Skip to content

Releases: baranchen/ingress-nginx

Release list

v1.30.6 — NGINX 1.30.6 (stable)

v1.30.6 — NGINX 1.30.6 (stable) Latest
Latest

Choose a tag to compare

View all tags
@baranchen baranchen released this 15 Oct 02:55
v1.30.6
01be319

Changelog

controller-v1.30.6 (Community Fork)

Security update of the community-maintained fork of ingress-nginx: NGINX upgraded from 1.30.5 to 1.30.6 (stable).

All changes:

  • Upgrade NGINX from 1.30.5 to 1.30.6 (stable)
  • Update nginx tarball SHA256 hash for 1.30.6
  • Rename 33 nginx patches to 1.30.6 naming (contents unchanged, verified all 34 patches apply cleanly)
  • Update TAG, NGINX_BASE, Helm chart and deploy manifests to v1.30.6
  • README: add long-term Gateway API migration recommendation (this fork is a transitional solution)

NGINX version highlights (1.30.5 → 1.30.6):

  • CVE-2026-15176 fix — heap buffer overflow when the request URI was changed by the rewrite directive and then mapped to a file path via alias (Critical, CVSS 9.2)
  • CVE-2026-93479 fix — buffer overflow while evaluating string expressions with variables, affecting document root calculation and request logging
  • CVE-2026-95101 fix — HTTP/3 unknown frame part treated as request body, bypassing client_max_body_size or injecting data into the proxied request
  • CVE-2026-97629 fix — TLS session ticket key rotation left a key uninitialized, allowing session forgery
  • CVE-2026-97205 fix — use-after-free with AIO when an SSI page has include virtual commands

Supported Kubernetes versions:

1.35, 1.34, 1.33

Full Changelog: v1.30.5...v1.30.6

Assets 2
Loading

v1.30.5 — NGINX 1.30.5 (stable)

v1.30.5 — NGINX 1.30.5 (stable)

Choose a tag to compare

View all tags
@baranchen baranchen released this 15 Oct 01:19
v1.30.5
014bcb9

controller-v1.30.5 (Community Fork)

Security update of the community-maintained fork of ingress-nginx: NGINX upgraded from 1.30.2 to 1.30.5 (stable).

All changes:

  • Upgrade NGINX from 1.30.2 to 1.30.5 (stable)
  • Update nginx tarball SHA256 hash for 1.30.5
  • Rebase the log_escape_non_ascii patch to NGINX 1.30.5 (the log module was refactored upstream with buffer length checks and a new ngx_http_log_escape call site)
  • Rename 33 nginx patches to 1.30.5 naming (contents unchanged, verified all 34 patches apply cleanly)
  • Update TAG, NGINX_BASE, Helm chart and deploy manifests to v1.30.5

NGINX version highlights (1.30.2 → 1.30.5):

  • NGINX 1.30.3: CVE-2026-42055 fix (heap buffer overflow when proxying crafted requests to HTTP/2 or gRPC backends), CVE-2026-48142 fix (worker memory disclosure via charset_map UTF-8 decoding)
  • NGINX 1.30.4: CVE-2026-42533 fix (heap buffer overflow with map regex matching), CVE-2026-60005 fix (worker memory disclosure with the slice directive / unnamed regex captures), CVE-2026-56434 fix (use-after-free in the SSI filter module)
  • NGINX 1.30.5: CVE-2026-90439 fix (heap buffer overflow in ngx_http_v3_module when using HTTP/3 with OpenSSL 3.5.0 and earlier), hardening: QUIC transport parameters extension received during an SSL connection is now always ignored

Supported Kubernetes versions:

1.35, 1.34, 1.33

Full Changelog: controller-v1.30.2...controller-v1.30.5

Loading

v1.30.2 — First Community Release

v1.30.2 — First Community Release

Choose a tag to compare

View all tags
@baranchen baranchen released this 28 May 16:13
v1.30.2
7852380

What's New

This is the first release of the community-maintained fork of ingress-nginx, based on upstream v1.15.1 with NGINX upgraded from 1.27.1 to 1.30.2 (stable).

Changes

  • Upgrade NGINX from 1.27.1 to 1.30.2 (stable)
  • Remove CVE-2025-23419 patch (fixed upstream in NGINX 1.27.4+)
  • Rebase 34 OpenResty patches to NGINX 1.30.2
  • Update documentation for community fork
  • Update OWNERS, SECURITY, CONTRIBUTING for fork maintenance
  • Remove Kubernetes community-specific process documents

NGINX Highlights (1.27.1 → 1.30.2)

Version Key Changes
1.27.2 SSL certificate caching, ssl_session_log directive
1.27.3 Upstream server resolve parameter, resolver in upstream blocks
1.27.4 CVE-2025-23419 fix (TLSv1.3 SNI session resumption bypass)
1.27.5 CUBIC congestion control in QUIC, ssl_certificate_compression directive
1.28.0 Stable branch from 1.27.5
1.28.1–1.28.2 Bug fixes and security patches
1.30.0 HTTP/2 upstream proxy, upstream sticky sessions, early hints (103)
1.30.1–1.30.2 Bug fixes, latest security patches

Supported Kubernetes Versions

1.35, 1.34, 1.33

Upgrade from Upstream

This is a drop-in replacement. No configuration changes required:

# Using Helm
helm upgrade ingress-nginx ingress-nginx/ingress-nginx \
  --set controller.image.tag=v1.30.2

# Using kubectl
kubectl apply -f https://raw.githubusercontent.com/baranchen/ingress-nginx/main/deploy/static/provider/cloud/deploy.yaml

Full Changelog: kubernetes/ingress-nginx@controller-v1.15.1...baranchen:ingress-nginx:v1.30.2

Loading