~ /tags / security

#Security

4 posts tagged#Security.

nginx 1.31.7
A security release. nginx 1.31.7 fixes five CVEs, including two worker buffer overflows and an HTTP/3 request body bug, and the bundled OpenSSL moves to 4.0.3, which fixes fourteen more.
2026-10-15#nginx #OpenSSL #Release #Security
nginx 1.31.6
A security release. Upstream fixes a heap buffer overflow in HTTP/3 that needs an old OpenSSL to trigger, and closes two holes in the predicate location code that shipped two weeks ago.
2026-09-16#nginx #Release #Security
nginx 1.31.4
A quiet release upstream, but the packaging around it changed a lot. Every third-party module is now dynamic, Brotli and Zstd moved to opt-in snippets, and the bundled OpenSSL jumps to 4.0.2.
2026-08-26#nginx #Release #Security
nginx 1.31.3
Upstream fixes three security issues, including a heap buffer overflow in map with regex. Packages are live for all supported releases, upgrade now.
2026-07-17#nginx #Release #Security