|
| 1 | +============== |
| 2 | +Version 4.4.13 |
| 3 | +============== |
| 4 | + |
| 5 | +Version 4.4.13 of mod_wsgi can be obtained from: |
| 6 | + |
| 7 | + https://codeload.github.com/GrahamDumpleton/mod_wsgi/tar.gz/4.4.13 |
| 8 | + |
| 9 | +For details on the availability of Windows binaries see: |
| 10 | + |
| 11 | + https://github.com/GrahamDumpleton/mod_wsgi/tree/master/win32 |
| 12 | + |
| 13 | +Bugs Fixed |
| 14 | +---------- |
| 15 | + |
| 16 | +1. The pip installable 'mod_wsgi' package was failing to install on |
| 17 | +OpenShift and Heroku as ``mod_wsgi-apxs`` isn't used for tarball based |
| 18 | +installs. |
| 19 | + |
| 20 | +Features Changed |
| 21 | +---------------- |
| 22 | + |
| 23 | +1. For ``mod_wsgi-express``, only the web server type is now shown in the |
| 24 | +server tokens sent back in the ``Server`` response header. This prevents |
| 25 | +users from knowing any specifics and thus using that to determine possible |
| 26 | +vulnerabilities. |
| 27 | + |
| 28 | +New Features |
| 29 | +------------ |
| 30 | + |
| 31 | +1. Set environment variables from ``apachectl`` for ``mod_wsgi-express`` |
| 32 | +about the server environment which can be used in additional Apache |
| 33 | +configuration included into the generated configuration. The environment |
| 34 | +variables are: |
| 35 | + |
| 36 | +* *MOD_WSGI_SERVER_ROOT* - This is the directory where the generated |
| 37 | + configuration files, startup scripts, etc were placed. |
| 38 | +* *MOD_WSGI_WORKING_DIRECTORY* - This is the directory which will be used |
| 39 | + as the current working directory of the process. Would default to being |
| 40 | + the same as ``MOD_WSGI_SERVER_ROOT`` if not overridden. |
| 41 | +* *MOD_WSGI_LISTENER_HOST* - The host name or IP on which connections are |
| 42 | + being accepted. This should only be used if the Apache configuration |
| 43 | + variable ``MOD_WSGI_WITH_LISTENER_HOST`` is defined. |
| 44 | +* *MOD_WSGI_HTTP_PORT* - The port on which HTTP connections are being accepted. |
| 45 | +* *MOD_WSGI_HTTPS_PORT* - The port on which HTTPS connections are being |
| 46 | + accepted. This should only be used if the Apache configuration variable |
| 47 | + ``MOD_WSGI_WITH_HTTPS`` is defined. |
| 48 | +* *MOD_WSGI_MODULES_DIRECTORY* - The directory where the Apache modules are |
| 49 | + installed. |
| 50 | +* *MOD_WSGI_RUN_USER* - The user that the WSGI application will be run as. |
| 51 | +* *MOD_WSGI_RUN_GROUP* - The group that the WSGI application will be run as. |
| 52 | + |
| 53 | +2. Added ``X-Client-IP`` to list of possible trusted headers indicating the |
| 54 | +true remote address of client when passing through a proxy. |
0 commit comments