mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-08-01 21:23:51 -09:00
a0081aa1f8
See here for changes: https://nginx.org/en/CHANGES-1.28 Following security related issues are fixed: *) Security: processing of a specially crafted login/password when using the "none" authentication method in the ngx_mail_smtp_module might cause worker process memory disclosure to the authentication server (CVE-2025-53859). *) Security: insufficient check in virtual servers handling with TLSv1.3 SNI allowed to reuse SSL sessions in a different virtual server, to bypass client SSL certificates verification (CVE-2025-23419). *) Security: processing of a specially crafted mp4 file by the ngx_http_mp4_module might cause a worker process crash (CVE-2024-7347). Thanks to Nils Bars. *) Security: when using HTTP/3, processing of a specially crafted QUIC session might cause a worker process crash, worker process memory disclosure on systems with MTU larger than 4096 bytes, or might have potential other impact (CVE-2024-32760, CVE-2024-31079, CVE-2024-35200, CVE-2024-34161). Thanks to Nils Bars of CISPA. Update patch 0007, which does not apply cleanly. License file was changed, year was bumped to 2025. Signed-off-by: Waldemar Brodkorb <wbx@openadk.org> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
31 lines
820 B
Diff
31 lines
820 B
Diff
From 8dc9dffc1f99ac951865f3135dfb5061a08d1f85 Mon Sep 17 00:00:00 2001
|
|
From: Martin Bark <martin@barkynet.com>
|
|
Date: Fri, 6 May 2016 16:29:17 +0100
|
|
Subject: [PATCH] src/os/unix/ngx_linux_config.h: only include dlfcn.h if
|
|
available
|
|
|
|
Signed-off-by: Martin Bark <martin@barkynet.com>
|
|
---
|
|
src/os/unix/ngx_linux_config.h | 6 ++++--
|
|
1 file changed, 4 insertions(+), 2 deletions(-)
|
|
|
|
diff --git a/src/os/unix/ngx_linux_config.h b/src/os/unix/ngx_linux_config.h
|
|
index d99358c93..612935524 100644
|
|
--- a/src/os/unix/ngx_linux_config.h
|
|
+++ b/src/os/unix/ngx_linux_config.h
|
|
@@ -54,10 +54,12 @@
|
|
#include <sys/ioctl.h>
|
|
#include <sys/utsname.h> /* uname() */
|
|
|
|
-#include <dlfcn.h>
|
|
+#include <ngx_auto_config.h>
|
|
|
|
|
|
-#include <ngx_auto_config.h>
|
|
+#if (NGX_HAVE_DLOPEN)
|
|
+#include <dlfcn.h>
|
|
+#endif
|
|
|
|
|
|
#if (NGX_HAVE_CRYPT_H)
|