#1670 |
Chipers list order not respected for TLS 1.3
|
|
defect
|
major
|
nginx-1.15
|
nginx-core
|
#1673 |
Nginx don't read upstream response in case upstream close connection.
|
|
defect
|
minor
|
|
nginx-core
|
#1677 |
nginx does not resolve hostnames if there is no route
|
|
defect
|
minor
|
|
nginx-core
|
#1678 |
limit_rate and proxy_limit_rate broken from 1.14
|
|
defect
|
major
|
|
nginx-core
|
#1679 |
Possible infinite loop in function ngx_cache_manager_process_cycle and ngx_cache_loader_process_handler in src/os/unix/ngx_process_cycle.c
|
|
defect
|
minor
|
|
nginx-core
|
#1683 |
ngx_parent in ngx_daemon() can not work properly?
|
|
defect
|
minor
|
|
nginx-core
|
#1688 |
want to get the socket port which use in nginx and upstream servers
|
|
enhancement
|
minor
|
nginx-1.15.8
|
nginx-core
|
#1689 |
Writing connections leak with http/2
|
|
defect
|
major
|
|
nginx-core
|
#1694 |
Prefer SNI name to Host header when selecting server block
|
|
defect
|
minor
|
|
nginx-core
|
#1696 |
NGINX does not update cached response of POST requests
|
|
defect
|
critical
|
|
nginx-core
|
#1698 |
A minor optimization for ngx_log_debug
|
|
enhancement
|
minor
|
|
nginx-core
|
#1699 |
encoding error ssl_stapling_file
|
|
defect
|
minor
|
|
nginx-core
|
#1700 |
UDP connections are terminated when updating Nginx executable file on-the-fly
|
|
defect
|
major
|
nginx-1.15
|
nginx-core
|
#1707 |
try_files doesn't work sometimes
|
|
defect
|
minor
|
nginx-1.15
|
nginx-core
|
#1711 |
TLS 1.3 on Windows build
|
|
enhancement
|
minor
|
|
nginx-core
|
#1714 |
Server Name Indication (SNI) in NGINX isn't honoring ssl_protocols, ssl_ciphers etc. per server{} config / TLS downgrade and server exhaustion attack.
|
|
defect
|
critical
|
|
nginx-core
|
#1717 |
server info
|
|
enhancement
|
trivial
|
|
nginx-core
|
#1721 |
One line redundant code in ngx_slab_free_locked
|
|
enhancement
|
minor
|
|
nginx-core
|
#1724 |
Nginx doesn't sanitize and is inconsistent with multiple, repeated input headers
|
|
enhancement
|
minor
|
|
nginx-core
|
#1725 |
nginx ends up in a state where current and oldbin exist for days
|
|
defect
|
minor
|
|
nginx-core
|
#1729 |
If-Modified-Since won't trigger 304 unless server send Last-Modified
|
|
defect
|
minor
|
|
nginx-core
|
#1734 |
nginx failed to work with openssl-1.1.1b
|
|
defect
|
critical
|
nginx-1.15
|
nginx-core
|
#1740 |
ngins -s reopen / SIGUSR1 and permissions problem
|
|
enhancement
|
minor
|
|
nginx-core
|
#1741 |
Use IP_FREEBIND?
|
|
enhancement
|
minor
|
|
nginx-core
|
#1742 |
nginx.exe filesize
|
|
defect
|
major
|
nginx-1.15
|
nginx-core
|
#1750 |
Nginx + sendfile serves wrong content from NFS share, may leak confidential information to unauthorized party.
|
|
defect
|
critical
|
|
nginx-core
|
#1751 |
nginx memory leak in ngx_event_openssl.c with patch
|
Nikolay Morozov <n.morozov@…>
|
defect
|
major
|
|
nginx-core
|
#1752 |
400 Bad Request when Content-Length header value starts with HT
|
|
defect
|
minor
|
|
nginx-core
|
#1755 |
listen address and http2
|
|
defect
|
minor
|
|
nginx-core
|
#1764 |
Purely syntactic config check?
|
|
enhancement
|
minor
|
|
nginx-core
|
#1766 |
Request with revoked client certifiate is aborted instead of setting optional verification state
|
|
defect
|
major
|
|
nginx-core
|
#1772 |
Option to allow syslog tags longer than 32 symbols
|
|
enhancement
|
minor
|
|
nginx-core
|
#1776 |
Pre-Access Phase Bug
|
|
defect
|
major
|
|
nginx-core
|
#1779 |
ngx_reset_pool() function make (sizeof(ngx_pool_t) - sizeof(ngx_pool_data_t) ) bytes memory unavailable
|
|
defect
|
minor
|
|
nginx-core
|
#1791 |
Nginx -t changing ownersip of cache path
|
|
defect
|
critical
|
nginx-1.17.1
|
nginx-core
|
#1795 |
Nginx proxy serving non-existent proxy cache files
|
|
defect
|
critical
|
nginx-1.17.1
|
nginx-core
|
#1799 |
client_max_body_size ignored except at the bottom of http context
|
|
defect
|
minor
|
|
nginx-core
|
#1801 |
Stale cache is not updated after some time
|
|
defect
|
minor
|
|
nginx-core
|
#1802 |
Bad response for request with large cookie via http2
|
|
defect
|
critical
|
unit-1.10
|
nginx-core
|
#1803 |
set_decode_base64 not working for combination of Japnese and underscore character
|
|
defect
|
critical
|
nginx-1.17
|
nginx-core
|
#1805 |
Cannot reopen log files without restarting nginx
|
|
defect
|
minor
|
|
nginx-core
|
#1807 |
SSI include subrequests are not logged
|
|
defect
|
minor
|
|
nginx-core
|
#1810 |
Complex UX - Configuration Pitfalls ("Passing uncontrolled requests to PHP")
|
|
enhancement
|
major
|
|
nginx-core
|
#1812 |
NGINX does not reply with HTTP Headers on broken request line
|
|
defect
|
minor
|
|
nginx-core
|
#1813 |
OCSP does not work with $ssl_server_name
|
|
defect
|
minor
|
|
nginx-core
|
#1815 |
Debug log of response is garbled in journald
|
|
defect
|
minor
|
|
nginx-core
|
#1819 |
Core dump when http2 client cancelled stream while upstream
|
|
defect
|
minor
|
nginx-1.17
|
nginx-core
|
#1823 |
Connection header for inflight return messages during shutdown
|
|
enhancement
|
minor
|
|
nginx-core
|
#1826 |
Gzip deflate broken in some cases
|
|
defect
|
major
|
|
nginx-core
|
#1830 |
OCSP must staple fails with multi-domain certificates
|
|
defect
|
major
|
|
nginx-core
|
#1835 |
Nginx reload doesnt work when limit zone in nginx.conf is changed
|
|
defect
|
critical
|
|
nginx-core
|
#1836 |
limit_req and proxy_pass
|
|
defect
|
minor
|
|
nginx-core
|
#1837 |
nginx resolver failed when ipv6 AAAA dns query failed and ipv4 A query success
|
|
defect
|
critical
|
nginx-1.17
|
nginx-core
|
#1838 |
problem in http2
|
|
defect
|
minor
|
|
nginx-core
|
#1842 |
server_tokens doesnt affect redirects. Exposing software version.
|
|
defect
|
minor
|
|
nginx-core
|
#1845 |
Nginx logs POST on GET Timeouts.
|
|
defect
|
minor
|
|
nginx-core
|
#1846 |
worker process crashes when shared zone is missing from nginx config
|
|
defect
|
major
|
|
nginx-core
|
#1859 |
wildcard support in map used for stream?
|
|
defect
|
minor
|
|
nginx-core
|
#1868 |
wildcard include failing with FormatMessage() error:(15100)
|
|
defect
|
minor
|
|
nginx-core
|
#1869 |
Wrong client IP in errors logged early in request processing when using PROXY protocol
|
|
defect
|
minor
|
|
nginx-core
|
#1870 |
Large file download is not completed with sendfile option.
|
|
defect
|
minor
|
|
nginx-core
|
#1871 |
Nginx will not accept the latter of two client certs if the subject is the same.
|
|
defect
|
major
|
|
nginx-core
|
#1874 |
Nginux 1.16/1.17 Perl Module Fails Ubuntu 18
|
|
defect
|
major
|
nginx-1.17
|
nginx-core
|
#1876 |
Some access log variables leak memory on HTTP/2 client connections
|
|
defect
|
major
|
|
nginx-core
|
#1878 |
Set ciphersuite list order for TLS 1.3
|
|
defect
|
major
|
nginx-1.17
|
nginx-core
|
#1882 |
Nginx does not handle asterisk in OPTIONS request
|
|
defect
|
minor
|
|
nginx-core
|
#1889 |
access_log off; returns 404 with nginx proxy
|
|
defect
|
minor
|
|
nginx-core
|
#1892 |
TLSv1.3 session resumption - session tickets renewing
|
|
defect
|
minor
|
|
nginx-core
|
#1894 |
Docker image nginx:latest does not support lua in nginx-debug
|
|
defect
|
major
|
nginx-1.17
|
nginx-core
|
#1900 |
Nginx starting more worker processes when modsec rules are enabled
|
|
defect
|
major
|
|
nginx-core
|
#1906 |
core dumped with debug timer
|
|
defect
|
minor
|
|
nginx-core
|
#1907 |
Nginx does not handle URL larger than 8K
|
|
defect
|
major
|
|
nginx-core
|
#1911 |
[PATCH] Deprecate TLS 1.0 and TLS 1.1 for March 2020
|
|
enhancement
|
minor
|
nginx-1.17
|
nginx-core
|
#1912 |
Ignore duplicate reuseport options
|
|
defect
|
minor
|
|
nginx-core
|
#1914 |
Memory Leak in directory 'src/core', file 'ngx_buf.c'
|
|
defect
|
minor
|
|
nginx-core
|
#1917 |
Potential Memory Leak in directory 'src/core'. file 'ngx_hash.c.patch'
|
|
defect
|
minor
|
|
nginx-core
|
#1919 |
Potential Memory Leak in directory 'src/core'. file 'ngx_hash.c.patch'
|
|
defect
|
minor
|
|
nginx-core
|
#1923 |
Potential Memory Leak in directory 'src/core'. file 'ngx_inet.c'
|
|
defect
|
minor
|
|
nginx-core
|
#1924 |
10GB localhost download stalls
|
|
defect
|
major
|
|
nginx-core
|
#1926 |
resolver should not cache failures
|
|
defect
|
major
|
|
nginx-core
|
#1929 |
Random errors with PHP-FPM
|
|
defect
|
minor
|
|
nginx-core
|
#1947 |
Реверсный прокси не передает звук и динамическую графику
|
|
defect
|
critical
|
|
nginx-core
|
#1950 |
nginx/1.17.9 randomly truncating some large proxy responses
|
|
defect
|
major
|
|
nginx-core
|
#1952 |
systemd[1]: nginx.service: Failed to parse PID from file /run/nginx.pid: Invalid argument
|
|
defect
|
minor
|
|
nginx-core
|
#1960 |
nginx -t tries to bind to ports
|
|
enhancement
|
minor
|
|
nginx-core
|
#1967 |
Cannot use different SSL protocols in different server blocks
|
|
defect
|
major
|
|
nginx-core
|
#1968 |
Cannot use different SSL protocols in different server blocks
|
|
defect
|
major
|
|
nginx-core
|
#1969 |
ssl_ecdh_curve avoid 0-RTT
|
|
defect
|
major
|
|
nginx-core
|
#1970 |
ssl_ecdh_curve avoid 0-RTT
|
|
defect
|
major
|
|
nginx-core
|
#1972 |
Use of IRIs in redirect responses causes nginx to violate HTTP RFCs
|
|
defect
|
minor
|
|
nginx-core
|
#1973 |
Intermittent form body loss with concurrent HTTP2 POST requests
|
|
defect
|
minor
|
|
nginx-core
|
#1974 |
Custom variable not written to access_log when nginx.status is 400
|
|
defect
|
minor
|
|
nginx-core
|
#1976 |
Nginx DNS cache issue. ngx_http_core_module valid config is not working.
|
|
defect
|
major
|
|
nginx-core
|
#1978 |
Logging real client IP on invalid request
|
|
enhancement
|
minor
|
|
nginx-core
|
#1979 |
listen 80 http2; combined with proxy_pass http:// brakes website
|
|
defect
|
minor
|
|
nginx-core
|
#1981 |
no logging of HTTP/1.x requests to a plain text HTTP/2 listening socket
|
|
defect
|
minor
|
|
nginx-core
|
#1985 |
No header response in 400 Bad Request
|
|
defect
|
major
|
unit-1.18
|
nginx-core
|
#1988 |
nginx: [emerg] too long parameter, probably missing terminating "'" character
|
|
defect
|
blocker
|
|
nginx-core
|
#1989 |
Nginx not displaying progressive image when in http2
|
|
defect
|
critical
|
|
nginx-core
|
#1990 |
proxy_cache_min_uses not counted per variant on initial requests
|
|
enhancement
|
minor
|
|
nginx-core
|