Shubham Chakraborty 8008da299f package/nginx: security bump to version 1.28.3 ...

Fixes the following security issues:
- CVE-2026-27654: Buffer overflow in ngx_http_dav_module when using the
  alias directive with WebDAV COPY or MOVE requests.
- CVE-2026-27784 & CVE-2026-32647: Buffer overflows in ngx_http_mp4_module
  when processing specially crafted MP4 files.
- CVE-2026-27651: NULL pointer dereference in the mail proxy module
  during CRAM-MD5 or APOP authentication retries.
- CVE-2026-28753: DNS PTR record manipulation in auth_http or SMTP proxy.
- CVE-2026-28755: OCSP certificate check bypass in the stream module.

For a full list of changes, see:
https://nginx.org/en/CHANGES-1.28

Signed-off-by: Shubham Chakraborty <chakrabortyshubham66@gmail.com>
Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>

2026-05-04 10:27:31 +02:00

..

0001-auto-type-sizeof-rework-autotest-to-be-cross-compila.patch

…

0002-auto-feature-add-mechanism-allowing-to-force-feature.patch

…

0003-auto-set-ngx_feature_run_force_result-for-each-featu.patch

…

0004-auto-lib-libxslt-conf-use-pkg-config.patch

…

0005-auto-unix-make-sys_nerr-guessing-cross-friendly.patch

…

0006-auto-lib-libgd-conf-use-pkg-config.patch

…

0007-src-os-unix-ngx_linux_config.h-only-include-dlfcn.h-.patch

…

0008-Allow-forcing-of-endianness-for-cross-compilation.patch

…

0009-auto-lib-openssl-conf-use-pkg-config.patch

…

Config.in

…

nginx.hash

…

nginx.logrotate

…

nginx.mk

…

nginx.service

…

S50nginx

…