# changelog

author: Sergei Nizovtsev <snizovtsev@cloudlinux.com> [5.14.0-284.1101.el9_2.tuxcare.7.els25]
changelog:
  - Bluetooth: MGMT: Protect mgmt_pending list with its own lock {CVE-2025-38117}
  - padata: Fix pd UAF once and for all {CVE-2025-38584}
  - wifi: cfg80211: Fix use after free for wext {CVE-2023-53153}
  - padata: Fix list iterator in padata_do_serial()
  - padata: do not leak refcount in reorder_work {CVE-2025-38031}
  - padata: avoid UAF for reorder_work {CVE-2025-21726}
  - padata: add pd get/put refcnt helper
  - net/smc: fix UAF on smcsk after smc_listen_out() {CVE-2025-38734}
  - scsi: mpi3mr: Bad drive in topology results kernel crash {CVE-2023-53037}
  - scsi: mpi3mr: Driver unload crashes host when enhanced logging is enabled
  - wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() {CVE-2022-50258}
  - igb: Fix igb_down hung on surprise removal {CVE-2023-53148}
  - drm/i915/sseu: fix max_subslices array-index-out-of-bounds access {CVE-2023-53112}
  - i40e: fix idx validation in config queues msg {CVE-2025-39971}
  - dm-bufio: don't schedule in atomic context {CVE-2025-37928}
  - fs: prevent out-of-bounds array speculation when closing a file descriptor {CVE-2023-53117}
  - vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint {CVE-2025-22083}
  - iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid {CVE-2025-37927}
  - tracing: Fix oob write in trace_seq_to_buffer() {CVE-2025-37923}
  - KVM: x86: Reset IRTE to host control if *new* route isn't postable {CVE-2025-37885}
  - KVM: arm64: Tear down vGIC on failed vCPU creation {CVE-2025-37849}
  - KVM: Reject attempts to consume or refresh inactive gfn_to_pfn_cache {CVE-2022-49882}
  - jbd2: remove wrong sb->s_sequence check {CVE-2025-37839}
  - power: supply: gpio-charger: Fix set charge current limits {CVE-2024-57792}
  - ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object {CVE-2024-46798}
  - ipv6: prevent possible UAF in ip6_xmit() {CVE-2024-44985}
  - ipv6: fix possible UAF in ip6_finish_output2() {CVE-2024-44986}
  - netfilter: flowtable: validate vlan header {CVE-2024-44983}
  - usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd() {CVE-2024-50268}
  - usb: vhci-hcd: Do not drop references before new references are gained {CVE-2024-43883}
  - drm/amd/display: Fix slab-use-after-free on hdcp_work {CVE-2025-21968}
  - drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[] {CVE-2024-46815}
  - drm/amd/display: Check index msg_id before read or write {CVE-2024-42121}
  - drm/amd/display: Check pipe offset before setting vblank {CVE-2024-42120}
  - drm/amdkfd: don't allow mapping the MMIO HDP page with large pages {CVE-2024-41011}
  - drm/amdkfd: Fix an illegal memory access {CVE-2023-53090}
  - drm/shmem-helper: Remove another errant put in error path {CVE-2023-53084}
  - drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes {CVE-2023-53077}
  - drm/i915: mark requests for GuC virtual engines to avoid use-after-free {CVE-2023-53552}
  - ptp: fix integer overflow in max_vclocks_store {CVE-2024-40994}
  - nvmet: avoid potential UAF in nvmet_req_complete() {CVE-2023-53116}
  - loop: Fix use-after-free issues {CVE-2023-53111}
  - ftrace: Fix invalid address access in lookup_rec() when index is 0 {CVE-2023-53075}
  - mptcp: use the workqueue to destroy unaccepted sockets {CVE-2023-53072}
  - perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output {CVE-2023-53065}
  - erspan: do not use skb_mac_header() in ndo_start_xmit() {CVE-2023-53053}
  - HID: intel-ish-hid: ipc: Fix potential use-after-free in work function {CVE-2023-53039}
  - netlink: prevent potential spectre v1 gadgets {CVE-2023-53000}
  - coresight: Clear the connection field properly {CVE-2022-50214}
  - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition {CVE-2023-53145}
  - Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync {CVE-2025-39982}
  - x86/tdx: Fix "in-kernel MMIO" check {CVE-2024-47727}
  - arm64: sme: Use STR P to clear FFR context field in streaming SVE mode {CVE-2023-53713}
  - wifi: mt76: mt7921: fix error code of return in mt7921_acpi_read {CVE-2023-53710}


author: Sergei Nizovtsev <snizovtsev@cloudlinux.com> [5.14.0-284.1101.el9_2.tuxcare.7.els26]
changelog:
  - mm: hugetlb: fix UAF in hugetlb_handle_userfault {CVE-2022-50630}
  - drm/amdkfd: fix potential kgd_mem UAFs {CVE-2023-53816}
  - net/mlx5e: Fix deadlock in tc route query code {CVE-2023-53591}
  - PCI: Fix pci_device_is_present() for VFs by checking PF {CVE-2022-50636}
  - wifi: ath11k: fix monitor mode bringup crash {CVE-2022-50627}
  - wifi: mac80211_hwsim: drop short frames {CVE-2023-53321}
  - scsi: target: iscsi: Fix timeout on deleted connection {CVE-2025-38075}
  - amdgpu: validate offset_in_bo of drm_amdgpu_gem_va {CVE-2023-53819}
  - dmaengine: ptdma: check for null desc before calling pt_cmd_callback {CVE-2023-53755}
  - wifi: mt7601u: fix an integer underflow {CVE-2023-53679}
  - Bluetooth: hci_event: call disconnect callback before deleting conn {CVE-2023-53673}
  - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails {CVE-2022-50087}
  - tls: wait for pending async decryptions if tls_strp_msg_hold fails {CVE-2025-40176}
  - clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns {CVE-2025-38499}
  - net: openvswitch: reject negative ifindex {CVE-2023-53843}
  - drm/i915: Fix NULL ptr deref by checking new_crtc_state {CVE-2023-53833}
  - iommu/amd: Improve page fault error reporting {CVE-2023-53789}
  - media: v4l2-mem2mem: add lock to protect parameter num_rdy {CVE-2023-53519}
  - Bluetooth: Fix potential use-after-free when clear keys {CVE-2023-53386}
  - Bluetooth: L2CAP: Fix use-after-free {CVE-2023-53305}
  - ext4: add bounds checking in get_max_inline_xattr_value_size() {CVE-2023-53285}
  - ext4: fix use-after-free in ext4_orphan_cleanup {CVE-2022-50673}
  - cacheinfo: Fix shared_cpu_map to handle shared caches at different levels {CVE-2023-53254}
  - rxrpc: Make it so that a waiting process can be aborted {CVE-2023-53218}
  - ip6_vti: fix slab-use-after-free in decode_session6 {CVE-2023-53821}
  - vxlan: Fix nexthop hash size {CVE-2023-53192}
  - wifi: mac80211: check S1G action frame size {CVE-2023-53257}
  - wifi: rtlwifi: Fix global-out-of-bounds bug in _rtl8812ae_phy_set_txpower_limit() {CVE-2022-50279}
  - dm flakey: fix a crash with invalid table line {CVE-2023-53786}
  - md/raid10: fix null-ptr-deref in raid10_sync_request {CVE-2023-53832}
  - md: don't dereference mddev after export_rdev() {CVE-2023-53665}
  - md: fix 'delete_mutex' deadlock
  - md: fix duplicate filename for rdev {CVE-2023-53665}
  - kernfs: Fix UAF in polling when open file is released {CVE-2025-39881}
  - mptcp: pm: avoid possible UaF when selecting endp {CVE-2024-44974}
  - mptcp: fix UaF in listener shutdown {CVE-2023-53088}
  - Bluetooth: MGMT: Fix possible UAFs {CVE-2025-39981}
  - Bluetooth: hci_sync: fix set_local_name race condition
  - Bluetooth: MGMT: Fix possible deadlocks {CVE-2024-53207}
  - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). {CVE-2025-40186}
  - e1000e: fix heap overflow in e1000_set_eeprom {CVE-2025-39898}
  - wifi: cfg80211: fix use-after-free in cmp_bss() {CVE-2025-39864}
  - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() {CVE-2025-38724}
  - usb: xhci: Apply the link chain quirk on NEC isoc endpoints {CVE-2025-22022}
  - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI {CVE-2025-39965}
  - xfrm: Duplicate SPI Handling {CVE-2025-39797}
  - nfsd: release svc_expkey/svc_export with rcu_work {CVE-2024-53216}
  - NFS: Fix a race when updating an existing write {CVE-2025-39697}
  - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests
  - drm/amd/display: Check dce_hwseq before dereferencing it {CVE-2025-38361}


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.28.1.el9_2]
changelog:
  - iavf: fix reset task race with iavf_remove() (Petr Oros) [2228156 2223599]
  - iavf: fix a deadlock caused by rtnl and driver's lock circular dependencies (Petr Oros) [2228156 2223599]
  - Revert "iavf: Do not restart Tx queues after reset task failure" (Petr Oros) [2228156 2223599]
  - Revert "iavf: Detach device during reset task" (Petr Oros) [2228156 2223599]
  - iavf: Wait for reset in callbacks which trigger it (Petr Oros) [2228156 2223599]
  - iavf: use internal state to free traffic IRQs (Petr Oros) [2228156 2223599]
  - iavf: Fix out-of-bounds when setting channels on remove (Petr Oros) [2228156 2223599]
  - iavf: Fix use-after-free in free_netdev (Petr Oros) [2228156 2223599]
  - iavf: make functions static where possible (Petr Oros) [2228156 2223599]
  - iavf: fix err handling for MAC replace (Petr Oros) [2228156 2223599]
  - iavf: remove some unused functions and pointless wrappers (Petr Oros) [2228156 2223599]
  - iavf: remove mask from iavf_irq_enable_queues() (Petr Oros) [2228156 2223599]
  - iavf: send VLAN offloading caps once after VFR (Petr Oros) [2228156 2223599]
  - i40e: Wait for pending VF reset in VF set callbacks (Ivan Vecera) [2228158 2215498]
  - i40e: Add helper for VF inited state check with timeout (Ivan Vecera) [2228158 2215498]
  - KEYS: use kfree_sensitive with key (Vladis Dronov) [2227768 2223719]
  - locking/rtmutex: Add a lockdep assert to catch potential nested blocking (Crystal Wood) [2225623 2218724]
  - locking/rtmutex: Avoid pointless blk_flush_plug() invocations (Crystal Wood) [2225623 2218724]
  - locking/rtmutex: Submit/resume work explicitly before/after blocking (Crystal Wood) [2225623 2218724]
  - sched/core: Provide sched_rtmutex() and expose sched work helpers (Crystal Wood) [2225623 2218724]
  - cpufreq: intel_pstate: Enable HWP IO boost for all servers (David Arcari) [2210270 2175626]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.29.1.el9_2]
changelog:
  - redhat: configs: Disable CONFIG_CRYPTO_STATS since performance issue for storage (Herbert Xu) [2231850 2227964]
  - i2c: tegra: Fix PEC support for SMBUS block read (Steve Best) [2230488 2214531]
  - i2c: tegra: Set ACPI node as primary fwnode (Steve Best) [2230483 2222101]
  - perf vendor events intel: Add Emerald Rapids (Michael Petlan) [2230175 2177180]
  - perf vendor events intel: Refresh sapphirerapids metrics and events (Michael Petlan) [2230175 2177180]
  - perf vendor events: Update Intel sapphirerapids (Michael Petlan) [2230175 2177180]
  - perf/x86/intel/cstate: Add Emerald Rapids (Michael Petlan) [2230175 2177180]
  - perf/x86/intel: Add Emerald Rapids (Michael Petlan) [2230175 2177180]
  - perf/x86/intel/uncore: Add Emerald Rapids (Michael Petlan) [2230175 2177180]
  - perf/x86/msr: Add Emerald Rapids (Michael Petlan) [2230175 2177180]
  - perf/x86/rapl: Add support for Intel Emerald Rapids (Michael Petlan) [2230175 2177180]
  - platform/x86: intel-uncore-freq: add Emerald Rapids support (Michael Petlan) [2230169 2156827]
  - netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID (Phil Sutter) [2228990 2225271] {CVE-2023-4147}
  - netfilter: nft_set_pipapo: fix improper element removal (Phil Sutter) [2227510 2225277] {CVE-2023-4004}


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.30.1.el9_2]
changelog:
  - sched/core: Add __always_inline to schedule_loop() (Crystal Wood) [2233928 2232098]
  - x86/sev: Do not try to parse for the CC blob on non-AMD hardware (Tao Liu) [2232700 2182562]
  - arm64: efi: Make efi_rt_lock a raw_spinlock (Mark Salter) [2213499 2188323] {CVE-2023-21102}
  - efi: rt-wrapper: Add missing include (Mark Salter) [2213499 2188323] {CVE-2023-21102}
  - arm64: efi: Execute runtime services from a dedicated stack (Mark Salter) [2213499 2188323] {CVE-2023-21102}
  - crypto: rng - Fix lock imbalance in crypto_del_rng (Herbert Xu) [2232213 2229643]
  - drm/ast: Fix ARM compatibility (Robert Foss) [2232302 2192980]
  - irqchip/gicv3: Workaround for NVIDIA erratum T241-FABRIC-4 (Mark Salter) [2231962 2179060]
  - genirq: GENERIC_IRQ_EFFECTIVE_AFF_MASK depends on SMP (Mark Salter) [2231962 2179060]
  - scsi: storvsc: Handle SRB status value 0x30 (Cathy Avery) [2231990 2224933]
  - scsi: storvsc: Fix handling of virtual Fibre Channel timeouts (Cathy Avery) [2230747 2228298]
  - dm cache policy smq: ensure IO doesn't prevent cleaner policy progress (Benjamin Marzinski) [2228481 2159623]
  - net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225642 2225102] {CVE-2023-3776}
  - md: add error_handlers for raid0 and linear (Nigel Croxon) [2221170 2162219]


author: Vadim Panov <vpanov@cloudlinux.com> [5.14.0-284.30.1.el9_2.tuxcare.els2]
changelog:
  - bpf: Fix re-attachment branch in bpf_tracing_prog_attach {CVE-2024-26591}
  - ext4: improve error recovery code paths in __ext4_remount() {CVE-2024-0775}
  - smb: client: fix OOB in receive_encrypted_standard() {CVE-2024-0565}
  - mtd: Fix gluebi NULL pointer dereference caused by ftl notifier {CVE-2023-52449}
  - net: prevent mss overflow in skb_segment() {CVE-2023-52435}
  - smb: client: fix potential OOBs in smb2_parse_contexts() {CVE-2023-52434}
  - atm: Fix Use-After-Free in do_vcc_ioctl {CVE-2023-51780}
  - ida: Fix crash in ida_free when the bitmap is empty {CVE-2023-6915}
  - nvmet: nul-terminate the NQNs passed in the connect command {CVE-2023-6121}
  - netfilter: nf_tables: Reject tables of unsupported family {CVE-2023-6040}
  - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work {CVE-2023-1989}
  - NFSD: fix use-after-free in nfsd4_ssc_setup_dul() {CVE-2023-1652}
  - x86/bugs: Flush IBP in ib_prctl_set() {CVE-2023-0045}
  - Bluetooth: L2CAP: Fix u8 overflow {CVE-2022-45934}
  - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm {CVE-2022-42896}
  - x86: Clear .brk area at early boot {CVE-2022-36123}
  - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os {CVE-2022-3424}
  - Fix double fget() in vhost_net_set_backend() {CVE-2023-1838}
  - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() {CVE-2023-1380}
  - netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one {CVE-2023-39197}
  - relayfs: fix out-of-bounds access in relay_file_read {CVE-2023-3268}
  - ipv6: rpl: Fix Route of Death. {CVE-2023-2156}
  - ipv6: Fix out-of-bounds access in ipv6_find_tlv() {CVE-2023-2156}
  - net: rpl: fix rpl header size calculation {CVE-2023-2156}
  - memstick: r592: Fix UAF bug in r592_remove due to race condition {CVE-2023-3141}
  - ovl: fix use after free in struct ovl_aio_req {CVE-2023-1252}
  - drm/amdgpu: Fix potential fence use-after-free v2 {CVE-2023-51042}
  - netfilter: nf_tables: reject QUEUE/DROP verdict parameters {CVE-2024-1086}
  - perf: Fix perf_event_validate_size() lockdep splat {CVE-2023-6931}
  - perf: Fix perf_event_validate_size() {CVE-2023-6931}
  - drm/atomic: Fix potential use-after-free in nonblocking commits {CVE-2023-51043}
  - nvmet-tcp: Fix the H2C expected PDU len calculation {CVE-2023-6356}
  - nvmet-tcp: remove boilerplate code {CVE-2023-6356}
  - nvmet-tcp: fix a crash in nvmet_req_complete() {CVE-2023-6356}
  - nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length {CVE-2023-6356}
  - net: tls, update curr on splice as well {CVE-2024-0646}
  - smb: client: fix potential OOB in smb2_dump_detail() {CVE-2023-6610}
  - smb: client: fix potential OOB in cifs_dump_detail() {CVE-2023-6610}
  - smb: client: fix OOB in smbCalcSize() {CVE-2023-6606}
  - ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet {CVE-2023-6932}
  - RDMA/core: Update CMA destination address on rdma_resolve_addr {CVE-2023-2176}
  - RDMA/core: Refactor rdma_bind_addr {CVE-2023-2176}
  - nfp: fix use-after-free in area_cache_get() {CVE-2022-3545}
  - netfilter: nf_tables: skip bound chain on rule flush {CVE-2023-3777}
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb {CVE-2023-40283}
  - drivers: net: slip: fix NPD bug in sl_tx_timeout() {CVE-2022-41858}
  - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve {CVE-2023-4623}
  - net/sched: sch_hfsc: Ensure inner classes have fsc curve {CVE-2023-4623}
  - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF {CVE-2023-3567}
  - nvmet-tcp: Fix a possible UAF in queue intialization setup {CVE-2023-5178}
  - net: tun: fix bugs for oversize packet when napi frags enabled {CVE-2023-3812}
  - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c {CVE-2023-42753}
  - bpf: Fix incorrect verifier pruning due to missing register precision taints {CVE-2023-2163}
  - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free {CVE-2023-4206}
  - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free {CVE-2023-4207}
  - net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free {CVE-2023-4208}
  - net/sched: cls_u32: Fix reference counter leak leading to overflow {CVE-2023-3609}


author: Vadim Panov <vpanov@cloudlinux.com> [5.14.0-284.30.1.el9_2.tuxcare.els3]
changelog:
  - IB/hfi1: Fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA requests {CVE-2023-52474}
  - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). {CVE-2023-4622}
  - sched/rt: pick_next_rt_entity(): check list_entry {CVE-2023-1077}
  - RDMA/irdma: Prevent zero-length STAG registration {CVE-2023-25775}
  - block: add check that partition length needs to be aligned with block size {CVE-2023-52458}
  - bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS {CVE-2024-26589}
  - bpf: fix check for attempt to corrupt spilled pointer {CVE-2023-52462}
  - KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache {CVE-2024-26598}
  - ext4: regenerate buddy after block freeing failed if under fc replay {CVE-2024-26601}
  - ext4: allow ext4_get_group_info() to fail {CVE-2024-26601}
  - mlxsw: spectrum_acl_tcam: Fix stack corruption {CVE-2024-26586}
  - EDAC/thunderx: Fix possible out-of-bounds string access {CVE-2023-52464}
  - drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() {CVE-2023-52470}
  - drivers/amd/pm: fix a use-after-free in kv_parse_power_table {CVE-2023-52469}
  - md/raid5: fix atomicity violation in raid5_cache_count {CVE-2024-23307}
  - igb: set max size RX buffer when store bad packet is enabled {CVE-2023-45871}
  - netfilter: nft_set_rbtree: skip end interval element from gc {CVE-2024-26581}
  - netfilter: nf_tables: check if catch-all set element is active in next generation {CVE-2024-1085}
  - netfilter: nf_tables: skip set commit for deleted/destroyed sets {CVE-2024-0193}
  - netfilter: nft_set_pipapo: skip inactive elements during set walk {CVE-2023-6817}
  - netfilter: nf_tables: split async and sync catchall in two functions {CVE-2023-4244}
  - netfilter: nf_tables: remove catchall element in GC sync path {CVE-2023-4244}
  - netfilter: nf_tables: expose opaque set element as struct nft_elem_priv {CVE-2023-4244}
  - netfilter: nf_tables: set backend .flush always succeeds {CVE-2023-4244}
  - netfilter: nft_set_pipapo: no need to call pipapo_deactivate() from flush {CVE-2023-4244}
  - netfilter: nf_tables: work around newrule after chain binding {CVE-2023-4244}
  - netfilter: nf_tables: nft_set_rbtree: fix spurious insertion failure {CVE-2023-4244}
  - netfilter: nf_tables: fix memleak when more than 255 elements expired {CVE-2023-4244}
  - netfilter: nf_tables: disable toggling dormant table state more than once {CVE-2023-4244}
  - netfilter: nf_tables: disallow element removal on anonymous sets {CVE-2023-4244}
  - netfilter: nft_set_hash: try later when GC hits EAGAIN on iteration {CVE-2023-4244}
  - netfilter: nft_set_pipapo: stop GC iteration if GC transaction allocation fails {CVE-2023-4244}
  - netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention {CVE-2023-4244}
  - netfilter: nft_set_pipapo: call nft_trans_gc_queue_sync() in catchall GC {CVE-2023-4244}
  - netfilter: nf_tables: disallow rule removal from chain binding {CVE-2023-4244}
  - netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction {CVE-2023-4244}
  - netfilter: nf_tables: defer gc run if previous batch is still pending {CVE-2023-4244}
  - netfilter: nf_tables: fix out of memory error handling {CVE-2023-4244}
  - netfilter: nf_tables: use correct lock to protect gc_list {CVE-2023-4244}
  - netfilter: nf_tables: GC transaction race with abort path {CVE-2023-4244}
  - netfilter: nf_tables: flush pending destroy work before netlink notifier {CVE-2023-4244}
  - netfilter: nft_dynset: disallow object maps {CVE-2023-4244}
  - netfilter: nf_tables: GC transaction race with netns dismantle {CVE-2023-4244}
  - netfilter: nf_tables: fix GC transaction races with netns and netlink event exit path {CVE-2023-4244}
  - netfilter: nf_tables: don't fail inserts if duplicate has expired {CVE-2023-4244}
  - netfilter: nf_tables: deactivate catchall elements in next generation {CVE-2023-4244}
  - netfilter: nf_tables: fix kdoc warnings after gc rework {CVE-2023-4244}
  - netfilter: nf_tables: fix false-positive lockdep splat {CVE-2023-4244}
  - netfilter: nf_tables: remove busy mark and gc batch API {CVE-2023-4244}
  - netfilter: nft_set_hash: mark set element as dead when deleting from packet path {CVE-2023-4244}
  - netfilter: nf_tables: adapt set backend to use GC transaction API {CVE-2023-4244}
  - netfilter: nft_set_rbtree: fix overlap expiration walk {CVE-2023-4244}
  - netfilter: nf_tables: GC transaction API to avoid race with control plane {CVE-2023-4244}
  - netfilter: nf_tables: don't skip expired elements during walk {CVE-2023-4244}
  - netfilter: nf_tables: skip bound chain in netns release path {CVE-2023-4244}
  - netfilter: nf_tables: fix spurious set element insertion failure {CVE-2023-4244}
  - netfilter: nf_tables: report use refcount overflow {CVE-2023-4244}
  - netfilter: nf_tables: fix underflow in chain reference counter {CVE-2023-4244}
  - netfilter: nf_tables: disallow timeout for anonymous sets {CVE-2023-4244}
  - netfilter: nf_tables: disallow updates of anonymous sets {CVE-2023-4244}
  - netfilter: nf_tables: reject unbound chain set before commit phase {CVE-2023-4244}
  - netfilter: nf_tables: reject unbound anonymous set before commit phase {CVE-2023-4244}
  - netfilter: nf_tables: disallow element updates of bound anonymous sets {CVE-2023-4244}
  - netfilter: nf_tables: fix underflow in object reference counter {CVE-2023-4244}
  - netfilter: nf_tables: drop map element references from preparation phase {CVE-2023-4244}
  - netfilter: nf_tables: validate variable length element extension {CVE-2023-4244}
  - netfilter: nft_set_pipapo: .walk does not deal with generations {CVE-2023-4244}
  - netfilter: nf_tables: relax set/map validation checks {CVE-2023-4244}
  - netfilter: nf_tables: integrate pipapo into commit protocol {CVE-2023-4244}
  - netfilter: nf_tables: upfront validation of data via nft_data_init() {CVE-2023-4244}
  - netfilter: nft_set_rbtree: fix null deref on element insertion
  - netfilter: nft_set_rbtree: Switch to node list walk for overlap detection
  - netfilter: nft_set_rbtree: skip elements in transaction from garbage collection
  - netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR {CVE-2023-4015}
  - netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack() {CVE-2023-7192}
  - Documentation/hw-vuln: Fix rST warning {CVE-2022-27672}
  - Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions {CVE-2022-27672}
  - KVM: x86: Mitigate the cross-thread return address predictions bug {CVE-2022-27672}
  - x86/speculation: Identify processors vulnerable to SMT RSB predictions {CVE-2022-27672}
  - uio: Fix use-after-free in uio_open {CVE-2023-52439}
  - gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump {CVE-2023-52448}


author: Vadim Panov <vpanov@cloudlinux.com> [5.14.0-284.30.1.el9_2.tuxcare.els4]
changelog:
  - net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() {CVE-2024-26882}
  - tls: fix use-after-free on failed backlog decryption {CVE-2024-26800}
  - tls: separate no-async decryption request handling from async {CVE-2024-26584}
  - tls: decrement decrypt_pending if no async completion will be called {CVE-2024-26584}
  - net: tls: fix use-after-free with partial reads and async decrypt {CVE-2024-26582}
  - net: tls: handle backlogging of crypto requests {CVE-2024-26584}
  - net: tls: factor out tls_*crypt_async_wait()
  - tap: tap_open(): correctly initialize socket uid {CVE-2023-1076}
  - tun: tun_chr_open(): correctly initialize socket uid {CVE-2023-1076}
  - net: add sock_init_data_uid() {CVE-2023-1076}
  - netfilter: nf_tables: bail out on mismatching dynset and set expressions {CVE-2023-6622}
  - drm/qxl: fix UAF on handle creation {CVE-2023-39198}
  - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() {CVE-2023-52752}
  - USB: core: Fix deadlock in port "disable" sysfs attribute {CVE-2024-26933}
  - USB: core: Add hub_get() and hub_put() routines {CVE-2024-26933}
  - USB: core: Fix deadlock in usb_deauthorize_interface() {CVE-2024-26934}
  - scsi: qla2xxx: Fix double free of fcport {CVE-2024-26929}
  - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() {CVE-2024-27020}
  - net: ip_tunnel: prevent perpetual headroom growth {CVE-2024-26804}
  - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout {CVE-2024-26643}
  - netfilter: nf_tables: disallow anonymous set with timeout flag {CVE-2024-26642}
  - netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations {CVE-2024-26673}
  - ipv6: sr: fix possible use-after-free and null-ptr-deref {CVE-2024-26735}
  - fs: sysfs: Fix reference leak in sysfs_break_active_protection() {CVE-2024-26993}
  - cifs: fix underflow in parse_server_interfaces() {CVE-2024-26828}
  - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path {CVE-2024-26595}
  - mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code {CVE-2024-26595}
  - mlxsw: spectrum_acl_tcam: Make fini symmetric to init {CVE-2024-26595}
  - mlxsw: spectrum_acl_tcam: Add missing mutex_destroy() {CVE-2024-26595}
  - net: xfrm: Fix xfrm_address_filter OOB read {CVE-2023-39194}
  - exfat: check if filename entries exceeds max filename length {CVE-2023-4273}
  - xfrm: add NULL check in xfrm_update_ae_params {CVE-2023-3772}
  - firmware: arm_scmi: Harden accesses to the reset domains {CVE-2022-48655}
  - tcp: Reduce chance of collisions in inet6_hashfn(). {CVE-2023-1206}
  - ipv4: fix null-deref in ipv4_link_failure {CVE-2023-42754}
  - netfilter: nfnetlink_osf: avoid OOB read {CVE-2023-39189}
  - netfilter: xt_sctp: validate the flag_info count {CVE-2023-39193}
  - net: qcom/emac: Fix use after free bug in emac_remove due to race condition {CVE-2023-33203}
  - net/tls: tls_is_tx_ready() checked list_entry {CVE-2023-1075}
  - HID: asus: use spinlock to safely schedule workers {CVE-2023-1079}
  - HID: asus: use spinlock to protect concurrent accesses {CVE-2023-1079}
  - HID: intel_ish-hid: Add check for ishtp_dma_tx_map {CVE-2023-3358}
  - gfs2: Don't deref jdesc in evict {CVE-2023-3212}
  - fbcon: Check font dimension limits {CVE-2023-3161}
  - KVM: nVMX: add missing consistency checks for CR0 and CR4 {CVE-2023-30456}
  - hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition {CVE-2023-1855}
  - Bluetooth: HCI: Fix global-out-of-bounds {CVE-2023-28866}
  - HID: check empty report_list in hid_validate_values() {CVE-2023-1073}
  - net: mpls: fix stale pointer if allocation fails during device rename {CVE-2023-26545}
  - r8152: Rate limit overflow messages {CVE-2022-3594}
  - drm/vmwgfx: Fix shader stage validation {CVE-2022-36402}
  - Bluetooth: L2CAP: Fix attempting to access uninitialized memory {CVE-2022-42895}
  - dm ioctl: fix nested locking in table_clear() to remove deadlock concern {CVE-2023-2269}
  - mm/slab_common: fix slab_caches list corruption after kmem_cache_destroy() {CVE-2023-52562}
  - i2c: i801: Fix block process call transactions {CVE-2024-26593}
  - bpf: Fix hashtab overflow check on 32-bit arches {CVE-2024-26884}
  - bpf: Fix stackmap overflow check on 32-bit arches {CVE-2024-26883}
  - x86/xen: Add some null pointer checking to smp.c {CVE-2024-26908}
  - RDMA/mlx5: Fix fortify source warning while accessing Eth segment {CVE-2024-26907}
  - Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security {CVE-2024-26903}
  - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak {CVE-2024-26901}
  - aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts {CVE-2024-26898}


author: Vadim Panov <vpanov@cloudlinux.com> [5.14.0-284.30.1.el9_2.tuxcare.els5]
changelog:
  - af_unix: Fix garbage collector racing against connect() {CVE-2024-26923}
  - netfilter: nft_limit: reject configurations that cause integer overflow {CVE-2024-26668}
  - libbpf: Fix use-after-free in btf_dump_name_dups {CVE-2022-3534}
  - bpf: Fix partial dynptr stack slot reads/writes {CVE-2023-39191}
  - ima: Fix use-after-free on a dentry's dname.name {CVE-2024-39494}
  - ima: define ima_max_digest_data struct without a flexible array variable
  - ima: detect changes to the backing overlay file
  - tpm: fix reference counting for struct tpm_chip {CVE-2022-2977}
  - tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux {CVE-2023-6546}
  - tty: n_gsm: fix restart handling via CLD command
  - r8169: Fix possible ring buffer corruption on fragmented Tx packets. {CVE-2024-38586}
  - netfilter: tproxy: bail out if IP has been disabled on the device {CVE-2024-36270}
  - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). {CVE-2024-36904}
  - Bluetooth: Fix double free in hci_conn_cleanup {CVE-2023-28464}
  - fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super {CVE-2024-0841}
  - net/ipv6: avoid possible UAF in ip6_route_mpath_notify() {CVE-2024-26852}
  - tipc: fix UAF in error path {CVE-2024-36886}
  - Bluetooth: af_bluetooth: Fix deadlock {CVE-2024-26886}
  - Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg {CVE-2023-51779}
  - dma-mapping: benchmark: handle NUMA_NO_NODE correctly {CVE-2024-39277}
  - net/mlx5e: Prevent deadlock while disabling aRFS {CVE-2024-27014}
  - net/mlx5e: Introduce flow steering API {CVE-2024-27014}
  - x86/sev: Harden #VC instruction emulation somewhat {CVE-2024-25742}
  - x86/coco: Disable 32-bit emulation by default on TDX and SEV {CVE-2024-25742}
  - x86: Introduce ia32_enabled() {CVE-2024-25742}
  - x86/entry: Do not allow external 0x80 interrupts {CVE-2024-25742}
  - x86/entry: Convert INT 0x80 emulation to IDTENTRY {CVE-2024-25742}
  - RDMA/srpt: Support specifying the srpt_service_guid parameter {CVE-2024-26744}
  - platform/x86: think-lmi: Fix reference leak {CVE-2023-52520}
  - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command {CVE-2024-27059}
  - fat: fix uninitialized field in nostale filehandles {CVE-2024-26973}
  - usb: xhci: Add error handling in xhci_map_urb_for_dma {CVE-2024-26964}
  - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete {CVE-2024-26897}
  - wifi: mac80211: fix race condition on enabling fast-xmit {CVE-2024-26779}
  - RDMA/qedr: Fix qedr_create_user_qp error flow {CVE-2024-26743}
  - wifi: iwlwifi: fix a memory corruption {CVE-2024-26610}
  - x86/fpu: Stop relying on userspace for info to fault in xsave buffer {CVE-2024-26603}
  - wifi: rt2x00: restart beacon queue when hardware reset {CVE-2023-52595}
  - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() {CVE-2023-52594}
  - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg {CVE-2023-52528}
  - RDMA/siw: Fix connection failure handling {CVE-2023-52513}
  - usb: hub: Guard against accesses to uninitialized BOS descriptors {CVE-2023-52477}
  - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc {CVE-2021-47185}
  - sctp: fail if no bound addresses can be used for a given scope {CVE-2023-1074}
  - memcg: enable accounting for file lock caches {CVE-2022-0480}
  - net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict() {CVE-2023-6176}
  - RDMA/srpt: Do not register event handler until srpt device is fully setup {CVE-2024-26872}
  - drm/amd/display: Atom Integrated System Info v2_2 for DCN35 {CVE-2024-36897}
  - net/mlx5e: fix a potential double-free in fs_any_create_groups {CVE-2023-52667}
  - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() {CVE-2024-36902}
  - ipv6: prevent NULL dereference in ip6_output() {CVE-2024-36901}
  - vt: fix memory overlapping when deleting chars in the buffer {CVE-2022-48627}
  - hwmon: (coretemp) Fix out-of-bounds memory access {CVE-2024-26664}
  - i2c: Fix a potential use after free {CVE-2019-25162}
  - net/smc: fix illegal rmb_desc access in SMC-D connection dump {CVE-2024-26615}


author: Vadim Panov <vpanov@cloudlinux.com> [5.14.0-284.30.1.el9_2.tuxcare.els9]
changelog:
  - smb: client: fix use-after-free in smb2_query_info_compound() {CVE-2023-52751}
  - smb: client: prevent new fids from being removed by laundromat {CVE-2023-52751}
  - cifs: fix dentry lookups in directory handle cache {CVE-2023-52751}
  - uprobe: avoid out-of-bounds memory access of fetching args {CVE-2024-50067}
  - net: do not delay dst_entries_add() in dst_release() {CVE-2024-50036}
  - smb: client: fix UAF in async decryption {CVE-2024-50047}
  - smb3: rename encryption/decryption TFMs
  - mm: call the security_mmap_file() LSM hook in remap_file_pages() {CVE-2024-47745}
  - ext4: avoid OOB when system.data xattr changes underneath the filesystem {CVE-2024-47701}
  - tty: n_gsm: Fix use-after-free in gsm_cleanup_mux {CVE-2024-50073}
  - driver core: bus: Fix double free in driver API bus_register() {CVE-2024-50055}
  - drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer {CVE-2024-49991}
  - drm/amd/display: fix double free issue during amdgpu module unload {CVE-2024-49989}
  - ext4: fix timer use-after-free on failed mount {CVE-2024-49960}
  - Bluetooth: L2CAP: Fix uaf in l2cap_connect {CVE-2024-49950}
  - Bluetooth: l2cap: Don't double set the HCI_CONN_MGMT_CONNECTED bit {CVE-2024-49950}
  - mptcp: pm: Fix uaf in __timer_delete_sync {CVE-2024-46858}
  - of: fdt: fix off-by-one error in unflatten_dt_nodes() {CVE-2022-48672}
  - filelock: fix potential use-after-free in posix_lock_inode {CVE-2024-41049}
  - locks: fix KASAN: use-after-free in trace_event_raw_event_filelock_lock {CVE-2024-41049}
  - drm/i915/gt: Fix potential UAF by revoke of fence registers {CVE-2024-41092}
  - ext4: no need to continue when the number of entries is 1 {CVE-2024-49967}
  - drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation {CVE-2024-49895}
  - slip: make slhc_remember() more robust against malicious packets {CVE-2024-50033}
  - drm/amd/display: Fix index out of bounds in DCN30 color transformation {CVE-2024-49969}
  - drm/amd/display: Fix index out of bounds in degamma hardware format translation {CVE-2024-49894}
  - ext4: aovid use-after-free in ext4_ext_insert_extent() {CVE-2024-49883}
  - ACPI: sysfs: validate return type of _STR method {CVE-2024-49860}
  - ext4: fix double brelse() the buffer of the extents path {CVE-2024-49882}
  - tipc: guard against string buffer overrun {CVE-2024-49995}
  - drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error {CVE-2024-47698}
  - firmware_loader: Block path traversal {CVE-2024-47742}
  - ppp: fix ppp_async_encode() illegal access {CVE-2024-50035}
  - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() {CVE-2024-47685}
  - ext4: fix slab-use-after-free in ext4_split_extent_at() {CVE-2024-49884}
  - drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX {CVE-2024-46871}
  - ext4: avoid use-after-free in ext4_ext_show_leaf() {CVE-2024-49889}
  - wifi: ath11k: fix array out-of-bound access in SoC stats {CVE-2024-49930}
  - net: do not leave a dangling sk pointer, when socket creation fails {CVE-2024-40954}
  - net: sched: sch_multiq: fix possible OOB write in multiq_tune() {CVE-2024-36978}
  - drm/amdgpu: Validate TA binary size {CVE-2024-44977}


author: Dmitry Shibut <dshibut@cloudlinux.com> 7.6.6-1
changelog:
  - CLOS-2240: Fix CageFS update errors arising when some packages are being added to the CageFS skeleton


author: Vladimir Lebedev <vlebedev@cloudlinux.com>, Dmitry Shibut <dshibut@cloudlinux.com> 7.6.10-1
changelog:
  - CLOS-2511: Fix the CageFS issue causing Apache to stop working
  - CLOS-2485: Fix MySQL Password Disclosure in install-cagefs-plugin.py on Plesk


author:
  Vladimir Lebedev <vlebedev@cloudlinux.com>, Redouane Elkaboussi <relkaboussi@cloudlinux.com> 7.6.13-1

changelog:
  - CLOS-2576: Modify the lvectl algorithm to mitigate the impact of LVEs being reset to default limits
  - CLOS-2175: Correct the pw struct manipulation in proxyexec


author:
  Dmitry Shibut <dshibut@cloudlinux.com>, Olkseandr Shyshatskyi <oshyshatskyi@cloudlinux.com> 7.6.23-1

changelog:
  - CLOS-3119: Add fix_fpm_services_in_container script for Ubuntu
  - CLOS-2672: Improve handling of users in proxyexec commands configuration


author: Mikalai Voina <mvoina@cloudlinux.com>, Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> 7.6.27-1
changelog:
  - CLOS-3316: Fix crontab -l in cPanel Terminal on CloudLinux 9
  - CLOS-3343: Add MariaDB client binaries to CageFS
  - CLOS-3358: Avoid unnecessary copy of /etc/mail


author: Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> 7.6.28-1
changelog:
  - CLOS-3547: Fix logged-in users lookup
  - CLOS-3605: Automatically reconfigure httpd on CloudLinux 10


author:
  Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com>, Sandro Kalatozishvili <skalatozishvili@cloudlinux.com> 7.6.29-1

changelog:
  - CLOS-3656: Implementation for website isolation feature
  - CLOS-3667: Add hooks for website isolation feature
  - CLOS-3694: Prepare CLI for website isolation feature
  - CLOS-3654: Add document roots monitoring for website isolation feature
  - CLOS-3737: Configure PHP sessions per website isolation
  - CLOS-3719: Setup /tmp per website isolation
  - CLOS-3745: Add a trusted mechanism for website-isolation identification
  - CLOS-3751: Implement binary to enter website isolations
  - CLOS-3720: Implement isolation of crontab per website isolation
  - CLOS-3774: Isolate home directory with overlay mounts for website isolation


author: Anton Volkov <avolkov@cloudlinux.com> 7.4.15-1
changelog:
  - CAG-1205: cagefs update should not recreate symlinks when no need
  - CAG-1206: add /etc/php to CageFS by default


author:
  Anton Volkov <avolkov@cloudlinux.com>, Pavel Negrobov <pnegrobov@cloudlinux.com>, Roman Prilipskii <rprilipskii@cloudlinux.com> 7.5.1-1

changelog:
  - CAG-1231: Delete cagefs namespaces in userdel.cagefs script
  - CAG-1232: Disable PrivateTmp directive for httpd service in container
  - CAG-1223: adapt mount/umount/enable/disable cagefsctl commands for container without LVE
  - CAG-1213: Log errors in /usr/sbin/cagefs-mount
  - CAG-1218: Run cagefs namespace creation with 10-min interval on no-panel systems
  - CAG-1211: Adapt cagefs service for running without LVE
  - CLPRO-144: Do not use linksafe feature for container environment
  - CAG-1209: make cagefsctl work inside container
  - CAG-1216: setup CageFS namespace when a new user is created inside a container
  - CAG-1212: adapt cagefs.server to work without LVEs, only enter/create LVE if not inside a container
  - CAG-1210: Implement /usr/sbin/cagefs-mount binary to mount custom user's dirs in CageFS


author: Dmitry Shibut <dshibut@cloudlinux.com> 7.5.2-1
changelog:
  - CAG-1224: Make CageFS work on CL Solo
  - AWP-260: CageFS proxy commands updated
  - CAG-1244: Add hook for installation of new php-fpm packages on CPanel
  - CAG-1256: Remove /usr/local/directadmin/directadmin line from proxy.commands on package update


author: ikartavtcev <ikartavtcev@cloudlinux.com> 7.5.4-1
changelog:
  - CAG-1266: Add creating of /home/{username}/.cagefs/var/run/cagefs/utmp in environments without LVE
  - CAG-1276: Allow users inside CageFS to use ClamAV without additional configuration due to changes in the ClamAV distribution
  - LU-3645: fix devices creation for cagefs skeleton


author: Grigory Ponomarenko <gponomarenko@cloudlinux.com>, Dmitry Shibut <dshibut@cloudlinux.com> 7.5.6-1
changelog:
  - CAG-1300: Enhance logging of errors when CageFS is running in VZ container
  - LVEMAN-1896: Fix Phusion Passenger not working on CL9 with cagefs


author:
  Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com>, Sandro Kalatozishvili <skalatozishvili@cloudlinux.com> 7.6.29-1

changelog:
  - CLOS-3656: Implementation for website isolation feature
  - CLOS-3667: Add hooks for website isolation feature
  - CLOS-3694: Prepare CLI for website isolation feature
  - CLOS-3654: Add document roots monitoring for website isolation feature
  - CLOS-3737: Configure PHP sessions per website isolation
  - CLOS-3719: Setup /tmp per website isolation
  - CLOS-3745: Add a trusted mechanism for website-isolation identification
  - CLOS-3751: Implement binary to enter website isolations
  - CLOS-3720: Implement isolation of crontab per website isolation
  - CLOS-3774: Isolate home directory with overlay mounts for website isolation
  - CLOS-3643: Ensure proxy wrapper files persist after update cycles


author:
  Nika Keshelava <nkeshelava@cloudlinux.com>, Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Anastasia Lutsiuk <alutsiuk@cloudlinux.com> 7.6.30-1

changelog:
  - CLOS-3866, CLOS-3867, CLOS-3877, CLOS-3909, CLOS-3924, CLOS-3931, CLOS-3932: Add support of per-domain php selector for website isolation feature
  - CLOS-3846: Add cagefs-no-dev-log flag to skip /dev/log in CageFS user skeleton
  - CLOS-3905: Add php selector per website usage statistics collection
  - CLOS-3868: Trigger xray and ssa ini regeneration on website isolation enabling
  - CLOS-3859: Fix cagefs-docroots-monitor debounce skip events in short time period
  - CLOS-3858: Detect audit log rotation by comparing path inode vs file handle inode
  - CLOS-3856: Start tailer before loading docroots to prevent missed events
  - CLOS-3896, CLOS-3903: Avoid sys.exit calls in get_user_prefix which can terminate whole application


author: Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> 7.6.31-1
changelog:
  - CLOS-3974: Remove stale /usr/local/cpanel/htdocs mount point after cPanel v134 upgrade
  - CLOS-3965: Harden PHP selector and PHP configuration directory operations


author: Georgy Lepsaya <glepsaya@cloudlinux.com> 7.6.32-1
changelog:
  - CLOS-3788: Switch from /sbin/service to systemctl on EL7+ to avoid dependency on initscripts-service


author:
  Roman Prilipskii <rprilipskii@cloudlinux.com>, Georgy Lepsaya <glepsaya@cloudlinux.com>, Anastasia Lutsiuk <alutsiuk@cloudlinux.com>, Oleksandr Shyshatkyi <oshyshatskyi@cloudlinux.com>, Andrei Zheregelia <azheregelia@cloudlinux.com> 7.6.33-1

changelog:
  - CLOS-4008: Optimize user group processing in cagefsctl.copyetc
  - CLOS-3899: Run check_params.py inside LVE
  - CLOS-4035: Fork check_params.py only for commands with restricted params
  - CLOS-4037: Add nolve flag to proxyexec to bypass LVE entry
  - CLOS-3998: Integrate per-domain LVE limits with website isolation
  - CLOS-3990: Bring back --site-isolation-list command
  - CLOS-3973: Register LVD helper binaries in CageFS proxyexec
  - Update usage messages in cagefsctl for clarity and consistency


author: Roman Prilipskii <rprilipskii@cloudlinux.com>, Roman Krompets <rkrompets@cloudlinux.com> 7.6.34-1
changelog:
  - CLOS-2408: Add /etc/cpanel/ea4/php.conf.cache and /usr/local/cpanel/cPstrict.pm to CageFS config for cPanel
  - CLPRO-3006: Fix subdomain isolation on DirectAdmin (domain_owner fallback in cagefsctl_user)


author:
  Anastasia Lutsiuk <alutsiuk@cloudlinux.com>, Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> 7.6.37-1

changelog:
  - CLOS-4404: Speed up cagefs skeleton updates (cache ldd output, prune find traversal)
  - CLOS-4351: Bind /usr/selector inside per-domain isolated namespace to fix dead-symlink 503 on native PHP
  - CLOS-4343: Heal per-site website-isolation directory permissions after a non-isolated request
  - CLOS-4348: Drop legacy InterWorx and ISPManager support; conflict with lvemanager < 7.11.39-1
  - CLOS-4274: Internal bugfixes across CageFS components


changelog: - CLOS-4490, CLOS-4406, CLOS-4387: Internal bugfixes across CageFS components
author:
  Anastasia Lutsiuk <alutsiuk@cloudlinux.com>, Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> 7.6.38-1


author: Georgy Lepsaya <glepsaya@cloudlinux.com>, Anastasia Lutsiuk <alutsiuk@cloudlinux.com> 7.6.39-1
changelog:
  - CLOS-3536: Switch to alt-python-internal build-time dependency
  - CLOS-4545: Fix .cagefs ownership being reassigned to the wrong user on shared home directories
  - CLOS-4516, CLOS-4596, CLOS-4558, CLOS-4451, CLOS-4632, CLOS-4517: Internal bugfixes across CageFS components


author:
  Sandro Kalatozishvili <skalatozishvili@cloudlinux.com>, Anastasia Lutsiuk <alutsiuk@cloudlinux.com> 7.6.40-1

changelog:
  - CLOS-4642: Add support of isolates with LiteSpeed webserver
  - CLOS-4647: Re-register dynamic proxy commands after CageFS upgrade
  - CLOS-4634, CLOS-4560: Internal bugfixes across CageFS components


author: Anastasia Lutsiuk <alutsiuk@cloudlinux.com> 7.6.42-1
changelog:
  - CLOS-5714: Fix *REDIRECT_CGI and SUSPENDEDPAGE aliases on cPanel for isolates
  - CLOS-5813: Fix isolatectl is not registered in skeleton
  - CLOS-5387: Internal bugfixes across CageFS components


author:
  Oleksii Soldatienko <osoldatienko@cloudlinux.com>, Anastasia Lutsiuk <alutsiuk@cloudlinux.com> 7.6.43-1

changelog:
  - CLOS-5724: Keep a per-domain `native` PHP selection on the cPanel system-native PHP under Website Isolation across CageFS rebuild/reset and repair stale native symlinks; expose the shared native_website_targets() helper in clcagefslib so lvemanager and cagefsctl pin identical targets
  - CLOS-5826: Tolerate idle cage namespaces so cagefsctl namespace creation no longer fails when an idle cage is present
  - CLOS-5955: Internal bugfixes across multiple components


author:
  Sandro Kalatozishvili <skalatozishvili@cloudlinux.com>, Anastasia Lutsiuk <alutsiuk@cloudlinux.com> 7.6.44-1

changelog:
  - CLOS-5750: on cagefs upgrade, regenerate site-isolation so LSWS DedicatePhpHandler includes are backfilled
  - CLOS-6641: Fix system log flooding with "Rejected send message" records on servers with nscd installed
  - CLOS-5938: Internal bugfixes across multiple components


author: Sandro Kalatozishvili <skalatozishvili@cloudlinux.com> - 10.11.8-1
changelog:
  - CLOS-2692: Updated to 10.11.8
  - CLOS-2692: Fixed "Can't enter LVE" logging message
  - CLOS-2557: tmpfiles config added


author: Timur Averianov <taverianov@cloudlinux.com> - 10.11.14-1
changelog:
  - CLOS-3531: Updated to 10.11.14
  - CLOS-3538: Stopped patching "mysql.server.sh", the upstream version will be used further on


author: Sandro Kalatozishvili <skalatozishvili@cloudlinux.com> - 10.3.39-5
changelog:
  - CLOS-1955: Adjusted conflicts and obsoletes tags to mysqlclient18-compat
  - CLOS-1955: Added conflicts tags to another version of cl-MariaDB* packages


author: Sandro Kalatozishvili <skalatozishvili@cloudlinux.com> - 10.4.34-1
changelog:
  - CLOS-2692: Updated to 10.4.34
  - CLOS-2692: Fixed "Can't enter LVE" logging message
  - CLOS-2557: tmpfiles config added


author: Sergey Kokhan <skokhan@cloudlinux.com> - 10.5.15-1
changelog:
  - MYSQLG-668: Update MariaDB to version 10.5.15
  - MYSQLG-667: Fixed version_compile_machine variable


author: Sandro Kalatozishvili <skalatozishvili@cloudlinux.com> - 10.5.25-1
changelog:
  - CLOS-2692: Updated to 10.5.25
  - CLOS-2692: Fixed "Can't enter LVE" logging message
  - CLOS-2557: tmpfiles config added


author: Alexandr Demeshko <ademeshko@cloudlinux.com> - 10.6.9-1
changelog:
  - MYSQLG-772: cl-MariaDB106 updated to 10.6.9
  - MYSQLG-764: Conflict between cl-MariaDB106-libs and mariadb-connector-c added


author:
  Alexandr Demeshko <ademeshko@cloudlinux.com> Sandro Kalatozishvili <skalatozishvili@cloudlinux.com> - 10.6.15-1

changelog:
  - CLOS-1923: Updated to 10.6.15
  - CLOS-1744: Added MySQL Provides tag in cl-MariaDB-meta-client package


author: Timur Averianov <taverianov@cloudlinux.com> - 10.6.23-1
changelog:
  - CLOS-3534: Updated to 10.6.23
  - CLOS-3538: Stopped patching "mysql.server.sh", the upstream version will be used further on


author: Sandro Kalatozishvili <skalatozishvili@cloudlinux.com> - 10.6.27-1
changelog:
  - CLOS-4619: Updated to 10.6.27
  - CLOS-4619: Drop byte_order_generic headers no longer installed by upstream


author: Timur Averianov <taverianov@cloudlinux.com> - 11.4.8-1
changelog:
  - CLOS-3526: Updated to 11.4.8
  - CLOS-3538: Stopped patching "mysql.server.sh", the upstream version will be used further on


author: Sandro Kalatozishvili <skalatozishvili@cloudlinux.com> - 11.4.12-1
changelog:
  - CLOS-4623: Updated to 11.4.12
  - CLOS-4623: Drop README-wsrep removed from upstream Docs
  - CLOS-4623: Drop byte_order_generic headers no longer installed by upstream


author: Sandro Kalatozishvili <skalatozishvili@cloudlinux.com> - 11.8.8-1
changelog:
  - CLOS-4624: Updated to 11.8.8
  - CLOS-4624: Drop README-wsrep removed from upstream Docs
  - CLOS-4624: Drop byte_order_generic headers no longer installed by upstream


author: Timur Averianov <taverianov@cloudlinux.com> - 8.0.43-1
changelog:
  - CLOS-3491: Update cl-MySQL80 to 8.0.43
  - CLOS-3538: Stop patching "mysql.server.sh", the upstream version will be used further on


author: Miroslav Rajcic <miroslav.rajcic@oracle.com> - 8.4.0-1
changelog:
  - mysql_stmt_bind_param C API removed, so increase the libmysqlclient major version to 24.
  - Removed mysqlpump, mysql_upgrade, zlib_decompress and lz4_decompress binaries


author: Timur Averianov <taverianov@cloudlinux.com> - 8.4.6-1
changelog:
  - CLOS-3529: Update cl-MySQL 8.4 to 8.4.6
  - CLOS-3538: Stop patching "mysql.server.sh", the upstream version will be used further on


author: Ruslan Koliada <rkoliada@cloudlinux.com> 1.1.17-1
changelog:
  - CLPRO-2763: Fix C-Monitoring failed to load resources - Template variable service failed Unknown error during query transaction.


author: Ruslan Koliada <rkoliada@cloudlinux.com> 1.1.18-1
changelog:
  - CLPRO-2821: Fix "cl_node_exported" service periodically fails with SIGSEGV while executing its meminfo collector


author: Ruslan Koliada <rkoliada@cloudlinux.com> 3.2.1-1
changelog:
  - CLPRO-3051: Improved scanner configuration, service initialization, notifications, and daemon restart handling


author: Ruslan Koliada <rkoliada@cloudlinux.com> 3.2.6-1
changelog:
  - CLPRO-3227: Improvements to cron lock file handling and reported URL origin formatting
  - CLPRO-3250: Improvements to log file handling


author: Roman Krompets <rkrompets@cloudlinux.com> 0.2-1
changelog:
  - AWP-610: Removed "allow-for-all" switcher from AccelerateWP admin's UI
  - AWP-603: CDN: Updated modal's agreement text
  - AWP-583: Prevent error "License approve required to use this feature." while enabling CDN
  - AWP-600: Show warning message when feature modal opens
  - AWP-589: Fixed features are not marked as "Active" in main AccelerateWP UI
  - AWP-557: CDN Free was not activated through Manage window


author: Roman Krompets <rkrompets@cloudlinux.com> 0.2-4
changelog:
  - AWP-679: Fixed issues found by integration tests
  - AWP-622: Allow apply CDN advice if no active subscription
  - AWP-612: FIx UI issues found while testing awp-cdn
  - AWP-631: Show "Active" instead of "No advice" if customer has any active module


author: Roman Krompets <rkrompets@cloudlinux.com> 0.2-5
changelog:
  - AWP-686: Show CDN checkbox active if any of suite (accelerate_wp_cdn, accelerate_wp_cdn_pro) allowed or visible
  - AWP-682: Show incompatibility error for CDN in end-user plugin


author: Roman Krompets <rkrompets@cloudlinux.com> 0.2-6
changelog:
  - AWP-717: Design Fixes for Latest AccelerateWP UI/UX
  - AWP-705: Load list of websites and advices in parallel
  - AWP-706: Reviewed AccelerateWP end-user app for unused code and removed it.
  - AWP-696: Fixed pagination and sorting in case when triggered table update.


author: Timur Kalimullin <tkalimullin@cloudlinux.com>, Roman Krompets <rkrompets@cloudlinux.com> 0.2-7
changelog:
  - CLPRO-811: Added conversion analytics
  - CLPRO-937: Fixed error when AccelerateWP doesn't show progress (percent) when processing advice
  - AWP-726: Fixed link to documentation page in AccelerateWP for Solo Edition


author: Roman Krompets <rkrompets@cloudlinux.com>, Dmitriy Leonov <dmleonov@cloudlinux.com> 0.3-1
changelog:
  - Migrated 'cloudlinux-awp-spa' project to Python311 (CLPRO-1198)
  - Used svg icon instead of mat-icon for settings (CLPRO-1133)
  - Catch advice tracking data from POST in cPanel, fixing GET parameters catching (CLPRO-1197)


author: Dmitriy Leonov <dmleonov@cloudlinux.com>, Roman Krompets <rkrompets@cloudlinux.com> 0.4-1
changelog:
  - Switched sending of Sentry events from the old to the new Sentry in AWP UI (CLPRO-1212)
  - Generate new tracking session when direct access to the hosting panel (CLPRO-1223)
  - Adapted UI AccelerateWP Premium and CDN for Solo/Admin (CLPRO-1200)


author: Roman Krompets <rkrompets@cloudlinux.com> 0.7-1
changelog:
  - Fixed error "Cannot read properties of undefined (reading accelerate_wp)" while opening AccelerateWP (CLPRO-1785)
  - Fixed incorrect "Active" status in AccelerateWP after closing features popup without upgrading (CLPRO-1808)
  - Unified AccelerateWP across CloudLinux Editions (CLPRO-1559)


author: Roman Krompets <rkrompets@cloudlinux.com> 0.7-2
changelog:
  - Added integration support for AccelerateWP UI part (CLPRO-402)
  - Prevented displaying of incorrect feature activation notes if some advice generated (CLPRO-1838)


author: Roman Krompets <rkrompets@cloudlinux.com> 0.7-5
changelog:
  - cPanel: Fixed incorrect handling theme directories while installation (CLPRO-2144)
  - Renamed CloudLinux Shared to CloudLinux Legacy (CLPRO-2173)


author: Roman Krompets <rkrompets@cloudlinux.com> 0.8-1
changelog:
  - Changed the AccelerateWP UI to fit requirements with Object Cache free (CLPRO-2280)
  - Fixed the link to the user guide in the accelerateWP UI (CLPRO-2223)


author: Roman Krompets <rkrompets@cloudlinux.com> 0.8-3
changelog:
  - Fix UI issue when the title for CDN module in the manage modal was not translated (CLPRO-2359)
  - Optimized sending requests while applying advice (CLPRO-2226)


author: Roman Krompets <rkrompets@cloudlinux.com> 0.8-4
changelog:
  - Removed the "Please leave your feedback about AccelerateWP and Smart Advice" component (CLPRO-2263)
  - Renamed "Object Cache" feature to the "Redis Object Cache" in the AccelerateWP UI (CLPRO-2444)


author: Roman Krompets <rkrompets@cloudlinux.com> 0.8-5
changelog:
  - Fix plugin icons displaying on Direct Admin (CLPRO-2524)
  - Add "app_key" for cPanel's plugin templates that uses LiveAPI to allow customize headers (CLPRO-1368)


author: Roman Krompets <rkrompets@cloudlinux.com> 0.8-10
changelog:
  - CLPRO-3061: Improved cPanel analytics handling, error context reporting, and notification rendering


author: Roman Krompets <rkrompets@cloudlinux.com> 0.8-11
changelog:
  - CLPRO-3130: Improved AWP modal content rendering, pipe input handling, and build dependency installation


author: Roman Krompets <rkrompets@cloudlinux.com> 0.8-12
changelog:
  - CLPRO-3120: Improved AccelerateWP UI localisation, runtime language switching, and notification bridge
  - CLPRO-3191: Improved AccelerateWP error-diagnostics reporting and DirectAdmin plugin installation


author: Roman Krompets <rkrompets@cloudlinux.com> 0.8-13
changelog:
  - CLPRO-3192: Improved AccelerateWP billing-popup URL handling, analytics event data, UI text rendering, and build/install tooling
  - CLPRO-3193: Improved AccelerateWP external-link handling, analytics, and cPanel installer robustness


author: Roman Krompets <rkrompets@cloudlinux.com> 0.8-14
changelog:
  - CLPRO-3418: Improved AccelerateWP analytics, billing flows, error reporting, and panel integration checks


author: Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> - 1-3.2
changelog:
  - LVEMAN-1748: Move linksafe group creation to %pre
  - LU-2436: Remove cllib dependency from cloudlinux-linksafe


author: Timur Kalimullin <tkalimullin@cloudlinux.com>, Dmitriy Leonov <dmleonov@cloudlinux.com> - 0.1-12
changelog:
  - AWP-257: Post-check of the CDN after advice activation
  - AWP-374: Disable AccelerateWP WordPress plugin license expiration checking
  - AWP-375: Enable CCSS and async_css AccelerateWP functions
  - AWP-378: Add communication AWP feature with CCSS SaaS
  - AWP-395: Update to 3.12.6 version


author:
  Dmitriy Leonov <dmleonov@cloudlinux.com>, Timur Kalimullin <tkalimullin@cloudlinux.com>, Martin Krcho <mkrcho@cloudlinux.com> - 1.1-1

changelog:
  - AWP-416: Clear AccelerateWP feature cache when disabling CPCSS
  - AWP-426: Hide SAAS URL in AccelerateWP plugin settings
  - AWP-427: Implement authentication mechanism
  - AWP-438: API for managing CDN features
  - AWP-440: Authentication - Retrofit relevant WP plugin changes from AWP-427 to AWP-378
  - AWP-465: Do not set protocol when activating CDN via API
  - AWP-454: Add the style URL in the CPCSS request
  - AWP-443: Create new CPCSS feature errors according to usage limits
  - AWP-389: POC of Critical Path CSS
  - AWP-431: WP CLI command to enable/disable image optimization
  - AWP-491: Use custom DB table for image minification jobs
  - AWP-492: Compatibility with page caching and CDN
  - AWP-494: Optimize freshly uploaded images
  - AWP-495: Implement image queue processing logic
  - AWP-520: Add version /v1/ to api endpoints
  - AWP-429: Scan entire uploads folder to find images to minify
  - AWP-527: Block the ability to disable Critical CSS from WordPress admin panel
  - AWP-535: Grayed Image Optimization settings when feature not enabled
  - AWP-540: Control the per site image limit from SaaS
  - AWP-523: Handle exceeded quota and other blocking scenarios
  - AWP-558: Notification REST API endpoint not available (404)
  - AWP-542: Improve Critical CSS generation process
  - AWP-553: [WP] Improve file search for mtime based optimization
  - AWP-521: Add notification to the AccelerateWP plugin about usage of WP-Rocket plugin as base plugin
  - AWP-562: Change instructions related to enabling and disabling features
  - AWP-559: [WP] Improve folder search in file scanner
  - AWP-570: Fix duplicate uploads folder in url before files in FileScanner process


author: Martin Krcho <mkrcho@cloudlinux.com>, Dmitriy Leonov <dmleonov@cloudlinux.com> - 1.1-2
changelog:
  - AWP-580: Fix concurrency limit reached loop
  - AWP-484: Send notification and manage payment from AccelerateWP plugin
  - AWP-579: Improve local integration tests verifying contents of plugin's settings page
  - AWP-472: Improve HTTP status checking when post-checking CDN
  - AWP-648: Add ability to stop logging errors to Sentry
  - AWP-650: Show limit notice with special text if there isn't upgrade_url specified
  - AWP-654: Include unique_id in error data for Sentry


author: Martin Krcho <mkrcho@cloudlinux.com>, Timur Kalimullin <tkalimullin@cloudlinux.com> - 1.1-3
changelog:
  - AWP-663: Update CLSOP to version 3.13.4
  - AWP-672: Automatically switch to staging SaaS and separate Sentry project when X-Ray connected to staging
  - AWP-660: Protect more AJAX call against CSRF attack
  - AWP-722: Fix search for static css file in CDN post-check and sadd multiple attempts to check if PullZone CDN works


author: Timur Kalimullin <tkalimullin@cloudlinux.com> - 1.1-4
changelog:
  - AWP-732: Improve plugin compatibility with HealthCheck - PageCache
  - AWP-735: Change firebase/php-jwt package version to 6.4 to be compatible with php 7.2


author: Dmitriy Leonov <dmleonov@cloudlinux.com>, Timur Kalimullin <tkalimullin@cloudlinux.com> - 1.1-6
changelog:
  - CLPRO-840: Hide "Load CSS asynchrounsly" AccelerateWP button
  - CLPRO-651: Add domain name as user in Sentry event
  - Notiсe to change open_basedir (CLPRO-1145)


author: Martin Krcho <mkrcho@cloudlinux.com> - 1.1-8
changelog:
  - Fix handling of image optimization and critical CSS related settings (CLPRO-1441)
  - Add WP CLI command to purge cache (CLPRO-1426)


author: Martin Krcho <mkrcho@cloudlinux.com> - 1.1-14
changelog:
  - Update CLSOP to version 3.15.9 (CLPRO-1702)
  - Send IP address to Sentry along with domain. (CLPRO-1743)


author: Timur Kalimullin <tkalimullin@cloudlinux.com> - 1.1-22
changelog:
  - Added support for CloudLinux MAx WebServer (AP2NGX-222, AP2NGX-220)
  - Improved page warming performance (AP2NGX-247)


author: Roman Krompets <rkrompets@cloudlinux.com>, Timur Kalimullin <tkalimullin@cloudlinux.com> - 1.1-24
changelog:
  - Fixed the issue with version discrepancies between the plugin and composer.json (CLPRO-2687)
  - Update plugin to version 3.18.3 (CLPRO-951)


author: Ruslan Koliada <rkoliada@cloudlinux.com>, Roman Krompets <rkrompets@cloudlinux.com> - 1.1-29
changelog:
  - Improved AccelerateWP tmp location handling (CLPRO-2786)
  - Prevent convert images with size more then 16383 × 16383 to WEBP format (CLPRO-2830)


author: Ruslan Koliada <rkoliada@cloudlinux.com>, Timur Kalimullin <tkalimullin@cloudlinux.com> - 1.1-34
changelog:
  - UI improvements in the AccelerateWP with Critical CSS free (CLPRO-2832)
  - Added support for polylang plugins and cookie notices for MaxCache (MAXWS-936)


author: Ruslan Koliada <rkoliada@cloudlinux.com>, Timur Kalimullin <tkalimullin@cloudlinux.com> - 1.1-37
changelog:
  - Added custom JwtHelper to prevent JWT-related failures (CLPRO-2989)
  - Improve mobile render-blocking resource optimization (MAXWS-1001)
  - Add font metric overrides to reduce CLS from web fonts (MAXWS-1002)
  - Improve database optimization (MAXWS-1003)
  - Add explicit Cache-Control max-age headers for static resources (MAXWS-1004)


author: Ruslan Koliada <rkoliada@cloudlinux.com>, Timur Kalimullin <tkalimullin@cloudlinux.com> - 1.1-38
changelog:
  - Improve cache file accessibility (CLPRO-3001)
  - Added API endpoint for license rechecking (MAXWS-1026)


author: Timur Kalimullin <tkalimullin@cloudlinux.com> - 1.1-40
changelog:
  - Internal stability and reliability improvements
  - Build and packaging updates
  - General maintenance and minor fixes


author: Timur Kalimullin <tkalimullin@cloudlinux.com> - 1.1-43.1
changelog:
  - Compatibility fix for WordPress 7.1 (CLOS-6931)
  - Internal stability and reliability improvements (CLOS-6887)


author: Timur Kalimullin <tkalimullin@cloudlinux.com> - 0.1-9
changelog:
  - AWP-258: Update to 3.12.3.2 version
  - AWP-228: Hide the Add-ons page and related addon recommendations in the plugin
  - AWP-210: Enabling CDN functionality from WP CLI
  - AWP-253: Disable CDN deactivation from admin panel
  - AWP-262: Leave previously enabled addons active


author:
  alutsiuk <alutsiuk@cloudlinux.com>, Hasan <haliev@cloudlinux.com>, Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Danylo Kuropiatnyk <dkuropiatnyk@cloudlinux.com>, soksanichenko <soksanichenko@cloudlinux.com> 1.0.0-1

changelog:
  - LU-2443, LU-2447, LU-2321, LU-2352, LU-2334, LU-2268, LU-2296, LU-2229, LU-2172, LU-2133: preparations of CloudLinux Solo OS meta package


author:
  Pavel Negrobov <pnegrobov@cloudlinux.com>, Dmitry Shibut <dshibut@cloudlinux.com>, Sergey Kozhekin <skozhekin@cloudlinux.com> 1.0.4-1

changelog:
  - LVEMAN-1851: Adapt cloudlinux-selector utility for "No CageFS" mode
  - CAG-1224: Make CageFS work on CL Solo
  - MODLS-932: Remove mod_lsapi conflicts from the cloudlinux-solo-meta


author: Andrei Zheregelia <azheregelia@cloudlinux.com>, Georgy Lepsaya <glepsaya@cloudlinux.com> 1.0.11-1
changelog:
  - CLOS-4282: Internal bugfixes
  - CLOS-3392: Use alt-python-internal instead of alt-python311 on all platforms


author: Serhii Kokhan <skokhan@cloudlinux.com> - 3.13-7
changelog:
  - CLOS-1655: Release bump to align CL7 criu-lve with mod_lsapi dependency
    tightening (libcriu.so SONAME guard)


author: Serhii Kokhan <skokhan@cloudlinux.com> - 3.13-10
changelog:
  - MAXWS-1086: Rename C library/headers/pkgconfig to the criu-lve namespace to coexist with criu-libs


author: Marek Kasik <mkasik@redhat.com> - 3.5.27-27
changelog:
  - Avoid stack overflow in DjVuPort by remembering which file we are opening
  - Resolves: #1943411, #1943685


author: Tomas Kasparek <tkasparek@redhat.com> 2.8.5-3
changelog:
  - %if 0%{?fedora} <= 25 is always true on rhel (tkasparek@redhat.com)
  - rhel8 utilizes python3 (tkasparek@redhat.com)


author: Tomas Kasparek <tkasparek@redhat.com> 2.8.5-5
changelog:
  - Related: #1581665 - provide useful symlinks to a manpage
    (tkasparek@redhat.com)
  - Resolves: #1581665 - provide yum-rhn-plugin on new RHEL systems
    (tkasparek@redhat.com)


author: Tomas Kasparek <tkasparek@redhat.com> 2.8.5-6
changelog:
  - spec cleanup (no more builds on Fedora <= 25) (michael.mraka@redhat.com)
  - Resolves: #1637980 - fixed plugin for dnf > 3.6.0 (michael.mraka@redhat.com)


author: Lukas Javorsky <ljavorsk@redhat.com> - 26.4.9-2
changelog:
  - Explicitly require the 'procps-ng' package
  - Otherwise it will not require it in the lightweight systems (e.g. containers)
  - and Galera won't work properly


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.9.1-2
changelog:
  - Fix RHBZ#1937424 (Wrong output from geos-config --libs etc.)
  - Fix RHBZ#1937443 (Wrong output from pkgconf geos --libs etc.)


author: Nikolay Petukhov <npetukhov@cloudlinux.com>, Aleksey Petryankin <apetryankin@cloudlinux.com> 1.2-89
changelog:
  - MYSQLG-900: Fixes in systemd dropin-files on cl7 and ubuntu platforms
  - MYSQLG-820: Error reports have become more consistent in governor_package_limitting.py
  - MYSQLG-919: Fix checking plesk reseller existence in governor_package_limitting.py


author: Nikolay Petukhov <npetukhov@cloudlinux.com>, Aleksey Petryankin <apetryankin@cloudlinux.com> 1.2-90
changelog:
  - MYSQLG-929: Fixed systemd warning 'The unit file changed on disk'
  - MYSQLG-935: Added _nowraps function to exclude forced unload from lve
  - MYSQLG-863: Fix error with existing /etc/my.cnf.d.govprev


author:
  Aleksey Petryankin <apetryankin@cloudlinux.com>, Alexandr Demeshko <ademeshko@cloudlinux.com> 1.2-92

changelog:
  - MYSQLG-961: Loading mysql functions from libmariadb added
  - MYSQLG-941: Fix libmysqlclient.so.18 and libmariadb.so.3 Provides tags in mariadb102..106
  - MYSQLG-965: da_admin mysql account added into default ignore list


author: Sandro Kalatozishvili <skalatozishvili@cloudlinux.com> 1.2-96
changelog:
  - CLOS-2058: Fixed performance issue related to governor package limits synchronization
  - CLOS-2077: Fixed KeyError exception for dbgovernor set_path_environ function


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.2-99
changelog:
  - CLOS-2049: Governor dropin removed
  - CLOS-2170: Add additional safeguards for detecting MySQL AUTO version with DirectAdmin
  - CLOS-2173: Added mysqlclient21 installation for clMariaDB
  - CLOS-2117: mysql-version-list option added
  - MariaDB 10.11 support temporarily removed


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.2-102
changelog:
  - CLOS-2215: bad_users_list ownership fixed
  - CLOS-1759: dbgovernor_map mysql charset changed to utf8mb
  - CLOS-1730: Timeouts added to avoid repetive log messages


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.2-105
changelog:
  - CLOS-2322: Fixed DB limits not applying to users after a MySQL Governor service restart
  - CLOS-2418: MySQL 8.0 community edition repo url changed


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.2-106
changelog:
  - CLOS-2373: Backup confirmation added to governor script

  - CLOS-2322: Fixed DB limits not applying to users after a MySQL Governor service restart
  - CLOS-2418: MySQL 8.0 community edition repo url changed


author: Dmitry Shibut <dshibut@cloudlinux.com> Alexandr Demeshko <ademeshko@cloudlinux.com> 1.2-107
changelog:
  - CLOS-2319: EOLed cl-MariaDB 10.3 removal result to server down
  - CLOS-2471: Fixed wizzard installation


author: Alexandr Demeshko <ademeshko@cloudlinux.com> Timur Averianov <taverianov@cloudlinux.com> 1.2-109
changelog:
  - CLOS-2572: LVE busy in MySQL processes issue fixed
  - CLOS-2506: Fixed MySQL community downloads URL


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.2-110
changelog:
  - CLOS-2322: Fixed issue with not applying limits after Governor service restart
  - CLOS-2535: Governor threads logging added


author:
  Sandro Kalatozishvili <skalatozishvili@cloudlinux.com> Timur Averianov <taverianov@cloudlinux.com> 1.2-111

changelog:
  - CLOS-2645: Corrected MariaDB version detection logic for DA config
  - CLOS-2593, CLOS-2613: Added extended logging
  - CLOS-2385: Added watchdog monitoring utility to governor package
  - CLOS-2386: Implemented external Sentry logging mechanism


author:
  Sandro Kalatozishvili <skalatozishvili@cloudlinux.com> Timur Averianov <taverianov@cloudlinux.com> 1.2-111

changelog:
  - CLOS-2645: Corrected MariaDB version detection logic for DA config
  - CLOS-2593, CLOS-2613: Added extended logging
  - CLOS-2385: Added watchdog monitoring utility to governor package
  - CLOS-2386: Implemented external Sentry logging mechanism
  - CLOS-2594, CLOS-2641: Implemented logging from MySQL and uniform logging


author:
  Sandro Kalatozishvili <skalatozishvili@cloudlinux.com> Timur Averianov <taverianov@cloudlinux.com> 1.2-114

changelog:
  - CLOS-2719: Re-enabled watchdog monitoring utility with adjusted logic and interval
  - CLOS-2711: Added extended logging rotation
  - CLOS-2780: Fixed governor restarts
  - CLOS-2596: Do not install missing MariaDB-compat package in case of CL9
  - CLOS-2735: Changed semaphore retry logic to timed wait


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.2-115
changelog:
  - CLOS-2947: Fix watchdog cron job to stop it from emitting emails
  - CLOS-2885: Prevent sentry_demon from logging zero counters to logs
  - CLOS-2817: Fix Sentry reporting
  - CLOS-2581: Add mysql backup script


author: Timur Averianov <taverianov@cloudlinux.com> 1.2-116
changelog:
  - CLOS-2840: Reduce probability of Governor limits being not applied; prevented Governor hang-up after MySQL/MariaDB or Governor service abrupt termination (replaced semaphore-protected bad_list with lockless one)
  - CLOS-2942: Fix resource usage estimation, reduces probability of Governor limits applied incorrectly
  - CLOS-2873: Fix "/etc/container/dbuser-map" application
  - CLOS-2899: Fix "dbctl --lve-mode=" in case of initial LVE mode "off"


author: Timur Averianov <taverianov@cloudlinux.com> 1.2-117
changelog:
  - Revert changes from 1.2-116 to create a temporary fallback point for 1.2-118
  - Backport fix for unclean handling of SIGTERM in sentry_daemon.py (CLOS-2954)


author:
[cell repeats an earlier one in this file: 106 characters]

changelog:
  - CLOS-2719: Re-enabled watchdog monitoring utility with adjusted logic and interval
  - CLOS-2711: Added extended logging rotation
  - CLOS-2780: Fixed governor restarts
  - CLOS-2596: Do not install missing MariaDB-compat package in case of CL9
  - CLOS-2735: Reduced probability of Governor limits being not applied (changed semaphore retry logic to timed wait in bad_list protection)


author:
  Alexandr Demeshko <ademeshko@cloudlinux.com> Sandro Kalatozishvili <skalatozishvili@cloudlinux.com> 1.2-115

changelog:
  - CLOS-2947: Fix watchdog cron job to stop it from emitting emails
  - CLOS-2885: Prevent sentry_demon from logging zero counters to logs
  - CLOS-2817: Fix Sentry reporting
  - CLOS-2581: Add mysql backup script


author: Timur Averianov <taverianov@cloudlinux.com> 1.2-119
changelog:
  - CLOS-2954: Remove prompt when handling SIGTERM in sentry_daemon.py, it was sometimes leading to "BrokenPipe" error
  - CLOS-2968, CLOS-2794: Improve error reporting


author: Alexandr Demeshko <ademeshko@cloudlinux.com> Timur Averianov <taverianov@cloudlinux.com> 1.2-122
changelog:
  - CLOS-2999: Fix MySQL version logging
  - CLOS-3051: Improve MySQL connections management to avoid crashes
  - CLOS-3051: Improve error reporting
  - CLOS-3015: Add MariaDB 11.4 support


author: Timur Averianov <taverianov@cloudlinux.com> 1.2-124
changelog:
  - CLOS-3196: Fix service dependencies - stopping/starting subordinate 'governor_sentry_daemon.service' by cPanel upgrade scripts was bringing 'db_governor.service' down


author: Timur Averianov <taverianov@cloudlinux.com> 1.2-125
changelog:
  - CLOS-2663, CLOS-3257: Improve error reporting
  - CLOS-3257: Fix crash during statistics collection for LVE-Stats


author: Timur Averianov <taverianov@cloudlinux.com> 1.2-127
changelog:
  - CLOS-3342: Fix outdated limitations in the scenario of several new DB users showed up in sequence fast, and then no new users seen for long
  - CLOS-3361: Fix MariaDB installation on machines with unknown "mysql" DNF module
  - CLOS-3354: Improve error reporting


author: Timur Averianov <taverianov@cloudlinux.com> 1.2-131
changelog:
  - CLOS-2945: Improve error reporting
  - CLOS-3340: Fix restriction causes reported to LVE-stats
  - CLOS-3340: Fix "dbctl restrict <user>" in period-based mode - it was decreasing restriction level
  - CLOS-3340: Fix "dbctl --lve-mode=..." - max. connection count limitation was not removed after restriction reset
  - CLOS-3340: Speed up "dbctl restrict <user>" and "dbctl unrestrict <user>" on machines with many users
  - CLOS-3340: Reduce resource consumption in period-based mode combined with max. connection count limitation
  - CLOS-3340: Reduce resource consumption by duplicate "dbctl unrestrict <user>"
  - CLOS-3340: Fix "penalty period" configuration in period-based mode - setting it to zero didn't turn it off, but still produced a 1 sec penalty period
  - CLOS-3340: Fix "dbgovernor-restrict.log" - remove redundant and misleading items
  - CLOS-3340: Fix "dbctl restrict <user>" - it could restrict administrative DB account
  - CLOS-3418: Fix outdated limitations


author: Haluk Yilmaz <hyilmaz@cloudlinux.com> 1.2-132
changelog:
  - CLOS-3217: Fix "dbtop" and "dbctl" - reports could be inconsistent under high load
  - CLOS-3217: Speed up "dbtop" and "dbctl"


author: Haluk Yilmaz <hyilmaz@cloudlinux.com> 1.2-133
changelog:
  - CLOS-3027: Strengthen string copy operations
  - CLOS-3027: Support long DB user names, up to 80 characters
  - CLOS-3027: Change shared memory structure to consume less memory


author: Timur Averianov <taverianov@cloudlinux.com> 1.2-134
changelog:
  - CLOS-3514: Reduce overhead in the scenario when a new DB user shows up in the middle of already high load
  - CLOS-3317: Fix invalid Linux user names reported to LVE-stats in cases of advanced authentication, like LDAP


author: Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> 1.2-136
changelog:
  - CLOS-3521: Fix mysql installation on Ubuntu
  - CLOS-3570: Do not install mysqlclient18 & mysqlclient21 on CloudLinux 10


author:
  Sandro Kalatozishvili <skalatozishvili@cloudlinux.com> Mikalai Voina <mvoina@cloudlinux.com> 1.2-142

changelog:
  - CLOS-4122: Optimized memory management and safety
  - CLOS-4097: Optimized per-user MariaDB connection limits handling


author:
  Sandro Kalatozishvili <skalatozishvili@cloudlinux.com> Nika Keshelava <nkeshelava@cloudlinux.com> 1.2-143

changelog:
  - CLOS-3496: Fixed MySQL Governor speed limit does not align with user package when upgraded/downgraded/reset


author: Sandro Kalatozishvili <skalatozishvili@cloudlinux.com> 1.2-144
changelog:
  - CLOS-4042: Fix MySQL/MariaDB installation on CL10 when libaio (or numactl) is published with the x86_64_v2 baseline arch tag


author: Sandro Kalatozishvili <skalatozishvili@cloudlinux.com> 1.2-145
changelog:
  - CLOS-4339: Maintenance update.
  - CLOS-4414: Fix DB usage graphs not displaying in cPanel user interface.


author: Sandro Kalatozishvili <skalatozishvili@cloudlinux.com> 1.2-148
changelog:
  - CLOS-5707: Fix cPanel resource usage hanging caused by config file adjustments
  - CLOS-5170: Maintenance update.


author: Sergey Kozhekin <skozhekin@cloudlinux.com> 1.2-87
changelog:
  - MYSQLG-817: Implement ability to sync one user or one package in /usr/share/lve/dbgovernor/governor_package_limitting.py script
  - MYSQLG-873: Fix governor mysql password issue on plesk
  - MYSQLG-869: Added governor-mysql service status check when adding individual limit vectors after the first install.
  - MYSQLG-882: try/except block has been added for all operations with json in governor-package-limits


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.2-99
changelog:
  - CLOS-2170: Add additional safeguards for detecting MySQL AUTO version on DA
  - CLOS-2170: Governor install modules partial formatting pass
  - CLOS-2173: Added mysqlclient21 installation for clMariaDB
  - CLOS-2117: mysql-version-list option added
  - MariaDB 10.11 support temporary removed


author: Antonio Trande <sagitter@fedoraproject.org> - 1.10.6-7
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
  - Use bundled junit
  - Fix hamcrest symlinks in Fedora 35+


author: Robert-André Mauchin <zebob.m@gmail.com> - 1.2.0-2
changelog:
  - Fix s390x tests and RISCV build
  - Introduces a patch that fix tests on BigEndian
  - Introduces a patch that disable RVV runtime dispatch for RISCV builds


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.57-2
changelog:
  - Resolves: #2186645 - Fix issue found by covscan in httpd package
  - Resolves: #2173295 - Include Apache httpd module mod_authnz_fcgi


author: Joe Orton <jorton@redhat.com> - 2.4.57-6
changelog:
  - Resolves: RHEL-5071 - mod_dav_fs: add DavLockDBType
  - mod_dav_fs: add global mutex around lockdb interaction


author: Joe Orton <jorton@redhat.com> - 2.4.57-8
changelog:
  - mod_xml2enc: fix media type handling
    Resolves: RHEL-17686
  - mod_dav: add DavBasePath
    Resolves: RHEL-6600


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.57-9
changelog:
  - Resolves: RHEL-45766 -  httpd: null pointer dereference in
    mod_proxy (CVE-2024-38477)
  - Resolves: RHEL-45749 - httpd: Potential SSRF in mod_rewrite (CVE-2024-39573)
  - Resolves: RHEL-45818 - httpd: Substitution encoding issue in
    mod_rewrite (CVE-2024-38474)
  - Resolves: RHEL-45771 - httpd: Improper escaping of output in
    mod_rewrite (CVE-2024-38475)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.57-11.1
changelog:
  - Resolves: RHEL-46047 - httpd: Security issues via backend applications whose
    response headers are malicious or exploitable (CVE-2024-38476)
  - Resolves: RHEL-53021 - Regression introduced by CVE-2024-38474 fix


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.53-7
changelog:
  - Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
    smuggling
  - Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in 
    ap_strcmp_match()
  - Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
    by hop-by-hop mechanism
  - Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
  - Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
  - Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
  - Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
    with websockets


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.53-11
changelog:
  - Resolves: #2162500 - CVE-2006-20001 httpd: mod_dav: out-of-bounds read/write
    of zero byte
  - Resolves: #2162486 - CVE-2022-37436 httpd: mod_proxy: HTTP response splitting
  - Resolves: #2162510 - CVE-2022-36760 httpd: mod_proxy_ajp: Possible request
    smuggling


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.57-1
changelog:
  - Resolves: #2184403 - rebase httpd to 2.4.57
  - Resolves: #2177753 - CVE-2023-25690 httpd: HTTP request splitting with
    mod_rewrite and mod_proxy


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.59-1
changelog:
  - new version 2.4.59
  - Resolves: RHEL-14668 - RFE: httpd rebase to 2.4.59
  - Resolves: RHEL-31856 - httpd: HTTP response splitting
    (CVE-2023-38709)
  - Resolves: RHEL-31859 - httpd: HTTP Response Splitting in multiple
    modules (CVE-2024-24795)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-4
changelog:
  - Resolves: RHEL-66488 - Apache HTTPD no longer parse PHP files with unicode
    characters in the name


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-7
changelog:
  - Resolves: RHEL-99815 - stickysession field does not work when specifying
    it in the query parameter after upgrade to 9.5
  - Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS
    upgrade (CVE-2025-49812)
  - Resolves: RHEL-99968 - httpd: access control bypass by trusted
    clients is possible using TLS 1.3 session resumption (CVE-2025-23048)
  - Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied
    data in mod_ssl (CVE-2024-47252)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-8
changelog:
  - Resolves: RHEL-114501 Image mode: The dir /var/www is not created when
    updating system in image mode


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-9
changelog:
  - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child
    process is reclaimed


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-10
changelog:
  - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check
    to avoid unnecessary 421 errors after CVE-2025-23048 fix
  - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-12
changelog:
  - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
    via AllowOverride FileInfo (CVE-2025-66200)
  - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable
    override (CVE-2025-65082)
  - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds
    query string to #exec cmd=... (CVE-2025-58098)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-13.1
changelog:
  - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary
    code execution via heap-based buffer overflow (CVE-2026-28780)
  - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child
    process crash (CVE-2026-33007)
  - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter
    functions (CVE-2026-33857)
  - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing
    null-termination check (CVE-2026-34032)
  - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory
    disclosure in ajp_parse_data() (CVE-2026-34059)


author: RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 2.4.62-13.3
changelog:
  - Resolves: RHEL-186186 - httpd: mod_proxy_html buffer handling
    vulnerability (CVE-2026-34355)
  - Resolves: RHEL-175636 - httpd: mod_dav_lock uses wrong lock discovery
    (CVE-2026-29169)
  - Resolves: RHEL-186196 - mod_xml2enc: fix bblen accounting in fix_skipto
    (CVE-2026-42536)
  - Resolves: RHEL-186164 - httpd: fix OCSP write buffer advancement
    bug in mod_ssl (CVE-2026-44185)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-13.4
changelog:
  - Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow
    via malicious backend servers (CVE-2026-34356)
  - Resolves: RHEL-182578 - httpd: incomplete fix
    for CVE-2023-38709 (CVE-2024-42516)
  - Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-43951,
    CVE-2026-44119, CVE-2026-44186


author: RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 2.4.62-13.6
changelog:
  - Resolves: RHEL-190807 - httpd: use-after-free in mod_ldap
    uldap_connection_find via per-directory client cert list
    (CVE-2026-29167)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-3
changelog:
  - Resolves: RHEL-68660 - RewriteRule proxying to UDS (unix domain socket)
    configured in .htaccess doesn't work on httpd-2.4.62-1


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-4.1
changelog:
  - Resolves: RHEL-99972 - CVE-2024-47252 httpd: insufficient escaping of
    user-supplied data in mod_ssl
  - Resolves: RHEL-99963 - CVE-2025-23048 httpd: access control bypass by trusted
    clients is possible using TLS 1.3 session resumption
  - Resolves: RHEL-102079 - stickysession field does not work when specifying it
    in the query parameter after upgrade to 9.5


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-7.1
changelog:
  - Resolves: RHEL-125884 - mod_ssl: allow more fine grained SSL SNI vhost check
    to avoid unnecessary 421 errors after CVE-2025-23048 fix
  - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-7.2
changelog:
  - Resolves: RHEL-123850 - mod_proxy_hcheck may stop healthchecks after a child
    process is reclaimed


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-7.3
changelog:
  - Resolves: RHEL-135063 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
    via AllowOverride FileInfo (CVE-2025-66200)
  - Resolves: RHEL-135048 - httpd: Apache HTTP Server: CGI environment variable
    override (CVE-2025-65082)
  - Resolves: RHEL-134480 - httpd: Apache HTTP Server: Server Side Includes adds
    query string to #exec cmd=... (CVE-2025-58098)


author: Jan Macku <jamacku@redhat.com> - 10.10-1
changelog:
  - Translated using Weblate (Friulian) (#381)
  - Translations update from Weblate (#378)
  - added veth support
  - ifup-eth: add a new PERSISTENT_DHCLIENT_IPV6 option for IPv6 dhclient daemon
  - ifdown removes veth pair if both peers are down
  - rename_device: also support dracut-style kernel cmdline configuration
  - spec: Mark network-scripts as deprecated
  - spec: Initscripts now requires chkconfig (#374)
  - Translations update from Weblate (#371)
  - spec: Move service script into subpackage
  - ci: Onboard initscripts to Packit
  - ci: Migrate from Travis to GH Actions


author: Jan Macku <jamacku@redhat.com> - 10.11.1-1
changelog:
  - spec: Update relation between initscripts and initscripts-service
  - spec: Replace not working awk command with sed
  - use downstream version style


author: Jan Macku <jamacku@redhat.com> - 10.11.2-1
changelog:
  - ifup-routes: Revert quotes
  - ifup-routes: Use `ip replace` only on type `route`
  - ifup-routes: Log when using `ip $type replace`
  - ifup-routes: Use `ip route repace` to avoid race
  - ci: Update path to csdiff repository (#391)


author: Jan Macku <jamacku@redhat.com> - 10.11.3-1
changelog:
  - Drop unnecessary obsoletes
  - spec: Move rename_device to subpackage `initscripts-rename-device`
  - ci: Update `.packit.yml` to run on `c9s`
  - ci: Use Differential ShellCheck action


author: Eduard Abdullin <eabdullin@cloudlinux.com> - 10.11.5-1.cloudlinux
changelog:
  - CLKRN-639: added a script to collect data from clients' servers after a panic occurred
  - Apply CloudLinux patch


author: Jan Macku <jamacku@redhat.com> - 10.11.8-1
changelog:
  - netconsole: var/lock -> run/lock
  - netconsole: source sysconfig/network only if it exists
  - netconsole: remove unused variables
  - netconsole: remove trailing whitespaces
  - sync spec with c9s


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 28-7.cloudlinux
changelog:
  - KMODLVE-575: Fix kmodlve issue on CL8.7 kernel update
  - KMODLVE-557: Fix modinfo error during kmod-lve-1:2.0-43.el8.x86_64 removing
  - KMODLVE-542: Fix errors happening during kmod package installation in containers
  - KMODLVE-464: depmod: resolve different sub-dir lengths issue
  - CLKRN-819: improved prioritizing with modules sharing the same name
  - bump epoch


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-9
changelog:
  - KMODLVE-577: added forgotten lseek handlers to not crash kmodlve on CL9
  - KMODLVE-567: connect the ovz mark out event to the kmodlve callback


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-10
changelog:
  - KMODLVE-579: filemon fixes for CL9
  - KMODLVE-578: added dependency to tuned-profiles-cloudlinux that brings needed kernel params
  - KMODLVE-580: fixed redundant obsoletes for cl9
  - KMODLVE-581: added kmod dependency for cl9
  - KMODLVE-566: do not allow lve creation during lvp_destroy
  - CLKRN-1092: fix build for CL7


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-14
changelog:
  - CLKRN-1153: bump cl9 kernel version for module building
  - KMODLVE-587: enable access to ipv4 and ipv6 entries
  - KMODLVE-588: always update ppos in defaults_next


author: Linar Nadeev <lnadeev@cloudlinux.com> - 2.1-15
changelog:
  - CLKRN-1181: New Alma 9 kernel: -5.14.0-284.11.1.el9_2
  - KMODLVE-594: Prepare kmod-lve for kernel 9.2 build
  - KMODLVE-596: fix cgroup stat parsing


author: Anton Mikaiev <amikaiev@cloudlinux.com> - 2.1-16
changelog:
  - CLKRN-1176: added patch to fix ttypushback vulnerability
  - CLKRN-1195: bumped kernel version for building (cl8) for debug kernel compatibility
  - CLKRN-1093: allow freezable sleep in kmodlve


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-17
changelog:
  - CLKRN-1210: make new page cache accounting default for new installations
  - CLKRN-1089: do not account page cache memory in lve stats output


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-18
changelog:
  - CLKRN-1371: fixed kernel.proc_disable_net & introduced kernel.proc_disable_net2
  - CLKRN-1386: adapt kmodlve building with FEAT_LINK_PROT == 0


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-19
changelog:
  - KMODLVE-600: iolimits events support for CL8/9
  - KMODLVE-601: tag get/put events support
  - CLKRN-1406: revert some changes related to prod_net_disable2 - made the behaviour obliged
  - CLKRN-1355: symlink owner protection fixes for CL9
  - CLKRN-1399: improved fs.protected_symlinks_create option to close the SecureLink creating vulnerability


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-22
changelog:
  - CLKRN-1455: change kernel (cl9) building version for 5.14.0-362.13.1.el9_3
  - CLKRN-1203: switch back to using rh_reserved for tag links
  - CLKRN-1439: reduce warnings from external cgroup moves


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-24
changelog:
  - CLKRN-1488: rework security_* hooks
  - CLOS-2484: suppress the warning for nonexistent 90-cloudlinux.conf in the script


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-26
changelog:
  - CLKRN-1546: always block cgroup move in a multithreaded app
  - CLKRN-1547: stringify more lve_enter flags
  - CLKRN-1541: do not kill unkillable tasks from de_thread()
  - CLKRN-1542: do not allow to interrupt lve_unlink()
  - CLKRN-1457: fixed XFS_QMOPT_FORCE_RES for cl9 kernels


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-28
changelog:
  - CLKRN-1559: check if the ptr is invalid in lve_do_renameat2_trace hook
  - CLKRN-1566: improved restrictions on accessing another mnt ns


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-32
changelog:
  - CLKRN-1606: call missing putname within SP
  - CLKRN-1447: adapted minor log for moving tasks outside of LVEs


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-37
changelog:
  - CLKRN-1698: disable write access to process memory via procfs
  - CLKRN-1688: CL9.5 kernel support
  - CLKRN-1685: implement iolimits for LVP


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-38
changelog:
  - CLKRN-1701: implement namespace check in __ptrace_may_access
  - CLKRN-1696: a switch to disable page cache accounting in lve pmem


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-41
changelog:
  - CLKRN-1717: enable lve_pmem_nocache by default
  - CLKRN-1716: adapted SP hooks variants for Ubuntu 22
  - CLKRN-1715: adapt datacycle hook for Ubuntu 22
  - CLKRN-1715: adapted XFS quota flag for Ubuntu 22 kernel (5.15.0)


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-53
changelog:
  - CLKRN-1910: disable unused ftrace hooks
  - CLKRN-2000: use fput_async if available and doesn't bug_on on non-kernel threads


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-56
changelog:
  - CLKRN-1818: cgroups v2 support for CL10 (new lve_cgroupv2 parameter)
  - CLKRN-1820: implement enter/leave for cgroups v2
  - CLKRN-1821: cpu limit/weight & usage support for cgroups v2
  - CLKRN-1822: cpu stats reset and throttled_time stat for cgroups v2
  - CLKRN-1823: implement memory limits with cgroups v2
  - CLKRN-1824: implement memory usage for cgroups v2
  - CLKRN-1826: implement nproc limit & usage for cgroups v2
  - CLKRN-1831: implement NOUB enter and account/reset NOUB cgroup cpu usage for cgroups v2
  - CLKRN-1851: allow symlink creation outside of lve namespaces
  - CLKRN-1871: do not OOM when reducing PMEM limit in LVP
  - CLKRN-1876: configure cgroup.subtree_control with cgroups v2
  - CLKRN-1878: optimize code with cgroups v2 support
  - CLKRN-1882: subtree_control should be enabled for LVP, not LVE
  - CLKRN-1884: load average support for cgroups v2
  - CLKRN-1909: do not allow to rmdir lve/lvp dirs with cgroups v2
  - CLKRN-1916: split CPU limit between full and noub lves
  - CLKRN-1924: recalc cpu limits after shares changes
  - CLKRN-1925: a fix for racer
  - CLKRN-1930: noub init should happen after root lvp init
  - CLKRN-1933: wrong lve ns check in symlink create hook
  - CLKRN-1939: not enough permissions to enter LVE fix
  - CLKRN-1941: carefully move process to the thread root
  - CLKRN-1948: set memory.swap.max to 0 to replicate swappiness=0 from v1
  - CLKRN-1964: fixed passing incorrect string size
  - CLKRN-1990: fixed build errors for CL8 platform
  - CLKRN-2017: added a hack for attaching noub threads to cgroup v2 cpu controller
  - CLKRN-2027: initial solution for CPU limit balancer
  - CLKRN-2035: build kmod-lve-lts fixes for CL8/CL9 LTS kernels
  - CLKRN-2044: build fixes for Ubuntu22 and CL8/9-LTS / CL8/7h, disable cgroup v2 for production


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-57
changelog:
  - CLKRN-2060: fixed noub_legacy mode to not underlimit the main cpu group
  - CLKRN-2066: fixed LVE cpu stats for a cgroups v2 hack mode
  - CLKRN-2067: improve load balancing
  - CLKRN-2075: symmetrical lve/noub hierarchy
  - CLKRN-2078: cgv2: clamp each noub quota share to kernel minimum
  - CLKRN-2083: fixed cpu weight setting for cgroups v2 case
  - CLKRN-2088: added +cpu to root cgroup subtree_control on lve init
  - CLKRN-2089: bump kmod_kernel_version to 553.111.1 for CL7h and CL8
  - CLKRN-2091: performance statistics for the cgv2 rebalancer
  - CLKRN-2045: added a couple of counters to catch heavy rebalancing code paths


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-59
changelog:
  - CLKRN-2103: cgv2: leave path to target cgroup root, not /lvub
    (fixes __lve_leave: failed to pop cpu context, rc=-16 EBUSY)


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-60
changelog:
  - CLKRN-2105: dead-code cleanup
  - CLKRN-2101: defer child insertion into parent->lvp_children until init done
  - CLKRN-1954: fix a bug in symlink protection
  - CLKRN-2115: added missing error check
  - CLKRN-2115: add missing pointer check
  - CLKRN-2108: order os_lvp_fini() before list_del_init() in lvp_fini()
  - CLKRN-2108: allow module-internal cgroup rmdir outside lve_init thread
  - CLKRN-2111: propagate NET accounting up the full LVP parent chain
  - CLKRN-2112: simplify defaults_start()
  - CLKRN-2113: drop LVE_DEBUG build option; make LVE_DEBUG_CGROUP_BREAK unconditional
  - CLKRN-2115: cleanup: fix error handling in lve_usage_write


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-62
changelog:
  - bump kmod_kernel_version to 6.12.0-211.7.3.el10_2 for AlmaLinux 10.2
  - bump kmod_kernel_version to 5.14.0-687.5.3.el9_8 for AlmaLinux 9.8


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-73
changelog:
  - CLKRN-2197: apply owner check in the symlink readlink hook
  - Remove LVE_PER_VE (OpenVZ per-VE) support


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-61
changelog:
  - bump kmod_kernel_version to 6.12.0-211.7.3.el10_2 for AlmaLinux 10.2
  - bump kmod_kernel_version to 5.14.0-687.5.3.el9_8 for AlmaLinux 9.8
  - CLKRN-1954: fix symlink protection edge case
  - internal cleanup and robustness improvements


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.36-2
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - add gtk-doc to build requirements (#1942967)


author: Alexandr Demeshko <ademeshko@cloudlinux.com> Hasan Aliev <haliev@cloudlinux.com> 1.1-60
changelog:
  - MODLS-905: Add possibility to work with switch_mod_lsapi to control panel integration
  - MODLS-916: Trigger scriptlet creates /usr/local/bin/lsphp as symlink


author: Nikolay Petukhov <npetukhov@cloudlinux.com> Alexandr Demeshko <ademeshko@cloudlinux.com> 1.1-62
changelog:
  - MODLS-935: Fixed malformed http response caused by wrong http header
  - MODLS-940: Added oom score adjustment for lsphp processes


author: Nikolay Petukhov <npetukhov@cloudlinux.com> Alexandr Demeshko <ademeshko@cloudlinux.com> 1.1-63
changelog:
  - MODLS-952: Fixed the bug added when solving MODLS-935
  - CRIU support disabled on CL9 due to MODLS-955


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.1-64
changelog:
  - MODLS-946: lsapi_backend_use_own_log option context fixed
  - MODLS-956: liblsapi dependency made strict for mod_lsapi packages
  - MODLS-959: HTTP output filter error processing changed


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.1-65
changelog:
  - MODLS-963: ea-php82 handler added
  - MODLS-962: DA installation script modified to be called without parameters


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.1-73
changelog:
  - CLOS-2334: Minor mod_lsapi scripts corrections
  - CLOS-2348: Execute condition changed in switch_mod_lsapi script


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.1-75
changelog:
  - CLOS-2832: AlmaLinux support added
  - CLOS-2818: Changed requirement from alt-php56 to alt-php81
  - CLOS-2860: Added lsapi_get_status_line declaration


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.1-77
changelog:
  - CLOS-2951: Add support of alt-php 5.2-5.5 for Alma
  - CLOS-2904: Ignore errors in blacklisted config files


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.1-78
changelog:
  - CLOS-3055: Restore CRIU support in mod_lsapi DA tarballs
  - CLOS-3007: Add PHP 8.4 support as well as support of future PHP versions
  - CLOS-3007: Add heuristic to resolve unlisted PHP handlers
  - CLOS-3043: Add support of Ubuntu 22


author: Timur Averianov <taverianov@cloudlinux.com> 1.1-81
changelog:
  - CLOS-3184: Fix installation error on CL7+Plesk, leading to Apache service not starting; improve future upgrade reliability for other configurations


author:
  Timur Averianov <taverianov@cloudlinux.com> Sandro Kalatozishvili <skalatozishvili@cloudlinux.com> 1.1-86

changelog:
  - MAXWS-785: Fix backend termination script hanging in the background when there were too many processes
  - CLOS-3499: Update package to be compatible with CloudLinux 10


author:
  Sandro Kalatozishvili <skalatozishvili@cloudlinux.com> Timur Averianov <taverianov@cloudlinux.com> 1.1-87

changelog:
  - CLOS-3355: Set the docroot and domain information in the env before spawning lsphp
  - CLOS-3574: Use LSPHPRC instead of PHPRC if ea-php is version 8.4 and higher
  - CLOS-3646: Support RLIMITs


author: Nika Keshelava <nkeshelava@cloudlinux.com>, Serhii Kokhan <skokhan@cloudlinux.com> 1.1-93
changelog:
  - CLOS-1655: Add CRIU support for CL9 and CL10
  - CLOS-4290: Minor fixes in request parsing and configuration scripts


author: Serhii Kokhan <skokhan@cloudlinux.com> 1.1-95
changelog:
  - MAXWS-1086: Link liblscapi against the renamed criu-lve (libcriu-lve)
  - MAXWS-1084: liblsapi: export lscapi_compose_request as a public API
  - MAXWS-1074: Improve own-log-path file handling in the lsphp spawner
  - MAXWS-1075: Input-handling and file-permission fixes in liblscapi and management scripts
  - MAXWS-1085: Input-validation and error-handling fixes in request/response parsing and management scripts


changelog: - Initial libmaxcache implementation for CloudLinux
author:
  Danila Vershinin <dvershinin@cloudlinux.com>, Sandro Kalatozishvili <skalatozishvili@cloudlinux.com>, Sergey Kokhan <skokhan@cloudlinux.com> - 1.0.0-1


author: Sergey Kokhan <skokhan@cloudlinux.com>, Timur Kalimullin <tkalimullin@cloudlinux.com> - 1.0.1-1
changelog:
  - Add libmaxcache-configd subpackage - configuration daemon for
    dynamic NGINX configuration via shared memory
  - Add Sentry error reporting to maxcache-configd


author: Sergey Kokhan <skokhan@cloudlinux.com> - 1.0.2-1
changelog:
  - Add maxcache-htcache-watchd subpackage (fanotify-based cache invalidation daemon)
  - Rename libmaxcache-configd into maxcache-nginx-configd


author: Serhii Kokhan <skokhan@cloudlinux.com> - 1.0.3-1
changelog:
  - MAXWS-1030: Security hardening of maxcache-nginx-configd socket daemon
  - MAXWS-1029: Fix domain wipe on daily rescan for non-standard docroot paths


author: Serhii Kokhan <skokhan@cloudlinux.com> - 1.1.0-1
changelog:
  - MAXWS-1050: Cache all alias/sub domains at a shared docroot.
  - MAXWS-1049: Auto-heal missing SHM file on periodic healthcheck.
  - MAXWS-1043: Remove htcache-watchd daemon; htcache uses stat() polling only
  - MAXWS-1042: Rename htcache_engine.h to htaccess_engine.h


author: Serhii Kokhan <skokhan@cloudlinux.com> - 1.2.0-1
changelog:
  - MAXWS-1064: Emit Vary header on cache hits when gzip or SSL variants are active; honor X-Forwarded-Proto only when explicitly trusted; bound device-detection regex matches.
  - MAXWS-1053: Improved correctness in cache-path construction and .htaccess directive merge; dynamic-array scaling for large <Directory> configurations.
  - MAXWS-1046: Match mandatory cookie names exactly (was substring); cap User-Agent version-digit parsing; assorted edge-case correctness fixes.


author: Serhii Kokhan <skokhan@cloudlinux.com> - 1.2.1-1
changelog:
  - MAXWS-1089: Make the htaccess engine lock robust so a crashed worker can't hang Apache.
  - MAXWS-1028: Fix .htaccess caching when the edition cannot be detected.
  - MAXWS-1078: Fix dynamic-cookie and query-string suffix length handling.


author: Serhii Kokhan <skokhan@cloudlinux.com> - 1.2.2-1
changelog:
  - MAXWS-1095: Fix lsphp segfaults from .htaccess php_value/php_flag handling in the maxcache htaccess cache.
  - MAXWS-1091: Bump maxcache-nginx-configd Python dependencies (PyYAML, pygments).


author: Serhii Kokhan <skokhan@cloudlinux.com> - 1.2.3-1
changelog:
  - MAXWS-1096: Fix PATH_INFO handling in the .htaccess cache (front-controller internal-redirect loop).


author: Serhii Kokhan <skokhan@cloudlinux.com> - 1.2.4-1
changelog:
  - CLOS-5744: fix Apache-worker SIGSEGV on Passenger vhosts.
  - MAXWS-1088: align cache-path construction with the AccelerateWP plugin so cached pages are matched and served correctly, including per-user isolation for logged-in visitors and consistent query-string and long-filename handling.


author: Paul Howarth <paul@city-fan.org> - 1.10.0-1
changelog:
  - Update to 1.10.0
    - Adds agent forwarding support
    - Adds OpenSSH Agent support on Windows
    - Adds ECDSA key support using the Mbed TLS backend
    - Adds ECDSA cert authentication
    - Adds diffie-hellman-group14-sha256, diffie-hellman-group16-sha512,
      diffie-hellman-group18-sha512 key exchanges
    - Adds support for PKIX key reading when using ed25519 with OpenSSL
    - Adds support for EWOULDBLOCK on VMS systems
    - Adds support for building with OpenSSL 3
    - Adds support for using FIPS mode in OpenSSL
    - Adds debug symbols when building with MSVC
    - Adds support for building on the 3DS
    - Adds unicode build support on Windows
    - Restores os400 building
    - Increases min, max and opt Diffie Hellman group values
    - Improves portability of the make file
    - Improves timeout behaviour with 2FA keyboard auth
    - Various improvements to the Wincng backend
    - Fixes reading partial packet replies when using an agent
    - Fixes Diffie Hellman key exchange on Windows 1903+ builds
    - Fixes building tests with older versions of OpenSSL
    - Fixes possible multiple definition warnings
    - Fixes potential cast issues _libssh2_ecdsa_key_get_curve_type()
    - Fixes potential use after free if libssh2_init() is called twice
    - Improved linking when using Mbed TLS
    - Fixes call to libssh2_crypto_exit() if crypto hasn't been initialized
    - Fixes crash when loading public keys with no id
    - Fixes possible out of bounds read when exchanging keys
    - Fixes possible out of bounds read when reading packets
    - Fixes possible out of bounds read when opening an X11 connection
    - Fixes possible out of bounds read when ecdh host keys
    - Fixes possible hang when trying to read a disconnected socket
    - Fixes a crash when using the delayed compression option
    - Fixes read error with large known host entries
    - Fixes various warnings
    - Fixes various small memory leaks
    - Improved error handling, various detailed errors will now be reported
    - Builds are now using OSS-Fuzz
    - Builds now use autoreconf instead of a custom build script
    - cmake now respects install directory
    - Improved CI backend
    - Updated HACKING-CRYPTO documentation
    - Use markdown file extensions
    - Improved unit tests


author: Sergey Fokin <sfokin@cloudlinux.com> - 1.10.0-1.cloudlinux
changelog:
  - re-enable sha1 rsa-sha keys out of the box
    See: https://github.com/libssh2/libssh2/issues/630
  - disable tests


author: Frantisek Sumsal <frantisek@sumsal.cz> - 1.2.0-7
changelog:
  - Initial EPEL 9 build for BZ#2029481
  - Temporarily skip building docs due to work around BZ#2031879


author:
  Ilya Kartavtcev <ikartavtcev@cloudlinux.com>, Aleksey Petryankin <apetryankin@cloudlinux.com> 4.1.21-1

changelog:
  - LVES-1085: Fix uncaught exception (BrokenPipeError or EOFError) during lvestats.service stop or restart
  - LVES-1083: Fix lines with duplicated timestamps in cloudlinux-statistics output


author: Dmitry Shibut <dshibut@cloudlinux.com> 4.1.22-1
changelog:
  - LU-3595: Muted error on process termination during lvestats-server stop if process is already dead


author:
  Aleksey Petryankin <apetryankin@cloudlinux.com>, Anton Volkov <avolkov@cloudlinux.com>, Ilya Kartavtcev <ikartavtcev@cloudlinux.com> 4.1.23-1

changelog:
  - LVES-1087: Detect root user coorectly when multiple users with uid 0 exist
  - LVES-1093: Fix mysql error "Expression #3 of SELECT list is not in GROUP BY clause"
  - LVES-1092: Extend logging when len(lve_results) != len(gov_results)
  - Fix cl9 dependency, bump release version


author:
  Dmitry Shibut <dshibut@cloudlinux.com>, Grigory Ponomarenko <gponomarenko@cloudlinux.com>, Vladimir Lebedev <vlebedev@cloudlinux.com> 4.2.1-1

changelog:
  - CLOS-1952: Fix MySQL localhost connection issues when using sockets
  - CLOS-1947: Fix lvechart Numpy float conversions when generating a time frame output
  - CLOS-1858: Log details of SQL INTEGER overflow errors when incoming LVE usage stats values are too large


author:
  Vladimir Lebedev <vlebedev@cloudlinux.com>, Dmitry Shibut <dshibut@cloudlinux.com>, Grigory Ponomarenko <gponomarenko@cloudlinux.com> 4.2.2-1

changelog:
  - CLOS-2190: Implement infrastructure for the experimental LVE feature ‘Automatic Limit Overrides’, currently unavailable for public testing


author:
  Vladimir Lebedev <vlebedev@cloudlinux.com>, Dmitry Shibut <dshibut@cloudlinux.com>, Grigory Ponomarenko <gponomarenko@cloudlinux.com> 4.2.3-1

changelog:
  - CLOS-2107: Prevent the lvestats service from failing when encountering unexpected Input/Output errors
  - CLOS-2102: Update DB cleanup and maintenance infrastructure for the experimental ‘Automatic Limit Overrides’ LVE feature


author: Vladimir Lebedev <vlebedev@cloudlinux.com> 4.2.4-1
changelog:
  - CLOS-2188: Optimise CPU and RAM usage for the experimental 'Automatic Limit Overrides' LVE feature


author: Dmitry Shibut <dshibut@cloudlinux.com> 4.2.9-1
changelog:
  - CLOS-3047: Suppress warning when executing lvechart utility with the latest alt-ImageMagick installed


author:
  Tamar Tsotniashvili <ttsotniashvili@cloudlinux.com>, Roman Prilipskii <rprilipskii@cloudlinux.com> 4.2.11-1

changelog:
  - CLOS-3005: Shorten warning logs when MySQL query snapshots cannot be created while MySQL is not running, add an option to disable MySQL snapshots
  - CLOS-3143: Modify lveps argument list to ensure correct behavior


author:
  Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Georgy Lepsaya <glepsaya@cloudlinux.com> 4.2.14-2

changelog:
  - CLOS-3864: Fix a typo in the lve-stats changelog
  - CLOS-3870: Fix lost bursting history events in lve-bursting-info


author: Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> 4.3.2-1
changelog:
  - CLOS-4011: Record reseller end-users' faults (non-CPU) accurately
  - CLOS-4062: Fix LiteSpeed snapshot HTTP queries and SHOW FULL PROCESSLIST UnicodeDecodeError
  - CLOS-4277: Bugfixes
  - CLOS-4380: Fix mysql probe race causing false-positive auth detection
  - CLOS-4385: Grant lvestat table-level access to alembic_version and stop masking partial-schema upgrade bug in CI


author: Roman Prilipskii <rprilipskii@cloudlinux.com> 5.0.4-1
changelog:
  - CLOS-4253: Reset unsupported SQLite WAL journal mode to DELETE on daemon startup
  - CLOS-4253: Set SQLite busy_timeout explicitly to 5000 ms
  - CLOS-4636: Fix HTML formatting in admin/reseller email templates


author: CloudLinux <packager@cloudlinux.com> - 5.0.1-1
changelog:
  - CLOS-4011: Record reseller end-users' faults (non-CPU) accurately
  - CLOS-4165: Add Sentry error reporting to lvestats-server and fix INT4/INT8 type mismatch in PostgreSQL scalar queries
  - CLOS-4368: Fix update server ID on fresh system installation


author: CloudLinux <packager@cloudlinux.com> - 5.0.2-1
changelog:
  - CLOS-4390: Filter phantom isolation entries from collector output
  - CLOS-4416: Port LiteSpeed HTTP-first probing, htpasswd-hash compatibility, and processlist UnicodeDecode fixes from lve-stats


author: CloudLinux <packager@cloudlinux.com> - 5.0.5-1
changelog:
  - CLOS-4557: Internal bugfixes in DbGovSaver history plugin
  - CLOS-4553: Internal improvement to error logging and reporting


author: CloudLinux <packager@cloudlinux.com> - 5.0.6-1
changelog:
  - CLOS-4628: Restore --show-columns and v2 usage columns in lveinfo
  - CLOS-4582: Internal bugfixes and improvements into multiple lve-stats components


author: CloudLinux <packager@cloudlinux.com> - 5.0.7-1
changelog:
  - CLOS-4675: Fix lveinfo over-reporting averaged CPU/memory/IO usage over longer periods
  - CLOS-4640: Restore the DB Governor usage overlay
  - CLOS-4639: Fix per-minute LVE resource usage statistics not being recorded
  - CLOS-4636: Honor per-reseller fault-notification settings in StatsNotifier


author: CloudLinux <packager@cloudlinux.com> - 5.0.9-1
changelog:
  - CLOS-4708: Fix database corruption and schema-handling bugs
  - CLOS-4707: Restore opt-in defaults for optional collector and saver plugins
  - CLOS-4701: Fix admin fault-notification email content
  - CLOS-4501: Fix portable aggregate averaging across MySQL and MariaDB
  - CLOS-4630: Internal bugfixes across multiple lve-stats components


author: CloudLinux <packager@cloudlinux.com> - 5.0.10-1
changelog:
  - CLOS-4845: Fix cloudlinux-top reporting N/A domain/reseller and truncated large process lists
  - CLOS-4740: Add sendmail fallback for fault-notification email delivery
  - CLOS-4739: Restore lveinfo --by-fault and --by-usage column aliases
  - CLOS-4733: Automatically recover from missing database tables
  - CLOS-4708: Throttle repeated plugin errors to reduce error-report noise
  - CLOS-4630: Internal bugfixes across multiple lve-stats components


author: CloudLinux <packager@cloudlinux.com> - 5.0.11-1
changelog:
  - CLOS-5747: Fix lveinfo/statistics reporting zero fault counts on MySQL
  - CLOS-5723: Exclude reserved/internal LVE IDs from admin fault-notification emails
  - CLOS-5721: Deliver fault notifications to all addresses in multi-address contact emails
  - CLOS-5720: Honor the per-user fault-notification opt-out setting
  - CLOS-4630,CLOS-5246: Internal bugfixes across multiple lve-stats components


author: CloudLinux <packager@cloudlinux.com> - 5.0.12-1
changelog:
  - CLOS-5781: Fix I/O usage unit shown incorrectly in cPanel
  - CLOS-5818: Fix StatsNotifier fault notifications failing on MySQL/MariaDB backends
  - CLOS-5819: Fix Python collector plugins failing to run after a plugin-runner restart
  - CLOS-5820: Fix StatsNotifier customer emails not delivered for multi-address sender addresses
  - CLOS-5822: Fix StatsNotifier customer notifications skipped on panels storing users in sys_users (e.g. Plesk)
  - CLOS-5246: Internal bugfixes across multiple lve-stats components


author: CloudLinux <packager@cloudlinux.com> - 5.0.13-1
changelog:
  - CLOS-6785: Stop logging misleading "Failed to create index" warnings on install and upgrade
  - CLOS-6010: Internal bugfixes across multiple lve-stats components


author: CloudLinux <packager@cloudlinux.com> - 5.0.14-1
changelog:
  - CLOS-6781: Fix missing tooltips on Current Usage charts in LVE Manager
  - CLOS-6808: Fix statistics silently not collected on an invalid database path
  - CLOS-4472: Fix false dbtop logging for MySQL Governor


author: Timur Kalimullin <tkalimullin@cloudlinux.com>, Roman Krompets <rkrompets@cloudlinux.com> 6.5.1-1
changelog:
  - CLPRO-1080: Add xray_advanced_metrics_status to summary
  - CLPRO-436: Renamed variables to ensure better consistency and clarity


author:
  Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Sandro Kalatozishvili <skalatozishvili@cloudlinux.com> 6.5.3-1

changelog:
  - CLPRO-1241: Added telemetry for Premium/CDN jwt statuses
  - CLOS-1797: Added hook to process user package limits at creation


author:
  Timur Kalimullin <tkalimullin@cloudlinux.com>, Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com> 6.5.4-1

changelog:
  - CLPRO-1241: Added telemetry for disabled smart advice reminders
  - CLPRO-1258: Provide activation of AccelerateWP free for all new installed servers
  - CLPRO-1257: Add ability to activate AccelerateWP Free via Centralized Monitoring setting


author:
  Sandro Kalatozishvili <skalatozishvili@cloudlinux.com>, Roman Prilipskii <rprilipskii@cloudlinux.com> 6.5.5-1

changelog:
  - CLOS-2058: Fix performance issue related to governor package limits synchronization
  - CLOS-1423: Fix installation of cloudlinux-wizard modules for Ubuntu


author:
  Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Roman Prilipskii <rprilipskii@cloudlinux.com>, Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> 6.5.7-1

changelog:
  - CLPRO-1394: Add possibility to determine CL trials in public stat
  - CLOS-2124: Check if Governor is functioning correctly before attempting to retreve user Governor limit data
  - CLPRO-1282: Implement automatic server-flags metrics discovery


author: Roman Krompets <rkrompets@cloudlinux.com> 6.5.8-1
changelog:
  - CLPRO-1438: Added "accelerate_wp_promotion_status" metric to summary
  - AP2NGX-64: Implemented monitoring metrics for Apache2Nginx


author:
  Roman Prilipskii <rprilipskii@cloudlinux.com>, Grigory Ponomarenko <gponomarenko@cloudlinux.com> 6.5.9-1

changelog:
  - CLOS-2172: Expire yum cache before running Wizard modules install
  - CLOS-2190: Implement infrastructure for the experimental LVE feature ‘Automatic Limit Overrides’, currently unavailable for public testing


author: Roman Prilipskii <rprilipskii@cloudlinux.com> 6.5.10-1
changelog:
  - CLOS-2161: Adapt cloudlinux-wizard and package_reinstaller script to work under Ubuntu
  - CLOS-2210: Enable the cldiag hidepid check on cPanel v116 and above


author: alutsiuk <alutsiuk@cloudlinux.com>, Grigory Ponomarenko <gponomarenko@cloudlinux.com> 6.5.11-1
changelog:
  - CLPRO-1585: Add ability to activate AccelerateWP Premium from Centralized Monitoring
  - CLOS-1996: Adapt CL Solo / CL Admin to work on Virtuozzo


author: alutsiuk <alutsiuk@cloudlinux.com>, Danila Vershinin <dvershinin@cloudlinux.com> 6.5.12-1
changelog:
  - AP2NGX-73: Implement metric to see which handlers are not supported by Apache2Nginx
  - CLPRO-1676: Add ability to edit AccelerateWP upgrade url via Centralized Monitoring


author: Roman Krompets <rkrompets@cloudlinux.com>, Dmitriy Leonov <dmleonov@cloudlinux.com> 6.5.14-1
changelog:
  - CLPRO-1748: Modified cloudlinux-license to accept "edition" while getting trial license
  - CLPRO-1687: Added per user wordpress metrics


author:
  Grigory Ponomarenko <gponomarenko@cloudlinux.com>, Aleksey Petryankin <apetryankin@cloudlinux.com>, Dmitry Shibut <dshibut@cloudlinux.com>, Roman Prilipskii <rprilipskii@cloudlinux.com> 6.4.12-1

changelog:
  - LU-3810: Optimize lvectl apply all and lvectl all-user-list
  - MODLS-972: Stop removing mod_lsapi packages during cloudlinux-solo-meta installation
  - LU-3700: Move userland projects to cl.sentry.cloudlinux.com
  - LU-3815: Return a more comprehensive error message when Wizard is considered unsupported


author: Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> 6.4.13-1
changelog:
  - AWP-708: Add a new metric to summary
  - CLPRO-432: Add possibility to track AccelerateWP upgrade URL


author:
  Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Roman Prilipskii <rprilipskii@cloudlinux.com> 6.5.7-1

changelog:
  - CLPRO-1394: Add possibility to determine CL trials in public stat
  - CLOS-2124: Check if Governor is functioning correctly before attempting to retreve user Governor limit data


author:
  Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Dmitry Shibut <dshibut@cloudlinux.com>, Roman Krompets <rkrompets@cloudlinux.com>, Vladimir Lebedev <vlebedev@cloudlinux.com> 6.6.1-1

changelog:
  - CLOS-2352, CLOS-2353, CLOS-2411, CLOS-2435, CLPRO-1529, CLPRO-1703, CLPRO-1813, CLPRO-1886: Add CloudLinux edition migration support


author: Grigory Ponomarenko <gponomarenko@cloudlinux.com> 6.6.1-2
changelog:
  - CLOS-2499: Fix Unknown status for package mod_hostinglimits error after Unification release
  - CLOS-2500: Fix cloudlinux-customizer incorrectly retrieving list of packages after Unification release


author:
  Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com>, Roman Prilipskii <rprilipskii@cloudlinux.com>, Grigory Ponomarenko <gponomarenko@cloudlinux.com> 6.6.3-1

changelog:
  - CLPRO-1924: Do not install SmartAdvice MU plugin and do not send notifications after automatic enabling AccelerateWP of new servers
  - CLPRO-1928: Added Smart Advice plugin installation metric to statistics
  - CLOS-2417: Monitor CentOS 7 to CloudLinux 8 conversions in statistics
  - CLOS-2355: Make LVE support transition from Shared/Admin to Solo


author:
  Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com>, Roman Prilipskii <rprilipskii@cloudlinux.com> 6.6.4-1

changelog:
  - CLPRO-1873: Internal refactoring: simplify code which detects supported features
  - CLOS-2558: Fix comparsion TypeError in clsummary license check
  - CLPRO-1899: Add WP2 detection to statistics


author:
  Dmitry Shibut <dshibut@cloudlinux.com>, Grigory Ponomarenko <gponomarenko@cloudlinux.com>, Redouane Elkaboussi <relkaboussi@cloudlinux.com> 6.6.5-1

changelog:
  - CLOS-1860: Complete migration to Python 3.11
  - CLOS-2577: Enhance cagefsctl and lvectl logging
  - CLOS-2508: Fix the issue where packages without a reseller aren't removed from /etc/container/ve.cfg


author:
  Grigory Ponomarenko <gponomarenko@cloudlinux.com>, Roman Prilipskii <rprilipskii@cloudlinux.com>, Anastasiia Lutsiuk <alutsiuk@cloudlinux.com> 6.6.6-1

changelog:
  - CLOS-2374: Adapt cl-quota/cloudlinux-limits to work on NO-LVE environment
  - CLOS-2312: Correct cPanel "default" plan always switching to the root user inode limits
  - CLOS-2649: Adapt the panel setup process detection for new versions of DA
  - CLPRO-2008: Do not trigger CL edition transition logic if the edition does not change


author:
  Vladimir Lebedev <vlebedev@cloudlinux.com>, Roman Prilipskii <rprilipskii@cloudlinux.com>, Grigory Ponomarenko <gponomarenko@cloudlinux.com> 6.6.7-1

changelog:
  - CLOS-2576: Modify the lvectl algorithm to mitigate the impact of LVEs being reset to default limits
  - CLOS-2467: Gather the users_with_faults statistic on platforms that support LVE, not RESELLER_LIMITS
  - CLOS-2616: Set user.max_user_namespaces=0 for new installations by default


author: Dmitry Shibut <dshibut@cloudlinux.com>, Mykola Ishchenko <mishchenko@cloudlinux.com> 6.6.8-1
changelog:
  - CLOS-2714: Fix the lvestats service remaining disabled after converting from CL 9 Solo to Shared edition
  - CLOS-2585: Fix the license not being properly updated on CL Solo


author: Roman Prilipskii <rprilipskii@cloudlinux.com> 6.6.9-1
changelog:
  - CLOS-2765: Remove mentions of specific hosting providers from cldiag logging
  - CLOS-2822: Add the CL9 static DB binary path into the db_info_lib library


author:
  Marieta Harutyunyan <mharutyunyan@cloudlinux.com>, Dzmitry Ryzhykau <dryzhykau@cloudlinux.com> 6.6.13-1

changelog:
  - CLOS-2901: Add a new forced-space flag to lveps to ensure correct parsing of the output
  - CLOS-2865: Print an error message if cloudlinux-edition-watcher cannot determine the current edition


author: Dzmitry Ryzhykau <dryzhykau@cloudlinux.com>, Roman Prilipskii <rprilipskii@cloudlinux.com> 6.6.14-1
changelog:
  - CLOS-3052: Use rhn-client-tools scripts for license management on Ubuntu. Remove placeholder scripts.
  - CLOS-2083: Adapt clwizard and clsummary to handle Ubuntu versions


author:
  Dmitry Shibut <dshibut@cloudlinux.com>, Roman Prilipskii <rprilipskii@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com> 6.6.15-1

changelog:
  - CLOS-3105: Adapt cloudlinux-customizer to function on Ubuntu
  - CLOS-3123: Update LSAPI Wizard module to correctly resolve package names on Ubuntu
  - CLPRO-2527: Fix cloudlinux-summary WordPress statistics collection


author: alutsiuk <alutsiuk@cloudlinux.com> 6.6.18-1
changelog:
  - CLPRO-2688: Prevent error "lsof: status error on /dev/lve: No such file or directory" while edition transition


author:
  mvoina <mvoina@cloudlinux.com>, nkeshelava <nkeshelava@cloudlinux.com>, Roman Prilipskii <rprilipskii@cloudlinux.com> 6.6.20-1

changelog:
  - CLOS-2370: Update get_users_amount_per_plan to handle invalid package names and prevent TypeError during sorting
  - CLOS-3483: Install alt-php meta-packages on Ubuntu when installing PHP via CL Wizard
  - CLOS-3110: Fix redundant package manager preparation in CL Wizard
  - CLOS-3303: Spread the load of 5-minute cron jobs to prevent resource usage spikes
  - CLOS-3542: Add additional verifications to Elevate-related statistics


author: Roman Prilipskii <oshyshatskyi@cloudlinux.com> 6.6.28-1
changelog:
  - CLOS-3998: Add lvectl allow/deny/enable/disable-domain-limits commands
  - CLOS-4005: Remove check_cagefs_mount_points_exists from the list of cron checkers in cldiag


author:
  Roman Prilipskii <rprilipskii@cloudlinux.com>, Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> 6.6.29-1

changelog:
  - CLOS-3320: Add clsummary telemetry for cGroups in LVE
  - CLOS-4025, CLOS-4026, CLOS-4027, CLOS-4031: Isolation bugfixes and improvements


author: Timur Kalimullin <tkalimullin@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com> 6.6.30-1
changelog:
  - CLOS-4129: Apply security hardening across multiple lve-utils components
  - CLOS-4105: Adapt cldiag centralized-monitoring checker to updated lve-stats service


author: alutsiuk <alutsiuk@cloudlinux.com> 6.6.31-2
changelog:
  - CLOS-4370: Stop lvectl apply all from aborting on stale isolation markers
  - CLOS-4370: Handle disk quota when loading lve config


author: Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> 6.6.32-1
changelog:
  - CLOS-4275: Bugfixes
  - CLOS-4057: Reduce edition watcher log verbosity and add log rotation
  - CLOS-3140, CLOS-4341: Statistics improvements
  - CLOS-4060: Skip lve_setup for default-limit domains on lvectl apply all
  - CLOS-4402: Register proxyexec helpers


author: Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> 6.6.33-1
changelog:
  - CLOS-4390: Filter phantom isolation entries from lvectl list-reseller
  - CLOS-4419: Make lvectl remove-reseller idempotent for orphan and clean states


changelog: - CLOS-4513: Stop lvectl destroy from aborting on cascaded per-user isolation LVPs
author:
  Anastasia Lutsiuk <alutsiuk@cloudlinux.com>, Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> 6.6.34-1


changelog: - CLOS-4542: Fix LVE limits applying after reboot for isolated users
author:
  Anastasia Lutsiuk <alutsiuk@cloudlinux.com>, Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> 6.6.35-1


author: Oleksii Soldatienko <osoldatienko@cloudlinux.com> 6.6.38-1
changelog:
  - CLOS-4609: Preserve custom LVE limits for allow-only isolated users
  - CLOS-5716: Fix reseller LVE limits not being enforced after update
  - CLOS-4594, CLOS-5353, CLOS-5354, CLOS-5355: Internal bugfixes across multiple lve-utils components


author: Roman Prilipskii <rprilipskii@cloudlinux.com> 0.7.14-1
changelog:
  - CLOS-4125, CLOS-4278: assorted internal bugfixes in the cagefs entry and LVE
    shell wrappers
  - CLOS-4278: log cage entry and LVE resource events to syslog
  - CLOS-4366: cagefs_enter_user: fix LVE context handling
  - CLOS-4583: assorted internal bugfixes (cagefs entry wrappers, Perl LVE bindings, packaging)
  - CLOS-4660: coerce --no-cpu-limit to a full LVE limit release on cgroup v2
  - CLOS-5830: cagefs_enter: silence stderr on the proxied end-user path (fixes LVE Manager Resource Usage 503)


author: Anastasia Lutsiuk <alutsiuk@cloudlinux.com> 0.7.15-1
changelog:
  - CLOS-4660: fix cagefs_enter_user --no-cpu-limit combined with temporary
    LVE options on cgroup v2


author: Aleksey Zverev <azverev@cloudlinux.com>, Dmitry Shibut <dshibut@cloudlinux.com> 0.7.2-1
changelog:
  - LVEW-23: Add new flags
  - LU-2298: Check spelling and correctness CL licenses in all files of Userspace projects


changelog:
  - LVEMAN-1757: stop nodejs/python in web panel
  - BuildRequires: liblve >= 2.1-2

author:
  Anton Volkov <avolkov@cloudlinux.com>, Dmitry Shibut <dshibut@cloudlinux.com>, ikartavtcev <ikartavtcev@cloudlinux.com> 0.7.3-2


author:
  Dmitry Shibut <dshibut@cloudlinux.com>, Roman Krompets <rkrompets@cloudlinux.com>, Vladimir Lebedev <vlebedev@cloudlinux.com>, Aleksey Petryankin <apetryankin@cloudlinux.com> 7.10.0-1

changelog:
  - CLPRO-434: Fixed minor issue with no targeted IMAV promotion on CL
  - CLOS-1599: Migrate to Python 3.11
  - CLPRO-402: Add integration support for AccelerateWP UI part
  - LVEMAN-1904: Disable the version change EMail for CL Selector
  - LU-3700: Move userland projects to cl.sentry.cloudlinux.com


author: Roman Krompets <rkrompets@cloudlinux.com> 7.10.1-1
changelog:
  - CLPRO-1092: Added confirmation to enable collection advanced metrics
  - CLPRO-1118: Recovered test-images for integration tests
  - CLPRO-436: Renamed variables to ensure better consistency and clarity


author: Roman Krompets <rkrompets@cloudlinux.com> 7.10.2-1
changelog:
  - Rollback the workaround after migration 'accelerate-wp' to Python311 (CLPRO-1198)
  - Added validation of user data returned by ui_user_info script (CLPRO-1117)


author: Roman Prilipskii <rprilipskii@cloudlinux.com> 7.10.3-1
changelog:
  - CLOS-1936: Fix Wizard error when no PHP interpreters found on cPanel
  - CLOS-1952: Fix MySQL localhost connection issues when using sockets


author: Roman Krompets <rkrompets@cloudlinux.com> 7.10.4-1
changelog:
  - Switched sending of Sentry events from the old to the new Sentry in CloudLinux Manager UI (CLPRO-1212)
  - Prevent displaying  PHP, Nodejs, Python selectors in CloudLinux Manager if they are not supported (CLPRO-1202)


author: Roman Krompets <rkrompets@cloudlinux.com> 7.10.7-1
changelog:
  - Replaced @sentry/browser with @sentry/angular (CLPRO-1337)
  - Refactored code related to Hide/Show features in UI (CLPRO-1329)


author: Roman Krompets <rkrompets@cloudlinux.com> 7.10.8-1
changelog:
  - Adapted AccelerateWP UI to DirectAdmin (CLPRO-1397)
  - Created screen in CL Manager to promote enabling AccelerateWP (CLPRO-1363)


author: Roman Krompets <rkrompets@cloudlinux.com> 7.10.9-1
changelog:
  - Adapted test environment to run Governor-related tests on ubuntu (CLPRO-1485)
  - Fixed an issue with access to end-user plugins on cPanel while login as a team user (CLPRO-1498)


author: Roman Krompets <rkrompets@cloudlinux.com> 7.10.10-1
changelog:
  - Disabled warnings timeout in UI to prevent customer missed important information (CLPRO-1575)
  - Fixed an error with pam_limits that was causing Out-Of-Memory errors in Nodejs selector (CLOS-2239)


author: Roman Krompets <rkrompets@cloudlinux.com> 7.8.9-1
changelog:
  - WEB-2679: Fixed issue when PHP Selector is missing in the end user's UI on CLOS Admin with DirectAdmin


author: Anuar Tastembekov <atastembekov@cloudlinux.com>, Roman Krompets <rkrompets@cloudlinux.com> 7.9.0-1
changelog:
  - AWP-532: Adapted integration tests to be run after unbind accelerate-wp and implementation of new optimization features
  - WEB-2674: Removed unused code after unbind AWP
  - WEB-2673: Implemented installation AccelerateWP for end-user
  - WEB-2653: Implemented setup deploy and manage versions for accelerate-wp
  - WEB-2658: Added AWP page with Install button
  - WEB-2648: Exported services for AccelerateWP


author: Grigory Ponomarenko <gponomarenko@cloudlinux.com>, Dmitry Shibut <dshibut@cloudlinux.com> 7.9.1-1
changelog:
  - LVEMAN-1897: Expose cloudlinux-limits tool to cPanel API
  - LVEMAN-1899: Fix unsupported kernel message for CL9 Solo edition


author: Dmitry Shibut <dshibut@cloudlinux.com>, Roman Krompets <rkrompets@cloudlinux.com> 7.11.0-1
changelog:
  - Fix error loading the LVEInfo module due to the absence of MarkPhrase.pm (CLOS-2483)
  - Added "--migrate-silently" flag whenever we run rhnreg_ks without TTY (CLPRO-1886)
  - Unified UI to to rid of differences of how supported features work depending on CloudLinux Edition (CLPRO-1411, CLPRO-1532)
  - Unified the explanatory text, links and banners across all CloudLinux Editions (CLPRO-1410)
  - Unified page shown when customer hitting max account limit for Edition (CLPRO-1607)
  - Unified MySQL Governor (CLPRO-1632)
  - Added the ability to get the trial CloudLinux license for all editions (CLPRO-1633)
  - Adapted end-user's "Resource usage" plugin for non-lve environment (CLPRO-1722)
  - Rollback "Actions" column in users table and disabled actions if no limits to change (CLPRO-1750)
  - Added ability to hide total resource capacity and show only percentage in end-users plugin (CLPRO-1684)
  - Implemented UI improvements in CloudLinux Manager Users tab (CLPRO-1825)
  - Unified Website Monitoring (SSA, WMT) UI (CLPRO-1724)
  - Removed form for getting the trial license from CloudLinux Manager UI (CLPRO-1835)


author: Roman Krompets <rkrompets@cloudlinux.com> 7.11.0-1
changelog:
  - Added "--migrate-silently" flag whenever we run rhnreg_ks without TTY (CLPRO-1886)
  - Unified UI to to rid of differences of how supported features work depending on CloudLinux Edition (CLPRO-1411, CLPRO-1532)
  - Unified the explanatory text, links and banners across all CloudLinux Editions (CLPRO-1410)
  - Unified page shown when customer hitting max account limit for Edition (CLPRO-1607)
  - Unified MySQL Governor (CLPRO-1632)
  - Added the ability to get the trial CloudLinux license for all editions (CLPRO-1633)
  - Adapted end-user's "Resource usage" plugin for non-lve environment (CLPRO-1722)
  - Rollback "Actions" column in users table and disabled actions if no limits to change (CLPRO-1750)
  - Added ability to hide total resource capacity and show only percentage in end-users plugin (CLPRO-1684)
  - Implemented UI improvements in CloudLinux Manager Users tab (CLPRO-1825)
  - Unified Website Monitoring (SSA, WMT) UI (CLPRO-1724)
  - Removed form for getting the trial license from CloudLinux Manager UI (CLPRO-1835)


author: Vladimir Lebedev <vlebedev@cloudlinux.com>, Timur Averianov <taverianov@cloudlinux.com> 7.11.2-1
changelog:
  - Replaced the SmartMatch '~~' operator with traditional Perl array search (CLOS-2396)
  - Setup the LVE settings package extension in cPanel even when kmodlve is not loaded (CLOS-2394)


author:
  Roman Krompets <rkrompets@cloudlinux.com>, Dmitry Shibut <dshibut@cloudlinux.com>, Redouane Elkaboussi <relkaboussi@cloudlinux.com> 7.11.3-1

changelog:
  - Implemented the ability to translate the X-Ray plugin (CLPRO-1801)
  - Added handling the lang parameter in requests (CLPRO-1859)
  - Fixed an error that prevent to create tickets from CloudLinux Manager (CLPRO-1970)
  - Complete migration to Python 3.11 (CLOS-1860)
  - Handle exceptions in the lvemanager PHP config parser more clearly (CLOS-2331)


author: Grigory Ponomarenko <gponomarenko@cloudlinux.com> 7.11.4-1
changelog:
  - Adapt cl-quota/cloudlinux-limits to work on NO-LVE environment (CLOS-2374)
  - Correct cPanel "default" plan always switching to the root user inode limits (CLOS-2312)


author: Roman Krompets <rkrompets@cloudlinux.com> 7.11.5-1
changelog:
  - Fixed issue related to parsing quoted values from the /etc/cl.selector/php.conf (CLPRO-2037)
  - Fixed logout issue when accessing CloudLinux Manager in Plesk via plain domain (CLPRO-2049)


author: Dmitry Shibut <dshibut@cloudlinux.com>, Mykola Ishchenko <mishchenko@cloudlinux.com> 7.11.6-1
changelog:
  - Fix the issue with cl-quota not working on servers with the XFS file system (CLOS-2720)
  - Fix wrong data from cloudlinux-wizard status --initial if set unsupported locale (CLOS-2567)


author: Roman Krompets <rkrompets@cloudlinux.com> 7.11.7-1
changelog:
  - Added Sentry initialization logic to send errors based on the environment (CLPRO-2084)
  - Fixed the issue where a reseller could view unnecessary information in external-info response (CLPRO-2119)


author: Mykola Ishchenko <mishchenko@cloudlinux.com>, Roman Krompets <rkrompets@cloudlinux.com> 7.11.10-1
changelog:
  - Fix setlocale error thrown by cloudlinux-summary when the expected locale does not exist (CLOS-2849)
  - Improved UI to prevent displaying the deprecated Governor mode "All" if it is not activated (CLPRO-2229)


author: Dmitry Shibut <dshibut@cloudlinux.com>, Roman Krompets <rkrompets@cloudlinux.com> 7.11.12-1
changelog:
  - Add config file parsing to cloudlinux-selector to pass information about PHP Selector version muting to UI (CLOS-2894)
  - Show custom tooltip in PHP Selector which indicate that selection of PHP version in PHP Selector is disabled (CLPRO-2187)


author:
  Dmitry Shibut <dshibut@cloudlinux.com>, Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Roman Krompets <rkrompets@cloudlinux.com> 7.11.13-1

changelog:
  - Add conditional version selection block in selectorctl (CLOS-2948)
  - Ignore decimal points in CPU limits (CLOS-2902)
  - Improve handling of uapi tool warnings in cloudlinux-cli (CLOS-2767)
  - Improve handling of non-utf8 directory names in ruby/python/nodejs selectors (CLOS-2621)
  - Fix error while installing Cloudlinux Manager on DirectAdmin while unable to access UI as a reseller (CLPRO-2321)


author: Roman Krompets <rkrompets@cloudlinux.com> 7.11.14-1
changelog:
  - Make "Website Monitoring" and "Linking server" components to be configurable via cl-manager-ui-settings.json (CLPRO-2337,CLPRO-2335)


author:
  Tamar Tsotniashvili <ttsotniashvili@cloudlinux.com>, Dmitry Shibut <dshibut@cloudlinux.com> 7.11.16-1

changelog:
  - Pin aiohttp to a stable fixed version to ensure consistent behavior and prevent future compatibility issues (CLOS-3036)
  - Explicitly convert the lvemanager service port to an integer to prevent potential issues (CLOS-3036)
  - Fix error related to unsupported kernel on Ubuntu (CLOS-3119)


author: Roman Krompets <rkrompets@cloudlinux.com> 7.11.17-1
changelog:
  - Allow using "Slow Site Analyser" if "Website monitoring" is not installed (CLPRO-2541)
  - Fix an error with news component while it opens on each visiting the CloudLinux Manager (CLPRO-2510)
  - Fix plugin icons displaying on Direct Admin (CLPRO-2524)
  - Add "app_key" for cPanel's plugin templates that uses LiveAPI to allow customize headers (CLPRO-1368)
  - Adjust "Content-Type" header in the DirectAdmin to fix an error while strict MIME type checking (CLPRO-2544)


author: Roman Krompets <rkrompets@cloudlinux.com> 7.11.18-1
changelog:
  - Redirect automatically from the "Unavailable Page" (CLPRO-2289)
  - Fix styles issue with grey bars on the left and right in the CL PHP selector (CLPRO-2246)
  - Fix issue that prevent using Cloudlinux Plugins on Plesk via HTTP protocol (CLPRO-2287)
  - Fix PHP Deprecated Construction in the Plesk (CLPRO-2288)


author:
  Roman Krompets <rkrompets@cloudlinux.com>, Dzmitry Ryzhykau <dryzhykau@cloudlinux.com>, Miakalai Voina <mvoina@cloudlinux.com> 7.11.20-1

changelog:
  - Fix an issue in the cl-quota utility where it returns a zero exit code even on failure, causing misleading behavior (CLOS-2729)
  - Fix extra space issue when removing LVE from _PACKAGE_EXTENSIONS, preventing malformed configuration (CLOS-3166)
  - Improve error message to properly notify the user about user-limit setting failure during cl-quota execution (CLOS-3236)
  - Added ability to hide tab notifications (CLPRO-2637)
  - Improve pagination in the Selector/Domains tab to allow select items per page (CLPRO-2638)
  - Improve explanation of parameters in the Website Monitoring Settings tab (CLPRO-2639)
  - Implement the dark mode for Cloudlinux Manager (CLPRO-2640)
  - Added tooltips to the Limits table with description of each limit (CLPRO-2641)
  - Fix CageFS detection when /var/.cagefs exists in the real file system (CLOS-2881)
  - Added hooks to update data about alt versions for cloudlinux summary without delay (CLPRO-2621)
  - Fix issue when buttons in UI "DESTROY/CANCEL/SAVE" partially moves out of the screen (CLPRO-2646)


author:
  Roman Krompets <rkrompets@cloudlinux.com>, Dzmitry Ryzhykau <dryzhykau@cloudlinux.com>, Miakalai Voina <mvoina@cloudlinux.com> 7.11.21-1

changelog:
  - Fix an issue in the cl-quota utility where it returns a zero exit code even on failure, causing misleading behavior (CLOS-2729)
  - Fix extra space issue when removing LVE from _PACKAGE_EXTENSIONS, preventing malformed configuration (CLOS-3166)
  - Improve error message to properly notify the user about user-limit setting failure during cl-quota execution (CLOS-3236)
  - Added ability to hide tab notifications (CLPRO-2637)
  - Improve pagination in the Selector/Domains tab to allow select items per page (CLPRO-2638)
  - Improve explanation of parameters in the Website Monitoring Settings tab (CLPRO-2639)
  - Implement the dark mode for Cloudlinux Manager (CLPRO-2640)
  - Added tooltips to the Limits table with description of each limit (CLPRO-2641)
  - Fix CageFS detection when /var/.cagefs exists in the real file system (CLOS-2881)
  - Added hooks to update data about alt versions for cloudlinux summary without delay (CLPRO-2621)
  - Fix issue when buttons in UI "DESTROY/CANCEL/SAVE" partially moves out of the screen (CLPRO-2646)


author: Roman Krompets <rkrompets@cloudlinux.com>, Mikalai Voina <mvoina@cloudlinux.com> 7.11.22-1
changelog:
  - Unbinding accelerate-wp from x-ray (CLPRO-2201)
  - Improve logic for filering URLs and Domains in the PHP Slow Site Analyzer and Website Monitoring tool (CLPRO-2619)
  - Add importlib support because Python older than 3.12 doesn't have imp library (CLOS-2935)


author: Roman Krompets <rkrompets@cloudlinux.com>, Mikalai Voina <mvoina@cloudlinux.com> 7.11.23-1
changelog:
  - Fixed the UI for show the Plugin icon for AccelerateWP (CLPRO-2693)
  - Fix incorrect wildcard url handling causing failures in NodeJS and Python apps version switching (CLOS-2918)


author:
  Roman Krompets <rkrompets@cloudlinux.com>, Oleksandr Shyshatskyi <ohyshatskyi@cloudlinux.com>, Miakalai Voina <mvoina@cloudlinux.com> 7.11.24-1

changelog:
  - Fix crash in Python Selector when alt-python-internal package is installed (CLOS-3346)
  - Fix blocking the navigation while CloudLinux manager submenu loading (CLPRO-2765)
  - Fix inability to hide (disable) native PHP version from CLI tools (CLOS-2983)


author: Roman Krompets <rkrompets@cloudlinux.com>, Nika Keshelava <nkeshelava@cloudlinux.com> 7.11.25-1
changelog:
  - Added CloudLinux 10 compatibility
  - Spread the load of 5-minute cron jobs to avoid resource usage spikes (CLOS-3303)


author:
  Roman Krompets <rkrompets@cloudlinux.com>, Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> 7.11.26-1

changelog:
  - Fix an error with resume installation while start wizard (CLPRO-2800)
  - Ensure that all user-side UI tools are limited with lve (CLOS-1278)


author: Roman Krompets <rkrompets@cloudlinux.com> 7.11.28-1
changelog:
  - Add maintenance page for Virtual Assistant in panel plugin (CLPRO-2852)
  - Improve "unavailable" page shown when Solo/Admin customer exceed user limits (CLPRO-2855)
  - Improve usability of CloudLinux Manager plugin according to WCAG 2.1 (CLPRO-2802)


author: Roman Krompets <rkrompets@cloudlinux.com> 7.11.30-1
changelog:
  - Implement the memory-efficient SQL snapshot retrieval in Cloudlinux UI (CLPRO-2853)
  - Improve Packages tab usability according to WCAG 2.1 (CLPRO-2903)


author: Roman Krompets <rkrompets@cloudlinux.com> 7.11.31-1
changelog:
  - Fix incorrect focus behaviour in the modal windows while interacting with the Tab key (CLPRO-2923)


author:
  Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Anastasia Lutsiuk <alutsiuk@cloudlinux.com> 7.11.33-1

changelog:
  - Add support of per domain php selector (CLOS-3866, CLOS-3867, CLOS-3922, CLOS-3924, CLOS-3931, CLOS-3932)


author: Roman Krompets <rkrompets@cloudlinux.com>, Georgy Lepsaya <glepsaya@cloudlinux.com> 7.11.34-1
changelog:
  - Fix NodeJS/Python/Ruby selectors not detecting latest alt-ruby27-mod_passenger (CLOS-3980)
  - Fix opcache disable flag for php-cgi in selector causing failures with alt-php85 (CLOS-3705)


author: Andrei Zheregelia <azheregelia@cloudlinux.com>, Roman Krompets <rkrompets@cloudlinux.com> 7.11.36-1
changelog:
  - Fix Python/NodeJS selector returning stale cache_status on first call (CLOS-4055)
  - Add ability to manage PHP Options per domain in domain config modal (CLPRO-3012)
  - Implement Website Isolation UI for Plesk and DirectAdmin (CLPRO-3006)
  - Include error details in "Module unavailable" responses for better diagnostics (CLOS-4044)


author:
  Roman Krompets <rkrompets@cloudlinux.com>, Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> 7.11.38-1

changelog:
  - Fix translations for CloudLinux Manager (CLPRO-3058)
  - Isolates fixes and improvements (CLOS-4076)


author:
  Andrei Zheregelia <azheregelia@cloudlinux.com>, Roman Krompets <rkrompets@cloudlinux.com>, Ruslan Koliada <rkoliada@cloudlinux.com> 7.11.39-1

changelog:
  - Fix end-user plugin loading on custom panel installations and other stability improvements (CLOS-4121)
  - Improve reliability of the panelless daemon for long-running operations (CLOS-4338)
  - Remove deprecated integration mechanism for InterWorx and ISPManager control panels (CLOS-4348)
  - Fix issue while processing unsupported parameters in CloudLinux Manager (CLPRO-3086)
  - Cleanup outdated handlers in CloudLinux Manager (CLPRO-3082)


author: Roman Krompets <rkrompets@cloudlinux.com> 7.11.40-1
changelog:
  - Improve performance of "Domains by user" sub-tab on servers with hundreds of cPanel accounts (CLPRO-3087)
  - Hide the PHP Selector account-settings banner when the Per Domain Settings tab is unavailable (CLPRO-3073)
  - Migrate SPA build from webpack to Angular CLI workspace (angular.json) (CLPRO-3099)


author: Anastasia Lutsiuk <alutsiuk@cloudlinux.com> 7.11.41-1
changelog:
  - Internal bugfixes and stability improvements in cPanel, Plesk and DirectAdmin plugins (CLOS-4433, CLOS-4389)


author: Roman Krompets <rkrompets@cloudlinux.com>, Anastasia Lutsiuk <alutsiuk@cloudlinux.com> 7.11.43-1
changelog:
  - Stop using the deprecated surveys.cloudlinux.com service and fix the CLOS Shared PRO upgrade links and button alignment (CLPRO-3078)
  - Internal bugfixes across multiple components (CLOS-4576)


author: Roman Prilipskii <rprilipskii@cloudlinux.com>, Roman Krompets <rkrompets@cloudlinux.com> 7.11.44-1
changelog:
  - CLOS-4594: Internal bugfixes and improvements in limits and admin setup handling
  - CLPRO-3258: Improve X-Ray admin UI integration data
  - CLPRO-3255: Improve CloudLinux Manager UI reliability across panel integrations
  - CLPRO-3256: Improve CloudLinux Manager reliability for selector and panel flows
  - CLPRO-2867: Fix a cPanel resource-usage display error in rare configurations


author:
  Oleksii Soldatienko <osoldatienko@cloudlinux.com>, Roman Krompets <rkrompets@cloudlinux.com>, Anastasia Lutsiuk <alutsiuk@cloudlinux.com> 7.11.45-1

changelog:
  - CLOS-4702: Persist per-domain PHP extension changes to the per-website Selector backup so they survive CageFS regeneration under website isolation
  - CLOS-5724: Keep a per-domain `native` PHP selection on the cPanel system-native PHP under Website Isolation, instead of following the account-level version (and breaking with HTTP 500) after a global selector change
  - CLPRO-3267: Render boolean controls in per-domain PHP Selector options
  - Reset isolated domains from the current account-level PHP version, extensions and options, and allow native as a per-domain version (CLPRO-3185)
  - CLOS-5514: Internal bugfixes across multiple components


author: Anastasia Lutsiuk <alutsiuk@cloudlinux.com> 7.11.46-1
changelog:
  - CLOS-6789: Fix lvemanager upgrade truncating installed files to 0 bytes
  - CLOS-6070: Internal bugfixes across multiple components


author: Roman Krompets <rkrompets@cloudlinux.com> 0.13-1
changelog:
  - WEB-2496: Use CLI instead of REST api calls in X-RAY admin
  - WEB-2382: Fix issues in X-Ray UI related to table updates WEB-2387: Investigate how we can improve the X-Ray tracing tasks tab
  - WEB-2365: X-Ray Autotracing: Add info and controls for enable autortacing
  - WEB-2360: Refactor code to show the same request elements for autotracing tasks as for manual task
  - WEB-2316: Add new view of autotracing tasks in X-Ray UI
  - WEB-2288: Implement cron job to automatically enable user-xray-agent based on uiconfig


author: Roman Krompets <rkrompets@cloudlinux.com>, sgevorgyan <sgevorgyan@cloudlinux.com> 0.14-1
changelog:
  - WEB-2576: Adapt icons to the Jupiter theme
  - WEB-2568 Stop sending requests on XRay tab if you leave it and restore if you back again


author: Roman Krompets <rkrompets@cloudlinux.com> 0.15-1
changelog:
  - WEB-2657: Fixed error in browser console related to upload fonts
  - WEB-2634: Fixed duplicate lines inside /etc/cron.d/xray-plugin-check-cron after reinstalling lvemanager-xray


author: Roman Krompets <rkrompets@cloudlinux.com> 1.0-3
changelog:
  - Fixed issue in the xray plugin installer caused by using an old path to the plugin archive (CLPRO-2097)


author: Roman Krompets <rkrompets@cloudlinux.com> 1.0-11
changelog:
  - Fixed issue when X-Ray is recognizing JTL-Shop or Shopware (eCommerce platforms) as WordPress sites (CLPRO-2154)
  - Add Spanish translations to xray X-Ray (CLPRO-2689)


author: Roman Krompets <rkrompets@cloudlinux.com> 1.0-17
changelog:
  - CLPRO-3135: Plugin installer file/directory copy improvements; SPA tooltip content rendering update
  - CLPRO-3136: Build helper argument quoting; Perl dispatch table cleanup; toast notification rendering update


author: Roman Krompets <rkrompets@cloudlinux.com> 1.0-18
changelog:
  - CLPRO-3120: Improved X-Ray UI localisation and dialog button rendering
  - CLPRO-3201: Improved X-Ray build dependency bootstrapping and report-upload argument handling


author: Roman Krompets <rkrompets@cloudlinux.com> 1.0-19
changelog:
  - CLPRO-3202: Improved X-Ray subprocess and upload-script argument/path handling, build image pinning, cPanel bridge and SPA route/input validation, and report telemetry handling
  - CLPRO-3203: Improved X-Ray error-report data handling and tracing form input validation
  - CLPRO-3258: Improve admin X-Ray request list and grouped request data retrieval


author: Roman Krompets <rkrompets@cloudlinux.com> 1.0-20
changelog:
  - CLPRO-3457: Improve X-Ray request processing, report navigation, task refresh behavior, plugin installation, error reporting, and Advanced Metrics fallback UI


author: Aleksandr Demeshko <ademeshko@cloudlinux.com> Nikolay Petukhov <npetukhvov@cloulinux.com> - 1.0-40
changelog:
  - AAP-510: log level changed to WARN for limited requests
  - AAP-493: Improved log output
  - AAP-508: Allowed AllowedHandlers and DenyHandlers directives inside Directory, Location and Files contexts


author: Nika Keshelava <nkeshelava@cloudlinux.com> - 1.0-46
changelog:
  - CLOS-3754: fix SIGSEGV in process_lve_error() when mod_brotli is loaded
  - CLOS-4441: Maintenance update
  - CLOS-4585: Maintenance update


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.19-3
changelog:
  - Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
    in forward proxy configurations


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.19-3.5
changelog:
  - Resolves: #2177751 - CVE-2023-25690 httpd: HTTP request splitting with
    mod_rewrite and mod_proxy


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.30-1
changelog:
  - Update to MySQL 8.0.30
  - Remove patches now upstream:
    chain certs, OpenSSL 3, s390 and robin hood
  - Add a new plugin


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.34-1
changelog:
  - Update to MySQL 8.0.34
  - Add patch from upstream bug#110569
  - Add patch to fix binlog format issue
  - Use --skip-combinations over --binlog-format=mixed
  - Add alignment patch upstream bug#110752


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-10
changelog:
  - Resolves: #1975747 - CVE-2021-3618 nginx: ALPACA: Application Layer Protocol
    Confusion - Analyzing and Mitigating Cracks in TLS Authentication


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-14.1
changelog:
  - Resolves: RHEL-12516 - nginx: HTTP/2: Multiple HTTP/2 enabled web 
    servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-16
changelog:
  - Resolves: RHEL-12518 - nginx: HTTP/2: Multiple HTTP/2 enabled web servers are
    vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-17
changelog:
  - bump package epoch to resolve RHEL-33939
  - Resolves: RHEL-33939 - Update path for nginx broken for existing CS
    installations


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-22.1
changelog:
  - Resolves: RHEL-84339 - nginx: Nginx: Specially crafted file may cause
    Denial of Service (CVE-2024-7347)


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-22.2
changelog:
  - Resolves: RHEL-85550 - nginx: Memory disclosure in the
    ngx_http_mp4_module (CVE-2022-41742)
  - Resolves: RHEL-85527 - nginx: Memory corruption in the
    ngx_http_mp4_module (CVE-2022-41741)


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-22.3
changelog:
  - Resolves: RHEL-89991 - SSL-errors 0A000126 / NS_NET_ERROR_PARTIAL_TRANSFER at
    nginx with reverse-proxy


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-23
changelog:
  - Resolves: RHEL-6786 - SSL-errors 0A000126 / NS_NET_ERROR_PARTIAL_TRANSFER
    at nginx with reverse-proxy


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-24
changelog:
  - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause
    denial of service (CVE-2024-7347)
  - Resolves: RHEL-85556 - nginx: Memory disclosure in the
    ngx_http_mp4_module (CVE-2022-41742)
  - Resolves: RHEL-91446 - nginx: Memory corruption in the
    ngx_http_mp4_module (CVE-2022-41741)


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-24.1
changelog:
  - Resolves: RHEL-146525 - nginx: NGINX: Data injection via man-in-the-middle
    attack on TLS proxied connections (CVE-2026-1642)


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:1.20.1-24.2
changelog:
  - Resolves: RHEL-159557 - CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module
  - Resolves: RHEL-159536 - CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file
  - Resolves: RHEL-159444 - CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled
  - Resolves: RHEL-157885 - CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files


author: Andrew Lukoshko <alukoshko@cloudlinux.com> - 3:1.20.1-24.2.cloudlinux.2
changelog:
  - Fix CVE-2026-42945 nginx: NGINX: Buffer overrun in rewrite module via arguments in replacement strings


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-25
changelog:
  - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log
    is not created when updating system in image mode


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-28
changelog:
  - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via
    man-in-the-middle attack on TLS proxied connection


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:1.20.1-28.1
changelog:
  - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module
  - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file
  - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled
  - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-28.3
changelog:
  - Resolves: RHEL-178684 - nginx: code execution and denial of
    service (CVE-2026-9256)
  - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via
    compression bomb and Slowloris-style attack


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-28.4
changelog:
  - Resolves: RHEL-190800 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI
    causing crashes
  - Resolves: RHEL-188418 - nginx: NGINX: Arbitrary code execution or 
    Denial of Service via heap-based buffer overflow with crafted HTTP/2
    headers (CVE-2026-42055)


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-28.5
changelog:
  - Resolves: RHEL-219316 - nginx: NGINX: Heap buffer over-read allows memory
    modification or denial of service (CVE-2026-56434)
  - Resolves: RHEL-217969 - nginx: NGINX: Memory disclosure and denial of service
    in ngx_http_slice_module (CVE-2026-60005)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-1
changelog:
  - Resolves: #2096174 - RFE: add nginx:1.22 module stream
  - switch to pcre2
  - add stream_geoip_module and stream_realip_module
  - enable kTLS support


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-4
changelog:
  - Resolves: #2170808 - Running nginx with systemctl and entering ssl
    private key's pass phrase
  - added new ssl_pass_phrase_dialog directive which enables setting
    external program for entering password for encrypted private key


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-5
changelog:
  - Resolves: RHEL-12736 - nginx:1.22/nginx: HTTP/2: Multiple HTTP/2 enabled web
    servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-5
changelog:
  - Resolves: RHEL-12737 - nginx:1.22/nginx: HTTP/2: Multiple HTTP/2 enabled web
    servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-8.1
changelog:
  - Resolves: RHEL-84484 - nginx:1.22/nginx: specially crafted MP4 file may
    cause denial of service (CVE-2024-7347)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.24.0-4.1
changelog:
  - Resolves: RHEL-84478 - nginx:1.24/nginx: specially crafted MP4 file may cause
    denial of service (CVE-2024-7347)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.24.0-5
changelog:
  - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause
    denial of service (CVE-2024-7347)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.24.0-5.1
changelog:
  - Resolves: RHEL-146526 - nginx:1.24/nginx: NGINX: Data injection via
    man-in-the-middle attack on TLS proxied connections (CVE-2026-1642)


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.24.0-5.2
changelog:
  - Resolves: RHEL-157886 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of
    Service or Code Execution via specially crafted MP4 files
  - Resolves: RHEL-159445 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of
    Service via undisclosed requests when ngx_mail_auth_http_module is enabled
  - Resolves: RHEL-159558 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of
    Service or file modification via buffer overflow in ngx_http_dav_module
  - Resolves: RHEL-159537 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of
    Service due to memory corruption via crafted MP4 file


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.24.0-6
changelog:
  - Resolves: RHEL-146529 -  CVE-2026-1642 nginx: NGINX: Data injection via
    man-in-the-middle attack on TLS proxied connections


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.24.0-7
changelog:
  - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of
    Service or Code Execution via specially crafted MP4 files
  - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of
    Service via undisclosed requests when ngx_mail_auth_http_module is enabled
  - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of
    Service or file modification via buffer overflow in ngx_http_dav_module
  - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of
    Service due to memory corruption via crafted MP4 file


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.24.0-7.1
changelog:
  - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution
    Vulnerability (CVE-2026-42945)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.24.0-7.2
changelog:
  - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial
    of service (CVE-2026-9256)
  - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of
    Service via compression bomb and Slowloris-style attack


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.24.0-7.3
changelog:
  - Resolves: RHEL-191773 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI
    causing crashes
  - Resolves: RHEL-188413 - nginx: NGINX: Arbitrary code execution or.
    Denial of Service via heap-based buffer overflow with crafted HTTP/2
    headers (CVE-2026-42055)


changelog: - LU-3133: remove "set -e" from scriplets
author:
  Aleksey Petryankin <apetryankin@cloudlinux.com>, Alexey Lyashkov <umka@cloudlinux.com>, Anton Volkov <avolkov@cloudlinux.com> 0.4-2


author: Remi Collet <remi@remirepo.net> - 7.0.5-7
changelog:
  - Add patch to work around false positive in format-security check
    (From rpmfusion, by Paul Howarth )


author: Remi Collet <rcollet@redhat.com> - 8.0.20-1
changelog:
  - rebase to 8.0.20 #2095752
  - clean unneeded dependency on useradd command #2095447
  - add upstream patch to initialize pcre before mbstring
  - retrieve tzdata version from /usr/share/zoneinfo/tzdata.zi


author: Remi Collet <rcollet@redhat.com> - 8.0.30-2
changelog:
  - Fix Leak partial content of the heap through heap buffer over-read
    CVE-2024-8929
  - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
    CVE-2024-11234
  - Fix Single byte overread with convert.quoted-printable-decode filter
    CVE-2024-11233
  - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
    CVE-2024-8927
  - Fix Logs from childrens may be altered
    CVE-2024-9026
  - Fix Erroneous parsing of multipart form data
    CVE-2024-8925
  - Fix filter bypass in filter_var FILTER_VALIDATE_URL
    CVE-2024-5458
  - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
    CVE-2024-2756
  - Fix password_verify can erroneously return true opening ATO risk
    CVE-2024-3096


author: Remi Collet <rcollet@redhat.com> - 8.0.30-3
changelog:
  - Fix libxml streams use wrong `content-type` header when requesting a redirected resource
    CVE-2025-1219
  - Fix Stream HTTP wrapper header check might omit basic auth header
    CVE-2025-1736
  - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes
    CVE-2025-1861
  - Fix Streams HTTP wrapper does not fail for headers without colon
    CVE-2025-1734
  - Fix Header parser of `http` stream wrapper does not handle folded headers
    CVE-2025-1217


author: Remi Collet <rcollet@redhat.com> - 8.0.30-4
changelog:
  - Fix pgsql extension does not check for errors during escaping
    CVE-2025-1735
  - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix
    CVE-2025-6491
  - Fix Null byte termination in hostnames
    CVE-2025-1220
  - Fix soap memory corruption
  - Fix ldap_set_option() not applied on different ldap connections


author: Remi Collet <rcollet@redhat.com> - 8.0.30-5
changelog:
  - Fix Null byte termination in dns_get_record()
    GHSA-www2-q4fc-65wf
  - Fix Heap buffer overflow in array_merge()
    CVE-2025-14178
  - Fix Information Leak of Memory in getimagesize
    CVE-2025-14177


author: Remi Collet <rcollet@redhat.com> - 8.0.30-6
changelog:
  - Fix XSS within status endpoint
    CVE-2026-6735
  - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init()
    CVE-2026-7259
  - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map
    CVE-2026-6722
  - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION
    CVE-2026-7261
  - Fix Broken Apache map value NULL check
    CVE-2026-7262
  - Fix Signed integer overflow of char array offset
    CVE-2026-7568
  - Fix Consistently pass unsigned char to ctype.h functions
    CVE-2026-7258


author: Remi Collet <rcollet@redhat.com> - 8.0.10-1
changelog:
  - rebase to 8.0.10 #1992513
  - compatibility with OpenSSL 3.0 #1992492
  - snmp:  add sha256 / sha512 security protocol #1936635
  - phar: implement openssl_256 and openssl_512 for phar signatures
  - phar: use sha256 signature by default


author: Remi Collet <rcollet@redhat.com> - 8.1.6-2
changelog:
  - add upstream patch to initialize pcre before mbstring
  - add upstream patch to use more sha256 in openssl tests


author: Remi Collet <rcollet@redhat.com> - 8.2.13-1
changelog:
  - rebase to 8.2.13 RHEL-14699
  - add %__phpize and %__phpconfig macros
  - move httpd/nginx wants directives to config files in /etc
  - php-fpm.conf: move include directive after [global] section
    following upstream example, allowing overriding
  - use SPDX license IDs


author: Remi Collet <rcollet@redhat.com> - 8.3.12-1
changelog:
  - rebase to 8.3.12 RHEL-62189
  - enable command history in phpdbg
  - backport Argon2 password hashing in OpenSSL ext
  - build sockets extension statically
  - switch to nikic/php-parser version 5
  - openssl: always warn about missing curve_name


author: Remi Collet <remi@remirepo.net> - 6.1.0~RC2-1
changelog:
  - update to 6.1.0RC2
  - fix test suite with redis 6.2 using patch from
    https://github.com/phpredis/phpredis/pull/2555


author: Miro Hrončok <mhroncok@redhat.com> - 19.0.0-5
changelog:
  - Subpackage python2-pyOpenSSL has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author:
  Oleksandr Shyshatskyi <oshyshatsky@cloudlinux.com>, Vladimir Lebedev <vlebedev@cloudlinux.com> 2.11.0-2

changelog:
  - Rebased codebase on top of upstream changes (CLPRO-1703, CLPRO-1735)
  - Added ability to change CloudLinux editions (CLPRO-1755, CLPRO-1741, CLOS-2463, CLPRO-1813, CLPRO-1787)


author: Oleksandr Shyshatskyi <oshyshatsky@cloudlinux.com> 2.11.1-1
changelog:
  - Exit rhnreg_ks when interactive question asked and shell is not TTY (CLPRO-1885)
  - Add notification about license limits before registration (CLPRO-1754)
  - Make LVE support transition from Shared/Admin to Solo (CLOS-2355)


author: Dmitry Shibut <dshibut@cloudlinux.com> 2.11.2-1
changelog:
  - Fix display of the error message 'failed to save log entry' during execution of the commands clnreg_ks and rhn_check (CLOS-2437)


author: Dzmitry Ryzhykau <dryzhykau@cloudlinux.com>, Roman Prilipskii <rprilipskii@cloudlinux.com> 2.12.0-1
changelog:
  - CLOS-3052: Add Ubuntu 22 support. Remove up2date_client.cldetect Python module.
  - CLOS-3032: Skip the unused registration calls: add_packages, add_hw_profile


author: Roman Prilipskii <rprilipskii@cloudlinux.com> 2.12.5-1
changelog:
  - CLOS-3231: Add a fallback mechanism to the server URL configuration
  - CLOS-3379: Add additional server URL configuration for connections over IPv6


author: alutsiuk <alutsiuk@cloudlinux.com> - 2.8.16-14.cloudlinux.11
changelog:
  - RHNCTL-47: implement linking status for cl-link-to-cln utility
  - RHNCLT-46: Remove deprecated CLN api calls (hardware, packages, virtinfo)
  - RHNCTL-48 Add linkable property to output of cl-link-to-cln --linking-status


author: oshyshatskyi <oshyshatskyi@cloudlinux.com> 2.8.16-14.cloudlinux.17
changelog:
  - CLPRO-1440: Automatically save current edition for users diring check-in
  - CLOS-2066: Allow cln_switch_channel to switch to CL7


author: Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> 3.0.1-1
changelog:
  - CLOS-3495: Report number of users on machine to CLN during registration
  - CLOS-3533: Preparations for CloudLinux 10 and internal codebase cleanup
  - CLOS-3422: Upgrade and cleanup of core functionality


author: Georgy Lepsaya <glepsaya@cloudlinux.com> 3.0.3-1
changelog:
  - CLOS-3571: Implement alt-els repository auth with JWT on Ubuntu
  - CLOS-3855: Require cloudlinux-release with SWNG mirrorlist repos
  - CLOS-4049: Obsolete dnf-plugin-spacewalk


author: Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> 3.0.1-1
changelog:
  - CLOS-3495: Report number of users on machine to CLN during registration
  - CLOS-3533: Preparations for CloudLinux 10 and internal codebase cleanup
  - CLOS-3335: Fix proxy authentication failure caused by removed base64.encodestring in Python 3.9
  - CLOS-3422: Upgrade and cleanup of core functionality


author: Georgy Lepsaya <glepsaya@cloudlinux.com> 3.0.5-1
changelog:
  - CLOS-4605: Require rhn-setup so installing rhn-client-tools pulls the full registration stack
  - CLOS-4595: Internal bugfixes
  - CLOS-4661: Fix proxy registration hang by deriving the scheme from the proxy, not serverURL


author: Roman Prilipskii <rprilipskii@cloudlinux.com> 3.0.6-1
changelog:
  - CLOS-4594: Add --activationkey=- to read the activation key from standard input; clnreg_ks forwards it (and skips the IPL default) when present


author: Gennadii Altukhov <grinrag@gmail.com> 2.8.3-1
changelog:
  - Python's OpenSSL.SSL.Connection method for getting state was renamed. Now
    before run it we should determinate its name via getattr built-in function.


author: Tomas Kasparek <tkasparek@redhat.com> 2.8.4-1
changelog:
  - 1494389 - Revert "[1260527] RHEL7 reboot loop"
  - 1494389 - Revert "fix except in rhnlib to make it compatible with Python 2.4"


author: Michael Mraka <michael.mraka@redhat.com> 2.8.6-1
changelog:
  - remove install/clean section initial cleanup
  - removed Group from specfile
  - removed BuildRoot from specfiles


author: Tomas Kasparek <tkasparek@redhat.com> 2.8.6-4
changelog:
  - don't package python2 files for rhnlib (tkasparek@redhat.com)
  - be compliant with new packaging guidelines when requiring python2 packages
    (tkasparek@redhat.com)


author: Nick Clifton <nickc@redhat.com> - 192-1
changelog:
  - Select between gcc-built and annobin-built versions of the annobin plugin.
  - Resolves: rhbz#2030671


author: Nick Clifton <nickc@redhat.com> - 196-1
changelog:
  - Pass "--remove section .gnu.build.attributes" to the find-debuginfo script.
  - Resolves: rhbz#2099613


author: Michal Domonkos <mdomonko@redhat.com> - 208-1
changelog:
  - brp-mangle-shebangs: Strip env flags when mangling shebangs (RHEL-26961)
  - Fix automatic soname requires on non-versioned symlink targets (RHEL-28767)


author: Jan Dobes 5.0.27-1
changelog:
  - 1383668 - close and reopen syslog when redirecting child output
  - Updated links to github in spec files
  - Migrating Fedorahosted to GitHub


author: Tomas Kasparek <tkasparek@redhat.com> 5.0.33-1
changelog:
  - fix rhnsd triggered upgrade of rhnsd on systemd systems
  - 1494389 - Revert "[1260527] RHEL7 reboot loop"
  - 1494389 - Revert "1260527 RHEL7 rhnsd reload doesn't work"


author: Jan Jansky <jjansky@redhat.com> = 4.9.1-1
changelog:
  - Update to 4.9.1 in RHEL 9
    Resolves: RHEL-86668
    Resolves: RHEL-86644
    Resolves: RHEL-86647
    Resolves: RHEL-86646


author: Jan Jansky <jjansky@redhat.com> = 4.9.1-2
changelog:
  - Update to 4.9.1-2 in RHEL 9
    Resolves: RHEL-86668
    Resolves: RHEL-86644
    Resolves: RHEL-86647
    Resolves: RHEL-86646


author: Jan Jansky <jjansky@redhat.com> = 4.9.2-1
changelog:
  - Update to 4.9.2 
    Resolves: RHEL-101717
    Resolves: RHEL-101718
    Resolves: RHEL-101719
    Resolves: RHEL-101720


author: Jan Jansky <jjansky@redhat.com> = 4.10.0-1
changelog:
  - Update to 4.10.0
    Resolves: RHEL-110500
    Resolves: RHEL-110501
    Resolves: RHEL-110502
    Resolves: RHEL-110503


author: Pavel Moravec <pmoravec@redhat.com> = 4.2-15
changelog:
  - [sosnode] Handle downstream versioning for runtime option
    Resolves: bz2037350
  - [options] Fix logging on plugopts in effective sos command
    Resolves: bz2054883
  - [report] Honor plugins' hardcoded plugin_timeout
    Resolves: bz2055548
  - [policies] Set fallback to None sysroot, don't chroot to '/'
    Resolves: bz2011537
  - [ovn_central] Rename container responsable of Red Hat
    Resolves: bz2043488


author: Pavel Moravec <pmoravec@redhat.com> = 4.3-1
changelog:
  - Rebase on upstream 4.3
    Resolves: 2055003
  - [sapnw] Fix IndexError exception
    Resolves: 2065551
  - [subscription_manager] collect syspurpose data via sub-man
    Resolves: 2002333
  - [Plugin, utilities] Allow writing command output directly to disk
    Resolves: 2065564
  - [Ceph] Add support for containerized Ceph setup
    Resolves: 2065562
  - [unbound] Add new plugin for Unbound DNS resolver
    Resolves: 2065560
  - [discovery] Add new discovery plugin
    Resolves: 2065558
  - [system] Collect glibc tuning decisions
    Resolves: 2032913


author: Pavel Moravec <pmoravec@redhat.com> = 4.3-2
changelog:
  - [ocp, openshift] Re-align API collection options and rename
    Resolves: bz2065563
  - [utilities] Close file only when storing to file
    Resolves: bz2079492
  - [report] --list-plugins should report used, not default,
    Resolves: bz2079490
  - [report] Honor plugins' hardcoded plugin_timeout
    Resolves: bz2079188
  - crio: switch from parsing output in table format to json
    Resolves: bz2097674
  - [pacemaker] Redesign node enumeration logic
    Resolves: bz2082914
  - [tigervnc] Update collections for newer versions of TigerVNC
    Resolves: bz2066181
  - [plugins] Allow 'str' PlugOpt type to accept any value
    Resolves: bz2079491
  - [ovirt] answer files: Filter out all password keys
    Resolves: bz2095267


author: Pavel Moravec <pmoravec@redhat.com> = 4.3-3
changelog:
  - [vdsm] Set LVM option use_devicesfile=0
    Resolves: bz2122355
  - [Plugin] Make forbidden path checks more efficient
    Resolves: bz2122354


author: Pavel Moravec <pmoravec@redhat.com> = 4.4-1
changelog:
  - Rebase on upstream 4.4
    Resolves: bz2082615
  - [redhat] Honour credential-less --upload-url on RedHat distro properly
    Resolves: bz2059573
  - [md] Restrict data capture to raid members
    Resolves: bz2062283
  - [sos] Fix unhandled exception when concurrently removing temp dir
    Resolves: bz2088440


author: Pavel Moravec <pmoravec@redhat.com> = 4.4-2
changelog:
  - [utilities] Relax from hard dependency of python3-magic
    Resolves: bz2126089
  - [dnf] Collect legacy yum config symlinks, properly obfuscate pwds
    Resolves: bz2125499


author: Pavel Moravec <pmoravec@redhat.com> = 4.5.1-3
changelog:
  - Rebase on upstream 4.5.1
    Resolves: bz2175808
  - [microshift] Fix microshift get and add commands
    Resolves: bz2175650


author: Pavel Moravec <pmoravec@redhat.com> = 4.6.1-1
changelog:
  - rebase to upstream 4.6.1
    Resolves: RHEL-21174
  - [redhat] Change authentication method for RHEL
    Resolves: RHEL-21178


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> 0.2-7
changelog:
  - CLKRN-1123: switch to cloudlinux-default from rhel default profile
  - CLKRN-1105: don't touch readahead value for NVME


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> 0.2-12
changelog:
  - CLKRN-2076: fix posttrans profile switching reliability
  - CLKRN-2076: add deprecation warning when switching from old unsplit profiles


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> 0.1-11
changelog:
  - CLKRN-698: add crashkernel=auto kernel parameter by default
  - CLKRN-709: fix force_latency for cloudlinux-latency-performance


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> 0.1-12
changelog:
  - CLKRN-859: tune systemd-logind capabilities to make GDM GUI work on CL 8.5 (incompatibility with hidepid)


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> 0.2-4
changelog:
  - CLKRN-1038: deleted redundant ovz specific sysctl vm.force_scan_thresh
  - KB-219: fixed spec scriptlet


