After 5 months of development, a corrective release of the high-performance HTTP server and multi-protocol proxy server nginx 1.20.2 has been prepared for the parallel supported stable branch 1.20.X, in which only changes related to the elimination of serious bugs and vulnerabilities are made.
The main changes added in the process of forming the corrective release:
- Provided compatibility with the OpenSSL 3.0 library.
- Fixed bug with logging empty SSL variables;
- Fixed a bug with closing a keepalive connection with gRPC backends when receiving a GOAWAY frame;
- Fixed hangs that occurred when creating an SSL connection to backends in the stream module;
- Fixed hangs that occurred when creating an SSL connection to gRPC backends using the select, poll, or /dev/poll methods;
- Fixed setting $content_length variable when using chunked transfer encoding;
- Fixed request hanging errors when using HTTP/2 and the aio_write directive.
Source: opennet.ru