redirected with the "error_page" directive; the
bug had appeared in 1.11.10.
(Only the first 15 lines of the commit message are shown above )
Update nginx from 1.16.0 to new mainline version 1.17.0.
Update njs module from 0.3.1 to 0.3.2.
<ChangeLog with nginx 1.17.0>
*) Feature: variables support in the "limit_rate" and "limit_rate_after"
directives.
*) Feature: variables support in the "proxy_upload_rate" and
"proxy_download_rate" directives in the stream module.
*) Change: minimum supported OpenSSL version is 0.9.8.
*) Change: now the postpone filter is always built.
(Only the first 15 lines of the commit message are shown above )
Update from 1.15.11 to 1.15.12.
Update third-party njs module from 0.3.0 to 0.3.1.
<ChangeLogs>
Changes with nginx 1.15.12 16 Apr 2019
*) Bugfix: a segmentation fault might occur in a worker process if
variables were used in the "ssl_certificate" or "ssl_certificate_key"
directives and OCSP stapling was enabled.
Changes with njs 0.3.1 16 Apr 2019
Core:
(Only the first 15 lines of the commit message are shown above )
www/nginx-devel: DAV modules requires xslt
adding module in /www/nginx-devel/work/nginx-dav-ext-module-3.0.0
+ ngx_http_dav_ext_module was configured
checking for PCRE library ... found
checking for PCRE JIT support ... found
checking for OpenSSL library ... found
checking for zlib library ... found
checking for libxslt ... not found
checking for libxslt in /usr/local/ ... not found
checking for libxslt in /usr/pkg/ ... not found
checking for libxslt in /opt/local/ ... not found
./configure: error: the HTTP XSLT module requires the libxml2/libxslt
libraries. You can either do not enable the module or install the libraries.
Update from 1.15.8 to 1.15.9.
<ChangeLog>
*) Feature: variables support in the "ssl_certificate" and
"ssl_certificate_key" directives.
*) Feature: the "poll" method is now available on Windows when using
Windows Vista or newer.
*) Bugfix: if the "select" method was used on Windows and an error
occurred while establishing a backend connection, nginx waited for
the connection establishment timeout to expire.
*) Bugfix: the "proxy_upload_rate" and "proxy_download_rate" directives
in the stream module worked incorrectly when proxying UDP datagrams.
</ChangeLog>
Update passenger and its third-party modules for www/nginx and
www/nginx-devel from 6.0.1 to 6.0.2.
Bump PORTREVISION for www/nginx and www/nginx-devel.
Update passenger and its third-party modules for www/nginx and
www/nginx-devel from 6.0.0 to 6.0.1.
While I'm here:
o) remove a needless whitespace and tabs;
o) add a patch to disable anonymouse telemetry for passenger by default.
Update from 1.15.7 to 1.15.8.
Update clojure, modsecurity and njs third-party modules to their recent
versions.
Disable anonymous telemetry reporting in third-party passenger module
by default.
<ChangeLog>
*) Feature: the $upstream_bytes_sent variable.
Thanks to Piotr Sikora.
*) Feature: new directives in vim syntax highlighting scripts.
Thanks to Gena Makhomed.
*) Bugfix: in the "proxy_cache_background_update" directive.
(Only the first 15 lines of the commit message are shown above )
Upgrade passenger and its third-party modules for www/nginx and
www/nginx-devel from 5.3.7 to 6.0.0.
<ChangeLog>
* Introduces support for *all* programming languages. Yes that's
right... Java, Elixir, Go -- Passenger now supports them all!
This effort is called "generic language support".
* Bumps the preferred Nginx version to 1.15.7.
* Introduces anonymous usage telemetry, which helps us improve
Passenger. Please read the docs on what data is collected and
how to disable this.
* [Nginx] Introduces a new option "passenger_request_buffering on|off",
to allow disabling request body buffering. This is only supported in
Nginx >= 1.15.3. Closes GH-2121.
* Updated various library versions used in precompiled binaries (used
for e.g. gem installs):
- OpenSSL: 1.0.2q (was: 1.0.2p)
- libcurl: 7.62.0 (was: 7.61.1)
- Ruby: 2.3.8 (was: 2.3.7)
</ChangeLog>
Update from 1.15.6 to 1.15.7.
Update clojure and njs third-party modules to their recent versions.
MFH: 2018Q4
<ChangeLog>
*) Feature: the "proxy_requests" directive in the stream module.
*) Feature: the "delay" parameter of the "limit_req" directive.
Thanks to Vladislav Shabanov and Peter Shchuchkin.
*) Bugfix: memory leak on errors during reconfiguration.
*) Bugfix: in the $upstream_response_time, $upstream_connect_time, and
$upstream_header_time variables.
*) Bugfix: a segmentation fault might occur in a worker process if the
ngx_http_mp4_module was used on 32-bit platforms.
</ChangeLog>
Rename www/mod_security3 to security/modsecurity3. It is not an Apache
module, and the upstream name is ModSecurity in a single word.
PR: 233351
Submitted by: Marie Helene Kvello-Aune, Marius Halden (maintainer)
Differential Revision: https://reviews.freebsd.org/D18353
Update ImageMagick to 6.9.10.14 [1]
* Add PKGNAMESUFFIX and rename the directory. This was done to show
that IM6 is not the "main" version. But still fully supported by upstream.
* Convert a number of options to optionhelpers.
* Add option for ISO/IEC 23008-12:2017 HEIF suport
* Add comment to pkg-descr explaining IM6's "legacy" tag.
* Add comment to the patch-config_policy.xml file why it still needed.
Please note that IM7 is not a drop in replacement due to library API and
command arguments changes. And as a result ports need to decide for themself
which version to use.
Chase these changes in all the ports that using IM6.
PR: 225102 (based on, only the version update) [1]
Submitted by: Pascal Christen <pascal.christen@hostpoint.ch>
Security update from 1.15.5 to 1.15.6.
Temporary disable third-party upstream_fair module, it should
be updated to build with the modern version of the nginx.
While I'm here fix some whitespaces.
MFH: 2018Q4
Security: 84ca56be-e1de-11e8-bcfd-00e04c1ea73d
<ChangeLog>
*) Security: when using HTTP/2 a client might cause excessive memory
consumption (CVE-2018-16843) and CPU usage (CVE-2018-16844).
(Only the first 15 lines of the commit message are shown above )
Remove compatibility code for FreeBSD < 11.2 from all ports.
Simplify some ports where DragonFlyBSD no longer needs to be special-cased.
Submitted by: rene
Reviewed by: bapt, jbeich
Differential Revision: https://reviews.freebsd.org/D17724
Upgrade from 1.15.4 to 1.15.5.
<ChangeLog>
*) Bugfix: a segmentation fault might occur in a worker process when
using OpenSSL 1.1.0h or newer; the bug had appeared in 1.15.4.
*) Bugfix: of minor potential bugs.
</ChangeLog>
Upgrade from 1.15.3 to 1.15.4.
<ChangeLog>
*) Feature: now the "ssl_early_data" directive can be used with OpenSSL.
*) Bugfix: in the ngx_http_uwsgi_module.
Thanks to Chris Caputo.
*) Bugfix: connections with some gRPC backends might not be cached when
using the "keepalive" directive.
*) Bugfix: a socket leak might occur when using the "error_page"
directive to redirect early request processing errors, notably errors
with code 400.
(Only the first 15 lines of the commit message are shown above )
Merge r479404 from www/nginx.
<Commitlog>
Some modules depend on other being there before.
For example, devel_kit needs to be there before a few other, so this
fixes, and allow for future fixes of this kind of problem:
configuring additional dynamic modules
adding module in
/wrkdirs/usr/ports/www/nginx-full/work/array-var-nginx-module-0.05
error: ngx_devel_kit is required to build ngx_array_var; please put it before
ngx_array_var.
PR: 230864
Submitted by: mat
exp-runs by: antoine
</Commitlog>
Upgrade from 1.15.2 to 1.15.3.
<ChangeLog>
*) Feature: now TLSv1.3 can be used with BoringSSL.
*) Feature: the "ssl_early_data" directive, currently available with
BoringSSL.
*) Feature: the "keepalive_timeout" and "keepalive_requests" directives
in the "upstream" block.
*) Bugfix: the ngx_http_dav_module did not truncate destination file
when copying a file over an existing one with the COPY method.
(Only the first 15 lines of the commit message are shown above )
Upgrade passenger and its third-party modules for www/nginx and
www/nginx-devel from 5.3.3 to 5.3.4.
PR: 229392
<ChangeLog>
* Fixes a crash during startup on FreeBSD 11.2 and recent OpenBSD versions
due to C++11 compatibility issues in the code. Closes GH-2097.
* Updates Boost to version 1.67.0.
* [Apache] Fixes the handling of HTTP requests with chunked bodies in
combination with `PassengerBufferUploads off`. Closes GH-2102.
</ChangeLog>
Upgrade third-party njs module to 950db73 aka 0.2.3.
Bump PORTREVISION.
<ChangeLog>
nginx modules:
*) Bugfix: making a subrequest from a Reply object caused
a segmentation fault.
*) Bugfix: getting the parent property of the main Request
object caused a segmentation fault.
Core:
(Only the first 15 lines of the commit message are shown above )
Upgrade from 1.15.1 to 1.15.2.
<ChangeLog>
*) Feature: the $ssl_preread_protocol variable in the
ngx_stream_ssl_preread_module.
*) Feature: now when using the "reset_timedout_connection" directive
nginx will reset connections being closed with the 444 code.
*) Change: a logging level of the "http request", "https proxy request",
"unsupported protocol", and "version too low" SSL errors has been
lowered from "crit" to "info".
*) Bugfix: DNS requests were not resent if initial sending of a request
(Only the first 15 lines of the commit message are shown above )
Change location for third-party sticky module from bitbucket.org
to a fork on GH cause last one contains additional fixes.
Remove needless patch.
Bump PORTREVISION.
Upgrade from 1.15.0 to 1.15.1.
<ChangeLog>
*) Feature: the "random" directive inside the "upstream" block.
*) Feature: improved performance when using the "hash" and "ip_hash"
directives with the "zone" directive.
*) Feature: the "reuseport" parameter of the "listen" directive now uses
SO_REUSEPORT_LB on FreeBSD 12.
*) Bugfix: HTTP/2 server push did not work if SSL was terminated by a
proxy server in front of nginx.
*) Bugfix: the "tcp_nopush" directive was always used on backend
connections.
*) Bugfix: sending a disk-buffered request body to a gRPC backend might
fail.
</ChangeLog>
Update third-party brotli module to its recent revision to
fix the socket leaks issue, please see next link for details:
https://github.com/eustas/ngx_brotli/issues/11
Bump PORTREVISION.
Upgrade from stable 1.14.0 release to recent release
from mainline - 1.15.0.
<ChangeLog>
*) Change: the "ssl" directive is deprecated; the "ssl" parameter of the
"listen" directive should be used instead.
*) Change: now nginx detects missing SSL certificates during
configuration testing when using the "ssl" parameter of the "listen"
directive.
*) Feature: now the stream module can handle multiple incoming UDP
datagrams from a client within a single session.
(Only the first 15 lines of the commit message are shown above )
Upgrade third-party redis module to recent 0.3.9 version.
Bump PORTREVISION.
<ChangeLog>
*) Feature: redis "AUTH" command support.
Original idea from https://github.com/Yongke/ngx_http_redis-0.3.7
Thanks to Wang Yongke.
</ChangeLog>
Upgrade third-party passenger module from 5.2.3 to 5.3.0.
While I'm here fix the issue with GSSAPIINCDIR variable, it's
been introduced as GSSAPINCDIR without a correct substitution
during the third-party auth_krb5 module's patch time.
Bump PORTREVISION.
Speed-up the port's build by enable multiple jobs build.
While I'm here update third-party vod module to recent 1.23 version.
Bump PORTREVISION.
PR: 228127
Merge from www/nginx and adopt next revisions:
468201, 468240.
Update third-party modules to their recent versions.
Enable libxml usage for third-party vod module.
Bump PORTREVISION.
Upgrade from 1.13.11 to 1.13.12.
While I'm here add back modsecurity3 distinfo records.
<ChangeLog>
*) Bugfix: connections with gRPC backends might be closed unexpectedly
when returning a large response.
</ChangeLog>
Upgrade from 1.13.10 to 1.13.11.
While I'm here upgrade next third-party modules to their
recent version:
o) passenger;
o) njs.
<ChangeLog>
*) Feature: the "proxy_protocol" parameter of the "listen" directive now
supports the PROXY protocol version 2.
*) Bugfix: nginx could not be built with OpenSSL 1.1.1 statically on
Linux.
*) Bugfix: in the "http_404", "http_500", etc. parameters of the
"proxy_next_upstream" directive.
</ChangeLog>
Upgrade from 1.13.9 to 1.13.10.
Upgrade third-party modules to their recent version.
<ChangeLog>
*) Feature: the "set" parameter of the "include" SSI directive now
allows writing arbitrary responses to a variable; the
"subrequest_output_buffer_size" directive defines maximum response
size.
*) Feature: now nginx uses clock_gettime(CLOCK_MONOTONIC) if available,
to avoid timeouts being incorrectly triggered on system time changes.
*) Feature: the "escape=none" parameter of the "log_format" directive.
Thanks to Johannes Baiter and Calin Don.
(Only the first 15 lines of the commit message are shown above )
Upgrade from 1.13.8 to 1.13.9.
Upgrade third-party modules to their recent version.
Remove needless patches.
<ChangeLog>
*) Feature: HTTP/2 server push support; the "http2_push" and
"http2_push_preload" directives.
*) Bugfix: "header already sent" alerts might appear in logs when using
cache; the bug had appeared in 1.9.13.
*) Bugfix: a segmentation fault might occur in a worker process if the
"ssl_verify_client" directive was used and no SSL certificate was
specified in a virtual server.
*) Bugfix: in the ngx_http_v2_module.
*) Bugfix: in the ngx_http_dav_module.
</ChangeLog>
Upgrade from 1.13.7 to 1.13.8.
While I'm here remove needless patch.
<ChangeLog>
*) Feature: now nginx automatically preserves the CAP_NET_RAW capability
in worker processes when using the "transparent" parameter of the
"proxy_bind", "fastcgi_bind", "memcached_bind", "scgi_bind", and
"uwsgi_bind" directives.
*) Feature: improved CPU cache line size detection.
Thanks to Debayan Ghosh.
*) Feature: new directives in vim syntax highlighting scripts.
(Only the first 15 lines of the commit message are shown above )
Use @postexec keyword instead of deprecated @exec one in pkg-plist.
Bump PORTREVISION.
While I'm here upgrade third-party fancyindex module to the latest
version - 0.4.2.
Upgrade next third-party modules to their recent versions:
o) njs;
o) echo;
o) lua;
o) nchan;
o) redis2;
o) srcache;
o) tarantul;
o) vod.
Remove needless patches cause most of them have been added to their
upstreams.
Switch to fork that uses new brotli ABI.
Thanks to: Evgenii Kliuchnikov <eustas@google.com>
PR: 224000
While I'm here add CONFLICTS_INSTALL and PORTSCOUNT.
Bump PORTREVISION.
