rubygem-passenger-6.0.1-bp154.1.115

- updated to version 6.0.1 (boo#1121748)
  * Adds Ubuntu 18.10 "Cosmic" packages.
  * Skips trying to set oom score in LXC container environments.
    Closes GH-2143.
  * Fixes an issue during the GLS startup handshake where ephemeral
    ports could be exhausted. Closes GH-2144.
  * Updated Ruby versions used in precompiled binaries (used for
    e.g. gem installs) to include 2.5.3, and 2.4.5 (removed: 2.4.4).
  * Bumps the preferred Nginx version to 1.15.8.
  * Updated various library versions used in precompiled binaries
    (used for e.g. gem installs):
  - Curl: 7.62.0 -> 7.63.0
  - Git: 2.19.2 -> 2.20.1
  - Gnupg: 2.2.11 -> 2.2.12
  - libassuan: 2.5.1 -> 2.5.2
  - libgpg_error: 1.32 -> 1.33
  - Ruby: 2.4.4 -> 2.4.5, + 2.5.3
  - RubyGems: 2.7.6 -> 3.0.1

- updated to version 6.0.0 (boo#1117900)
  * Introduces support for *all* programming languages. Yes that's
  right... Java, Elixir, Go — Passenger now supports them all!
  This effort is called "generic language support".
  * Bumps the preferred Nginx version to 1.15.7.
  * Introduces anonymous usage telemetry, which helps us improve
  Passenger. Please read the docs on what data is collected and
  how to disable this.
  * [Nginx] Introduces a new option "passenger_request_buffering on|off",
  to allow disabling request body buffering. This is only supported
  in Nginx >= 1.15.3. Closes GH-2121.
  * Updated various library versions used in precompiled binaries
  (used for e.g. gem installs):
  - OpenSSL: 1.0.2q (was: 1.0.2p)
  - libcurl: 7.62.0 (was: 7.61.1)
  - Ruby: 2.3.8 (was: 2.3.7)

- updated to version 5.3.7 (boo#1115545)
  * Fixes package installation issues on Ubuntu 18.04. These issues
  were caused by an update released by Ubuntu on the nginx-common
  package. Closes GH-2122, GH-2140.
  * Fixes compilation problems and warnings with GCC 8.2. Tested on
  Alpine Linux edge 2018-11-05. Closes GH-2139.
  * Fixes compatibility with libcurl 7.62.0. Contributed by
  Po-Chuan Hsieh (@sunpoet).
  * Changes minimum supported macOS version to 10.11 El Capitan.
  * Removes packages for Ubuntu 17.10 Artful.

- updated to version 5.3.6 (boo#1114735)
  * Fixes smart spawning. A regression in 5.3.5 (due to a refactoring) made it so that Passenger only used the direct spawning method. This issue was mostly noticeable in the form of increased process spawning times between 5.3.4 and 5.3.5.
  * Fixes Passenger Core and application processes staying on the Watchdog's OOM score (unkillable). Closes GH-2105.
  * Fixes "mach_vm_map failed" warnings on macOS >= High Sierra. These warnings were harmless, but annoying. Closes GH-2101.
  * Fixes `passenger-config compile-agent` compilation with optimizations. The optimization flags were not properly passed to the compiler.
  * Fixes a crash that could occur when HTTP clients send a chunked transfer-encoding body containing a chunk larger than 429496729 bytes.
  * Improves detection of the system Apache's include headers on macOS High Sierra and later.
  * Fixes RVM gemset detection on RVM 1.29.
  * No longer supplies precompiled Ruby extensions for Ruby 1.9.3 and 2.0.0. When running Ruby 1.9.3 and 2.0.0, Passenger will attempt to compile from source instead.
- changed suse.patch to apply again
- changed fix_shebangs.patch to apply again

- updated to version 5.3.5
  * Fixes Ubuntu 18.04 package installation problems due to Nginx
    version mismatch. Closes GH-2122.
  * Improves usability of crash reports. Crash reports are no
    longer dumped in one big chunk to stderr. Instead, they are
    now dumped into multiple files, making it easy to inspect
    relevant reports.
  * Fixes some crashes that only occur with log level 7.
  * Downloads binaries from the newly-introduced Github mirror.
    This improves the reliability of binary downloads.
  * Updated various library versions used in precompiled binaries
    (used for e.g. gem installs):
  - OpenSSL: 1.0.2p (was: 1.0.2o)
  - libcurl: 7.61.1 (was: 7.60.0)

- updated to version 5.3.4
  * Fixes a crash during startup on FreeBSD 11.2 and recent OpenBSD versions due to C++11 compatibility issues in the code. Closes GH-2097.
  * Updates Boost to version 1.67.0.
  * [Apache] Fixes the handling of HTTP requests with chunked bodies in combination with `PassengerBufferUploads off`. Closes GH-2102

- updated to version 5.3.3
  * [Apache, Nginx] Fixes the passenger-install-*-module scripts. (Regression in 5.3.2) Closes GH-2093.
  * [Nginx] Fixed nginx module building on CentOS 6. Closes GH-2081. Thanks to defanator for contributing this.

- updated to version 5.3.2
  Release 5.3.2
  - ------------
  This release contains many security updates. Users are advised to upgrade as soon as possible. See our blog for more information on the vulnerabilities.
  * [Nginx] Fixes CVE-2018-12029, a local privilege escalation vulnerability in the Nginx module that occurs when `passenger_instance_registry_dir` is configured to a directory with insufficiently strict permissions.
  * Fixes CVE-2018-12026, 12027, and 12028. These are local denial of service, local information disclosure and local privilege escalation vulnerabilities that could be exploited by malicious applications or malicious users on the system.
  * Updated various library versions used in precompiled binaries (used for e.g. gem installs):
  - OpenSSL (Linux only): 1.0.2o (was: 1.0.2k; on macOS it was already 1.0.2o)
  - GeoIP: 1.6.12 (was: 1.6.11)
  - libcurl: 7.60.0 (was: 7.56.1)
  * Fixes Meteor support in non-bundled mode (regression from 5.3.0). Closes GH-2082.
  * Fixes the fact that the error page (which is shown when an app fails to spawn) sometimes contains unsufficient analysis details about the app.
  * [Apache] Fixes PassengerMaxInstancesPerApp not being respected (regression from config refactor in 5.2.0). Closes GH-2059.
  * [Enterprise, Apache] Fixes PassengerMaxInstances not being respected (regression from config refactor in 5.2.0).
  * [Enterprise] Fixes passenger-irb being unable to connect to an app process (regression from 5.3.0). Closes GH-2087.
- Change suse.patch to apply again

- updated to version 5.3.1
  Release 5.3.1
  - ------------
  * Fixes a regression from 5.3.0: a crash that occurs if the user that an application should run under, does not have a shell configured. Closes GH-2078.
  * Fixes a regression from 5.3.0: setting supplementary group IDs during user switching. Closes GH-2077.

- updated to version 5.3.0
  Release 5.3.0
  - ------------
  * Adds Ubuntu 18.04 "Bionic" packages.
  * Removes packages for Debian 7 "Wheezy" (EOL May 2018).
  * Vastly improves spawning error page: quick overview of where the problem is, and the option to drill down in extensive troubleshooting information.
  * Fuse Panel support: fixes a crash that occurs when you shut down Passenger right after it fails to connect to Fuse Panel.
  * [Nginx] Updates the preferred Nginx version to 1.14.0 (from 1.12.2).
  * [Apache] Updates the recommended package for apache dev headers on debian >= 9.4. Closes GH-2048.
  * [Enterprise] Fix licensing proxy warning to refer to licensing_proxy_url instead of licensing_proxy.
  * [Enterprise] Add new `PassengerAppLogFile` (Apache) / `passenger_app_log_file` (Nginx) config option to specify a file for app-specific logs. Closes GH-1279.
  - Change suse.patch to apply again

- mention `series` in spec file
- mention `rubygem-passenger-rpmlintrc` in spec file

- updated to version 5.2.3
  Release 5.2.3
  - ------------
  * Fuse Panel support: fixes a few bugs with handling small log files and with apps that don't output any messages.
  * Python app support: fixes a Python 3 compatibility issue w.r.t. writing data over the socket.
  * macOS support: fixes a crash in the `passenger-config compile-nginx-engine` command which only occurs on macOS >= 10.13. This crash was caused by a missing `require` call in our code, and affects users who compile Passenger from source, e.g. users of the Passenger Enterprise Homebrew formula.
  * Fixes a small memory corruption issue (dangling pointer) in the ApplicationPool subsystem.
  * Improves support for the $TMPDIR environment variable by removing leftover hardcoded references to /tmp. Closes GH-2052.
  * Updated PCRE version to 8.42 (was: 8.41) across the board.
  Release 5.2.2
  - ------------
  * Adds an option for dumping the web server config manifest to a given file: `PassengerDumpConfigManifest` (Apache) / `passenger_dump_config_manifest` (Nginx). This option is mostly useful for Passenger developers.
  * [Nginx] Fixes support for configurations that have two `passenger_base_uri` options in a single virtual host, without corresponding `passenger_app_group_name` and `passenger_app_root` directives. Closes GH-2043.
  * [Enterprise] Improved support for RAM-based pricing on Heroku (now using officially recommended memory limit reporting via CGROUP).
  Release 5.2.1
  - ------------
  * Fixes a regression from 5.1.11 that prevented Passenger from compiling on FreeBSD in some cases. Closes GH-2031.
  * Fixes a bounds issue in printing an error message that could occur in some cases when spawning a child process fails. Issue was present from 5.1.11.
  * Fixes a regression from 5.2.0 which prevented setting the max pool idle time to 0. Closes GH-2020.
  * Warns if using an incompatible compiler on macOS < 10.13. Closes GH-2017.
  * No longer uses Security Framework on macOS 10.13+. This will prevent further keychain warnings from appropriately compiled Passengers.
  * Fixes warning on macOS about /proc/self access (excluded some code that was intended only for Linux).
  * `passenger-install-nginx-module` now downloads the preferred Nginx version via https. Thanks to smiba for pointing this out.
  * [Apache] Fixes a regression from 5.2.0 that caused a crash on startup when no top-level ServerName is set. Closes GH-2029.
  * [Enterprise] Adds support for using RAM-based pricing on Heroku.
  Release 5.2.0
  - ------------
  * [Apache] Breaking change: to avoid configuration ambiguity, options that act on a per-process level (rather than per-request level) can no longer be used in .htaccess. See the Passenger Library -> configuration -> intro for more info (https://www.phusionpassenger.com/library/config/apache/intro.html#global-per-application-and-per-request-options).
  * [Apache] Breaking change: the option PassengerResolveSymlinksInDocumentRoot has been removed (old Passenger 2 compatibility option, see PassengerAppRoot for new method).
  * [Apache] Option handling has been refactored to avoid silent conflicts and errors: warnings are now generated for global config options in <VirtualHost> (they conflict between VHosts) and per-application options in <Files>, <FilesMatch> and <If> (silently failed before).
  * [Apache] Fixes compilation issues on some systems with macOS 10.13 High Sierra (in addition to the fixes from 5.1.11).
  * [Enterprise] Fixes two unnecessary warnings about failure to contact the licensing server, one occurring since version 5.1.8 ("3 days out of contact"), the other since 5.1.11 + Apache ("failure to contact").
  * [Nginx] Fixes the default for the `passenger_app_group_name` to start with the `passenger_app_root` rather than the document root (the end remains the same: `passenger_app_env`).
  * [Standalone] Adds command line support for `start_timeout` in Passenger Standalone (also removes unnecessary warning when using it in `Passengerfile.json`).
  * [Standalone, Nginx] Waits for Nginx to exit before cleaning up temp dir (started happening more since the switch to Nginx graceful shutdown in 5.1.6). Closes GH-1970.
  * Deprecated options for Union Station.
  * Ruby 2.5 compatibility: handle case where an exception's backtrace may be nil. Closes GH-2011.
  * Adds JSON mime type for static file serving. Closes GH-2018.
  * Removes packages for Ubuntu 17.04 "Zesty" (EOL 13-jan-2018).
- Add fix_shebangs.patch:
  * Required to fix the package building because we don't allow /usr/bin/env shebangs.
- Change suse.patch to apply again

- updated to version 5.1.12
  * Changes the Debian/Ubuntu install script to completely restart Apache upon upgrade. This prevents issues due to a "half upgraded" state (old Passenger Apache module + new Passenger core). Closes GH-2000.
  * Adds Ubuntu 17.10 "Artful" packages.
  * Fixes a case in which -- when Passenger is configured with user switching turned off -- it is unable to open the web server log file and aborts during startup. This regression was introduced in 5.1.8. Closes GH-1990.
  * [Nginx] The preferred Nginx version is now 1.12.2
  * [Nginx] The preferred PCRE version is now 8.41 (previously 8.39).
  * [Standalone] Adds support for using `start_timeout` in Passengerfile.json.
  * [Enterprise] Uses libuv to detect total system RAM, allows for compilation on pre-10.11 macOS.
  * [Enterprise] Added a max request queue time option, to limit time requests spend in the request queue. Closes GH-1688.
  * Updated libcurl version used in precompiled binaries (used for e.g. gem installs) to 7.56.1 (was: 7.54.1).
  * Updated OpenSSL version used in precompiled binaries (used for e.g. gem installs) to 1.0.2m (was: 1.0.2l).
  * Updated PCRE version used in precompiled binaries (used for e.g. gem installs) to 8.41 (was: 8.40).
  * Updated Ruby versions used in precompiled binaries (used for e.g. gem installs) to include 2.1.10, 2.2.8, 2.3.5, and 2.4.2 (removed: 2.1.9, 2.2.7, 2.3.4, and 2.4.1).

- drop upstream merged patch fix-undeclared-isnan.patch to fix build
- add openssl build dependency

- updated to version 5.1.11
  see installed CHANGELOG
  Release 5.1.11
  - -------------
  * [Apache] Fixes a race condition (segfault) on startup, which primarily affected macOS hosts (regression in 5.1.8 due to the logging improvements). Closes GH-1973.
  * [Apache] Fixes compilation on macOS 10.13 High Sierra.
  * [Nginx] It is now allowed to specify `passenger_enabled` in the `http` context as well.
  * [Nginx] Namespaced Jsoncpp under the Passenger namespace to avoid collisions with Google Pagespeed's copy when linked into Nginx.
  * [Standalone] Enables HTTP/2 support in the Nginx template. Support is only active if SSL is used, to avoid potential issues with HTTP/2 on HTTP ports. Closes GH-1945.
  * [Enterprise, Standalone] Adds a new feature that is especially useful on Heroku: deferred port binding. When `--defer-port-binding` is set, Passenger does not listen on the given port until the application has finished spawning. If the application starts slowly then this mechanism can prevent the Heroku request timeout from killing the dyno (the boot timeout still applies).
  * [Enterprise, Standalone] Fixes duplicate warnings when Passengerfile.json contains errors.
  * [Standalone] `passenger start` now accepts the `--start-timeout` configuration option.
  * Adds support for Bundler 2.0's new `gems.rb` and `gems.locked`. Learn more about these in [Gemfile's new clothes](https://depfu.com/blog/2017/09/06/gemfiles-new-clothes). Closes GH-1982.
  * Removes Debian packages for Ubuntu 12.04 Precise.
  * Fixes compilation warnings on macOS + Clang 9.0.
  * Introduces a new check that logs a vulnerability warning if Passenger is run with root permissions while the directory permissions of (parts of) its root dir allow modifications by non-root users.
  * Fixes an arbitrary file read vulnerability (if Passenger is running as root and the attacker has access to a user account that hosts an application).
  Release 5.1.10
  - -------------
  * This was an Enterprise-only hotfix release (no changes in Passenger Open Source).
  Release 5.1.9
  - ------------
  * This was an Enterprise-only hotfix release (no changes in Passenger Open Source).
  Release 5.1.8
  - ------------
  * Introduces a shorter and more informative log format. The new format significantly shortens the thread ID, and includes the message's log level (critical, error, warning, notice, etc) so that users can more easily filter out uninteresting messages.
  * [Nginx] The Phusion Nginx APT package is upgraded to Nginx version 1.12.1 (previously pinned at 1.10.3 while waiting for a compatible lua module release).
  * [Standalone] Automatically uses Nginx to serves static asset URLs that conform to the [webpacker](https://github.com/rails/webpacker) gem's format. Closes GH-1966.
  * [Standalone] If configured to listen on a Unix domain socket, properly cleans up this socket on Nginx shutdown. Fixes a regression from 5.1.6. Closes GH-1969.
  * [Standalone] Fixes the `--max-requests` option when using the builtin engine. Fixes a regression from 5.1.4.
  * [Enterprise] Fixes a potential use-after-free bug when reporting usage data to the Phusion licensing server. This bug only occurs when Passenger Enterprise is running inside a container.
  Release 5.1.7
  - ------------
  * Fixes compilation problems on some systems.
  * Upgrades the JSON parser (json-cpp) to version 1.8.1. This makes parsing slightly faster, adds various security checks and fixes some JSON generation issues.
  * [Enterprise] Fixes an SSL certificate issue in the license usage data reporter, which only occurs when Passenger Enterprise installed from gem or tarball. The license usage data reporter now searches for the correct system CA path.
  * [Enterprise] Fixes a potential use-after-free bug when reporting usage data to the Phusion licensing server, and improves reliability of usage data recording.
  Release 5.1.6
  - ------------
  * Fixes a typo that causes a looping crash when long security update information is sent by the server. In practice we will keep the messages shorter to avoid triggering this until there has been ample time to upgrade.
  * Fixes unnecessary process respawn if it was detached and min_instances is set to 0. Closes GH-1735.
  * Introduces APT packages for Debian 9 "Stretch", with Passenger built as dynamic module. Closes GH-1960.
  * Changes APT packages for Ubuntu 17.04 "Zesty" from static to dynamic module.
  * [Standalone] Now uses graceful shutdown for the Nginx engine under the hood (requested as part of GH-1598). Thanks to PikachuEXE for contributing this.
  * [Standalone] Fixes a memory corruption issue in the builtin engine. The issue was introduced in 5.1.5 (settings handling refactoring).
  * [Standalone] Cleanup the temp dir before aborting when startup cannot continue, e.g. when Passenger is already running. Closes GH-1953.
  * Fixes WSGI crash with Python 3 and non-ASCII characters in headers or the URL. Closes GH-1935. Thanks to n4nn31355 for the assistance.
  * [Nginx] The preferred Nginx version is now 1.12.1 (previously 1.10.3), except for the Phusion Nginx APT package, which is pinned at 1.10.3 until an 1.12.x compatible lua module becomes available.
  * [Nginx] Fixes CVE-2017-7529, an integer overflow vulnerability in the Nginx range filter module. This is accomplished by upgrading to Nginx 1.12.1, or applying the patch (Phusion Nginx APT package).
  * Updated libcurl version used in precompiled binaries (used for e.g. gem installs) to 7.54.1 (was: 7.54.0).
  * Updated OpenSSL version used in precompiled binaries (used for e.g. gem installs) to 1.0.2l (was: 1.0.2k).
  * Updated GeoIP version used in precompiled binaries (used for e.g. gem installs) to 1.6.11 (was: 1.6.9).
  * Updated PCRE version used in precompiled binaries (used for e.g. gem installs) to 8.40 (was: 8.39).
  * Adds support for building with MacPorts' OpenSSL. Closes GH-1959.
  Release 5.1.5
  - ------------
  * Updated Boost to version 1.64.0, which fixed a compilation issue on certain Gentoo based setups. Closes GH-1942.
  * Improved the error message shown when an app fails to start in time.
  * [Apache] Remove option to configure PassengerAppGroupName from .htaccess because, assuming AllowOverride Options is set, malicious users (having an account on the same server) can sometimes collide app group names of other users and capture their traffic.
  * Major internal refactoring of settings handling, to prepare for supporting settings changes without restart.

- updated to version 5.1.4
  see installed CHANGELOG
  Release 5.1.4
  - ------------------------------
  * Updated zlib version used in building precompiled binaries (used for e.g. gem installs) to 1.2.11 (was: 1.2.8).
  * Updated openssl version used in building precompiled binaries (used for e.g. gem installs) to 1.0.2k (was: 1.0.2j).
  * Updated curl version used in building precompiled binaries (used for e.g. gem installs) to 7.54.0 (was: 7.51.0).
  * Added support for rbenv when building precompiled binaries (passenger_binary_build_automation submodule).
  * Fixes issue when building precompiled binaries (used for e.g. gem installs) found in release 5.1.3.
  * Added Ruby 2.4.1 precompiled native extension.
  Release 5.1.3
  - ------------------------------
  * [Standalone] Fixes `install-standalone-runtime` command after regression in 5.1.2.
  * Removes unnecessary logging of "No Error" from macOS Security Update Checker.
  * Adds support for compiling against the built-in Apache installation supplied with macOS 10.12 Sierra. Previous versions of Passenger failed because macOS Sierra's Apache installation is incomplete and does not supply the apr-config tool. We now work around this by using hardcoded default values for macOS.
  * Don't output colorized text during dependency check when output isn't a TTY, unless forced. Closes GH-1902.
  * [Nginx] The preferred Nginx version is now 1.10.3 (previously 1.10.2).
  * Adds Ubuntu 17.04 "Zesty" packages.
  * [Enterprise] Fixes `send-cloud-usage` command when Passenger is installed from gem.
  * [Enterprise] Improves robustness of machine properties reporting for pay-as-you-go cloud-license holders.
  * [Enterprise] Adds support for reporting available RAM, and CONTAINER_HOST_IDENTIFIER envvar, to support RAM-based pricing model.
  * Added additional debug level logging for troubleshooting issues with bash scripts. Closes GH-1928.
  * Revert private keychain use in the Security Update Checker when run as root on macOS, in order to avoid changing the default System Keychain. Closes GH-1922. Remove Cert and Key from keychain separately, to avoid errors when clearing the client certificate.
  * Fix missing openssl check in `passenger-install-apache2-module` dependency checker. Closes GH-1934.

- updated to version 5.1.2
  see installed CHANGELOG
  Release 5.1.2
  - ------------
  * Improve curl check for passenger-install- scripts to catch (very old) curl versions that won't compile against 5.1+.
  * Fixes remaining false positives (logging) from the new Meteor cluster warning system. Closes GH-1905.
  * Create a private keychain on macOS when the system keychain is defaulted to, this avoids a permissions issue with the system keychain when performing the Security Update Check. This is necessary because the system keychain is the default keychain of daemon users and root on macOS.
  * Improve `passenger-memory-stats` to include JRuby processes that fail to rename as expected. Closes GH-1878.
  * [Standalone] Don't download or compile Nginx when using the builtin engine. Closes GH-1910.
  * [Standalone] Fixes `--nginx-tarball` option of `passenger start` and `passenger-config install-standalone-runtime` (wasn't working). Also verifies that `--nginx-version` is explicitly specified as it should be.
  Release 5.1.1
  - ------------
  * The precompiled version of the PassengerAgent binary (used for e.g. gem installs) now configures (statically linked) libcurl with system keystore, so that the new security update check can successfully validate certs.
  * Fixes some false positives (logging) from the new Node and Meteor cluster warning system. Logging is less repetitive and has extra debug info. Closes GH-1905.
  * Updates the upload-progress module in the Nginx Debian package. The module version that we linked against in 5.1.0 was 0.9.2, but due to a bug in that version the module didn't work.
  * The security update check now reports whether libcurl + SSL backend are statically linked to Passenger, in which case the check also needs to warn about relevant OpenSSL vulnerabilities in the linked library.
  * Increases the allowed line lengths emmited by apps at startup.
  * Adds support for the unary 'not' operator in the Union Station filter language.
  * [Enterprise] Add missing flying-passenger integration mode to security update check.
  * Fixes support for Rails 5.0.1 Action Cable. Specifically, we now support the `options` argument in the `write_nonblock` method in hijacked Rack IO sockets.
  * [Apache] Introduces a small delay to prevent running the Security Update Checker twice at startup.
  Release 5.1.0
  - -------------
  * Upgrades union_station_hooks_core to version 2.1.2.
  * [Enterprise] When running a Rails app in multithreaded mode, Passenger Enterprise automatically tags Rails logs with the current thread number. This makes it possible to distinguish logs generated by different threads.
  * Fixes permissions issue on Linux when setting OOM score after lowering privileges. Closes GH-1858.
  * [Standalone] Allows raw json envvars in Passengerfile.json. Closes GH-1837.
  * [Standalone] Make the `max_requests` option available on the command line as well.
  * Fixes unaligned memory access in base64 decoder on platforms that have strict aliasing requirements (non x86/x86_64). Closes GH-1646.
  * Introduces daily Passenger security update check to warn (error log) if there are newer Passenger versions with important security fixes (describing what was discovered, what is affected, which version has the fix).
  * Fixes compilation on Linux when a non-glibc C library is in use. Closes GH-1870.
  * `passenger-install-nginx-module` and the standalone compiler now add the http v2, realip and addition module flags for Nginx (just like the APT/RPM/autobuilder already had). Closes GH-1788.
  * [Apache] Fixes PassengerShowVersionInHeader option. Thanks to Sebastian Welther for contributing this.
  * Passenger now reports when you try to use Node.js or Meteor clustering, and tries to continue with just a nonfunctional shim in place, so that if your code uses the clustering APIs your app may still work.
  * Updates libev config.sub and config.guess to support newer platforms such as the IBM power 8.
  * Fixes an issue where passenger-config couldn't restart an app if the TMPDIR variable was set to /tmp
  * `passenger-install-apache-module` now suggests the correct apache package on Ubuntu Xenial. Closes GH-1884.
  * [Standalone] The TempDirToucher will now spend most of its time with reduced privileges, except when it's actively touching files. This allows it to be killed when Passenger is quit in most circumstances. Closes GH-1678.
  * Fixes a file overwrite vulnerability caused by a predictable temporary file being written by `passenger-install-nginx-module`. Thanks to Jeremy Evans for reporting this.
  * [Standalone] Fixes starting Passenger as a non-extant user. Closes GH-1849.
  * Improved look of the error pages for failing to spawn an application (development & production mode), and Error ID is now also shown in production mode.
  * [Standalone] Enable ipv6 support by default in builtin nginx. Closes GH-1873.
  * [Nginx] Updates to APT package builder (Debian & Ubuntu) with fix for www-data to root privilege escalation via log file handling (CVE-2016-1247/USN-3114-1).
  * [Nginx] Updates to RPM package builder (CentOS & RHEL) with fix for 1.10.x system nginx package overriding the nginx from the Passenger repo. Closes GH-1895.
  * [Nginx] The preferred Nginx version is now 1.10.2 (previously 1.10.1).
  * RPM pkg builder fix for breaking SELinux change in RHEL 7.3.
  * RPM pkg builder fix for RHEL6/CentOS6 incompatibility and replacement in Passenger.
  * Adds Ubuntu 16.10 "Yakkety" packages.

- updated to version 5.0.30
  see installed CHANGELOG
  Release 5.0.30
  - -------------
  * Changes mbuf block size from 512 to 4096 bytes to better fit modern requests and significantly speed up disk buffering.
  * [Nginx] Fixes PCRE checksum after the preferred version update in 5.0.29 (contributed by: clemensg).
  * [Apache] Fixes buffer limit crash on large file upload (when core disk buffer can't keep up with client for some time), and limits per-client buffer memory usage to 130 KB. Closes GH-1620.
  * Fixes potential hang when an UnseekableSocket gets serialized to json. Closes GH-1838.

- updated to version 5.0.29
  see installed CHANGELOG
  Release 5.0.29
  - -------------
  * Fixes the FreeBSD build breaking due to the `-ldl` flag introduced by the LVE integration patch (5.0.28). Closes GH-1805.
  * Fixes per-application interpreter override (ruby, node, python) being ignored in mass deployment mode. Closes GH-1818.
  * Fixes incomplete refactor from 5.0.27 that could, under specific conditions, lead to a Passenger crash. Closes GH-1794.
  * [Apache] Remove unused code that caused a crash in configurations with thousands of VirtualHost entries. Closes GH-1676.
  * [Nginx] Fixes use of invalid logfile name (memory already released) in backup log redirection code. Possibly related to GH-1774.
  * [Nginx] The preferred Nginx version is now 1.10.1 (previously 1.10.0).
  * [Nginx] The preferred PCRE version is now 8.39 (previously 8.34).
  * [Standalone] Passenger Standalone now supports /dev/stdout and /dev/stderr as log file path (via `--log-file` or Passengerfile.json). This is especially useful in Docker containers. In previous versions logging to those paths did not work, resulting in nothing getting logged at all.

- add fix-undeclared-isnan.patch (from https://github.com/boostorg/math/commit/fbd1393858719c7bda7d251f742950c1bc691ea8)