# changelog

author: Anton Bobrov <abobrov@cloudlinux.com> 2.0-1
changelog:
  - AlmaCare and AlmaCare Cybersecurity integration
  - KPT-2210: write audit log patch management operations invoked via CLI
  - KPT-2572: proxy for almacare repos
  - KPT-2537: testing feed channel to get more fresh patchsets
  - KPT-2607: show recent enabled patchset name in audit log for patchset management operations
  - KPT-2621: remove max servers count limit for a key
  - KPT-2668: enable standalone check-ins processing by default
  - KPT-2674: API: support server deletion by server_id


author: Anton Bobrov <abobrov@cloudlinux.com> 2.2-1
changelog:
  - KPT-2494: audit: content security policy compliance for admin UI pages
  - KPT-2673: "Disable LDAP" button doesn't reset LDAP configuration
  - KPT-2742, KPT-2760, KPT-2761: audit: update 3rd party dependencies to latest versions
  - KPT-2808: ldap strict_check URI setting works only after eportal restart


author: Anton Bobrov <abobrov@cloudlinux.com> 2.3-2
changelog:
  - KPT-2773: support update delay and sticky patchsets from kcarectl request
  - KPT-2855: rework selinux policies, deprecate kcare-eportal-selinux package
  - KPT-2931: counter links on the dashboard navigates to server list without active filter
  - KPT-2935: /install-kernelcare sets incorrect source for Debian repos


author: Mikhail Alekseev <malekseev@cloudlinux.com> 2.4-2
changelog:
  - KPT-2823 use python interpreter 3.8 for el7
  - KPT-2890 Make readonly user aware that he is read-only
  - KPT-2918 update sqlalchemy up to 2.x
  - KPT-2919 update the rest of python libs
  - KPT-2961 add distributions column to UI
  - KPT-3045 /set-kernelcare-repo script doesn't work for Ubuntu/ARM repos
  - KPT-3059 eportal: selinux policies break checkin processing with nginx 1.14
  - KPT-3075 update urllib3


author: Anton Bobrov <abobrov@cloudlinux.com> 2.5-3
changelog:
  - KPT-2514: provide more descriptive SSO errors
  - KPT-2888, KPT-2719: switch to the new public.list API
  - KPT-2967: tuxctl integration
  - KPT-3017: fetch and apply signatures bundle
  - KPT-3062: kcare-eportal-selinux is not removed automatically
  - KPT-3082: selinux policy is broken during upgrade
  - KPT-3170: fix kernelcare agent doctor uploads
  - KPT-3180: rebrand almacare into tuxcare ESU
  - security updates for 3rd party libraries


author: Anton Bobrov <abobrov@cloudlinux.com> 2.6-1
changelog:
  - KPT-2819: fix links to social media
  - KPT-3013: doctor script
  - KPT-3121: use /var/lib/eportal as default data location
  - KPT-3184: userspace usage on dashboard
  - KPT-3203: fix patchset management via API
  - KPT-3288: regular libs update
  - KPT-3321: standby replication


author: Mikhail Alekseev <malekseev@cloudlinux.com> 2.7-3
changelog:
  - KPT-2612: merge patch data databases
  - KPT-2998: send agents anomalies
  - KPT-3444: update copyrights


author: Anton Bobrov <abobrov@cloudlinux.com> 2.8-1
changelog:
  - Business Units feature (preview)
  - KPT-3490: make AUTH_RESTRICTED_INDEX enabled by default
  - KPT-3486: cleanup patch state with feed removal


author: Mikhail Alekseev <malekseev@cloudlinux.com> 2.9-2
changelog:
  - KPT-3366: add a note on `/admin/patch-source/` page to be more clear about filters.
  - KPT-3372: OAuth2 logout flow could require id_token_hint parameter for some providers.
  - KPT-3535, KPT-3471, KPT-3412: doctor fixes.
  - KPT-3558: Update link to tuxcare-release RPM in install-tuxcare.
  - KPT-3581: implement per BU counters on /admin/kckey/ page.
  - KPT-3591: replication monitoring and cluster management CLI improvements.
  - KPT-3592: CLI to get and restore full backups.
  - KPT-3595: register hosts with a valid access token.
  - KPT-3596: session cookie should be secure by default.
  - KPT-3598: update idna lib for eportal.
  - KPT-3623: login into BU via OAuth2 SSO.
  - KPT-3630: data export/import from admin UI.
  - KPT-3632: add filtering capability to /admin/api/servers by server_id.


author: Mikhail Alekseev <malekseev@cloudlinux.com> 2.10-1
changelog:
  - KPT-3685: fix wrong filtering parameters on feed page
  - KPT-3694: fix download missing patchsets doesn't work in cache mode
  - KPT-3722: fix patches page for a BU account
  - KPT-3739: backup and restore fixes
  - KPT-3741: fix duplicated sqlite files
  - KPT-3757: minor UI/UX changes, fix redirect after login
  - KPT-3811: use new tuxcare-release rpm
  - KPT-3815: update python libs
  - KPT-3862: fix libcare usage stat displaying
  - KPT-3902: warnings instead of tracebacks in logs if patchsource is not configured
  - KPT-3927: explicit select option for super-admin
  - KPT-3692: address overwrite option for agent installation script used by Eportal


author: Mikhail Alekseev <malekseev@cloudlinux.com> 2.11-1
changelog:
  - KPT-2214 add filter option on the patchset page to be able to filter patchset based upon Linux Distribution
  - KPT-3925 update thirdparty python libs


author: Mikhail Alekseev <malekseev@cloudlinux.com> 2.12-1
changelog:
  - KPT-3872,KPT-4174,KPT-4274 implemented DB migrations on the package downgrade
  - KPT-4018 added USE_LOCAL_TIMEZONE_FOR_API config option to use local time in API responses (it is false by default)
  - KPT-4082 fix - doctor report script does not respect eportal's config.PROXY value
  - KPT-4278 update thirdparty python libs
  - KPT-4193 fix - eportal returns 100 as an error code on a registration attempt
  - KPT-4159 fix - debian12 patches have to be enabled to turn on pve-8 patches
  - KPT-4175 fix - has no ubuntu24.04 as an option on Patch Source Settings page


author: Artem Murashkin <amurashkin@cloudlinux.com> 2.13-1
changelog:
  - KPT-3604: implement CSRF protection for Admin UI
  - KPT-4218, KPT-4220: new API endpoints for tags
  - KPT-4320: bulk server deletion API
  - KPT-4321: improve server mass deletion in Admin UI
  - KPT-4355: fix broken search on Servers page
  - KPT-4365: fix downgrade package scripts for non-standard BASE_DIR location


author: Anton Bobrov <abobrov@cloudlinux.com> 1.38-1
changelog:
  - KPT-2015: replication status CLI command for monitoring
  - KPT-1996: keep patchset name in kcservers table
  - KPT-2013: proxy pass to patches.kernelcare.com
  - KPT-2027: send ePortal instance os name with report
  - KPT-1990: added missing initial migration
  - KPT-2048: ensure database files has proper owner before applying migration
  - KPT-2037: 500 ServerError when creating key with the same name


author: Anton Bobrov <abobrov@cloudlinux.com> 1.39-1
changelog:
  - KPT-1997, KPT-1993: performance optimizations
  - KPT-2073: add config to disable index page view for non-admins
  - KPT-2083: add patchset/agent-version host counters in the report
  - KPT-2093: fix clean server tasks
  - KPT-2105: add feed/key counts in the report


author: Anton Bobrov <abobrov@cloudlinux.com> 1.41-1
changelog:
  - KPT-2200: add "key" field into server's detailed view and CSV export
  - KPT-2179: registration API endpoint with JSON interface
  - KPT-2132: send detailed stat counters for each release/kernel_id pair
  - KPT-2005, KPT-2146: eportal: store and send userspace checkin info in report


author: Anton Bobrov <abobrov@cloudlinux.com> 1.42-1
changelog:
  - KPT-1258: HTTP API to manage keys, feeds and patchsets
  - KPT-2220: update bundled sqlite to 3.39.4
  - KPT-2222: fix slow registration for instances with over 10k hosts
  - KPT-2223: send stat about number of autoupdated and delayed feeds
  - KPT-2224: fix ssl configuration to disable tls1.0/tls1.1 and enable tls1.3
  - KPT-2225: add parameter to configure an url to ePortal instance
  - KPT-2226: expose configuration params to scale ePortal instance
  - KPT-2241: add aggressive oplog cleanup mode for checkin operations
  - KPT-2248: use native pysqlite3 facility to backup databases
  - KPT-2252: add hostname to `kc.eportal server list` output


author: Anton Bobrov <abobrov@cloudlinux.com> 1.43-1
changelog:
  - KPT-2400: hide server version header
  - KPT-2303: HTTP API endpoint to set tags
  - KPT-2304: HTTP API endpoint to list users
  - KPT-2068: add missing distributions on Patch Source settings page


author: Anton Bobrov <abobrov@cloudlinux.com> 1.44-1
changelog:
  - KPT-2367: ability to limit keys to a set of products
  - KPT-2379: unmasked credentials (audit)
  - KPT-2380: fix xss in changelog endpoint (audit)
  - KPT-2382: host header injection (audit)
  - KPT-2383: increase minimal password length (audit)
  - KPT-2384: update JavaScript libraries (audit)
  - KPT-2385: limit login attempts rate (audit)
  - KPT-2396: add explicit cache control headers (audit)
  - KPT-2398: missing content security policy (audit)
  - KPT-2420: HTTP API endpoints should return proper error instead of 301 on invalid auth.
  - KPT-2428: proxy kc-doctor requests


author: Anton Bobrov <abobrov@cloudlinux.com> 1.45-1
changelog:
  - KPT-2462: handle registration replication lag
  - KPT-2510, KPT-2366: proxy to AlmaCare repos
  - KPT-2511: reconcile nodes state for replicated setups


author: Anton Bobrov <abobrov@cloudlinux.com> 1.34-1
changelog:
  - KPT-1934: flag to skip strict certificate check for replication requests
  - KPT-1935: pass external balancer proto scheme to private nginx instance
  - KPT-1945: ability to specify hour in age filters for /api/admin/servers


author: Anton Bobrov <abobrov@cloudlinux.com> 1.36-1
changelog:
  - KPT-1936: add instance-id of a leader node to report
  - KPT-1949: fix status code in host registration HTTP API
  - KPT-1958: use tab separated values in table outputs for CLI commands, extend user list output
  - KPT-1959: added `kc.eportal user` subcommand to manage users, added option to specify user role instead of toggle
  - KPT-1968: CLI command to sync nginx config with ePortal config to make nginx serve patches from non-standard location
  - KPT-1969: ability to search servers by tag in HTTP API
  - KPT-1972: log additional details for replication errors
  - KPT-1987: WebSeal auth


author: Anton Bobrov <abobrov@cloudlinux.com> 1.37-1
changelog:
  - regression: scheduler in 1.36 doesn't start
  - KPT-2032, KPT-2031: ensure correct path to custom patch storage and nginx cache
  - KPT-2008: fix broken links to patches on index page if there is no selected feed
  - KPT-1757: fix misleading message if `kcarectl --license-info` invoked without registration
  - KPT-1982: `kc.eportal server clean --inactive` command and opt-in auto server cleanup


author: Igor Seletskiy <iseletsk@kernelcare.com> - 1.1.0-1
changelog:
  - Added support for raw_xml_v2 report format
  - Weakened SSL checks
  - Fixed ns-xml format when CVE is in upper case


author: Igor Seletskiy <iseletsk@kernelcare.com> - 1.1.4-1
changelog:
  - if we cannot get report_format from report_config, get it from script config
  - or default to raw-xml-v2
  - add support for parsing new format/longer CVE numbers


author: Igor Seletskiy <iseletsk@kernelcare.com> - 1.2.0-1
changelog:
  - Added ability to delete old exceptions by specifying delete_old in yaml config file
  - Improved SSL handing for python 2.7 and higher


author: Igor Seletskiy <iseletsk@kernelcare.com> - 1.2.4-1
changelog:
  - Remove spaces around hostnames
  - Display number of nodes matched
  - Show if hostnames are used to match hosts


author: Ralph Bean <rbean@redhat.com> - 0.6.6-1
changelog:
  - Latest upstream.
  - Modernized python macros.
  - Re-enabled python3 tests.
  - Cleaned up the description formatting.


author: Ralph Bean <rbean@redhat.com> - 0.7.4-2
changelog:
  - Merge in epel7 compat changes to the spec file.
  - Drop patch for epel7, no longer needed with modern upstream.


author: Ralph Bean <rbean@redhat.com> - 0.7.6-3
changelog:
  - Disable tests until sqlalchemy-1.1 is out.  There's a bug against
    MS sql DBs (likely won't affect us).


author: Ralph Bean <rbean@redhat.com> - 0.4-4
changelog:
  - Merge branches together and bump release for bodhi updates.
  - Removed empty %check section.
  - Fix incorrect usage of %{pypi_name}.


author: Tim Flink <tflink@fedoraproject.org> - 2.0-1
changelog:
  - Upgraded to upstream 2.0
  - Enhanced internal signal control, made more customizable and less global to play nice with non-flask-sqlalchemy sessions


author: Ralph Bean <rbean@redhat.com> - 1.1.0-1
changelog:
  - Latest upstream.
  - Relicense to ASL 2.0 with upstream.
  - Removed cookie handling patch (fixed in upstream tarball).
  - Updated cert unbundling patch to match upstream.
  - Added check section, but left it commented out for koji.


author: Ralph Bean <rbean@redhat.com> - 1.1.0-2
changelog:
  - Unbundled python-charade/chardet.  Using system python-chardet now.
  - Removed deprecated comments and actions against oauthlib unbundling.
    Those are no longer necessary in 1.1.0.
  - Added links to bz tickets over Patch declarations.


author: Ralph Bean <rbean@redhat.com> - 1.1.0-3
changelog:
  - Unbundled python-urllib3.  Using system python-urllib3 now.
  - Conditionally include python-ordereddict for el6.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.3.0-8
changelog:
  - Python 2 binary package renamed to python2-flask-login
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


