{"id":183890,"date":"2026-10-15T04:53:55","date_gmt":"2026-10-15T02:53:55","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/obnovlenie-nginx-1-31-7-i-njs-1-0-2-s-ustraneniem-uyazvimostej"},"modified":"2026-10-15T04:53:59","modified_gmt":"2026-10-15T02:53:59","slug":"nginx-1-31-7-and-njs-1-0-2-update-with-security-fixes","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/nginx-1-31-7-and-njs-1-0-2-update-with-security-fixes","title":{"rendered":"Actualizarea nginx 1.31.7 \u0219i njs 1.0.2 cu remedieri pentru vulnerabilit\u0103\u021bi","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>A fost lansat\u0103 versiunea principal\u0103 a nginx 1.31.7, \u00een cadrul c\u0103reia continu\u0103 dezvoltarea unor noi func\u021bionalit\u0103\u021bi, precum \u0219i lansarea versiunii stabile nginx 1.30.6, care prime\u0219te doar modific\u0103ri legate de eliminarea erorilor grave \u0219i a vulnerabilit\u0103\u021bilor. \u00cen actualiz\u0103ri au fost eliminate 5 vulnerabilit\u0103\u021bi:<\/p>\n<ul>\n<li class=\"l\"> CVE-2026-15176 \u2014 overflow de buffer, care se manifest\u0103 la utilizarea<br \/>\n  directivelor \u00abalias\u00bb \u00een configura\u021biile care modific\u0103 URI-ul cererii prin directiva<br \/>\n       \u00abrewrite\u00bb cu redirec\u021bionare ulterioare c\u0103tre fi\u0219ier.<\/p>\n<li class=\"l\"> CVE-2026-93479 \u2014 overflow de buffer, care apare \u00een urma execu\u021biei expresiilor de tip \u0219ir cu variabile \u0219i se manifest\u0103 la calcularea c\u0103ii c\u0103tre directorul r\u0103d\u0103cin\u0103 \u0219i la logarea cererilor \u00een modulele http \u0219i stream.\n<li class=\"l\"> CVE-2026-95101 \u2014 ocolirea limit\u0103rii \u00abclient_max_body_size\u00bb \u0219i substituirea datelor externe \u00een cererea proxy prin transmiterea unor cadre incorecte \u00een HTTP\/3, parte din con\u021binutul c\u0103rora ar fi putut fi procesat ca trup al cererii.\n<li class=\"l\"> CVE-2026-97629 \u2014 falsificarea sesiunilor TLS din cauza l\u0103s\u0103rii uneia dintre cheile de sesiune neini\u021bializate \u00een timpul rota\u021biei.\n<li class=\"l\"> CVE-2026-97205 \u2014 accesarea memoriei dup\u0103 eliberare (use-after-free), care apare la utilizarea pe paginile SSI a comenzilor \u00abinclude virtual\u00bb \u00een combina\u021bie cu utilizarea intr\u0103rii\/ie\u0219irii asincrone (AIO).\n<\/ul>\n<p>Modific\u0103ri nespecificate \u00een leg\u0103tur\u0103 cu vulnerabilit\u0103\u021bile \u00een nginx 1.31.7: <\/p>\n<ul>\n<li class=\"l\"> Modulele ngx_http_geoip_module \u0219i ngx_stream_geoip_module au fost ad\u0103ugate suport pentru baza de date \u00een format MaxMind (MMDB).\n<li class=\"l\"> A fost implementat\u0103 posibilitatea de verificare prin adres\u0103 IP <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/ro\/ssl-sertifikat\/\"   title=\"certificatelor SSL\" data-wpil-keyword-link=\"linked\">certificatelor SSL<\/a>, utilizate \u00een backend.\n<li class=\"l\"> Au fost realizate capacit\u0103\u021bi de reconfigurare \u0219i actualizare a fi\u0219ierului executabil atunci c\u00e2nd se folose\u0219te \u00een set\u0103rile directivei quic_bpf.\n<li class=\"l\"> \u00cen modul ngx_http_v2_module a fost implementat un plan de prioritizare, conform RFC 9218.\n<\/ul>\n<p>\u00cen acela\u0219i timp, este disponibil\u0103 versiunea njs 1.0.2, un modul pentru integrarea interpretului JavaScript \u00een serverul http nginx. Njs permite utilizarea scripturilor JavaScript \u00een fi\u0219ierele de configurare pentru a extinde func\u021bionalit\u0103\u021bile nginx. Scripturile pot fi utilizate pentru a defini o logic\u0103 extins\u0103 de procesare a cererilor, pentru a genera configura\u021bia, pentru a crea dinamic r\u0103spunsuri, pentru a modifica cererea\/r\u0103spunsul sau pentru a crea rapid mock-uri pentru solu\u021bionarea problemelor din aplica\u021biile web. Codul proiectului este scris \u00een C \u0219i este distribuit sub licen\u021ba BSD.<\/p>\n<p>\u00cen versiunea njs 1.0.2 au fost remediate vulnerabilit\u0103\u021bile: epuizarea memoriei disponibile \u00een timpul proces\u0103rii datelor XML incorecte (CVE-2026-101025) \u0219i \u00eenc\u0103lcarea verific\u0103rii unui document XML semnat prin manipularea atributelor XML (CVE-2026-101019). Au fost ad\u0103ugate metodele XMLNode.getAttributeNS() \u0219i XMLNode.getChildNS(). A fost redus consumul de memorie \u00een timpul compil\u0103rii \u00een motorul njs.<br \/>\n<br \/>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=66473\">opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0421\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0438 nginx 1.31.7, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442\u0441\u044f \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0435 \u043d\u043e\u0432\u044b\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u0430\u0440\u0430\u043b\u043b\u0435\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0438 nginx 1.30.6, \u0432 \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0432\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u044b\u0445 \u043e\u0448\u0438\u0431\u043e\u043a \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0412 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 5 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439: CVE-2026-15176 &#8212; \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430, \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u044e\u0449\u0435\u0435\u0441\u044f \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0434\u0438\u0440\u0435\u043a\u0442\u0438\u0432\u044b &#171;alias&#187; \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f\u0445, \u043c\u0435\u043d\u044f\u044e\u0449\u0438\u0445 URI \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0447\u0435\u0440\u0435\u0437 \u0434\u0438\u0440\u0435\u043a\u0442\u0438\u0432\u0443 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-183890","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0421\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0438 nginx 1.31.7, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442\u0441\u044f \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0435 \u043d\u043e\u0432\u044b\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u0430\u0440\u0430\u043b\u043b\u0435\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0438 nginx 1.30.6, \u0432 \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0432\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Alexander Kovalev\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/news\/nginx-1-31-7-and-njs-1-0-2-update-with-security-fixes\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 nginx 1.31.7 \u0438 njs 1.0.2 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0421\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0438 nginx 1.31.7, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442\u0441\u044f \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0435 \u043d\u043e\u0432\u044b\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u0430\u0440\u0430\u043b\u043b\u0435\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0438 nginx 1.30.6, \u0432 \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0432\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/news\/nginx-1-31-7-and-njs-1-0-2-update-with-security-fixes\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-10-15T02:53:55+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-10-15T02:53:59+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Actualizarea nginx 1.31.7 \u0219i njs 1.0.2 cu remedieri de vulnerabilitate | ProHoster","description":"A fost creat\u0103 versiunea principal\u0103 nginx 1.31.7, \u00een cadrul c\u0103reia continu\u0103 dezvoltarea de noi func\u021bionalit\u0103\u021bi, precum \u0219i lansarea versiunii stabile nginx 1.30.6, care prime\u0219te doar modific\u0103ri.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/nginx-1-31-7-and-njs-1-0-2-update-with-security-fixes","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 nginx 1.31.7 \u0438 njs 1.0.2 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 | ProHoster","og:description":"\u0421\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0438 nginx 1.31.7, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442\u0441\u044f \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0435 \u043d\u043e\u0432\u044b\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u0430\u0440\u0430\u043b\u043b\u0435\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0438 nginx 1.30.6, \u0432 \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0432\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/nginx-1-31-7-and-njs-1-0-2-update-with-security-fixes","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-10-15T02:53:55+00:00","article:modified_time":"2026-10-15T02:53:59+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/183890","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=183890"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/183890\/revisions"}],"predecessor-version":[{"id":183891,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/183890\/revisions\/183891"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=183890"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=183890"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=183890"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}