www/angie: Update 1.11.2 => 1.11.3 (fix CVE-2026-1642, possible MITM attack) Security: An attacker in a man-in-the-middle (MITM) position before a proxied server using TLS, given conditions beyond the attacker's control, could inject plaintext data into the response before the TLS handshake begins (CVE-2026-1642); the fix was ported from nginx 1.29.5. Changelog: https://en.angie.software/angie/docs/oss_changes/#angie-1-11-3 - Bump PORTREVISION in www/angie-module-*. - Fix using of ANGIE_PORTREVISION in RUN_DEPENDS for modules. - Replace INSTALL_MAN with INSTALL_DATA for documentation. - Unroll "for" loops with 1-2 items - simplify Makefile and call "INSTALL_*" 1 time instead of several. PR: 293034 Security: CVE-2026-1642 MFH: 2026Q18622849d0c
Port details
www/angie-module-subs 1.11.3
Angie substitutions filter dynamic module
Port info
- Maintainer
- sko@rostwald.de
- Packages
- latest: 1.12.2, update to 1.11.3 not built yet
- Upstream
- up to date
- Last update
- to 1.12.2 via www/angie · 2c7dcffde5
- Quarterly
- 2026Q4: 1.12.2
- WWW
- https://github.com/yaoweibin/ngx_http_substitutions_filter_module/
- Links
- cgit · VuXML
Install
- Package
# pkg install angie-module-subsinstalls 1.12.2 fromlatest; fromquarterly(2026Q4) 1.12.2- Port
# cd /usr/ports/www/angie-module-subs && make install clean# make -C /usr/ports/www/angie-module-subs config # change options first
- Size
- 49 KiB download · 128 KiB installed
- Depends on
- www/angie 1.12.2
- License
- BSD2CLAUSE
- Options
- 1 of 1 on in the package: DEBUG
- pkg-message
Shown after installing
The substitutions filter dynamic module for Angie has been installed. To enable this module, add the following to /usr/local/etc/angie/angie.conf and reload angie: load_module modules/ngx_http_subs_filter_module.so; Please refer to the module documentation for further details: https://github.com/yaoweibin/ngx_http_substitutions_filter_module
Packages by version and architecture
latest
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 1.12.2 | 1.12.2 | – |
| FreeBSD 15 | 1.12.2 | 1.12.2 | – |
| FreeBSD 14 | 1.12.2 | 1.12.2 | 1.12.2 |
quarterly (2026Q4)
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 1.12.2 | 1.12.2 | – |
| FreeBSD 14 | 1.12.2 | 1.12.2 | 1.12.2 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed and VuXML only (0)
No unaddressed CVE and nothing reported by
pkg audit for the packaged version 1.12.2.Fixed (0)
No VuXML entries for this package.
Problem reports (0) · open in Bugzilla, most recently changed first
None.
Commits (3)
www/angie: Use upstream version numbers for modules Angie modules currently inherit the version number of the angie version they are built against. This makes it hard and opaque to track their actual version. The mechanism used in the Makefile also had the unwanted side-effect of PORTREVISION propagating from modules to the master port, which broke the build (we found out the hard way...) While here reduce number of of MKDIR calls. PR: 291490 Co-authored-by: Vladimir Druzenko <vvd@FreeBSD.org>779f158be6
www/angie-module-subs: Angie substitutions filter dynamic module Module performs both regular expression and fixed string substitutions on response bodies. This module is quite different from the native substitution module. It scans the output chains buffer and matches string line by line, just like Apache's mod_substitute. PR: 273462ac2a527821