{"id":111089,"date":"2023-10-25T15:10:16","date_gmt":"2023-10-25T13:10:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-nginx-1-25-3-njs-0-8-2-i-nginx-unit-1-31-1"},"modified":"2023-10-25T15:10:16","modified_gmt":"2023-10-25T13:10:16","slug":"vypusk-nginx-1-25-3-njs-0-8-2-i-nginx-unit-1-31-1","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/vypusk-nginx-1-25-3-njs-0-8-2-i-nginx-unit-1-31-1","title":{"rendered":"Corrective releases of X.Org Server 21.1.9 and DDX component (Device-Dependent X) xwayland 22.2.2 have been published, ensuring the launch of the X.Org Server for executing X11 applications in environments based on.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
The release of the main branch nginx 1.25.3 has been formed, continuing the development of new capabilities. In the concurrently supported stable branch 1.24.x, only changes related to serious bugs and vulnerabilities are made. In the future, a stable branch 1.26 will be formed based on the main branch 1.25.x. The project code is written in C and distributed under the BSD license. <\/p>\n
Among the changes: <\/p>\n
\n
Enhanced protection against abnormal HTTP\/2 client activity, particularly from Rapid Reset DoS attacks, which create a large number of immediately reset streams within a single HTTP\/2 connection. In the default configuration, such attacks are capped by the 'keepalive_requests' limit (after every 1000 requests, the connection will be reset) and by the 'limit_req' constraints. To respond more quickly to request flooding through a large number of streams, an additional restriction has been added that does not allow the creation of more than 256 (2 * max_concurrent_streams) new streams during each event processing cycle. This new limitation allows for the blocking of requests before reaching the total limit on the number of simultaneous streams, such as when streams are processed asynchronously or reset. A similar change was also included in the release of angie 1.3.1 (a fork of nginx) published a week ago.\n
Buffer management used for automatic detection of HTTP\/2 connections has been improved.\n
Performance has been improved for launching configurations with a large number of 'location' directives.\n
The crash of the worker process observed when attempting to use HTTP\/2 without SSL<\/a>.\n