← Back

OpenResty 1.29.2.3 Released

OpenResty Inc. Posted Mar 26, 2026 Updated Mar 26, 2026

3 mins read

Views

The OpenResty web platform based on NGINX and LuaJIT version 1.29.2.3 has been officially released. You can view the complete release notes.

This release provides source code distributions, Win32/Win64 binary distributions, and versions for all common Linux distributions. You can download the packages through the following link: http://openresty.org/en/download.html

Special thanks to all our developers and contributors! Thanks to OpenResty Inc. for sponsoring a large amount of OpenResty core development work.

Key Changes

This release features:

Security Fixes: Backported several official Nginx security patches addressing vulnerabilities such as buffer overflows in the DAV and MP4 modules, CRAM-MD5/APOP null pointer dereferences, auth_http injection flaws, OCSP bypasses, and SSL upstream injection vulnerabilities.
lua-nginx-module: Upgraded to v0.10.30rc2
- Introduced precontent_by_lua directive
- Introduced proxy_ssl_verify_by_lua* directive
- Added tcpsock:getsslsession API and several SSL-related FFI functions
- Added keepintvl / keepcnt options for TCP sockets
- Resolved SIGSEGV and use-after-free issues within the QUIC connection close path
- Fixed null pointer dereference issues in the SSL cache
stream-lua-nginx-module
- Introduced proxy_ssl_certificate_by_lua directive
- Added serversslhandshake method and several SSL-related FFI functions
- Added keepintvl / keepcnt options for TCP sockets
- Fixed cosockets not being closed when the Nginx shutdown timer was triggered
lua-resty-core: Upgraded to v0.1.33rc2
- Added tcpsock:getsslsession, sock:getsslpointer(), sock:getsslctx(), and other APIs
- Introduced precontent_by_lua directive and proxy_ssl_certificate_by_lua directive
- Added tcpsock.getfd() support for the stream subsystem
LuaJIT: Upgraded to v2.1-20260311
- Added ffi.abi("dualnum") support
- Fixed multiple ARM64 disassembly and BTI-related issues
- Resolved string.byte/sub/find IR generation edge cases
- Fixed unary subtraction and type conversion issues in DUALNUM mode
- Implemented numerous improvements to FFI, JIT compiler, and cross-platform stability

For a complete list of changes, please refer to the release notes.

Complete Changelog

For the complete list of changes, HTML version of the changelog, and other hyperlinks, please refer to this link.

Note: There appears to be a truncated sentence at the end of the original document about creating issues on GitHub or sending emails or discussing on the BBS forum.

Website

OpenResty is a mature web platform that integrates the standard Nginx core, Lua/LuaJIT, numerous third-party Nginx modules and Lua libraries, as well as most of their external dependencies. This makes OpenResty a complete and powerful networking solution. For detailed information, please visit the OpenResty homepage: https://openresty.org/

Quality Assurance

We have conducted extensive testing on Amazon EC2 test clusters and ensured that all components (including the Nginx core) work well together. The latest test reports can be found here: https://qa.openresty.org/

Commercial Version

We run OpenResty based on the latest open-source version in our own global CDN network (known as “Mini CDN”). This network supports our openresty.org and openresty.com websites, and is also used for our commercial software. For more information, please visit https://openresty.com/.