uWSGI 2.0.16 ============ [20180210] Maintenance release Security ------ - [CVE-2018-6758] Stack-based buffer overflow in core/utils.c:uwsgi_expand_path() Changes ------- - Backported early_post_jail plugin hook (Bjørnar Ness) - Fixed ipv6 suupport for http-socket (James Brown) - Enable execinfo on DragonFly BSD (Aaron LI) - Fix inet_ntop buffer size (Orivej Desh) - Add worker running time metrics (Serge/yasek) - Backported safe-pidfile, safe-pidfile2 (Nate Coraor) - Stop using libxml2 by default on osx - Fixed uwsgi_kvlist_parse signature - Backport http range fixes from master (Curtis Maloney, Sokolov Yura) - relicensed mod_proxy_uwsgi to Apache 2.0 - logging: Add ${millis} support to json encode - plugins/router_xmldir: fixup invalid locale check (Riccardo Magliocchetti) - Add ssl-verify-depth flag to set the max Client CA chain length (Paul Tagliamonte) - Allow to override build date (Bernhard M. Wiedemann) - Python 3 plugin: improved thread names handling (Jyrki Muukkonen, Mark Meyer) - Added uwsgi_resolve_ip for redis host (ahmbas) - plugins/gevent: Fix signal handlers (Maslov Alexander) - Write x509 DER to the uwsgi buffer (Paul Tagliamonte) - plugin/http: Fix compilation (Melvyn Sopacua) - Fixed emperor throttling system (Jeremy Hiatt) - Fix application loading without Plack after excluding "." from @INC in new Perl versions (Anton Petrusevich) - Fix MULE MSG QUEUE IS FULL message hint (Eugene Tataurov) - Build System: support k_minor has a _xxx suffix (TOGO Li) - Fixed drop-after-* options (Robert DeRose) - Add mule_send_msg success indicator (Josh Tiras) - Properly check item size in uwsgi_queue_push (Josh Tiras) - FastRouter / HTTP Router can now have a 'fallback' key configured - HTTP Router now supports `post-buffer`, just like FastRouter - Fix handling of `env` in embedded dict in Python plugin (could cause segfaults in single thread mode) - Add support for Brotli (.br) with `--static-gzip` - Back-ported HTTP/1.1 support (--http11-socket) from 2.1 Availability ------------ You can download uWSGI 2.0.16 from https://projects.unbit.it/downloads/uwsgi-2.0.16.tar.gz