# changelog

author: Danila Vershinin <info@getpagespeed.com> - 1.10.3-1
changelog:
  - Fixed memory disclosure vulnerability in SMTP module (CVE-2025-53859).
  - Resolved certificate loading issue with renew_on_load option.
  - ACME client now correctly fetches certificates in stream block.
  - Improved error handling for disabled ACME client directives.
  - Fixed startup error when ACME client is referenced incorrectly.
  - Prevented worker process crashes from misconfigured client blocks.


author: Danila Vershinin <info@getpagespeed.com> - 1.11.0-1
changelog:
  - Initialize $http_host from :authority in HTTP/3 requests.
  - Consistent error page returned for upstream errors.
  - $upstream_request_method prevents HEAD caching issues.
  - Increased acme_max_response_size for larger responses.
  - New Metric module for real-time HTTP metrics collection.
  - Support for ALPN validation in ACME requests.
  - Fixed various bugs affecting upstream and caching behavior.


author: Danila Vershinin <info@getpagespeed.com> - 1.11.1-1
changelog:
  - Improved ACME HTTP challenge handling for specified ports and IP addresses.
  - Fixed HTTP/2 request counting in server zone statistics.
  - Resolved crash issue for disabled ACME clients without certificates.
  - Corrected HTTP/3 request counting in status zones with specific variables.


