uWSGI 2.0.16

[20180210]

Maintenance release

Security

  • [CVE-2018-6758] Stack-based buffer overflow in core/utils.c:uwsgi_expand_path()

Changes

  • Backported early_post_jail plugin hook (Bjørnar Ness)
  • Fixed ipv6 suupport for http-socket (James Brown)
  • Enable execinfo on DragonFly BSD (Aaron LI)
  • Fix inet_ntop buffer size (Orivej Desh)
  • Add worker running time metrics (Serge/yasek)
  • Backported safe-pidfile, safe-pidfile2 (Nate Coraor)
  • Stop using libxml2 by default on osx
  • Fixed uwsgi_kvlist_parse signature
  • Backport http range fixes from master (Curtis Maloney, Sokolov Yura)
  • relicensed mod_proxy_uwsgi to Apache 2.0
  • logging: Add ${millis} support to json encode
  • plugins/router_xmldir: fixup invalid locale check (Riccardo Magliocchetti)
  • Add ssl-verify-depth flag to set the max Client CA chain length (Paul Tagliamonte)
  • Allow to override build date (Bernhard M. Wiedemann)
  • Python 3 plugin: improved thread names handling (Jyrki Muukkonen, Mark Meyer)
  • Added uwsgi_resolve_ip for redis host (ahmbas)
  • plugins/gevent: Fix signal handlers (Maslov Alexander)
  • Write x509 DER to the uwsgi buffer (Paul Tagliamonte)
  • plugin/http: Fix compilation (Melvyn Sopacua)
  • Fixed emperor throttling system (Jeremy Hiatt)
  • Fix application loading without Plack after excluding “.” from @INC in new Perl versions (Anton Petrusevich)
  • Fix MULE MSG QUEUE IS FULL message hint (Eugene Tataurov)
  • Build System: support k_minor has a _xxx suffix (TOGO Li)
  • Fixed drop-after-* options (Robert DeRose)
  • Add mule_send_msg success indicator (Josh Tiras)
  • Properly check item size in uwsgi_queue_push (Josh Tiras)
  • FastRouter / HTTP Router can now have a ‘fallback’ key configured
  • HTTP Router now supports post-buffer, just like FastRouter
  • Fix handling of env in embedded dict in Python plugin (could cause segfaults in single thread mode)
  • Add support for Brotli (.br) with –static-gzip
  • Back-ported HTTP/1.1 support (–http11-socket) from 2.1

Availability

You can download uWSGI 2.0.16 from https://projects.unbit.it/downloads/uwsgi-2.0.16.tar.gz