freenginx-1.31.5
Maxim Dounin
mdounin at mdounin.ru
Tue Oct 27 16:20:33 UTC 2026
Changes with freenginx 1.31.5 27 Oct 2026
*) Security: one of the keys was left uninitialized when using automatic
rotation of TLS session ticket keys, making it possible to forge a
session and bypass client certificate verification (CVE-2026-97629);
*) Bugfix: a segmentation fault might occur in a worker process if AIO
was used in subrequests.
*) Bugfix: in HTTP/3.
--
Maxim Dounin
http://freenginx.org/
More information about the nginx
mailing list