Waldemar Brodkorb be2424f55c package/nginx: security update to 1.26.3 ...

See here for a changelog:
http://nginx.org/en/CHANGES-1.26

Fixes the following security issue:

CVE-2025-23419: Security: insufficient check in virtual servers handling
with TLSv1.3 SNI allowed to reuse SSL sessions in a different virtual
server, to bypass client SSL certificates verification

https://www.cve.org/CVERecord?id=CVE-2025-23419

Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit a7a18c2ef8)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

2025-02-17 20:50:32 +01:00

..

0001-auto-type-sizeof-rework-autotest-to-be-cross-compila.patch

…

0002-auto-feature-add-mechanism-allowing-to-force-feature.patch

…

0003-auto-set-ngx_feature_run_force_result-for-each-featu.patch

…

0004-auto-lib-libxslt-conf-use-pkg-config.patch

…

0005-auto-unix-make-sys_nerr-guessing-cross-friendly.patch

…

0006-auto-lib-libgd-conf-use-pkg-config.patch

…

0007-src-os-unix-ngx_linux_config.h-only-include-dlfcn.h-.patch

…

0008-Allow-forcing-of-endianness-for-cross-compilation.patch

…

0009-auto-lib-openssl-conf-use-pkg-config.patch

…

Config.in

…

nginx.hash

…

nginx.logrotate

…

nginx.mk

…

nginx.service

…

S50nginx

…