·
1 commit
to stable-6.2
since this release
- Fix some compatibility issues with FreeBSD. Closes GH-2668 & GH-2669.
- [Nginx] Upgrades preferred Nginx to 1.30.4 from 1.30.3.
- Fix a vulnerability that left the Passenger Watchdog API unauthenticated. This is a breaking change for some installations and scripts: an "empty watchdog_api_server_authorizations" now means no-auth-is-possible instead of auth-is-skipped. This regression was introduced in 5.2.0. CVE number pending.
- Fix a vulnerability that allowed unauthenticated users to use a Passenger Watchdog process to elevate privileges. This regression was introduced in 5.2.0. CVE number pending.
- Updated various library versions used in precompiled binaries (used for e.g. gem installs):
- cmake: 4.3.3 -> 4.4.2
- curl: 8.20.0 -> 8.21.0
- git: 2.54.0 -> 2.55.0
- gnupg: 2.5.20 -> 2.5.21
- libffi: 3.5.2 -> 3.8.0
- libpsl: 0.21.5 -> 0.23.3
- openssl: 3.6.2 -> 3.6.3
- pinentry: 1.3.2 -> 1.3.3
- rubygems: 4.0.12 -> 4.0.18
- rubies:
- 3.3.11 -> 3.3.12
- 3.4.9 -> 3.4.10
- 4.0.5 -> 4.0.6