| Commit History - (may be incomplete: for full details, see links to repositories near top of page) |
| This is a slave port. You may also want to view the commits to the master port: www/angie |
| Commit | Credits | Log message |
|---|
1.0.1,1
18 Sep 2026 18:29:31
     |
Jochen Neumeister (joneum) 
Author: Sebastian Oswald |
www/angie-module-njs: Security update to 1.0.1
This maintenance update of njs fixes three security issues:
- Access control bypass in js_access when an asynchronous request body
continuation threw an exception or produced an unhandled rejection
(CVE-2026-18329). Previously, nginx could continue processing the
request as though the js_access check had succeeded. Affects
0.9.9-1.0.0. Thanks to Ta Duc Thien.
- Worker process crash when reading Response.statusText after an
upstream server returned a status line with an empty reason phrase
(CVE-2026-78222). Affects 0.5.1-1.0.0.
- Heap buffer overflow while parsing namespace prefix lists passed to
xml.exclusiveC14n() (CVE-2026-78689). Affects 0.7.10-1.0.0. Thanks to
Vladimir, Vulnerability Research Tech Lead @ Cyera, evilgensec.
PR: 298637
Changes: https://github.com/nginx/njs/releases/tag/1.0.1
Security: 6cf326a2-b38c-11f1-a655-3497f65b111b
Sponsored by: Netzkommune GmbH |
1.0.0_2,1
18 Sep 2026 18:29:30
 |
Jochen Neumeister (joneum)
Author: Sebastian Oswald |
www/angie: Security update to 1.12.2
This maintenance release fixes CVE-2026-90439:
When using an OpenSSL version without native HTTP/3 support (3.5.0
or earlier), if the default server for the address that accepted a
regular HTTPS request also used HTTP/3 (the listen directive with the
quic parameter, possibly on a different port), while a server block
without HTTP/3 was selected by domain name (SNI), limited worker process
memory corruption or a worker process crash could occur
(CVE-2026-90439); the fix was ported from nginx 1.31.6.
PR: 298632
Changes: https://en.angie.software/angie/docs/oss_changes/#angie-1-12-2
Security: 6cf2ff4b-b38c-11f1-a655-3497f65b111b
Sponsored by: Netzkommune GmbH |
1.0.0_1,1
03 Aug 2026 15:39:04
|
Yusuf Yaman (nxjoseph)
Author: Sebastian Oswald |
www/angie: update 1.12.0 => 1.12.1
This patch release brings various security and bug fixes.
Changelog:
https://en.angie.software/angie/docs/oss_changes/#angie-1-12-1
PR: 297154
Reported by: tjlegg@gmail.com
Approved by: osa, vvd (Mentors, implicit)
Security: CVE-2026-42533
Security: CVE-2026-60005
Security: CVE-2026-56434
MFH: 2026Q3 |
1.0.0,1
15 Jul 2026 23:40:29
|
Vladimir Druzenko (vvd)
Author: Sebastian Oswald |
www/angie-module-njs: Update 0.9.9 => 1.0.0
With this milestone release, the QuickJS engine reaches feature parity
with njs and is now the recommended engine.
Changelog:
https://github.com/nginx/njs/releases/tag/1.0.0
PR: 296796
Sponsored by: UNIS Labs |
0.9.9_1,1
01 Jul 2026 21:21:03
|
Vladimir Druzenko (vvd)
Author: Oleg Sidorkin |
www/angie-module-*: Bump PORTREVISION after update www/angie 1.11.6 => 1.11.8
PR: 296274
Approved by: Sebastian Oswald <sko@rostwald.de> (maintainer)
Sponsored by: UNIS Labs
MFH: 2026Q2 |
0.9.9,1
30 May 2026 13:53:26
|
Vladimir Druzenko (vvd)
Author: Sebastian Oswald |
www/angie-module-njs: Update 0.9.6 => 0.9.9 (CVE-2026-8711)
Changelogs:
https://github.com/nginx/njs/releases/tag/0.9.7
https://github.com/nginx/njs/releases/tag/0.9.8
https://github.com/nginx/njs/releases/tag/0.9.9
PR: 295591
Security: CVE-2026-8711
Sponsored by: UNIS Labs
MFH: 2026Q2 |
0.9.6,1
01 Apr 2026 16:35:48
|
Vladimir Druzenko (vvd)
Author: Sebastian Oswald |
www/angie-module-njs: Update 0.9.5 => 0.9.6
Changelog:
https://github.com/nginx/njs/releases/tag/0.9.6
PR: 294178
Sponsored by: UNIS Labs
MFH: 2026Q1 |
0.9.5_2,1
08 Feb 2026 13:37:03
|
Vladimir Druzenko (vvd)
Author: Sebastian Oswald |
www/angie: Update 1.11.2 => 1.11.3 (fix CVE-2026-1642, possible MITM attack)
Security: An attacker in a man-in-the-middle (MITM) position before a
proxied server using TLS, given conditions beyond the attacker's
control, could inject plaintext data into the response before the TLS
handshake begins (CVE-2026-1642); the fix was ported from nginx 1.29.5.
Changelog:
https://en.angie.software/angie/docs/oss_changes/#angie-1-11-3
- Bump PORTREVISION in www/angie-module-*.
- Fix using of ANGIE_PORTREVISION in RUN_DEPENDS for modules.
- Replace INSTALL_MAN with INSTALL_DATA for documentation.
- Unroll "for" loops with 1-2 items - simplify Makefile and call
"INSTALL_*" 1 time instead of several.
PR: 293034
Security: CVE-2026-1642
MFH: 2026Q1 |
0.9.5_1,1
05 Feb 2026 22:37:49
|
Vladimir Druzenko (vvd)
Author: Sebastian Oswald |
www/angie*: Bump PORTREVISION after www/angie update
pkg does not honor RUN_DEPENDS versions, hence it fails to re-install
module packages after updates to www/angie. The only workaround is
bumping PORTREVISION for *all* modules.
PR: 292648 |
0.9.5,1
22 Jan 2026 17:42:11
|
Vladimir Druzenko (vvd)
Author: Sebastian Oswald |
www/angie-module-njs: Update 0.9.4 => 0.9.5
Changelog:
https://github.com/nginx/njs/releases/tag/0.9.5
Commit log:
https://github.com/nginx/njs/compare/0.9.4...0.9.5
PR: 292649 |
0.9.4_1,1
31 Dec 2025 22:54:52
|
Vladimir Druzenko (vvd)
Author: Sebastian Oswald |
www/angie: Update 1.10.3 => 1.11.1
News:
https://en.angie.software/news/releases/angie-1-11-0/
Changelog:
https://en.angie.software/angie/docs/oss_changes/#angie-1-11-1
PR: 291930 |
0.9.4,1
09 Dec 2025 20:02:05
|
Vladimir Druzenko (vvd)
Author: Sebastian Oswald |
www/angie-module-njs: Update 0.9.1 => 0.9.4
Changelogs:
https://github.com/nginx/njs/releases/tag/0.9.2
https://github.com/nginx/njs/releases/tag/0.9.3
https://github.com/nginx/njs/releases/tag/0.9.4
PR: 291491 |
0.9.1,1
09 Dec 2025 19:28:53
|
Vladimir Druzenko (vvd)
Author: Sebastian Oswald |
www/angie: Use upstream version numbers for modules
Angie modules currently inherit the version number of the angie version
they are built against. This makes it hard and opaque to track their
actual version.
The mechanism used in the Makefile also had the unwanted side-effect of
PORTREVISION propagating from modules to the master port, which broke
the build (we found out the hard way...)
While here reduce number of of MKDIR calls.
PR: 291490
Co-authored-by: Vladimir Druzenko <vvd@FreeBSD.org> |
1.10.1
10 Aug 2025 13:52:22
|
Vladimir Druzenko (vvd)
Author: Sebastian Oswald |
www/angie-module-njs: Update 0.9.0 => 0.9.1
Changelog:
https://github.com/nginx/njs/releases/tag/0.9.1
PR: 288571
Approved by: Oleg A. Mamontov <oleg@mamontov.net> (maintainer, implicit -
inactive for more than 10 months)
MFH: 2025Q3 |
1.9.1
19 Jun 2025 14:39:37
|
Vladimir Druzenko (vvd) |
www/angie-module-njs: Update 0.8.9 => 0.9.0
Changelogs:
https://github.com/nginx/njs/releases/tag/0.8.10
https://github.com/nginx/njs/releases/tag/0.9.0
PR: 287316
Approved by: oleg@mamontov.net (maintainer, timeout 2 weeks)
MFH: 2025Q2 |
1.8.1
23 Jan 2025 23:46:34
|
Vladimir Druzenko (vvd) |
www/angie-module-njs: Update 1.3.2 → 1.8.1
Changelogs:
https://github.com/nginx/njs/blob/0.8.9/CHANGES
PR: 282394
Approved by: oleg@mamontov.net (maintainer, timeout 3 mounts) |
1.3.2
22 Feb 2024 12:31:51
|
Robert Clausecker (fuz)
Author: Oleg A. Mamontov |
www/angie-module-njs: Add source URL
PR: 275298 |
1.3.1
18 Nov 2023 20:20:40
|
Robert Clausecker (fuz)
Author: Oleg A. Mamontov |
www/angie*: update dependent modules
Changelogs:
-
https://github.com/kjdev/nginx-auth-jwt/commit/1b32c94ecc2ca8d7f2690c7f60a8fff07bee0a25
- https://github.com/openresty/headers-more-nginx-module/releases/tag/v0.35
- https://github.com/nginx/njs/blob/master/CHANGES
- https://github.com/kaltura/nginx-vod-module/releases/tag/1.32
PR: 274728 |
1.3.0
28 Sep 2023 05:15:51
|
Li-Wen Hsu (lwhsu)
Author: Oleg A. Mamontov |
www/angie-module-njs: update to upstream version 0.8.1
PR: 274124 |
1.2.0_1
09 Aug 2023 13:01:17
|
Robert Clausecker (fuz)
Author: Oleg A. Mamontov |
www/angie-module-njs: Angie NJS dynamic module
Module is a subset of the JavaScript language that allows extending
Angie functionality.
PR: 272999 |
As an Amazon Associate I earn from qualifying purchases.
