Learn about Centmin Mod LEMP Stack today
Register Now

Stable Branch update nginx 1.27.4 default in 131.00stable

Discussion in 'Centmin Mod Github Commits' started by eva2000, Feb 6, 2025.

  1. eva2000

    eva2000 Administrator Staff Member

    58,893
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    2:00 PM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    update nginx 1.27.4 default in 131.00stable

    - update nginx 1.27.4 default for security fix https://nginx.org/en/CHANGES insufficient check in virtual servers handling with TLSv1.3
    SNI allowed to reuse SSL sessions in a different virtual server, to bypass client SSL certificates verification (CVE-2025-23419)
    - nginx 1.26.3 stable was also released for same security fix so users can either upgrade to nginx 1.26.3 stable or 1.27.4 mainline release
    - nginx 1.27.4 new ssl certificate cache has only been implemented support wise optionally in centmin mod 140.00beta01 for now while
    you can manually enable it yourself too as perhttps://blog.nginx.org/blog/optimizing-resource-usage-for-complex-ssl-configurations


    Continue reading...

    131.00stable branch