Welcome! Log In Create A New Profile


[ANN] OpenResty released

Yichun Zhang
September 09, 2019 02:08PM
Hi folks!

OpenResty is a patch release addressing security
vulnerabilities in the HTTP/2 protocol which may cause excessive
memory consumption and CPU usage (CVE-2019-9511, CVE-2019-9513,

All previous NGINX cores supporting HTTP/2 are affected by this
issue (1.9.5 to 1.16.1). If you are serving HTTP/2 traffic with
*any* previous OpenResty release, upgrade to or disable

Starting from this verison, we provide more official binary Yum/Apt
repositories for Red Hat Enterprise Linux (RHEL) 8 x86_64, OpenSUSE
Leap 15.1 x86_64, Debian 10 amd64, Fedora 30 x86_64, Amazon Linux 2
x86_64, and CentOS 7 aarch64 (arm64):


We will keep adding more official binary package repositories for
more Linux distributions in the future. However, we have
discontinued the maintainence of the official Apt repositories for
i386 Ubuntu systems due to the lack of interest from the community.

We also upgrade the PCRE and OpenSSL in our official Win32 and Win64
binary packages to their latest versions, 8.43 and 1.1.0k,

Download this version here:


The (portable) source code distribution, the Win32/Win64 binary
distributions, and the pre-built binary Linux packages for Ubuntu,
Debian, Fedora, CentOS, RHEL, OpenSUSE, Amazon Linux are provided on
this Download page.

This is the second OpenResty release based on the nginx 1.15.8 core.

We wish to thank the Netflix and Google security teams for their
efforts in discovering these vulnerabilities, as well as the NGINX
team for promptly patching them.

Thanks Thibault Charbonnier for helping this release.

Version highlights
* bugfix: applied the nginx core patch for new HTTP/2 security
advisories (CVE-2019-9511 CVE-2019-9513 CVE-2019-9516).

Full Changelog
Complete change logs since the last (formal) release,, can
be browsed in the page Change Log for 1.15.8.x:


We have run extensive testing on our Amazon EC2 test cluster and
ensured that all the components (including the Nginx core) play well
together. The latest test report can always be found here:


We also always run our OpenResty Edge commercial software based on
the latest open source version of OpenResty in our own global CDN
network (dubbed "mini CDN") powering our openresty.org and
openresty.com websites. See https://openresty.com/ for more details.

Feedback on this release is more than welcome. Feel free to create
new [GitHub issues](https://github.com/openresty/openresty/issues)
or send emails to one of our mailing lists.

The Next Release
The next release will be based on a very recent nginx 1.17.x core and is
already near the corner. We have been working hard on this next
release for several months now. Stay tuned!


Best regards,
nginx mailing list
Subject Author Posted

[ANN] OpenResty released

Yichun Zhang September 09, 2019 02:08PM

Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 86
Record Number of Users: 6 on February 13, 2018
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready