ืืขืจ ืขืจืฉืืขืจ ืืขืืืื ื ืคืื ืื ื ืืึทืข ืืืืคึผื ืฆืืืืึทื ืคืื nginx 1.27.0 ืืื ืืขืจืืื ืื, ืืื ืืืึธืก ืื ืึทื ืืืืืงืืื ื ืคืื ื ืืึทืข ืคึฟืขืึดืงืืืื ืืืขื ืคืึธืจืืขืฆื. ืืื ืืขืจ ืืขืืืืงืขืจ ืฆืืื, nginx 1.26.1 ืืื ืืืคืจืืื, ืืืึธืก ืืขืืขืจื ืฆื ืื ืคึผืึทืจืึทืืขื ืืขืฉืืืฆื ืกืืึทืืื ืฆืืืืึทื, ืืืึธืก ืืืืื ืื ืงืืืื ืขื ืืขืจืื ืืขื ืฉืืึทืืืช ืฆื ืื ืืืืืึทื ืืืฉืึทื ืคืื ืขืจื ืกื ืขืจืจืึธืจืก ืืื ืืืึทืื ืขืจืึทืืืืืืื. ืืืืึทืืขืจ ืืึธืจ, ืืืืืจื ืืืืฃ ืื ืืืืคึผื ืฆืืืืึทื 1.27.ืงืก, ืึท ืกืืึทืืื ืฆืืืืึทื 1.28 ืืืขื ืืืื ืืขืฉืืคื. ืื ืคึผืจืืืขืงื ืงืึธื ืืื ืืขืฉืจืืื ืืื C ืืื ืคืื ืื ืืขืจืืขืืืืื ืืื ืืขืจ ืื BSD ืืขืจืืืืืขื ืืฉ.
ืื ื ืืึทืข ืจืืืืกืื ืคืึทืจืจืืืื 4 ืืืึทืื ืขืจืึทืืืืืืื ืืืึธืก ืืืืจืงื ืื ืืงืกืคึผืขืจืืขื ืึทื ngx_http_v3 ืืึธืืืืข (ืคืึทืจืงืจืืคึผืื ืืืจื ืคืขืืืงืืึทื), ืืืึธืก ืืื ืฉืืืฆื ืคึฟืึทืจ ืื ืืืืคึผ / 3 ืคึผืจืึธืืึธืงืึธื ื ืืฆื ืื QUIC ืคึผืจืึธืืึธืงืึธื ืืื ืึท ืึทืจืืืขืจืคืืจื ืคึฟืึทืจ ืืืืคึผ / 2. ืคึผืจืึธืืืขืืก ืืขืจืฉืืึทื ืขื ืืืืื ืืืขื ืื ngx_http_v3_module ืืึธืืืืข ืืื ืึทืงืืืืืืืืื ืืื ืื "ืฉื ืขื" ืึธืคึผืฆืืข ืืื ืืึทืฉืืืื ืืื ืื "ืืขืจื" ืืืจืขืงืืืื. ืขืก ืืื ื ืึธื ืงืืื ืืืึธืจื ืืืขืื ืื ืืืึทืื ืขืจืึทืืืืืื ืคืื ืื Angie ืืื FreeNginx ืคืึธืจืงืก.
ืื CVE-2024-34161 ืืืึทืื ืขืจืึทืืืืืื ื ืื ืึทืจืืขืืขืจ ืคึผืจืึธืฆืขืก ืืึผืจืื ืฆื ืจืื ืขื ืืืืฃ ืกืืกืืขืืขื ืืื ืึท MTU ืืืขืจื ืืจืขืกืขืจ ืืื 4096 ืืืืขืก. ื ืืึผืจืื ืจืื ืขื ืึทืงืขืจื ืืืขื CRYPTO ืจืึธืืขื ืืขื ืืฆื ืืื ืงืฉืจ ืคืึทืจืืึทื ืืืื ื ืืขื ืขื ืืขืฉืืงื ื ืึธื ืืขืจ ืงืืืขื ื ืกืขื ืื ืื ืคืื ืึทืืืืึทืืืึธื ืึธื ืืึธื.
ืื CVE-2024-31079, CVE-2024-32760 ืืื CVE-2024-35200 ืืืงืึธืจื ืงืึธืจืืคึผืฆืืข ืืืึทืื ืขืจืึทืืืืืืื ืืึธืื ืึท ืืืืึทื ืึทืืึทืงืขืจ ืฆื ืงืจืึทื ืึท nginx ืึทืจืืขื ืคึผืจืึธืฆืขืก ืืืจื ืืจืื ืื ืึท ืกืคึผืขืฉืื ืงืจืึทืคืืขื ืกืขืกืืข ืืืืืจื ืืืืฃ ืื QUIC ืคึผืจืึธืืึธืงืึธื. ืืื ืืขืจ ืืขืืืืงืขืจ ืฆืืื, ืคึฟืึทืจ ืืืึทืื ืขืจืึทืืืืืืื CVE-2024-31079 ืืื CVE-2024-32760, ืื ืืขืจืข ืงืึทื ืกืึทืงืืืขื ืกืึทื ืคืื ืื ืืึทืคืึทืื ืงืขื ืขื ื ืื ืืืื ืืงืกืงืืืืื (ืื ืคึผืึธืืขื ืฆืืขื ืืขืืืขืืงืืื ืคืื ืขืงืกืึทืงืืืืื ื ืื ืึทืืึทืงืขืจ ืก ืงืึธื?). ืืขืืึทืืืก ืืขื ืขื ื ืืฉื ืืขืืขืื, ืึธืืขืจ ืืืื ืืฉืคืื ืืืื ืื ืงืขืจืขืงืฉืึทื ื ืืื ืื ืงืึธื, ืื ืืืึทืื ืขืจืึทืืืืืืื ืืขื ืขื ืืขืคึฟืืจื ืืืจื ืึทืงืกืขืก ืฉืืื ืืืคืจืืื ืืึผืจืื (ื ืืฆื-ื ืึธื-ืคึฟืจืืึท), ืคืึทืืฉ ืืืงืึธืจื ืึทืืึทืงืืืฉืึทื ืคึฟืึทืจ ืึท ืืขื ืืข, ื ืึทื ืืืึทืื ืืขืจืคืขืจืึทื ืก ืืื ืคืขืื ืคืื ืืขืืขืจืืง ืงืึธื ืืจืึธืืืจืื ื ืคืื ืื ืืจืืืก ืคืื ืืึทืื ืืขืฉืืขืื ืืื ืื ืืึทืคืขืจ.
ืฆืืืืฉื ืื ืขื ืืขืจืื ืืขื ืืืึธืก ืืขื ืขื ื ืืฉื ืฉืืื ืฆื ืื ืืืืืึทื ืืืฉืึทื ืคืื ืืืึทืื ืขืจืึทืืืืืืื ืืื nginx 1.27.0:
- ืฉืืืฆื ืคึฟืึทืจ ืกืคึผืขืฆืืคืืฆืืจื ืืืขืจืืึทืืึทืื ืืื ืฆืืืขืืขืื ืฆื ืื ืืืืจืขืงืืืืื "proxy_limit_rate", "fastcgi_limit_rate", "scgi_limit_rate" ืืื "uwsgi_limit_rate".
- ืจืืืืกื ืืืงืึธืจื ืงืึทื ืกืึทืืฉืึทื ืืืขื ืคึผืจืึทืกืขืกืื ื ืืึทื ื-ืืขืืขืื ืจืืงืืืขืก ืืื ืงืึทื ืคืืืืขืจืืืฉืึทื ื ืืืึธืก ื ืืฆื ืื "gzip", "gunzip", "ssi", "sub_filter" ืึธืืขืจ "grpc_pass" ืืืืจืขืงืืืืื.
- ืกืึทืืืื ืคึผืจืึธืืืขืืก ืืื ืืึทืฉืืขืืืง ืืื GCC 14 ืืืขื ื ืืฆื ืื "--ืืื-ืึทืืึธืืืฉืข" ืึธืคึผืฆืืข.
- ืขืจืจืึธืจืก ืืื ืืืืคึผ / 3 ืืืคึผืืึทืืขื ืืืืฉืึทื ืืขื ืขื ืคืึทืจืคืขืกืืืงื.
ืืื ืืขืจืฆื, ืืืจ ืงืขื ืขื ืืึธื ืื ืืืกืืึทืืข ืคืื โโืื ื ืืึทืข ืืืืคึผื ืฆืืืืึทื ืคืื FreeNginx 1.27.0, ืึท ืืึธืคึผื ืคืื Nginx ืืขืืืขืืึธืคึผืขื ืืืจื ืืึทืงืกืื ืืื ืื, ืืืื ืขืจ ืคืื ืื ืฉืืืกื ืืขืืืขืืึธืคึผืขืจืก ืคืื Nginx. FreeNginx ืืื ืคึผืึทืืืฉืึทื ื ืืื ืึท ื ืึทื-ื ืืฅ ืคึผืจืืืขืงื ืืืึธืก ืืื ืึทื ืืืืืงืืื ื ืคืื ืื Nginx ืงืึธื ืืึทืืข ืึธื ืคึฟืืจืืข ืืจืืื ืืืฉืื ื. ืื ื ืืึทืข ืืืขืจืกืืข ืืื ืืืคึผืจืืืื ืืขืืช ืืึทื ืืืื ื ืืืขื ืืืืขื ืขื ืื ืืขืื ืืืฃ, ืืืคึผืจืืืื ืคึฟืึทืจืืึทืืืื ื ืืื NetBSD 10.0 ืืื ืืืคึผืจืืืื ืฉืจืืืื ืคืื PID ืืขืงืขืก (ืื "ืึทืืืขืง" ืคึผืึทืจืึทืืขืืขืจ ืืื ืฆืืืขืืขืื ืฆื ืื "ืคึผืื" ืืืจืขืงืืืื).
ืืงืืจ: opennet.ru
