{"id":168999,"date":"2026-04-16T23:12:22","date_gmt":"2026-04-16T21:12:22","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/nginx-1-30-0"},"modified":"2026-04-16T23:12:22","modified_gmt":"2026-04-16T21:12:22","slug":"nginx-1-30-0","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/nginx-1-30-0","title":{"rendered":"Nginx 1.30.0","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Apr\u00e8s un an de d\u00e9veloppement, le projet Nginx a annonc\u00e9 la sortie de sa nouvelle version stable 1.30.0. Dans le cadre de la pr\u00e9paration de cette version stable, six vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es, dont quatre concernent le module de traitement des fichiers multim\u00e9dias et des protocoles d'authentification. Le changement majeur est la prise en charge de HTTP\/3 et QUIC, qui est d\u00e9sormais consid\u00e9r\u00e9e comme pr\u00eate pour un environnement de production.<\/p>\n<h4>Vuln\u00e9rabilit\u00e9s corrig\u00e9es :<\/h4>\n<ul>\n<li><strong>CVE-2026-27654:<\/strong> Un d\u00e9passement de tampon lors du traitement des demandes COPY ou MOVE dans un emplacement avec la directive alias peut permettre \u00e0 un attaquant de s'\u00e9chapper du r\u00e9pertoire racine du site.<\/li>\n<li><strong>CVE-2026-27784:<\/strong> Un fichier MP4 sp\u00e9cialement con\u00e7u peut provoquer un plantage du processus de travail sur les plateformes 32 bits.<\/li>\n<li><strong>CVE-2026-27651:<\/strong> Une erreur de segmentation dans le processus de travail lors de l'utilisation des m\u00e9thodes d'authentification CRAM-MD5 ou APOP avec la r\u00e9authentification activ\u00e9e.<\/li>\n<li><strong>CVE-2026-28753:<\/strong> L'utilisation d'enregistrements DNS PTR pour injecter des donn\u00e9es dans les requ\u00eates auth_http et la commande XCLIENT dans la connexion SMTP en arri\u00e8re-plan.<\/li>\n<li><strong>CVE-2026-28755:<\/strong> La r\u00e9ussite <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/fr\/ssl-sertifikat\/\" title=\"SSL\" data-wpil-keyword-link=\"linked\">SSL<\/a>-de la poign\u00e9e de main, malgr\u00e9 le refus du certificat client lors de la v\u00e9rification OCSP dans le module de streaming.<\/li>\n<\/ul>\n<h3>Autres nouveaut\u00e9s significatives :<\/h3>\n<ul>\n<li><strong>HTTP Early Hints (103) :<\/strong> Le serveur peut envoyer des en-t\u00eates pr\u00e9liminaires sans attendre la g\u00e9n\u00e9ration compl\u00e8te de la r\u00e9ponse par le backend, ce qui acc\u00e9l\u00e8re le chargement des pages.<\/li>\n<li><strong>Encrypted ClientHello (ECH) :<\/strong> Une fonctionnalit\u00e9 de confidentialit\u00e9 TLS qui masque le nom du site demand\u00e9 des observateurs r\u00e9seau.<\/li>\n<li><strong>Sticky Sessions :<\/strong> La directive sticky dans le bloc upstream assure l'\"attachement\" des sessions client \u00e0 un certain <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/fr\/server\/dts-shicago\/\" title=\"serveur\" data-wpil-keyword-link=\"linked\">serveur<\/a> backend.<\/li>\n<li><strong>Multipath TCP (MPTCP) :<\/strong> Prise en charge du param\u00e8tre multipath dans la directive listen pour am\u00e9liorer la tol\u00e9rance aux pannes et le d\u00e9bit au niveau de transport.<\/li>\n<li><strong>Keep-Alive :<\/strong> La valeur par d\u00e9faut de proxy_http_version a \u00e9t\u00e9 chang\u00e9e en 1.1, et l'en-t\u00eate Connection n'est plus envoy\u00e9 par le proxy,<a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/fr\/server\/dts-prohoster\/\" title=\"serveur\" data-wpil-keyword-link=\"linked\">serveur<\/a>ce qui am\u00e9liore la r\u00e9utilisation des connexions.<\/li>\n<li><strong>OpenSSL 4.0 :<\/strong> Compatibilit\u00e9 assur\u00e9e avec la prochaine version majeure de la biblioth\u00e8que cryptographique.<\/li>\n<li><strong>module geo :<\/strong> La directive include \u00e0 l'int\u00e9rieur du bloc geo prend d\u00e9sormais en charge les caract\u00e8res g\u00e9n\u00e9riques.<\/li>\n<\/ul>\n<p>Source : <a rel=\"nofollow\" href=\"https:\/\/www.linux.org.ru\/news\/opensource\/18266451\">linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0421\u043f\u0443\u0441\u0442\u044f \u0433\u043e\u0434 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438, \u043f\u0440\u043e\u0435\u043a\u0442 Nginx \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0432\u044b\u0445\u043e\u0434\u0435 \u043d\u043e\u0432\u043e\u0439 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0438 1.30.0. \u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043a\u0438 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0431\u044b\u043b\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0447\u0435\u0442\u044b\u0440\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043a \u043c\u043e\u0434\u0443\u043b\u044e \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043c\u0435\u0434\u0438\u0430\u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041a\u043b\u044e\u0447\u0435\u0432\u044b\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u0441\u0442\u0430\u043b\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 HTTP\/3 \u0438 QUIC, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u0435\u043f\u0435\u0440\u044c \u0441\u0447\u0438\u0442\u0430\u0435\u0442\u0441\u044f \u0433\u043e\u0442\u043e\u0432\u043e\u0439 \u0434\u043b\u044f \u043f\u0440\u043e\u0434\u0430\u043a\u0448\u0435\u043d-\u0441\u0440\u0435\u0434. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: CVE-2026-27654: \u041f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 COPY \u0438\u043b\u0438 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-168999","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0421\u043f\u0443\u0441\u0442\u044f \u0433\u043e\u0434 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438, \u043f\u0440\u043e\u0435\u043a\u0442 Nginx \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0432\u044b\u0445\u043e\u0434\u0435 \u043d\u043e\u0432\u043e\u0439 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0438 1.30.0.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Erik Peterson\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/fr\/blog\/news\/nginx-1-30-0\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"fr_FR\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Nginx 1.30.0 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0421\u043f\u0443\u0441\u0442\u044f \u0433\u043e\u0434 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438, \u043f\u0440\u043e\u0435\u043a\u0442 Nginx \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0432\u044b\u0445\u043e\u0434\u0435 \u043d\u043e\u0432\u043e\u0439 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0438 1.30.0.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/fr\/blog\/news\/nginx-1-30-0\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-04-16T21:12:22+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-04-16T21:12:22+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Nginx 1.30.0 | ProHoster","description":"Apr\u00e8s un an de d\u00e9veloppement, le projet Nginx a annonc\u00e9 la sortie de sa nouvelle version stable 1.30.0.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/nginx-1-30-0","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Nginx 1.30.0 | ProHoster","og:description":"\u0421\u043f\u0443\u0441\u0442\u044f \u0433\u043e\u0434 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438, \u043f\u0440\u043e\u0435\u043a\u0442 Nginx \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0432\u044b\u0445\u043e\u0434\u0435 \u043d\u043e\u0432\u043e\u0439 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0438 1.30.0.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/nginx-1-30-0","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-04-16T21:12:22+00:00","article:modified_time":"2026-04-16T21:12:22+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/168999","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=168999"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/168999\/revisions"}],"predecessor-version":[{"id":169169,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/168999\/revisions\/169169"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=168999"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=168999"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=168999"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}