After 5 months of development, a corrective release of the high-performance HTTP server and multiprotocol proxy server nginx 1.20.2 has been prepared, parallel to the maintained stable branch 1.20.X, which includes only changes related to fixing serious bugs and vulnerabilities.
Main changes added during the formation of the corrective release:
- Compatibility with OpenSSL 3.0 has been ensured.
- Fixed the issue of logging empty SSL-variables;
- Fixed the issue of closing keepalive connections with gRPC backends upon receiving a GOAWAY frame;
- Fixed hangs occurring when establishing SSL connections to backends in the stream module;
- Fixed hangs occurring when establishing SSL connections with gRPC backends using select, poll, or /dev/poll methods;
- The $content_length variable has been fixed when using chunked transfer encoding;
- Fixed request hanging issues when using HTTP/2 and the aio_write directive.
Source: opennet.ru
