Uwsgi

Latest version: v2.0.28

Safety actively analyzes 688634 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 5 of 11

2.0.10

Not secure
[20150317]

Bugfixes
--------

* Don't lower security standards with gcc 4.9 (Riccardo Magliocchetti)
* Perl/PSGI make sure that at least two params are passed to xs_input_seek (Ivan Kruglov)
* Per/PSGI fixed multiple interpreters usage
* spooler: fixed scandir usage
* fixed exception handler arguments management
* fixed 'log-master' + 'daemonize2' disables all logging
* fixed http Range header management


New Features
------------

safeexec hook
**************

this is like 'exec' but do not exit on error even if the executed command returns a non-zero value

backported --emperor-wrapper-fallback and --emperor-wrapper-override
********************************************************************

the --emperor-wrapper-fallback option allows you to specify an alternative binary to execute
when running a vassal and the default binary_path is not found (or returns an error). (you can specify it multiple times)

The --emperor-wrapper-override is similar but 'overrides' the default wrapper (you can specify it multiple times)

added support for UNIX sockets to rsyslog
*****************************************

The rsyslog logger can now get a unix socket as address (arguments starting with a slash are recognized as a unix path)

forcecl transformation
**********************

this transformation works like 'fixcl' but generates the Content-Length header even if Content-Length has been listed for removal.


Availability
------------

You can download uWSGI 2.0.10 from

https://projects.unbit.it/downloads/uwsgi-2.0.10.tar.gz

2.0.9

Not secure
[20141230]

Bugfixes
--------

* fixed mod_proxy_uwsgi for non-blocking mode (many thanks to Joe cuchac)
* fixed master-fifo + cheaper
* fixed leak on error in bind_to_unix (Riccardo Magliocchetti)
* atexit hooks works in cheaped workers too
* atexit hooks works in gevent mode too during shutdown
* fixed carbon command line option value after reload
* do not honour Emperor throttling on the first run
* fixed Mono plugin
* fixed peer name in corerouters
* fixed stop signal for daemons
* varios ssl/tls fixes in https/spdy router
* fixed python3 --py-auto-reload-ignore
* fixed modifiers in corerouters
* support for yajl from homebrew (OSX)
* psgi: Ensure that we call any DESTROY hooks on psgix.harakiri.commit (Ævar Arnfjörð Bjarmason)
* systemdlogger: fix compilation with -Werror=format-security (Riccardo Magliocchetti)
* fixed unmasked websockets
* perl fixed latent refcounting bug (Mattia Barbon)

New Features
------------

Improved PyPy support for Linux
*******************************

The PyPy team have started building libpypy-c.so in their official releases. Now using pypy with uWSGI should be way easier:

https://uwsgi-docs.readthedocs.io/en/latest/PyPy.html

Fastrouter post-buffering
*************************

The fastrouter got post-buffering:

https://uwsgi-docs.readthedocs.io/en/latest/Fastrouter.html#post-buffering-mode-uwsgi-2-0-9

Perl uwsgi::opt
***************

The psgi/perl plugin exposes the uwsgi::opt hash, reporting the whole instance key-value configuration

--pull-header
*************

This is like --collect-header but the collected header is not returned to the client

active-workers signal target
****************************

This is like the 'workers' target, but forward the signal only to non-cheaper workers

httpdumb routing action
***********************

The http internal router exposes a new mode called 'httpdumb' that does not change headers before forwarding the request

Availability
------------

uWSGI 2.0.9 has been released on 20141230.

You can download it from:

https://projects.unbit.it/downloads/uwsgi-2.0.9.tar.gz

2.0.8

Not secure
Note: this is the first version with disabled-by-default SSL3, if you need it, you can re-enable with ``--ssl-enable3`` option

Bugfixes
--------

* fixed PHP `SCRIPT_NAME` usage when ``--php-app`` is in place
* allow "appendn" hook without second argument
* fix heap corruption in the Carbon plugin (credits: Nigel Heron)
* fix `getifaddrs()` memory management
* fixed `tcsetattr()` usage
* fixed kevent usage of return value (credits: Adriano Di Luzio)
* ensure PSGI response headers are in the right format
* fixed reloading of attached daemons
* fixed SSL/TLS shutdown
* fixed mountpoint logic for paths not ending with / (credits: Adriano Di Luzio)
* fixed Python3 support in spooler decorators (credits: Adriano Di Luzio)

New Features
------------

RTSP and chunked input backports from 2.1 for the HTTP router
*************************************************************

The ``--http-manage-rtsp`` and ``--http-chunked-input` have been backported from 2.1 allowing the HTTP router
to detect RTSP and chunked requests automatically. This is useful for the upcoming https://github.com/unbit/uwsgi-realtime plugin.

--hook-post-fork
****************

This custom hook allows you to call actions after each `fork()`.

fallback to trollius for asyncio plugin
***************************************

If you build the asyncio plugin for python2, a fallback to the `trollius <https://trollius.readthedocs.io/>`_ module will be tried.

This feature has gotten basically zero test coverage, so every report (bug or success alike) is welcome.

added sweep_on_full, clear_on_full and no_expire to ``--cache2``
****************************************************************

Three new options for ``--cache2`` have been added for improving the caching expire strategies:

* ``sweep_on_full`` will call a sweep (delete all of the expired items) as soon as the cache became full
* ``clear_on_full`` will completely clear the cache as soon as it is full
* ``no_expire`` forces the cache to not generate a cache sweeper thread, delegating items removal to the two previous options

backported wait-for-fs/mountpoints from 2.1
*******************************************

* ``--wait-for-fs <path>`` suspend the uWSGI startup until a file/directory is available
* ``--wait-for-file <path>`` suspend the uWSGI startup until a file is available
* ``--wait-for-dir <path>`` suspend the uWSGI startup until a directory is available
* ``--wait-for-mountpoint <path>`` suspend the uWSGI startup until a mountpoint is available

improved the offload api (backport from 2.1)
********************************************

uWSGI 2.0.8 is compatible with the upcoming https://github.com/unbit/uwsgi-realtime plugin that allows the use of realtime features
(like websockets or audio/video streaming) using the uWSGI offload engine + Redis publish/subscribe.

Allows building plugins from remote sources as embedded
*******************************************************

The UWSGI_EMBED_PLUGINS environment variable has been extended to support remote plugins. As an example you can build a monolithic
uwsgi binary with the Avahi and realtime plugins as:

.. code-block:: sh

UWSGI_EMBED_PLUGINS="avahi=https://github.com/20tab/uwsgi-avahi,realtime=https://github.com/unbit/uwsgi-realtime" make

Automatically manage HTTP_X_FORWARDED_PROTO
*******************************************

Albeit a new standard is available in the HTTP world for forwarded sessions (http://tools.ietf.org/html/rfc7239) this release
adds support for the X-Forwarded-Proto header, automatically setting the request scheme accordingly.

Availability
------------

uWSGI 2.0.8 has been released on 20141026. Download it from:

https://projects.unbit.it/downloads/uwsgi-2.0.8.tar.gz

2.0.7

Not secure
Changelog [20140905]

Bugfixes
********

- fixed counters in Statsd plugin (Joshua C. Forest)
- fixed caching in PHP plugin (Andrew Bevitt)
- fixed management of system users starting with a number
- fixed request body readline using `memmove` instead of `memcpy` (Andrew Wason)
- ignore "user" namespace in `setns` (still a source of problems)
- fixed Python3 RPC bytes/string mess (result: we support both)
- do not destroy the Emperor on failed mount hooks
- fixed symbol lookup error in the Mono plugin on OS X (Ventero)
- fixed FastCGI and SCGI protocols error when out of buffer happens
- fixed Solaris/SmartOS I/O management
- fixed two memory leaks in the RPC subsystem (Riccardo Magliocchetti)
- fixed the Rados plugin's PUT method (Martin Mlynář)
- fixed multiple Python mountpoints with multiple threads in cow mode
- stats UNIX socket is now deleted by `vacuum`
- fixed off-by-one corruption in cache LRU mode
- force single-CPU build in Cygwin (Guido Notari)

New Features and improvements
*****************************

Allow calling the spooler from every CPython context
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

At Europython 2014, Ultrabug (an uWSGI contributor and packager) asked for the possibility to spool tasks directly from a greenlet.

Done.

store_delete cache2 option
^^^^^^^^^^^^^^^^^^^^^^^^^^

Author: goir

The `store_delete` flag of the `--cache2` option allows you to force the cache engine to automatically remove invalid
backing store files instead of steadfastly refusing to launch.

file logger rotation
^^^^^^^^^^^^^^^^^^^^

Author: Riccardo Magliocchetti

The `file` logger has been extended to allow the use of rotation (the same system used by the non-pluggable `--logto`).

https://github.com/unbit/uwsgi/commit/0324e5965c360dccfb873ffe351dec88ddab59c5

Vassal plugin hooks
^^^^^^^^^^^^^^^^^^^

The plugin hook API has been extended with two new hooks: `vassal` and `vassal_before_exec`.

They allow customizing a vassal soon after its process has been created.

The first third-party plugin using it is 'apparmor': https://github.com/unbit/uwsgi-apparmor

This allows you to apply an Apparmor profile to a vassal.


Broodlord improvements
^^^^^^^^^^^^^^^^^^^^^^

The Broodlord subsystem has been improved with a new option: `--vassal-sos` that automatically ask for reinforcement when all of the workers of an instance are busy.

In addition to this a sysadmin can now manually ask for reinforcement sending the 'B' command to the master FIFO of an instance.

Availability
************

uWSGI 2.0.7 has been released on 20140905, and you can download it from

https://projects.unbit.it/downloads/uwsgi-2.0.7.tar.gz

2.0.6

Not secure
Changelog [20140701]


Bugfixes
^^^^^^^^

* fixed a memory leak in the subscription system
* fixed shortcut for ssl-socket
* fixed Apache2 mod_proxy_uwsgi. It is now considered stable with all Apache MPM engines.
* fixed SCRIPT_NAME and PATH_TRANSLATED generation in the PHP plugin (thanks Matthijs Kooijman)
* remove the old FIFO socket from the event queue when recreating it (thanks Marko Tiikkaja)


New features
^^^^^^^^^^^^

The new Rados plugins
*********************

Credits: Marcin Deranek

The Rados plugin has been improved and stabilized, and now it is considered stable and usable in production.

Async modes and multithreading correctly work.

Support for uploading objects (via PUT) and creating new pools (MKCOL) has been added.

Expect WebDAV support in uWSGI 2.1.

Docs have been updated: https://uwsgi-docs.readthedocs.io/en/latest/Rados.html

--if-hostname
*************

This is configuration logic for including options only when the system's hostname matches a given value.

.. code-block:: ini

[uwsgi]
if-hostname = node1.local
socket = /tmp/socket1.socket
endif =

if-hostname = node2.local
socket = /var/run/foo.socket
endif =

Apache2 `mod_proxy_uwsgi` stabilization
***************************************

After literally years of bug reports and corrupted data and other general badness, `mod_proxy_uwsgi` is finally stable.

On modern Apache2 releases it supports UNIX sockets too.

Updated docs: https://uwsgi-docs.readthedocs.io/en/latest/Apache.html#mod-proxy-uwsgi

uwsgi[rsize] routing var
************************

The new `uwsgi[rsize]` routing variable (meaningful only in the 'final' chain) exposes the response size of the request.

the `callint` scheme
********************

This scheme allows you to generate blobs from functions exposed by your uWSGI instance:

.. code-block:: ini

[uwsgi]
uid = @(callint://get_my_uid)
gid = @(callint://get_my_gid)

--fastrouter-fallback-on-no-key
*******************************

The corerouter's fallback procedure requires that a valid key (domain name) has been requested.

This option forces the various routers to trigger the fallback procedure even if a key has not been found.

PHP 5.5 opcode caching via --php-sapi-name
******************************************

For mysterious reasons the PHP 5.5+'s opcode caching is not enabled in the "embed" SAPI. This option allows you to fake the SAPI name -- `apache` is a good option -- to force the opcode caching engine to turn on.

Improved chain-reloading
************************

Thanks to Marko Tiikkaja, the chain reloading procedure correctly works in cheaper modes and is more verbose.

added 'chdir' keyval to --attach-daemon2
****************************************

You can now set where attached daemons need to chdir().

Availability
^^^^^^^^^^^^

uWSGI 2.0.6 has been released on 20140701

You can download it from

https://projects.unbit.it/downloads/uwsgi-2.0.6.tar.gz

2.0.5.1

Not secure

Page 5 of 11

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.