www/angie: Security update to 1.12.2 This maintenance release fixes CVE-2026-90439: When using an OpenSSL version without native HTTP/3 support (3.5.0 or earlier), if the default server for the address that accepted a regular HTTPS request also used HTTP/3 (the listen directive with the quic parameter, possibly on a different port), while a server block without HTTP/3 was selected by domain name (SNI), limited worker process memory corruption or a worker process crash could occur (CVE-2026-90439); the fix was ported from nginx 1.31.6. PR: 298632 Changes: https://en.angie.software/angie/docs/oss_changes/#angie-1-12-2 Security: 6cf2ff4b-b38c-11f1-a655-3497f65b111b Sponsored by: Netzkommune GmbH1fa3fa2869
Port details
www/angie-module-zstd 0.1.1_9,1
Angie zstd dynamic module
- Maintainer
- sko@rostwald.de
- Packages
- latest: 0.1.1_9,1
- Upstream
- up to date
- Last update
- to 0.1.1_9,1 via www/angie · 2c7dcffde5
- Quarterly
- 2026Q4: 0.1.1_9,1
- WWW
- https://github.com/tokers/zstd-nginx-module/
- Links
- cgit · VuXML
Unaddressed and VuXML only (0)
No unaddressed CVE and nothing reported by
pkg audit for the packaged version 0.1.1_9,1.Fixed (0)
No VuXML entries for this package.
Problem reports (0) · open in Bugzilla, most recently changed first
None.
Commits (10)
www/angie: update 1.12.0 => 1.12.1 This patch release brings various security and bug fixes. Changelog: https://en.angie.software/angie/docs/oss_changes/#angie-1-12-1 PR: 297154 Reported by: tjlegg@gmail.com Approved by: osa, vvd (Mentors, implicit) Security: CVE-2026-42533 Security: CVE-2026-60005 Security: CVE-2026-56434 MFH: 2026Q3ec945e58c5
www/angie-module-*: Bump after update www/angie PR: 296796 Sponsored by: UNIS Labsbd04cfb73d
www/angie-module-*: Bump PORTREVISION after update www/angie 1.11.6 => 1.11.8 PR: 296274 Approved by: Sebastian Oswald <sko@rostwald.de> (maintainer) Sponsored by: UNIS Labs MFH: 2026Q2d9655486bf
www/angie-module-*: Bump PORTREVISION after update www/angie 1.11.4 => 1.11.6 PR: 295591 Sponsored by: UNIS Labs MFH: 2026Q203d14d8c41
www/angie-module-*: Bump after update www/angie 1.11.3 => 1.11.4 PR: 294178 Sponsored by: UNIS Labs MFH: 2026Q1e0073e7fba
www/angie: Update 1.11.2 => 1.11.3 (fix CVE-2026-1642, possible MITM attack) Security: An attacker in a man-in-the-middle (MITM) position before a proxied server using TLS, given conditions beyond the attacker's control, could inject plaintext data into the response before the TLS handshake begins (CVE-2026-1642); the fix was ported from nginx 1.29.5. Changelog: https://en.angie.software/angie/docs/oss_changes/#angie-1-11-3 - Bump PORTREVISION in www/angie-module-*. - Fix using of ANGIE_PORTREVISION in RUN_DEPENDS for modules. - Replace INSTALL_MAN with INSTALL_DATA for documentation. - Unroll "for" loops with 1-2 items - simplify Makefile and call "INSTALL_*" 1 time instead of several. PR: 293034 Security: CVE-2026-1642 MFH: 2026Q18622849d0c
www/angie*: Bump PORTREVISION after www/angie update pkg does not honor RUN_DEPENDS versions, hence it fails to re-install module packages after updates to www/angie. The only workaround is bumping PORTREVISION for *all* modules. PR: 2926488d40b7a5a4
www/angie: Update 1.10.3 => 1.11.1 News: https://en.angie.software/news/releases/angie-1-11-0/ Changelog: https://en.angie.software/angie/docs/oss_changes/#angie-1-11-1 PR: 291930ccd2fa18ed
www/angie-module-zstd: New port: zstd compression for angie The module adds support for Zstandard compression of responses, both dynamic (on-the-fly) and static (precompressed files). Compared to gzip, zstd offers higher compression and decompression speeds at comparable or better compression ratios. Source and documentation: https://github.com/tokers/zstd-nginx-module/ Angie-specific documentation: https://en.angie.software/angie/docs/installation/external-modules/zstd/ PR: 291546d52da51671