nginx

nginx-1.27.4 mainline version has been released, featuring optimized resource usage for complex SSL configurations, and with a fix for the SSL session reuse vulnerability (CVE-2025-23419). See official CHANGES on nginx.org.

Below is a release summary generated by GitHub.

What's Changed

• Version bump. by @arut in https://github.com/nginx/nginx/pull/361
• QUIC: fixed client request timeout in 0-RTT scenarios. by @nandsky in https://github.com/nginx/nginx/pull/353
• Updated security policy to clarify experimental features by @jzebor-at-f5 in https://github.com/nginx/nginx/pull/404
• QUIC: ignore version negotiation packets. by @arut in https://github.com/nginx/nginx/pull/411
• QUIC: fixed accessing a released stream. by @arut in https://github.com/nginx/nginx/pull/413
• Year 2025. by @arut in https://github.com/nginx/nginx/pull/433
• Gzip: compatibility with recent zlib-ng 2.2.x versions. by @pluknet in https://github.com/nginx/nginx/pull/403
• On range failure, log expected range. by @aractnido in https://github.com/nginx/nginx/pull/346
• SSL cache part 2 by @pluknet in https://github.com/nginx/nginx/pull/287
• Upstream: fix NGX_COMPAT build without NGX_HTTP_SSL after 454ad0e. by @p-pautov in https://github.com/nginx/nginx/pull/463
• QUIC: added missing casts in iov_base assignments. by @bavshin-f5 in https://github.com/nginx/nginx/pull/479
• Configure: fixed --with-libatomic=DIR with recent libatomic_ops. by @pluknet in https://github.com/nginx/nginx/pull/460
• Misc: moved documentation in release tarballs. by @pluknet in https://github.com/nginx/nginx/pull/377
• Added "keepalive_min_timeout" directive. by @arut in https://github.com/nginx/nginx/pull/456
• SNI: added restriction for TLSv1.3 cross-SNI session resumption. by @pluknet in https://github.com/nginx/nginx/pull/493
• nginx-1.27.4-RELEASE by @pluknet in https://github.com/nginx/nginx/pull/494

New Contributors

• @aractnido made their first contribution in https://github.com/nginx/nginx/pull/346
• @p-pautov made their first contribution in https://github.com/nginx/nginx/pull/463

Full Changelog: https://github.com/nginx/nginx/compare/release-1.27.3...release-1.27.4