www/nginx: update to 1.30, ok robert@ (MAINTAINER)
see https://nginx.org/en/CHANGES-1.30
notable changes: keepalive enabled by default in upstream definitions,
and proxy_http_version now defaults to 1.1.
Add checks to make sure that the ELF header and program header fit into
the data we read from the on-disk shared library. These checks should
only fail for malformed shared libraries, but failing to load a shared
library is better than crashing the program because of an out-of-bounds
access.
Issue found by Frank Denis using the Swival Security Scanner.
ok guenther@
Fix a regression in rev. 1.269 reported by anton@.
Due to unveil(2), mansearch() can no longer change back to the initial
working directory. But check_xr() calls mansearch(), so the main program
needs to change back if -T lint or -W style is requested, such that these
work even when multiple relative file names are given on the command line.
Size is the number of wide characters, not the number of bytes.
The correct amount of memory was allocated but the stored size did
not match the allocation due to being multiplied by sizeof(wchar_t).
Spotted by Frank Denis using the Swival Security Scanner
OK deraadt@
When I added UF_PLEDGEOPEN in the sys_fchflags() chunk I mistakenly
used the wrong vnode operation.
spotted by Frank Denis using the Swival Security Scanner
ok claudio
