passenger 6.1.8 → 6.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 460e61d9b6cf7bae691bd3dc92da99e280bd1563da77f7eec933cfc12fd56970
-  data.tar.gz: 4813a698a57bead01bc2fbe1bb420c5695ac4113cf746ed9173cdfb319b1fdf3
+  metadata.gz: eed652bef0cc1e8f132f5f8f600b7d214f45c93beb0b7999df6b8f4c72581bd0
+  data.tar.gz: 01a080e5b44be9ab6a30d6fd5e9fe0a13fc68d3bf9d9c9e7ccfbab16f85197ad
 SHA512:
-  metadata.gz: 7c9580d7074d8282f3433038c54fec2efe47e03870a1d75ef46f1e50335f2977d157487d3885bf40e0556540396182bdde59c2fd13417ec60a3fe459654d9797
-  data.tar.gz: 923bc08ded89b05d8e2f78858a71c7f867f534eae0d026d386d53a78623d27c1a20a53be1eaab1170adba095c721f94ce319301f70505d34903cf6a6d858b930
+  metadata.gz: c08416dcde76820452df4f5502eb34d405f166dac31fe98b420bce01c447d549946368d2b0e8ceb415f8962313d98e7c41931655a854f59ae633ac1d11b82d8d
+  data.tar.gz: 6a0ab43c8d3c03beac4b77bd4f628be1237fc2b873b3665a205d5c0ed6fdefc4d3ec16c4c7c63548998c9908a2c8df87dc9799f94b46503cb6757f725538d908

data/CHANGELOG

@@ -1,6 +1,28 @@
-Release 6.1.8 (Not yet released)
+Release 6.2.0 (Not yet released)
 -------------
- * 
+ * Fix some compatibility issues with FreeBSD. Closes GH-2668 & GH-2669.
+ * [Nginx] Upgrades preferred Nginx to 1.30.4 from 1.30.3.
+ * Fix a vulnerability that left the Passenger Watchdog API unauthenticated. This is a breaking change for some installations and scripts: an "empty watchdog_api_server_authorizations" now means no-auth-is-possible instead of auth-is-skipped. This regression was introduced in 5.2.0. CVE number pending.
+ * Fix a vulnerability that allowed unauthenticated users to use a Passenger Watchdog process to elevate privileges. This regression was introduced in 5.2.0. CVE number pending.
+ * Updated various library versions used in precompiled binaries (used for e.g. gem installs):
+   - cmake: 4.3.3 -> 4.4.2
+   - curl: 8.20.0 -> 8.21.0
+   - git: 2.54.0 -> 2.55.0
+   - gnupg: 2.5.20 -> 2.5.21
+   - libffi: 3.5.2 -> 3.8.0
+   - libpsl: 0.21.5 -> 0.23.3
+   - openssl: 3.6.2 -> 3.6.3
+   - pinentry: 1.3.2 -> 1.3.3
+   - rubygems: 4.0.12 -> 4.0.18
+   - rubies:
+      - 3.3.11 -> 3.3.12
+      - 3.4.9 -> 3.4.10
+      - 4.0.5 -> 4.0.6
+
+
+Release 6.1.8
+-------------
+ * [Nginx] Build Nginx dynamic modules against nginx-mod-devel sources on Enterprise Linux. Closes GH-2664.
 
 
 Release 6.1.7

data/CONTRIBUTING.md

@@ -88,7 +88,7 @@ Phusion Passenger is mostly written in C++, but the build system and various sma
 <a name="dev_quickstart"></a>
 ### Developer QuickStart
 
-<a href="https://vimeo.com/phusionnl/review/97427161/15cb4cc59a"><img src="http://blog.phusion.nl/wp-content/uploads/2014/06/passenger_developer_quickstart.png"></a>
+<a href="https://youtu.be/CSpk9mfKdbc"><img src="http://blog.phusion.nl/wp-content/uploads/2014/06/passenger_developer_quickstart.png"></a>
 
 _Watch the Developer QuickStart screencast_
 
@@ -102,9 +102,9 @@ Phusion Passenger's design and architecture is documented in detail in the [Desi
 <a name="code_walkthrough"></a>
 ### Code Walkthrough
 
-<a href="http://vimeo.com/phusionnl/review/98027409/03ba678684"><img src="http://blog.phusion.nl/wp-content/uploads/2014/06/code_walkthrough.png"></a>
+<a href="https://youtu.be/exugD98pqQc"><img src="http://blog.phusion.nl/wp-content/uploads/2014/06/code_walkthrough.png"></a>
 
-We have [a video](http://vimeo.com/phusionnl/review/98027409/03ba678684) which walks you through the Phusion Passenger codebase, showing you step-by-step how things fit together. It complements the [Design & Architecture](https://www.phusionpassenger.com/documentation/Design%20and%20Architecture.html) document.
+We have [a video](https://youtu.be/exugD98pqQc) which walks you through the Phusion Passenger codebase, showing you step-by-step how things fit together. It complements the [Design & Architecture](https://www.phusionpassenger.com/documentation/Design%20and%20Architecture.html) document.
 
 <a name="build_system"></a>
 ### Compilation and build system

data/README.md

@@ -4,7 +4,7 @@
 
 [Phusion Passenger®](https://www.phusionpassenger.com/) is a web server and application server, designed to be fast, robust and lightweight. It takes a lot of complexity out of deploying web apps, adds powerful enterprise-grade features that are useful in production, and makes administration much easier and less complex. Phusion Passenger supports Ruby, Python, Node.js and Meteor, and is being used by high-profile companies such as **Apple, Pixar, New York Times, AirBnB, Juniper** etc as well as [over 650.000 websites](http://trends.builtwith.com/Web-Server/Phusion-Passenger).
 
-<a href="https://vimeo.com/224923750"><img src="https://github.com/phusion/passenger/blob/stable-5.2/images/justin.png" height="400"></a><br><em>Phusion Passenger - the smart app server</em>
+<a href="https://youtu.be/fFFnKvedU9w"><img src="https://github.com/phusion/passenger/blob/stable-5.2/images/justin.png" height="400"></a><br><em>Phusion Passenger - the smart app server</em>
 
 <p>What makes Passenger so fast and reliable is its <strong>C++</strong> core, its <strong>zero-copy</strong> architecture, its <strong>watchdog</strong> system and its <strong>hybrid</strong> evented, multi-threaded and multi-process design.</p>
 

data/build/cxx_tests.rb

@@ -75,6 +75,9 @@ TEST_CXX_OBJECTS = {
     "test/cxx/ServerKit/ServerTest.cpp",
   "#{TEST_OUTPUT_DIR}cxx/ServerKit/HttpServerTest.o" =>
     "test/cxx/ServerKit/HttpServerTest.cpp",
+
+  "#{TEST_OUTPUT_DIR}cxx/Watchdog/ApiServerTest.o" =>
+    "test/cxx/Watchdog/ApiServerTest.cpp",
   "#{TEST_OUTPUT_DIR}cxx/ServerKit/CookieUtilsTest.o" =>
     "test/cxx/ServerKit/CookieUtilsTest.cpp",