The release of the main branch of nginx 1.27.3 is presented, within which the development of new features continues. In the parallel supported stable branch 1.26.x, only changes related to the elimination of serious errors and vulnerabilities are introduced. In the future, the stable branch 1.27 will be formed on the basis of the main branch 1.28.x. The project code is written in C and is distributed under the BSD license.
Among the changes:
- The "server" directive used in the "upstream" block has been updated to support the "resolve" parameter, which enables change tracking. IP addresses for the domain name used and automatic updating of the "upstream" block configuration without the need to restart nginx if the address changes.
- The ngx_mail_proxy_module module has been updated to support SmarterMail-specific IMAP LOGIN mode with untagged CAPABILITY response.
- By default, the TLSv1 and TLSv1.1 protocols are disabled.
- In the "proxy_bind", "fastcgi_bind", "grpc_bind", "memcached_bind", "scgi_bind" and "uwsgi_bind" directives, as well as as a client address in the ngx_http_realip_module module, it is allowed to specify IPv6 addresses in square brackets without a port number.
- Fixed bugs in the implementations of the ngx_http_mp4_module module and the "proxy_store" directive.
- On the DragonFly BSD platform, the so_keepalive parameter in the listen directive has been adjusted.
Source: opennet.ru
