freenginx-1.31.5

Maxim Dounin mdounin at mdounin.ru
Tue Oct 27 16:20:33 UTC 2026


Changes with freenginx 1.31.5                                    27 Oct 2026

    *) Security: one of the keys was left uninitialized when using automatic
       rotation of TLS session ticket keys, making it possible to forge a
       session and bypass client certificate verification (CVE-2026-97629);

    *) Bugfix: a segmentation fault might occur in a worker process if AIO
       was used in subrequests.

    *) Bugfix: in HTTP/3.


-- 
Maxim Dounin
http://freenginx.org/


More information about the nginx mailing list