# changelog

author: - John Eckersberg <jeckersb@redhat.com> - 3.08-5
changelog:
  - Minor tweaks to spec file aligning with latest Fedora packaging guidelines
  - Enforce inclusion of libyaml in build with --with-libyaml option to setup.py
  - Deliver to %{python_sitearch} instead of %{python_sitelib} due to _yaml.so
  - Thanks to Gareth Armstrong <gareth.armstrong@hp.com>


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 7.1.1-19.1
changelog:
  - ALTPHP-1501: Update to 7.1.1-19
  - Updated libwebp to 1.3.2
  - Added package with libraries for static linking
  - Build with newer libraries for RHEL6


author: Sergey Fokin <sfokin@cloudlinux.com> - 8.11.0-2
changelog:
  - don't add link to ldap in *.pc file if ldap.pc doesn't exist
  - don't add link to mit-krb5-gssapi in *.pc file if mit-krb5-gssapi.pc.pc doesn't exist


author: Philippe Makowski <makowski[at]fedoraproject.org> 2.5.0.26074.0-2
changelog:
  - Fix wrong assign file for classic and classic common
  - sync the s390(x) utilities list with other arches
  - add libatomic_ops-devel as BR: on non-x86 arches


author: Frediano Ziglio <freddy77@angelfire.com>
changelog:
  - remove dependency from freetds-unixodbc
  - fix field name (Copyright instead of License)
  - updated URL


author: ZeroC Staff <support@zeroc.com>
changelog:
  - See source distributions or the ZeroC website for more information
    about the changes in this release


author: Bernard Normier <bernard@zeroc.com> 3.3b-1
changelog:
  - Updates for Ice 3.3b release:
   - Split main ice rpm into ice noarch (license and Slice files), ice-libs 
     (C++ runtime libraries), ice-utils (admin tools & utilities), ice-servers
     (icegridregistry, icebox etc.). This way, ice-libs 3.3.0 can coexist with
      ice-libs 3.4.0. The same is true for ice-mono, and to a lesser extent 
      other ice runtime packages
  - Many updates derived from Mary Ellen Foster (<mefoster at gmail.com>)'s 
    Fedora RPM spec for Ice.
   - The Ice jar files are now installed in %{_javalibdir}, with 
     jpackage-compliant names
   - New icegridgui shell script to launch the IceGrid GUI
   - The .NET files are now packaged using gacutil with the -root option.
   - ice-servers creates a new user (ice) and installs three init.d services:
     icegridregistry, icegridnode and glacier2router.
   - Python, Ruby and PHP files are now installed in the correct directories.


author: Brian Aker <brian@tangent.org> - 1.0.8
changelog:
  * Fri Jan  8 2010 Brian Aker <brian@tangent.org> - 0.37
  - Modified to be explicit in install include files.


author: Remi Collet <remi@remirepo.net> - 1.3.2-1
changelog:
  - update to 1.3.2
  - drop multilib header hack
  - change URL to https://libzip.org/
  - test suite now ok on all arch


author: Sergey Kokhan <skokhan@cloudlinux.com> - 5.3.7-2
changelog:
  - ALMODP-112: disable nodejs handler by default
  - ALMODP-111: allow PassengerFriendlyErrorPages PassengerAppEnv passenger directives in htaccess


author: Sergey Kokhan <skokhan@cloudlinux.com> - 5.3.7-4
changelog:
  - ALMODP-121: Removed files with 1667 uid
  - ALMODP-120: fix httpd24-alt-mod-passenger spec for new httpd24-httpd


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 5.3.7-6
changelog:
  - ALMODP-134: Fix write application custom passenger log to user's tmp under cagefs
  - ALMODP-135: Deleted writing warning to main apache log when using user's custom log


author: Matus Honek <mhonek@redhat.com> - 2.4.46-3
changelog:
  - MozNSS Compat. Layer: Make log messages more clear (#1598103)
  - MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1595203)


author: Matus Honek <mhonek@redhat.com> - 2.4.46-6
changelog:
  - Build with LDAP_USE_NON_BLOCKING_TLS (#1594928)
  - Remove unused leftover MozNSS Compat. Layer references (cont.) (#1557967)


author: Tomas Hoger <thoger@redhat.com> - 7.3-3
changelog:
  - Backport patch from upstream pcre 7.6 to address buffer overflow
    caused by "a character class containing a very large number of
    characters with codepoints greater than 255 (in UTF-8 mode)"
    CVE-2008-0674, #431660
  - Try re-enabling make check again.


author: Lubomir Rintel <lkundrak@v3.sk> - 7.8-1
changelog:
  - Update to 7.8, drop upstreamed patches
  - Fix destination of documentation (#427763)
  - Use buildroot macro consistently
  - Separate the static library, as per current Guidelines
  - Satisfy rpmlint


author:
  Sergey Kokhan <skokhan@cloudlinux.com> Alexandr Demeshko <ademeshko@cloudlinux.com> Daria Kavchuk <dkavchuk@cloudlinux.com> - 0.1-1

changelog:
  - MODLS-732: Elastic-APM funcionality separated
  - MODLS-709: Added APM agent with distributed tracing support
  - MODLS-707: Made aapm agent work asynchronously
  - MODLS-701: Added python APM agent
  - MODLS-678: Initial version of alt-php-apm


author: Sergey Fokin <sfokin@cloudlinux.com> - 1-50
changelog:
  - ALTPHP-1376: fix detecting libmysqlclient.so version
  - ALTPHP-1396: restore alt-php.cfg if it's broken


author: Sergey Fokin <sfokin@cloudlinux.com> - 1-54
changelog:
  - ALTPHP-1582: add support cl-MariaDB1011
  - ALTPHP-1626: return mysqli.so for alt-php >= 82
  - ALTPHP-1637: rebuild with system python from BaseOS repo


author: Eduard Abdullin <eabdullin@cloudlinux.com> - 7.4.21-3
changelog:
  - ALTPHP-1154: Fix libxml requires
  - ALTPHP-1156: Get rid of manipulations with enabling extensions (mysqli.so) in default.ini


author: Sergey Fokin <sfokin@cloudlinux.com> - 7.4.33-3
changelog:
  - ALTPHP-1355: fix linksafe for all sub-packages
  - fix rpath for zip extension
  - add alt-php74-imunify-leveldb provides


author: Pavel Mayorov <pmayorov@cloudlinux.com> - 7.4.33-4
changelog:
  - Fix for Harden PHP
  - CVE-2022-31631: Fix integer overflow that could cause PDO::quote() to return an improperly quoted string


author: Nikita Ivanov <nivanov@cloudlinux.com> - 5.1.6-161
changelog:
  - Fix for hardened PHP
  - CVE-2023-0568: Fix array overrun when appending slash to paths
  - CVE-2023-0662: Fix DOS vulnerabality by limiting number of parsed
    multipart body parts and printing upload limit exceed error message only once


author: Nikita Ivanov <nivanov@cloudlinux.com> - 5.1.6-163
changelog:
  - Fix for hardened PHP
  - CVE-2023-3823: Fix external entity loading in XML without enabling by
    sanitizing libxml2 globals before parsing


author: Dmitriy Popov <dpopov@cloudlinux.com> - 5.1.6-169
changelog:
  - Fix for hardened PHP
  - CVE-2022-31629: use stack instead of heap, check correct one var
  - CVE-2024-2756: fix __Host-/__Secure-cookie bypass due to partial
    CVE-2022-31629 fix


author: Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 5.1.6-171
changelog:
  - Security fixes
  - CVE-2024-8927: Fix bypass of cgi.force_redirect configuration
  - CVE-2024-8925: Fix data integrity violation while parsing multipart/form-data
    boundaries larger than the read buffer


author: Eduard Chiganov <echiganov@cloudlinux.com> - 5.1.6-32
changelog:
  - ALTPHP-1719: Remove deprecated sql bindings:
  - mysql50, mysql51, mysql55, mariadb55, mariadb100, mariadb101, percona55, percona56.


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-45
changelog:
  - Moved igbinary to separate package
  - Moved memcache to separate package
  - Moved redis to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-47
changelog:
  - Moved timezonedb to separate package
  - Moved imagick to separate package
  - Added dependency to new xdebug extension in separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-51
changelog:
  - ALTPHP-1946: Moved bitset to separate package
  - ALTPHP-1948: Moved geoip to separate package
  - ALTPHP-1950: Moved inotify to separate package


author: Nikita Ivanov <nivanov@cloudlinux.com> - 5.2.17-188
changelog:
  - Fix for Harden PHP
  - CVE-2021-21704: fix errors in pdo_firebird extension
  - CVE-2021-21705: add user name and password validation in filters module


author: Pavel Mayorov <pmayorov@cloudlinux.com> - 5.2.17-189
changelog:
  - Fix for harden PHP
  - CVE-2022-31628: Fix potential infinite recursion in phar wrapper when using quine gzip file
  - CVE-2022-31629: Add cookie integrity validation


author: Nikita Ivanov <nivanov@cloudlinux.com> - 5.2.17-194
changelog:
  - Fix for hardened PHP
  - CVE-2023-3823: Fix external entity loading in XML without enabling by
    sanitizing libxml2 globals before parsing
  - CVE-2023-3824: Fix buffer mismanagement in phar_dir_read()


author: Dmitriy Popov <dpopov@cloudlinux.com> - 5.2.17-198
changelog:
  - Fix for hardened PHP
  - CVE-2024-2756: fix __Host-/__Secure-cookie bypass due to partial
    CVE-2022-31629 fix


author: Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 5.2.17-203
changelog:
  - Security fixes
  - CVE-2024-11236: prevent integer overflow in quoters causing OOB writes
  - CVE-2024-11234: fix HTTP fulluri CRLF injection
  - CVE-2024-11233: fix single byte overread with convert.quoted-printable-decode
    filter


author: Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 5.2.17-206
changelog:
  - Security fixes
  - CVE-2018-19935: fix null pointer dereference in imap_mail
  - CVE-2018-14883: fix int overflow leading to heap-based buffer over-read in
    exif.c
  - CVE-2018-20783: fix a buffer over-read in PHAR reading functions


author: Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 5.2.17-207
changelog:
  - Security fixes
  - CVE-2018-17082: fix cross-site scripting in apache2handler sapi
  - CVE-2018-19518: disable rsh/ssh functionality in imap to prevent argument
    injection


author: Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 5.2.17-208
changelog:
  - Security fixes
  - CVE-2019-11034: fix possible infoleak or crush caused by read past allocated
    buffer in exif_process_IFD_TAG()
  - CVE-2019-9025: fix possible memcpy() execution with negative argument in
    mb_split()


author: Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 5.2.17-210
changelog:
  - Security fixes
  - CVE-2019-11035: fix potential infoleak or crash via read past allocated buffer
    in exif_iif_add_value()
  - CVE-2019-11036: fix infoleak of crash via read past allocated buffer in
    exif_process_IFD_TAG()


author: PLD Team <feedback@pld-linux.org>
changelog:
  All persons listed below can be reached at <cvs_login>@pld-linux.org

  $Log: php-ffmpeg.spec,v $
  Revision 1.10  2009/06/12 07:41:44  glen
  - add missing %php_webserver_restart; rel 4

  Revision 1.9  2008/11/01 22:01:29  blues
  - rel.2

  Revision 1.8  2008/10/27 08:28:27  hawk
  - s/lib/lib64 not needed anymore

  Revision 1.7  2008/10/21 15:14:08  hawk
  - geez, release 1, I should go home ASAP

  Revision 1.6  2008/10/21 15:13:40  hawk
  - blah, I'm blind, updated to 0.6.0

  Revision 1.5  2008/10/21 15:12:02  hawk
  - updated to 0.5.3.1 but doesn't build with recent ffmpeg

  Revision 1.4  2008-03-26 06:37:37  qboosh
  - pl

  Revision 1.3  2007-09-26 10:27:01  glen
  - rel 1

  Revision 1.2  2007/09/05 22:43:58  glen
  - builds on amd64

  Revision 1.1  2007/09/05 22:32:31  glen
  - new, based on http://remi.collet.free.fr/rpms/extras/php-ffmpeg.spec


author: Eduard Chiganov <echiganov@cloudlinux.com> - 5.2.17-39
changelog:
  - ALTPHP-1719: Remove deprecated sql bindings:
  - mysql50, mysql51, mysql55, mariadb55, mariadb100, mariadb101, percona55, percona56.
  - ALTPHP-1769: Build for RHEL 9.


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-121
changelog:
  - Updated uploadprogress to 1.1.4
  - Updated rar to 4.2.0
  - ALTPHP-1509: alt-ImageMagick is linked statically now


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-123
changelog:
  - Moved igbinary to separate package
  - Moved memcache to separate package
  - Moved memcached to separate package
  - Moved geos to separate package
  - Moved redis to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-129
changelog:
  - ALTPHP-1788: Moved http to separate package
  - ALTPHP-1790: Moved msgpack to separate package
  - ALTPHP-1796: CL9 support


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-131
changelog:
  - ALTPHP-1825: Moved gnupg to separate package
  - ALTPHP-1827: Moved stats to separate package
  - ALTPHP-1828: Moved pdflib to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-132
changelog:
  - ALTPHP-1935: Moved xhprof to separate package
  - ALTPHP-1946: Moved bitset to separate package
  - ALTPHP-1948: Moved geoip to separate package
  - ALTPHP-1949: Moved htscanner to separate package
  - ALTPHP-1950: Moved inotify to separate package


author: Eduard Chiganov <echiganov@cloudlinux.com> 2.1.0-1
changelog:
  - ALTPHP-1654: Newer version of memcached for alt-php 74-82.
  - EA4D-454: Create alt-phpXX-pecl-memcached.


author: Nikita Ivanov <nivanov@cloudlinux.com> - 5.3.29-160
changelog:
  - Fix for hardened PHP
  - CVE-2023-0567: Fix validation of malformed BCrypt hashes
  - CVE-2023-0568: Fix array overrun when appending slash to paths
  - CVE-2023-0662: Fix DOS vulnerabality by limiting number of parsed
    multipart body parts and printing upload limit exceed error message only once


author: Sergey Fokin <sfokin@cloudlinux.com> - 5.3.29-167
changelog:
  - ALTPHP-953: restart lsphp when update its binary
  - ALTPHP-1573: update LiteSpeed to 8.1
  - ALTPHP-1665: pack fpm as sub-package
  - ALTPHP-1713: add ext/curl/php_curl.h to devel sub-package


author: Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 5.3.29-173
changelog:
  - Security fixes
  - CVE-2024-8925: Fix data integrity violation while parsing multipart/form-data
    boundaries larger than the read buffer
  - CVE-2024-8927: Fix bypass of cgi.force_redirect configuration


author: Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 5.3.29-175
changelog:
  - Security fixes
  - CVE-2024-11234: fix HTTP fulluri CRLF injection
  - CVE-2024-11233: fix single byte overread with convert.quoted-printable-decode
    filter
  - CVE-2024-11236: prevent integer overflow in quoters causing OOB writes


author: Azat Nurgaliev <anurgaliev@cloudlinux.com> - 5.3.29-178
changelog:
  - Security fixes
  - CVE-2020-7068: fix using of freed hash key in the phar_parse_zipfile function
  - CVE-2020-7071: avoid parse_url() returning a wrong host to user


author: Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 5.3.29-179
changelog:
  - Security fixes
  - CVE-2018-20783: fix a buffer over-read in PHAR reading functions
  - CVE-2018-19935: fix null pointer dereference in imap_mail
  - CVE-2018-14883: fix int overflow leading to heap-based buffer over-read in
    exif.c


author: Matthias Saou <http://freshrpms.net/> 1:0.9.6.1-7
changelog:
  - Add missing tmpwatch requirement (#711236).
  - Stop using macros for simple commands, following recent guidelines changes.


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-155
changelog:
  - ALTPHP-1752: Moved trader to separate package
  - ALTPHP-1753: Moved eio to separate package
  - ALTPHP-1756: Moved yaz to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-156
changelog:
  - ALTPHP-1778: Moved APM to separate package
  - ALTPHP-1779: Moved weakref to separate package
  - ALTPHP-1780: Moved solr to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-157
changelog:
  - ALTPHP-1786: Moved propro to separate package
  - ALTPHP-1787: Moved raphf to separate package
  - ALTPHP-1788: Moved http to separate package
  - ALTPHP-1789: Moved yaml to separate package
  - ALTPHP-1790: Moved msgpack to separate package
  - ALTPHP-1796: CL9 support


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-158
changelog:
  - ALTPHP-1800: Moved gmagick to separate package
  - ALTPHP-1801: Moved apcu to separate package
  - ALTPHP-1803: Moved oauth to separate package
  - ALTPHP-1804: Moved zmq to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-159
changelog:
  - ALTPHP-1087: Removed non-functional amqp package
  - ALTPHP-1825: Moved gnupg to separate package
  - ALTPHP-1826: Moved dbase to separate package
  - ALTPHP-1827: Moved stats to separate package
  - ALTPHP-1828: Moved pdflib to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-161
changelog:
  - ALTPHP-1935: Moved xhprof to separate package
  - ALTPHP-1946: Moved bitset to separate package
  - ALTPHP-1948: Moved geoip to separate package
  - ALTPHP-1949: Moved htscanner to separate package
  - ALTPHP-1950: Moved inotify to separate package
  - ALTPHP-1951: Moved jsmin to separate package


author: Eduard Chiganov <echiganov@cloudlinux.com> - 4.1.6-1
changelog:
  - ALTPHP-1935: Support for tideways_xhprof for alt-php84.
  - ALTPHP-1957: Create alt-phpXX-pecl-xhprof-extension.


author: Sergey Fokin <sfokin@cloudlinux.com> - 5.4.45-143
changelog:
  - ALTPHP-1531: add provides alt-php-handler-lsphp and alt-php81-handler-lsphp
  - remove changes from ALTPHP-1508


author: Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 5.4.45-162
changelog:
  - CVE-2018-20783: fix a buffer over-read in PHAR reading functions
  - CVE-2018-19935: fix null pointer dereference in imap_mail
  - CVE-2018-14883: fix int overflow leading to heap-based buffer over-read in
    exif.c


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-144
changelog:
  - Updated uploadprogress to 1.1.4
  - Updated rar to 4.2.0
  - ALTPHP-1509: alt-ImageMagick is linked statically now
  - Updated imagick to 3.7.0


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-150
changelog:
  - ALTPHP-1751: Moved mongodb to separate package
  - ALTPHP-1752: Moved trader to separate package
  - ALTPHP-1753: Moved eio to separate package
  - ALTPHP-1756: Moved yaz to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-151
changelog:
  - ALTPHP-1778: Moved APM to separate package
  - ALTPHP-1779: Moved weakref to separate package
  - ALTPHP-1780: Moved solr to separate package
  - ALTPHP-1772: Moved LuaSandbox to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-154
changelog:
  - ALTPHP-1087: Moved amqp to separate package
  - ALTPHP-1825: Moved gnupg to separate package
  - ALTPHP-1826: Moved dbase to separate package
  - ALTPHP-1827: Moved stats to separate package
  - ALTPHP-1828: Moved pdflib to separate package
  - ALTPHP-1822: Moved oci8 to separate package


author: Dmitriy Popov <dpopov@cloudlinux.com> - 5.5.38-126
changelog:
  - CVE-2023-3247: Fix missing randomness check for SOAP HTTP Digest
  - Remove generated zend_language files from tarball
  - Expand allowed version list for bison package


author: Dmitriy Popov <dpopov@cloudlinux.com> - 5.5.38-131
changelog:
  - Fix for hardened PHP
  - CVE-2024-2756: fix __Host-/__Secure-cookie bypass due to partial
    CVE-2022-31629 fix
  - CVE-2024-3096: Disallow null character in bcrypt password to fix bug causing
    password_verify to erroneously return true


author: Azat Nurgaliev <anurgaliev@cloudlinux.com> - 5.5.38-141
changelog:
  - Security fixes
  - CVE-2020-7071: avoid parse_url() returning a wrong host to user
  - CVE-2020-7068: fix using of freed hash key in the phar_parse_zipfile function


author: Eduard Abdullin <eabdullin@cloudlinux.com> 1-127
changelog:
  - ALTPHP-1195: Updated alt-ImageMagick require to 7.1.0 version
  - ALTPHP-1188: Update imagick to 3.5.1


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-133
changelog:
  - Moved igbinary to separate package
  - Moved memcache to separate package
  - Moved memcached to separate package
  - Moved grpc to separate package
  - Moved geos to separate package
  - Moved redis to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-138
changelog:
  - ALTPHP-1786: Moved propro to separate package
  - ALTPHP-1787: Moved raphf to separate package
  - ALTPHP-1788: Moved http to separate package
  - ALTPHP-1789: Moved yaml to separate package
  - ALTPHP-1781: Added dependency to new protobuf extension
  - ALTPHP-1790: Moved msgpack to separate package
  - ALTPHP-1796: CL9 support


author: Dmitriy Popov <dpopov@cloudlinux.com> - 5.6.40-80
changelog:
  - CVE-2023-3247: Fix missing randomness check for SOAP HTTP Digest
  - Remove generated zend_language files from tarball
  - Constraint max version for bison package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-113
changelog:
  - Moved timezonedb to separate package
  - Moved imagick to separate package
  - Moved xdebug to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-116
changelog:
  - ALTPHP-1786: Moved propro to separate package
  - ALTPHP-1787: Moved raphf to separate package
  - ALTPHP-1788: Moved http to separate package
  - ALTPHP-1789: Moved yaml to separate package
  - ALTPHP-1781: Added dependency to new protobuf extension
  - ALTPHP-1790: Moved msgpack to separate package


author: Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 7.0.33-92
changelog:
  - Security fixes
  - CVE-2024-11233: fix single byte overread with convert.quoted-printable-decode
    filter
  - CVE-2024-11234: fix HTTP fulluri CRLF injection
  - CVE-2024-11236: prevent integer overflow in quoters causing OOB writes
  - Fix #74960: Heap buffer overflow via str_repeat


author: Azat Nurgaliev <anurgaliev@cloudlinux.com> - 7.0.33-96
changelog:
  - Security fixes
  - CVE-2017-9120: Integer overflow in mysqli_real_escape_string()
  - CVE-2017-9119: handle memory limit error during string reallocation correctly
  - CVE-2017-9118: fix out of bounds access in php_pcre_replace_impl


author: Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 7.0.33-97
changelog:
  - Security fixes
  - CVE-2019-9025: fix possible memcpy() execution with negative argument in
    mb_split()
  - CVE-2019-11034: fix possible infoleak or crush caused by read past allocated
    buffer in exif_process_IFD_TAG()


author: Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 7.0.33-99
changelog:
  - Security fixes
  - CVE-2019-11036: fix infoleak of crash via read past allocated buffer in
    exif_process_IFD_TAG()
  - CVE-2019-11035: fix potential infoleak or crash via read past allocated buffer
    in exif_iif_add_value()


author: Pavel Mayorov <pmayorov@cloudlinux.com> - 7.0.33-71
changelog:
  - Fix for Harden PHP
  - CVE-2022-31631: Fix integer overflow that could cause PDO::quote() to return an improperly quoted string
  - Fix build dependencies


author: Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 7.0.33-86
changelog:
  - Fix for hardened PHP
  - CVE-2024-5458: Fix early-out for ipv6 hostname validation, ensure full check
    is performed


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-93
changelog:
  - Updated gmagick to 2.0.6RC1
  - Updated uploadprogress to 2.0.2
  - Updated rar to 4.2.0
  - ALTPHP-1509: alt-ImageMagick is linked statically now
  - Brought back old newrelic for CL6


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-96
changelog:
  - Moved swoole to separate package
  - Moved gender to separate package
  - Moved uuid to separate package
  - Moved rar to separate package
  - Added dependency to new msgpack extension in separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-98
changelog:
  - ALTPHP-1751: Moved mongodb to separate package
  - ALTPHP-1752: Moved trader to separate package
  - ALTPHP-1753: Moved eio to separate package
  - ALTPHP-1755: Moved sqlsrv to separate package
  - ALTPHP-1756: Moved yaz to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-99
changelog:
  - ALTPHP-1778: Added APM in separate package
  - ALTPHP-1779: Added weakref in separate package
  - ALTPHP-1780: Moved solr to separate package
  - ALTPHP-1772: Moved LuaSandbox to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-100
changelog:
  - ALTPHP-1786: Moved propro to separate package
  - ALTPHP-1787: Moved raphf to separate package
  - ALTPHP-1788: Moved http to separate package
  - ALTPHP-1789: Moved yaml to separate package
  - ALTPHP-1781: Added dependency to new protobuf extension


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-101
changelog:
  - ALTPHP-1800: Moved gmagick to separate package
  - ALTPHP-1801: Moved apcu to separate package
  - ALTPHP-1798: Added dependency to new apcu-bc extension
  - ALTPHP-1802: Moved rrd to separate package
  - ALTPHP-1803: Moved oauth to separate package
  - ALTPHP-1804: Moved zmq to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-103
changelog:
  - ALTPHP-1935: Moved xhprof to separate package
  - ALTPHP-1946: Moved bitset to separate package
  - ALTPHP-1947: Moved gearman to separate package
  - ALTPHP-1948: Moved geoip to separate package
  - ALTPHP-1949: Moved htscanner to separate package
  - ALTPHP-1950: Moved inotify to separate package
  - ALTPHP-1951: Moved jsmin to separate package


author: Eduard Chiganov <echiganov@cloudlinux.com> 3.2.15-1
changelog:
  - EA4D-454: Create alt-phpXX-pecl-igbinary.
  - ALTPHP-1686: Newer version of igbinary for alt-php 70-83.


author: Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 7.1.33-62
changelog:
  - Security fixes
  - CVE-2024-11233: fix single byte overread with convert.quoted-printable-decode
    filter
  - CVE-2024-11234: fix HTTP fulluri CRLF injection
  - CVE-2024-11236: prevent integer overflow in quoters causing OOB writes
  - Fix #74960: heap buffer overflow via str_repeat


author: Azat Nurgaliev <anurgaliev@cloudlinux.com> - 7.1.33-65
changelog:
  - Security fixes
  - CVE-2017-9118: fix out of bounds access in php_pcre_replace_impl
  - CVE-2017-8923: fix integer overflow when concatenating strings
  - CVE-2017-9120: Integer overflow in mysqli_real_escape_string()
  - CVE-2017-9119: handle memory limit error during string reallocation correctly


author: Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 7.1.33-66
changelog:
  - Security fixes
  - CVE-2019-9025: fix possible memcpy() execution with negative argument in
    mb_split()


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-83
changelog:
  - Updated gmagick to 2.0.6RC1
  - Updated uploadprogress to 2.0.2
  - Updated rar to 4.2.0
  - ALTPHP-1509: alt-ImageMagick is linked statically now
  - ALTPHP-1507: Updated swoole to 4.8.13
  - Brought back old newrelic for CL6


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-84
changelog:
  - Moved uploadprogress to separate package
  - Moved newrelic to separate package
  - Added dependency to new scoutapm extension in separate package


author: Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 7.2.34-47
changelog:
  - Security fixes
  - CVE-2024-11233: fix single byte overread with convert.quoted-printable-decode
    filter
  - CVE-2024-11234: fix HTTP fulluri CRLF injection
  - CVE-2024-11236: prevent integer overflow in quoters causing OOB writes
  - Fix #74960: heap buffer overflow via str_repeat
  - Fix #74267: segfault with streams and invalid data


author: Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 7.2.34-50
changelog:
  - Security fixes
  - CVE-2019-19246: fix heap-based buffer over-read in str_lower_case_match in
    regexec.c
  - CVE-2019-9025: fix possible memcpy() execution with negative argument in
    mb_split()


author: Azat Nurgaliev <anurgaliev@cloudlinux.com> - 7.2.34-52
changelog:
  - Security fixes
  - CVE-2017-8923: fix integer overflow when concatenating strings
  - CVE-2017-9118: fix out of bounds access in php_pcre_replace_impl
  - CVE-2017-9119: handle memory limit error during string reallocation correctly
  - CVE-2017-9120: Integer overflow in mysqli_real_escape_string()


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-87
changelog:
  - Updated gmagick to 2.0.6RC1
  - Updated uploadprogress to 2.0.2
  - alt-ImageMagick is linked statically now
  - Updated swoole to 4.8.13
  - Brought back old newrelic for CL6


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-90
changelog:
  - Moved swoole to separate package
  - Moved gender to separate package
  - Moved uuid to separate package
  - Added dependency to new rar extension in separate package
  - Added dependency to new msgpack extension in separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-93
changelog:
  - ALTPHP-1778: Added APM in separate package
  - ALTPHP-1779: Added weakref in separate package
  - ALTPHP-1780: Added solr in separate package
  - ALTPHP-1772: Moved LuaSandbox to separate package


author: Dmitriy Popov <dpopov@cloudlinux.com> - 7.3.33-23
changelog:
  - Fix for hardened PHP
  - CVE-2024-3096: Disallow null character in bcrypt password to fix bug causing
    password_verify to erroneously return true
  - CVE-2024-2756: fix __Host-/__Secure-cookie bypass due to partial
    CVE-2022-31629 fix


author: Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 7.3.33-33
changelog:
  - Security fixes
  - CVE-2024-11234: fix HTTP fulluri CRLF injection
  - CVE-2024-11236: prevent integer overflow in quoters causing OOB writes
  - CVE-2024-11233: fix single byte overread with convert.quoted-printable-decode
    filter


author: Azat Nurgaliev <anurgaliev@cloudlinux.com> - 7.3.33-36
changelog:
  - Security fixes
  - CVE-2017-8923: fix integer overflow when concatenating strings
  - CVE-2017-9118: fix out of bounds access in php_pcre_replace_impl


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-66
changelog:
  - ALTPHP-1935: Moved xhprof to separate package
  - ALTPHP-1946: Added dependency to new bitset extension
  - ALTPHP-1947: Moved gearman to separate package
  - ALTPHP-1948: Moved geoip to separate package
  - ALTPHP-1949: Added dependency to new htscanner extension
  - ALTPHP-1950: Moved inotify to separate package
  - ALTPHP-1951: Moved jsmin to separate package
  - ALTPHP-1952: Moved leveldb to separate package


author: Sergey Fokin <sfokin@cloudlinux.com> - 7.4.33-18
changelog:
  - ALTPHP-953: restart lsphp when update its binary
  - ALTPHP-1573: update LiteSpeed to 8.1
  - ALTPHP-1665: pack fpm as sub-package


author: Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 7.4.33-28
changelog:
  - Security fixes
  - CVE-2024-8925: Fix data integrity violation while parsing multipart/form-data
    boundaries larger than the read buffer
  - CVE-2024-9026: Fix possible altering of children logs
  - CVE-2024-8927: Fix bypass of cgi.force_redirect configuration


author: Darya Malyavkina <dmalyavkina@cloudlinux.com> - 7.4.8-2
changelog:
  - MODLS-741: Make LSCRIU log messages with timestamps
  - MODLS-804: Improve mod_lsapi & lsphp error reporting in case of php memory limit reached
  - ALTPHP-961: Update litespeed to 7.7 version


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-53
changelog:
  - ALTPHP-1935: Moved xhprof to separate package
  - ALTPHP-1946: Added dependency to new bitset extension
  - ALTPHP-1947: Moved gearman to separate package
  - ALTPHP-1948: Moved geoip to separate package
  - ALTPHP-1949: Added dependency to new htscanner extension
  - ALTPHP-1950: Moved inotify to separate package
  - ALTPHP-1951: Moved jsmin to separate package
  - ALTPHP-1952: Added dependency to new leveldb extension


author: Dmitriy Popov <dpopov@cloudlinux.com> - 8.0.30-8
changelog:
  - Fix for hardened PHP
  - CVE-2024-3096: Disallow null character in bcrypt password to fix bug
    causing password_verify to erroneously return true
  - CVE-2024-2756: fix __Host-/__Secure-cookie bypass due to partial
    CVE-2022-31629 fix


author: Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 8.0.30-11
changelog:
  - Actually apply php-8.0-CVE-2024-3096.patch and php-8.0-CVE-2024-2756.patch
    for Ubuntu < 22.04 and Debian < 11 systems


author: Eduard Chiganov <echiganov@cloudlinux.com> - 1-28
changelog:
  - ALTPHP-1402: update mailparse to 3.1.4
  - ALTPHP-1408: Redis extension updated to 5.3.7
  - ALTPHP-1507: Swoole extension updated to 5.0.3
  - ALTPHP-1509: alt-ImageMagick is linked statically now
  - yaz updated to 1.2.4


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-31
changelog:
  - Fixed requires
  - Brought back yaf and gnupg
  - Updated uploadprogress to 2.0.2
  - Updated vips to 1.0.13
  - alt-ImageMagick is linked statically now
  - Updated swoole to 5.0.3


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-33
changelog:
  - Moved igbinary to separate package
  - Moved memcache to separate package
  - Moved memcached to separate package
  - Moved grpc to separate package
  - Moved redis to separate package
  - Added dependency to new geos ext


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-34
changelog:
  - Moved swoole to separate package
  - Moved uuid to separate package
  - Added dependency to new rar extension in separate package
  - Added dependency to new msgpack extension in separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-36
changelog:
  - ALTPHP-1751: Moved mongodb to separate package
  - ALTPHP-1752: Moved trader to separate package
  - ALTPHP-1753: Moved eio to separate package
  - ALTPHP-1754: Moved xmlrpc to separate package
  - ALTPHP-1755: Moved sqlsrv to separate package
  - ALTPHP-1756: Moved yaz to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-38
changelog:
  - ALTPHP-1787: Moved raphf to separate package
  - ALTPHP-1788: Moved http to separate package
  - ALTPHP-1789: Moved yaml to separate package
  - ALTPHP-1781: Added dependency to new protobuf extension


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-39
changelog:
  - ALTPHP-1800: Moved gmagick to separate package
  - ALTPHP-1801: Moved apcu to separate package
  - ALTPHP-1802: Moved rrd to separate package
  - ALTPHP-1803: Moved oauth to separate package
  - ALTPHP-1804: Moved zmq to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-40
changelog:
  - ALTPHP-1087: Moved amqp to separate package
  - ALTPHP-1826: Moved dbase to separate package
  - ALTPHP-1827: Moved stats to separate package
  - ALTPHP-1828: Moved pdflib to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-19
changelog:
  - Fixed requires
  - Updated mcrypt to 1.0.6
  - Updated vips to 1.0.13
  - alt-ImageMagick is linked statically now
  - Updated swoole to 5.0.3


author: Sergey Fokin <sfokin@cloudlinux.com> - 8.2.16-1
changelog:
  - update to 8.2.16
  - ALTPHP-1665: pack fpm as sub-package
  - ALTPHP-953: restart lsphp wheb update its binary


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-20
changelog:
  - Fixed requires
  - Updated mcrypt to 1.0.6
  - Updated vips to 1.0.13
  - Updated yaml to 2.2.3
  - Updated igbinary to 3.2.14
  - alt-ImageMagick is linked statically now
  - Updated swoole to 5.0.3


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-31
changelog:
  - ALTPHP-1935: Moved xhprof to separate package
  - ALTPHP-1946: Moved bitset to separate package
  - ALTPHP-1947: Moved gearman to separate package
  - ALTPHP-1948: Moved geoip to separate package
  - ALTPHP-1949: Moved htscanner to separate package
  - ALTPHP-1950: Moved inotify to separate package
  - ALTPHP-1951: Moved jsmin to separate package
  - ALTPHP-1952: Moved leveldb to separate package


author: Sergey Fokin <sfokin@cloudlinux.com> - 8.3.3-1
changelog:
  - update to 8.3.3
  - ALTPHP-1665: pack fpm as sub-package
  - ALTPHP-953: restart lsphp wheb update its binary


author: Petr Kubat <pkubat@redhat.com> - 9.2.21-1
changelog:
  - update to 9.2.21 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
    http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
    http://www.postgresql.org/docs/9.2/static/release-9-2-19.html


author: Petr Kubat <pkubat@redhat.com> - 9.2.22-1
changelog:
  - update to 9.2.22 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-22.html


author: Petr Kubat <pkubat@redhat.com> - 9.2.23-1
changelog:
  - update to 9.2.23 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-23.html


author: Pavel Kajaba <pkajaba@redhat.com> - 9.2.15-1
changelog:
  - update to 9.2.15 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-15.html


author: Petr Kubat <pkubat@redhat.com> - 9.2.18-1
changelog:
  - update to 9.2.18 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
    http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
    http://www.postgresql.org/docs/9.2/static/release-9-2-16.html


author:
  Aleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Stepan Oksanichenko <soksanichenko@cloudlinux.com>, Pavel Negrobov <pnegrobov@cloudlinux.com>, Dmitriy Poleev <dpoleev@cloudlinux.com>, Sergey Kozhekin <skozhekin@cloudlinux.com> 1.5.11-1

changelog:
  - LVES-961: Cloudlinux top from user throws sentry error to output
  - PTCLLIB-155: Move cllib bundled hooks to the path not depending on python version
  - SonarQube python-cllib ger_ev
  - PTCLLIB-154: remove hooks from control panel during downgrade
  - CAG-949: Move dummy hooks to cllib and install plesk&da&cpanel proxies
  - LU-1340: Create public hooks system for 3dparty control panels
  - LU-1367: Run lve-utils rpm tests on real Panels(cPanel/Plesk)
  - LU-1341: Replace using of `too long script` by using of cpapi
  - LVEMAN-1557: Make use of new PassengerAppLogFile directive in our selectors


author:
  Aleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Pavel Negrobov <pnegrobov@cloudlinux.com>, Sergey Kozhekin <skozhekin@cloudlinux.com>, Stepan Oksanichenko <soksanichenko@cloudlinux.com>, Ulugbek Samigjonov <usamigjonov@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com>  1.5.12-2

changelog:
  - CAG-945: Cleanup cllib package from no longer used methods
  - CAG-945: Move sync-map hooks to lve-utils
  - CAG-945: Rename new_vendor -> new_owner in modify_user callbacks
  - CAG-945: Rewrite `py/node selector` hooks to new universal hooks system
  - CAG-945: unify is_root_or_exit in order to work with all control panels
  - Fix problems with detecting vendors control panel name under user
  - LU-1368: Cover cPanel with CPAPI tests
  - LU-1389: Do not use rpm -q in passenger and virtualenv detecting
  - LU-1390 Improve panels detection for statistics
  - LU-1552: Fix cpapirebuildcache after adding vendors cpapi proxy
  - LVEMAN-1552: Add debug logging about cpapi calls and their duration
  - LVEMAN-1552: Final implementation of CPAPI based on PoC
  - LVEMAN-1587: Change is_main filter argument value to lowercase
  - PTCCLIB-161: Method `cpapi.userdomains` doesn't work correct on Plesk
  - PTCLLIB-153: Improve plesk hooks install code to log errors to sentry
  - PTCLLIB-153: Move clsentry package to cllib
  - PTCLLIB-153: Use sentry in python-cllib package
  - SonarQube python-cllib add <c-checkers>
  - Temporary revert debug logging about cpapi calls and their duration
  - WEB-1580: Add ability to hide inodes in Plesk and DirectAdmin
  - WEB-1592: Do not show inode accordion if quota unavailable
  - CAG-965: Cleanup package from no longer used methods and hooks
  - CAG-965: Move user creation logic to universal lib
  - CAG-965: Move user_restore logic to universal lib
  - CAG-965: Move cagefs_plesk_hs_deleted and terminate_cagefs_account logic to universal lib


author:
  Stepan Oksanichenko <soksanichenko@cloudlinux.com>, Ulugbek Samigjonov <usamigjonov@cloudlinux.com> 1.6.1-1

changelog:
  - Added using unicode user names as filter in function cpinfo of vendor cpapi plugin.
  - LU-1463: ValueError: invalid literal for int() with base 10: '--help'
  - PTCLLIB-171: Fix backward plugin's methods `_cpinfo` and `list_users`
  - WEB-1593: Use the same names for options in config file as it return cl_config
  - WEB-1594: Use new config file to store php selector status in plesk


author: Stepan Oksanichenko <soksanichenko@cloudlinux.com> 1.6.3-1
changelog:
  - Bump version for master branch 1.6.2-1
  - LU-1463: ValueError: invalid literal for int() with base 10: '--help'. Part II


author: Aleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> 1.6.4-1
changelog:
  - CAG-965: Change pre delete with post delete admin
  - PTCLLIB-154: disable sentry only for downgrade


author:
  Anton Volkov <avolkov@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com>, Aleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> 1.6.5-1

changelog:
  - PTCLLIB-174: Add detailed logging about what happens in hooks
  - PTCLLIB-174: Use logrotate instead of RotatingFileHandler
  - PTCLLIB-174: Fix post_modify_domain hook for case when user and domain changed together
  - PTCLLIB-173: Return json response for universal hooks on cpanel
  - PTCLLIB-177 Install cpanel hooks even if hooks.yaml is missing
  - PTCLLIB-176 Investigate and fix failed hook tests on DA
  - LU-1487: replace alt-python27-MySQL-python with alt-python27-MySQL-meta in all spec files


author: Ulugbek <usamigjonov@cloudlinux.com>, Pavel Negrobov <pnegrobov@cloudlinux.com> 1.6.6-1
changelog:
  - WEB-1658: Admin can not use "User interface settings"
  - PTCLLIB-175: Build alt-python27-cllib package for CL8


author:
  Aleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Anton Volkov <avolkov@cloudlinux.com>, Pavel Mogilnikov <pmogilnikov@cloudlinux.com> 1.6.8-1

changelog:
  - LU-1422: DA cpapi.userdomains with admins
  - CAG-1001: Don't copy etc during postwwwacct while restoring account
  - PTCLLIB-179 : (Stage 2) Safe fixes of futurize
  - PTCLLIB-179 : Stage 1 all imports
  - PTCLLIB-179 : Stage 1 of futurize
  - PTCLLIB-179 : Fix unittests behaviour
  - PTCLLIB-179 : fix reload_processes function
  - PTCLLIB-179 : Replace assert(Not)Eqals with assert(Not)Equal
  - Sonar Qube: disable rules related to unused imports and imports ordering


author:
  Aleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com>, Anton Volkov <avolkov@cloudlinux.com>, pmogilnikov <pmogilnikov@cloudlinux.com> 2.0.8-3

changelog:
  - CAG-1027: Fix pickle incompatibility between python2 and python3
  - LU-1630 : usage of os.makedirs on py3
  - LU-1646 Fix cl-wizard on cl7h
  - LU-1641: investigate issues with CL8 installation into empty chroot (ISO install)
  - PTCLLIB-195: Fix NoneType Traceback with whmapi call on CPanel 86.0
  - PTCLLIB-183: rewrite pretrans using lua
  - PTCLLIB-193: fix issues with upgrade and downgrade of alt-python-cllib package
  - CAG-1014: Investigate failed test 958-list-mounted-users on DA
  - PTCLLIB-182: Fix hooks installation on cpanel 84+
  - LVEMAN-1636 fix sendmail subprocess error
  - LU-1583 enable pylint py3k for cllib
  - LU-1607 : (python-cllib) add interpolation=None
  - LU-1589: Fix wizard errors on CL8
  - PTCLLIB-191 : Fix unittests
  - LU-1501: Add manual pyc pyo build for cllib
  - LVES-968 make possible to get raw subprocess from run_command
  - PTCLLIB-186: Make db_info optional, as mentioned in docs
  - PTCLLIB-185: Fix admins sync when admin does not have system user
  - PTCLLIB-183: rewrite pretrans using lua
  - PTCLLIB-184 : Fix directadmin cpapi tests
  - add text=True to clcaptain
  - LU-1492: use text=True for subprocess while installing cpanel hooks
  - LU-1492: Write errors in case of bad cpanel configs
  - LU-1492: Make hooks installation work on plesk
  - minor fixes to cllib to work on py3
  - LU-1492: Remove byteify usage from cpapi plugins
  - PTCLLIB-179: use text=True in all subprocess calls
  - LU-1566 add -bb option to cllib
  - PTCLLIB-179: remove multiple imports on single lines
  - PTCLLIB-179 : fix cpapi plugins plesk users encoding
  - PTCLLIB-179 : fix vendors_api
  - PTCLLIB-179 : (Fixes) Stage 2 of futurize
  - PTCLLIB-179 : (Nobuild) Stage 2 of futurize
  - LU-1500: update spec and shebangs for python3
  - PTCLLIB-179 : (Stage 2) Safe fixes of futurize
  - PTCLLIB-179 : Fix unittests behaviour
  - PTCLLIB-179: Use bytes when parsing php_conf config
  - PTCLLIB-179 : fix reload_processes function
  - PTCLLIB-179 : Replace deprecated NoneType
  - PTCLLIB-179 : Replace __builtin__ imports with builtins
  - PTCLLIB-179 : Replace deprecated assertItemsEqual with assertCountEqual
  - PTCLLIB-179 : Replace assert(Not)Eqals with assert(Not)Equal
  - Sonar Qube: disable rules related to unused imports and imports ordering
  - LU-1500: Version up
  - PTCLLIB-175: Build alt-python27-cllib package for CL8
  - LU-1500: Add commented pylint --py3k
  - LU-1500: create master-py3 branch


author: Tom Lane <tgl@redhat.com> 1.2.3-0.1.c1
changelog:
  - Update to release candidate 1.2.3c1 for better mysql 5.1 and python 2.6
    compatibility
  Resolves: #505611
  - Use python-setuptools instead of distutils, stop using old setup.py
  Resolves: #467510
  - Remove unnecessary manual Requires: specifications
  Resolves: #507750


author:
  dkuropiatnyk <dkuropiatnyk@cloudlinux.com>, Pavel Negrobov <pnegrobov@cloudlinux.com>, soksanichenko <soksanichenko@cloudlinux.com> 2.1.13-1

changelog:
  - LVES-1009: Add CM plugin for lve-stats2
  - LU-1881: Add a few metrics to CL statistics
  - CMT-221: Add package versions tags to sentry


author:
  Pavel Negrobov <pnegrobov@cloudlinux.com>, soksanichenko <soksanichenko@cloudlinux.com>, dkuropiatnyk <dkuropiatnyk@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com> 2.2.0-1

changelog:
  - CMT-165: [End-server tools] Adapt CM apache collector to DA
  - CMT-257: Add to cldiag the base checks for CMT. Part II
  - CMT-257: Add to cldiag the base checks for CMT
  - PTCLLIB-217: docroot() is broken on directadmin
  - CMT-417 UnicodeDecodeError: `utf-8` codec can`t decode byte 0xe4 in position 3167: invalid continuation byte


author:
  Pavel Mogilnikov <pmogilnikov@cloudlinux.com>, Stepan Oksanichenko <soksanichenko@cloudlinux.com> 2.2.2-1

changelog:
  - CMT-257: Add to cldiag the base checks for CMT. Hot-fix for non-CL+ clients
  - LVEMAN-1695 : Change sentry init function


author:
  Alisher Matkurbanov <amatkurbanov@cloudlinux.com>, Danylo Kuropiatnyk <dkuropiatnyk@cloudlinux.com>, Stepan Oksanichenko <soksanichenko@cloudlinux.com> 2.2.7-1

changelog:
  - CMT-494: Reduce amount of sentry errors
  - LU-2020: Add get_weekday function and WEEK_DAYS tuple
  - PTCLLIB-218 : Fix userdomains for DirectAdmin and openlitespeed
  - LU-2016: Do not perform checking patches for "suexec" with LiteSpeed server
  - CMT-257: Add to cldiag the base checks for CMT


author: Danylo Kuropiatnyk <dkuropiatnyk@cloudlinux.com>, Dmitriy Poleev <dpoleev@cloudlinux.com> 2.2.9-1
changelog:
  - WEB-2040: Add config parameters for cl-config: Hide X-Ray for user
  - PTCLLIB-220: CLDIAG doesn't correctly check the services in non-English locales
  - CMT-386: Adapt CM end-server-tools apache collector for Plesk


author:
  Danylo Kuropiatnyk <dkuropiatnyk@cloudlinux.com>, Alisher Matkurbanov <amatkurbanov@cloudlinux.com> 2.2.10-1

changelog:
  - CMT-528: Error while getting Mysql Governor limits: Governor not present in system (CL+CM_Collector)
  - LU-2081: Fix unclosed resource warning


author:
  Alisher Matkurbanov <amatkurbanov@cloudlinux.com>, msozin <msozin@cloudlinux.com>, Stepan Oksanichenko <soksanichenko@cloudlinux.com> 2.1.8-1

changelog:
  - LU-1883: Fix load_fast failure for non-utf8 chars in config
  - LVEMAN-1683: Escape formatting characters (%) inside exception message.
  - CAG-1062: [CL8.2] Mount socket of systemd-journal into CageFS
  - LU-1865: Add activate/deactivate mechanism for Endserver-tools


author: Matthew Barnes <mbarnes@redhat.com> - 2.10.1-5.el5
changelog:
  - Spec file cleanups to match Fedora.
  - Define a python_sitelib macro for files under site_packages (bug #211806).


author: Matthew Barnes <mbarnes@redhat.com> - 2.10.1-10.el5
changelog:
  - Require not just pygtk2 = (version) but (version)-(release) in the
    subpackages (RH bug #311571).


author: Matthew Barnes <mbarnes@redhat.com> - 2.10.1-12.el5
changelog:
  - Revise patch for RH bug #237077 to correct a reference counting error.
    Reported separately as RH bug #430347.


author: Anatholy Scryabin <ascryabin@cloudlinux.com> - 3.3.6-2.1
changelog:
  - rename macros.pybytecompile to macros.alt-python33-pybytecompile
  - group is changed to linksafe
  - add linksafe configuration to /etc/sysctl.conf in pre section


author: Anatholy Scryabin <ascryabin@cloudlinux.com> - 3.3.6-2.9
changelog:
  - add locked extensions
  - add condition for build without linksafe
  - conflict with lvemanager < 1.0-9.43


author: Anatholy Scryabin <ascryabin@cloudlinux.com> - 3.3.6-2.11
changelog:
  - fix for CVE-2016-1000110 HTTProxy attack
  - fix for CVE-2016-0772 python: smtplib StartTLS stripping attack
    rise an error when STARTTLS fails (upstream patch)
  - fix for CVE-2016-5699 python: http protocol steam injection attack
    disabled HTTP header injections in http.client (upstream patch)


author: Anatholy Scryabin <ascryabin@cloudlinux.com> - 3.4.4-1
changelog:
  - update Python to 3.4.4
  - disable patch 202, 204
  - add build conditional macros
  - add path-to-libpl.patch (fix wrong path to LIBPL)


author: Eduard Chiganov <echiganov@cloudlinux.com> - 0.14.11-10
changelog:
  - ALTPYTH-467: Get rid of alt-python dependencies errors.
  - New linksafe post, triggerin and triggerun scripts.


author: Eduard Abdullin <eabudllin@cloudlinux.com> - 3.7.11-4
changelog:
  - ALTPYTH-364: Fix build for old system
  - ALTPYTH-381: Added check for cl solo
  - ALTPYTH-380: Added cloudlinux-linksafe to Requires(post)


author: Julian Sikorski <belegdol@fedoraproject.org> - 11.1.0-1
changelog:
  - Updated to 11.1.0
  - Obsoleted zsh subpackage (upstream ticket #3078)
  - mktap is gone (upstream ticket #5293)
  - Dropped obsolete Group, Buildroot, %clean and %defattr


author: Sergey Fokin <sfokin@cloudlinux.com> 3.8.12-2
changelog:
  - ALTPYTH-413: move -fno-semantic-interposition to CFLAGS_NODIST
  - remove changing gcc to devtoolset-gcc
  - change BuildRequire from gcc-toolset to system gcc for CL8


author: Remi Collet <remi@remirepo.net> - 6.0.9-3
changelog:
  - move configuration in /etc/redis per upstream recommendation
    see https://github.com/redis/redis/issues/8051


author: Remi Collet <remi@remirepo.net> - 6.2.0-1
changelog:
  - Redis 6.2.0 GA - Released Tue Feb 22 14:00:00 IST 2021
  - Upgrade urgency: SECURITY if you use 32bit build of redis,
    MODERATE if you used earlier versions of Redis 6.2, LOW otherwise


author: Remi Collet <remi@remirepo.net> - 6.2.2-1
changelog:
  - Redis 6.2.2 - Released Mon April 19 19:00:00 IST 2021
  - Upgrade urgency: HIGH, if you're using ACL and pub/sub,
    CONFIG REWRITE, or suffering from performance regression.


author: Igor Zubkov <izubkov@cloudlinux.com> 1.9.3-3
changelog:
  - 1.9.3-p550 security and bugfix release
    (https://www.ruby-lang.org/en/news/2014/10/27/ruby-1-9-3-p550-is-released/)
  - CVE-2014-8080: Denial of Service XML Expansion
    (https://www.ruby-lang.org/en/news/2014/10/27/rexml-dos-cve-2014-8080/)
  - Changed default settings of ext/openssl related to CVE-2014-3566 AKA POODLE
    (https://www.ruby-lang.org/en/news/2014/10/27/changing-default-settings-of-ext-openssl/)


author: Anatholy Scryabin <ascryabin@cloudlinux.com> 1.9.3-4
changelog:
  - update patchlevel to 551 (fix CVE-2014-8090)
  - initialize rubygems cache in posttrans section (fix ALR-6)
  - bump package rubygems epoch (bugfix version)
  - add BuildRoot for cl5
  - disable doc's BuildArch for cl5
  - disable ca-certification Requires and BR for cl5


author: Anatholy Scryabin <ascryabin@cloudlinux.com> 2.0.0-7
changelog:
  - update patchlevel to 647
  - group is changed to linksafe
  - add linksafe configuration to /etc/sysctl.conf in pre section


author: Anatholy Scryabin <ascryabin@cloudlinux.com> 2.0.0-17
changelog:
  - add locked_extensions
  - add trigers to subpackages of rubygem
  - add condition for build with linksafe
  - conflicts with lvemanager < 1.0-9.43


author: Jan Stanek <jstanek@redhat.com> - 3.7.16.2-1
changelog:
  - update to 3.7.16.2 (http://www.sqlite.org/releaselog/3_7_16_2.html)
  - add support for aarch64 (rerunning autoconf) (#926568)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 5.1.2-6
changelog:
  - Resolves: #556398
  - Directly included relevant patches, scripts and man pages from Debian
  - Removed rpath
  - rpmlint is silent now


author: Jaroslav Škarvada <jskarvad@redhat.com> - 5.1.2-6.1
changelog:
  - Fixed CVE-2010-2642, CVE-2011-0433, CVE-2011-0764, CVE-2011-1552, CVE-2011-1553, CVE-2011-1554
    Resolves: rhbz#772900


author: Sandro Kalatozishvili <skalatozishvili@cloudlinux.com> - 10.4.30-4
changelog:
  - CLOS-1955: Adjusted conflicts and obsoletes tags to mysqlclient18-compat
  - CLOS-1955: Added conflicts tags to another version of cl-MariaDB* packages


author: Sandro Kalatozishvili <skalatozishvili@cloudlinux.com> - 10.4.34-1
changelog:
  - CLOS-2692: Updated to 10.4.34
  - CLOS-2692: Fixed "Can't enter LVE" logging message
  - CLOS-2557: tmpfiles config added


author: Sandro Kalatozishvili <skalatozishvili@cloudlinux.com> - 10.5.25-1
changelog:
  - CLOS-2692: Updated to 10.5.25
  - CLOS-2692: Fixed "Can't enter LVE" logging message
  - CLOS-2557: tmpfiles config added


author:
  Alexandr Demeshko <ademeshko@cloudlinux.com> Sandro Kalatozishvili <skalatozishvili@cloudlinux.com> - 10.6.15-1

changelog:
  - CLOS-1923: Updated to 10.6.15
  - CLOS-1744: Added MySQL Provides tag in cl-MariaDB-meta-client package


author: Todd Rinaldo <toddr@cpanel.net> 5.0.88-1
changelog:
  - Disable ndbcluster for all builds. Was breaking on Trustix 2 and Redhat 9 and Ken says this is no longer officially supported. Also it's not advisable to use this feature on any cPanel install
  - Comment out all ndb lines so install doesn't break.
  - Bump version since we released to beta


author: Todd Rinaldo <toddr@cpanel.net> 5.0.92-0
changelog:
  - New upstream maintenance release
  - New libraries and man pages added to distro
  - Drop file EXCEPTIONS-CLIENT


author: Todd Rinaldo <toddr@cpanel.net> 5.0.96-1.cp1136
changelog:
  - Update release to have cp1136 in it
  - Rename package from MySQL to MySQL50 to prevent packaging system confusion
  - Remove legacy platform support.
  - Remove perl dependencies from the build since they are being detected incorrectly
  - Add pre and post installation steps
  - Patch scripts to use /usr/local/cpanel/3rdparty/bin/perl


author: Kyle Lafkoff <kyle.lafkoff@cpanel.net> - 5.0.96-2.cp1136
changelog:
  - remove pre and post hook scripts as we now use Cpanel::Hooks
  - Add trigger for MySQL-server so mysqld is restarted when MySQL-server is removed
  - Simplify service start/stop logic given support range is only CentHat


author: brian m. carlson <brian.carlson@cpanel.net> 5.1.66-0.cloud
changelog:
  - New upstream release
  - Rebased previous patches from last update.
  - Removed YaSSL patch since the bug has been fixed upstream.


author: Kyle Lafkoff <kyle.lafkoff@cpanel.net> - 5.1.66-1.cp1136
changelog:
  - Rename package from MySQL to MySQL51 to prevent packaging system confusion
  - Obsolete MySQL package names
  - Patch scripts to use /usr/local/cpanel/3rdparty/bin/perl
  - add parallel build to default at -j6
  - remove detection of perl dependencies during build.
  - Add trigger for MySQL-server so mysqld is restarted when MySQL-server is removed


author: Rikus Goodell <rikus.goodell@cpanel.net> 5.1.67-1.cp1136
changelog:
  - New upstream release
  - Remove previous patch, as CVE-2012-5611 is addressed in 5.1.67.
  - Put MySQL back into init system when RPM is renamed to MySQL51


author: Balasubramanian Kandasamy <balasubramanian.kandasamy@oracle.com> - 8.0.4-0.1
changelog:
  - Add meb as sub package
  - Remove obsoleted mysqltest man pages
  - Independently choose SSL for the 5.6 compat lib, depending on commercial
  - Include udf_example.so in test package
  - Add component_validate_password component
  - Add License Book, remove COPYING
  - No longer need to remove obsoleted mysqltest man pages
  - Add perl modules for test subpackage


author: Erlend Dahl <erlend.dahl@oracle.com> - 8.0.11-1
changelog:
  - Removed milestone marker
  - Move mysqlx to default plugin
  - Add component_mysqlx_global_reset.so
  - No longer need to remove obsoleted mysqltest man pages
  - Add perl modules for test subpackage
  - Fixed the package names for GA release


author: Tomislav Plavcic <tomislav.plavcic@percona.com>
changelog:
  - Fixed yum update fails and complains about duplicate pid (#1454917)
  - Percona Server fails to install on centos 7 if mariadb-devel package installed (#1499721)


author: Jan-Frode Myklebust <janfrode@tanso.net> - 0.97-10
changelog:
  - Make sure /var/lib/clamav/mirrors.dat has owner fixed on upgrade.
  - Don't start clamd or milter service by default.


author: Jan-Frode Myklebust <janfrode@tanso.net> - 0.97-11
changelog:
  - Delete /var/lib/clamav/mirrors.dat, it will be recreated on first run.
  - clamav-milter config cleanups.


author: Jan-Frode Myklebust <janfrode@tanso.net> - 0.97-12
changelog:
  - Move deletion of /var/lib/clamav/mirrors.dat to db package.
  - Don't enable NotifyClamd in freshclam config and cronjob, as not
    everybody is running clamd. Running clamd's will anyway notice
    when db is updated.


author: Jan-Frode Myklebuust <janfrode@tanso.net> - 0.97.2-3
changelog:
  - include updated clamd-wrapper which get the PidFile setting from the
    service configuration file. 
  - updated to 0.97.2
  - Build-require xz
  - CVE-2011-2721 Off-by-one error by scanning message hashes (#725694)


author: Paul Wouters <pwouters@redhat.com> - 0.98.3-1
changelog:
  - Upgrade to 0.98.3
  - Fix --with-libcurl parameter to avoid automatic path detection breakage
  - openssl-devel is now required for hashing code.
  - Added clamsubmit to main package
  - Re-enabled --with-llvm as this speeds up deployment a lot.
  - Fixed older changelog dates


author: Robert Scheck <robert@fedoraproject.org> - 0.98.4-1
changelog:
  - Upgrade to 0.98.4 and updated daily.cvd (#1111811)
  - Add build requirement to libxml2 for DMG, OpenIOC and XAR


author: Orion Poplawski <orion@cora.nwra.com> - 0.99.2-1
changelog:
  - Update to 0.99.2
  - Enable llvm
  - Drop cliopts patch fixed upstream, use upstream's "--forground" option name
  - Fix main.cvd (fedora #1325482, epel #1325717)
  - Own bytecode.cld (#1176252) and mirrors.dat, ship bytecode.cvd
  - Update daily.cvd
  - Fixup Requires(pre) usage (#1319151)


author: Igor Savenko <bliss@cloudlinux.com> 0.1-9
changelog:
  - CLEN-48: cloullinux-file-change-collector hangs on determining if datacycle.pl is present
  - CLEN-49: Enable choosing type of file event


author: Igor Savenko <bliss@cloudlinux.com> 0.1-13
changelog:
  - CLEN-51: cloudlinux-file-change-collector crashes when database is locked.
    Rivals are terminated now if permitted in config


author: Igor Savenko <bliss@cloudlinux.com> 0.2-3
changelog:
  - CLEN-67: cloudlinux-file-change-collector could not flush events list when encounters exception on line parsing


author: Igor Savenko <bliss@cloudlinux.com> 0.2-5
changelog:
  - Bugfix: Make cloudlinux-file-change-collector PID file non-world writeable
  - Bugfix: fixed log write sentence


author: Dave Anderson <anderson@redhat.com> - 5.0.0-20.el6
changelog:
  - Fix for x86_64 "bt" if kdump NMI occurs while in system_call but 
    prior to switching from per-thread user stack to kernel stack.
    Resolves: rhbz#608173
  - Fix for x86 "bt" to recognize all kernel entry-points without having
    to hardwire their symbol names.
    Resolves: rhbz#608718


author: Dave Anderson <anderson@redhat.com> - 5.0.0-21.el6
changelog:
  - Implement support for x86 and x86_64 RHEL6 xen/pvops kernels, both live
    and xendumps.
    Resolves: rhbz#608779


author: Dave Anderson <anderson@redhat.com> - 5.0.0-23.el6
changelog:
  - Additional support for QEMU/savevm ram device version 4 to only use
    "pc.ram" segments and to handle the 512MB I/O hole at e0000000.
    Resolves: rhbz#619758


author: Dave Anderson <anderson@redhat.com> - 5.1.1-1.el6
changelog:
  - Add support for s390x ELF dumpfile format.  
    Resolves: rhbz#633449
  - Add support for s390x compressed/filtered dumpfiles generated by 
    makedumpfile.
    Resolves: rhbz#637197
  - Fix for the "bt" command with 2.6.27 and later x86_64 kernels to
    prevent the possible display of a an invalid "vgettimeofday" frame
    above the topmost "system_call_fastpath" frame, followed by two
    read errors indicating "bt: read error: kernel virtual address:
    ffffffffff600000  type: gdb_readmem_callback".
    Resolves: rhbz#637735
  - Save the per-cpu register contents stored in the "cpu" devices of 
    x86_64 KVM dumpfiles, and use their contents for x86_64 backtrace RSP
    and RIP hooks in the case of KVM "live dumps" where the guest system 
    was not in a crashed state when the "virsh dump" operation was done
    on the KVM host.  If an active task was running in user space when 
    a live dump was taken, that will be indicated by the "bt" output, 
    along with the user-space register contents.  The x86_64 register set 
    saved for each cpu may be displayed with the "help -[D|n]" command.
  - Fix for the x86_64 "bt" command to more correctly find the starting
    backtrace RIP and RSP hooks in KVM dumpfiles.  Without the patch,
    backtraces that should start in the interrupt or exception stacks
    were not being detected correctly.
    Resolves: rhbz#649050
  - Fix to utilize the correct "cpu" device format in x86 KVM dumpfiles
    Without the patch, the x86 registers were read in a 32-bit format, 
    which is only true if the host machine was running a 32-bit kernel.
    With the patch, the format defaults to the 64-bit format, and is
    switched to the 32-bit format if it can be determined that the host
    machine was running a 32-bit kernel.
  - Save the per-cpu register contents stored in the "cpu" devices of
    x86 KVM dumpfiles, and use their contents for x86 backtrace ESP and
    EIP hooks in the case of KVM "live dumps", i.e., where the guest
    system was not in a crashed state when the "virsh dump" operation
    was done on the KVM host.  If an active task was running in user
    space when a live dump was taken, that will be indicated by the
    "bt" output, along with the user-space register contents.  The saved
    x86 register set for each cpu may also be displayed with the
    "help -[D|n]" command.
  - Fix for the x86 "bt" command to correctly find the starting backtrace
    EIP and ESP hooks for the active tasks in KVM dumpfiles where the
    kernel had crashed.
    Resolves: rhbz#649051
  - Fix for the cpu count determination in crashed x86 KVM dumpfiles, 
    where the non-crashing cpus are marked offline in the kernel's
    cpu_online_mask by smp_stop_cpu().  Depending upon the cpu number
    of the crashing task, the cpu count may be set to a value that is
    less than the number of present cpus.
  - Change to the manner in which the cpu count is determined for x86_64
    kernels.  SLES11 2.6.32 kernels delay the call to crash_kexec() until
    after smp_send_stop() is called by panic(), and so the cpu_online_map
    cannot be used for determining the cpu count.  With the patch, the
    cpu_present_map is used.
    Resolves: rhbz#649053
  - Rebase to upstream version 5.1.1.
    Resolves: rhbz#649070


author: Dave Anderson <anderson@redhat.com> - 5.1.1-2.el6
changelog:
  - Fix for x86 "bt" command to account for movement of ia32_sysenter_target()
    assembly function to a separate text section, and for the failure to
    resolve the backtrace of a non-active swapper task.
    Resolves: rhbz#682129
  - Upstream equivalency with 5.1.3 patch.
    Resolves: rhbz#649070


author: Dave Anderson <anderson@redhat.com> - 5.1.7-1.el6
changelog:
  - Fix for "kmem -[sS]" if NUMA node 0 has no memory associated with it.
    Resolves: rhbz#716931
  - Fix for the x86_64 "bt" command stack transition error when a non-crashing
    CPU receives a NMI immediately after receiving an interrupt from another 
    source. 
    Resolves: rhbz#712214
  - Fix for the handling of x86_64 compressed kdump dumpfiles where
    the crashing system contains more than 454 cpus.
    Resolves: rhbz#705142
  - Added a new "--osrelease <dumpfile>" command line option that
    displays the OSRELEASE vmcoreinfo string from a kdump dumpfile.
    Resolves: rhbz#703467
  - Update to the crash(8) man page and the associated "crash -h" output.
    Resolves: rhbz#695413
  - Rebase to upstream version 5.1.7.
    Resolves: rhbz#710193


author: Kamil Dudka <kdudka@redhat.com> 7.33.0-1
changelog:
  - new upstream release
  - fix missing initialization in NTLM code causing test 906 to fail
  - fix missing initialization in SSH code causing test 619 to fail


author: Philip J Perry <phil@elrepo.org> - 8.4.4-2
changelog:
  - Add symlinks for drbd files moved from /sbin to /usr/sbin
    [http://elrepo.org/bugs/view.php?id=418]


author: Eric Sandeen <sandeen@@redhat.com> 1.42-3
changelog:
  - Add broken system clock config to e2fsck.conf to let boot
    continue even if system clock very wrong.


author: Todd Zullinger <tmz@pobox.com> - 1.6.5.2-1
changelog:
  - git-1.6.5.2
  - Drop asciidoc --unsafe option, it should not be needed anymore
  - Don't use install -t/-T, they're not compatible with older coreutils
  - Don't use -perm /a+x with find, it's incompatible with older findutils


author: Adam Tkac <atkac redhat com> - 1.7.1-1
changelog:
  - update to 1.7.1 (#585990)
  - Use %{gitcoredir}/git-daemon as xinetd server (#529682) [Todd Zullinger]
  - Remove long fixed xinetd IPv6 workaround (#557528) [Todd Zullinger]
  - Make %{_var}/lib/git the default gitweb root (#556299) [Todd Zullinger]
  - Include gitweb/INSTALL file as documentation [Todd Zullinger]
  - Ship example gitweb config (%{_sysconfdir}/gitweb.conf) [Todd Zullinger]
  - Install missing gitweb.js (#558740) [Todd Zullinger]
  - Only BR perl(Error) [Todd Zullinger]
  - Use config.mak to set build options [Todd Zullinger]
  - Disable building of unused python remote helper libs [Todd Zullinger]
  - Comply with Emacs add-on packaging guidelines (#573423) [Jonathan Underwood]
    - Place elisp source files in separate emacs-git-el package
    - Place git support files in own directory under site-lisp
    - Use Emacs packaging macros
  - Replace $RPM_BUILD_ROOT with %{buildroot} [Todd Zullinger]


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.12-1.146
changelog:
  - Fix memory order when reading libgcc handle (#905941).
  - Fix format specifier in malloc_info output (#1027261).
  - Fix nscd lookup for innetgr when netgroup has wildcards (#1054846).


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.12-1.147
changelog:
  - Fix stack overflow due to large AF_INET6 requests (CVE-2013-4458, #1111460).
  - Fix buffer overflow in readdir_r (CVE-2013-4237, #1111460).


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.12-1.149
changelog:
  - Remove gconv transliteration loadable modules support (CVE-2014-5119,
    - _nl_find_locale: Improve handling of crafted locale names (CVE-2014-0475,


author: Sandro Kalatozishvili <skalatozishvili@cloudlinux.com> 1.2-96
changelog:
  - CLOS-2058: Fixed performance issue related to governor package limits synchronization
  - CLOS-2077: Fixed KeyError exception for dbgovernor set_path_environ function


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.2-99
changelog:
  - CLOS-2049: Governor dropin removed
  - CLOS-2170: Add additional safeguards for detecting MySQL AUTO version with DirectAdmin
  - CLOS-2173: Added mysqlclient21 installation for clMariaDB
  - CLOS-2117: mysql-version-list option added
  - MariaDB 10.11 support temporarily removed


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.2-102
changelog:
  - CLOS-2215: bad_users_list ownership fixed
  - CLOS-1759: dbgovernor_map mysql charset changed to utf8mb
  - CLOS-1730: Timeouts added to avoid repetive log messages


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.2-105
changelog:
  - CLOS-2322: Fixed DB limits not applying to users after a MySQL Governor service restart
  - CLOS-2418: MySQL 8.0 community edition repo url changed


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.2-106
changelog:
  - CLOS-2373: Backup confirmation added to governor script

  - CLOS-2322: Fixed DB limits not applying to users after a MySQL Governor service restart
  - CLOS-2418: MySQL 8.0 community edition repo url changed


author: Dmitry Shibut <dshibut@cloudlinux.com> Alexandr Demeshko <ademeshko@cloudlinux.com> 1.2-107
changelog:
  - CLOS-2319: EOLed cl-MariaDB 10.3 removal result to server down
  - CLOS-2471: Fixed wizzard installation


author: Alexandr Demeshko <ademeshko@cloudlinux.com> Timur Averianov <taverianov@cloudlinux.com> 1.2-109
changelog:
  - CLOS-2572: LVE busy in MySQL processes issue fixed
  - CLOS-2506: Fixed MySQL community downloads URL


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.2-110
changelog:
  - CLOS-2322: Fixed issue with not applying limits after Governor service restart
  - CLOS-2535: Governor threads logging added


author:
  Sandro Kalatozishvili <skalatozishvili@cloudlinux.com> Timur Averianov <taverianov@cloudlinux.com> 1.2-111

changelog:
  - CLOS-2645: Corrected MariaDB version detection logic for DA config
  - CLOS-2593, CLOS-2613: Added extended logging
  - CLOS-2385: Added watchdog monitoring utility to governor package
  - CLOS-2386: Implemented external Sentry logging mechanism


author:
  Sandro Kalatozishvili <skalatozishvili@cloudlinux.com> Timur Averianov <taverianov@cloudlinux.com> 1.2-111

changelog:
  - CLOS-2645: Corrected MariaDB version detection logic for DA config
  - CLOS-2593, CLOS-2613: Added extended logging
  - CLOS-2385: Added watchdog monitoring utility to governor package
  - CLOS-2386: Implemented external Sentry logging mechanism
  - CLOS-2594, CLOS-2641: Implemented logging from MySQL and uniform logging


author: Tom Callaway <spot@fedoraproject.org> - 2.0-11.1
changelog:
  - pass -fno-strict-aliasing
  - create "gperftools" metapackage.
  - update to svn r218 (cleanups, some ARM fixes)


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-25
changelog:
  - htcacheclean: exit with code 4 if nonprivileged user runs initscript (#805810)
  - rotatelogs: omit the second arg when invoking a post-rotate program (#876923)


author: CloudLinux Packaging Team <packager@cloudlinux.com> - 2.2.15-26
changelog:
  - mod_ssl: fix verification of certificate signed by intermediate CA
  - ability to customize document root


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-47.1
changelog:
  - mod_proxy: fix regression caused inherited workers to use a different
    scoreboard slot then the original one (#1252574)


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-47.4
changelog:
  - core: fix possible long graceful restart caused by race condition between
    httpd children processes (#1304712)


author: Alexey Berezhok <alexey.berezhok@cloudlinux.com> - 2.2.15-47.4.el6_7.4.cloudlinux.1
changelog:
  - Added mod_rewrite_ws with websocket support (https://bz.apache.org/bugzilla/show_bug.cgi?id=55598)


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-53
changelog:
  - core: fix possible long graceful restart caused by race condition between
    httpd children processes (#1301758)


author: Alexey Berezhok <alexey.berezhok@cloudlinux.com> - 2.2.15-53.el6.cloudlinux
changelog:
  - added mod_rewrite_ws with websocket support (https://bz.apache.org/bugzilla/show_bug.cgi?id=55598)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.2.15-54.1
changelog:
  - Resolves: #1374729 - ProxyRemote with HTTPS backend sends requests
    with absoluteURI instead of abs_path


author: Luboš Uhliarik <luhliari@redhat.com> - 2.2.15-54.2
changelog:
  - Resolves: #1391517 - when ProxyErrorOverride is On, modcluster
    return 503 status code on subsequent requests


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.4-12
changelog:
  - mod_unique_id: replace use of hostname + pid with PRNG output (#976666)
  - apxs: mention -p option in manpage


author: Jan Kaluza <jkaluza@redhat.com> - 1.4.6-2
changelog:
  - initial spec rewrite for scl build
  - fix strict-aliasing gcc warning
  - remove unused SHA384 and SHA512 code
  - update license


author: Kamil Dudka <kdudka@redhat.com> 7.46.0-1
changelog:
  - disable silent builds (suggested by Paul Howarth)
  - use default port numbers when running the upstream test-suite
  - install zsh completion script
  - new upstream release


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.18-5
changelog:
  - apachectl: use httpd from the SCL in apachectl (#1319780)
  - apachectl: ignore HTTPD variable also on RHEL6 (#1221681)


author: Joe Orton <jorton@redhat.com> - 2.4.18-6
changelog:
  - fix apxs generated Makefile path to build directory (#1319837)
  - use redirects for lang-specific /manual/ URLs (#1324406)


author: Joe Orton <jorton@redhat.com> - 2.4.18-7
changelog:
  - mod_lua: use anonymous shm segment (#1225116)
  - revert 'apachectl graceful' to start httpd if stopped (#1221702)


author: Joe Orton <jorton@redhat.com> - 2.4.18-10
changelog:
  - load more built modules (including mod_http2) by default (#1302653)
  - lower log-level for mod_ssl NPN debugging (#1302653)


author: Joe Orton <jorton@redhat.com> - 2.4.25-2
changelog:
  - merge default config changes from Fedora
  - mod_ssl: use "localhost" in the dummy SSL cert if len(FQDN) > 59 chars


author: Joe Orton <jorton@redhat.com> - 2.4.25-5
changelog:
  - mod_proxy_fcgi: revert to pre-2.4.23 SCRIPT_FILENAME mangling (#1414037)
  - mod_proxy: fix regression in per-dir ProxyPass (#1417482)


author: Joe Orton <jorton@redhat.com> - 2.4.25-9
changelog:
  - link only httpd, not support/* against -lselinux -lsystemd (#1433474)
  - don't enable SO_REUSEPORT in default configuration (#1432249)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.27-7
changelog:
  - Related: #1487164 - apache user is not created during httpd
    installation when apache group already exist with GID other than 48


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.34-5
changelog:
  - Resolves: #1640722 - mod_md is missing in httpd24-httpd
  - Resolves: #1635838 - CVE-2018-11763 httpd24-httpd: httpd:
    DoS for HTTP/2 connections by continuous SETTINGS


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.34-7
changelog:
  - Resolves: #1646937 - Unable to start httpd
  - Resolves: #1638711 - comments should be allowed at the end of Allow from
    statements


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-7.1
changelog:
  - Resolves: #1695428 - CVE-2019-0211 httpd24-httpd: httpd: privilege escalation
    from modules scripts


author: Paul Howarth <paul@city-fan.org> 2.3.6-6
changelog:
  - Fix compatibility with httpd 2.4 in F-18/RHEL-7 onwards
  - Use /run rather than /var/run from F-15/RHEL-7 onwards


author: Paul Howarth <paul@city-fan.org> 2.3.7-1
changelog:
  - Update to 2.3.7
    - Introduce FcgidWin32PreventOrphans directive on Windows to use OS Job
      Control Objects to terminate all running fcgi's when the worker process
      has been abruptly terminated (PR: 51078)
    - Periodically clean out the brigades that are pulling in the request body
      for handoff to the fcgid child (PR: 51749)
    - Resolve crash during graceful restarts (PR: 50309)
    - Solve latency/congestion of resolving effective user file access rights
      when no such info is desired, for config-related filename stats (PR: 51020)
    - Fix regression in 2.3.6 that broke process controls when using
      vhost-specific configuration
    - Account for first process in class in the spawn score
  - Drop patch for CVE-2012-1181, now included in upstream release


author: Paul Howarth <paul@city-fan.org> 2.3.9-1
changelog:
  - Update to 2.3.9
    - SECURITY: Fix possible heap buffer overwrite (CVE-2013-4365)
    - Add experimental cmake-based build system for Windows
    - Correctly parse quotation and escaped spaces in FcgidWrapper and the AAA
      Authenticator/Authorizor/Access directives' command line argument, as
      currently documented (PR#51194)
    - Honor quoted FcgidCmdOptions arguments (notably for InitialEnv
      assignments) (PR#51657)
    - Conform script response parsing with mod_cgid and ensure no response body
      is sent when ap_meets_conditions() determines that request conditions are
      met
    - Improve logging in access control hook functions
    - Avoid making internal sub-requests and processing Location headers when in
      FCGI_AUTHORIZER mode, as the auth hook functions already treat Location
      headers returned by scripts as an error since redirections are not
      meaningful in this mode
    - Revert fix for PR#53693, added in 2.3.8 but undocumented
    - Fix issues with a minor optimization added in 2.3.8


author: Stefan Mortensen <stefan.mortensen@atomia.com>, Mikhail Zhbankov <mzhbankov@cloudlinux.com> 1.0-26
changelog:
  - Fixed issue where cfg->path_regex was never being set when setting a custom path with LVEPathRegexp causing the default to always be used
  - AAP-57: mod_hostinglimits not increases EP in cgi mode (but process is in LVE)


author: Eugen Vodilov <evodilov@cloudlinux.com> - 1.0-30
changelog:
  - AAP-142: avoid lve_leave using filters
  - AAP-151: add EP limit hiting when EP is reached max value


author: Nikolay Petukhov <npetukhov@cloudlinux.com> Alexandr Demeshko <ademeshko@cloudlinux.com> 1.1-62
changelog:
  - MODLS-935: Fixed malformed http response caused by wrong http header
  - MODLS-940: Added oom score adjustment for lsphp processes


author: Nikolay Petukhov <npetukhov@cloudlinux.com> Alexandr Demeshko <ademeshko@cloudlinux.com> 1.1-63
changelog:
  - MODLS-952: Fixed the bug added when solving MODLS-935
  - CRIU support disabled on CL9 due to MODLS-955


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.1-64
changelog:
  - MODLS-946: lsapi_backend_use_own_log option context fixed
  - MODLS-956: liblsapi dependency made strict for mod_lsapi packages
  - MODLS-959: HTTP output filter error processing changed


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.1-65
changelog:
  - MODLS-963: ea-php82 handler added
  - MODLS-962: DA installation script modified to be called without parameters


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.1-73
changelog:
  - CLOS-2334: Minor mod_lsapi scripts corrections
  - CLOS-2348: Execute condition changed in switch_mod_lsapi script


author: Leonid Kanter <lkanter@cloudlinux.com> - 0.7.2-1
changelog:
  - update to with-setid-mode="owner"
  - handle update of packages built with --with-setid-mode="owner" (dkasyanov@)


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.5-3.1
changelog:
  - KMODLVE-109: don't allow unlinked lves to block lvp cpu limit change
  - KMODLVE-111: need to print error if cgroup rename or rmdir fails


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.5-5
changelog:
  - AL-2163: Reworked detection of the GRUB related issues during kernel installation/update
  - CLKRN-175: register events with different number
  - CLKRN-170: take into account stack_guard_gap value
  - KMODLVE-96: allow to use self and default commands for lvp info
  - KMODLVE-119: fix potential errors on exit from LVE by using only one namespace
  - KMODLVE-121: fix module panic on exit by closing freezer cgroup first before releasing it
  - KMODLVE-122: fix kernel crash on init if cgroups mount failed


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.5-7
changelog:
  - CLKRN-147: fix wrong uncharge in UB0
  - CLKRN-187: ext4: handle the rest of ext4_mb_load_buddy() ENOMEM errors
  - CLKRN-194: fix for CVE-2017-8824
  - CLKRN-195: mm: Count list_lru_one::nr_items lockless


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.5-8
changelog:
  - Added patches for Meltdown and Spectre attacks (CVE-2017-5753, CVE-2017-5715,
    CVE-2017-5754)
  - KMODLVE-142: resync stats before returning IO usage
  - KMODLVE-141: better make distclean cleanup
  - KMODLVE-140: fix panic with module loading
  - KMODLVE-139: add ability to set debug level in load time
  - KMODLVE-138: properly check lve_cgroup_kernel_open return value
  - KMODLVE-134: code cleanup for better test coverage
  - KMODLVE-131: improve failure IDs handling
  - KMODLVE-127: lvp_lve_move implementation


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.5-10
changelog:
  - CLKRN-210: fix CVE-2017-5715 [branch target injection] aka 'Spectre Variant 2'
  Fixed SPEC_CTRL and IBPB_SUPPORT features setting after microcode update
  - CLEN-61: restore serialized access to TSC through mfence
  - Restored patch to fix regression and cover CLKRN-172


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.5-12
changelog:
  - AL-2579: Fixed GRUB checks when system uses UEFI
  - CLKRN-153: fix possible race between dentry_kill and RCU-walk
  - KMODLVE-149: check a notifier pointer while unregistering notifiers


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.5-13
changelog:
  - CLKRN-219: fixed boot on Xen PV instances
  - CLKRN-230: fix ACL issue on XFS
  - Improved Meltdown/Spectre patch, returned missing chunks


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.5-14
changelog:
  - AL-2620: Use find-debuginfo.sh script from Fedora to reduce kernel binary RPM compile time
  - CLKRN-240: Fix NULL pointer dereference in __rds_rdma_map
  - CLKRN-234: fix a possible deadlock in the sctp socket diagnostic code
  - CLKRN-235: sched/numa: fixed softlockup in scheduler when running stressed workloads
  - CLKRN-239: fix Xen PV boot


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.5-15
changelog:
  - CLKRN-238: Fixed memory allocation size during procfs access
  - KMODLVE-92: Added lve ftrace events to improve debugging
  - KMODLVE-145: Check admin permissions while deleting an LVE
  - KMODLVE-153: Fixed a deadlock scenario on LVE destroy
  - KMODLVE-154: Fixed lvp mapping error which leads to inaccessible lvp
  - KMODLVE-155: Fixed incorrect IO counter value in lvetop


author: Patrick "Jima" Laughton <jima@beer.tclug.org> 1.12-1
changelog:
  - New upstream version
  - New upstream web site (thanks JPO!)
  - Patch for inconsistent shrext variable
  - Minor edits for consistency


author: Pino Toscano <ptoscano@redhat.com> - 1:1.20.11-3
changelog:
  - Fix .new method in Ruby bindings.
    resolves: rhbz#1072062
  - Properly use timeout --foreground when running tests
    resolves: rhbz#1025269
  - Fix cancellation on errors in tar-in
    resolves: rhbz#1091805
  - Check whether something has been mounted to / when using mount-local* APIs
    resolves: rhbz#1057510


author: Pino Toscano <ptoscano@redhat.com> - 1:1.20.11-4
changelog:
  - Don't inhibit partition detection if LDM not available
    resolves: rhbz#1079182
  - Deprecate blockdev_setbsz and make it do nothing
    resolves: rhbz#624335
  - Disable fstrim API
    resolves: rhbz#982979
  - Backport virt-sysprep from libguestfs 1.24, with few backports from
    greater versions too
    resolves: rhbz#1037166
  - virt-sparsify: don't overwrite block or char devices if used as output files
    resolves: rhbz#1056558
  - fix few typos in the documentation
    resolves: rhbz#1099332


author: Pino Toscano <ptoscano@redhat.com> - 1:1.20.11-7
changelog:
  - FUSE: fix access as root to files and directories not owned by root
    resolves: rhbz#1106548
  - virt-sparsify: check for available space before starting
    resolves: rhbz#1097359
  - Enable gdisk support to make part-get-gpt-type and part-set-gpt-type work
    resolves: rhbz#965495


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.20.11-11
changelog:
  - virt-sysprep: Fix locking accounts with passwords.
    resolves: rhbz#1037166
  - Update copy-patches script to RHEL 6.6.


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1:0.10.33-1
changelog:
  - new upstream release 0.10.33
    https://github.com/joyent/libuv/blob/v0.10.33/ChangeLog
  - update URL to point to the new libuv.org


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1:0.10.33-2
changelog:
  - add missing %{_?isa} to devel requires of main package
  - fix some issues with the pkgconfig file and Group reported by Michael Schwendt


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1:0.10.34-1
changelog:
  - new upstream release 0.10.34
    https://github.com/joyent/libuv/blob/v0.10.34/ChangeLog
  - resolves incorrect revocation while reliquishing privileges security
    vulnerability (CVE-2015-0278, RHBZ#1194651)


author: John Eckersberg <jeckersb@redhat.com> - 0.1.2-2
changelog:
  - Remove README and LICENSE from docs on -devel package
  - Remove -static package and merge contents into the -devel package


author: John Eckersberg <jeckersb@redhat.com> - 0.1.2-4
changelog:
  - Minor tweaks to spec file
  - Enable %check section
  - Thanks Gareth Armstrong <gareth.armstrong@hp.com>


author: pjp <pjp@fedoraproject.org> - r127-1
changelog:
  - Fixed a bug in LZ4 HC streaming mode
  - New lz4frame API integrated into liblz4
  - Fixed a GCC 4.9 bug on highest performance settings


author: pjp <pjp@fedoraproject.org> - r128-1
changelog:
  - lz4cli sparse file support
  - Restored lz4hc compression ratio
  - lz4 cli supports long commands
  - Introduced lz4-static sub package BZ#1208203


author: pjp <pjp@fedoraproject.org> - r129-1
changelog:
  - New LZ4_compress_fast() API.
  - New LZ4 CLI improved performance with multiple files.
  - Other bug fix and documentation updates.


author: pjp <pjp@fedoraproject.org> - r130-1
changelog:
  - Fixed: incompatibility sparse mode vs console.
  - Fixed: LZ4IO exits too early when frame crc not present.
  - Fixed: incompatibility sparse mode vs append mode.
  - Performance fix: big compression speed boost for clang(+30%).


author: pjp <pjp@fedoraproject.org> - r131-1
changelog:
  - New: Dos/DJGPP target #114.
  - Added: Example using lz4frame library #118.
  - Changed: liblz4.a no longer compiled with -fPIC by default.


author: Anton Arapov <anton@redhat.com> - 1:1.17-10
changelog:
  - Fix buffer overflow
  - Resolves: rhbz#768803
  - Update to microcode-20111110.dat
  - Resolves: rhbz#736266


author: Paul Howarth <paul@city-fan.org> 2.3.6-1
changelog:
  - Update to 2.3.6 (see CHANGES-FCGID for full details)
    - Fix possible stack buffer overwrite (CVE-2010-3872)
    - Change the default for FcgidMaxRequestLen from 1GB to 128K; administrators
      should change this to an appropriate value based on site requirements
    - Correct a problem that resulted in FcgidMaxProcesses being ignored in some
      situations
    - Return 500 instead of segfaulting when the application returns no output
  - Don't include SELinux policy for RHEL-5 builds since RHEL >= 5.5 includes it
  - Explicitly require /bin/sed for fixconf script


author: Paul Howarth <paul@city-fan.org> 2.3.6-2
changelog:
  - Add /etc/tmpfiles.d/mod_fcgid.conf for builds on Fedora 15 onwards to
    support running with /var/run on tmpfs (#656625)


author: Paul Howarth <paul@city-fan.org> 2.3.6-5
changelog:
  - Fix regression in 2.3.6 that broke process controls when using vhost-specific
    configuration (upstream issue 49902, #783742, CVE-2012-1181)


author: Michael Fleming <mfleming+rpm@enlartenment.com> 2.5.6-1
changelog:
  - Update to upstream 2.5.6
  - Remove references to mlogc, it no longer ships in the main tarball.
  - Link correctly vs. libxml2 and lua (bz# 445839)
  - Remove bogus LoadFile directives as they're no longer needed.


author: Tom Lane <tgl@redhat.com> 5.1.47-3
changelog:
  - Add -p "$mypidfile" to initscript's status call to improve corner cases.
    (Note: can't be fixed in Fedora until 595597 is fixed there.)
  Resolves: #596008


author: Tom Lane <tgl@redhat.com> 5.1.47-4
changelog:
  - Add backported patch for CVE-2010-2008 (upstream bug 53804)
  Resolves: #614215
  - Add BuildRequires perl(Time::HiRes) ... seems to no longer be installed
    by just pulling in perl.


author: Tom Lane <tgl@redhat.com> 5.1.52-1
changelog:
  - Update to MySQL 5.1.52, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-52.html
    including numerous small security issues
  Resolves: #652554
  - Sync with current Fedora package; this includes:
  - Duplicate COPYING and EXCEPTIONS-CLIENT in -libs and -embedded subpackages,
    to ensure they are available when any subset of mysql RPMs are installed,
    per revised packaging guidelines
  - Allow init script's STARTTIMEOUT/STOPTIMEOUT to be overridden from sysconfig


author: Tom Lane <tgl@redhat.com> 5.1.61-1
changelog:
  - Update to 5.1.61, for assorted upstream bugfixes including
    numerous CVEs announced in January 2012
  Resolves: #787192


author: Tom Lane <tgl@redhat.com> 5.1.66-1
changelog:
  - Update to 5.1.66, for assorted upstream bugfixes including
    CVEs announced in July and October 2012
  Resolves: #871814


author: Tom Lane <tgl@redhat.com> 5.1.67-1
changelog:
  - Update to 5.1.67, for assorted upstream bugfixes including
    CVEs announced in January 2013
  Resolves: #901381


author: Tom Lane <tgl@redhat.com> 5.1.69-1
changelog:
  - Update to 5.1.69, for assorted upstream bugfixes including
    CVEs announced in April 2013
  Resolves: #953084


author: Jason Litka <http://www.jasonlitka.com> 5.0.91-1
changelog:
  - Update source to 5.0.91
  - Update patches to match full 5.0.91 packages
  - Build for EL4 & EL5 for utterramblings repo before upgrading to 5.1 GA


author: Daniil Leonov <dleonov@cloudlinux.com> - 1.10.3-2-cloudlinux.els
changelog:
  - Fixed CVE-2021-23017 : Off-by-one in ngx_resolver_copy() when
  - labels are followed by a pointer to a root domain name


author: Dmitry Antipov <dantipov@cloudlinux.com> - 1.10.3-4.tuxcare.els4
changelog:
  - CVE-2021-3618: drop the connection after reaching the specified number of
    invalid protocol commmands


author: Dmitry Antipov <dantipov@cloudlinux.com> - 1.10.3-4.tuxcare.els5
changelog:
  - CVE-2022-41741: fix memory corruption in the ngx_http_mp4_module
  - CVE-2022-41742: fix memory disclosure in the ngx_http_mp4_module


author: Ben Boeckel <mathstuf@gmail.com> - 1.7.1-1
changelog:
  - update to 1.7.1
  - fix bash completion for the binary rename (#1352330)
  - disable test which fails to koji rlimit settings


author: Ravindra Kumar <ravindrakumar@vmware.com> - 9.4.0-7
changelog:
  - Add -D_DEFAULT_SOURCE to suppress warning as suggested in
    https://sourceware.org/bugzilla/show_bug.cgi?id=16632


author: Ravindra Kumar <ravindrakumar@vmware.com> - 9.4.0-9
changelog:
  - Removed unnecessary package dependency on 'dbus'
  - Moved 'vm-support' script to /usr/bin
  - Added a call to 'tools.set.version' RPC to inform VMware
    platform when open-vm-tools has been uninstalled


author: Ravindra Kumar <ravindrakumar@vmware.com> - 9.4.6-1
changelog:
  - Package new upstream version open-vm-tools-9.4.6-1770165
  - Added "autoreconf -i" and its build dependencies (autoconf, automake and libtool)
    to generate configure script, this is required for version 9.4.6 as it does not
    have configure script bundled in the tar
  - Fix (sizeof_argument.patch) for bad sizeof argument error


author: Simone Caronni <negativo17@gmail.com> - 9.10.2-3
changelog:
  - Disable VGAuth completely as it can not be built with current EPEL 6 packages:
    https://github.com/vmware/open-vm-tools/issues/37


author: David Sommerseth <dazo@eurephia.org> - 2.4.2-1
changelog:
  - Update to upstream v2.4.2
  - This update fixes CVE-2017-7478 and CVE-2017-7479
  - Restore the old plug-in locations (rhbz#1444535)


author: David Sommerseth <dazo@eurephia.org> - 2.4.3-1
changelog:
  - Updating to upstream openvpn-2.4.3
  - Fix remotely-triggerable ASSERT() on malformed IPv6 packet {CVE-2017-7508}
  - Prevent two kinds of stack buffer OOB reads and a crash for invalid input data {CVE-2017-7520}
  - Fix potential double-free in --x509-alt-username {CVE-2017-7521}
  - Fix remote-triggerable memory leaks {CVE-2017-7521}
  - Verify PGP signature of source tarball as part of package building


author: David Sommerseth <dazo@eurephia.org> - 2.4.4-1
changelog:
  - Update to upstream openvpn-2.4.4
  - Includes fix for possible stack overflow if --key-method 1 is used {CVE-2017-12166}
  - Build against Fedora EPEL lz4 compression library
  - Build with long running test cases


author: David Sommerseth <dazo@eurephia.org> - 2.4.5-1
changelog:
  - Updating to upstream, openvpn-2.4.5
  - Package upstream ChangeLog, which contains a bit more details than Changes.rst
  - Cleaned up spec file further, removed Group: tag, trimmed changelog section,
    added gcc to BuildRequires.
  - Excluded not relevant file, README.mbedtls
  - Changed crypto self-test to test AES-{128,256}-{CBC,GCM} instead of only BF-CBC (deprecated)


author: Brian C. Lane <bcl@redhat.com> 2.1-17
changelog:
  - Disable t9020 (scsi_debug num_parts is broken)
  - Add a wait loop to t9030 when removing the partition
  - Remove size parameter from scsi_debug in t9030
    Resolves: #746098


author: Brian C. Lane <bcl@redhat.com> 2.1-18
changelog:
  - libparted: copy flags when duplicating GPT partitions
  - test for GPT partition duplicate
    Resolves: #750395
  - Use dm_udev_wait for dm operations
    Resolves: #698121
    Resolves: #751164


author: Brian C. Lane <bcl@redhat.com> 2.1-19
changelog:
  - libparted: HFS/HFS+ probe: don't let a corrupt FS evoke failed assertion
    Resolves: #797979
  - tests: exercise and document the HFS-probe bug fix
    Resolves: #797979
  - libparted: use largest_partnum in dm_reread_part_table
    Resolves: #803108
  - tests: test creating 20 device-mapper partitions
    Resolves: #803108
  - libparted: preserve the uuid on dm partitions
    Resolves: #832145
  - tests: Make sure dm UUIDs are not erased
    Resolves: #832145


author: Brian C. Lane <bcl@redhat.com> 2.1-21
changelog:
  - Raise size limit on loop devices
    Resolves: #869743
  - Remove dm device when last partition is removed
    Resolves: #851705


author: Brian C. Lane <bcl@redhat.com> 2.1-22
changelog:
  - Add PreP GUID support
    Resolves: rhbz#1054283
  - Fix busy partition detection on devices witout sequential minor device numbers
    Resolves: rhbz#1018075
  - Fix align-check in interactive mode
    Resolves: rhbz#975478


author: Brian C. Lane <bcl@redhat.com> 2.1-23
changelog:
  - Drop the warning about greater than 512-byte sector sizes being experimental
    Resolves: rhbz#929319


author: Igor Seletskiy <iseletsk@cloudlinux.com> 0.2-1
changelog:
  - Added ability to specify multiple processes, minimum UID via config file
  - perfmon-daemon is installed as perfmon
  - Added logging to syslog
  - Added man page


author: Remi Collet <rcollet@redhat.com> - 5.3.3-39
changelog:
  - xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668
  - core: fix integer overflow in unserialize() CVE-2014-3669
  - exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670


author: Remi Collet <rcollet@redhat.com> - 5.3.3-41
changelog:
  - core: fix double in zend_ts_hash_graceful_destroy CVE-2014-9425
  - core: fix use-after-free in unserialize CVE-2015-2787
  - exif: fix free on unitialized pointer CVE-2015-0232
  - gd: fix buffer read overflow in gd_gif.c CVE-2014-9709
  - date: fix use after free vulnerability in unserialize CVE-2015-0273
  - enchant: fix heap buffer overflow in enchant_broker_request_dict
    CVE-2014-9705
  - phar: use after free in phar_object.c CVE-2015-2301
  - soap: fix type confusion through unserialize


author: Remi Collet <rcollet@redhat.com> - 5.3.3-43
changelog:
  - core: fix multipart/form-data request can use excessive
    amount of CPU usage CVE-2015-4024
  - fix various functions accept paths with NUL character
    CVE-2015-4026, #1213407
  - ftp: fix integer overflow leading to heap overflow when
    reading FTP file listing CVE-2015-4022
  - phar: fix buffer over-read in metadata parsing CVE-2015-2783
  - phar: invalid pointer free() in phar_tar_process_metadata()
    CVE-2015-3307
  - phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
  - phar: fix memory corruption in phar_parse_tarfile caused by
    empty entry file name CVE-2015-4021
  - soap: more fix type confusion through unserialize #1222538


author: Kir Kolyshkin <kir@openvz.org> 1.3-1
changelog:
  - New functionality
    - ploop copy is working now
    - added pcopy's send_process() and receive_process() to lib
    - ploop mount: added -c <component_name> option
    - ploop(8): added (still incomplete)
    - ploop balloon discard: add --to-free and --min-block
    - add Preallocated item to DiskDescriptor.xml
    - add add ploop_get_mnt_by_dev() to lib
  - Bug fixes
    - fixed offline snapshot creation
    - fixed race between register/unregister_ploop_dev()
    - create image: if fallocate is not supported, fail
    - ploop init, ploop mount: fix -b option value validation
    - ploop mount: fix usage, -d is optional
    - ploop info: fix usage, DiskDescriptor.xml is required
    - ploop.spec: make main package require -lib of the same version
    - fixed a few ioctl-related error messages
    - ploop_create_snapshot(): check for number of snapshots limit (127)
    - ploop.spec: do not own _libdir
    - fix SYSEXIT_PARAM value
    - tools/ploop.c: do not use ploop_err()
    - tools: fixed/improved usage for many commands
    - tools: do not forget to print newlines
    - make install: use /usr/lib64 LIBDIR for x86_64
    - ploop_create_image(): free disk descriptor if fstype is NULL
    - create_balloon_file(): fix file name in error message
    - create_balloon_file(): umount and remove temp mnt point
    - create_balloon_file(): fix error message and return code
    - parse_xml(): add Blocksize validation
  - Improvements and cleanups
    - ploop lib: add visibility=hidden for internal functions
    - tools: use parse_size() and is_xml_name() where possible
    - remove merge_top_only param of get_delta_info()
    - ploop balloon: make it accept either -m or -d or both
    - ploop convert: change -t to -f
    - tools: unify parsing -f option
    - various code and headers cleanups
    - setver.sh: add -v, -b, -i


author: Kir Kolyshkin <kir@openvz.org> 1.4-1
changelog:
  - ploop copy: fix data loss during migration (#2287)
  - ploop(8): fixed according to doc team review
  - ploop mount: tell about unsupported underlying fs
  - ploop-copy: improve usage
  - ploop-copy -s: added mode to copy to local file
  - tools/ploop.c: do not return -1 from main()
  - tools/ploop.c: fix/unify working with diskdescriptor


author: Kir Kolyshkin <kir@openvz.org> 1.5-1
changelog:
  - NOTE: this version requires vzkernel >= 2.6.32-042stab061.1
  - New functionality:
  - * switch from old /dev/ploop/ symlink-based to new kernel cookie registration
  - * snapshots: switch to schema with constant top delta uuid
  - * use /proc/vz/ploop_minor based interface to get free minor
  - * if ploop is in maintenance state, try to complete it before doing
      snapshot/resize/merge/mount/umount/copy operation
  - * ploop mount: use in-kernel I/O module autodetection
  - * ploop balloon discard: new iterative compacting support
  - * ploop balloon discard: implement --stat
  - * ploop balloon discard: implement --automount
  - * ploop balloon discard: cancellation support
  - * ploop balloon: allow DiskDescriptor.xml argument
  - * ploop umount: implement -c component_name
  - * ploop list: implement
  - * /sbin/mount.ploop: do load ploop modules
  - Bug fixes:
  - * do not crash on empty DiskDescriptor.xml (libxml2 workaround)
  - * ploop convert: fix converting from expanded to raw
  - * ploop copy: fixed check for opened fd
  - * ploop copy: do not leak opened fds
  - * ploop create: fix gpt partition creation to be 4096 aligned
  - * ploop create, resize: round up size to be cluster aligned
  - * tools: few exit code fixes
  - * multiple usage, log and error message fixes
  - Improvements:
  - * ploop mount: check that mount point is a directory
  - * ploop umount: reduce retry count from 60 to 6
  - * ploop umount: print lsof output in case of failed umount
  - * ploop create: for prealloc image, use ftruncate if fallocate not supported
  - * ploop create, resize: add check for correct block device size
  - * scripts: de-bash-ify
  - * assorted code refactoring, cleanups and nitpicks
  - Library API changes:
  - * add ploop_resolve_functions() to aid in dynamic library loading
  - * introduce optimized ploop_get_info_by_descr(), remove ploop_get_info()
  - * replace ploop_{alloc,read}_diskdescriptor() with ploop_read_disk_descr()
  - * remove ploop_getdevice()


author: Kir Kolyshkin <kir@openvz.org> 1.6-1
changelog:
  - New functionality:
  - * offline image shrink support
  - * tools: added snapshot-list functionality
  - * extend switch snapshot functionality: ploop_switch_snapshot_ex()
  - * ploop.spec: disable udev iosched config for ploop devices
  - * ploop list: added functionality to list mount points
  - Bug fixes:
  - * ploop_mount_fs(): use mount_data for first mount
  - * ploop_mount(): do not allow to use ploop on fs w/o extents
  - * ploop_{create,resize}_image(): fixed size checks and rounding
  - * ploop_create_image(): fix memory leak on error path
  - * ploop_get_info(): fix reported disk size after switching snapshot
  - * ploop_get_info(): fix when ploop device is not mounted
  - * ploop_{umount,resize}_image() and many others: do not return -1
  - Improvements:
  - * much faster resize when using resize2fs with EXT4_IOC_RESIZE_FS support
  - * ploop discard: add cancellation support
  - * ploop_resize_image(): use real blocksize
  - * parse_xml(): deny processing DiskDescriptor.xml with several <Storage>
  - * do not auto-generate dynload.h, instead check if it's uptodate
  - * create_image(): display error message for incorrect parameters case
  - * introduce/use SYSEXIT_DEV_NOT_MOUNTED and SYSEXIT_FSCK errors
  - * alloc_diskdescriptor(): log error if calloc() fails
  - * ploop.spec: require util-linux, e2fsprogs etc.
  - * ploop.spec: require libs of the proper arch


author: Kir Kolyshkin <kir@openvz.org> 1.7-1
changelog:
  - New functionality:
  -- Large ploop image format support
  --- Now image size limit is 64 TB (was 2TB)
  --- Kernel >= 042stab078 is required
  -- Move ploop_grow* functions from tools to lib
  -- ploop grow: add DiskDescriptor.xml support
  -- ploop init, ploop_create_image(): add FS blocksize parameter
  - Improvements:
  -- make_fs(): create ext4fs with lazy_itable_init
  --- 3x smaller size and 3x faster creation time for 20GB image
  -- lib/ploop.h: "unexport" some internal functions
  -- Use /proc/self/mountinfo to get mount point by device
  -- More clear errors on parsing DiskDescriptor.xml
  -- print_output(): generalize print_lsof(), improve
  -- add_delta(): print more diags if EBUSY
  -- extend_delta_array(): print errors, return SYSEXIT_*
  -- run_prg(): print error if execvp() failed
  -- lib/balloon.c: print file name in an error message
  -- Introduce and use p_memalign(), fix errno handling
  -- Improvements and fixes to ploop_grow_*() to be used from library
  -- ploop_read_disk_descr(): set *di to NULL in case of error
  -- ploop_find_dev(): always assume ploop cookie is supported
  -- resize_fs(): try harder to find resize2fs binary
  -- Makefile.inc: ability to add CFLAGS
  - Fixes:
  -- lib/lock.c: create_file(): make sure dir exists (#2493, #2597)
  -- lib/fsutils.c: use ploop_execvp, drop absolute paths to binaries (#2595)
  -- ploop_log(): fix loglevel checking for file logging
  -- ploop_snapshot_switch_param: guids are const
  -- Recreate ploopXpY devices on ploop mount
  -- ploop_find_dev(): treat ENODEV as ENOENT on /sys reads
  -- use basename() to strip device from path
  -- ploop list: check for extra arguments
  -- ploop balloon: fix -f option processing
  -- Fixed lots of memory leaks, mostly on error paths
  -- open_delta(): simplify error handling
  -- Fixes for other issues big and small, reported by Coverity


author: Kir Kolyshkin <kir@openvz.org> 1.7.1-1
changelog:
  - Fixes:
  -- default image format is V1, unless specified explicitly
  -- tmpfiles.d file added for /var/lock/ploop (#2493)
  -- fixed creating strange directories under ./ (#2623)


author: Kir Kolyshkin <kir@openvz.org> 1.8-1
changelog:
  - New functionality:
  -- convert from/to v1/v2 ploop version format (ploop convert -v)
  -- ploop_mount_fs(): add option to run fsck
  -- ploop mount: add -F to run fsck for inner fs
  -- export ploop_is_large_disk_supported()
  -- add/export ploop_get_spec()
  -- ploop fsck: rename to ploop check
  - Fixes:
  -- resize_gpt_partition(): skip if there is no partition
  -- switch snapshot: read parameters from image we are to switch to
  -- ploop create: error out if DiskDescriptor.xml exists
  -- e2fsck(): properly check e2fsck binary exit code
  -- ploop grow: check size wrt format
  -- tools/Makefile: don't strip binaries on install
  -- ploop init: fix an error message
  - Improvements:
  -- create_image(): remove useless assignment
  -- number of log messages improved/fixed
  -- tools parse_size(): print error
  -- tools/ploop: allow T suffix for blockdev size
  -- ploop_grow_delta_offline(): use delta.version
  -- tune_fs(): drop absolute path to tune2fs
  - Documentation:
  -- ploop init usage: add -v VERSION
  -- ploop --help: rm -P from ploop mount syntax
  -- ploop(8): add -v for ploop init
  -- ploop(8): add ploop resize to SYNOPSYS
  -- ploop(8): add ploop convert
  -- ploop(8): add -F for ploop mount


author: Kir Kolyshkin <kir@openvz.org> 1.9-1
changelog:
  - New functionality:
  -- libploop.so: implement SONAME and versioning
  -- Introduce ploop_get_devs() to get all mounted devices per dd.xml
  - Fixes:
  -- make_fs(): reserve max possible GDT block for online resize
  -- do_lock(): set FD_CLOEXEC explicitly on lock fd
  -- fix raw image creation (broken in ploop 1.8)
  -- return SYSEXIT_SYS on ploop_find_dev_by_uuid() failure
  -- ploop.spec: run ldconfig on install/uninstall
  - Improvements:
  -- Display mount data in error message on mount() failure
  -- dynload.h: pad the struct ploop_functions to 64 pointers
  -- gensym.sh: add code to check sizeof(struct ploop_function)
  -- etc/Makefile: ploop.conf should not be executable
  -- Makefile.inc: support Debian multiarch
  -- Makefile: add distclean target
  -- Makefile cleanups


author: Kir Kolyshkin <kir@openvz.org> 1.10-1
changelog:
  - New functionality:
  --  Added check for and repair of sparse images
  --  ploop check: long options support
  --  ploop check: add --raw, --repair-sparse
  --  ploop-check: add -b BLOCKSIZE argument
  --  ploop-check: accept DiskDescriptor.xml argument
  --  ploop umount -d: allow to specify partition device (#2788)
  --  mount.ploop: implement -v and -f options, as per mount(8)
  --  umount.ploop: add -n option (ignored)
  --  mount.ploop: add -s (ignored) and -* (reported as error)
  --  Added ploop info -s
  --  ploop init: use v2 format by default
  --  ploop init: create ext4 by default
  - Fixes:
  --  ploop_get_devs(): fix snprintf usage
  --  ploop_global_lock(): create lockdir if not exist (#2767)
  --  ploop_grow_delta_offline(): Fix uninitialized struct
  --  ploop_ioff_to_sec(): fix for v2
  --  lib/ploop.h: include sys/syscall.h (Debian #728173)
  --  umount.ploop: fixed (#2788)
  --  get_image_param(): added online (from sysfs) and offline (from image) cases
  --  make_fs(): turn off periodic fs checks (#2769)
  --  ploop_store_diskdescriptor(): check rename()
  --  ploop_store_diskdescriptor(): don't return -1
  --  resize_gpt_partition(): check fsync()
  --  ploop_balloon_change_size(): don't pass -1 to close()
  --  ploop_grow_image(): fix an error check
  --  Don't ignore chmod() failures
  --  print_output(): fix output
  --  make_fs(): fix max_online_resize type overflow
  --  do_umount(): fix diagnostic lsof verbose level
  --  plooptool_stat(): close file descriptors
  --  ploop convert -f: do not return SYSEXIT_PLOOPFMT
  --  ploop check: fix exit codes
  --  make_fs(): create ext4 fs with 128M journal
  - Improvements:
  --  Support RHEL5/e4fsutils (tune4fs, dumpe4fs) (#2812)
  --  do_lock(): open file in read/write mode (#2730)
  --  ploop_send: use ioctl_device for PLOOP_IOC_SYNC
  --  use access() not stat() where possible
  --  umount.ploop: improve mtab handling
  --  mount.ploop: use case in option parsing
  --  {mount,umount}.ploop: don't hardcore ploop path
  --  ploop-check.c: rename uppercased functions
  --  ploop snapshot-list usage: fit to 80 cols
  --  fsck: use fsck.ext4 not e2fsck (#2812)
  --  check_size(): limit max ploop size to 16T
  --  ploop_resize_image(): fail if umount failed
  --  print_output(): improve output
  --  ploop_mount(): fix/improve error message
  --  dumpe2fs(): don't hardcode path to dumpe2fs
  --  print_output(): use our own default PATH
  --  do_umount(): refactor and improve
  --  do_umount(): eliminate extra 'lsof' call on EBUSY
  --  do_umount(): don't call lsof again if not found
  --  print_output(): check return from pclose()
  --  print_output(): return exit code from command
  --  Fix some wrongly used exit codes
  --  Remove unused exit codes
  - Documentation:
  --  ploop(8): document check, balloon discard, info, list, copy commands
  --  ploop(8): describe exit codes
  --  ploop(8): better resize description
  --  ploop(8): fix ploop umount -d description
  --  ploop(8): fix ploop mount -d description
  --  ploop(8): improve convert description
  --  ploop(8): add missing OPTIONS section
  --  ploop(8): make IMAGE FORMATS a subheader
  --  ploop(8): other small fixes and improvements
  --  ploop usage: improve
  --  ploop usage: update ploop check synopsys
  --  ploop init: fix/improve usage
  --  ploop usage: fix mount/umount/resize
  - Build system:
  --  ploop.spec: require -lib of the same release
  --  ploop.spec: require lsof and findutils
  --  Makefile.inc: add -Wformat-security
  --  Makefile.inc: proper LIBDIR for Debian case
  --  Makefile.inc: add CPPFLAGS to CFLAGS
  --  Makefile.inc: prepend, not append, debug CFLAGS
  --  tools/Makefile: simplify SOURCES define
  --  setver.sh: introduce build id
  --  setver.sh: use getopt
  --  Remove stand-alone binaries: ploop-check, ploop-grow, ploop-merge, ploop-stat, ploop-copy
  --  Makefile: add Coverity generation logic


author: Kir Kolyshkin <kir@openvz.org> 1.11-1
changelog:
  - New functionality and important changes:
  -- support for 4K sector size (including GPT conversion)
  -- ploop replace
  -- temp snapshots support (ploop tsnapshot, ploop_create_temporary_snapshot())
  -- ploop copy: implement fdatasync before freeze (improves CT frozen time)
  -- New DiskDescriptor.xml read API (ploop_*_dd())
  -- Obsolete *_diskdescriptor() calls
  -- Obsolete ploop_get_base_delta_uuid()
  -- ploop_log(): implement subsecond timestamps (with verbosity >= 4)
  -- add ploop_is_mounted()
  -- ploop snapshot-list: add snapshot mode (-s)
  -- ploop check dd.xml: add -u UUID option
  -- ploop mount: remove -u base feature
  -- ploop tool: add -v option to set verbosity
  - Fixes:
  -- skip max fs size check on snapshot delta creation
  -- ploop_resize_image: resize up to end of device
  -- ploop_delete_top_delta(): fix wrt top_guid
  -- ploop_read_diskdescriptor(): fix get_basedir() len argument
  -- check_and_repair_sparse: handle EOF properly (#2897)
  -- ploop_resize_image: add missing gpt size sync
  -- ploop snapshot-merge/delete: deny snapshot deleting if mounted (#2887)
  -- grow_lower_delta(): fix a memory leak
  -- ploop check: fix -b option parsing
  -- get_partition_device_name(): fix chmod argument
  -- fix alignment on GPT partition resize
  -- fix GPT partition alignment on ploop init
  - Improvements:
  -- ploop_resize_image: enhanced inflate balloon to max size logic
  -- tools: add {} to specified UUID if necessary
  -- check_and_repair_sparse(): log filefrag output
  -- print_sys_block_ploop(): speed up
  -- ploop check: try to repair non-top deltas if they can be opened r/w
  -- e2fsck: return fsck exit code to caller
  -- make_fs(): add -i to mkfs
  -- fsync_safe(): use SYSEXIT_FSYNC
  -- Fix uuid strings size, use define
  - Documentation:
  -- ploop snapshot-list: fix and update usage
  -- ploop copy: fix usage
  -- ploop(8): document snapshot-list -s option
  -- ploop(8): document ploop replace
  - Build system:
  -- Makefile.inc: fix dpkg-architecture handling (#2877)
  -- Makefile: add ability to add local rules
  -- gensym.sh: better usage and error diag
  -- gensym.sh: add run mode


author: Honza Horak <hhorak@redhat.com> 9.2.2-1
changelog:
  - Update to PostgreSQL 9.2.2, for various fixes described at
    http://www.postgresql.org/docs/9.2/static/release-9-2-2.html
  - Prevent creation of TCP socket during pg_upgrade regression test, so that
    concurrent RPM builds on the same machine won't fail
  Resolves: #891531
  - Make sure $PGDATA/pg_log/ gets the right SELinux label in postgresql-setup
  Resolves: #891547


author: Honza Horak <hhorak@redhat.com> 9.2.3-1
changelog:
  - Update to PostgreSQL 9.2.3, for various fixes described at
    http://www.postgresql.org/docs/9.2/static/release-9-2-3.html
    including the fix for CVE-2013-0255
  Resolves: #908722
  - Make the package build with selinux option disabled
  Resolves: #894367
  - Include old version of pg_controldata in postgresql-upgrade subpackage
  Related: #896161


author: Tom Lane <tgl@redhat.com> 9.2.4-1
changelog:
  - Update to PostgreSQL 9.2.4, for various fixes described at
    http://www.postgresql.org/docs/9.2/static/release-9-2-4.html
    including the fixes for CVE-2013-1899, CVE-2013-1900, CVE-2013-1901
  Resolves: #929223, #929255, #929328
  - fix build for aarch64 and ppc64p7


author: Honza Horak <hhorak@redhat.com> 9.2.4-3
changelog:
  - All sub-packages require SCL runtime
  - Use only one Unix socket in /tmp
  - Use rpath since we call some commands by runuser in init script,
    so LD_LIBRARY_PATH doesn't work here


author: Honza Horak <hhorak@redhat.com> 9.2.4-4
changelog:
  - Do not include daemon of the previous version and support upgrade from
    the core system version 8.4
  - Pidfile used by init script should be in /opt
  - Fix advice in the init script to use proper service name
  - Include -devel sub-package for developing server-sice extensions
  - Prefix major soname version of all libraries with collection name


author: Paul Howarth <paul@city-fan.org> 1.3.2c-1
changelog:
  - Update to 1.3.2c, addressing the following issues:
    - SSL/TLS renegotiation vulnerability (CVE-2009-3555, bug 3324)
    - Failed database transaction can cause mod_quotatab to loop (bug 3228)
    - Segfault in mod_wrap (bug 3332)
    - <Directory> sections can have <Limit> problems (bug 3337)
    - mod_wrap2 segfaults when a valid user retries the USER command (bug 3341)
    - mod_auth_file handles 'getgroups' request incorrectly (bug 3347)
    - Segfault caused by scrubbing zero-length portion of memory (bug 3350)
  - Drop upstreamed segfault patch


author: Paul Howarth <paul@city-fan.org> 1.3.2d-1
changelog:
  - Update to 1.3.2d, addressing the following issues: 
    - mod_tls doesn't compile with pre-0.9.7 openssl (bug 3358) 
    - Lack of PID protection in ScoreboardFile (bug 3370) 
    - Crash when retrying a failed login with mod_radius being used (bug 3372) 
    - RADIUS authentication broken on 64-bit platforms (bug 3381) 
    - SIGHUP eventually causes certain DSO modules to segfault (bug 3387)


author: Paul Howarth <paul@city-fan.org> 1.3.3-1
changelog:
  - Update to 1.3.3 (see NEWS for list of fixed bugs)
  - Update PID file location in initscript
  - Drop upstreamed patches
  - Upstream distribution now includes mod_exec, so drop unbundled source
  - New DSO modules:
    - mod_sftp
    - mod_sftp_pam
    - mod_sftp_sql
    - mod_shaper
    - mod_sql_passwd
    - mod_tls_shmcache
  - Configure script no longer appends "/proftpd" to --localstatedir option
  - New utility ftpscrub for scrubbing the scoreboard file
  - Include public key blacklist and Diffie-Hellman parameter files for mod_sftp
    in %{_sysconfdir}
  - Remove IdentLookups from config file - disabled by default now


author: Paul Howarth <paul@city-fan.org> 1.3.3a-1
changelog:
  - Update to 1.3.3a
    - Added Japanese translation
    - Many mod_sftp bugfixes
    - Fixed SSL_shutdown() errors caused by OpenSSL 0.9.8m and later
    - Fixed handling of utmp/utmpx format changes on FreeBSD


author: Paul Howarth <paul@city-fan.org> 1.3.3b-1
changelog:
  - Update to 1.3.3b
    - Fixed SFTP directory listing bug
    - Avoid corrupting utmpx databases on FreeBSD
    - Avoid null pointer dereferences during data transfers
    - Fixed "AuthAliasOnly on" anonymous login


author: Paul Howarth <paul@city-fan.org> 1.3.3c-1
changelog:
  - Update to 1.3.3c (#647965)
    - Fixed Telnet IAC stack overflow vulnerability (CVE-2010-4221)
    - Fixed directory traversal bug in mod_site_misc (CVE-2010-3867)
    - Fixed SQLite authentications using "SQLAuthType Backend"
  - New DSO module: mod_geoip


author: Paul Howarth <paul@city-fan.org> 1.3.3d-1
changelog:
  - Updated to 1.3.3d
    - Fixed sql_prepare_where() buffer overflow (bug 3536, CVE-2010-4652)
    - Fixed CPU spike when handling .ftpaccess files
    - Fixed handling of SFTP uploads when compression is used
  - Add Default-Stop LSB keyword in initscript (for runlevels 0, 1, and 6)
  - Fix typos in config file and initscript


author: Paul Howarth <paul@city-fan.org> 1.3.3e-1
changelog:
  - Update to 1.3.3e, fixing a large number of bugs reported upstream:
    - Process privileges may not handled properly when --enable-autoshadow is
      used (bug 3757)
    - mod_sftp closes channel too early after scp download (bug 3544)
    - mod_sftp_pam may tell client to disable echoing erroneously (bug 3579)
    - mod_sftp behaves badly when receiving badly formed SSH messages (bug 3586,
      CVE-2011-1137)
    - Using "$shell $libtool" in prxs does not work for all shells (bug 3593)
    - WrapAllowMsg directive broken due to bug 3423 (bug 3538)
    - SocketOptions receive/send buffer size parameters no longer work (bug 3607)
    - mod_wrap2 needs to support netmask rules for IPv6 addresses (bug 3606)
    - APPE/STOU upload flags erroneously preserved across upload commands
      (bug 3612)
    - Malicious module can use sreplace() function to overflow buffer (bug 3614)
    - Exiting sessions don't seem to die properly (bug 3619)
    - mod_delay sometimes logs "unable to load DelayTable into memory" (bug 3622)
    - Plaintext command injection in FTPS support (bug 3624)
    - mod_ifsession rules using regular expressions do not work (bug 3625)
    - Truncated client name saved in ScoreboardFile (bug 3623)
    - %w variable populated with non-absolute path in SQLLog statement (bug 3627)
    - Unnecessarily verbose "warning: unable to throttle bandwidth: Interrupted
      system call" (bug 3628)
    - SSH DISCONNECT messages sent by mod_sftp even for FTP connections in some
      cases (bug 3630)
    - mod_sql should log "unrecoverable database error" at a higher priority
      (bug 3632)
    - Proftpd is eating CPU when reparsing configuration file on SIGHUP (bug 3610)
    - Incorrect generation of DSA signature for SSH sessions (bug 3634)
  - Nobody else likes macros for commands


author: Paul Howarth <paul@city-fan.org> 1.3.4d-5
changelog:
  - Fix support for 8192-bit DH parameters (#1044586)
  - Add 3072-bit and 7680-bit DH parameters (upstream bug 4002)


author: Paul Howarth <paul@city-fan.org> 1.3.5-1
changelog:
  - Update to 1.3.5 (see NEWS for details)
  - Drop upstreamed patches
  - Drop sysv-to-systemd migration script
  - No longer need to support pam_stack


author: Paul Howarth <paul@city-fan.org> 1.3.5-2
changelog:
  - Add upstream fix to ignore any ENOPROTOOPT errors when setting the
    IPv6 TCLASS (TOS) flags on the socket; they make for noisier logging
    without providing any actual value to the user/admin (upstream bug 4055)


author: Paul Howarth <paul@city-fan.org> - 1.3.5-4
changelog:
  - Anonymous upload directory specification needs to be slightly different if
    mod_vroot is in use (#1045922)
    http://sourceforge.net/p/proftp/mailman/message/31728570/
  - Use %license where possible


author: Paul Howarth <paul@city-fan.org> - 1.3.5-5
changelog:
  - Unauthenticated copying of files via SITE CPFR/CPTO was allowed by mod_copy
    (CVE-2015-3306, http://bugs.proftpd.org/show_bug.cgi?id=4169)


author: Paul Howarth <paul@city-fan.org> - 1.3.5a-1
changelog:
  - Update to 1.3.5a
    - Fixed "stalled" SSL/TLS handshakes for data transfers
    - Fixed handling of SSH keys with overlong Comment headers in mod_sftp_sql
    - By default, mod_tls will no longer support SSLv3 connections; in order to
      support SSLv3 connections (for sites that need to), you must explicitly
      configure this via the TLSProtocol directive, e.g.:
      TLSProtocol SSLv3 TLSv1 ...
    - The mod_copy module is enabled by default; there may be cases where the
      module should be disabled, without requiring a rebuild of the server, thus
      mod_copy now supports a CopyEngine directive to enable/disable the module
    - The DeleteAbortedStores directive (for Bug#3917) is only enabled when
      HiddenStores is in effect, as intended when originally implemented, rather
      than all the time
    - Many other bug-fixes, see NEWS for details
  - Drop upstreamed patches


author: Paul Howarth <paul@city-fan.org> - 1.3.5a-2
changelog:
  - Avoid unbounded SFTP extended attribute key/values
    (#1286977, http://bugs.proftpd.org/show_bug.cgi?id=4210)


author: Paul Howarth <paul@city-fan.org> - 1.3.5b-1
changelog:
  - Update to 1.3.5b
    - mod_geoip did not load all of the GeoIPTables properly (upstream bug 4187)
    - "Incorrect string value" reported by mod_sql_mysql for some UTF8 characters
      (upstream bug 4191)
    - SSH rekey failed when using RSA hostkey smaller than 2048 bits
      (upstream bug 4097)
    - MLSD/MLST fact type "cdir" is incorrectly used for the current working
      directory (upstream bug 4198)
    - HiddenStores temporary files not removed when exceeding quota using SCP
      (upstream bug 4201)
    - MLSD lines not properly terminated with CRLF (upstream bug 4202)
    - Zero-length memory allocation possible, with undefined results
      (upstream bug 4209)
    - Avoid unbounded SFTP extended attribute key/values (upstream bug 4210)
    - Ensure that FTP data transfer commands fail appropriately when
      "RootRevoke on" is in effect (upstream bug 4212)
    - Handle FTP re-authentication attempts better (upstream bug 4217)
    - Permissions on files uploaded via STOU did not honor configured Umask
      (upstream bug 4223)
    - Support SFTP clients that send multiple INIT requests (upstream bug 4227)
    - TLSDHParamFile directive appears ignored because unexpected DH is chosen
      (upstream bug 4230)
  - Drop unbundled old version of mod_geoip
  - Drop upstreamed patches


author: Paul Howarth <paul@city-fan.org> - 1.3.5b-2
changelog:
  - Handle client/server version skew in mod_sql_mysql
    (https://forums.proftpd.org/smf/index.php?topic=11887.0)
  - Fix a possible cause of segfaults in mod_sftp (#1337880, upstream bug 4203)
  - See if we can fix crash in mod_lang
    http://bugs.proftpd.org/show_bug.cgi?id=4206
    https://retrace.fedoraproject.org/faf/reports/10744/
  - BR: perl-generators for correct dependencies in utils sub-package
  - Prefer %global over %define


author: Paul Howarth <paul@city-fan.org> - 1.3.5d-1
changelog:
  - Update to 1.3.5d
    - Support OpenSSL 1.1.x API (upstream bug 4275)
    Bug fixes:
    - SSH rekey during authentication can cause issues with clients
      (upstream bug 4254)
    - Recursive SCP uploads of multiple directories not handled properly
      (upstream bug 4257)
    - LIST returns different results for file, depending on path syntax
      (upstream bug 4259)
    - "AuthAliasOnly on" in server config breaks anonymous logins
      (upstream bug 4255)
    - CapabilitiesEngine directive not honored for <IfUser>/<IfGroup> sections
      (upstream bug 4272)
    - Memory leak when mod_facl is used (upstream bug 4278)
    - All FTP logins treated as anonymous logins again (upstream bug 4283,
      regression in 1.3.5c of upstream bug 3307)


author: rpm@fthiessen.de
changelog:
  - Updated to 0.2.0, notable changes:
    * New version scheme
    * Update ncurses so it will compile on GCC 5
    * Don't use GCC 5 inside the Docker container,
      because older kernels are still not ready
    * Support CPU hotplug
    * Fix improper access to socket structure during accept()
    * Docker image now includes the RUN label to make it easier to
      run sysdig on Atomic Linux
    * New events: semop, semctl, ppoll
    * Port numbers will be automatically converted to service names
      unless -N is specified


author: rpm@fthiessen.de
changelog:
  - Updated to 0.4.0, notable changes:
    * Support ia32 emulation on 64bit kernels
    * HTTP chisels now support UNIX sockets (e.g. Docker API)
    * New events: mount, umount
    * Support Docker containers when running in a different cgroup
      root layout
    * csysdig view actions: press F7 or F8 while inside a csysdig
      view to see what actions are supported


author: mpluskal@suse.com
changelog:
  - Update to 0.5.1
    * Fix connection to HTTPS Kubernetes API servers
    * Properly compile bundled OpenSSL
    * Fix sysdig-probe build on Linux 4.3
    * Minor bugfixes
  - Changes for 0.5.0:
    * Full Kubernetes support!
    * Add a convenient USE_BUNDLED_DEPS CMake option to
      enable/disable all bundled dependencies at once.
    * New build/runtime dependencies: libb64, libcurl, openssl.
  - Add GH_496_fix.patch
  - Update dependencies and not use anything bundled


author: mpluskal@suse.com
changelog:
  - Update to 0.6.0
    * Full support to Kubernetes, even when saving events to a trace
      file
    * semget system event
    * access system event
    * Automatically build sysdig-probe for boot2docker releases
    * Properly filter process table serialization in a trace file
      when a process filter is used
    * Some csysdig actions now ask the user for confirmation
    * various bugfixes
    * drop GH_496_fix.patch


author: aspiers@suse.com
changelog:
  - Fix whitespace issues in .spec and .changes files
  - Remove duplicate %{_datadir} directory from %files


author: aspiers@suse.com
changelog:
  - Fix .spec file bug which was causing Frankenstein kernel modules:
    https://github.com/draios/sysdig/issues/496#issuecomment-165929462


author: mpluskal@suse.com
changelog:
  - Update to 0.7.1
    * Fix sysdig-probe compilation for kernel < 3.4.0
    * Fix compilation on OSX
  - Changes for 0.7.0
    * Fix sysdig-probe for kernel 4.4
    * Fix a remotely possible deadlock during ioctl calls
    * Fix Kubernetes support when data returned from the API server
      is particularly big
    * Minor bugfixes
    * Spectrogram views in csysdig: spectro_all (System call latency
      spectrogram) and spectro_file (File I/O latency spectrogram)
    * Ability to authenticate to a Kubernetes API server using a
      certificate, via -K <file_name> or --k8s-api-cert=<file_name>.
      Can also be specified via the environment variable
      SYSDIG_K8S_API_CERT
    * Ability to sort columns in csysdig views using the keyboard
    * --filter-proclist: apply the filter to the process table
    * -M: add the possibility to stop collecting after X seconds
      evt.latency.quantized: 10-base log of the delta between an
      exit event and the correspondent enter event evt.latency.human:
      delta between an exit event and the correspondent enter event,
      as a human readable string (e.g. 10.3ms)


author: Frank Ch. Eigler <fche@redhat.com> - 1.8-5
changelog:
  - rebased to systemtap 1.8, including scox's fixes from rhel-5.9:
  - rhbz844910: grumble quietly about preexisting gid/uid conflicts in .spec  
  - rhbz843480: systemtap-server should work without systemtap-runtime preinstalled
  - rhbz843392: systemtap-testsuite unresolved deps
  - rhbz843389: sdt.c on systemtap-testsuite cannot be compiled
  - rhbz835027: systemtap-testsuite requires prelink on ia64
  - Backported fix for pr14325
  - No publican in rhel 5.
  - Add s390 to the publican blacklist.
  - rebase
  - Backported fixes for pr14230 pr14296


author: Lukas Berk <lberk@redhat.com> - 2.3-2
changelog:
  - rhbz998595: rpm -V systemtap-server complains
  - rhbz996091: systemtap.syscall/syscall.exp regressed on i686 and x86_64
  - rhbz996084: systemtap.exelib/exelib.exp regressed on s390x and x86_64
  - rhbz996097: systemtap.base/execve.exp fails on i686 and ppc64
  - rhbz996079: systemtap.base/warn_overflow.exp regressed on i686 and ppc64
  - rhbz915180: utrace_syscall_args.exp on s390x: "FAIL: 32_BIT_UTRACE_SYSCALL_ARGS shutdown (eof)"
  - rhbz996065: systemtap.base/bz10078.exp regressed
  - rhbz996072: systemtap.base/kmodule.exp regressed on s390x and ppc64
  - rhbz996080: systemtap.context/fib.exp regressed on s390x
  - rhbz996103: systemtap.base/bad-code.exp regressed on s390x
  - rhbz1008567: broken tapsets on s390x - print_ubacktrace() and print_ubacktrace_brief()
  - rhbz996087: systemtap.server/server_locale.exp regressed on all arches


author: Lukas Berk <lberk@redhat.com> - 2.3-3
changelog:
  - rhbz996084: systemtap.exelib/exelib.exp regressed on s390x and x86_64
  - rhbz996077: systemtap.base/utrace_p5.exp got unstable on i686 and x86_64
  - rhbz874205: [FJ6.2 Bug] systemtap crashes


author: Nicolas Chauvet <kwizart@gmail.com> - 1.42-2
changelog:
  - Fix for UsrMove - rfbz#2360
  - Fix Conflict with ipset - rfbz#2201
  - Add Requires ipset >= 6.11 - rfbz#2226


