Lekala le ka sehloohong la nginx 1.25.4 le lokollotsoe, moo tsoelo-pele ea likarolo tse ncha e tsoelang pele. Lekala le tsitsitseng la 1.24.x le hlokometsoeng ka mahlakoreng le na le liphetoho feela tse amanang le ho felisoa ha likokoana-hloko tse tebileng le bofokoli. Nakong e tlang, ho itšetlehile ka lekala le leholo la 1.25.x, lekala le tsitsitseng 1.26 le tla thehoa. Khoutu ea projeke e ngotsoe ka C mme e ajoa tlasa laesense ea BSD.
Phetolelo e ncha e lokisa mathata a mabeli tekong ea http_v3_module (e holofalitsoeng ke kamehla), e fanang ka tšehetso bakeng sa HTTP/3 protocol, e sebelisang QUIC protocol e le sepalangoang sa HTTP/2. Kotsi ea pele (CVE-2024-24989) e bakoa ke NULL pointer dereference, 'me ea bobeli (CVE-2024-24990) e bakoa ke tšebeliso ea morao-rao (CVE-2024-24990). The changelog e bolela hore bofokoli ka bobeli bo ka baka kotsi feela ha u sebetsana le linako tse entsoeng ka mokhoa o khethehileng oa QUIC, empa ho bonahala eka ts'oaetso ea bobeli ha e so hlahlojoe bakeng sa liphello tse tebileng haholoanyane.
Ntle le ho lokisa bofokodi, mofuta o mocha o boetse o kenyelletsa lintlafatso le litokiso tse akaretsang ts'ebetsong ea HTTP/3, hammoho le litokiso tsa ho lutla ha sokete, liphoso tsa sokete, le ho putlama ha ho sebelisoa AIO. Bothata ba likhokahano tse koalang pele ho nako le ts'ebetso ea AIO e sa phethoang nakong ea ho felisoa ka bokhabane ha lits'ebetso tsa basebetsi ba khale bo rarollotsoe. Ho putlama ha ho tsamaisoa liphoso tse 415 ho sebelisoa taelo ea error_page ho lokisitsoe, ha ho sebelisoa SSL-litaelo tsa proxying le image_filter.
Hape, matsatsi a 'maloa a fetileng, njs 0.8.4, mofetoleli oa JavaScript bakeng sa li-server tsa marang-rang nginx. Mofetoleli oa njs o kenya tšebetsong maemo a ECMAScript mme o u lumella ho atolosa bokhoni ba ts'ebetso ea kopo ea nginx u sebelisa li-script tsa tlhophiso. Li-script li ka sebelisoa faeleng ea tlhophiso ho hlalosa mokhoa o tsoetseng pele oa ts'ebetso ea kopo, ho hlahisa litlhophiso, ho hlahisa likarabo ka mokhoa o feto-fetohang, ho fetola likopo/likarabo, kapa ho theha li-stub kapele ho rarolla mathata lits'ebetsong tsa webo. Phetolelo e ncha e na le litokiso tsa liphoso feela.
Source: opennet.ru
