Join the community today
Become a Member

Nginx Nginx 1.25.4 is out

Discussion in 'Nginx and PHP-FPM news & discussions' started by pamamolf, Feb 16, 2024.

  1. pamamolf

    pamamolf Well-Known Member

    4,037
    426
    83
    May 31, 2014
    Ratings:
    +824
    Local Time:
    1:08 PM
    Nginx-1.25.x
    MariaDB 10.3.x
    Changes with nginx 1.25.4 14 Feb 2024

    *) Security: when using HTTP/3 a segmentation fault might occur in a
    worker process while processing a specially crafted QUIC session
    (CVE-2024-24989, CVE-2024-24990).

    *) Bugfix: connections with pending AIO operations might be closed
    prematurely during graceful shutdown of old worker processes.

    *) Bugfix: socket leak alerts no longer logged when fast shutdown was
    requested after graceful shutdown of old worker processes.


    *) Bugfix: a socket descriptor error, a socket leak, or a segmentation
    fault in a worker process (for SSL proxying) might occur if AIO was
    used in a subrequest.

    *) Bugfix: a segmentation fault might occur in a worker process if SSL
    proxying was used along with the "image_filter" directive and errors
    with code 415 were redirected with the "error_page" directive.

    *) Bugfixes and improvements in HTTP/3.


    https://nginx.org/en/CHANGES

    Thanks
     
  2. duderuud

    duderuud Active Member

    187
    69
    28
    Dec 5, 2020
    The Netherlands
    Ratings:
    +143
    Local Time:
    12:08 PM
    1.25 x
    10.6
    Already installed
     
  3. eva2000

    eva2000 Administrator Staff Member

    51,210
    11,898
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,372
    Local Time:
    9:08 PM
    Nginx 1.25.x
    MariaDB 10.x
  4. eva2000

    eva2000 Administrator Staff Member

    51,210
    11,898
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,372
    Local Time:
    9:08 PM
    Nginx 1.25.x
    MariaDB 10.x
    CVE-2024-24989 plain English explanation myF5