[nginx] Added a previously missed changes entry in 1.29.1 relnotes.

noreply at nginx.com noreply at nginx.com
Fri Aug 22 17:02:23 UTC 2025


details:   https://github.com/nginx/nginx/commit/1a82df8cca80458fc3da0968f64624f40cafdf37
branches:  master
commit:    1a82df8cca80458fc3da0968f64624f40cafdf37
user:      Sergey Kandaurov <pluknet at nginx.com>
date:      Wed, 13 Aug 2025 20:26:56 +0400
description:
Added a previously missed changes entry in 1.29.1 relnotes.


---
 docs/xml/nginx/changes.xml | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/docs/xml/nginx/changes.xml b/docs/xml/nginx/changes.xml
index 132a8d835..c07de09b7 100644
--- a/docs/xml/nginx/changes.xml
+++ b/docs/xml/nginx/changes.xml
@@ -7,6 +7,21 @@
 
 <changes ver="1.29.1" date="2025-08-13">
 
+<change type="security">
+<para lang="ru">
+обработка специально созданного логина/пароля при использовании
+метода аутентификации "none" в модуле ngx_mail_smtp_module
+могла приводить к отправке серверу аутентификации
+части содержимого памяти рабочего процесса (CVE-2025-53859).
+</para>
+<para lang="en">
+processing of a specially crafted login/password when using
+the "none" authentication method in the ngx_mail_smtp_module
+might cause worker process memory disclosure
+to the authentication server (CVE-2025-53859).
+</para>
+</change>
+
 <change type="change">
 <para lang="ru">
 теперь сжатие сертификатов в протоколе TLSv1.3 по умолчанию запрещено.


More information about the nginx-devel mailing list