stable-v5-1.0.72

1. Updated certificates package on stack to address issues of expiring certificates such as LetsEncrypt (PR: #473)

stable-v5-3.0.69

1. Updated default ruby versions and their dependencies (PR: #445)
2. Improvement of environment alerting by modifying collectd alerts for postgres (PR: #446)
3. Worker pool configuration for new instance types (PR #449)
4. Support for custom NodeJS using cookbooks (PR #450)

stable-v5-3.0.68

This release:

1. Removes old code around environment variables handling (PR: #439)
2. Updates Percona Server to the latest available versions (PR: #440)
3. Updates git to the latest available version (PR: #441)
4. Updates Python 2.7 to the latest available version (PR: #444)
5. Adds support for Aurora PostgreSQL (PR: #442)
6. Fixes environment variables for PHP applications (PR: #438)
7. Fixes a bug with configuring Aurora MySQL (PR: #443)

stable-v5-3.0.67

This version:

• Updates glibc and libidn versions to latest stable versions (PR - #434)
• Updates Percona-Server Version (PR - #435)
• Updates PostgreSQL versions (PR - #436)
• Sources env vars in DJ workers (PR - #437)

stable-v5-3.0.66

This version:

• Fixes CVE-2019-14287 in the sudo package. (PR - #428)
• Fixes logging of the real IP on custom networks (VPCs) (PR - #433)
• Upgrades to the latest installed versions of PHP. (PR - #430)

stable-v5-3.0.65

This version:

• Nginx is now correctly logging client IP on solo instances (PR - #429)
• Updates the default haproxy version. (PR - #431)
• Updates the default openssl version. (PR - #432)

stable-v5-3.0.64

This version:

• Bumps percona toolkit version to 2.2.20 (PR - #427)

• Updates to the latest available Ruby versions (2.4.9, 2.5.7, 2.6.5) (PR - #426)

• Changes the default passenger memory limit from 800MB to 250MB (PR - #425)

• Updates Logentries recipe to allow application logs to be easily added. (PR - #424)

• Updates the default PHP versions of PHP71 and PHP72 to v7.1.31 and v7.2.21 respectively. (PR - #422)

stable-v5-3.0.63

• Fixes typo in installation example of yarn README (PR - #421)

• Updates the functionality of the custom_ca_certs recipe to support the filtering of sensitive environment variables from the env.cloud file and therefore the application, for security. Existing users of the recipe will need to update their environment variable names to the new compatible format if update the recipe. (PR - #420)

• Updates the functionality of the custom_haproxy_ssls recipe to support the filtering of sensitive environment variables from the env.cloud file and therefore the application, for security. Existing users of the recipe will need to update their environment variable names to the new compatible format if update the recipe. Environments running stack version stable-v5-3.0.62 and above no longer need to overlay the haproxy cookbook files. (PR - #419)

• Memcached security update (PR - #418)

• Redis security update (PR - #417)

stable-v5-3.0.62

• Apply latest security updates to openssl (PR - #416)

• Apply latest security updates to nginx (PR - #415)

• Adds filtering for environmental variables to remove EY_ named vars (PR - #414)

• Apply latest security updates to openssh (PR - #413)

stable-v5-3.0.61

• Updates the net-misc/curl and dev-libs/gnutls packages to the latest versions. (PR - #411)

• Updates the dev-lang/php packages to the latest available patch versions. (PR - #410)

• Updates our dev-db/postgresql packages to the latest available versions. (PR - #409)

• Enables the latest versions for the dev-db/percona-server packages. (PR - #408)

• Adds support for Ruby with jemalloc enabled.
  It is available for Ruby 2.4, 2.5, and 2.6. To enable jemalloc for Ruby, set the environment variable EY_RUBY_JEMALLOC to true. (PR - #407)

New instances using this release will use the latest set of AMIs (2016.06.024.final) with the following notable updates:

• The latest package security updates are installed by default.
• The Linux kernel has been updated from 4.4.179 to 4.4.182.
      - This fixes known bugs and vulnerabilities.
      - The ENA driver has been updated to version 2.1.1.
      - This kernel comes with mitigations for Intel MDS attacks.
      - This kernel fixes SACK & MSS vulnerabilities.