{"id":168999,"date":"2026-04-16T23:12:22","date_gmt":"2026-04-16T21:12:22","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/nginx-1-30-0"},"modified":"2026-04-16T23:12:22","modified_gmt":"2026-04-16T21:12:22","slug":"nginx-1-30-0","status":"publish","type":"post","link":"https:\/\/prohoster.info\/es\/blog\/news\/nginx-1-30-0","title":{"rendered":"Nginx 1.30.0","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Despu\u00e9s de un a\u00f1o de desarrollo, el proyecto Nginx ha anunciado el lanzamiento de la nueva rama estable 1.30.0. En el proceso de preparaci\u00f3n de la versi\u00f3n estable se corrigieron seis vulnerabilidades, cuatro de las cuales est\u00e1n relacionadas con el m\u00f3dulo de procesamiento de archivos multimedia y protocolos de autenticaci\u00f3n. El cambio clave fue la compatibilidad con HTTP\/3 y QUIC, que ahora se considera lista para entornos de producci\u00f3n.<\/p>\n<h4>Vulnerabilidades corregidas:<\/h4>\n<ul>\n<li><strong>CVE-2026-27654:<\/strong> Un desbordamiento de b\u00fafer al procesar solicitudes COPY o MOVE en una ubicaci\u00f3n con la directiva alias puede permitir que un atacante salga del directorio ra\u00edz del sitio.<\/li>\n<li><strong>CVE-2026-27784:<\/strong> Un archivo MP4 dise\u00f1ado espec\u00edficamente puede causar una ca\u00edda del proceso en plataformas de 32 bits.<\/li>\n<li><strong>CVE-2026-27651:<\/strong> Un error de segmentaci\u00f3n en el proceso al usar m\u00e9todos de autenticaci\u00f3n CRAM-MD5 o APOP con la reintentos de autenticaci\u00f3n habilitados.<\/li>\n<li><strong>CVE-2026-28753:<\/strong> Uso de registros DNS PTR para inyectar datos en solicitudes auth_http y el comando XCLIENT en la conexi\u00f3n SMTP del backend.<\/li>\n<li><strong>CVE-2026-28755:<\/strong> Finalizaci\u00f3n exitosa <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/es\/ssl-sertifikat\/\" title=\"SSL\" data-wpil-keyword-link=\"linked\">SSL<\/a>-handshake, a pesar de rechazar el certificado del cliente al verificar OCSP en el m\u00f3dulo stream.<\/li>\n<\/ul>\n<h3>Otras innovaciones significativas:<\/h3>\n<ul>\n<li><strong>HTTP Early Hints (103):<\/strong> El servidor puede enviar encabezados preliminares sin esperar a que el backend genere la respuesta completa, lo que acelera la carga de p\u00e1ginas.<\/li>\n<li><strong>Encrypted ClientHello (ECH):<\/strong> Funci\u00f3n de privacidad de TLS que oculta el nombre del sitio solicitado de los observadores de la red.<\/li>\n<li><strong>Sticky Sessions:<\/strong> La directiva sticky en el bloque upstream asegura la \"adherencia\" de las sesiones del cliente a un <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/es\/server\/dts-shicago\/\" title=\"servidor\" data-wpil-keyword-link=\"linked\">servidor<\/a> backend espec\u00edfico.<\/li>\n<li><strong>Multipath TCP (MPTCP):<\/strong> Soporte del par\u00e1metro multipath en la directiva listen para mejorar la resiliencia y capacidad en el nivel de transporte.<\/li>\n<li><strong>Keep-Alive:<\/strong> El valor predeterminado de proxy_http_version se ha cambiado a 1.1, y el encabezado Connection ya no se env\u00eda por el proxy,<a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/es\/server\/dts-prohoster\/\" title=\"el servidor\" data-wpil-keyword-link=\"linked\">el servidor<\/a>lo que mejora la reutilizaci\u00f3n de conexiones.<\/li>\n<li><strong>OpenSSL 4.0:<\/strong> Se ha asegurado la compatibilidad con la pr\u00f3xima versi\u00f3n principal de la biblioteca criptogr\u00e1fica.<\/li>\n<li><strong>m\u00f3dulo geo:<\/strong> La directiva include dentro del bloque geo ahora admite caracteres comod\u00edn.<\/li>\n<\/ul>\n<p>Fuente: <a rel=\"nofollow\" href=\"https:\/\/www.linux.org.ru\/news\/opensource\/18266451\">linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0421\u043f\u0443\u0441\u0442\u044f \u0433\u043e\u0434 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438, \u043f\u0440\u043e\u0435\u043a\u0442 Nginx \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0432\u044b\u0445\u043e\u0434\u0435 \u043d\u043e\u0432\u043e\u0439 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0438 1.30.0. \u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043a\u0438 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0431\u044b\u043b\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0447\u0435\u0442\u044b\u0440\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043a \u043c\u043e\u0434\u0443\u043b\u044e \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043c\u0435\u0434\u0438\u0430\u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041a\u043b\u044e\u0447\u0435\u0432\u044b\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u0441\u0442\u0430\u043b\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 HTTP\/3 \u0438 QUIC, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u0435\u043f\u0435\u0440\u044c \u0441\u0447\u0438\u0442\u0430\u0435\u0442\u0441\u044f \u0433\u043e\u0442\u043e\u0432\u043e\u0439 \u0434\u043b\u044f \u043f\u0440\u043e\u0434\u0430\u043a\u0448\u0435\u043d-\u0441\u0440\u0435\u0434. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: CVE-2026-27654: \u041f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 COPY \u0438\u043b\u0438 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-168999","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0421\u043f\u0443\u0441\u0442\u044f \u0433\u043e\u0434 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438, \u043f\u0440\u043e\u0435\u043a\u0442 Nginx \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0432\u044b\u0445\u043e\u0434\u0435 \u043d\u043e\u0432\u043e\u0439 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0438 1.30.0.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Erik Peterson\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/es\/blog\/news\/nginx-1-30-0\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"es_ES\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Nginx 1.30.0 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0421\u043f\u0443\u0441\u0442\u044f \u0433\u043e\u0434 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438, \u043f\u0440\u043e\u0435\u043a\u0442 Nginx \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0432\u044b\u0445\u043e\u0434\u0435 \u043d\u043e\u0432\u043e\u0439 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0438 1.30.0.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/es\/blog\/news\/nginx-1-30-0\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-04-16T21:12:22+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-04-16T21:12:22+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Nginx 1.30.0 | ProHoster","description":"Despu\u00e9s de un a\u00f1o de desarrollo, el proyecto Nginx ha anunciado el lanzamiento de la nueva rama estable 1.30.0.","canonical_url":"https:\/\/prohoster.info\/es\/blog\/news\/nginx-1-30-0","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"es_ES","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Nginx 1.30.0 | ProHoster","og:description":"\u0421\u043f\u0443\u0441\u0442\u044f \u0433\u043e\u0434 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438, \u043f\u0440\u043e\u0435\u043a\u0442 Nginx \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0432\u044b\u0445\u043e\u0434\u0435 \u043d\u043e\u0432\u043e\u0439 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0438 1.30.0.","og:url":"https:\/\/prohoster.info\/es\/blog\/news\/nginx-1-30-0","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-04-16T21:12:22+00:00","article:modified_time":"2026-04-16T21:12:22+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts\/168999","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/comments?post=168999"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts\/168999\/revisions"}],"predecessor-version":[{"id":169169,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts\/168999\/revisions\/169169"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/media?parent=168999"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/categories?post=168999"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/tags?post=168999"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}