# Nginx-1.9.10

**URL:** <https://www.ruby-forum.com/t/nginx-1-9-10/243931>\
**Category:** NGINX\
**Created:** [January 26, 2016, 5:32pm UTC](https://www.ruby-forum.com/t/nginx-1-9-10/243931 "2016-01-26T17:32:07Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Rafa\_F](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/r/958977/32.png) [@Rafa\_F](https://www.ruby-forum.com/u/Rafa_F)\
**Post date:** [January 26, 2016, 5:32pm UTC](https://www.ruby-forum.com/t/nginx-1-9-10/243931/1 "2016-01-26T17:32:07Z")

</div>

Changes with nginx 1.9.10 26 Jan  
2016

```
*) Security: invalid pointer dereference might occur during DNS 

```

server  
response processing if the “resolver” directive was used,  
allowing an  
attacker who is able to forge UDP packets from the DNS server to  
cause segmentation fault in a worker process (CVE-2016-0742).

```
*) Security: use-after-free condition might occur during CNAME 

```

response  
processing if the “resolver” directive was used, allowing an  
attacker  
who is able to trigger name resolution to cause segmentation  
fault in  
a worker process, or might have potential other impact  
(CVE-2016-0746).

```
*) Security: CNAME resolution was insufficiently limited if the
   "resolver" directive was used, allowing an attacker who is able 

```

to  
trigger arbitrary name resolution to cause excessive resource  
consumption in worker processes (CVE-2016-0747).

```
*) Feature: the "auto" parameter of the "worker_cpu_affinity" 

```

directive.

```
*) Bugfix: the "proxy_protocol" parameter of the "listen" directive 

```

did  
not work with IPv6 listen sockets.

```
*) Bugfix: connections to upstream servers might be cached 

```

incorrectly  
when using the “keepalive” directive.

```
*) Bugfix: proxying used the HTTP method of the original request 

```

after  
an “X-Accel-Redirect” redirection.

–  
Maxim D.  
[http://nginx.org/](http://nginx.org/)

---

<div class="post-metadata">

**Author:** ![Maxim\_D](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/m/da6949/32.png) [@Maxim\_D](https://www.ruby-forum.com/u/Maxim_D)\
**Post date:** [January 27, 2016, 5:30pm UTC](https://www.ruby-forum.com/t/nginx-1-9-10/243931/2 "2016-01-27T17:30:23Z")

</div>

Thanks updated to 1.9.10 fine with ngx\_brotli + ngx\_pagespeed 1.10  
branch 🙂

Posted at Nginx Forum:

> **[Re: nginx-1.9.10](https://forum.nginx.org/read.php?2,264158,264187#msg-264187)**
>
> Changes with nginx 1.9.10 26 Jan 2016 \*) Security: invalid pointer dereference might occur during DNS server response processing if the "resolver" directive was used, allowing an attacker who is able to forge

---

<div class="post-metadata">

**Author:** ![Maxim\_D](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/m/da6949/32.png) [@Maxim\_D](https://www.ruby-forum.com/u/Maxim_D)\
**Post date:** [January 28, 2016, 8:21am UTC](https://www.ruby-forum.com/t/nginx-1-9-10/243931/3 "2016-01-28T08:21:17Z")

</div>

Hello Nginx users,

Now available: Nginx 1.9.10 for Windows  
[https://kevinworthington.com/nginxwin1910](https://kevinworthington.com/nginxwin1910) (32-bit and 64-bit versions)

These versions are to support legacy users who are already using Cygwin  
based builds of Nginx. Officially supported native Windows binaries are  
at  
[nginx.org](http://nginx.org).

Announcements are also available here:  
Twitter [http://twitter.com/kworthington](http://twitter.com/kworthington)  
Google+ [Google Workspace Updates: New community features for Google Chat and an update on Currents](https://plus.google.com/+KevinWorthington/)

## Thank you, Kevin

Kevin W.  
kworthington _@_ (gmail] [dot} {com)

> **[Kevin Worthington](https://kevinworthington.com/)**
>
> Practical Tech Guides, Troubleshooting, and Insights on the Modern Internet

[http://twitter.com/kworthington](http://twitter.com/kworthington)

> **[Google Workspace Updates: New community features for Google Chat and an...](https://workspaceupdates.googleblog.com/2023/04/new-community-features-for-google-chat-and-an-update-currents%20.html)**