Changelog for
rubygem-passenger-5.3.7-2.179.x86_64.rpm :
* Sun Nov 11 2018 mschnitzerAATTsuse.com- updated to version 5.3.7 (boo#1115545)
* Fixes package installation issues on Ubuntu 18.04. These issues were caused by an update released by Ubuntu on the nginx-common package. Closes GH-2122, GH-2140.
* Fixes compilation problems and warnings with GCC 8.2. Tested on Alpine Linux edge 2018-11-05. Closes GH-2139.
* Fixes compatibility with libcurl 7.62.0. Contributed by Po-Chuan Hsieh (AATTsunpoet).
* Changes minimum supported macOS version to 10.11 El Capitan.
* Removes packages for Ubuntu 17.10 Artful.
* Mon Nov 05 2018 mschnitzerAATTsuse.com- updated to version 5.3.6 (boo#1114735)
* Fixes smart spawning. A regression in 5.3.5 (due to a refactoring) made it so that Passenger only used the direct spawning method. This issue was mostly noticeable in the form of increased process spawning times between 5.3.4 and 5.3.5.
* Fixes Passenger Core and application processes staying on the Watchdog\'s OOM score (unkillable). Closes GH-2105.
* Fixes \"mach_vm_map failed\" warnings on macOS >= High Sierra. These warnings were harmless, but annoying. Closes GH-2101.
* Fixes `passenger-config compile-agent` compilation with optimizations. The optimization flags were not properly passed to the compiler.
* Fixes a crash that could occur when HTTP clients send a chunked transfer-encoding body containing a chunk larger than 429496729 bytes.
* Improves detection of the system Apache\'s include headers on macOS High Sierra and later.
* Fixes RVM gemset detection on RVM 1.29.
* No longer supplies precompiled Ruby extensions for Ruby 1.9.3 and 2.0.0. When running Ruby 1.9.3 and 2.0.0, Passenger will attempt to compile from source instead.- changed suse.patch to apply again- changed fix_shebangs.patch to apply again
* Tue Sep 25 2018 mschnitzerAATTsuse.com- updated to version 5.3.5
* Fixes Ubuntu 18.04 package installation problems due to Nginx version mismatch. Closes GH-2122.
* Improves usability of crash reports. Crash reports are no longer dumped in one big chunk to stderr. Instead, they are now dumped into multiple files, making it easy to inspect relevant reports.
* Fixes some crashes that only occur with log level 7.
* Downloads binaries from the newly-introduced Github mirror. This improves the reliability of binary downloads.
* Updated various library versions used in precompiled binaries (used for e.g. gem installs): - OpenSSL: 1.0.2p (was: 1.0.2o) - libcurl: 7.61.1 (was: 7.60.0)
* Thu Aug 02 2018 mschnitzerAATTsuse.com- updated to version 5.3.4
* Fixes a crash during startup on FreeBSD 11.2 and recent OpenBSD versions due to C++11 compatibility issues in the code. Closes GH-2097.
* Updates Boost to version 1.67.0.
* [Apache] Fixes the handling of HTTP requests with chunked bodies in combination with `PassengerBufferUploads off`. Closes GH-2102
* Thu Jun 28 2018 mschnitzerAATTsuse.com- updated to version 5.3.3
* [Apache, Nginx] Fixes the passenger-install-
*-module scripts. (Regression in 5.3.2) Closes GH-2093.
* [Nginx] Fixed nginx module building on CentOS 6. Closes GH-2081. Thanks to defanator for contributing this.
* Wed Jun 13 2018 mschnitzerAATTsuse.com- updated to version 5.3.2 Release 5.3.2 - ------------ This release contains many security updates. Users are advised to upgrade as soon as possible. See our blog for more information on the vulnerabilities.
* [Nginx] Fixes CVE-2018-12029, a local privilege escalation vulnerability in the Nginx module that occurs when `passenger_instance_registry_dir` is configured to a directory with insufficiently strict permissions.
* Fixes CVE-2018-12026, 12027, and 12028. These are local denial of service, local information disclosure and local privilege escalation vulnerabilities that could be exploited by malicious applications or malicious users on the system.
* Updated various library versions used in precompiled binaries (used for e.g. gem installs): - OpenSSL (Linux only): 1.0.2o (was: 1.0.2k; on macOS it was already 1.0.2o) - GeoIP: 1.6.12 (was: 1.6.11) - libcurl: 7.60.0 (was: 7.56.1)
* Fixes Meteor support in non-bundled mode (regression from 5.3.0). Closes GH-2082.
* Fixes the fact that the error page (which is shown when an app fails to spawn) sometimes contains unsufficient analysis details about the app.
* [Apache] Fixes PassengerMaxInstancesPerApp not being respected (regression from config refactor in 5.2.0). Closes GH-2059.
* [Enterprise, Apache] Fixes PassengerMaxInstances not being respected (regression from config refactor in 5.2.0).
* [Enterprise] Fixes passenger-irb being unable to connect to an app process (regression from 5.3.0). Closes GH-2087.- Change suse.patch to apply again
* Tue May 15 2018 mschnitzerAATTsuse.com- updated to version 5.3.1 Release 5.3.1 - ------------
* Fixes a regression from 5.3.0: a crash that occurs if the user that an application should run under, does not have a shell configured. Closes GH-2078.
* Fixes a regression from 5.3.0: setting supplementary group IDs during user switching. Closes GH-2077.
* Fri May 11 2018 mschnitzerAATTsuse.com- updated to version 5.3.0 Release 5.3.0 - ------------
* Adds Ubuntu 18.04 \"Bionic\" packages.
* Removes packages for Debian 7 \"Wheezy\" (EOL May 2018).
* Vastly improves spawning error page: quick overview of where the problem is, and the option to drill down in extensive troubleshooting information.
* Fuse Panel support: fixes a crash that occurs when you shut down Passenger right after it fails to connect to Fuse Panel.
* [Nginx] Updates the preferred Nginx version to 1.14.0 (from 1.12.2).
* [Apache] Updates the recommended package for apache dev headers on debian >= 9.4. Closes GH-2048.
* [Enterprise] Fix licensing proxy warning to refer to licensing_proxy_url instead of licensing_proxy.
* [Enterprise] Add new `PassengerAppLogFile` (Apache) / `passenger_app_log_file` (Nginx) config option to specify a file for app-specific logs. Closes GH-1279. - Change suse.patch to apply again
* Tue Apr 10 2018 mschnitzerAATTsuse.com- mention `series` in spec file- mention `rubygem-passenger-rpmlintrc` in spec file
* Wed Apr 04 2018 mschnitzerAATTsuse.com- updated to version 5.2.3 Release 5.2.3 - ------------
* Fuse Panel support: fixes a few bugs with handling small log files and with apps that don\'t output any messages.
* Python app support: fixes a Python 3 compatibility issue w.r.t. writing data over the socket.
* macOS support: fixes a crash in the `passenger-config compile-nginx-engine` command which only occurs on macOS >= 10.13. This crash was caused by a missing `require` call in our code, and affects users who compile Passenger from source, e.g. users of the Passenger Enterprise Homebrew formula.
* Fixes a small memory corruption issue (dangling pointer) in the ApplicationPool subsystem.
* Improves support for the $TMPDIR environment variable by removing leftover hardcoded references to /tmp. Closes GH-2052.
* Updated PCRE version to 8.42 (was: 8.41) across the board. Release 5.2.2 - ------------
* Adds an option for dumping the web server config manifest to a given file: `PassengerDumpConfigManifest` (Apache) / `passenger_dump_config_manifest` (Nginx). This option is mostly useful for Passenger developers.
* [Nginx] Fixes support for configurations that have two `passenger_base_uri` options in a single virtual host, without corresponding `passenger_app_group_name` and `passenger_app_root` directives. Closes GH-2043.
* [Enterprise] Improved support for RAM-based pricing on Heroku (now using officially recommended memory limit reporting via CGROUP). Release 5.2.1 - ------------
* Fixes a regression from 5.1.11 that prevented Passenger from compiling on FreeBSD in some cases. Closes GH-2031.
* Fixes a bounds issue in printing an error message that could occur in some cases when spawning a child process fails. Issue was present from 5.1.11.
* Fixes a regression from 5.2.0 which prevented setting the max pool idle time to 0. Closes GH-2020.
* Warns if using an incompatible compiler on macOS < 10.13. Closes GH-2017.
* No longer uses Security Framework on macOS 10.13+. This will prevent further keychain warnings from appropriately compiled Passengers.
* Fixes warning on macOS about /proc/self access (excluded some code that was intended only for Linux).
* `passenger-install-nginx-module` now downloads the preferred Nginx version via https. Thanks to smiba for pointing this out.
* [Apache] Fixes a regression from 5.2.0 that caused a crash on startup when no top-level ServerName is set. Closes GH-2029.
* [Enterprise] Adds support for using RAM-based pricing on Heroku. Release 5.2.0 - ------------
* [Apache] Breaking change: to avoid configuration ambiguity, options that act on a per-process level (rather than per-request level) can no longer be used in .htaccess. See the Passenger Library -> configuration -> intro for more info (https://www.phusionpassenger.com/library/config/apache/intro.html#global-per-application-and-per-request-options).
* [Apache] Breaking change: the option PassengerResolveSymlinksInDocumentRoot has been removed (old Passenger 2 compatibility option, see PassengerAppRoot for new method).
* [Apache] Option handling has been refactored to avoid silent conflicts and errors: warnings are now generated for global config options in
(they conflict between VHosts) and per-application options in , and (silently failed before).
* [Apache] Fixes compilation issues on some systems with macOS 10.13 High Sierra (in addition to the fixes from 5.1.11).
* [Enterprise] Fixes two unnecessary warnings about failure to contact the licensing server, one occurring since version 5.1.8 (\"3 days out of contact\"), the other since 5.1.11 + Apache (\"failure to contact\").
* [Nginx] Fixes the default for the `passenger_app_group_name` to start with the `passenger_app_root` rather than the document root (the end remains the same: `passenger_app_env`).
* [Standalone] Adds command line support for `start_timeout` in Passenger Standalone (also removes unnecessary warning when using it in `Passengerfile.json`).
* [Standalone, Nginx] Waits for Nginx to exit before cleaning up temp dir (started happening more since the switch to Nginx graceful shutdown in 5.1.6). Closes GH-1970.
* Deprecated options for Union Station.
* Ruby 2.5 compatibility: handle case where an exception\'s backtrace may be nil. Closes GH-2011.
* Adds JSON mime type for static file serving. Closes GH-2018.
* Removes packages for Ubuntu 17.04 \"Zesty\" (EOL 13-jan-2018).- Add fix_shebangs.patch:
* Required to fix the package building because we don\'t allow /usr/bin/env shebangs.- Change suse.patch to apply again
