nginx-1.29.3 mainline version has been released. See official CHANGES on nginx.org.

Below is a release summary generated by GitHub.

What's Changed

• SSL: support for compressed server certificates with BoringSSL. by @pluknet in #823
• HTTP CONNECT infrastructure by @arut in #935
• Upstream: reset local address in case of error. by @arut in #942
• SSL: $ssl_sigalg, $ssl_client_sigalg. by @pluknet in #932, initial work by @willmafh in #554
• Geo: the "volatile" parameter. by @dplotnikov-f5 in #943
• Inheritance control for add_header and add_trailer. by @arut in #918
• OCSP: fixed invalid type for the 'ssl_ocsp' directive. by @roman-f5 in #938
• Fixed compilation warnings on Windows after c93a0c4. by @arut in #954
• Modules compatibility: increased compat section size. by @arut in #952
• nginx-1.29.3 changes by @arut in #953

New Contributors

• @dplotnikov-f5 made their first contribution in #943
• @roman-f5 made their first contribution in #938

Full Changelog: release-1.29.2...release-1.29.3

nginx-1.29.2 mainline version has been released. See official CHANGES on nginx.org.

Below is a release summary generated by GitHub.

What's Changed

• Added a previously missed changes entry in 1.29.1 relnotes. by @pluknet in #844
• Removed legacy charset directive from default config example. by @MohamedKarrab in #829
• QUIC: fixed ssl_reject_handshake error handling. by @pluknet in #889
• Updated link to xslscript. by @pluknet in #854
• Fixed inaccurate index directive error report by @willmafh in #881
• SNI: using ClientHello callback. by @pluknet in #562
• AWS-LC support changes by @pluknet in #848
• Upstream: overflow detection in Cache-Control delta-seconds. by @pluknet in #898
• Mail: xtext encoding (RFC 3461) in XCLIENT LOGIN. by @pluknet in #893
• Added F5 CLA workflow. by @Maryna-f5 in #908
• SSL: fixed "key values mismatch" with object cache inheritance. by @pluknet in #740
• nginx-1.29.2 changes by @pluknet in #919

New Contributors

• @MohamedKarrab made their first contribution in #829
• @willmafh made their first contribution in #881

Full Changelog: release-1.29.1...release-1.29.2

nginx-1.29.1 mainline version has been released. This release includes a security fix for the vulnerability in the ngx_mail_smtp_module (CVE-2025-53859). See official CHANGES on nginx.org.

Below is a release summary generated by GitHub.

What's Changed

• PCRE license fix for win32 zip by @pluknet in #753
• QUIC: adjusted OpenSSL 3.5 QUIC API feature test. by @pluknet in #749
• OPENSSL_VERSION_NUMBER fix for OpenSSL 3.0 by @pluknet in #775
• kqueue build fixes by @pluknet in #777
• HTTP/3: limited prefixed integers encoded length. by @pluknet in #124
• HTTP/3: fixed handling :authority and Host with port. by @arut in #772
• HTTP/2: fixed flushing early hints. by @arut in #808
• HTTP/2 fixes for ":authority" vs "Host" by @pluknet in #803
• Certificate compression by @pluknet in #788
• Auth basic: fixed file descriptor leak on memory allocation error. by @pluknet in #833
• smtp module fixes by @pluknet in #842
• Changes 1.29.1 by @pluknet in #843

Full Changelog: release-1.29.0...release-1.29.1

nginx-1.29.0 mainline version has been released, featuring Early Hints support. See official CHANGES on nginx.org.

Below is a release summary generated by GitHub.

What's Changed

• Version bump 1.29.0 by @arut in #632
• QUIC: silence unknown/reserved transport param "info" messages. by @arut in #633
• Fixed -Wunterminated-string-initialization with gcc15. by @arut in #631
• HTTP/3: fixed NGX_HTTP_V3_VARLEN_INT_LEN value. by @arut in #640
• Win32: couple of platform detection fixes by @bavshin-f5 in #457
• QUIC: fixed a typo. by @nandsky in #638
• OpenSSL build fixes with various no-opt. by @pluknet in #634
• QUIC: fixed sending acknowledgments with limited congestion window. by @pluknet in #655
• QUIC: using QUIC API introduced in OpenSSL 3.5. by @pluknet in #646
• SSL: support loading keys via OSSL_STORE. by @bavshin-f5 in #436
• Core: added support for TCP keepalive parameters on macOS. by @pluknet in #709
• HTTP Early Hints by @arut in #326
• HTTP/3: indexed field line encoding for "103 Early Hints". by @pluknet in #746
• Use NULL instead of 0 as null pointer constant by @ac000 in #702
• Upstream: fixed reinit request with gRPC and Early Hints. by @pluknet in #750
• QUIC: disabled OpenSSL 3.5 QUIC API support by default. by @pluknet in #751
• nginx-1.29.0-RELEASE by @pluknet in #752

New Contributors

• @ac000 made their first contribution in #702

Full Changelog: release-1.27.5...release-1.29.0

nginx-1.28.0 stable version has been released, incorporating new features and bug fixes from the 1.27.x mainline branch — including memory usage and CPU usage optimizations in complex SSL configurations, automatic re‑resolution of hostnames in upstream groups, performance enhancements in QUIC, OCSP validation of client SSL certificates and OCSP stapling support in the stream module, variables support in the proxy_limit_rate, fastcgi_limit_rate, scgi_limit_rate, and uwsgi_limit_rate directives, the proxy_pass_trailers directive, and more.

Below is a release summary generated by GitHub.

What's Changed

• Hg to git transition by @arut in #112
• Added Code of Conduct by @Maryna-f5 in #105
• Added security policy by @Maryna-f5 in #108
• Added contributing guidelines by @Maryna-f5 in #107
• Added templates by @Maryna-f5 in #117
• Added CI based on GitHub Actions. by @thresheek in #114
• Update Typo in win-utf by @shaikhyaser in #123
• Proxy: proxy_pass_trailers directive. by @pluknet in #153
• SSL: optional ssl_client_certificate for ssl_verify_client. by @praveen-li in #143
• Added new primary README.md file. by @mtbChef in #165
• fix typo of bpf makefile debug option by @tzssangglass in #141
• SSL object cache by @pluknet in #140
• release-1.27.2 by @pluknet in #235
• Version bump. by @pluknet in #242
• Quic: prevent invalid stream frame retransmissions by @nandsky in #230
• Adding missing files from recent pcre2 library by @thierryba in #248
• Security: Update SECURITY.md by @jzebor-at-f5 in #254
• SSL: disabled TLSv1 and TLSv1.1 by default. by @pluknet in #252
• Upstream: re-resolvable servers by @bavshin-f5 in #208
• SSL: fixed MSVC compilation after ebd18ec. by @arut in #312
• "set by ngx_pcalloc" comments update by @pluknet in #247
• GitHub: Fix link to Contributing Guidelines by @callahad in #129
• Core: change TCP keepalive from ms to seconds on DragonFly BSD by @panjf2000 in #258
• SSL: error message default in object caching API. by @pluknet in #333
• Issue #330 missing double quote. by @nmentz in #339
• Mp4 stsc atom fixes by @arut in #345
• TLS default protocol versions fixup. by @pluknet in #327
• QUIC: prevented BIO leak in case of error. by @arut in #348
• Upstream: disallow empty path in proxy_store and friends. by @pluknet in #344
• QUIC: constant initialization by @pluknet in #243
• Allowed square brackets with portless IPv6 address. by @arut in #318
• Mail: handling of CAPABILITY in the LOGIN IMAP command. by @pluknet in #276
• nginx-1.27.3-RELEASE by @pluknet in #356
• Version bump. by @arut in #361
• QUIC: fixed client request timeout in 0-RTT scenarios. by @nandsky in #353
• Updated security policy to clarify experimental features by @jzebor-at-f5 in #404
• QUIC: ignore version negotiation packets. by @arut in #411
• QUIC: fixed accessing a released stream. by @arut in #413
• Year 2025. by @arut in #433
• Gzip: compatibility with recent zlib-ng 2.2.x versions. by @pluknet in #403
• On range failure, log expected range. by @aractnido in #346
• SSL cache part 2 by @pluknet in #287
• Upstream: fix NGX_COMPAT build without NGX_HTTP_SSL after 454ad0e. by @p-pautov in #463
• QUIC: added missing casts in iov_base assignments. by @bavshin-f5 in #479
• Configure: fixed --with-libatomic=DIR with recent libatomic_ops. by @pluknet in #460
• Misc: moved documentation in release tarballs. by @pluknet in #377
• Added "keepalive_min_timeout" directive. by @arut in #456
• SNI: added restriction for TLSv1.3 cross-SNI session resumption. by @pluknet in #493
• nginx-1.27.4-RELEASE by @pluknet in #494
• Version bump. by @pluknet in #530
• Core: fix build without libcrypt by @orgads in #514
• Configure: MSVC compatibility with PCRE2 10.45. by @thierryba in #527
• Add gitignore file. by @orgads in #518
• Fixed request counting with subrequests in case of error. by @pluknet in #515
• SSL: workaround for saving big sessions from upstream servers by @pluknet in #536
• Slice filter: improved memory allocation error handling. by @pluknet in #552
• Charset filter: improved validation of charset_map with utf-8. by @pluknet in #553
• Upstream: fixed passwords support for dynamic certificates. by @pluknet in #528
• SSL: external groups support in $ssl_curve and $ssl_curves. by @pluknet in #609
• CUBIC congestion control in QUIC by @arut in #443
• nginx-1.27.5-RELEASE by @pluknet in #625
• stable-1.28 by @pluknet in #647

New Contributors

• @Maryna-f5 made their first contribution in #105
• @thresheek made their first contribution in #114
• @shaikhyaser made their first contribution in #123
• @praveen-li made their first contribution in #143
• @tzssangglass made their first contribution in #141
• @thierryba made their first contribution in #248
• @jzebor-at-f5 made their first contribution in #254
• @callahad made their first contribution in #129
• @panjf2000 made their first contribution in #258
• @nmentz made their first contribution in #339
• @aractnido made their first contribution in #346
• @p-pautov made their first contribution in #463
• @orgads made their first contribution in #514

Full Changelog: release-1.26.3...release-1.28.0

nginx-1.27.5 mainline version has been released, featuring CUBIC congestion control in QUIC. See official CHANGES on nginx.org.

Below is a release summary generated by GitHub.

What's Changed

• Version bump. by @pluknet in #530
• Core: fix build without libcrypt by @orgads in #514
• Configure: MSVC compatibility with PCRE2 10.45. by @thierryba in #527
• Add gitignore file. by @orgads in #518
• Fixed request counting with subrequests in case of error. by @pluknet in #515
• SSL: workaround for saving big sessions from upstream servers by @pluknet in #536
• Slice filter: improved memory allocation error handling. by @pluknet in #552
• Charset filter: improved validation of charset_map with utf-8. by @pluknet in #553
• Upstream: fixed passwords support for dynamic certificates. by @pluknet in #528
• SSL: external groups support in $ssl_curve and $ssl_curves. by @pluknet in #609
• CUBIC congestion control in QUIC by @arut in #443
• nginx-1.27.5-RELEASE by @pluknet in #625

New Contributors

• @orgads made their first contribution in #514

Full Changelog: release-1.27.4...release-1.27.5

nginx-1.27.4 mainline version has been released, featuring optimized resource usage for complex SSL configurations, and with a fix for the SSL session reuse vulnerability (CVE-2025-23419). See official CHANGES on nginx.org.

Below is a release summary generated by GitHub.

What's Changed

• Version bump. by @arut in #361
• QUIC: fixed client request timeout in 0-RTT scenarios. by @nandsky in #353
• Updated security policy to clarify experimental features by @jzebor-at-f5 in #404
• QUIC: ignore version negotiation packets. by @arut in #411
• QUIC: fixed accessing a released stream. by @arut in #413
• Year 2025. by @arut in #433
• Gzip: compatibility with recent zlib-ng 2.2.x versions. by @pluknet in #403
• On range failure, log expected range. by @aractnido in #346
• SSL cache part 2 by @pluknet in #287
• Upstream: fix NGX_COMPAT build without NGX_HTTP_SSL after 454ad0e. by @p-pautov in #463
• QUIC: added missing casts in iov_base assignments. by @bavshin-f5 in #479
• Configure: fixed --with-libatomic=DIR with recent libatomic_ops. by @pluknet in #460
• Misc: moved documentation in release tarballs. by @pluknet in #377
• Added "keepalive_min_timeout" directive. by @arut in #456
• SNI: added restriction for TLSv1.3 cross-SNI session resumption. by @pluknet in #493
• nginx-1.27.4-RELEASE by @pluknet in #494

New Contributors

• @aractnido made their first contribution in #346
• @p-pautov made their first contribution in #463

Full Changelog: release-1.27.3...release-1.27.4

nginx-1.26.3 stable version has been released. See official CHANGES-1.26 on nginx.org.

Below is a release summary generated by GitHub.

What's Changed

• nginx-1.26.3-RELEASE by @pluknet in #495

Full Changelog: release-1.26.2...release-1.26.3

nginx-1.27.3 mainline version has been released, featuring automatic re‑resolution of hostnames in upstream groups using DNS. See official CHANGES on nginx.org.

Below is a release summary generated by GitHub.

What's Changed

• Version bump. by @pluknet in #242
• Quic: prevent invalid stream frame retransmissions by @nandsky in #230
• Adding missing files from recent pcre2 library by @thierryba in #248
• Security: Update SECURITY.md by @jzebor-at-f5 in #254
• SSL: disabled TLSv1 and TLSv1.1 by default. by @pluknet in #252
• Upstream: re-resolvable servers by @bavshin-f5 in #208
• SSL: fixed MSVC compilation after ebd18ec. by @arut in #312
• "set by ngx_pcalloc" comments update by @pluknet in #247
• GitHub: Fix link to Contributing Guidelines by @callahad in #129
• Core: change TCP keepalive from ms to seconds on DragonFly BSD by @panjf2000 in #258
• SSL: error message default in object caching API. by @pluknet in #333
• Issue #330 missing double quote. by @nmentz in #339
• Mp4 stsc atom fixes by @arut in #345
• TLS default protocol versions fixup. by @pluknet in #327
• QUIC: prevented BIO leak in case of error. by @arut in #348
• Upstream: disallow empty path in proxy_store and friends. by @pluknet in #344
• QUIC: constant initialization by @pluknet in #243
• Allowed square brackets with portless IPv6 address. by @arut in #318
• Mail: handling of CAPABILITY in the LOGIN IMAP command. by @pluknet in #276
• nginx-1.27.3-RELEASE by @pluknet in #356

New Contributors

• @nandsky made their first contribution in #230
• @thierryba made their first contribution in #248
• @jzebor-at-f5 made their first contribution in #254
• @bavshin-f5 made their first contribution in #208
• @callahad made their first contribution in #129
• @panjf2000 made their first contribution in #258
• @nmentz made their first contribution in #339

Full Changelog: release-1.27.2...release-1.27.3

nginx-1.27.2 mainline version has been released. See official CHANGES on nginx.org.

Below is a release summary generated by GitHub.

What's Changed

• Hg to git transition by @arut in #112
• Added Code of Conduct by @Maryna-f5 in #105
• Added security policy by @Maryna-f5 in #108
• Added contributing guidelines by @Maryna-f5 in #107
• Added templates by @Maryna-f5 in #117
• Added CI based on GitHub Actions. by @thresheek in #114
• Update Typo in win-utf by @shaikhyaser in #123
• Proxy: proxy_pass_trailers directive. by @pluknet in #153
• SSL: optional ssl_client_certificate for ssl_verify_client. by @praveen-li in #143
• Added new primary README.md file. by @mtbChef in #165
• fix typo of bpf makefile debug option by @tzssangglass in #141
• SSL object cache by @pluknet in #140
• release-1.27.2 by @pluknet in #235

New Contributors

• @Maryna-f5 made their first contribution in #105
• @shaikhyaser made their first contribution in #123
• @praveen-li made their first contribution in #143
• @tzssangglass made their first contribution in #141

Full Changelog: https://github.com/nginx/nginx/commits/release-1.27.2