Peter Korsgaard aff84680c0 package/nginx: add upstream security fix for CVE-2022-4174{1, 2} ...

Fixes the following security issues:

- CVE-2022-41741: Memory corruption in the ngx_http_mp4_module
- CVE-2022-41742: Memory disclosure in the ngx_http_mp4_module

https://mailman.nginx.org/archives/list/nginx-announce@nginx.org/message/RBRRON6PYBJJM2XIAPQBFBVLR4Q6IHRA/

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 8fa2ff2857)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

2022-11-22 23:55:56 +01:00

..

0001-auto-type-sizeof-rework-autotest-to-be-cross-compila.patch

…

0002-auto-feature-add-mechanism-allowing-to-force-feature.patch

…

0003-auto-set-ngx_feature_run_force_result-for-each-featu.patch

…

0004-auto-lib-libxslt-conf-use-pkg-config.patch

…

0005-auto-unix-make-sys_nerr-guessing-cross-friendly.patch

…

0006-auto-lib-openssl-conf-use-pkg-config.patch

…

0007-auto-lib-libgd-conf-use-pkg-config.patch

…

0008-src-os-unix-ngx_linux_config.h-only-include-dlfcn.h-.patch

…

0009-auto-os-linux-fix-build-with-libxcrypt.patch

…

0010-Allow-forcing-of-endianness-for-cross-compilation.patch

…

0011-Mp4-disabled-duplicate-atoms.patch

package/nginx: add upstream security fix for CVE-2022-4174{1, 2}

2022-11-22 23:55:56 +01:00

Config.in

…

nginx.hash

…

nginx.logrotate

…

nginx.mk

package/nginx: add upstream security fix for CVE-2022-4174{1, 2}

2022-11-22 23:55:56 +01:00

nginx.service

…

S50nginx

…