CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

www/angie-module-testcookie 1.11.6

Angie testcookie dynamic module

Port info

Maintainer
sko@rostwald.de
Packages
latest: 1.12.2, update to 1.11.6 not built yet
Upstream
up to date
Last update
to 1.12.2 via www/angie · 2c7dcffde5
Quarterly
2026Q4: 1.12.2
WWW
https://github.com/kyprizel/testcookie-nginx-module/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install angie-module-testcookie
installs 1.12.2 from latest; from quarterly (2026Q4) 1.12.2
Port
# cd /usr/ports/www/angie-module-testcookie && make install clean
# make -C /usr/ports/www/angie-module-testcookie config  # change options first
Size
65 KiB download · 203 KiB installed
Depends on
www/angie 1.12.2
License
BSD3CLAUSE
Options
1 of 1 on in the package: DEBUG
pkg-message
Shown after installing
The testcookie dynamic module for Angie has been installed.
To enable this module, add the following to /usr/local/etc/angie/angie.conf
and reload angie:

    load_module modules/ngx_http_testcookie_access_module.so;

Please refer to the module documentation for further details:
https://github.com/kyprizel/testcookie-nginx-module

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.12.21.12.2–
FreeBSD 151.12.21.12.2–
FreeBSD 141.12.21.12.21.12.2

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.12.21.12.2–
FreeBSD 141.12.21.12.21.12.2

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.12.2.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (4)

Vladimir Druzenko (vvd) · 1.11.6
www/angie-module-testcookie: Update to last commit 2022-10-07 => 2026-05-18

Commit log:
https://github.com/kyprizel/testcookie-nginx-module/compare/64137c2...7d263d4

PR:		295591
Sponsored by:	UNIS Labs
MFH:		2026Q2
d712db1904
Vladimir Druzenko (vvd) · 1.11.3
www/angie: Update 1.11.2 => 1.11.3 (fix CVE-2026-1642, possible MITM attack)

Security: An attacker in a man-in-the-middle (MITM) position before a
proxied server using TLS, given conditions beyond the attacker's
control, could inject plaintext data into the response before the TLS
handshake begins (CVE-2026-1642); the fix was ported from nginx 1.29.5.

Changelog:
https://en.angie.software/angie/docs/oss_changes/#angie-1-11-3

- Bump PORTREVISION in www/angie-module-*.
- Fix using of ANGIE_PORTREVISION in RUN_DEPENDS for modules.
- Replace INSTALL_MAN with INSTALL_DATA for documentation.
- Unroll "for" loops with 1-2 items - simplify Makefile and call
  "INSTALL_*" 1 time instead of several.

PR:		293034
Security:	CVE-2026-1642
MFH:		2026Q1
8622849d0c
Vladimir Druzenko (vvd) · 1.10.2_2
www/angie: Use upstream version numbers for modules

Angie modules currently inherit the version number of the angie version
they are built against. This makes it hard and opaque to track their
actual version.
The mechanism used in the Makefile also had the unwanted side-effect of
PORTREVISION propagating from modules to the master port, which broke
the build (we found out the hard way...)

While here reduce number of of MKDIR calls.

PR:		291490
Co-authored-by:	Vladimir Druzenko <vvd@FreeBSD.org>
779f158be6
Robert Clausecker (fuz)
www/angie-module-testcookie: New angie module

Module is a simple robot mitigation module using cookie based
challenge/response technique. Challenge cookies can be set using different
methods and can be encrypted and then decrypted at client side with JavaScript.

PR:		275299
2f3bdc0e7a