www/angie: Security update to 1.12.2 This maintenance release fixes CVE-2026-90439: When using an OpenSSL version without native HTTP/3 support (3.5.0 or earlier), if the default server for the address that accepted a regular HTTPS request also used HTTP/3 (the listen directive with the quic parameter, possibly on a different port), while a server block without HTTP/3 was selected by domain name (SNI), limited worker process memory corruption or a worker process crash could occur (CVE-2026-90439); the fix was ported from nginx 1.31.6. PR: 298632 Changes: https://en.angie.software/angie/docs/oss_changes/#angie-1-12-2 Security: 6cf2ff4b-b38c-11f1-a655-3497f65b111b Sponsored by: Netzkommune GmbH1fa3fa2869
Port details
www/angie-module-keyval 0.5.0_3,1
Angie keyval dynamic module
Port info
- Maintainer
- sko@rostwald.de
- Packages
- latest: 0.5.0_3,1
- Upstream
- up to date
- Last update
- to 0.5.0_3,1 via www/angie · 2c7dcffde5
- Quarterly
- 2026Q4: 0.5.0_3,1
- WWW
- https://github.com/kjdev/nginx-keyval/
- Links
- cgit · VuXML
Install
- Package
# pkg install angie-module-keyvalinstalls 0.5.0_3,1 fromlatest; fromquarterly(2026Q4) 0.5.0_3,1- Port
# cd /usr/ports/www/angie-module-keyval && make install clean# make -C /usr/ports/www/angie-module-keyval config # change options first
- Size
- 61 KiB download · 164 KiB installed
- Depends on
- databases/hiredis 1.3.0.15, www/angie 1.12.2
- License
- MIT
- Options
- 1 of 1 on in the package: DEBUG
- pkg-message
Shown after installing
The keyval dynamic module for Angie has been installed. To enable this module, add the following to /usr/local/etc/angie/angie.conf and reload angie: load_module modules/ngx_http_keyval_module.so; Please refer to the module documentation for further details: https://github.com/kjdev/nginx-keyval
Packages by version and architecture
latest
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 0.5.0_3,1 | 0.5.0_3,1 | – |
| FreeBSD 15 | 0.5.0_3,1 | 0.5.0_3,1 | – |
| FreeBSD 14 | 0.5.0_3,1 | 0.5.0_3,1 | 0.5.0_3,1 |
quarterly (2026Q4)
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 0.5.0_3,1 | 0.5.0_3,1 | – |
| FreeBSD 14 | 0.5.0_3,1 | 0.5.0_3,1 | 0.5.0_3,1 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed and VuXML only (0)
No unaddressed CVE and nothing reported by
pkg audit for the packaged version 0.5.0_3,1.Fixed (0)
No VuXML entries for this package.
Problem reports (0) · open in Bugzilla, most recently changed first
None.
Commits (13)
www/angie: update 1.12.0 => 1.12.1 This patch release brings various security and bug fixes. Changelog: https://en.angie.software/angie/docs/oss_changes/#angie-1-12-1 PR: 297154 Reported by: tjlegg@gmail.com Approved by: osa, vvd (Mentors, implicit) Security: CVE-2026-42533 Security: CVE-2026-60005 Security: CVE-2026-56434 MFH: 2026Q3ec945e58c5
www/angie-module-*: Bump after update www/angie PR: 296796 Sponsored by: UNIS Labsbd04cfb73d
www/angie-module-keyval: Update 0.4.0 => 0.5.0 Changelog: https://github.com/kjdev/nginx-keyval/releases/tag/0.5.0 PR: 296274 Sponsored by: UNIS Labs MFH: 2026Q281347f582d
www/angie-module-*: Bump PORTREVISION after update www/angie 1.11.4 => 1.11.6 PR: 295591 Sponsored by: UNIS Labs MFH: 2026Q203d14d8c41
www/angie-module-keyval: Update 0.3.0 => 0.4.0 Changelog: https://github.com/kjdev/nginx-keyval/releases/tag/0.4.0 PR: 294178 Sponsored by: UNIS Labs MFH: 2026Q17f2de67a6e
www/angie: Update 1.11.2 => 1.11.3 (fix CVE-2026-1642, possible MITM attack) Security: An attacker in a man-in-the-middle (MITM) position before a proxied server using TLS, given conditions beyond the attacker's control, could inject plaintext data into the response before the TLS handshake begins (CVE-2026-1642); the fix was ported from nginx 1.29.5. Changelog: https://en.angie.software/angie/docs/oss_changes/#angie-1-11-3 - Bump PORTREVISION in www/angie-module-*. - Fix using of ANGIE_PORTREVISION in RUN_DEPENDS for modules. - Replace INSTALL_MAN with INSTALL_DATA for documentation. - Unroll "for" loops with 1-2 items - simplify Makefile and call "INSTALL_*" 1 time instead of several. PR: 293034 Security: CVE-2026-1642 MFH: 2026Q18622849d0c
www/angie*: Bump PORTREVISION after www/angie update pkg does not honor RUN_DEPENDS versions, hence it fails to re-install module packages after updates to www/angie. The only workaround is bumping PORTREVISION for *all* modules. PR: 2926488d40b7a5a4
www/angie: Update 1.10.3 => 1.11.1 News: https://en.angie.software/news/releases/angie-1-11-0/ Changelog: https://en.angie.software/angie/docs/oss_changes/#angie-1-11-1 PR: 291930ccd2fa18ed
www/angie: Use upstream version numbers for modules Angie modules currently inherit the version number of the angie version they are built against. This makes it hard and opaque to track their actual version. The mechanism used in the Makefile also had the unwanted side-effect of PORTREVISION propagating from modules to the master port, which broke the build (we found out the hard way...) While here reduce number of of MKDIR calls. PR: 291490 Co-authored-by: Vladimir Druzenko <vvd@FreeBSD.org>779f158be6
www/angie-module-keyval: Update 1.3.2 → 1.8.1 Changelog: https://github.com/kjdev/nginx-keyval/releases/tag/0.3.0 PR: 282394 Approved by: oleg@mamontov.net (maintainer, timeout 3 mounts)10ada51f95
www/angie-module-keyval: update to upstream version 0.2.0 PR: 274128eeb0323aaa
www/angie-module-keyval: Angie keyval dynamic module This Angie module creates variables with values taken from key-value pairs. PR: 27299931122efc5f