passenger 4.0.29 → 4.0.30
Sign up to get free protection for your applications and to get access to all the features.
Potentially problematic release.
This version of passenger might be problematic. Click here for more details.
- data.tar.gz.asc +7 -7
- data/.travis.yml +1 -1
- data/NEWS +21 -0
- data/ext/common/Constants.h +1 -1
- data/ext/common/agents/HelperAgent/RequestHandler.h +1 -1
- data/lib/phusion_passenger.rb +1 -1
- metadata +2 -2
- metadata.gz.asc +7 -7
data.tar.gz.asc
CHANGED
@@ -2,11 +2,11 @@
|
|
2
2
|
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
|
3
3
|
Comment: GPGTools - http://gpgtools.org
|
4
4
|
|
5
|
-
|
6
|
-
|
7
|
-
|
8
|
-
|
9
|
-
|
10
|
-
|
11
|
-
=
|
5
|
+
iQEcBAABAgAGBQJSwdn6AAoJECrHRaUKISqMAv4H/iti9mO5AKDQjhzkjIACLUzI
|
6
|
+
1eKK+17FK8AUKf6KblJCVznxuhR4yHpxnmxZ2twm9M6VJEKygTELiT+3Lb/FZmVA
|
7
|
+
1evpYzx9I5nxic/604o0GmObGiXrGjdVC+o77l9AX8tZtVGv0+pnSe0WlpI1nqgC
|
8
|
+
F4SJVrctf14NcGiIVPPwdzeSM/goDQOJe/T4CsXdQyaXiQOzgkNiJoTd+zD3f0Gl
|
9
|
+
W/SuPNHZqhUuZH3T9FMnjzzvhN0iPdLuWtl8LzlczoQrPjMqDAmh/hMSC4lHaBFd
|
10
|
+
y5T/7qrWgVtoqPBNz9MU/84hDSR2M5Hx8x3muo7+LeMyIeRa0EGkVHbcyrKa8Hs=
|
11
|
+
=kfV3
|
12
12
|
-----END PGP SIGNATURE-----
|
data/.travis.yml
CHANGED
@@ -3,7 +3,7 @@ language: ruby
|
|
3
3
|
env:
|
4
4
|
- TEST_CXX=1 TEST_NODE=1
|
5
5
|
- TEST_CXX=1 SUDO=1
|
6
|
-
- TEST_RUBY=1 TEST_RUBY_VERSION=1.8.7 TEST_CLASSIC_RAILS=0
|
6
|
+
- TEST_RUBY=1 TEST_RUBY_VERSION=1.8.7 TEST_CLASSIC_RAILS=0 TEST_RUBYGEMS_VERSION=1.8.25
|
7
7
|
- TEST_RUBY=1 TEST_RUBY_VERSION=1.9.3 TEST_CLASSIC_RAILS=0
|
8
8
|
- TEST_NGINX=1 TEST_STANDALONE=1 TEST_RUBYGEMS_VERSION=1.8.25
|
9
9
|
- TEST_APACHE2=1 TEST_RUBYGEMS_VERSION=1.8.25
|
data/NEWS
CHANGED
@@ -1,3 +1,24 @@
|
|
1
|
+
Release 4.0.30
|
2
|
+
--------------
|
3
|
+
|
4
|
+
* Fixed wrong autogeneration of HTTP Date header. If the web app does
|
5
|
+
not supply a Date header, then Passenger will add one. Unfortunately
|
6
|
+
due to the use of the wrong format string, December 30 2013 is
|
7
|
+
formatted as December 30 2014. As a result, cookies that expire before
|
8
|
+
2014 would expire on December 30 2013 and December 31 2013. Details can
|
9
|
+
be found at [Github pull request 93](https://github.com/phusion/passenger/pull/93).
|
10
|
+
|
11
|
+
This issue only affects Phusion Passenger for Nginx and Phusion Passenger
|
12
|
+
Standalone, and does not affect Phusion Passenger for Apache.
|
13
|
+
|
14
|
+
You can work around this problem in your application by setting a
|
15
|
+
Date header. For example, in Rails you can do:
|
16
|
+
|
17
|
+
before_filter { response.date = Time.now.utc }
|
18
|
+
|
19
|
+
Many thanks to Jeff Michael Dean (zilkey) and many others for bringing this to our attention and for providing workarounds and feedback.
|
20
|
+
|
21
|
+
|
1
22
|
Release 4.0.29
|
2
23
|
--------------
|
3
24
|
|
data/ext/common/Constants.h
CHANGED
@@ -1067,7 +1067,7 @@ private:
|
|
1067
1067
|
|
1068
1068
|
pos = appendData(pos, end, "Date: ");
|
1069
1069
|
gmtime_r(&the_time, &the_tm);
|
1070
|
-
pos += strftime(pos, end - pos, "%a, %d %b %
|
1070
|
+
pos += strftime(pos, end - pos, "%a, %d %b %Y %H:%M:%S %Z", &the_tm);
|
1071
1071
|
pos = appendData(pos, end, "\r\n");
|
1072
1072
|
headerData.append(dateStr, pos - dateStr);
|
1073
1073
|
}
|
data/lib/phusion_passenger.rb
CHANGED
@@ -30,7 +30,7 @@ module PhusionPassenger
|
|
30
30
|
|
31
31
|
PACKAGE_NAME = 'passenger'
|
32
32
|
# Run 'rake ext/common/Constants.h' after changing this number.
|
33
|
-
VERSION_STRING = '4.0.
|
33
|
+
VERSION_STRING = '4.0.30'
|
34
34
|
|
35
35
|
PREFERRED_NGINX_VERSION = '1.4.4'
|
36
36
|
NGINX_SHA256_CHECKSUM = '7c989a58e5408c9593da0bebcd0e4ffc3d892d1316ba5042ddb0be5b0b4102b9'
|
metadata
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: passenger
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 4.0.
|
4
|
+
version: 4.0.30
|
5
5
|
prerelease:
|
6
6
|
platform: ruby
|
7
7
|
authors:
|
@@ -9,7 +9,7 @@ authors:
|
|
9
9
|
autorequire:
|
10
10
|
bindir: bin
|
11
11
|
cert_chain: []
|
12
|
-
date: 2013-12-
|
12
|
+
date: 2013-12-30 00:00:00.000000000 Z
|
13
13
|
dependencies:
|
14
14
|
- !ruby/object:Gem::Dependency
|
15
15
|
name: rake
|
metadata.gz.asc
CHANGED
@@ -2,11 +2,11 @@
|
|
2
2
|
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
|
3
3
|
Comment: GPGTools - http://gpgtools.org
|
4
4
|
|
5
|
-
|
6
|
-
|
7
|
-
|
8
|
-
|
9
|
-
|
10
|
-
|
11
|
-
=
|
5
|
+
iQEcBAABAgAGBQJSwdn7AAoJECrHRaUKISqMXbgH/RrefbDrOoSI6MXo2shbbAw3
|
6
|
+
iN41MXVz6uMYsn5E27TrJOM0y/LlIMAchxH0FRdz5RVTWcN7L+n6wZ+oYB3Nisje
|
7
|
+
btY9lM+QXKjmwFy+mijT92eW4kCdYiuNjJ3snX7GDqdpv/XKC/7QM/2OxeIqT5xC
|
8
|
+
+dbDdZyGC/QaSiJQzsMWmb0jxBomMYSfYP4Ok/w8ECULtzdAf2VR1XaU7YoytfUP
|
9
|
+
x8a5900g/kJdixo1KBkJaHuNfNS0fbHE0QCtyrZdE6pT6yoIYpXNBe7etxjO7XmW
|
10
|
+
n7W+u5WVbeqbcx95iKpDLcFAcV3Stx/FhrxIcw46eeZig/F4v2JWTycbW/6HYn0=
|
11
|
+
=nsoZ
|
12
12
|
-----END PGP SIGNATURE-----
|