nginx: update to 1.30.5

1.30.4:
- Heap buffer overflow with the map directive and regex matching
  (CVE-2026-42533).
- Uninitialized memory access with unnamed regex captures and the slice
  directive or background cache update (CVE-2026-60005).
- Use-after-free in ngx_http_ssi_filter_module with a crafted proxied
  backend response (CVE-2026-56434).

1.30.5:
- Heap buffer overflow with HTTP/3 and OpenSSL 3.5.0 and earlier
  (CVE-2026-90439).

All patches apply without changes.

Changelog: https://nginx.org/en/CHANGES-1.30
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
This commit is contained in:
Josef Schlehofer committed 2026-10-04 12:27:18 +02:00
1 parent 0774799a27
commit dee4f5f48d
1 file changed
+2 -2
+2 -2
View File
@@ -8,12 +8,12 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=nginx
PKG_VERSION:=1.30.3
PKG_VERSION:=1.30.5
PKG_RELEASE:=1
PKG_SOURCE:=nginx-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://nginx.org/download/
PKG_HASH:=e5823dc6f45610993def93ebf6cfce68264af4958c77e874b7d20f3709001b8f
PKG_HASH:=6c20565aa2325cb82216ae804f4a4ff1875179014759a381c42ddc8e11c4906d
PKG_MAINTAINER:=Thomas Heil <heil@terminal-consulting.de> \
Christian Marangi <ansuelsmth@gmail.com>