Join the community today
Become a Member

Stable Branch update nginx 1.27.4 default in 131.00stable

Discussion in 'Centmin Mod Github Commits' started by eva2000, Feb 16, 2025.

  1. eva2000

    eva2000 Administrator Staff Member

    54,864
    12,239
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,810
    Local Time:
    5:30 AM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    update nginx 1.27.4 default in 131.00stable

    - update nginx 1.27.4 default for security fix https://nginx.org/en/CHANGES insufficient check in virtual servers handling with TLSv1.3
    SNI allowed to reuse SSL sessions in a different virtual server, to bypass client SSL certificates verification (CVE-2025-23419)
    - nginx 1.26.3 stable was also released for same security fix so users can either upgrade to nginx 1.26.3 stable or 1.27.4 mainline release
    - nginx 1.27.4 new ssl certificate cache has only been implemented support wise optionally in centmin mod 140.00beta01 for now while
    you can manually enable it yourself too as perhttps://blog.nginx.org/blog/optimizing-resource-usage-for-complex-ssl-configurations

    Continue reading...


    132.00stable branch