Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

nginx 1.25.4 + njs 0.8.3 + headers-more-nginx-module 0.37 #135

Merged
merged 3 commits into from
Mar 13, 2024

Conversation

macbre
Copy link
Owner

@macbre macbre commented Mar 13, 2024


Changes with nginx 1.25.4                                        14 Feb 2024

    *) Security: when using HTTP/3 a segmentation fault might occur in a
       worker process while processing a specially crafted QUIC session
       (CVE-2024-24989, CVE-2024-24990).

    *) Bugfix: connections with pending AIO operations might be closed
       prematurely during graceful shutdown of old worker processes.

    *) Bugfix: socket leak alerts no longer logged when fast shutdown was
       requested after graceful shutdown of old worker processes.

    *) Bugfix: a socket descriptor error, a socket leak, or a segmentation
       fault in a worker process (for SSL proxying) might occur if AIO was
       used in a subrequest.

    *) Bugfix: a segmentation fault might occur in a worker process if SSL
       proxying was used along with the "image_filter" directive and errors
       with code 415 were redirected with the "error_page" directive.

    *) Bugfixes and improvements in HTTP/3.

@macbre macbre marked this pull request as ready for review March 13, 2024 22:12
@macbre macbre enabled auto-merge March 13, 2024 22:13
@macbre macbre changed the title nginx 1.25.4 + njs 0.8.3 nginx 1.25.4 + njs 0.8.3 + headers-more-nginx-module 0.37 Mar 13, 2024
@macbre macbre merged commit f2f4b52 into master Mar 13, 2024
1 check passed
@macbre macbre deleted the nginx/1.25.4 branch March 13, 2024 22:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant