freenginx-1.30.2

Maxim Dounin mdounin at mdounin.ru
Tue Oct 27 16:20:58 UTC 2026


Changes with freenginx 1.30.2                                    27 Oct 2026

    *) Security: one of the keys was left uninitialized when using automatic
       rotation of TLS session ticket keys, making it possible to forge a
       session and bypass client certificate verification (CVE-2026-97629);


-- 
Maxim Dounin
http://freenginx.org/


More information about the nginx mailing list