{"id":168999,"date":"2026-04-16T23:12:22","date_gmt":"2026-04-16T21:12:22","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/nginx-1-30-0"},"modified":"2026-04-16T23:12:22","modified_gmt":"2026-04-16T21:12:22","slug":"nginx-1-30-0","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/news\/nginx-1-30-0","title":{"rendered":"Nginx 1.30.0","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Ap\u00f3s um ano de desenvolvimento, o projeto Nginx anunciou o lan\u00e7amento de uma nova vers\u00e3o est\u00e1vel 1.30.0. No \u00e2mbito da prepara\u00e7\u00e3o da vers\u00e3o est\u00e1vel, seis vulnerabilidades foram corrigidas, quatro das quais dizem respeito ao m\u00f3dulo de processamento de arquivos de m\u00eddia e protocolos de autentica\u00e7\u00e3o. A principal altera\u00e7\u00e3o foi o suporte ao HTTP\/3 e QUIC, que agora \u00e9 considerado pronto para ambientes de produ\u00e7\u00e3o.<\/p>\n<h4>Vulnerabilidades corrigidas:<\/h4>\n<ul>\n<li><strong>CVE-2026-27654:<\/strong> Um estouro de buffer ao processar solicita\u00e7\u00f5es COPY ou MOVE em locais com a diretiva alias pode permitir que um invasor saia do diret\u00f3rio raiz do site.<\/li>\n<li><strong>CVE-2026-27784:<\/strong> Um arquivo MP4 especialmente formatado pode causar a queda do processo de trabalho em plataformas de 32 bits.<\/li>\n<li><strong>CVE-2026-27651:<\/strong> Um erro de segmenta\u00e7\u00e3o no processo de trabalho ao usar os m\u00e9todos de autentica\u00e7\u00e3o CRAM-MD5 ou APOP com tentativas de reautentica\u00e7\u00e3o ativadas.<\/li>\n<li><strong>CVE-2026-28753:<\/strong> Uso de registros DNS PTR para injetar dados em solicita\u00e7\u00f5es auth_http e o comando XCLIENT em conex\u00f5es SMTP de backend.<\/li>\n<li><strong>CVE-2026-28755:<\/strong> Conclus\u00e3o bem-sucedida <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/pt\/ssl-sertifikat\/\" title=\"SSL\" data-wpil-keyword-link=\"linked\">SSL<\/a>-do handshake, apesar da rejei\u00e7\u00e3o do certificado do cliente na verifica\u00e7\u00e3o OCSP no m\u00f3dulo stream.<\/li>\n<\/ul>\n<h3>Outras inova\u00e7\u00f5es significativas:<\/h3>\n<ul>\n<li><strong>HTTP Early Hints (103):<\/strong> O servidor pode enviar cabe\u00e7alhos preliminares sem esperar pela gera\u00e7\u00e3o completa da resposta pelo backend, acelerando o carregamento das p\u00e1ginas.<\/li>\n<li><strong>Encrypted ClientHello (ECH):<\/strong> Uma fun\u00e7\u00e3o de privacidade do TLS que oculta o nome do site solicitado de observadores de rede.<\/li>\n<li><strong>Sticky Sessions:<\/strong> A diretiva sticky no bloco upstream assegura a 'vincula\u00e7\u00e3o' das sess\u00f5es do cliente a um determinado <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/pt\/server\/dts-shicago\/\" title=\"servidor\" data-wpil-keyword-link=\"linked\">servidor<\/a> backend.<\/li>\n<li><strong>Multipath TCP (MPTCP):<\/strong> Suporte ao par\u00e2metro multipath na diretiva listen para aumentar a resili\u00eancia e largura de banda no n\u00edvel de transporte.<\/li>\n<li><strong>Keep-Alive:<\/strong> O valor padr\u00e3o de proxy_http_version foi alterado para 1.1, e o cabe\u00e7alho Connection n\u00e3o \u00e9 mais enviado pelo proxy,<a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/pt\/server\/dts-prohoster\/\" title=\"servidor\" data-wpil-keyword-link=\"linked\">servidor<\/a>o que melhora o reaproveitamento das conex\u00f5es.<\/li>\n<li><strong>OpenSSL 4.0:<\/strong> Compatibilidade assegurada com a pr\u00f3xima vers\u00e3o principal da biblioteca criptogr\u00e1fica.<\/li>\n<li><strong>geo-m\u00f3dulo:<\/strong> A diretiva include dentro do bloco geo agora suporta caracteres curinga.<\/li>\n<\/ul>\n<p>Fonte: <a rel=\"nofollow\" href=\"https:\/\/www.linux.org.ru\/news\/opensource\/18266451\">linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0421\u043f\u0443\u0441\u0442\u044f \u0433\u043e\u0434 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438, \u043f\u0440\u043e\u0435\u043a\u0442 Nginx \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0432\u044b\u0445\u043e\u0434\u0435 \u043d\u043e\u0432\u043e\u0439 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0438 1.30.0. \u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043a\u0438 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0431\u044b\u043b\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0447\u0435\u0442\u044b\u0440\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043a \u043c\u043e\u0434\u0443\u043b\u044e \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043c\u0435\u0434\u0438\u0430\u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041a\u043b\u044e\u0447\u0435\u0432\u044b\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u0441\u0442\u0430\u043b\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 HTTP\/3 \u0438 QUIC, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u0435\u043f\u0435\u0440\u044c \u0441\u0447\u0438\u0442\u0430\u0435\u0442\u0441\u044f \u0433\u043e\u0442\u043e\u0432\u043e\u0439 \u0434\u043b\u044f \u043f\u0440\u043e\u0434\u0430\u043a\u0448\u0435\u043d-\u0441\u0440\u0435\u0434. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: CVE-2026-27654: \u041f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 COPY \u0438\u043b\u0438 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-168999","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0421\u043f\u0443\u0441\u0442\u044f \u0433\u043e\u0434 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438, \u043f\u0440\u043e\u0435\u043a\u0442 Nginx \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0432\u044b\u0445\u043e\u0434\u0435 \u043d\u043e\u0432\u043e\u0439 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0438 1.30.0.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Erik Peterson\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/pt\/blog\/news\/nginx-1-30-0\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"pt_PT\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Nginx 1.30.0 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0421\u043f\u0443\u0441\u0442\u044f \u0433\u043e\u0434 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438, \u043f\u0440\u043e\u0435\u043a\u0442 Nginx \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0432\u044b\u0445\u043e\u0434\u0435 \u043d\u043e\u0432\u043e\u0439 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0438 1.30.0.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/pt\/blog\/news\/nginx-1-30-0\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-04-16T21:12:22+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-04-16T21:12:22+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Nginx 1.30.0 | ProHoster","description":"Ap\u00f3s um ano de desenvolvimento, o projeto Nginx anunciou o lan\u00e7amento de uma nova vers\u00e3o est\u00e1vel 1.30.0.","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/news\/nginx-1-30-0","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Nginx 1.30.0 | ProHoster","og:description":"\u0421\u043f\u0443\u0441\u0442\u044f \u0433\u043e\u0434 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438, \u043f\u0440\u043e\u0435\u043a\u0442 Nginx \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0432\u044b\u0445\u043e\u0434\u0435 \u043d\u043e\u0432\u043e\u0439 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0438 1.30.0.","og:url":"https:\/\/prohoster.info\/pt\/blog\/news\/nginx-1-30-0","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-04-16T21:12:22+00:00","article:modified_time":"2026-04-16T21:12:22+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/168999","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=168999"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/168999\/revisions"}],"predecessor-version":[{"id":169169,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/168999\/revisions\/169169"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=168999"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=168999"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=168999"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}