Supervisor

Latest version: v4.2.5

Safety actively analyzes 628918 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 2 of 10

4.2.0

------------------

- When ``supervisord`` is run in the foreground, a new ``--silent`` option
suppresses the main log from being echoed to ``stdout`` as it normally
would. Patch by Trevor Foster.

- Parsing ``command=`` now supports a new expansion, ``%(numprocs)d``, that
expands to the value of ``numprocs=`` in the same section. Patch by
Santjago Corkez.

- Web UI buttons no longer use background images. Patch by Dmytro Karpovych.

- The Web UI now has a link to view ``tail -f stderr`` for a process in
addition to the existing ``tail -f stdout`` link. Based on a
patch by OuroborosCoding.

- The HTTP server will now send an ``X-Accel-Buffering: no`` header in
logtail responses to fix Nginx proxy buffering. Patch by Weizhao Li.

- When ``supervisord`` reaps an unknown PID, it will now log a description
of the ``waitpid`` status. Patch by Andrey Zelenchuk.

- Fixed a bug introduced in 4.0.3 where ``supervisorctl tail -f foo | grep bar``
would fail with the error ``NoneType object has no attribute 'lower'``. This
only occurred on Python 2.7 and only when piped. Patch by Slawa Pidgorny.

4.1.0

------------------

- Fixed a bug on Python 3 only where logging to syslog did not work and
would log the exception ``TypeError: a bytes-like object is required, not 'str'``
to the main ``supervisord`` log file. Patch by Vinay Sajip and Josh Staley.

- Fixed a Python 3.8 compatibility issue caused by the removal of
``cgi.escape()``. Patch by Mattia Procopio.

- The ``meld3`` package is no longer a dependency. A version of ``meld3``
is now included within the ``supervisor`` package itself.

4.0.4

------------------

- Fixed a bug where ``supervisorctl tail <name> stdout`` would actually tail
``stderr``. Note that ``tail <name>`` without the explicit ``stdout``
correctly tailed ``stdout``. The bug existed since 3.0a3 (released in
2007). Patch by Arseny Hofman.

- Improved the warning message added in 4.0.3 so it is now emitted for
both ``tail`` and ``tail -f``. Patch by Vinay Sajip.

- CVE-2019-12105. Documentation addition only, no code changes. This CVE
states that ``inet_http_server`` does not use authentication by default
(`details <https://github.com/Supervisor/supervisor/issues/1245>`_). Note that
``inet_http_server`` is not enabled by default, and is also not enabled
in the example configuration output by ``echo_supervisord_conf``. The
behavior of the ``inet_http_server`` options have been correctly documented,
and have not changed, since the feature was introduced in 2006. A new
`warning message <https://github.com/Supervisor/supervisor/commit/4e334d9cf2a1daff685893e35e72398437df3dcb>`_
was added to the documentation.

4.0.3

Not secure
------------------

- Fixed an issue on Python 2 where running ``supervisorctl tail -f <name>``
would fail with the message
``Cannot connect, error: <type 'exceptions.UnicodeEncodeError'>`` where it
may have worked on Supervisor 3.x. The issue was introduced in Supervisor
4.0.0 due to new bytes/strings conversions necessary to add Python 3 support.
For ``supervisorctl`` to correctly display logs with Unicode characters, the
terminal encoding specified by the environment must support it. If not, the
``UnicodeEncodeError`` may still occur on either Python 2 or 3. A new
warning message is now printed if a problematic terminal encoding is
detected. Patch by Vinay Sajip.

4.0.2

Not secure
------------------

- Fixed a bug where inline comments in the config file were not parsed
correctly such that the comments were included as part of the values.
This only occurred on Python 2, and only where the environment had an
extra ``configparser`` module installed. The bug was introduced in
Supervisor 4.0.0 because of Python 2/3 compatibility code that expected
a Python 2 environment to only have a ``ConfigParser`` module.

4.0.1

Not secure
------------------

- Fixed an issue on Python 3 where an ``OSError: [Errno 29] Illegal seek``
would occur if ``logfile`` in the ``[supervisord]`` section was set to
a special file like ``/dev/stdout`` that was not seekable, even if
``logfile_maxbytes = 0`` was set to disable rotation. The issue only
affected the main log and not child logs. Patch by Martin Falatic.

Page 2 of 10

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.