Nginx 1.31.2 \u0259sas versiyas\u0131 burax\u0131ld\u0131, bu versiya yeni imkanlar\u0131n inki\u015faf\u0131n\u0131 davam etdirir, eyni zamanda nginx 1.30.3 stabil versiyas\u0131 paralel olaraq burax\u0131l\u0131r, burada yaln\u0131z ciddi x\u0259talar\u0131n v\u0259 z\u0259iflikl\u0259rin aradan qald\u0131r\u0131lmas\u0131 il\u0259 ba\u011fl\u0131 d\u0259yi\u015fiklikl\u0259r edilir. Yenilikl\u0259rd\u0259 3 z\u0259iflik aradan qald\u0131r\u0131l\u0131b:<\/p>\n
\n
CVE-2026-42530 \u2014 azad edilmi\u015f yadda\u015fa (use-after-free) istinad, HTTP\/3 protokolunun icras\u0131 daxilind\u0259. Problemin kritik t\u0259hl\u00fck\u0259 s\u0259viyy\u0259si (10-dan 9.2) m\u00fc\u0259yy\u0259n olunub, bu is\u0259 x\u00fcsusi haz\u0131rlanm\u0131\u015f QUIC protokolu sessiyas\u0131 zaman\u0131 i\u015f\u00e7i prosesi h\u00fcquqlar\u0131 il\u0259 uzaqdan kod icras\u0131n\u0131 istisna etmir.\n
CVE-2026-42055 \u2014 ngx_http_proxy_v2_module v\u0259 ngx_http_grpc_module modullar\u0131nda buffer overflow, HTTP\/2 protokolunda x\u00fcsusi haz\u0131rlanm\u0131\u015f sor\u011fular\u0131 proksil\u0259y\u0259rk\u0259n v\u0259 ya gRPC backend-\u0259 g\u00f6nd\u0259ril\u0259rk\u0259n ortaya \u00e7\u0131x\u0131r. Problemin kritik t\u0259hl\u00fck\u0259 s\u0259viyy\u0259si (10-dan 9.2) m\u00fc\u0259yy\u0259n olunub ki, bu da uzaqdan kod icras\u0131na imkan verir. T\u0259hl\u00fck\u0259sizlik \u00e7at\u0131\u015f\u0131 a\u015fa\u011f\u0131dak\u0131 konfiqurasiyalarda \u00f6z\u00fcn\u00fc g\u00f6st\u0259rir: \n\u00abignore_invalid_headers off;\u00bb v\u0259 \u00ablarge_client_header_buffers\u00bb y\u00fcks\u0259k d\u0259y\u0259ri.<\/p>\n
CVE-2026-48142 \u2014 x\u00fcsusi haz\u0131rlanm\u0131\u015f sor\u011fular\u0131n emal\u0131 zaman\u0131 ayr\u0131lm\u0131\u015f bufferin xaricind\u0259n oxuma, bunun n\u0259tic\u0259sind\u0259 UTF-8 kodlamas\u0131nda m\u0259tnin yenid\u0259n kodlanmas\u0131na s\u0259b\u0259b olur, ngx_http_charset_module modulu vasit\u0259sil\u0259. T\u0259hl\u00fck\u0259sizlik \u00e7at\u0131\u015f\u0131 \u00abcharset_map\u00bb direktivi olan konfiqurasiyalarda, location blokunda \u00absource_charset utf-8\u00bb v\u0259 \u00abcharset ba\u015fqa_kodlama\u00bb direktivl\u0259ri olan hallarda m\u00fc\u0259yy\u0259n olunur. Problemin orta t\u0259hl\u00fck\u0259 s\u0259viyy\u0259si (10-dan 6.3) m\u00fc\u0259yy\u0259n olunub ki, bu da i\u015f\u00e7i prosesinin yadda\u015f\u0131n\u0131n m\u0259zmununun s\u0131zmas\u0131na imkan verir.\n<\/ul>\n
Nginx 1.31.2 versiyas\u0131nda z\u0259iflikl\u0259rin aradan qald\u0131r\u0131lmas\u0131 il\u0259 yana\u015f\u0131, TLS ba\u011flant\u0131s\u0131 zaman\u0131 ClientHello mesaj\u0131nda m\u00fc\u015ft\u0259ri t\u0259r\u0259find\u0259n elan edil\u0259n r\u0259q\u0259msal imza alqoritml\u0259rini \u0259ks etdir\u0259n $ssl_sigalgs d\u0259yi\u015f\u0259ni \u0259lav\u0259 olunub. $request_id d\u0259yi\u015f\u0259ni vasit\u0259sil\u0259 \u00f6t\u00fcr\u00fcl\u0259n identifikatorun formala\u015fmas\u0131nda SipHash-2-4 h\u0259\u015f alqoritmi istifad\u0259 olunur. \n M\u0259nb\u0259: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"