forked from phusion/passenger
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathCHANGELOG
2865 lines (2282 loc) · 167 KB
/
CHANGELOG
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
Release 6.0.6 (Not yet released)
-------------------------------
Release 6.0.5
-------------
* [Enterprise] Fixed a regression (introduced in 5.0.0) where Flying Passenger could not update the Passenger configuration. Closes GH-1554.
* Adds Ubuntu 20.04 "Focal" packages, and removes Ubuntu 19.04 "Disco" packages.
* Adds RHEL / CentOS 8 packages.
* [Nginx] Converts CentOS 7 packages to provide a dynamic module instead of a full Nginx install.
* Fixes the encoding name for xml output from the `passenger-status --show=xml` command. Closes GH-2248.
* Adds the 'etc' gem as an explicit dependency. Closes GH-2124.
* Adds a user agent to the passenger pre-spawn script. Closes GH-1534.
* Fixes a compilation issue on FreeBSD. Closes GH-2240.
* Fixes an issue where rack bodies may not be processed correctly.
* Improves the database reconnection speed in forked processes. closes GH-2253.
* [Nginx] Adds a config option `passenger_temp_path` to set the path used for the disk backed response cache. Re-Closes GH-2075.
* [Apache] Protects the path info and script name passed to the app from modifications done by mod_security. Closes GH-2198.
* Ensures baseuri is set per request, even if config is loaded from cache. Closes GH-2117.
* Make temp dir toucher cleanup code more resilient to permissions issues.
* [Nginx] Bumps the preferred Nginx version to 1.18.0 (previously 1.17.3).
* [Nginx] The preferred PCRE version is now 8.44 (previously 8.43).
* Removed deprecated rubyforge gemspec property. Contributed by @olleolleolle.
* Adds an option for specifying the attributes on the sticky session cookie:
- Apache: PassengerStickySessionsCookieAttributes "SameSite=Lax; Secure;"
- Nginx: passenger_sticky_sessions_cookie_attributes "SameSite=Lax; Secure;"
- Standalone: --sticky-sessions-cookie-attributes "SameSite=Lax; Secure;"
* Updated various library versions used in precompiled binaries (used for e.g. gem installs):
- ccache 3.7.9 (was 3.7.3)
- Curl 7.69.1 (was 7.66.0)
- Git 2.26.2 (was 2.23.0)
- GnuPG 2.2.20 (was 2.2.17)
- libgpg_error 1.37 (was 1.36)
- OpenSSL 1.0.2u (was 1.0.2t)
- PCRE 8.44 (was 8.43)
- s3cmd 2.1.0 (was 2.0.2)
- RubyGems 3.0.8 (was 3.0.6)
- Rubies:
- 2.4.6 -> 2.4.10
- 2.5.5 -> 2.5.8
- 2.6.3 -> 2.6.6
+ 2.7.1
Release 6.0.4
-------------
* Adds Debian 10 "Buster" packages.
Release 6.0.3
-------------
* Add an option to specify the spawn dir during startup, which is specifically useful for CageFS users. Contributed by @plmnikulin. Closes GH-2145.
- Apache: `PassengerSpawnDir`
- Nginx: `passenger_spawn_dir`
* [Nginx] Bumps the preferred Nginx version to 1.17.3 (previously 1.15.8).
* [Nginx] The preferred PCRE version is now 8.43 (previously 8.42).
* Adds Ubuntu 19.04 "Disco" packages, and removes Ubuntu 18.10 "Cosmic" and Ubuntu 14.04 "Trusty" packages.
* Changes minimum supported macOS version to 10.12 Sierra.
* Improves container detection and fixes a compilation warning in GCC 8+. Closes GH-2186.
* Allowed externally specifying an app instance to send a request to. Contributed by Mark R. James (@mrj).
* Fixed an incompatibility with sending requests to specific app instances, when using the rails web-console gem. Contributed by Mark R. James (@mrj).
* Fixed a regression (introduced in 5.1.9) where some hooks were not called. Closes GH-2103. Contributed by Mark R. James (@mrj).
* Fixes compilation with clang 8 (latest macOS update) by updating vendored boost library from 1.67 to 1.69.
* Reverts a regression intruduced in 6.0.2 where Passenger would crash if it had to use the disk backed response cache. Closes GH-2189.
* [Nginx] Adds an option `passenger_buffer_upload` to allow buffering uploaded data in Passenger before forwarding it to the app. As a workaround for apps that cannot handle chunked data.
* [Enterprise] When using deferred port binding, no longer binds port if all apps do not start up.
* Updated various library versions used in precompiled binaries (used for e.g. gem installs):
- PCRE 8.43 (was 8.42)
- Curl 7.65.1 (was 7.64.0)
- ccache 3.7.3 (was 3.6)
- Git 2.22.0 (was 2.20.1)
- OpenSSL 1.0.2s (was 1.0.2q)
- RubyGems 3.0.6 (was 3.0.2)
- GnuPG 2.2.16 (was 2.2.13)
- libgcrypt 1.8.5 (was 1.8.4)
- libgpg_error 1.36 (was 1.35)
- libiconv 1.16 (was 1.15)
- Ruby:
- 2.4.5 -> 2.4.6
- 2.5.3 -> 2.5.5
- 2.6.1 -> 2.6.3
Release 6.0.2
-------------
* Allow compilation to work when Apple messed up their system ruby headers.
* Only try to read pid 1's /proc files as root, in container detection. Closes GH-2168.
* Add an option to disable prefixing application logs with "App PID stdout". Contributed by Ian Kottman. Closes GH-1915.
- Apache: `PassengerDisableLogPrefix`
- Nginx: `passenger_disable_log_prefix`
* Add support for identifying the Passenger instance by PID. Closes GH-2146. Contributed by Saverio Miroddi (@saveriomiroddi).
* [Ruby] Made Passenger more resiliant to Rack bugs. Closes GH-2150.
* [Nginx] Do not touch Nginx's proxy_temp_path var in Passenger's nginx modules. Closes GH-2075. Contributed by Roman Berestnikov-Sivolov (@ROMB).
* Updated Ruby versions used in precompiled binaries (used for e.g. gem installs) to include 2.6.1.
* Updated various library versions used in precompiled binaries (used for e.g. gem installs):
- Curl: 7.64.0 (was: 7.63.0)
- Ruby: 2.6.1 (was: 2.6.0)
- RubyGems 3.0.2 (was: 3.0.1)
- ccache 3.6 (was: 3.5)
- GnuPG 2.2.13 (was: 2.2.12)
- libassuan 2.5.3 (was: 2.5.2)
- libgpg_error 1.35 (was: 1.33)
Release 6.0.1
-------------
* Adds Ubuntu 18.10 "Cosmic" packages.
* Skips trying to set oom score in LXC container environments. Closes GH-2143.
* Fixes an issue during the GLS startup handshake where ephemeral ports could be exhausted. Closes GH-2144.
* Updated Ruby versions used in precompiled binaries (used for e.g. gem installs) to include 2.5.3, and 2.4.5 (removed: 2.4.4).
* Bumps the preferred Nginx version to 1.15.8.
* Updated various library versions used in precompiled binaries (used for e.g. gem installs):
- Curl: 7.62.0 -> 7.63.0
- Git: 2.19.2 -> 2.20.1
- Gnupg: 2.2.11 -> 2.2.12
- libassuan: 2.5.1 -> 2.5.2
- libgpg_error: 1.32 -> 1.33
- Ruby: 2.4.4 -> 2.4.5, + 2.5.3
- RubyGems: 2.7.6 -> 3.0.1
Release 6.0.0
-------------
* Introduces support for *all* programming languages. Yes that's right... Java, Elixir, Go — Passenger now supports them all! This effort is called "generic language support".
* Bumps the preferred Nginx version to 1.15.7.
* Introduces anonymous usage telemetry, which helps us improve Passenger. Please read the docs on what data is collected and how to disable this.
* [Nginx] Introduces a new option "passenger_request_buffering on|off", to allow disabling request body buffering. This is only supported in Nginx >= 1.15.3. Closes GH-2121.
* Updated various library versions used in precompiled binaries (used for e.g. gem installs):
- OpenSSL: 1.0.2q (was: 1.0.2p)
- libcurl: 7.62.0 (was: 7.61.1)
- Ruby: 2.3.8 (was: 2.3.7)
Release 5.3.7
-------------
* Fixes package installation issues on Ubuntu 18.04. These issues were caused by an update released by Ubuntu on the nginx-common package. Closes GH-2122, GH-2140.
* Fixes compilation problems and warnings with GCC 8.2. Tested on Alpine Linux edge 2018-11-05. Closes GH-2139.
* Fixes compatibility with libcurl 7.62.0. Contributed by Po-Chuan Hsieh (@sunpoet).
* Changes minimum supported macOS version to 10.11 El Capitan.
* Removes packages for Ubuntu 17.10 Artful.
Release 5.3.6
-------------
* Fixes smart spawning. A regression in 5.3.5 (due to a refactoring) made it so that Passenger only used the direct spawning method. This issue was mostly noticeable in the form of increased process spawning times between 5.3.4 and 5.3.5.
* Fixes Passenger Core and application processes staying on the Watchdog's OOM score (unkillable). Closes GH-2105.
* Fixes "mach_vm_map failed" warnings on macOS >= High Sierra. These warnings were harmless, but annoying. Closes GH-2101.
* Fixes `passenger-config compile-agent` compilation with optimizations. The optimization flags were not properly passed to the compiler.
* Fixes a crash that could occur when HTTP clients send a chunked transfer-encoding body containing a chunk larger than 429496729 bytes.
* Improves detection of the system Apache's include headers on macOS High Sierra and later.
* Fixes RVM gemset detection on RVM 1.29.
* No longer supplies precompiled Ruby extensions for Ruby 1.9.3 and 2.0.0. When running Ruby 1.9.3 and 2.0.0, Passenger will attempt to compile from source instead.
Release 5.3.5
-------------
* Fixes Ubuntu 18.04 package installation problems due to Nginx version mismatch. Closes GH-2122.
* Improves usability of crash reports. Crash reports are no longer dumped in one big chunk to stderr. Instead, they are now dumped into multiple files, making it easy to inspect relevant reports.
* Fixes some crashes that only occur with log level 7.
* Downloads binaries from the newly-introduced Github mirror. This improves the reliability of binary downloads.
* Updated various library versions used in precompiled binaries (used for e.g. gem installs):
- OpenSSL: 1.0.2p (was: 1.0.2o)
- libcurl: 7.61.1 (was: 7.60.0)
Release 5.3.4
-------------------------------
* Fixes a crash during startup on FreeBSD 11.2 and recent OpenBSD versions due to C++11 compatibility issues in the code. Closes GH-2097.
* Updates Boost to version 1.67.0.
* [Apache] Fixes the handling of HTTP requests with chunked bodies in combination with `PassengerBufferUploads off`. Closes GH-2102.
Release 5.3.3
-------------
* [Apache, Nginx] Fixes the passenger-install-*-module scripts. (Regression in 5.3.2) Closes GH-2093.
* [Nginx] Fixed nginx module building on CentOS 6. Closes GH-2081. Thanks to defanator for contributing this.
Release 5.3.2
-------------
This release contains many security updates. Users are advised to upgrade as soon as possible. See our blog for more information on the vulnerabilities.
* [Nginx] Fixes CVE-2018-12029, a local privilege escalation vulnerability in the Nginx module that occurs when `passenger_instance_registry_dir` is configured to a directory with insufficiently strict permissions.
* Fixes CVE-2018-12026, 12027, and 12028. These are local denial of service, local information disclosure and local privilege escalation vulnerabilities that could be exploited by malicious applications or malicious users on the system.
* Updated various library versions used in precompiled binaries (used for e.g. gem installs):
- OpenSSL (Linux only): 1.0.2o (was: 1.0.2k; on macOS it was already 1.0.2o)
- GeoIP: 1.6.12 (was: 1.6.11)
- libcurl: 7.60.0 (was: 7.56.1)
* Fixes Meteor support in non-bundled mode (regression from 5.3.0). Closes GH-2082.
* Fixes the fact that the error page (which is shown when an app fails to spawn) sometimes contains unsufficient analysis details about the app.
* [Apache] Fixes PassengerMaxInstancesPerApp not being respected (regression from config refactor in 5.2.0). Closes GH-2059.
* [Enterprise, Apache] Fixes PassengerMaxInstances not being respected (regression from config refactor in 5.2.0).
* [Enterprise] Fixes passenger-irb being unable to connect to an app process (regression from 5.3.0). Closes GH-2087.
Release 5.3.1
-------------
* Fixes a regression from 5.3.0: a crash that occurs if the user that an application should run under, does not have a shell configured. Closes GH-2078.
* Fixes a regression from 5.3.0: setting supplementary group IDs during user switching. Closes GH-2077.
Release 5.3.0
-------------
* Adds Ubuntu 18.04 "Bionic" packages.
* Removes packages for Debian 7 "Wheezy" (EOL May 2018).
* Vastly improves spawning error page: quick overview of where the problem is, and the option to drill down in extensive troubleshooting information.
* Fuse Panel support: fixes a crash that occurs when you shut down Passenger right after it fails to connect to Fuse Panel.
* [Nginx] Updates the preferred Nginx version to 1.14.0 (from 1.12.2).
* [Apache] Updates the recommended package for apache dev headers on debian >= 9.4. Closes GH-2048.
* [Enterprise] Fix licensing proxy warning to refer to licensing_proxy_url instead of licensing_proxy.
* [Enterprise] Add new `PassengerAppLogFile` (Apache) / `passenger_app_log_file` (Nginx) config option to specify a file for app-specific logs. Closes GH-1279.
Release 5.2.3
-------------
* Fuse Panel support: fixes a few bugs with handling small log files and with apps that don't output any messages.
* Python app support: fixes a Python 3 compatibility issue w.r.t. writing data over the socket.
* macOS support: fixes a crash in the `passenger-config compile-nginx-engine` command which only occurs on macOS >= 10.13. This crash was caused by a missing `require` call in our code, and affects users who compile Passenger from source, e.g. users of the Passenger Enterprise Homebrew formula.
* Fixes a small memory corruption issue (dangling pointer) in the ApplicationPool subsystem.
* Improves support for the $TMPDIR environment variable by removing leftover hardcoded references to /tmp. Closes GH-2052.
* Updated PCRE version to 8.42 (was: 8.41) across the board.
Release 5.2.2
-------------
* Adds an option for dumping the web server config manifest to a given file: `PassengerDumpConfigManifest` (Apache) / `passenger_dump_config_manifest` (Nginx). This option is mostly useful for Passenger developers.
* [Nginx] Fixes support for configurations that have two `passenger_base_uri` options in a single virtual host, without corresponding `passenger_app_group_name` and `passenger_app_root` directives. Closes GH-2043.
* [Enterprise] Improved support for RAM-based pricing on Heroku (now using officially recommended memory limit reporting via CGROUP).
* (added in CHANGELOG after release) Four new options to connect to the new Fuse Panel: admin_panel_url, admin_panel_auth_type, admin_panel_username, admin_panel_password
* (added in CHANGELOG after release) Updated OpenSSL version used in precompiled binaries (used for e.g. gem installs) to 1.0.2o (was: 1.0.2m).
Release 5.2.1
-------------
* Fixes a regression from 5.1.11 that prevented Passenger from compiling on FreeBSD in some cases. Closes GH-2031.
* Fixes a bounds issue in printing an error message that could occur in some cases when spawning a child process fails. Issue was present from 5.1.11.
* Fixes a regression from 5.2.0 which prevented setting the max pool idle time to 0. Closes GH-2020.
* Warns if using an incompatible compiler on macOS < 10.13. Closes GH-2017.
* No longer uses Security Framework on macOS 10.13+. This will prevent further keychain warnings from appropriately compiled Passengers.
* Fixes warning on macOS about /proc/self access (excluded some code that was intended only for Linux).
* `passenger-install-nginx-module` now downloads the preferred Nginx version via https. Thanks to smiba for pointing this out.
* [Apache] Fixes a regression from 5.2.0 that caused a crash on startup when no top-level ServerName is set. Closes GH-2029.
* [Enterprise] Adds support for using RAM-based pricing on Heroku.
Release 5.2.0
-------------
* [Apache] Breaking change: to avoid configuration ambiguity, options that act on a per-process level (rather than per-request level) can no longer be used in .htaccess. See the Passenger Library -> configuration -> intro for more info (https://www.phusionpassenger.com/library/config/apache/intro.html#global-per-application-and-per-request-options).
* [Apache] Breaking change: the option PassengerResolveSymlinksInDocumentRoot has been removed (old Passenger 2 compatibility option, see PassengerAppRoot for new method).
* [Apache] Option handling has been refactored to avoid silent conflicts and errors: warnings are now generated for global config options in <VirtualHost> (they conflict between VHosts) and per-application options in <Files>, <FilesMatch> and <If> (silently failed before).
* [Apache] Fixes compilation issues on some systems with macOS 10.13 High Sierra (in addition to the fixes from 5.1.11).
* [Enterprise] Fixes two unnecessary warnings about failure to contact the licensing server, one occurring since version 5.1.8 ("3 days out of contact"), the other since 5.1.11 + Apache ("failure to contact").
* [Nginx] Fixes the default for the `passenger_app_group_name` to start with the `passenger_app_root` rather than the document root (the end remains the same: `passenger_app_env`).
* [Standalone] Adds command line support for `start_timeout` in Passenger Standalone (also removes unnecessary warning when using it in `Passengerfile.json`).
* [Standalone, Nginx] Waits for Nginx to exit before cleaning up temp dir (started happening more since the switch to Nginx graceful shutdown in 5.1.6). Closes GH-1970.
* Deprecated options for Union Station.
* Ruby 2.5 compatibility: handle case where an exception's backtrace may be nil. Closes GH-2011.
* Adds JSON mime type for static file serving. Closes GH-2018.
* Removes packages for Ubuntu 17.04 "Zesty" (EOL 13-jan-2018).
Release 5.1.12
--------------
* Changes the Debian/Ubuntu install script to completely restart Apache upon upgrade. This prevents issues due to a "half upgraded" state (old Passenger Apache module + new Passenger core). Closes GH-2000.
* Adds Ubuntu 17.10 "Artful" packages.
* Fixes a case in which -- when Passenger is configured with user switching turned off -- it is unable to open the web server log file and aborts during startup. This regression was introduced in 5.1.8. Closes GH-1990.
* [Nginx] The preferred Nginx version is now 1.12.2
* [Nginx] The preferred PCRE version is now 8.41 (previously 8.39).
* [Standalone] Adds support for using `start_timeout` in Passengerfile.json.
* [Enterprise] Uses libuv to detect total system RAM, allows for compilation on pre-10.11 macOS.
* [Enterprise] Added a max request queue time option, to limit time requests spend in the request queue. Closes GH-1688.
* Updated libcurl version used in precompiled binaries (used for e.g. gem installs) to 7.56.1 (was: 7.54.1).
* Updated OpenSSL version used in precompiled binaries (used for e.g. gem installs) to 1.0.2m (was: 1.0.2l).
* Updated PCRE version used in precompiled binaries (used for e.g. gem installs) to 8.41 (was: 8.40).
* Updated Ruby versions used in precompiled binaries (used for e.g. gem installs) to include 2.1.10, 2.2.8, 2.3.5, and 2.4.2 (removed: 2.1.9, 2.2.7, 2.3.4, and 2.4.1).
Release 5.1.11
--------------
* [Apache] Fixes a race condition (segfault) on startup, which primarily affected macOS hosts (regression in 5.1.8 due to the logging improvements). Closes GH-1973.
* [Apache] Fixes compilation on macOS 10.13 High Sierra.
* [Nginx] It is now allowed to specify `passenger_enabled` in the `http` context as well.
* [Nginx] Namespaced Jsoncpp under the Passenger namespace to avoid collisions with Google Pagespeed's copy when linked into Nginx.
* [Standalone] Enables HTTP/2 support in the Nginx template. Support is only active if SSL is used, to avoid potential issues with HTTP/2 on HTTP ports. Closes GH-1945.
* [Enterprise, Standalone] Adds a new feature that is especially useful on Heroku: deferred port binding. When `--defer-port-binding` is set, Passenger does not listen on the given port until the application has finished spawning. If the application starts slowly then this mechanism can prevent the Heroku request timeout from killing the dyno (the boot timeout still applies).
* [Enterprise, Standalone] Fixes duplicate warnings when Passengerfile.json contains errors.
* [Standalone] `passenger start` now accepts the `--start-timeout` configuration option.
* Adds support for Bundler 2.0's new `gems.rb` and `gems.locked`. Learn more about these in [Gemfile's new clothes](https://depfu.com/blog/2017/09/06/gemfiles-new-clothes). Closes GH-1982.
* Removes Debian packages for Ubuntu 12.04 Precise.
* Fixes compilation warnings on macOS + Clang 9.0.
* Introduces a new check that logs a vulnerability warning if Passenger is run with root permissions while the directory permissions of (parts of) its root dir allow modifications by non-root users.
* Fixes an arbitrary file read vulnerability (if Passenger is running as root and the attacker has access to a user account that hosts an application).
Release 5.1.10
--------------
* This was an Enterprise-only hotfix release (no changes in Passenger Open Source).
Release 5.1.9
-------------
* This was an Enterprise-only hotfix release (no changes in Passenger Open Source).
Release 5.1.8
-------------
* Introduces a shorter and more informative log format. The new format significantly shortens the thread ID, and includes the message's log level (critical, error, warning, notice, etc) so that users can more easily filter out uninteresting messages.
* [Nginx] The Phusion Nginx APT package is upgraded to Nginx version 1.12.1 (previously pinned at 1.10.3 while waiting for a compatible lua module release).
* [Standalone] Automatically uses Nginx to serves static asset URLs that conform to the [webpacker](https://github.com/rails/webpacker) gem's format. Closes GH-1966.
* [Standalone] If configured to listen on a Unix domain socket, properly cleans up this socket on Nginx shutdown. Fixes a regression from 5.1.6. Closes GH-1969.
* [Standalone] Fixes the `--max-requests` option when using the builtin engine. Fixes a regression from 5.1.4.
* [Enterprise] Fixes a potential use-after-free bug when reporting usage data to the Phusion licensing server. This bug only occurs when Passenger Enterprise is running inside a container.
Release 5.1.7
-------------
* Fixes compilation problems on some systems.
* Upgrades the JSON parser (json-cpp) to version 1.8.1. This makes parsing slightly faster, adds various security checks and fixes some JSON generation issues.
* [Enterprise] Fixes an SSL certificate issue in the license usage data reporter, which only occurs when Passenger Enterprise installed from gem or tarball. The license usage data reporter now searches for the correct system CA path.
* [Enterprise] Fixes a potential use-after-free bug when reporting usage data to the Phusion licensing server, and improves reliability of usage data recording.
Release 5.1.6
-------------
* Fixes a typo that causes a looping crash when long security update information is sent by the server. In practice we will keep the messages shorter to avoid triggering this until there has been ample time to upgrade.
* Fixes unnecessary process respawn if it was detached and min_instances is set to 0. Closes GH-1735.
* Introduces APT packages for Debian 9 "Stretch", with Passenger built as dynamic module. Closes GH-1960.
* Changes APT packages for Ubuntu 17.04 "Zesty" from static to dynamic module.
* [Standalone] Now uses graceful shutdown for the Nginx engine under the hood (requested as part of GH-1598). Thanks to PikachuEXE for contributing this.
* [Standalone] Fixes a memory corruption issue in the builtin engine. The issue was introduced in 5.1.5 (settings handling refactoring).
* [Standalone] Cleanup the temp dir before aborting when startup cannot continue, e.g. when Passenger is already running. Closes GH-1953.
* Fixes WSGI crash with Python 3 and non-ASCII characters in headers or the URL. Closes GH-1935. Thanks to n4nn31355 for the assistance.
* [Nginx] The preferred Nginx version is now 1.12.1 (previously 1.10.3), except for the Phusion Nginx APT package, which is pinned at 1.10.3 until an 1.12.x compatible lua module becomes available.
* [Nginx] Fixes CVE-2017-7529, an integer overflow vulnerability in the Nginx range filter module. This is accomplished by upgrading to Nginx 1.12.1, or applying the patch (Phusion Nginx APT package).
* Updated libcurl version used in precompiled binaries (used for e.g. gem installs) to 7.54.1 (was: 7.54.0).
* Updated OpenSSL version used in precompiled binaries (used for e.g. gem installs) to 1.0.2l (was: 1.0.2k).
* Updated GeoIP version used in precompiled binaries (used for e.g. gem installs) to 1.6.11 (was: 1.6.9).
* Updated PCRE version used in precompiled binaries (used for e.g. gem installs) to 8.40 (was: 8.39).
* Adds support for building with MacPorts' OpenSSL. Closes GH-1959.
Release 5.1.5
-------------
* Updated Boost to version 1.64.0, which fixed a compilation issue on certain Gentoo based setups. Closes GH-1942.
* Improved the error message shown when an app fails to start in time.
* [Apache] Remove option to configure PassengerAppGroupName from .htaccess because, assuming AllowOverride Options is set, malicious users (having an account on the same server) can sometimes collide app group names of other users and capture their traffic.
* Major internal refactoring of settings handling, to prepare for supporting settings changes without restart.
Release 5.1.4
-------------
* Updated zlib version used in building precompiled binaries (used for e.g. gem installs) to 1.2.11 (was: 1.2.8).
* Updated openssl version used in building precompiled binaries (used for e.g. gem installs) to 1.0.2k (was: 1.0.2j).
* Updated curl version used in building precompiled binaries (used for e.g. gem installs) to 7.54.0 (was: 7.51.0).
* Added support for rbenv when building precompiled binaries (passenger_binary_build_automation submodule).
* Fixes issue when building precompiled binaries (used for e.g. gem installs) found in release 5.1.3.
* Added Ruby 2.4.1 precompiled native extension.
Release 5.1.3
-------------
* [Standalone] Fixes `install-standalone-runtime` command after regression in 5.1.2.
* Removes unnecessary logging of "No Error" from macOS Security Update Checker.
* Adds support for compiling against the built-in Apache installation supplied with macOS 10.12 Sierra. Previous versions of Passenger failed because macOS Sierra's Apache installation is incomplete and does not supply the apr-config tool. We now work around this by using hardcoded default values for macOS.
* Don't output colorized text during dependency check when output isn't a TTY, unless forced. Closes GH-1902.
* [Nginx] The preferred Nginx version is now 1.10.3 (previously 1.10.2).
* Adds Ubuntu 17.04 "Zesty" packages.
* [Enterprise] Fixes `send-cloud-usage` command when Passenger is installed from gem.
* [Enterprise] Improves robustness of machine properties reporting for pay-as-you-go cloud-license holders.
* [Enterprise] Adds support for reporting available RAM, and CONTAINER_HOST_IDENTIFIER envvar, to support RAM-based pricing model.
* Added additional debug level logging for troubleshooting issues with bash scripts. Closes GH-1928.
* Revert private keychain use in the Security Update Checker when run as root on macOS, in order to avoid changing the default System Keychain. Closes GH-1922. Remove Cert and Key from keychain separately, to avoid errors when clearing the client certificate.
* Fix missing openssl check in `passenger-install-apache2-module` dependency checker. Closes GH-1934.
Release 5.1.2
-------------
* Improve curl check for passenger-install- scripts to catch (very old) curl versions that won't compile against 5.1+.
* Fixes remaining false positives (logging) from the new Meteor cluster warning system. Closes GH-1905.
* Create a private keychain on macOS when the system keychain is defaulted to, this avoids a permissions issue with the system keychain when performing the Security Update Check. This is necessary because the system keychain is the default keychain of daemon users and root on macOS.
* Improve `passenger-memory-stats` to include JRuby processes that fail to rename as expected. Closes GH-1878.
* [Standalone] Don't download or compile Nginx when using the builtin engine. Closes GH-1910.
* [Standalone] Fixes `--nginx-tarball` option of `passenger start` and `passenger-config install-standalone-runtime` (wasn't working). Also verifies that `--nginx-version` is explicitly specified as it should be.
Release 5.1.1
-------------
* The precompiled version of the PassengerAgent binary (used for e.g. gem installs) now configures (statically linked) libcurl with system keystore, so that the new security update check can successfully validate certs.
* Fixes some false positives (logging) from the new Node and Meteor cluster warning system. Logging is less repetitive and has extra debug info. Closes GH-1905.
* Updates the upload-progress module in the Nginx Debian package. The module version that we linked against in 5.1.0 was 0.9.2, but due to a bug in that version the module didn't work.
* The security update check now reports whether libcurl + SSL backend are statically linked to Passenger, in which case the check also needs to warn about relevant OpenSSL vulnerabilities in the linked library.
* Increases the allowed line lengths emitted by apps at startup.
* Adds support for the unary 'not' operator in the Union Station filter language.
* [Enterprise] Add missing flying-passenger integration mode to security update check.
* Fixes support for Rails 5.0.1 Action Cable. Specifically, we now support the `options` argument in the `write_nonblock` method in hijacked Rack IO sockets.
* [Apache] Introduces a small delay to prevent running the Security Update Checker twice at startup.
Release 5.1.0
--------------
* Upgrades union_station_hooks_core to version 2.1.2.
* [Enterprise] When running a Rails app in multithreaded mode, Passenger Enterprise automatically tags Rails logs with the current thread number. This makes it possible to distinguish logs generated by different threads.
* Fixes permissions issue on Linux when setting OOM score after lowering privileges. Closes GH-1858.
* [Standalone] Allows raw json envvars in Passengerfile.json. Closes GH-1837.
* [Standalone] Make the `max_requests` option available on the command line as well.
* Fixes unaligned memory access in base64 decoder on platforms that have strict aliasing requirements (non x86/x86_64). Closes GH-1646.
* Introduces daily Passenger security update check to warn (error log) if there are newer Passenger versions with important security fixes (describing what was discovered, what is affected, which version has the fix).
* Fixes compilation on Linux when a non-glibc C library is in use. Closes GH-1870.
* `passenger-install-nginx-module` and the standalone compiler now add the http v2, realip and addition module flags for Nginx (just like the APT/RPM/autobuilder already had). Closes GH-1788.
* [Apache] Fixes PassengerShowVersionInHeader option. Thanks to Sebastian Welther for contributing this.
* Passenger now reports when you try to use Node.js or Meteor clustering, and tries to continue with just a nonfunctional shim in place, so that if your code uses the clustering APIs your app may still work.
* Updates libev config.sub and config.guess to support newer platforms such as the IBM power 8.
* Fixes an issue where passenger-config couldn't restart an app if the TMPDIR variable was set to /tmp
* `passenger-install-apache-module` now suggests the correct apache package on Ubuntu Xenial. Closes GH-1884.
* [Standalone] The TempDirToucher will now spend most of its time with reduced privileges, except when it's actively touching files. This allows it to be killed when Passenger is quit in most circumstances. Closes GH-1678.
* Fixes a file overwrite vulnerability (CVE-2016-10345) caused by a predictable temporary file being written by `passenger-install-nginx-module`. Thanks to Jeremy Evans for reporting this.
* [Standalone] Fixes starting Passenger as a non-extant user. Closes GH-1849.
* Improved look of the error pages for failing to spawn an application (development & production mode), and Error ID is now also shown in production mode.
* [Standalone] Enable ipv6 support by default in builtin nginx. Closes GH-1873.
* [Nginx] Updates to APT package builder (Debian & Ubuntu) with fix for www-data to root privilege escalation via log file handling (CVE-2016-1247/USN-3114-1).
* [Nginx] Updates to RPM package builder (CentOS & RHEL) with fix for 1.10.x system nginx package overriding the nginx from the Passenger repo. Closes GH-1895.
* [Nginx] The preferred Nginx version is now 1.10.2 (previously 1.10.1).
* RPM pkg builder fix for breaking SELinux change in RHEL 7.3.
* RPM pkg builder fix for RHEL6/CentOS6 incompatibility and replacement in Passenger.
* Adds Ubuntu 16.10 "Yakkety" packages.
Release 5.0.30
--------------
* Changes mbuf block size from 512 to 4096 bytes to better fit modern requests and significantly speed up disk buffering.
* [Nginx] Fixes PCRE checksum after the preferred version update in 5.0.29 (contributed by: clemensg).
* [Apache] Fixes buffer limit crash on large file upload (when core disk buffer can't keep up with client for some time), and limits per-client buffer memory usage to 130 KB. Closes GH-1620.
* Fixes potential hang when an UnseekableSocket gets serialized to json. Closes GH-1838.
Release 5.0.29
--------------
* Fixes the FreeBSD build breaking due to the `-ldl` flag introduced by the LVE integration patch (5.0.28). Closes GH-1805.
* Fixes per-application interpreter override (ruby, node, python) being ignored in mass deployment mode. Closes GH-1818.
* Fixes incomplete refactor from 5.0.27 that could, under specific conditions, lead to a Passenger crash. Closes GH-1794.
* [Apache] Remove unused code that caused a crash in configurations with thousands of VirtualHost entries. Closes GH-1676.
* [Nginx] Fixes use of invalid logfile name (memory already released) in backup log redirection code. Possibly related to GH-1774.
* [Nginx] The preferred Nginx version is now 1.10.1 (previously 1.10.0).
* [Nginx] The preferred PCRE version is now 8.39 (previously 8.34).
* [Standalone] Passenger Standalone now supports /dev/stdout and /dev/stderr as log file path (via `--log-file` or Passengerfile.json). This is especially useful in Docker containers. In previous versions logging to those paths did not work, resulting in nothing getting logged at all.
* Adds Ubuntu 16.04 "Xenial" packages, deprecates Ubuntu 15.10 “Wily” packages (in accordance with LTS support policy).
Release 5.0.28
--------------
* Finalizes the fix (5.0.26) for the `rails server` command integration to prevent "missing on_event" errors. Closes GH-1768.
* Fixes missing -fPIC in Nginx dynamic module compilation (5.0.26) on Linux (rewrite of a patch by Andrei Belov). Closes GH-1793.
* Fixes memory leak that could occur whenever more than 1024 concurrent requests are handled (more likely since the higher concurrency support options from 5.0.24). Closes GH-1797.
* Integrates with CloudLinux LVE and CageFS (security checks and a new option PassengerLveMinUid). Thanks to Oleksiy Shchukin from CloudLinux Inc. for contributing this.
* Fixes the Nginx build when the PCRE library is not available (such as when compiling with `--without-http_rewrite_module`). Closes GH-1796.
* Extends `passenger-memory-stats` filter to show the instance dir toucher too (as well as the core in valgrind debug runs).
* Changes the default for friendly error pages to "off" unless the environment is set to "development", rather than "on" unless "staging" or "production". Closes GH-1782.
* [Nginx] The preferred Nginx version is now 1.10.0 (previously 1.8.1).
Release 5.0.27
--------------
* Fixes encoding issue for Ruby apps that resulted in a 0-byte response body. This occurred when the Ruby native support lib was not used and the app outputted an encoding that doesn't mix with UTF-8 (like UTF-16). Closes GH-1763.
* Fixes Passenger Core and application processes staying on the Watchdogs OOM score (unkillable) when user switching is set to off. Closes GH-1631.
* Supports Debian GNU/kFreeBSD build. Based on contribution by stevenc99.
* Switches a number of places in the Passenger Core over to using the monotonic clock instead of the wallclock for robustness against clock time-stepping.
* Slightly improves out-of-memory detection in some subroutines.
* Fixes incomplete libuv upgrade: some build files were not autoregenerated during the upgrade from 1.5.0 to 1.8.0 in the previous release.
* Warnings about 502 responses that are caused by applications aborting their output while the client is no longer connected (e.g. due to half-close event, reported since 5.0.26) are now reduced to debug level.
* Fixes automatic compilation of Ruby's native_support library in case Passenger was installed through Debian or RPM packages. Closes GH-1778.
* Fixes memory leak when buffering large request/response bodies to disk (which happens as soon as the 100 KB memory buffer is full).
* Fixes crash if an application spawn fails and a non-UTF8 character appears in the spawn output. Closes GH-1601.
* Updates the `rails server` command integration (from 5.0.25) to prevent "missing on_event" errors. Closes GH-1768. Update: not all required code made it to the release, the final fix is delivered in 5.0.28.
* [Union Station] Fixes a crash that occurs if all of the following conditions are met: 1) Union Station support is enabled, 2) the client sent at least one header containing the empty string, 3) the application responds with a 4xx or 5xx status. Closes GH-1776.
Release 5.0.26
--------------
* `passenger-status --show=server` now reports the speed at which new requests are accepted.
* `passenger-status --show=server` now reports `last_data_send_time` and `last_data_receive_time` which can be used to troubleshoot long-running requests (for example, to see if a websocket heartbeat is stuck).
* Passenger now reports TCP half-closing events to Node.js and Meteor applications, which allows them to detect request body and WebSocket closes without having to send data to the client.
* Fixes outputting Content-Length and Transfer-Encoding headers on HEAD requests for Ruby apps. These headers were omitted in previous versions on HEAD requests.
* Bumps the default socket backlog size from 1024 to 2048.
* Upgrades libuv to version 1.8.0.
* When using our RPM packages, system SELinux policy upgrades no longer break the Passenger SELinux policy. Closes GH-1663.
* [Apache] Fixes compilation against Apache installations which include `-pie` in CFLAGS. Closes GH-1756.
* [Nginx, Standalone] Bumps default Nginx worker_connections from 1024 to 4096 (effectively 2048 because of internal reverse proxy)
* [Nginx, Standalone] Introduces the option `core_file_descriptor_ulimit` and `app_file_descriptor_ulimit`, for setting the file descriptor ulimits of the Passenger core and the application, respectively.
* [Nginx] Passenger can now be [compiled as an Nginx dynamic module](https://www.phusionpassenger.com/library/install/nginx/install_as_nginx_module.html#dynamic-module). Thanks to Ruslan Ermilov from NGINX Inc for contributing this.
* [Standalone] Prints a warning when an unsupported configuration option in Passengerfile.json is set.
* [Standalone] Fixes "address already in use" errors when using the builtin engine.
* [Enterprise] The rolling restart feature now waits until the old process is completely gone (drained its request queue, process exited) before proceeding with rolling restarting the next process. This results in friendlier resource usage during rolling restart.
* [Union Station] Fixes custom logging time arguments getting overwritten by current time for Ruby apps (so some sub-blocks like "framework request processing" appeared shorter than they were). This could happen since the switch to monotonic clock in 5.0.22.
Release 5.0.25
--------------
* Integrates into the `rails server` command. Please learn more at [the Passenger + Rails integration documentation](https://www.phusionpassenger.com/library/dev/ruby/rails_integration.html).
* Adds explicit support for Action Cable. Please learn more at the [Passenger Library](https://www.phusionpassenger.com/library/dev/ruby/rails_integration.html#action_cable).
* Removes packages for Ubuntu 15.04 Vivid and Debian 6. Ubuntu 15.04 and Debian 6 are still supported, we just don't supply packages for them anymore. If you are an Ubuntu 15.04 or Debian 6 user and you want to use Passenger >= 5.0.25, then please upgrade your distribution, or install Passenger from RubyGems/tarball.
* Fixes a potential crash due to memory corruption in code for `passenger-config reopen-logs`.
* Fixes a potential crash in the large (inbound/outbound) file buffering code.
* Fixes a crash that occurs when using Nginx + HTTPS + Sub-requests. Closes GH-1724.
* Fixes a crash that occurs when using Nginx + syslog and a logfile for Passenger. Also fixes edge cases where the Nginx logpath would override the Passenger logpath. Closes GH-1514 (again).
* [Union Station] Fixes a potential crash due to a wrong limit on snprintf (introduced in 5.0.24 by GH-1633). Closes GH-1744.
* [Union Station] Fixes Union Station Node.js request introspection to allow for application.use method chaining. Closes GH-1745.
* [Union Station] Fixes information about sinks sometimes missing from `passenger-status --show=union_station`.
* [Union Station] When one or more Union Station gateways are suffering from technical difficulties, the Union Station support code now tries more quickly to reestablish the connection.
* [Standalone] Don't reject the value 0 (meaning no limit) for `--max-request-queue-size`. Closes GH-1743.
* [Standalone] Makes the `--address` option work more reliably if the passed hostname may resolve to multiple addresses. For example, if you pass `--address localhost` then previous versions could fail because Passenger thinks it's an IPv6 address (::1) while Nginx thinks it's an IPv4 address (127.0.0.1). Hostname resolution is now done in a consistent manner.
* [Standalone] Adds the `--unlimited-concurrency-path` configuration option.
* [Standalone] Adds IPv6 support to the builtin engine.
Release 5.0.24
--------------
* Fixes a crash when the new `force_max_concurrent_requests_per_process` option (5.0.22) was used for non-Node.js apps (e.g. Ruby). Closes GH-1720.
* Fixes Solaris compilation. This was a regression due to the patch for GH-1643 in 5.0.22. Closes GH-1694, GH-1701.
* Logs for [Union Station](https://www.unionstationapp.com) provide more information about request queueing. Closes GH-1633.
* Also log HTTP headers to Union Station for HTTP 4xx responses (extends the header logging for HTTP 5xx that was added in 5.0.22)
* Fixes cases where compilation failure of (optional) native utils was not reported.
* On Ruby, no longer traps SIGEXIT. This fixes erroneously setting `$ERROR_INFO` in `at_exit` callbacks. Closes GH-1730.
* Fixes a wrong loop exit condition that could cause a deadlock with 100% CPU usage by Passenger core. Closes GH-1709, GH-1732.
* Adds `socket_backlog` option to configure the Passenger Core socket backlog. For use with e.g. "Resource temporarily unavailable while connecting to upstream" errors. Closes GH-1726.
* [Nginx] The preferred Nginx version is now 1.8.1 (previously 1.8.0).
* [Standalone] Fixes the default value of the `load_shell_envvars` option. It's supposed to be disabled by default, but due to a typo it was enabled by default.
Release 5.0.23
--------------
* Fixes the request acceptor error handling timeout. When an error occurs while Passenger is accepting a request (for example, when Passenger has run out of file descriptors), Passenger is supposed to wait for 3 seconds before trying again. Because of a typo, Passenger actually waited 3 milliseconds.
* [Enterprise] Fixed a regression in the Passenger Standalone Nginx config template that breaks the Mass Deployment feature.
* The mime type for serving static XHTML files is updated. We no longer use the mobile profile, so it is recognized by desktop browsers. Closes GH-1695.
* Improves error messages about Ruby native support to indicate the optional nature. Passenger is able to operate even without the native support extension, but that wasn't clear enough to some users, causing them to think of the old messages as errors.
* [Standalone, Nginx] When using the new `abort_websockets_on_process_shutdown` configuration option, Passenger waited for the app to close without signaling it that shutdown was in progress. Node.js apps now get a SIGINT. Closes GH-1702.
* With friendly error pages off Passenger would still show a trace (referencing only Passenger code) for unusual spawn errors. This has been changed to a generic error message. Closes GH-1704.
Release 5.0.22
--------------
* Fixes a header collision vulnerability (CVE-2015-7519, medium severity). Note that this fix involves filtering request headers containing underscores. Please see our blog for detailed vulnerability description and advisory. Thanks to the SUSE security team for reporting this issue.
* [Apache] Fixes compatibility with Apache 2.4.17's mod_autoindex. Fix contributed by Eric Covener. Closes GH-1642.
* [Standalone] Passenger Standalone now [accepts configuration options from environment variables](https://www.phusionpassenger.com/library/config/standalone/intro.html). This makes using Passenger Standalone significantly easier on Heroku or on systems that follow the 12-factor principle. Closes GH-1661.
* [Standalone] The Nginx configuration template has been cleaned up. It is now significantly easier to edit the Nginx configuration template without breaking compatibility with future versions.
* [Standalone] The `passenger start` command now performs a sanity check on the internally generated Nginx configuration file and advises you accordingly when there is a problem.
* [Standalone] The `passenger status` and `passenger stop` commands now respect Passengerfile.json. Closes GH-1593.
* [Standalone] Passenger Standalone on Solaris now properly tails the application log file.
* [Standalone] Fixes a problem with Passenger Standalone's builtin engine exiting at startup when run on Solaris.
* [Standalone] `passenger start` now accepts the `--envvar` command line option for passing environment variables to the application.
* [Standalone] `passenger start` now accepts the `--memory-limit` configuration option.
* [Standalone] `passenger start` now accepts the `--max-request-queue-size` configuration option.
* [Standalone] `passenger start` now accepts the `--debug-nginx-config` configuration option. This option allows you to view the Nginx configuration file that Passenger Standalone generates internally.
* [Standalone, Nginx] Introduces a new configuration option: `abort_websockets_on_process_shutdown`. By default, when Passenger shuts down or restarts an application process, it will abort associated Websocket connections. This option allows you to disable that behavior. Closes GH-1686.
* Introduces a new configuration option: `force_max_concurrent_requests_per_process`. This option is mostly useful for making dynamic process scaling work in Node.js and Meteor apps.
* Various administration tools, such as `passenger-status`, no longer raise an flock EBADF error on Solaris. Closes GH-1643.
* The `passenger-config reopen-logs` command, when used in combination with Passenger Standalone and the Nginx engine, now also instructs Nginx to reopen its log files. Closes GH-1674.
* Fixes Passenger erroneously adding a `Content-Length` or `Transfer-Encoding` header to Ruby HTTP 204 No Content responses. Closes GH-1595.
* Fixes Union Station logging of Rack response body actions.
* The `passenger-config restart-app` command, when given `--ignore-app-not-running`, now properly exits with a zero status when one or more applications are running, but none of them belonging to the invoking user. Closes GH-1655.
* The `passenger-config validate-install` command no longer prints false warnings about duplicate Passenger installs on systems that use RBenv. Closes GH-1627.
* Fixes race conditions in the automatic building of the Ruby native support extension. Closes GH-1570.
* [Enterprise] Fixes compatibility with byebug 7.0. Closes GH-1662.
* Support Union Station logging for Node.js applications, with Express/MongoDB automatically supported.
* The Ruby Union Station hooks no longer abort with a fatal error when the application does not call the Union Station initializer method during startup. The error is now only logged.
* In case of an error response (HTTP 5xx), Union Station logging will also contain request headers.
* The Union Station hooks are now more resilient against environment variable problems.
Release 5.0.21
--------------
* Properly handles Ruby applications that output the `Content-Length` and `Transfer-Encoding` headers in non-standard casing, e.g. `Content-length`. Closes GH-1517.
* Fixes Ruby application loading incompatibilities caused by the use of absolute paths. Closes GH-1596.
* Fixes OpenSSL detection problems on OS X 10.11 El Capitan. OS X 10.11 no longer includes OpenSSL headers, so Passenger will suggest and use OpenSSL from Homebrew. Closes GH-1630.
* Introduces the [secure HTTP headers](https://www.phusionpassenger.com/library/indepth/meteor/secure_http_headers.html) feature for Node.js and Meteor apps. This mechanism allows Passenger to send per-request information to the application, while guaranteeing that this information is not spoofed by the client.
* Per-request Apache environment variables are now passed to Node.js and Meteor apps through the [`!~Passenger-Envvars`](https://www.phusionpassenger.com/library/indepth/nodejs/apache_per_request_envvars.html) secure header.
* Fixes some unintentional caching of request-specific environment variables. Closes GH-1479.
* For Node.js applications, Passenger now calls `process.emit('message', 'shutdown')` whenever Passenger shuts down an application process. This is the same hook as used by PM2, allowing applications which use the PM2 graceful shutdown mechanism to be run on Passenger without changes.
* [Enterprise] Fixes a bug in passenger-irb where printing strings larger than 64 KB would cause it to crash.
* [Enterprise] Fixes the `passenger-config restart-app` command so that it performs a non-rolling-restart unless `--rolling-restart` is given as command line option, as per the documentation. Previously, `passenger-config restart-app` without `--rolling-restart` would perform a rolling restart if rolling restarts are configured in the configuration file, but this contradicted documented behavior. Closes GH-1634.
Release 5.0.20
--------------
* Fixes memory management bugs in Union Station support.
* Improves the error handling in Union Station support.
* `passenger-config validate-install` now properly handles CR characters in Apache configuration files.
Release 5.0.19
--------------
* Fixes an encoding crash in `passenger-memory-stats` on OS X in case one or more processes are running on the system with names containing UTF-8 characters. Closes GH-1603.
* [Ruby] Fixes handling of HTTP 205 responses, which would cause client connections to freeze.
* Improves Union Station data collection: more Rack I/O events are now logged. The time taken to write out and to close the Rack response body are now logged.
* Improves Union Station data sending: errors are now logged more clearly, and DNS errors are now handled more robustly.
* Improves Union Station troubleshooting: errors can now be diagnosed by running `passenger-status --show=union_station`.
* Refactors the Union Station Ruby hook code. They have been extracted to external gems. However, they are still bundled with Passenger for ease of use.
Release 5.0.18
--------------
* Fixes more memory corruption issues in the palloc subsystem.
* Fixes memory corruption issues in the Passenger core that may occur if the application sets many response headers. The issue was caused by an off-by-one bug.
Release 5.0.17
--------------
* Adds packages for Ubuntu 15.10 "Wily", even though Ubuntu 15.10 hasn't been released yet.
* Fixes some memory corruption issues in the palloc subsystem. Closes GH-1587.
* Fixes the Node.js `PhusionPassenger.on('exit')` event. This event worked if you restart the app or detach an application process, but not if you stop Passenger.
* Fixes support for `passenger_pre_start` URLs that contain very long authentication strings. This was caused by the fact that our Base64 encoder generated unexpected newlines.
* [Standalone] Improves application prestarting. Application prestarting is now available in combination with the 'builtin' engine, and now works when SSL is used.
Release 5.0.16
--------------
* Allows independent configuration of Union Station gateway address, port and certificate. Closes GH-1543.
* Supports seek() such that body.rewind works when using Rack middleware that uses Zlib::GzipReader (e.g. for compressed requests). Closes GH-1553.
* [Apache] Improves detection of Apache configuration file problems. Closes GH-1577.
* [Enterprise] Fixes installation of the Passenger Enterprise Apache module on Debian Testing.
* Fixes logging of HTTP response code for Union Station. This regression was introduced by Passenger 5. Closes GH-1581.
* Adds a new subcommand `passenger-config about support-binaries-dir`.
* Fixes a regression in the Node.js loader with regard to custom startup files. This bug was introduced in 5.0.14. Closes GH-1557 (again).
* Fixes a crash when a Ruby application is accessed through a sub-URI and a root virtual host at the same time.
Release 5.0.15
--------------
* Support SHA256 digests for the Rails asset pipeline, as used by Sprockets 3.x.
* Support for JRuby 9.0.0.0. Closes GH-1562.
* Fixes some bugs in Union Station support, which causes some data (such as controller information and exceptions) to not be logged.
* The old Users Guides have been deprecated in favor of the [Passenger Library](https://www.phusionpassenger.com/library/). The Users Guides now redirect to appropriate sections in the Passenger Library.
Release 5.0.14
--------------
* [Standalone] Relative path handling has been improved. In previous versions, relative paths were not handled in a consistent manner. Relative paths are now handled consistently according to the following rules:
- If a relative path is given via a command line option, then it is relative to the current working directory.
- If a relative path is given via Passengerfile.json, then it is relative to Passengerfile.json.
Closes GH-1557.
* [Standalone] The `--disable-turbocaching` now works with the Nginx engine.
Release 5.0.13
--------------
* The `passenger-config restart-app` command now supports the option `--ignore-passenger-not-running`. If this option is given, the command will exit normally instead of exiting with an error, if Passenger is not running. This option is useful in deployments involving Passenger Standalone. In an initial deployment, Passenger Standalone may not yet be running. Passing this option allows you to ignore that issue.
* SELinux policy issues in the RPMs have been fixed.
* [Apache] `passenger-config reopen-logs` didn't work on Apache unless you explicitly set `PassengerLogFile`. This has now been fixed.
* [Standalone] Due to some internal refactorings, the Passenger Standalone Nginx configuration template has changed. If you used a custom Nginx configuration template, please merge our latest changes into it.
Release 5.0.12
--------------
* [Enterprise] Fixed passenger-irb. It was broken in 5.0.10 because of the change that made using admin commands without sudo possible.
Release 5.0.11
--------------
* In 5.0.10, admin tools such as `passenger-status` and `passenger-config restart-app` display an authorization error if they are run without sudo, while at the same time Passenger isn't serving any applications. Since this is confusing, they have now been modified to display a more appropriate error message.
* Fixes a bug in the RPMs that prevent admin tools such as `passenger-status` and `passenger-config restart-app` from working when they are invoked without root privileges.
* Fixes a bug on OS X that prevent admin tools such as `passenger-status` and `passenger-config restart-app` from detecting Passenger instance directories when they are invoked without root privileges. Closes GH-1535.
* Fixes a bug that causes Passenger not to work if the HOME environment variable is not set.
* Fixes compatibility with non-Rails Ruby apps that require the actionview gem. Closes GH-1547.
* Fixes some non-fatal "permission denied" error that may occasionally occur if user switching is turned off. Closes GH-1541.
* Relative values for the `pid_file` and `log_file` options in Passengerfile.json are now supported.
* If Passengerfile.json contains a syntax error, Passenger Standalone now correctly prints an error message instead of crashing.
* Sending a SIGABRT signal to a Ruby process now properly makes it terminate.
* The `passenger-config restart-app` command now accepts `.` as parameter, which it will interpreter as "restart the app in the current working directory". Closes GH-1386.
* [Apache] Setting `PassengerLogLevel` no longer redirects Apache's own stderr to that log file. Closes GH-1373.
* [Standalone] Passenger Standalone's Nginx engine now includes the RealIP module. Closes GH-1389.
* [Standalone] The `--max-preloader-idle-time` option has been added.
Release 5.0.10
--------------
* It is now possible to run `passenger-status`, `passenger-config restart-app` and other admin commands without using sudo. When run without sudo, these admin commands will allow you to operate on apps and processes that are owned by the user that invoked the admin command. Closes GH-1392.
* Fixes a crash introduces in 5.0.9 due to not properly initializing a variable. Closes GH-1530.
* The `passenger-config reopen-logs` command now works by instructing the Watchdog process to reopen the log file, while instructing the other Passenger processes to re-inherit the log file from the Watchdog instead of trying to reopen the log file on their own. This makes log file reopening more robust. Closes GH-1452.
* `passenger-config restart-app` no longer leaves the terminal in a state with black background. Closes GH-1526.
* `passenger-config admin-command` has been renamed to `passenger-config api-call` in order to avoid confusion with any potential admin interfaces that we will introduce in the future.
* If Union Station support is enabled, process and system metrics weren't being sent correctly to Union Station. This has been fixed.
* [Enterprise] Fixes the fact that the Passenger Enterprise RPM didn't correctly set SELinux permissions on its own files.
* [Apache] passenger-install-apache2-module no longer aborts with an error if the Apache configuration file contains errors. Closes GH-1525.
* [Apache] Fixes a typo that would cause passenger-install-apache2-module to crash on Red Hat and CentOS systems on which the SELinux command line tools are not installed. Closes GH-1527.
Release 5.0.9
-------------
* The casing of original headers as generated by the application are now preserved, instead of being downcased. This fixes compatibility issues with broken HTTP clients. Closes GH-1436.
* Internal refactoring: we've replaced libeio with libuv. This makes some of our code simpler. Closes GH-1428.
* When the passenger-status tool tries to cleanup a stale instance directory, it will no longer abort with an error when it fails to do that. It will now merely print a warning. Fixes [StackOverflow question 30354732](http://stackoverflow.com/questions/30354732/cap-aborted-capistrano-aborts-rails-deploy-while-attempting-to-chown-tmp-p/30357100#30357100).
* Fixes compilation problems on Solaris.
* The Ruby handler has been made more robust. Previously, it was possible for applications to corrupt connections by returning incorrect Rack responses. This may cause connections to get stuck. The Rack handler has been hardened to ensure that connections will never get corrupted or stuck. Closes GH-1512.
* The Ruby handler now closes the Rack response body even when the socket connection is hijacked by the application. The Rack specification is unclear about what to do in this case, and different Ruby app servers do different things. We have found that by closing the body object anyway, we maximize compatibility with existing Rack middlewares and apps, such as Rack::Lock. Background information about this issue can be found at https://github.com/ngauthier/tubesock/issues/10#issuecomment-72539461.
* Fixes a crash that could occur if some HTTP request headers are present, but have the empty value. Closes GH-1524.
* Fixes a permission problem that prevents the web server from communicating with Passenger when user switching is off. Closes GH-1520.
* Fixes a few small one-time memory leaks in the Passenger agent. This wraps up the workitems discovered in valgrind runs on earlier versions.
* Fixes use of uninitialized metrics. This could happen for a brief moment after spawning.
* [Apache] If you pass the `--apxs2-path` parameter to `passenger-install-apache2-module`, and the apxs2 path that you specified is not in PATH, then the installer would think that Apache installation is broken. This has been fixed.
* [Apache] A `Connection: close` header that was used for internal communication between Passenger processes was being leaked to the client, which breaks HTTP keep-alive connections. This has been fixed. Closes GH-1516.
* [Nginx] The preferred Nginx version is now 1.8.0. It was previously 1.6.3.
* [Nginx] Passenger now passes to the application the raw URI as sent by the client, as long as Nginx didn't modify the URI (e.g. as part of rewrite rules). This means that escaped slashes (%2F) in the URI now work correctly and out-of-the-box as long as there are no applicable rewrite rules.
* [Nginx] Fixes that crash that would occur if Nginx is configured to log to syslog. And to prevent log messages from disappearing into a black hole, Passenger will now ask you to set `passenger_log_file` if Nginx is configured to log to syslog. Closes GH-1514.
* [Standalone] Prevents an existing instance from being shut down if starting a new instance fails.
Release 5.0.8
-------------
* We now supply Debian 8 and Ubuntu 15.04 packages. Closes GH-1494 and GH-1400.
* We now supply Red Hat 6, Red Hat 7, CentOS 6 and CentOS 7 packages.
* We no longer supply Ubuntu 10.04 packages because Ubuntu 10.04 is no longer supported by Canonical.
* Fixes a Passenger crash (SIGSEGV) that occurs occasionally when out-of-band garbage collection is enabled. Closes GH-1469.
* Fixes a Passenger crash (SIGSEGV) that occurs occasionally with redirects to relative URLs. Closes GH-1513.
* Fixes cases when Passenger shuts down more processes than is allowed by the `min_instances` limit. Closes GH-1500.
* Fixes "Bad Gateway" errors that would occur when an application sets the X-Sendfile or X-Accel-Redirect header, together with a non-empty response body. Closes GH-1498.
* Fixes the fact that Passenger agent processes don't lower their privilege when user switching is turned off.
* Fixes autodetection of Apache on Gentoo. Closes GH-1510.
* Fixes compilation problems on Solaris. Closes GH-1508.
* [Standalone] Adds the `--pool-idle-time` command line parameter.
* [Standalone] Adds the `--auto` command line parameter for running non-interactively. This supresses prompts. Closes GH-1511.
Release 5.0.7
-------------
* Supports changed way of specifying settings for (non-bundled) Meteor apps. Closes GH-1403.
* Fixes an integer-to-string conversion bug in the code responsible for buffering chunked request bodies. This bug could cause the PassengerAgent to crash due to an exception. Thanks to Marcus Rückert of SUSE for reporting this.
* Request-specific environment variables are no longer cached. This fixes a number of issues, such as Shibboleth not working properly and conflicts between HTTPS and non-HTTPS virtual hosts. Closes GH-1472.
* Fixes a memory corruption bug that would be triggered when using `passenger_base_uri`. The memory corruption bug resided in the code for resolving symlinks. Closes GH-1388.
* Re-introduced signal catchers during shutdown, to allow clean shutdown in Foreman. Closes GH-1454.
* `passenger-status --show=xml` no longer outputs the non-XML header by default. This fixes a regression as reported in a comment in GH-1136.
* Passenger now prefers to load Rack and Bundler from RubyGems instead of from `vendor_ruby`. This solves some issues with Rack and Bundler on Debian systems. Closes GH-1480 and GH-1478.
* The turbocache no longer caches responses that contain the `X-Sendfile` or the `X-Accel-Redirect` header.
* The preferred Nginx version has been upgraded to 1.6.3.
* The logging agent no longer aborts with an error if one of the Passenger root directory's parent directories is not world-executable. Closes GH-1487.
* [Standalone] It is now possible to configure the Ruby, Node.js and Python executable to use in Passenger Standalone through the command line options --ruby, --nodejs and --python. Closes GH-1442.
* [Standalone] Running `passenger start --engine=builtin --daemonize` would fail with a timeout error. This has been fixed.
* [Standalone] Running `passenger start --nginx-version=XXX` would crash. This has been fixed. Closes GH-1490.
* [Apache] Fixed some issues with X-Sendfile. Closes GH-1376.
* [Apache] If the installer fails to autodetect Apache while the installer is running as a normal user, it will now ask you to give it root privileges. Closes GH-1289.
* [Apache] The installer now validates your Apache configuration file to check for common problems. The validator can also be accessed separately by running `passenger-config validate-install --validate-apache2`.
* [Nginx] Introduces the `passenger_read_timeout` option for rare cases when server needs more than the default 10 minute timeout. Contributed by pkmiec. Closes [GH-PR-34](https://github.com/phusion/passenger/pull/34).
* [Nginx] The Nginx module now looks for index.html if the path ends in / so that it works intuitively, without needing to use try_files.
* Fixes wrong memory address display in crash dumps. Thanks to thoughtpolice for pointing it out.
* Fixes an ugly backtrace that would be shown if an invalid request is made to an application process using the private HTTP interface. Contributed by jbergler. Closes GH-1311.
* Various documentation improvements. Closes [GH-PR-1332](https://github.com/phusion/passenger/pull/1332), [GH-PR-1354](https://github.com/phusion/passenger/pull/1354), [GH-PR-1216](https://github.com/phusion/passenger/pull/1216), [GH-PR-1385](https://github.com/phusion/passenger/pull/1385), [GH-PR-1302](https://github.com/phusion/passenger/pull/1302).
Release 5.0.6
-------------
* The turbocache no longer caches responses for which the Cache-Control header contains "no-cache". Please note that "no-cache" does not mean "do not cache this response". Instead, it means "any caching servers may only serve the cached response after validating it". Since the turbocache does not support validation, we've chosen to skip caching instead.
Coincidentally, this change "fixes" problems with applications that erroneously use "no-cache" as a flag for "do not cache this response". What these applications should actually use is "no-store". We recommend the developers of such applications to change their caching headers in this manner, because even if Passenger doesn't unintentionally cache the response, any intermediate proxies that visitors are behind may still cache the response.
* Fixes a number of memory leaks. Memory was leaked upon processing a request with multiple headers, upon processing a response with multiple headers, and upon processing a response with Set-Cookie headers. Every time such a request or response was processed, 512 bytes of memory was leaked due to improperly dereferencing relevant memory buffers. Closes GH-1455.
* Fixes various bugs related to Union Station data collection.
Union Station is our upcoming application analytics and performance monitoring SaaS platform. It is opt-in: no data is collected unless you turn the feature on.
* Fixes a Union Station-related file descriptor leak. Closes GH-1439.
* Fixes some bugs w.r.t. use of uninitialized memory.
* More informative error message if a support binary is not found, including a resolution hint. Closes GH-1395.
* [Apache] `SetEnv` variables are now passed as Rack/CGI/request variables. This was also the case in Passenger 4, but not in Passenger 5.0.0-5.0.5. We've restored the old behavior because the behavior in 5.0.0-5.0.5 breaks certain Apache modules such as Shibboleth. Closes GH-1446.
* [Standalone] PID and log files now correctly created if user specifies relative path.
Release 5.0.5
-------------
* Fixes various crashes due to use of uninitialized memory. One such crash is documented in GH-1431.
* Fixes a connection stall in the Apache module. Closes GH-1425.
* Fixes a potential read-past-buffer bug in string-to-integer conversion routines. Thanks to dcb314 for spotting this. Closes GH-1441.
* Fixes a compilation problem on Solaris. This problem was caused by the fact that `tm_gmtoff` is not supported on that platform. Closes GH-1435.
* There is now an API endpoint for force disconnecting a client: `passenger-config admin-command DELETE /server/<client name>.json`. Closes GH-1246.
* Fixes some file descriptor leaks. These leaks were caused by the fact that keep-alive connections with application processes were not being closed properly. Closes GH-1439.
* In order to more easily debug future file descriptor leaks, we've introduced the `PassengerFileDescriptorLogFile` (Apache) and `passenger_file_descriptor_log_file` (Nginx) config options. This allows Passenger to log all file descriptor open/close activity to a specific log file.
* The `PassengerDebugLogFile` (Apache) and `passenger_debug_log_file` (Nginx) configuration options have been renamed to `PassengerLogFile` and `passenger_log_file`, respectively. The old name is support supported for backward compatibility reasons.
* [Enterprise] Fixes a bug in Flying Passenger's `--instance-registry-dir` command line parameter. This command line parameter didn't do anything.
* [Enterprise] The Flying Passenger daemon no longer supports the `--max-preloader-idle-time` config option. This is because the config option never worked. The correct way to set the max preloader idle time is through the Nginx config option, but this was wrongly documented, so the documentation has been fixed.
Release 5.0.4
-------------
* Fixes a compilation problem introduced in 5.0.3.
Release 5.0.3
-------------
* [Standalone] When using the builtin engine, `passenger start` may crash during startup due to an initialization race condition. This has been fixed.
* [Enterprise] Fixes a bug in passenger-irb. Running passenger-irb without a PID parameter worked, but running it with a PID parameter didn't.
* Fixes an integer overflow that resulted in a file descriptor leak and stalled client connections. Closes GH-1412.
* Truncates Passenger source code paths in logs (to 3 chars) to reduce redundant info. Closes GH-1383.
* Fixes invalid JSON output for non-finite double values (e.g. from the HTTP JSON API). Closes GH-1408.
* All hooks now set the `PASSENGER_HOOK_NAME` environment variable. This variable is set to the name of the hook that is being called.
* The Ruby handler no longer tries to call #force_encoding on response body strings, which fixes an incompatibility with apps/libraries that return frozen body strings. Closes GH-1414.
* If the Ruby handler crashes while processing a Rack response body, it will now no longer stall the connection.
* Fixes env.SERVER_PORT containing 80 instead of 443 when using https on default port. Closes GH-1421.
* We now handle errors in the `poll()` system call better. This might fix some crashes during shutdown which manifest on FreeBSD.
Release 5.0.2
-------------
* Fixes a connection freeze that could occur when processing large responses. This would manifest itself under the error message "This website is under heavy load" or "Request queue is full, returning an error". Closes GH-1404.
* Debian and Ubuntu packages have been reintroduced.
* When `passenger-config restart-app` is run interactively, if Passenger is not serving any applications, then the command now prints an error message instead of showing a menu with only a "Cancel" option.
* Fixes a compilation problem on FreeBSD 10 (contributed by: clemensg). Closes GH-1401.
* [Standalone] Fixes a crash that would occur if you use the `--ctl` parameter.
* [Enterprise] The `--max-request-time` option has been added to Passenger Standalone.
* [Enterprise] The `max_request_time_reached` hook has been introduced. This hook allows you to run diagnostics on a process that that took too long to respond to a request.
Release 5.0.1
-------------
* The `passenger-config restart-app` command is now more user friendly. When run in a terminal, it will show an interactive menu, allowing you to select the app to restart. Closes GH-1387.
* Fixed a crash bug in the handling of sticky session cookies.
* Log failed program in error message, not its command line (contributed by: paisleyrob). Closes GH-1397.
* [Nginx] Fixes cases in which Passenger overrides the Nginx handler function even when it shouldn't, for example when Passenger is disabled. Closes GH-1393.
* [Enterprise] The `sticky_sessions` and `envvars` options in Passengerfile.json is now also supported in mass deployment mode.
Release 5.0.0 release candidate 2
---------------------------------
* Fixes an installation problem with the Ruby gem due to incorrect Makefile generation. Closes GH-1382.
* More helpful message when request queue is full. Closes GH-1375.
Release 5.0.0 release candidate 1
---------------------------------
* Fixed Date headers not being formatted in the GMT timezone. Closes GH-1367.
* Fixed Passengerfile.json/passenger-standalone.json not being properly loaded in Passenger Standalone.
* Fixed support for sticky sessions.
* Fixed an infinite loop if the ApplicationPool garbage collector fails due to an exception. Closes GH-1360.
* Fixed Passenger Standalone exiting prematurely when the HelperAgent crashes. Exiting prematurely is not supposed to happen because the watchdog will restart the HelperAgent. Closes GH-1339.
* Fixed a crash that occurs when using a non-standard startup file value. Closes GH-1378.
* When dumping system metrics during error page generation, the `passenger-config` command is now invoked under the same Ruby interpreter as the app, instead of the one in PATH. Closes GH-1381.
* When a Ruby process crashes due to an uncaught exception, this fact is now properly logged.
* Specifying 0 for the `max_pool_size` config option no longer results in a crash. Closes GH-1334.
* The timeouts when downloading Passenger Standalone binaries and source files are now customizable. Closes GH-1295.
* The `envvars` option is now supported in Passengerfile.json, for passing environment variables to the application. Closes GH-1377.
* Introduced `hook_queue_full_error` for request queue overflows. Closes GH-1358.
* [Ruby] Fixed handling of "transfer-encoding chunked" response bodies which contain zero-sized chunks.
* [Nginx] It is no longer necessary to re-specify `passenger_enabled` in `location` contexts. Closes GH-1338.
* [Enterprise] Fixed a bug in mass deployment reloading.
* [Enterprise] Fixed a bug in mass deployment daemonization.
* [Enterprise] Fixed passenger-irb. Closes GH-1350.
* [Enterprise] The mass deployment mode now supports the `app_type` and `startup_file` configuration options in Passengerfile.json/passenger-standalone.json. Closes GH-1366.
Release 5.0.0 beta 3
--------------------
* The turbocache has received major updates and fixes based on excellent feedback Chris Heald and the community. First, several bugs w.r.t. the handling of caching headers have been fixed. Second, the turbocache has become slightly more conservative for security reasons. In previous versions, default cacheable responses (as defined by RFC 7234) were cached unless caching headers tell us not to. Now, default cacheable responses are only cached if caching headers explicitly tell us to. This change was introduced because there are many applications that set incorrect caching headers on private responses. This new behavior is currently not configurable, but there are plans to make it configurable in 5.0.0 release candidate 1.
* Introduced a new configuration option, `passenger_response_buffer_high_watermark` (Nginx) and `PassengerResponseBufferHighWatermark` (Apache), for configuring the behavior of the response buffering system. Closes GH-1300.
* Fixed more cookie handling issues. Closes GH-1310.
* Fixed various WebSocket issues. Closes GH-1306.
* Fixed some crashes caused by race conditions. Closes GH-1326.
* Fixed issues with handling POST data. Closes GH-1331.
* Fixed some issues on Heroku. Closes GH-1329.
* Fixed some integer overflows. Fix contributed by Go Maeda. Closes GH-1357.
* Fixed the `passenger-status --show=union_station` command. Closes GH-1336.
* Nginx versions earlier than 1.6 are no longer supported.
* Improved state introspection.
Release 5.0.0 beta 2
--------------------
* Fixed handling of multiple Set-Cookie headers. Closes GH-1296.
* `passenger-config system-metrics` now works properly if the agent is installed in ~/.passenger. Closes GH-1304.
* Documentation enhancements by Igor Vuk. Closes GH-1318.
* Fixed some crasher bugs.
* [Standalone] User switching is now correctly disabled.
* [Standalone] Fixed the `--thread-count` parameter.
* [Apache] IPs set by mod_remoteip are now respected. Closes GH-1284.
* [Apache] Fixed support for gzipped chunked responses. Closes GH-1309.
Release 5.0.0 beta 1
--------------------
Version 5.0.0 beta 1 contains major changes. It's mostly compatible with version 4, but there are a few minor breakages, which are described below. Major changes and notable breakages are:
* Performance has been much improved. This is thanks to months of optimization work. You can learn more at www.rubyraptor.org.
* We've published a [server optimization guide](https://www.phusionpassenger.com/documentation/ServerOptimizationGuide.html) for those who are interested in tuning Phusion Passenger.
* Support for Rails 1.2 - 2.2 has been removed, for performance reasons. Rails 2.3 is still supported.
* Phusion Passenger now supports integrated HTTP caching, which we call turbocaching. If your app sets the right HTTP headers then Phusion Passenger can tremendously accelerate your app. It is enabled by default, but you can disable it with `--disable-turbocaching` (Standalone), `PassengerTurbocaching off` (Apache), or 'passenger_turbocaching off' (Nginx).
* Touching restart.txt will no longer restart your app immediately. This is because, for performance reasons, the stat throttle rate now defaults to 10. You can still get back the old behavior by setting `PassengerStatThrottleRate 0` (Apache) or `passenger_stat_throttle_rate 0` (Nginx), but this is not encouraged. Instead, we encourage you to use the `passenger-config restart-app` tool to initiate restarts, which has immediate effect.
* Websockets are now properly disconnected on application restarts.
* The Phusion Passneger log levels have been completely revamped. If you were setting a log level before (e.g. through `passenger_log_level`), please read the latest documentation to learn about the new log levels.
* If you use out-of-band garbage collection, beware that the `X-Passenger-Request-OOB-Work` header has now been renamed to `!~Request-OOB-Work`.
* When using Rack's full socket hijacking, you must now output an HTTP status line.
* [Nginx] The `passenger_set_cgi_param` option has been removed and replaced by `passenger_set_header` and `passenger_env_var`.
* [Nginx] `passenger_show_version_in_header` is now only valid in the `http` context.
* [Apache] The `PassengerStatThrottleRate` option is now global.
Minor changes:
* The minimum required Nginx version is now 1.6.0.
* The instance directory is now touched every hour instead of every 6 hours. This should hopefully prevent more problems with /tmp cleaner daemons.
* Applications are not grouped not only on the application root path, but also on the environment. For example, this allows you to run the same app in both production and staging mode, with only a single directory, without further configuration. Closes GH-664.
* The `passenger_temp_dir` option (Nginx) and the `PassengerTempDir` option (Apache) have been replaced by two config options. On Nginx they are `passenger_instance_registry_dir` and `passenger_data_buffer_dir`. On Apache they are `PassengerInstanceRegistryDir` and `PassengerDataBufferDir`. On Apache, `PassengerUploadBufferDir` has been replaced by `PassengerDataBufferDir`.
* Command line tools no longer respect the `PASSENGER_TEMP_DIR` environment variable. Use `PASSENGER_INSTANCE_REGISTRY_DIR` instead.
* `passenger-status --show=requests` has been deprecated in favor of `passenger-status --show=connections`.
* Using the SIGUSR1 signal to restart a Ruby app without dropping connections, is no longer supported. Instead, use `passenger-config detach-process`.
* Introduced the `passenger-config reopen-logs` command, which instructs all Phusion Passenger agent processes to reopen their log files. You should call this after having rotated the web server logs.
* [Standalone] The Phusion Passenger Standalone config template has changed. Users are encouraged to update it.
* [Standalone] `passenger-standalone.json` has been renamed to `Passengerfile.json`.
* [Standalone] `passenger-standalone.json`/`Passengerfile.json` no longer overrides command line options. Instead, command line options now have the highest priority.
Release 4.0.60
--------------
Note that 4.0.60 is a source-only maintenance release. There will not be any binaries, Debian or RPM packages for this release.
* Adds OS X El Capitan support.
* Updates preferred Nginx version from 1.6.2 to 1.6.3.
* Fixes a header collision vulnerability (CVE-2015-7519, medium severity). Please see our blog for detailed vulnerability description and advisory. Thanks to the SUSE security team for reporting this issue.
* Fixes the password protection of internal Phusion Passenger processes.
For security reasons, Phusion Passenger limits access to internal processes, by using Unix file permissions and randomly generated passwords that only authorized internal processes know. It turns out that this password wasn't set correctly, which has now been fixed. There was no security vulnerability, because the file permissions already provide sufficient security. The password only serves as an extra layer of security just in case there is a problem with the former.
This issue is not at all related to any application-level security or application-level passwords. Any database passwords, keys, or secrets used and generated by applications have got nothing to do with the nature of this issue. This issue only relates to some randomly generated passwords that Passenger uses internally, for its internal operations.
Release 4.0.59
--------------