nginx

nginx-1.31.6 mainline version has been released, with fixes for buffer overflow vulnerability when using ngx_http_v3_module (CVE-2026-90439).

See official CHANGES on nginx.org.

Below is a release summary generated by GitHub.

What's Changed

• man page updates by @pluknet in https://github.com/nginx/nginx/pull/1727
• Handle predicate location variable error by @arut in https://github.com/nginx/nginx/pull/1750
• Handle nested location lookup error by @arut in https://github.com/nginx/nginx/pull/1751
• Control API: fixed socket inheritance on binary upgrade by @pluknet in https://github.com/nginx/nginx/pull/1760
• Geo: check binary base CRC32 before relocation by @pluknet in https://github.com/nginx/nginx/pull/1739
• QUIC compatibility layer fix by @pluknet in https://github.com/nginx/nginx/pull/1769
• nginx-1.31.6-RELEASE by @pluknet in https://github.com/nginx/nginx/pull/1770

Full Changelog: https://github.com/nginx/nginx/compare/release-1.31.5...release-1.31.6