CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

www/angie-module-lua 0.10.31_3,1

Angie Lua dynamic module

0
unaddressed
0
VuXML only
0
fixed
0
open problem reports

Port info

Maintainer
sko@rostwald.de
Packages
latest: 0.10.31_3,1
Upstream
up to date
Last update
to 0.10.31_3,1 via www/angie · 2c7dcffde5
Quarterly
2026Q4: 0.10.31_3,1
WWW
https://github.com/openresty/lua-nginx-module/
Links
cgit · VuXML

Install

Package
# pkg install angie-module-lua
installs 0.10.31_3,1 from latest; from quarterly (2026Q4) 0.10.31_3,1
Port
# cd /usr/ports/www/angie-module-lua && make install clean
# make -C /usr/ports/www/angie-module-lua config  # change options first
Size
1.4 MiB download · 6.2 MiB installed
Depends on
devel/pcre 8.45_4, lang/luajit-openresty 2.1.20250826_1, www/angie 1.12.2, www/angie-module-ndk 0.3.4_9,1, www/lua-resty-core 0.1.34.r3
License
BSD2CLAUSE
Options
1 of 1 on in the package: DEBUG
pkg-message
Shown after installing
The Lua dynamic modules for Angie have been installed.
To enable these modules, add the following to /usr/local/etc/angie/angie.conf
and reload angie:

    load_module modules/ndk_http_module.so;
    load_module modules/ngx_http_lua_module.so;
    load_module modules/ngx_stream_lua_module.so;

Please refer to the modules documentation for further details:
https://github.com/openresty/lua-nginx-module
https://github.com/openresty/stream-lua-nginx-module

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 160.10.31_3,10.10.31_3,1–
FreeBSD 150.10.31_3,10.10.31_3,1–
FreeBSD 140.10.31_3,10.10.31_3,10.10.31_3,1

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 150.10.31_3,10.10.31_3,1–
FreeBSD 140.10.31_3,10.10.31_3,10.10.31_3,1

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 0.10.31_3,1.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (16)

Jochen Neumeister (joneum) · 0.10.31_3,1 MFH 2026Q3 ✓
www/angie: Security update to 1.12.2

This maintenance release fixes CVE-2026-90439:

When using an OpenSSL version without native HTTP/3 support (3.5.0
or earlier), if the default server for the address that accepted a
regular HTTPS request also used HTTP/3 (the listen directive with the
quic parameter, possibly on a different port), while a server block
without HTTP/3 was selected by domain name (SNI), limited worker process
memory corruption or a worker process crash could occur
(CVE-2026-90439); the fix was ported from nginx 1.31.6.

PR:		298632
Changes:	https://en.angie.software/angie/docs/oss_changes/#angie-1-12-2
Security:	6cf2ff4b-b38c-11f1-a655-3497f65b111b
Sponsored by:	Netzkommune GmbH
1fa3fa2869
Yusuf Yaman (nxjoseph) · 0.10.31_2,1 MFH 2026Q3 ✓
www/angie-module-lua: Unbreak build after update

The module was updated but files/patch-lua-config still pointed
to the old working directory.

PR:		297198
Reported by:	Sebastian Oswald <sko@rostwald.de> (maintainer)
Approved by:	osa, vvd (Mentors, implicit)
MFH:		2026Q3
565dc2c404
Yusuf Yaman (nxjoseph) · 0.10.31_1,1 MFH 2026Q3 ✓
www/angie: update 1.12.0 => 1.12.1

This patch release brings various security and bug fixes.

Changelog:
https://en.angie.software/angie/docs/oss_changes/#angie-1-12-1

PR:		297154
Reported by:	tjlegg@gmail.com
Approved by:	osa, vvd (Mentors, implicit)
Security:	CVE-2026-42533
Security:	CVE-2026-60005
Security:	CVE-2026-56434
MFH:		2026Q3
ec945e58c5
Vladimir Druzenko (vvd) · 0.10.31,1 MFH 2026Q3 ✓
www/angie-module-lua: Update 0.10.29R2 => 0.10.31

Changelog:
https://github.com/openresty/lua-nginx-module/releases/tag/v0.10.31

PR:		296796
Approved by:	Sebastian Oswald <sko@rostwald.de> (maintainer, implicit)
Sponsored by:	UNIS Labs
247f29084b
Vladimir Druzenko (vvd) · 0.10.29.2_2,1
www/angie-module-*: Bump PORTREVISION after update www/angie 1.11.6 => 1.11.8

PR:		296274
Approved by:	Sebastian Oswald <sko@rostwald.de> (maintainer)
Sponsored by:	UNIS Labs
MFH:		2026Q2
d9655486bf
Vladimir Druzenko (vvd) · 0.10.29.2_1,1
www/angie-module-*: Bump PORTREVISION after update www/angie 1.11.4 => 1.11.6

PR:		295591
Sponsored by:	UNIS Labs
MFH:		2026Q2
03d14d8c41
Vladimir Druzenko (vvd) · 0.10.29.2,1
www/angie-module-lua: Update 0.10.29 => 0.10.29R2, fix possible breakage

Commit logs:
https://github.com/openresty/lua-nginx-module/compare/v0.10.29...v0.10.29R2
https://github.com/openresty/stream-lua-nginx-module/compare/v0.0.16...v0.0.17R4

PR:		294517 294426
Sponsored by:	UNIS Labs
MFH:		2026Q2
a796fbe700
Vladimir Druzenko (vvd) · 0.10.29_4,1
www/angie-module-*: Bump after update www/angie 1.11.3 => 1.11.4

PR:		294178
Sponsored by:	UNIS Labs
MFH:		2026Q1
e0073e7fba
Vladimir Druzenko (vvd) · 0.10.29_3,1
www/angie: Update 1.11.2 => 1.11.3 (fix CVE-2026-1642, possible MITM attack)

Security: An attacker in a man-in-the-middle (MITM) position before a
proxied server using TLS, given conditions beyond the attacker's
control, could inject plaintext data into the response before the TLS
handshake begins (CVE-2026-1642); the fix was ported from nginx 1.29.5.

Changelog:
https://en.angie.software/angie/docs/oss_changes/#angie-1-11-3

- Bump PORTREVISION in www/angie-module-*.
- Fix using of ANGIE_PORTREVISION in RUN_DEPENDS for modules.
- Replace INSTALL_MAN with INSTALL_DATA for documentation.
- Unroll "for" loops with 1-2 items - simplify Makefile and call
  "INSTALL_*" 1 time instead of several.

PR:		293034
Security:	CVE-2026-1642
MFH:		2026Q1
8622849d0c
Vladimir Druzenko (vvd) · 0.10.29_2,1
www/angie*: Bump PORTREVISION after www/angie update

pkg does not honor RUN_DEPENDS versions, hence it fails to re-install
module packages after updates to www/angie. The only workaround is
bumping PORTREVISION for *all* modules.

PR:	292648
8d40b7a5a4
Vladimir Druzenko (vvd) · 0.10.29_1,1
www/angie: Update 1.10.3 => 1.11.1

News:
https://en.angie.software/news/releases/angie-1-11-0/

Changelog:
https://en.angie.software/angie/docs/oss_changes/#angie-1-11-1

PR:	291930
ccd2fa18ed
Vladimir Druzenko (vvd) · 0.10.29,1
www/angie-module-lua: Update 0.10.28 => 0.10.29

Commit log:
https://github.com/openresty/lua-nginx-module/compare/v0.10.28...v0.10.29

PR:	291491
62405e0b40
Vladimir Druzenko (vvd) · 0.10.28,1
www/angie: Use upstream version numbers for modules

Angie modules currently inherit the version number of the angie version
they are built against. This makes it hard and opaque to track their
actual version.
The mechanism used in the Makefile also had the unwanted side-effect of
PORTREVISION propagating from modules to the master port, which broke
the build (we found out the hard way...)

While here reduce number of of MKDIR calls.

PR:		291490
Co-authored-by:	Vladimir Druzenko <vvd@FreeBSD.org>
779f158be6
Vladimir Druzenko (vvd) · 1.10.0
www/angie-module-lua: Update ngx_devel_kit 0.3.3 => 0.3.4

The www/angie-module-lua uses ngx_devel_kit in GH_TUPLE.

Changelog for ngx_devel_kit:
https://github.com/vision5/ngx_devel_kit/releases/tag/v0.3.4

PR:		288100 288166
Approved by:	Oleg A. Mamontov <oleg@mamontov.net> (maintainer, implicit - inactive for more than 9 months)
89b6cad36f
Vladimir Druzenko (vvd) · 1.8.1
www/angie-module-lua: Update 1.3.2 → 1.8.1

Changelogs:
https://github.com/openresty/lua-nginx-module/releases/tag/v0.10.26
https://github.com/openresty/lua-nginx-module/releases/tag/v0.10.27
https://github.com/openresty/lua-nginx-module/releases/tag/v0.10.28
https://github.com/openresty/stream-lua-nginx-module/releases/tag/v0.0.14
https://github.com/openresty/stream-lua-nginx-module/releases/tag/v0.0.15
https://github.com/openresty/stream-lua-nginx-module/releases/tag/v0.0.16
https://github.com/vision5/ngx_devel_kit/releases/tag/v0.3.3

PR:		282394
Approved by:	oleg@mamontov.net (maintainer, timeout 3 mounts)
b8a84bb0dc
Robert Clausecker (fuz)
www/angie-module-lua: Angie Lua dynamic module

Module embeds the power of Lua into Angie HTTP and STREAM servers.
By leveraging Angie's subrequests, this module allows the integration of
the powerful Lua threads (known as "coroutines") into the Angie event model.

PR:		273462
c514bb25dd