Update from 4.0.50 to 4.0.52:

o) www/rubygem-passenger;
o) third-party modules for www/nginx and www/nginx-devel.

<ChangeLog>

* Fixed a null termination bug when autodetecting application types.
* Node.js apps can now also trigger the inverse port binding mechanism by passing `'/passenger'`
  as argument.  This was introduced in order to be able to support the Hapi.js framework.
  Please read
  http://stackoverflow.com/questions/20645231/phusion-passenger-error-http-server-listen-was-called-more-than-once/20645549
  for more information regarding Hapi.js support.
* It is now possible to abort Node.js WebSocket connections upon application restart.
  Please refer to
  https://github.com/phusion/passenger/wiki/Phusion-Passenger:-Node.js-tutorial#restarting_apps_that_serve_long_running_connections
  for more information.  Closes GH-1200.
* Passenger Standalone no longer automatically resolves symlinks in its paths.
* `passenger-config system-metrics` no longer crashes when the system clock is set to a time
  in the past.  Closes GH-1276.
* `passenger-status`, `passenger-memory-stats`, `passenger-install-apache2-module` and
  `passenger-install-nginx-module` no longer output ANSI color codes by default when
  STDOUT is not a TTY. Closes GH-487.
* `passenger-install-nginx-module --auto` is now all that's necessary to make it fully
  non-interactive.  It is no longer necessary to provide all the answers through
  command line parameters. Closes GH-852.
* Minor contribution by Alessandro Lenzen.

</ChangeLog>
Fix staging when Perl is enabled for slave ports.

Reported by:	John Wood <john@charpa.org>
Add RedHat's patch for CVE-2014-7186, commonly known as "redir_stack" overflow,
which has not been shown to be as critical as "shellshock" currently.

Security:	CVE-2014-7186
Document CVE-2014-7186 for bash
1: use ${PYTHON_PKGNAMEPREFIX} on build/run depends.
2: use ${STAGEDIR} instead.
3: add WWW line.

PR:		jhale@
Approved by:	maintainer timeout ( > 2weeks)