News§
Most recent updates (to get them automatically, subscribe to our RSS feed):
Unit 1.36.0 Released §
Security and correctness hardening — config NUL/empty rejection, rootfs mount TOCTOU, proxy response-smuggling, libunit/Java bounds; SIGQUIT graceful stop; wasmtime 36. Two advisories: GHSA-768w-qrh2-jjvh and GHSA-g6v8-r577-76jm.
Unit 1.35.5 Released §
Promote chunked_transform out of experimental (auto-convert chunked request bodies to Content-Length); fix a TLS SSL_write busy-loop on peer close; plug cert/script-store and port-machinery memory/fd leaks; upgrade njs to 0.9.8.
Unit 1.35.4 Released §
Fix router CPU spin and connection hang under port scanning load; reduce default HTTP keep-alive idle_timeout to 30s.
Unit 1.35.3 Released §
Migrate contrib mirror to packages.freeunit.org; upgrade njs to 0.9.6, libunit-wasm to 0.5.0, wasmtime to 43; add Java 17 and 21; eliminate QEMU for ARM64 CI builds; bump Rust to 1.94.1.
Unit 1.35.2 Released §
Bug-fix release — PHP workers in TrueAsync mode now shut down cleanly on quit signal; fix builds against PHP versions without pre_request_init; fix Ruby clang-ast CI on debian:testing.
Unit 1.35.1 Released §
First FreeUnit release — Docker images on GHCR, trixie base images, PHP 8.4/8.5 and Python 3.14 in CI, OpenSSL 3.6 CI, community fork rebrand.
Unit 1.35.0 Released §
HTTP compression, PHP 8.5 and Ruby 3.4 support, Django 5.x and Python Litestar WebSockets compatibility, GCC 15 support, security fix for Java WebSocket CPU exhaustion (CVE-2025-1695).
You can also browse our archives: