La version principale de nginx 1.25.4 a \u00e9t\u00e9 publi\u00e9e, poursuivant ainsi le d\u00e9veloppement de nouvelles fonctionnalit\u00e9s. Dans la branche stable 1.24.x, qui est maintenue parall\u00e8lement, seules des modifications li\u00e9es \u00e0 la correction de bogues graves et de vuln\u00e9rabilit\u00e9s sont apport\u00e9es. \u00c0 l'avenir, une branche stable 1.26 sera form\u00e9e \u00e0 partir de la branche principale 1.25.x. Le code du projet est \u00e9crit en C et distribu\u00e9 sous licence BSD. <\/p>\n
Dans cette nouvelle version, deux vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans le module exp\u00e9rimental http_v3_module (d\u00e9sactiv\u00e9 par d\u00e9faut), qui offre un support pour le protocole HTTP\/3, utilisant le protocole QUIC comme transport pour HTTP\/2. La premi\u00e8re vuln\u00e9rabilit\u00e9 (CVE-2024-24989) est caus\u00e9e par le d\u00e9f\u00e9rencement d'un pointeur nul, et la deuxi\u00e8me (CVE-2024-24990) par un acc\u00e8s \u00e0 la m\u00e9moire apr\u00e8s sa lib\u00e9ration. Dans la liste des modifications, il est indiqu\u00e9 que les deux vuln\u00e9rabilit\u00e9s ne peuvent entra\u00eener qu'un plantage du processus lors du traitement de sessions QUIC sp\u00e9cialement con\u00e7ues, mais il semble qu'une analyse des cons\u00e9quences plus graves n'ait pas \u00e9t\u00e9 r\u00e9alis\u00e9e pour la seconde vuln\u00e9rabilit\u00e9. <\/p>\n
En plus de corriger les vuln\u00e9rabilit\u00e9s, la nouvelle version apporte \u00e9galement des am\u00e9liorations g\u00e9n\u00e9rales et des corrections dans l'impl\u00e9mentation de HTTP\/3, ainsi que des correctifs li\u00e9s aux fuites de sockets, aux erreurs de sockets ou aux crashs lors de l'utilisation de AIO. Un probl\u00e8me de fermeture pr\u00e9matur\u00e9e des connexions avec des op\u00e9rations AIO inachev\u00e9es lors de l'arr\u00eat en douceur des anciens processus de travail a \u00e9t\u00e9 r\u00e9solu. Un crash a \u00e9t\u00e9 corrig\u00e9 lors de la redirection des erreurs avec le code 415 \u00e0 l'aide de la directive error_page, en cas d'utilisation SSL<\/a>- de proxy et de la directive image_filter. <\/p>\n De plus, il y a quelques jours, la version njs 0.8.4 a \u00e9t\u00e9 publi\u00e9e, un interpr\u00e9teur de JavaScript pour serveur web<\/a> nginx. L'interpr\u00e9teur njs met en \u0153uvre les normes ECMAScript et permet d'\u00e9tendre les capacit\u00e9s de nginx pour traiter les requ\u00eates \u00e0 l'aide de scripts dans la configuration. Les scripts peuvent \u00eatre utilis\u00e9s dans le fichier de configuration pour d\u00e9finir une logique d traitement des requ\u00eates avanc\u00e9e, g\u00e9n\u00e9rer dynamiquement des r\u00e9ponses, modifier des requ\u00eates\/r\u00e9ponses ou rapidement cr\u00e9er des mocks pour r\u00e9soudre des probl\u00e8mes dans les applications web. Dans cette nouvelle version, seules des corrections de bogues sont signal\u00e9es. \u0421\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0438 nginx 1.25.4, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442\u0441\u044f \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0435 \u043d\u043e\u0432\u044b\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439. \u0412 \u043f\u0430\u0440\u0430\u043b\u043b\u0435\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0435 1.24.x \u0432\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u044b\u0445 \u043e\u0448\u0438\u0431\u043e\u043a \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0412 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u043c \u043d\u0430 \u0431\u0430\u0437\u0435 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0438 1.25.x \u0431\u0443\u0434\u0435\u0442 \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u0430\u044f \u0432\u0435\u0442\u043a\u0430 1.26. \u041a\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 \u0421\u0438 \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 BSD. \u0412 \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-113597","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Dans nginx 1.25.4, deux vuln\u00e9rabilit\u00e9s li\u00e9es \u00e0 HTTP\/3 ont \u00e9t\u00e9 corrig\u00e9es | ProHoster","description":"La version principale de nginx 1.25.4 a \u00e9t\u00e9 publi\u00e9e, poursuivant ainsi le d\u00e9veloppement de nouvelles fonctionnalit\u00e9s.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/v-nginx-1-25-4-ustraneny-dve-uyazvimosti-svyazannye-s-http-3","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 nginx 1.25.4 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 HTTP\/3 | ProHoster","og:description":"\u0421\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0438 nginx 1.25.4, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442\u0441\u044f \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0435 \u043d\u043e\u0432\u044b\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/v-nginx-1-25-4-ustraneny-dve-uyazvimosti-svyazannye-s-http-3","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-02-14T20:02:53+00:00","article:modified_time":"2024-02-14T20:02:53+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"113597","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-09 15:26:55","updated":"2026-02-09 17:28:54","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/113597","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=113597"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/113597\/revisions"}],"predecessor-version":[{"id":159522,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/113597\/revisions\/159522"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=113597"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=113597"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=113597"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Source : opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"