OpenResty 1.21.4.2 Released

Johnny Wang , 19 Jul 2023 (created 19 Jul 2023)

We are happy to announce the new formal release, 1.21.4.2, of the OpenResty web platform based on NGINX and LuaJIT.

Download this version here.

The (portable) source code distribution, the Win32/Win64 binary distributions, and the pre-built binary Linux packages for Ubuntu, Debian, Fedora, CentOS, RHEL, Alpine, OpenSUSE, Amazon Linux, Rocky Linux, Oracle Linux, and CBL Mariner are provided on this Download page.

Version Highlights

LuaJIT
- Avoid negation of signed integers in C that may hold INT*_MIN, since recent C compilers 'take advantage' of the undefined behavior, this completely changes the meaning of expressions like (k == -k).
- Correct fix for stack check when recording BC_VARG.
- Fix trace join to BC_JLOOP originating from BC_ITERN.
- Fix math.floor() and math.ceil().
- Many fixes imported from Mike Pall's upstream https://github.com/luajit/luajit repository.
Fixed a bug that uses memory after free when encountering an invalid IF-Match request header. Thanks to Michal Jeczalik Jr, Nishant Hooda and Kong Inc for reporting this issue.
Implemented monotonic_msec() and monotonic_time() in resty.core.time.
Apple Silicon FFI ABI limitation workaround.
Reimplemented tcpsock:sslhandshake, coroutine wrapper, and ngx.req.is_internal with FFI.
SSL/TLS supports passphrase protected private key.
Fixed a segmentation fault when get headers via ngx.req.raw_header with malformed requests.
Fixed potential null pointer dereference.
lua-cjson module
- empty_array can not work on Apple because cjson did not compare light userdata address with masked address. Since we used json_lightudata_mask when creating lightuserdata, same mask should be applied when comparing the return of touserdata.
headers-more-nginx-module module
- Fixed crash while accessing uninitialized pointer.
lua-resty-websocket module
- Added mtls client cert support.
lua-resty-memcached module
- Implemented init_pipeline(), commit_pipeline(), and cancel_pipeline().

Full Change logs

Complete change logs since the last (formal) release, 1.21.4.1, can be browsed in the page Change Log for 1.21.4.x.

Testing

We have run extensive testing on our Amazon EC2 test cluster and ensured that all the components (including the Nginx core) play well together. The latest test report can always be found here:

https://qa.openresty.org/

We also always run our OpenResty Edge commercial software based on the latest open source version of OpenResty in our own global CDN network (dubbed "mini CDN") powering our openresty.org and openresty.com websites. See https://openresty.com/ for more details.

Community Support

See the Community Page.

Commercial Support

Commercial technical support and real-time noninvasive online monitoring and profiling solution is provided through the official OpenResty XRay product.