# changelog

author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 7.1.1-19.1
changelog:
  - ALTPHP-1501: Update to 7.1.1-19
  - Updated libwebp to 1.3.2
  - Added package with libraries for static linking
  - Build with newer libraries for RHEL6


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 7.1.1-43.1
changelog:
  - ALTPHP-1896: Update to 7.1.1-43
  - ALTPHP-1920: Update libwebp to 1.5.0
  - ALTPHP-1932: Fix perfomance issues


author: Robert-André Mauchin <zebob.m@gmail.com> - 1.0.0-5.20180925gitd0076f5
changelog:
  - Update to commit d0076f507a6027455540e2e4f25f84ca38803e07
  - Set CONFIG_LOWBITDEPTH to 1
  - Fix #1632658


author: Robert-André Mauchin <zebob.m@gmail.com> - 3.1.1-1
changelog:
  - Update to 3.1.1
  - Close: rhbz#1954337
  - Security fix for CVE-2021-30473
  - Fix: rhbz#1961375
  - Fix: rhbz#1961376
  - Security fix for CVE-2021-30475
  - Fix: rhbz#1968017
  - Fix: rhbz#1968018


author: Tim Powers <timp@redhat.com>
changelog:
  - changelog started
  - general cleanups, changed prefix to /usr, added manpage to files section
  - including in Powertools


author: Tim Powers <timp@redhat.com>
changelog:
  - update to 7.4.1 to fix bug #20337, problems with curl -c
  - not using patch anymore, it's included in the new source. Keeping
    for reference


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - include curl-config in curl-devel
  - update to 7.8 to fix memory leak and strlcat() symbol pollution from libcurl


author: Joe Orton <jorton@redhat.com> 7.9.8-2
changelog:
  - fix `curl-config --libs` output for libdir!=/usr/lib
  - remove docs/LIBCURL from docs list; remove unpackaged libcurl.la
  - libtoolize and reconf


author: Adrian Havill <havill@redhat.com> 7.10.6-7
changelog:
  - aclocal before libtoolize
  - move OpenLDAP license so it's present as a doc file, present in
    both the source and binary as per conditions


author: Adrian Havill <havill@redhat.com> 7.12.1-1
changelog:
  - upgrade to 7.12.1
  - enable GSSAPI auth (#129353)
  - enable I18N domain names (#134595)
  - workaround for broken ProFTPD SSL auth (#134133). Thanks to
    Aleksandar Milivojevic


author: Adrian Havill <havill@redhat.com> 7.12.3-1
changelog:
  - Upgrade to 7.12.3, which uses poll() for FDSETSIZE limit (#134794)
  - require libidn-devel for devel subpkg (#141341)
  - remove proftpd kludge; included upstream


author: Joe Orton <jorton@redhat.com> 7.12.3-3
changelog:
  - don't pass /usr to --with-libidn to remove "-L/usr/lib" from
    'curl-config --libs' output on x86_64.


author: Ivana Varekova <varekova@redhat.com> - 7.15.1-2
changelog:
  - fix multilib problem - #181290 - 
    curl-devel.i386 not installable together with curl-devel.x86-64


author: Jindrich Novy <jnovy@redhat.com> - 7.16.0-2
changelog:
  - fix BuildRoot
  - add Requires: pkgconfig for curl-devel
  - move LDFLAGS and LIBS to Libs.private in libcurl.pc.in (#213278)


author: Jindrich Novy <jnovy@redhat.com> 7.16.2-4
changelog:
  - another series of review fixes (#225671),
    thanks to Paul Howarth
  - check version of ldap library automatically
  - don't use %makeinstall and preserve timestamps
  - drop useless patches


author: Jindrich Novy <jnovy@redhat.com> 7.16.3-1
changelog:
  - update to 7.16.3
  - drop .print patch, applied upstream
  - next series of merge review fixes by Paul Howarth
  - remove aclocal stuff, no more needed
  - simplify makefile arguments
  - don't reference standard library paths in libcurl.pc
  - include docs/CONTRIBUTE


author: Jindrich Novy <jnovy@redhat.com> 7.16.4-5
changelog:
  - add support for the NSS PKCS#11 pem reader so the command-line is the
    same for both OpenSSL and NSS by Rob Crittenden (rcritten@redhat.com)
  - switch to NSS again


author: Jindrich Novy <jnovy@redhat.com> 7.17.1-1
changelog:
  - update to curl 7.17.1
  - include patch to enable SSL usage in NSS when a socket is opened
    nonblocking, thanks to Rob Crittenden (rcritten@redhat.com)


author: Jindrich Novy <jnovy@redhat.com> 7.17.1-3
changelog:
  - drop useless ldap library detection since curl doesn't
    dlopen()s it but links to it -> BR: openldap-devel
  - enable LDAPS support (#225671), thanks to Paul Howarth
  - BR: krb5-devel to reenable GSSAPI support
  - simplify build process
  - update description


author: Jindrich Novy <jnovy@redhat.com> 7.18.1-1
changelog:
  - update to curl 7.18.1 (fixes #397911)
  - add ABI docs for libcurl
  - remove --static-libs from curl-config
  - drop curl-config patch, obsoleted by @SSL_ENABLED@ autoconf
    substitution (#432667)


author: Jindrich Novy <jnovy@redhat.com> 7.18.1-2
changelog:
  - spec cleanup, thanks to Paul Howarth (#225671)
    - drop BR: libtool
    - convert CHANGES and README to UTF-8
    - _GNU_SOURCE in CFLAGS is no more needed
    - remove bogus rpath


author: Jindrich Novy <jnovy@redhat.com> 7.19.4-1
changelog:
  - update to 7.19.4 (fixes CVE-2009-0037)
  - fix leak in curl_easy* functions, thanks to Kamil Dudka
  - drop nss-fix patch, applied upstream


author: Jindrich Novy <jnovy@redhat.com> 7.19.4-2
changelog:
  - drop .easy-leak patch, causes problems in pycurl (#488791)
  - fix libcurl-devel dependencies (#488895)


author: Kamil Dudka <kdudka@redhat.com> 7.19.4-6
changelog:
  - upstream patch fixing memory leak in lib/nss.c (#453612)
  - remove redundant dependency of libcurl-devel on libssh2-devel


author: Kamil Dudka <kdudka@redhat.com> 7.19.5-8
changelog:
  - do not pre-login to all PKCS11 slots, it causes problems with HW tokens
  - try to select client certificate automatically when not specified, thanks
    to Claes Jakobsson


author: Kamil Dudka <kdudka@redhat.com> 7.19.6-1
changelog:
  - new upstream release, dropped applied patches
  - changed NSS code to not ignore the value of ssl.verifyhost and produce more
    verbose error messages (#516056)


author: Kamil Dudka <kdudka@redhat.com> 7.19.6-3
changelog:
  - avoid tight loop during a sftp upload
  - http://permalink.gmane.org/gmane.comp.web.curl.library/24744


author: Kamil Dudka <kdudka@redhat.com> 7.19.6-4
changelog:
  - use pkg-config to find nss and libssh2 if possible
  - better patch (not only) for SCP/SFTP polling
  - improve error message for not matching common name (#516056)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-1
changelog:
  - new upstream release, dropped applied patches
  - workaround for broken TLS servers (#525496, #527771)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-3
changelog:
  - fix crash on doubly closed NSPR descriptor, patch contributed
    by Kevin Baughman (#534176)
  - new version of patch for broken TLS servers (#525496, #527771)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-11
changelog:
  - upstream patch adding a new option -J/--remote-header-name
  - dropped temporary workaround for #545779


author: Kamil Dudka <kdudka@redhat.com> 7.20.0-1
changelog:
  - new upstream release - added support for IMAP(S), POP3(S), SMTP(S) and RTSP
  - dropped patches applied upstream
  - dropped curl-7.16.0-privlibs.patch no longer useful
  - a new patch forcing -lrt when linking the curl tool and test-cases


author: Kamil Dudka <kdudka@redhat.com> 7.20.0-3
changelog:
  - throw CURLE_SSL_CERTPROBLEM in case peer rejects a certificate (#565972)
  - valgrind temporarily disabled (#574889)
  - kerberos installation prefix has been changed


author: Paul Howarth <paul@city-fan.org> 7.20.1-3
changelog:
  - replace Rawhide s390-sleep patch with a more targeted patch adding a
    delay after tests 513 and 514 rather than after all tests


author: Kamil Dudka <kdudka@redhat.com> 7.20.1-4
changelog:
  - upstream patch preventing failure of test536 with threaded DNS resolver
  - upstream patch preventing SSL handshake timeout underflow


author: Kamil Dudka <kdudka@redhat.com> 7.20.1-5
changelog:
  - CRL support now works again (#581926)
  - make it possible to start a testing OpenSSH server when building with SELinux
    in the enforcing mode (#521087)


author: Kamil Dudka <kdudka@redhat.com> 7.21.0-1
changelog:
  - new upstream release, drop applied patches
  - update of %description
  - disable valgrind for certain test-cases (libssh2 problem)


author: Kamil Dudka <kdudka@redhat.com> 7.21.1-2
changelog:
  - re-enable test575 on s390(x), already fixed (upstream commit d63bdba)
  - modify system headers to work around gcc bug (#617757)
  - curl -T now ignores file size of special files (#622520)
  - fix kerberos proxy authentication for https (#625676)
  - work around glibc/valgrind problem on x86_64 (#626470)


author: Paul Howarth <paul@city-fan.org> 7.21.1-3
changelog:
  - fix up patches so there's no need to run autotools in the rpm build
  - drop buildreq automake
  - drop dependency on automake for devel package from F-14, where
    %{_datadir}/aclocal is included in the filesystem package
  - drop dependency on pkgconfig for devel package from F-11, where
    pkgconfig dependencies are auto-generated


author: Kamil Dudka <kdudka@redhat.com> 7.21.2-4
changelog:
  - prevent FTP client from hanging on unrecognized ABOR response (#649347)
  - return more appropriate error code in case FTP server session idle
    timeout has exceeded (#650255)


author: Kamil Dudka <kdudka@redhat.com> 7.21.2-5
changelog:
  - do not send QUIT to a dead FTP control connection (#650255)
  - pull back glibc's implementation of str[n]casecmp(), #626470 appears fixed


author: Paul Howarth <paul@city-fan.org> 7.21.3-1
changelog:
  - update to 7.21.3:
    - added --noconfigure switch to testcurl.pl
    - added --xattr option
    - added CURLOPT_RESOLVE and --resolve
    - added CURLAUTH_ONLY
    - added version-check.pl to the examples dir
    - check for libcurl features for some command line options
    - Curl_setopt: disallow CURLOPT_USE_SSL without SSL support
    - http_chunks: remove debug output
    - URL-parsing: consider ? a divider
    - SSH: avoid using the libssh2_ prefix
    - SSH: use libssh2_session_handshake() to work on win64
    - ftp: prevent server from hanging on closed data connection when stopping
      a transfer before the end of the full transfer (ranges)
    - LDAP: detect non-binary attributes properly
    - ftp: treat server's response 421 as CURLE_OPERATION_TIMEDOUT
    - gnutls->handshake: improved timeout handling
    - security: pass the right parameter to init
    - krb5: use GSS_ERROR to check for error
    - TFTP: resend the correct data
    - configure: fix autoconf 2.68 warning: no AC_LANG_SOURCE call detected
    - GnuTLS: now detects socket errors on Windows
    - symbols-in-versions: updated en masse
    - added a couple of examples that were missing from the tarball
    - Curl_send/recv_plain: return errno on failure
    - Curl_wait_for_resolv (for c-ares): correct timeout
    - ossl_connect_common: detect connection re-use
    - configure: prevent link errors with --librtmp
    - openldap: use remote port in URL passed to ldap_init_fd()
    - url: provide dead_connection flag in Curl_handler::disconnect
    - lots of compiler warning fixes
    - ssh: fix a download resume point calculation
    - fix getinfo CURLINFO_LOCAL* for reused connections
    - multi: the returned running handles counter could turn negative
    - multi: only ever consider pipelining for connections doing HTTP(S)
  - drop upstream patches now in tarball
  - update bz650255 and disable-test1112 patches to apply against new codebase
  - add workaround for false-positive glibc-detected buffer overflow in tftpd
    test server with FORTIFY_SOURCE (similar to #515361)


author: Kamil Dudka <kdudka@redhat.com> 7.21.4-1
changelog:
  - new upstream release
  - avoid memory leak on SSL connection failure (upstream commit a40f58d)
  - work around valgrind bug (#678518)


author: Kamil Dudka <kdudka@redhat.com> 7.21.7-3
changelog:
  - fix SIGSEGV of curl -O -J given more than one URL (#723075)
  - introduce the --delegation option of curl (#730444)
  - initialize NSS with no database if the selected database is broken (#728562)


author: Paul Howarth <paul@city-fan.org> 7.25.0-1
changelog:
  - new upstream release (#806264)
  - fix character encoding of docs with a patch rather than just iconv
  - update debug and multilib patches
  - don't use macros for commands
  - reduce size of %prep output for readability


author: Kamil Dudka <kdudka@redhat.com> 7.25.0-2
changelog:
  - use NSS_InitContext() to initialize NSS if available (#738456)
  - provide human-readable names for NSS errors (upstream commit a60edcc6)


author: Kamil Dudka <kdudka@redhat.com> 7.27.0-3
changelog:
  - use the upstream facility to disable problematic tests
  - do not crash if MD5 fingerprint is not provided by libssh2


author: Kamil Dudka <kdudka@redhat.com> 7.28.1-2
changelog:
  - prevent NSS from crashing on client auth hook failure
  - clear session cache if a client cert from file is used
  - fix error messages for CURLE_SSL_{CACERT,CRL}_BADFILE


author: Kamil Dudka <kdudka@redhat.com> 7.29.0-3
changelog:
  - switch SSL socket into non-blocking mode after handshake
  - drop the hide_selinux.c hack no longer needed in %check


author: Kamil Dudka <kdudka@redhat.com> 7.29.0-4
changelog:
  - do not ignore poll() failures other than EINTR (#919127)
  - curl_global_init() now accepts the CURL_GLOBAL_ACK_EINTR flag (#919127)


author: Kamil Dudka <kdudka@redhat.com> 7.30.0-1
changelog:
  - new upstream release (fixes CVE-2013-1944)
  - prevent test-suite failure due to using non-default port ranges in tests


author: Kamil Dudka <kdudka@redhat.com> 7.33.0-1
changelog:
  - new upstream release
  - fix missing initialization in NTLM code causing test 906 to fail
  - fix missing initialization in SSH code causing test 619 to fail


author: Ivana Varekova <varekova@redhat.com> - 7.15.1-2
changelog:
  - fix multilib problem - #181290 -
    curl-devel.i386 not installable together with curl-devel.x86-64


author: Sergey Fokin <sfokin@cloudlinux.com> - 8.11.0-2
changelog:
  - don't add link to ldap in *.pc file if ldap.pc doesn't exist
  - don't add link to mit-krb5-gssapi in *.pc file if mit-krb5-gssapi.pc.pc doesn't exist


author: Frediano Ziglio <freddy77@angelfire.com>
changelog:
  - remove dependency from freetds-unixodbc
  - fix field name (Copyright instead of License)
  - updated URL


author: Jason Taylor <jtfas90@gmail.com> - 4.4.1-1
changelog:
  - Update to latest upstream
  - Add CMakeLists.txt path patch
  - Spec file updates to meet packaging standards


author: Ville Skyttä <ville.skytta at iki.fi> 0:2.6.1-0.fdr.3
changelog:
  - Partial fix for bad datadirs returned by icu-config (works as long as
  data packaging mode is not "common" or "dll").


author: Ville Skyttä <ville.skytta at iki.fi> 0:3.0-0.fdr.1
changelog:
  - Update to 3.0, datadirs patch no longer needed.
  - Package data in shared libs, drop -locales subpackage.
  - Rename -docs subpackage to libicu-doc, and generate graphs with graphviz.


author: Ville Skyttä <ville.skytta at iki.fi> 3.2-3
changelog:
  - Apply upstream case mapping mutex lock removal patch.
  - Build with gcc 3.2 as a temporary workaround for #152495.


author: Caolan McNamara <caolanm@redhat.com> 3.6-0.1.d01
changelog:
  - rh#200728# update to prelease 3.6d01 to pick up on sinhala fixes
  - drop integrated rh190879.patch
  - drop integrated icu-3.4-sinhala1.patch


author: Caolan McNamara <caolanm@redhat.com> 3.6-2
changelog:
  - fix rh#205252#/icu#5365 (gnome#121882#/#icu#4026#) to make icu
  like pango for multiple dependant vowels


author: Caolan McNamara <caolanm@redhat.com> 3.6-5
changelog:
  - rh#208705# add pkg-config Require for -devel package
  - add icu.icu5431.malayam.patch for rh#208551#/rh#209084#
  - add icu.icu5433.oriya.patch for rh#208559#/rh#209083#


author: Caolan McNamara <caolanm@redhat.com> 3.6-20
changelog:
  - Resolves: rhbz#243984 change the icu group as it is libicu
  which is "System Environment/Libraries" not icu


author: Caolan McNamara <caolanm@redhat.com> 3.8-0.1.d01
changelog:
  - 3.8 release candidate
  - drop integrated icu.icu5433.oriya.patch
  - drop integrated icu.icu5488.assamese.patch
  - drop integrated icu.icu5500.devicetablecrash.patch
  - drop integrated icu.icu5501.sinhala.biggerexpand.patch
  - drop integrated icu.icu5594.gujarati.patch
  - drop integrated icu.icu5465.telegu.patch


author: Caolan McNamara <caolanm@redhat.com> 3.8.1-2
changelog:
  - remove icu.icu5365.dependantvowels.patch and cleanup
  icu.icu5506.multiplevowels.patch as they patch and unpatch
  eachother (thanks George Rhoten for pointing out that madness)


author: Caolan McNamara <caolanm@redhat.com> 3.8.1-3
changelog:
  - CVE-2007-4770 CVE-2007-4771 add icu.regexp.patch
  - Resolves: rhbz#423211 fix malalayam stuff in light of syllable
  changes


author: Caolan McNamara <caolanm@redhat.com> 3.8.1-5
changelog:
  - Resolves: rhbz#431401 split syllables on 1st 0d4d of a 0d4d +
  (>= 0d15 && <= 0d39) + 0d4d + 0d30 sequence


author: Caolan McNamara <caolanm@redhat.com> 4.0-2
changelog:
  - Resolves: rhbz#459698 drop Malayalam patches. Note test with Rachana/Meera
  instead of Lohit Malayalam before filing bugs against icu wrt.
  Malayalam rendering


author: Leigh Scott <leigh123linux@googlemail.com> - 1.0.3-3
changelog:
  - Remove Group tag
  - Switch to QT5
  - Update ldconfig scriptlet
  - Add BuildRequires gcc-c++
  - Remove BuildRequires pkgconfig


author: Alex71 <nyrk71@gmail.com> 2.1.0-2
changelog:
  - put libhpdf.so in the devel package and libhpdf-2.1.0.so in the main one
  - removed duplicated README and CHANGES from devel package
  - fixed "E: empty-debuginfo-package" with --enable-debug flag in configure
  - removed INSTALL file
  - added demo/ directory in doc (devel only) as doc


author: Alexandru Ciobanu <alex@tvtransilvania.ro> - 0.1.0-5
changelog:
  - Applied pkgconfig patch to remove unneeded directories.
  - Changed permissions of files to 0644.
  - Fixed minor typos.


author: Brian Aker <brian@tangent.org> - 1.0.8
changelog:
  * Fri Jan  8 2010 Brian Aker <brian@tangent.org> - 0.37
  - Modified to be explicit in install include files.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5.0-3
changelog:
  - Use C.UTF-8 locale
    See https://fedoraproject.org/wiki/Changes/Remove_glibc-langpacks-all_from_buildroot


author: Mosaab Alzoubi <moceap@hotmail.com> - 0.7.0-4
changelog:
  - First build on EPEL8
  - Use one branch to build on Fedora and EPEL
  - Use python3 as BR except EPEL7
  - Use LC_ALL=en_US.UTF-8 in EPEL7


author: Rahul Sundaram <sundaram@fedoraproject.org> - 0.3.0-1
changelog:
  - upstream release 0.3.0
  - enable gif2webp
  - add build requires on giflib-devel and libtiff-devel
  - use make_install and hardened macros
  - list binaries explicitly


author: Sebastian Vahl <fedora@deadbabylon.de> 0.8-3
changelog:
  - require pkgconfig in devel subpkg
  - move api description to devel subpkg
  - keep timestamps in %install
  - avoid lib64 rpaths


author: Remi Collet <remi@fedoraproject.org> - 0.10-1
changelog:
  - update to 0.10
  - apply patch with changes from php bundled lib (thanks spot)
  - handle multiarch headers (ex from MySQL)


author: Rex Dieter <rdieter@fedoraproject.org> 0.10.1-4
changelog:
  - Warning about conflicting contexts for /usr/lib64/libzip/include/zipconf.h versus /usr/include/zipconf-64.h (#853954)


author: Remi Collet <remi@remirepo.net> - 1.3.2-1
changelog:
  - update to 1.3.2
  - drop multilib header hack
  - change URL to https://libzip.org/
  - test suite now ok on all arch


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 1.2.7
  - fix some bugs from bugzilla (#4885, #4887, #4888, #4967)
  - take include files out of base package


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add -D_REENTRANT to make threaded stuff more stable, even though it looks
    like the sources define it, too
  - mark *.ph files in migration tools as config files


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move the defaults for databases and whatnot to /var/lib/ldap (bug #10714)
  - fix some possible string-handling problems


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.10
  - add revamped version of patch from kos@bastard.net to allow execution as
    any non-root user
  - remove test suite from %build because of weirdness in the build system


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - more minimalistic fix for bug #11111 after consultation with OpenLDAP team
  - backport replacement for the ldapuser patch


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.11
  - add condrestart logic to init script
  - munge migration scripts so that you don't have to be
    /usr/share/openldap/migration to run them
  - add code to create pid files in /var/run


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak init script to return error codes properly
  - change initscripts dependency to one on /etc/init.d


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - switch to gdbm; I'm getting off the db merry-go-round
  - tweak the init script some more
  - add instdir to @INC in migration scripts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - split off clients and servers to shrink down the package and remove the
    base package's dependency on Perl
  - make certain that the binaries have sane permissions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build a semistatic slurpd with threads, everything else without
  - disable reverse lookups, per email on OpenLDAP mailing lists
  - make sure the execute bits are set on the shared libraries


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add the nis.schema and inetorgperson.schema to the default server config
  - make ldapadd a hard link to ldapmodify because they're identical binaries


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.0.6
  - add buildprereq on cyrus-sasl-devel, krb5-devel, openssl-devel
  - take the -s flag off of slapadd invocations in migration tools
  - add the cosine.schema to the default server config, needed by inetorgperson


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - try adding the suffix first when doing online migrations
  - force ldapadd to use simple authentication in migration scripts
  - add indexing of a few attributes to the default configuration
  - add commented-out section on using TLS to default configuration


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add missing required attributes to conversion scripts to comply with schema
  - add schema for mail aliases, autofs, and kerberosSecurityObject rooted in
    our own OID tree to define attributes and classes migration scripts expect
  - tweak automounter migration script


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - reorganize the patch list to separate MigrationTools and OpenLDAP patches
  - switch to Luke Howard's rfc822MailMember schema instead of the aliases.schema
  - configure slapd to run as the non-root user "ldap" (#19370)
  - chdir() before chroot() (we don't use chroot, though) (#19369)
  - disable saving of the pid file because the parent thread which saves it and
    the child thread which listens have different pids


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add Norbert Klasen's patch (via Del) to fix searches using ldaps URLs
    (OpenLDAP ITS #889)
  - add "-h ldaps:///" to server init when TLS is enabled, in order to support
    ldaps in addition to the regular STARTTLS (suggested by Del)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change automount object OID from 1.3.6.1.1.1.2.9 to 1.3.6.1.1.1.2.13,
    per mail from the ldap-nis mailing list


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add support for additional OPTIONS, SLAPD_OPTIONS, and SLURPD_OPTIONS in
    a /etc/sysconfig/ldap file (#23549)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - back out pidfile patches, which interact weirdly with Linux threads
  - mark non-standard schema as such by moving them to a different directory


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build dummy certificate in %post, use it in default config
  - configure-time shenanigans to help a confused configure script


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move shared libraries to /lib
  - redo init script for better internationalization (#26154)
  - don't use ldaprc files in the current directory (#38402) (patch from
    hps@intermeta.de)
  - add BuildPrereq on tcp wrappers since we configure with
    --enable-wrappers (#43707)
  - don't overflow debug buffer in mail500 (#41751)
  - don't call krb5_free_creds instead of krb5_free_cred_contents any
    more (#43159)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - require cyrus-sasl-md5 (support for DIGEST-MD5 is required for RFC
    compliance) by name (follows from #43079, which split cyrus-sasl's
    cram-md5 and digest-md5 modules out into cyrus-sasl-md5)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a build-time requirement on pam-devel
  - add a build-time requirement on a sufficiently-new libtool to link
    shared libraries to other shared libraries (which is needed in order
    for prelinking to work)


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.12-1
changelog:
  - update to 2.0.12 to pull in fixes for setting of default TLS options, among
    other things
  - update to migration tools 39
  - drop tls patch, which was fixed better in this release


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable kbind support (deprecated, and I suspect unused)
  - configure with --with-kerberos=k5only instead of --with-kerberos=k5
  - build slapd with threads


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.20-2
changelog:
  - temporarily disable optimizations for ia64 arches
  - specify pthreads at configure-time instead of letting configure guess


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.22-2
changelog:
  - switch to an internalized Berkeley DB as the ldbm back-end  (NOTE: this breaks
    access to existing on-disk directory data)
  - add slapcat/slapadd with gdbm for migration purposes
  - remove Kerberos dependency in client libs (the direct Kerberos dependency
    is used by the server for checking {kerberos} passwords)


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.25-1
changelog:
  - update to 2.0.25 "stable", ldbm-over-gdbm (putting off migration of LDBM
    slapd databases until we move to 2.1.x)
  - use %{_smp_mflags} when running make
  - update to MigrationTools 44
  - enable dynamic module support in slapd


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.25-2
changelog:
  - change LD_FLAGS to refer to /usr/kerberos/_libdir instead of
    /usr/kerberos/lib, which might not be right on some arches


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - incorporate fixes from SuSE's security audit, except for fixes to ITS 1963,
    1936, 2007, 2009, which were included in 2.0.26.
  - add two more patches for db 4.1.24 from sleepycat's updates page
  - use openssl pkgconfig data, if any is available


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.27-8
changelog:
  - back down to db 4.0.x, which 2.0.x can compile with in ldbm-over-db setups
  - tweak SuSE patch to fix a few copy-paste errors and a NULL dereference


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.1.17
  - disable the shell backend, not expected to work well with threads
  - drop the kerberosSecurityObject schema, the krbName attribute it
    contains is only used if slapd is built with v2 kbind support


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - install the db utils for the bundled libdb as %{_sbindir}/slapd_db_*
  - install slapcat/slapadd from 2.0.x for migration purposes


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.22-0
changelog:
  - 2.1.22 now badged stable
  - be more aggressive in what we index by default
  - use/require libtool 1.5


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - actually require newer libtool, as was intended back in 2.1.22-0, noted as
    missed by Jim Richardson


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build bundled libdb for slapd dynamically to make the package smaller,
    among other things
  - on tls-capable arches, build libdb both with and without shared posix
    mutexes, otherwise just without
  - disable posix mutexes unconditionally for db 4.0, which shouldn't need
    them for the migration cases where it's used
  - update to MigrationTools 45


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.22-8
changelog:
  - add another section to the ABI note for the TLS libdb so that it's marked as
    not needing an executable stack (from Arjan Van de Ven)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.25-1
changelog:
  - change logging facility used from daemon to local4 (#112730, reversing #11047)
    BEHAVIOR CHANGE - SHOULD BE MENTIONED IN THE RELEASE NOTES.


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.25-2
changelog:
  - fix incorrect use of find when attempting to detect a common permissions
    error in the init script (#114866)


author: Thomas Woerner <twoerner@redhat.com> 2.1.29-3
changelog:
  - removed rpath
  - added pie patch: slapd and slurpd are now pie
  - requires libtool >= 1.5.6-2 (PIC libltdl.a)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.13-1
changelog:
  - add compat-openldap subpackage
  - default to bdb, as upstream does, gambling that we're only going to be
    on systems with nptl now


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.13-2
changelog:
  - build a separate, static set of libraries for openldap-devel with the
    non-standard ntlm bind patch applied, for use by the evolution-connector
    package (#125579), and installing them under
    evolution_connector_prefix)
  - provide openldap-evolution-devel = version-release in openldap-devel
    so that evolution-connector's source package can require a version of
    openldap-devel which provides what it wants


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move slapd startup to earlier in the boot sequence (#103160)
  - update to 2.2.15 (stable-20040822)
  - change version number on compat-openldap to include the non-compat version
    from which it's compiled, otherwise would have to start 2.2.15 at release 3
    so that it upgrades correctly


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.2.17 (stable-20040923) (#135188)
  - move nptl libraries into arch-specific subdirectories on x86 boxes
  - require a newer glibc which can provide nptl libpthread on i486/i586


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.20-1
changelog:
  - update to 2.2.20 (stable-20050103)
  - warn about unreadable krb5 keytab files containing "ldap" keys
  - warn about unreadable TLS-related files
  - own a ref to subdirectories which we create under _libdir/tls


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.23-1
changelog:
  - update to 2.2.23 (stable-20050125)
  - update notes on upgrading from earlier versions
  - drop slapcat variations for 2.0/2.1, which choke on 2.2's config files


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.24-1
changelog:
  - update to 2.2.24 (stable 20050318)
  - export KRB5_KTNAME in the init script, in case it was set in the sysconfig
    file but not exported


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.2.26 (stable 20050429)
  - enable the lmpasswd scheme
  - print a warning if slaptest fails, slaptest -u succeeds, and one of the
    directories listed as the storage location for a given suffix in slapd.conf
    contains a readable file named __db.001 (#118678)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.26-1
changelog:
  - run slaptest with the -u flag if no id2entry db files are found, because
    you can't check for read-write access to a non-existent database (#156787)
  - add _sysconfdir/openldap/cacerts, which authconfig sets as the
    TLS_CACERTDIR path in /etc/openldap/ldap.conf now
  - use a temporary wrapper script to launch slapd, in case we have arguments
    with embedded whitespace (#158111)


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Add the tls-fix-connection-test patch to close
    bz#161991 openldap password disclosure issue
  - add the hop patches to prevent infinite looping when chasing referrals.
    OpenLDAP ITS #3578


author: Jay Fenlason <fenlason@redhat.com> 2.2.26-2
changelog:
  - Move the slapd.pem file to /etc/pki/tls/certs
    and edit the -config patch to match to close
    bz#143393  Creates certificates + keys at an insecure/bad place
  - also use _sysconfdir instead of hard-coding /etc


author: Jay Fenlason <fenlason@redhat.com> 2.3.11-2
changelog:
  - Upgrade to 2.3.11, which upstream now considers stable.
  - Switch compat-openldap to 2.2.29
  - remove references to nss_ldap_build from the spec file
  - remove references to 2.0 and 2.1 from the spec file.
  - reorganize the build() function slightly in the spec file to limit the
    number of redundant and conflicting options passedto configure.
  - Remove the attempt to hardlink ldapmodify and ldapadd together, since
    the current make install make ldapadd a symlink to ldapmodify.
  - Include the -ads patches to allow SASL binds to an Active Directory
    server to work.  Nalin <nalin@redhat.com> wrote the patch, based on my
    broken first attempt.


author: Jay Fenlason <fenlason@redhat.com> 2.3.11-3
changelog:
  - Remove Requires: cyrus-sasl and cyrus-sasl-md5 from openldap- and
    compat-openldap- to close
    bz#173313 Remove exlicit 'Requires: cyrus-sasl" + 'Requires: cyrus-sasl-md5'


author: Jay Fenlason <fenlason@redhat.com> 2.3.19-2
changelog:
  - Upgrade to 2.3.19, which upstream now considers stable
  - Modify the -config.patch, ldap.init, and this spec file to put the
    pid file and args file in an ldap-owned openldap subdirectory under
    /var/run.
  - Move back_sql* out of _sbindir/openldap , which requires
    hand-moving slapd and slurpd to _sbindir, and recreating symlinks
    by hand.
  - Retire openldap-2.3.11-ads.patch, which went upstream.
  - Update the ldap.init script to run slaptest as the ldap user rather
    than as root.  This solves
    bz#150172 Startup failure after database problem
  - Add to the servers post and preun scriptlets so that on preun, the
    database is slapcatted to /var/lib/ldap/upgrade.ldif and the
    database files are saved to /var/lib/ldap/rpmorig.  On post, if
    /var/lib/ldap/upgrade.ldif exists, it is slapadded.  This means that
    on upgrades from 2.3.16-2 to higher versions, the database files may
    be automatically upgraded.  Unfortunatly, because of the changes to
    the preun scriptlet, users have to do the slapcat, etc by hand when
    upgrading to 2.3.16-2.  Also note that the /var/lib/ldap/rpmorig
    files need to be removed by hand because automatically removing your
    emergency fallback files is a bad idea.
  - Upgrade internal bdb to db-4.4.20.  For a clean upgrade, this will
    require that users slapcat their databases into a temp file, move
    /var/lib/ldap someplace safe, upgrade the openldap rpms, then
    slapadd the temp file.


author: Jay Fenlason <fenlason@redhat.com> 2.3.27-2
changelog:
  - New upstream release
  - Include the gethostbyname_r patch so that nss_ldap won't hang
    on recursive attemts to ldap_initialize.


author: Jay Fenlason <fenlason@redhat.com> 2.3.27-3
changelog:
  - Include --enable-multimaster to close
    bz#185821: adding slapd_multimaster to the configure options
  - Upgade guide.html to the correct one for openladp-2.3.27, closing
    bz#190383: openldap 2.3 packages contain the administrator's guide for 2.2
  - Remove the quotes from around the slaptestflags in ldap.init
    This closes one part of
    bz#204593: service ldap fails after having added entries to ldap
  - include __db.* in the list of files to check ownership of in
    ldap.init, as suggested in
    bz#199322: RFE: perform cleanup in ldap.init


author: Thomas Woerner <twoerner@redhat.com> 2.3.30-1.1
changelog:
  - tcp_wrappers has a new devel and libs sub package, therefore changing build
    requirement for tcp_wrappers to tcp_wrappers-devel


author: Jay Fenlason <fenlason<redhat.com> 2.3.34-1
changelog:
  - New upstream release
  - Upgrade the scripts for migrating the database so that they might
    actually work.
  - change bind-libbind-devel to bind-devel in BuildPreReq


author: Jan Safranek <jsafranek@redhat.com> 2.3.34-2
changelog:
  - slapadd during package update is now quiet (bz#224581)
  - use _localstatedir instead of var/ during build (bz#220970)
  - bind-libbind-devel removed from BuildRequires (bz#216851)
  - slaptest is now quiet during service ldap start, if
    there is no error/warning (bz#143697)
  - libldap_r.so now links with pthread (bz#198226)
  - do not strip binaries to produce correct .debuginfo packages
    (bz#152516)


author: Jan Safranek <jsafranek@redhat.com> 2.3.34-3
changelog:
  - do not create script in /tmp on startup (bz#188298)
  - add compat-slapcat to openldap-compat (bz#179378)
  - do not import ddp services with migrate_services.pl
    (bz#201183)
  - sort the hosts by adders, preventing duplicities
    in migrate*nis*.pl (bz#201540)
  - start slupd for each replicated database (bz#210155)
  - add ldconfig to devel post/postun (bz#240253)
  - include misc.schema in default slapd.conf (bz#147805)


author: Jan Safranek <jsafranek@redhat.com> 2.3.34-4
changelog:
  - Fix initscript return codes (#242667)
  - Provide overlays (as modules; #246036, #245896)
  - Add available modules to config file


author: Jan Safranek <jsafranek@redhat.com> 2.3.34-6
changelog:
  - fix compat-slapcat compilation. Now it can be found in
    /usr/lib/compat-openldap/slapcat, because the tool checks argv[0]
    (#246581)


author: Jan Safranek <jsafranek@redhat.com> 2.3.37-2
changelog:
  - do not use specific automake and autoconf
  - do not distinguish between NPTL and non-NPTL platforms, we have NPTL
    everywhere
  - db-4.6.18 integrated
  - updated openldap-servers License: field to reference BDB license


author: Jan Safranek <jsafranek@redhat.com> 2.3.38-2
changelog:
  - skeleton /etc/sysconfig/ldap added
  - new SLAPD_LDAP option to turn off listening on ldap:/// (#292591)
  - fixed checking of SSL (#292611)
  - fixed upgrade with empty database


author: Jan Safranek <jsafranek@redhat.com> 2.4.7-4
changelog:
  - fixed rpmlint warnings and errors
    - /etc/openldap/schema/README moved to /usr/share/doc/openldap


author: Jan Safranek <jsafranek@redhat.com> 2.4.8-3
changelog:
  - reworked the upgrade logic, slapcat/slapadd of the whole database
    is needed only if minor version changes (2.3.x -> 2.4.y)
  - do not try to save database in LDIF format, if openldap-servers package
    is  being removed (it's up to the admin to do so manually)


author: Jan Safranek <jsafranek@redhat.com> 2.4.8-4
changelog:
  - bdb upgraded to 4.6.21
  - reworked upgrade logic again to run db_upgrade when bdb version
    changes


author: Jan Safranek <jsafranek@redhat.com> 2.4.11-3
changelog:
  - add SLAPD_SHUTDOWN_TIMEOUT to /etc/sysconfig/ldap, allowing admins
    to set non-default slapd shutdown timeout
  - add checkpoint to default slapd.conf file (#458679)


author: Jan Zeleny <jzeleny@redhat.com> 2.4.15-3
changelog:
  - extended previous patch (#481310) to remove options cfMP
    from some client tools
  - correction of patch setugid (#494330)


author: Jan Zeleny <jzeleny@redhat.com> 2.4.16-1
changelog:
  - rebase of openldap to 2.4.16
  - fixed minor issue in spec file (output looking interactive
    when installing servers)


author: Jan Zeleny <jzeleny@redhat.com> 2.4.18-2
changelog:
  - changed configuration approach. Instead od slapd.conf slapd
    is using slapd.d directory now
  - fix of some issues caused by renaming of init script
  - fix of buffer overflow issue in ldif.c pointed out by new glibc


author: Jan Zeleny <jzeleny@redhat.com> 2.4.18-4
changelog:
  - updated smbk5pwd patch to be linked with libldap (#526500)
  - the last buffer overflow patch replaced with the one from upstream
  - added /etc/openldap/slapd.d and /etc/openldap/slapd.conf.bak
    to files owned by openldap-servers


author: Jan Zeleny <jzeleny@redhat.com> - 2.4.19-2
changelog:
  - fixed tls connection accepting when TLSVerifyClient = allow
  - /etc/openldap/ldap.conf removed from files owned by openldap-servers
  - minor changes in spec file to supress warnings
  - some changes in init script, so it would be possible to use it when
    using old configuration style


author: Jan Zeleny <jzeleny@redhat.com> - 2.4.22-1
changelog:
  - rebased to 2.4.22 (mostly bugfixes, added back-ldif, back-null testing support)
  - due to some possible issues pointed out in last update testing phase, I'm
    pulling back the last change (slapd can't be moved since it depends on /usr
    possibly mounted from network)


author: Rich Megginson <rmeggins@redhat.com> - 2.4.22-3
changelog:
  - added ldif.h to the public api in the devel package
  - added -lldif to the public api
  - added HAVE_MOZNSS and other flags to use Mozilla NSS for crypto


author: Jan Vcelak <jvcelak@redhat.com> - 2.4.22-6
changelog:
  - CVE-2010-0211 openldap: modrdn processing uninitialized pointer free (#605448)
  - CVE-2010-0212 openldap: modrdn processing IA5StringNormalize NULL pointer dereference (#605452)
  - obsolete configuration file moved to /usr/share/openldap-servers (#612602)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.22-7
changelog:
  - Mozilla NSS - delay token auth until needed (#616552)
  - Mozilla NSS - support use of self signed CA certs as server certs (#614545)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-1
changelog:
  - rebase to 2.4.23
  - embeded db4 library removed
  - removed bogus links in "SEE ALSO" in several man-pages (#624616)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-2
changelog:
  - fix possible infinite loop when checking permissions of TLS files (#641946)
  - removed outdated autofs.schema (#643045)
  - removed outdated README.upgrade
  - removed relics of migrationtools


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-3
changelog:
  - add support for multiple prefixed Mozilla NSS database files in TLS_CACERTDIR
  - reject non-file keyfiles in TLS_CACERTDIR (#652315)
  - TLS_CACERTDIR precedence over TLS_CACERT (#652304)
  - accept only files in hash.0 format in TLS_CACERTDIR (#650288)
  - improve SSL/TLS trace messages (#652818)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-4
changelog:
  - Mozilla NSS - implement full non-blocking semantics
    ldapsearch -Z hangs server if starttls fails (#652822)
  - updated list of all overlays in slapd.conf (#655899)
  - fix database upgrade process (#656257)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-5
changelog:
  - initscript: slaptest with '-u' to skip database opening (#667768)
  - removed slurpd options from sysconfig/ldap
  - fix: verification of self issued certificates (#657984)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-6
changelog:
  - fix: some server certificates refused with inadequate type error (#668899)
  - fix: default encryption strength dropped in switch to using NSS (#669446)
  - systemd compatibility: add configuration file (#656647, #668223)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-7
changelog:
  - fix: openldap can't use TLS after a fork() (#636956)
  - fix: openldap-server upgrade gets stuck when the database is damaged (#664433)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.24-2
changelog:
  - new: system resource limiting for slapd using ulimit
  - fix update: openldap can't use TLS after a fork() (#636956)
  - fix: possible null pointer dereference in NSS implementation
  - fix: openldap-servers upgrade hangs or do not upgrade the database (#664433)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.25-1
changelog:
  - rebase to new upstream release
  - change default database type from BDB to HDB
  - enable ldapi:/// interface by default
  - set cn=config management ACLs for root user, SASL external schema (#712495)
  - fix: server scriptlets require initscripts package (#716857)
  - fix: connection fails if TLS_CACERTDIR doesn't exist but TLS_REQCERT
    is set to 'never' (#716854)
  - fix: segmentation fault caused by double-free in ldapexop (#699683)
  - fix: segmentation fault of client tool when input line in LDIF file
    is splitted but indented incorrectly (#716855)
  - fix: segmentation fault of client tool when LDIF input file is not terminated
    by a new line character (#716858)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.26-2
changelog:
  - security hardening: library needs partial RELRO support added (#733071)
  - fix: NSS_Init* functions are not thread safe (#731112)
  - fix: incorrect behavior of allow/try options of VerifyCert and TLS_REQCERT (#725819)
  - fix: memleak - free the return of tlsm_find_and_verify_cert_key (#725818)
  - fix: conversion of constraint overlay settings to cn=config is incorrect (#733067)
  - fix: DDS overlay tolerance parametr doesn't function and breakes default TTL (#733069)
  - manpage fix: errors in manual page slapo-unique (#733070)
  - fix: matching wildcard hostnames in certificate Subject field does not work (#733073)
  - new feature: honor priority/weight with ldap_domain2hostlist (#733078)
  - manpage fix: wrong ldap_sync_destroy() prototype in ldap_sync(3) manpage (#717722)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.26-3
changelog:
  - fix: SSL_ForceHandshake function is not thread safe (#701678)
  - fix: allow unsetting of tls_* syncrepl options (#734187)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.26-5
changelog:
  - rebuild: openldap does not work after libdb rebase (#743824)
  - regression fix: openldap built without tcp_wrappers (#743213)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.26-6
changelog:
  - package cleanup:
    + hardened build: switch from LDFLAGS to RPM macros
    + remove old provides and obsoletes
    + add new slapd maintainance scripts
    + drop defattr macros, clean up permissions in specfile
    + fix rpmlint warnings: macros in comments/changelog
    + fix rpmlint warnings: non UTF-8 documentation
    + rename environment file to be more consistent (ldap -> slapd)
  - replace sysv initscript with systemd service file (#
  - new format of environment file due to switch to systemd
    (automatic conversion is performed)
  - patch OpenLDAP to skip empty command line arguments
    (arguments expansion in systemd works different than in shell)
  - CVE-2011-4079: one-byte buffer overflow in slapd (#749324)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.28-1
changelog:
  - new upstream release
    + server: support for delta-syncrepl in multi master replication
    + server: add experimental backend - MDB
    + server: dynamic configuration for passwd, perl, shell, sock, and sql backends
    + server: support passwords in APR1
    + library: support for Wahl (draft)
    + a lot of bugfixes
  - remove patches which were merged upstream
  - compile backends as modules (except BDB, HDB, and monitor)
  - reload systemd daemon after installation


author: Jan Vcelak <jvcelak@redhat.com> 2.4.28-3
changelog:
  - fix: replication (syncrepl) with TLS causes segfault (#783431)
  - fix: slapd segfaults when PEM certificate is used and key is not set (#772890)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.29-1
changelog:
  - new upstream release
    + MozNSS fixes
    + connection handling fixes
    + server: buxfixes in mdb backend
    + server: buxfixes in overlays (syncrepl, meta, monitor, perl, sql, dds, rwm)
  - openldap-servers now provide ldib2ldbm (#437104)
  - certificates management improvements
    + create empty Mozilla NSS certificate database during installation
    + enable builtin Root CA in generated database (#789088)
    + generate server certificate using Mozilla NSS tools instead of OpenSSL tools
    + fix: correct path to check-config.sh in service file (Jan Synáček <jsynacek@redhat.com>)
  - temporarily disable certificates checking in check-config.sh script
  - fix: check-config.sh get stuck when executing command as a ldap user


author: Jan Vcelak <jvcelak@redhat.com> 2.4.29-2
changelog:
  - fix update: provide ldif2ldbm, not ldib2ldbm (#437104)
  - Jan Synáček <jsynacek@redhat.com>:
    + unify systemctl binary paths throughout the specfile and make them usrmove compliant
    + make path to chkconfig binary usrmove compliant


author: Jan Vcelak <jvcelak@redhat.com> 2.4.29-3
changelog:
  - fix: ldap_result does not succeed for sssd (#771484)
  - Jan Synáček <jsynacek@redhat.com>:
    + fix: count constraint broken when using multiple modifications (#795766)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.29-4
changelog:
  - fix: missing options in manual pages of client tools (#796232)
  - fix: SASL_NOCANON option missing in ldap.conf manual page (#732915)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.30-1
changelog:
  - new upstream release
    + server: fixes in mdb backend
    + server: fixes in manual pages
    + server: fixes in syncprov, syncrepl, and pcache
  - removed patches which were merged upstream


author: Jan Vcelak <jvcelak@redhat.com> 2.4.31-1
changelog:
  - new upstream release
    + library: IPv6 url detection
    + library: rebinding to failed connections
    + server: various fixes in mdb backend
    + server: various fixes in replication
    + server: various fixes in overlays and minor backends
    + documentation fixes
  - remove patches which were merged upstream


author: Jan Vcelak <jvcelak@redhat.com> 2.4.31-2
changelog:
  - fix: nss-tools package is required by the base package, not the server subpackage
  - fix: MozNSS CA certdir does not work together with PEM CA cert file (#819536)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.31-3
changelog:
  - update fix: count constraint broken when using multiple modifications (#795766)
  - fix: invalid order of TLS shutdown operations (#808464)
  - fix: TLS error messages overwriting in tlsm_verify_cert() (#810462)
  - fix: reading pin from file can make all TLS connections hang (#829317)
  - CVE-2012-2668: cipher suite selection by name can be ignored (#825875)
  - fix: slapd fails to start on reboot (#829272)
  - fix: default cipher suite is always selected (#828790)
  - fix: less influence between individual TLS contexts:
    - replication with TLS does not work (#795763)
    - possibly others


author: Jan Vcelak <jvcelak@redhat.com> 2.4.31-4
changelog:
  - modify the package build process
    + fix autoconfig files to detect Mozilla NSS library using pkg-config
    + remove compiler flags which are not needed currently
    + build server, client and library together
    + avoid stray dependencies by using --as-needed linker flag
    + enable SLAPI interface in slapd


author: Jan Vcelak <jvcelak@redhat.com> 2.4.31-5
changelog:
  - fix: querying for IPv6 DNS records when IPv6 is disabled on the host (#835013)
  - fix: smbk5pwd module computes invalid LM hashes (#841560)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.32-1
changelog:
  - new upstream release
    + library: double free, SASL handling
    + tools: read SASL_NOCANON from config file
    + slapd: config index renumbering, duplicate error response
    + backends: various fixes in mdb, bdb/hdb, ldap
    + accesslog, syncprov: fix memory leaks in with replication
    + sha2: portability, thread safety, support SSHA256,384,512
    + documentation fixes


author: Jan Vcelak <jvcelak@redhat.com> 2.4.32-2
changelog:
  - enhancement: TLS, prefer private keys from authenticated slots
  - enhancement: TLS, allow certificate specification including token name
  - resolve TLS failures in replication in 389 Directory Server


author: Jan Vcelak <jvcelak@redhat.com> 2.4.32-3
changelog:
  - fix: some TLS ciphers cannot be enabled (#852338)
  - fix: connection hangs after fallback to second server when certificate hostname verification fails (#852476)
  - fix: not all certificates in OpenSSL compatible CA certificate directory format are loaded (#852786)
  - fix: MozNSS certificate database in SQL format cannot be used (#857373)
  - fix: libldap does not load PEM certificate if certdb is used as TLS_CACERTDIR (#857455)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.33-1
changelog:
  - new upstream release:
    + slapd: ACLs, syncrepl
    + backends: locking and memory management in MDB
    + manpages: slapo-refint
  - patch update: MozNSS certificate database in SQL format cannot be used (#860317)
  - fix: slapd.service should not use /tmp (#859019)


author: Jan Vcelak <jvcelak@fedoraproject.org> 2.4.34-1
changelog:
  - new upstream release (#917603)
  - fix: slapcat segfaults if cn=config.ldif not present (#872784)
  - use systemd-rpm macros in spec file (#850247)


author: Jan Synáček <jsynacek@redhat.com> 2.4.34-1
changelog:
  - enable perl backend (#820547)
  - package ppolicy-check-password (#829749)
  - add perl specific BuildRequires
  - fix bogus dates


author: Jan Synáček <jsynacek@redhat.com> 2.4.34-2
changelog:
  - fix: syncrepl push DELETE operation does not recover (#920482)
  - run autoreconf every build, drop autoreconf patch (#926280)


author: Jan Synáček <jsynacek@redhat.com> 2.4.35-1
changelog:
  - new upstream release (#947235)
  - fix: slapd.service should ensure that network is up before starting (#946921)
  - fix: NSS related resource leak (#929357)


author: Jan Synáček <jsynacek@redhat.com> 2.4.35-3
changelog:
  - fix: minor documentation fixes
  - set SASL_NOCANON to on by default (#949864)
  - remove trailing spaces


author: Jan Synáček <jsynacek@redhat.com> 2.4.35-4
changelog:
  - do not needlessly run ldconfig after installing openldap-devel
  - fix: LDAPI with GSSAPI does not work if SASL_NOCANON=on (#960222)
  - fix: lt_dlopen() with back_perl (#960048)


author: Jan Synáček <jsynacek@redhat.com> - 2.4.37-1
changelog:
  - new upstream release (#1023916)
  - fix: missing a linefeed at the end of file /etc/openldap/ldap.conf (#1019836)


author: Jan Synáček <jsynacek@redhat.com> - 2.4.39-3
changelog:
  - remove redundant sysconfig-related stuff
  - add documentation reference to service file
  - alias slapd.service as openldap.service


author: Jan Synáček <jsynacek@redhat.com> - 2.4.40-5
changelog:
  - harden the build
  - improve check_password
  - provide an unversioned symlink to check_password.so.1.1


author: Jan Synáček <jsynacek@redhat.com> - 2.4.40-6
changelog:
  - remove openldap-fedora-systemd.patch
  - remove openldap-ldaprc-currentdir.patch
  - remove openldap-userconfig-setgid.patch
  - remove openldap-syncrepl-unset-tls-options.patch
  - remove unneeded configure flags, disable sql backend and aci
  - make mdb default after a new installation
  - remove pid file and args file
  - renumber patches and sources


author: Jan Synáček <jsynacek@redhat.com> - 2.4.40-7
changelog:
  - remove tmpfiles config since it's no longer needed
  - fix invalid ldif
  - simplify checking for missing server configuration


author: Matus Honek <mhonek@redhat.com> - 2.4.44-3
changelog:
  - fix: Setting olcTLSProtocolMin does not change supported protocols (#1375432)
  - fix: slapd should start after network-online.service (#1336487)


author: Matus Honek <mhonek@redhat.com> - 2.4.44-9
changelog:
  - NSS: Enhance OpenLDAP to support TLSv1.3 protocol with NSS (#1435692)
  - NSS: Rearrange ciphers-, parsing-, and protocol-related patches (#1435692)


author: Matus Honek <mhonek@redhat.com> - 2.4.45-1
changelog:
  - Rebase to version 2.4.45 (#1458081)
    * fixes CVE-2017-9287 (#1456712, #1456713)
  - Update the 'sources' file with new SHA512 hashes


author: Matus Honek <mhonek@redhat.com> - 2.4.45-5
changelog:
  - Fix issues in MozNSS compatibility layer (#1400570)
    + Force write file with fsync to avoid race conditions
    + Always filestamp both sql and dbm NSS DB variants to not rely on default DB type prefix
    + Allow missing cert and key which is a valid usecase
    + Create extraction folder only in /tmp to simplify selinux rules
    + Fix Covscan issues


author: Matus Honek <mhonek@redhat.com> - 2.4.45-7
changelog:
  - MozNSS Compat. Layer fixes (#1400570)
    - fix incorrect parsing of CACertDir (orig. #1533955)
    - fix PIN disclaimer not always shown (orig. #1516409)
    - fix recursive directory deletion (orig. #1516409)
    - Ensure consistency of a PEM dir before usage (orig. #1516409)
      + Warn just before use of a PIN about key file extraction
    - Enable usage of NSS DB with PEM cert/key (orig. #1525485)
      + Fix a possible invalid dereference (covscan)


author: Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 2.4.45-9
changelog:
  - Escape macros in %changelog
  - Disable TLSMC in F29+
  - Remove obsolete Group tag
  - Don't call ldconfig in servers subpackage
  - Switch to %ldconfig_scriptlets
  - Remove unneeded Requires(post): systemd-sysv, chkconfig
  - Switch to %systemd_requires
  - Change BuildRequires: systemd-units to systemd


author: Matus Honek <mhonek@redhat.com> - 2.4.45-12
changelog:
  - MozNSS Compat. Layer: fix: libldap tlsmc continues even after it fails to extract CA certificates (#1550110)


author: Matus Honek <mhonek@redhat.com> - 2.4.45-13
changelog:
  - fix: openldap does not use Fedora build flags
    + makes use of redhat-rpm-config package
  - Drop superfluous back-sql linking patch


author: Jitka Plesnikova <jplesnik@redhat.com> - 2.4.46-2
changelog:
  - Perl 5.28 rebuild
  - MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1564161)


author: Matus Honek <mhonek@redhat.com> - 2.4.46-3
changelog:
  - MozNSS Compat. Layer: Make log messages more clear (#1598103)
  - MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1595203)


author: Matus Honek <mhonek@redhat.com> - 2.4.46-6
changelog:
  - Build with LDAP_USE_NON_BLOCKING_TLS (#1594928)
  - Remove unused leftover MozNSS Compat. Layer references (cont.) (#1557967)


author: Tomas Hoger <thoger@redhat.com> 7.3-3
changelog:
  - Backport patch from upstream pcre 7.6 to address buffer overflow
  caused by "a character class containing a very large number of
  characters with codepoints greater than 255 (in UTF-8 mode)"
  CVE-2008-0674, #431660
  - Try re-enabling make check again.


author: Lubomir Rintel <lkundrak@v3.sk> 7.8-1
changelog:
  - Update to 7.8, drop upstreamed patches
  - Fix destination of documentation (#427763)
  - Use buildroot macro consistently
  - Separate the static library, as per current Guidelines
  - Satisfy rpmlint


author: Tomas Hoger <thoger@redhat.com> - 7.3-3
changelog:
  - Backport patch from upstream pcre 7.6 to address buffer overflow
    caused by "a character class containing a very large number of
    characters with codepoints greater than 255 (in UTF-8 mode)"
    CVE-2008-0674, #431660
  - Try re-enabling make check again.


author: Remi Collet <Fedora@FamilleCollet.com> 7.0.0p3-3
changelog:
  - review for Livna
  - Requires/BuildRequires cleanup
  - Change License = Distributable, include PDFlib-Lite-license.pdf in sub-packages
  - add --with-pyinc, python2.5 not defined in configure
  - add some comments


author: Remi Collet <Fedora@FamilleCollet.com> 7.0.2p8-1
changelog:
  - update to 7.0.2p8
  - del destdir.patch ("make install DESTDIR" is now ok)
  - add gcc43.patch for Fedora 9


author: Eugene Zamriy <ezamriy@cloudlinux.com> - 1-2
changelog:
  - added experimental alt-php-mysql-reconfigure implementation written in Python
    which detects SQL server and makes changes in more accurate manner


author: Eugene Zamriy <ezamriy@cloudlinux.com> - 1-3
changelog:
  - alt-php-mysql-reconfigure.py fixed to work on python 2.4 (CL5)
  - fixed issue with lib directory detection on 32bit systems
  - use ldconfig full path because to avoid errors on CL5


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1-9.2
changelog:
  - Reworked detection of alt-php*-mariadb* bindings because of different
    shared libraries for mariadb 10 and mariadb 10.1


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> - 1-11
changelog:
  - ALTPHP-158: add /etc/cl.selector/php.extensions.conflicts file
  - add conflict with lvemanager < 1.0-9.36


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> - 1-27
changelog:
  - ALTPHP-484: Fix SCL prefixes for alt-php
  - ALTPHP-486: Don't create SCL prefix if alt-php is not installed


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1-29
changelog:
  - Added trigger for cl-Percona56-client and cl-Percona56-shared packages
  - ALTPHP-504: Fixed "Couldn't remove prefix /etc/scl/prefixes" error


author: Sergey Fokin <sfokin@cloudlinux.com> - 1-45
changelog:
  - fix version compare in multiphp_reconfigure script
  - exec /multiphp_reconfigure after installation for cPanel > 100.0


author: Sergey Fokin <sfokin@cloudlinux.com> - 1-46
changelog:
  - rewrite code for versions comparing in multiphp_reconfigure.py script
  - rewrite alt-php-mysql-reconfigure.py for ubuntu support


author: Sergey Fokin <sfokin@cloudlinux.com> - 1-50
changelog:
  - ALTPHP-1376: fix detecting libmysqlclient.so version
  - ALTPHP-1396: restore alt-php.cfg if it's broken


author: Sergey Fokin <sfokin@cloudlinux.com> - 1-54
changelog:
  - ALTPHP-1582: add support cl-MariaDB1011
  - ALTPHP-1626: return mysqli.so for alt-php >= 82
  - ALTPHP-1637: rebuild with system python from BaseOS repo


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 4.4.9-36
changelog:
  - add sybase_ct extension (FreeTDS based)
  - LSAPI: initialize empty sa_mask
  - rename patches, fix trailing space symbols in patches


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 4.4.9-43
changelog:
  - add HardenedPHP patches:
  -   bug70661: Use After Free Vulnerability in WDDX Packet Deserialization
  -   bug70741: Session WDDX Packet Deserialization Type Confusion Vulnerability


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 4.4.9-44
changelog:
  - add HardenedPHP patches:
  -   security bug #71039: exec functions ignore length but look for NULL termination
  -     https://bugs.php.net/bug.php?id=71039
  -   security bug #71459: Integer overflow in iptcembed()
  -     https://bugs.php.net/bug.php?id=71459
  -   bug #40109: iptcembed fails on non-jfif jpegs
  -     https://bugs.php.net/bug.php?id=40109


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 4.4.9-45
changelog:
  - add HardenedPHP patches:
  - 	security bug #71587: Use-After-Free / Double-Free in WDDX Deserialize
  - 	https://bugs.php.net/bug.php?id=71587


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 4.4.9-46
changelog:
  - ALTPHP-141: backported patch
  - security bug 71798: Integer Overflow in php_raw_url_encode
  https://bugs.php.net/bug.php?id=71798
  - ALTPHP-135: execute "cagefsctl --setup-cl-alt" command only once per alt-php
  group installation/update to speed up the installation process


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 4.4.9-46.el6
changelog:
  - ALTPHP-141: backported patch
  -     - security bug 71798: Integer Overflow in php_raw_url_encode
  -       https://bugs.php.net/bug.php?id=71798
  - ALTPHP-135: execute "cagefsctl --setup-cl-alt" command only once per alt-php
  - group installation/update to speed up the installation process


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 4.4.9-47
changelog:
  - add HardenedPHP patches for:
  -   * security bug 72094: Out of bounds heap read access in exif header processing (CVE-2016-4542, CVE-2016-4543, CVE-2016-4544)
  -     https://bugs.php.net/bug.php?id=72094
  -   * security bug 72093: bcpowmod accepts negative scale and corrupts _one_ definition (CVE-2016-4537, CVE-2016-4538)
  -     https://bugs.php.net/bug.php?id=72093


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 4.4.9-49
changelog:
  - add HardenedPHP patches
  -     CVE-2016-5094: (core) integer overflow in php_html_entities
  -     https://bugs.php.net/72135


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 4.4.9-50
changelog:
  - add Hardened PHP patches:
  -   CVE-2016-5766: Integer Overflow in _gd2GetHeader() resulting in heap overflow
  -   https://bugs.php.net/bug.php?id=72339
  -   CVE-2016-5772: Double Free Corruption in wddx_deserialize
  -   https://bugs.php.net/bug.php?id=72340
  -   CVE-2015-8874: Stack overflow with imagefilltoborder
  -   https://bugs.php.net/bug.php?id=66387
  - ALTPHP-177: Re-patch alt-phpXX with wink_server_is_ready.patch


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 4.4.9-51
changelog:
  - add Hardened PHP patches:
  -   CVE-2016-5399: Inadequate error handling in bzread()
  -   http://bugs.php.net/72613
  -   CVE-2016-6288: php_url_parse_ex() buffer overflow read
  -   http://bugs.php.net/70480
  -   CVE-2016-6289: Stack-based buffer overflow vulnerability in virtual_file_ex
  -   http://bugs.php.net/72513
  -   CVE-2016-6290: Use After Free in unserialize() with Unexpected Session Deserialization
  -   http://bugs.php.net/72562
  -   CVE-2016-6296: heap-buffer-overflow (write) simplestring_addn simplestring.c
  -   http://bugs.php.net/72606


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 4.4.9-52
changelog:
  - update mail-header patch
  - ALTPHP-212: Implement additional code to mail.c to track sending file path (X-PHP-Filename)
  - add HardenedPHP patches:
  -   security bug #72837: integer overflow in bzdecompress caused heap corruption (bz2)
  -   http://bugs.php.net/72837
  -   security bug #72681: PHP Session Data Injection Vulnerability (core)
  -   http://bugs.php.net/72681
  -   security bug #72807: integer overflow in curl_escape caused heap corruption (curl)
  -   http://bugs.php.net/72807
  -   security bug #72697: select_colors write out-of-bounds (gd)
  -   http://bugs.php.net/72697
  -   security bug #72730: imagegammacorrect allows arbitrary write access (gd)
  -   http://bugs.php.net/72730
  -   security bug #72836: integer overflow in base64_decode caused heap corruption (standard)
  -   http://bugs.php.net/72836
  -   security bug #72771: ftps:// wrapper is vulnerable to protocol downgrade attack (streams)
  -   http://bugs.php.net/72771
  -   security bug #72749: wddx_deserialize allows illegal memory access (wddx)
  -   http://bugs.php.net/72749
  -   security bug #72750: wddx_deserialize null dereference (wddx)
  -   http://bugs.php.net/72750
  -   security bug #72790: wddx_deserialize null dereference with invalid xml (wddx)
  -   http://bugs.php.net/72790
  -   security bug #72799: wddx_deserialize null dereference in php_wddx_pop_element (wddx)
  -   http://bugs.php.net/72799


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 4.4.9-55
changelog:
  - add Hardened patches:
  -   security bug 73208: integer overflow in imap_8bit caused heap corruption
  -   security bug 73017: memory corruption in wordwrap function


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 4.4.9-56
changelog:
  - add HardenedPHP patches:
  -   security bug 72482: Illegal write/read access caused by gdImageAALine overflow
  -   security bug 72696: imagefilltoborder stackoverflow on truecolor images
  -   security bug 73418: Integer Overflow in "_php_imap_mail" leads Heap Overflow


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 4.4.9-57
changelog:
  - add HardenedPHP patch:
  -   security bug 73631: Invalid read when wddx decodes empty boolean element


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 4.4.9-58
changelog:
  - add HaredenedPHP patches:
  -   bug 73825: Heap out of bounds read on unserialize in finish_nested_data() (CVE-2016-10161)
  -   bug 73737: FPE when parsing a tag format (CVE-2016-10158)
  -   bug 73868: Fix DOS vulnerability in gdImageCreateFromGd2Ctx()
  -   bug 73869: Signed Integer Overflow gd_io.c


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 4.4.9-60
changelog:
  - add HaredenedPHP patches:
  -   bug 72627: Memory Leakage In exif_process_IFD_in_TIFF (CVE-2016-7128)


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 4.4.9-67
changelog:
  - add HardenedPHP patches:
  - CVE-2017-11143: wddx parsing empty boolean tag leads to SIGSEGV
  - CVE-2017-11144: negative-size-param (-1) in memcpy in zif_openssl_seal()
  - CVE-2017-7890: Buffer over-read into uninitialized memory
  - bug70436: Use After Free Vulnerability in unserialize()
  - bug74603: PHP INI Parsing Stack Buffer Overflow Vulnerability
  -
  - add LSAPI patches:
  - ALTPHP-351: make lsphp error messaqges more informative
  - ALTPHP-354: SIGCHILD handler fix after CRIU restoring


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 4.4.9-68
changelog:
  - add symlinks for MultiPHP support
  - session.save_path set to "/opt/alt/phpXY/var/lib/php/sessions"


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 4.4.9-70
changelog:
  - add conflicts with alt-php-config and lvemanager
  - ALTPHP-380: added user.ini lookup in home dir
  - ALTPHP-380: changed CRIU messaging


author: Ivan Danilov <idanilov@cloudlinux.com> 4.4.9-82
changelog:
  - Fix for bug 76130 Heap Buffer Overflow (READ: 1786) in exif_iif_add_value
  - Fix for bug 76248 LDAP-Server Response causes Crash
  - Fix for bug 75981 Stack-buffer-overflow while parsing HTTP response


author: Ivan Danilov <idanilov@cloudlinux.com> - 4.4.9-83
changelog:
  - ALTPHP-499: Fixed patch for LiteSpeed SIGTERM cleanup
  - ALTPHP-498: Fixed ability to override parameters with ini_set() that
    were defined via php_value


author: Ivan Danilov <idanilov@cloudlinux.com> - 4.4.9-89
changelog:
  - Fix for bug #76505 (array_merge_recursive() is duplicating sub-array keys)
  - Fix for bug #76534 (PHP hangs on 'illegal string offset on string references with an error handler)
  - Fix for bug #76536 (PHP crashes with core dump when throwing exception in error handler). (Laruence)
  - Fix for bug #76532 (excessive memory usage in mb_strimwidth)
  - Fix for bug #76548 pg_fetch_result did not fetch the next row
  - Fix for bug #74670
  - Fix for bug #75231
  - Fix for #52974: jewish.c: compile error under Windows with GBK charset
  - Fix for #76704: mb_detect_order return value varies based on argument type
  - Fix for incorrect restoring of LDFLAGS
  - Fix for bug #72443: Generate enabled extension
  - Fix for bug #76754 (parent private constant in extends class memory leak)
  - Fix for bug #76367 (NoRewindIterator segfault 11)
  - Fix for bug #76383 (array_map on $GLOBALS returns IS_INDIRECT)


author: Ivan Danilov <idanilov@cloudlinux.com> - 4.4.9-92
changelog:
  - Fix bug #77242: heap out of bounds read in xmlrpc_decode()
  - Fix bug #77270: imagecolormatch Out Of Bounds Write on Heap
  - Fix bug #77380: Global out of bounds read in xmlrpc base64 code
  - Fix bug #77418: Heap overflow in utf32be_mbc_to_code


author: Ivan Danilov <idanilov@cloudlinux.com> - 4.4.9-93
changelog:
  - Fix bug #77540 - Invalid Read on exif_process_SOFn
  - Fix #77546 iptcembed broken function
  - Fix bug #77563 - Uninitialized read in exif_process_IFD_in_MAKERNOTE
  - LSAPI sem_timedwait synchronization fixed


author: Sergey Fokin <sfokin@cloudlinux.com> - 4.4.9-94
changelog:
  - add all extensions in default.ini and disable by default except mysqli.so
  - update plesk php hadlers if add new extensions in default.ini


author: Ivan Danilov <idanilov@cloudlinux.com> - 4.4.9-95
changelog:
  - Fix for #77742 bcpow() implementation related to gcc compiler optimization
  - add and enable mysql.so by default


author: Ivan Danilov <idanilov@cloudlinux.com> - 4.4.9-96
changelog:
  - Fix #77973: Uninitialized read in gdImageCreateFromXbm
  - Fix bug #77988 - heap-buffer-overflow on php_jpg_get16


author: Ivan Danilov <idanilov@cloudlinux.com> - 4.4.9-97
changelog:
  - Fix bug #77124
  - Fix #78212: Segfault in built-in webserver
  - Fix bug #78222 (heap-buffer-overflow on exif_scan_thumbnail)
  - Fix bug #78256 (heap-buffer-overflow on exif_process_user_comment)


author: Ivan Danilov <idanilov@cloudlinux.com> - 4.4.9-100
changelog:
  - Fixed bug #78793 (Use-after-free in exif parsing under memory sanitizer)
  - Fixed bug #78878 (Buffer underflow in bc_shift_addsub). (CVE-2019-11046)
  - Fixed bug #78910 (Heap-buffer-overflow READ in exif). (CVE-2019-11047)


author: Nikolai Mikhno <nmikhno@cloudlinux.com> - 4.4.9-107
changelog:
  - Fixed bug #79330: shell_exec() silently truncates after a null byte
  - Fixed bug #79465: OOB Read in urldecode() (CVE-2020-7067)


author: Nikolai Mikhno <nmikhno@cloudlinux.com> - 4.4.9-109
changelog:
  - Fixed bug #78875: Long variables cause OOM and temp files are not cleaned (CVE-2019-11048)
  - Fixed bug #78876: Long variables in multipart/form-data cause OOM and temp files are not cleaned (CVE-2019-11048)


author: Nikolai Mikhno <nmikhno@cloudlinux.com> - 4.4.9-113
changelog:
  - Fix bug #79699: PHP parses encoded cookie names so malicious `__Host-` cookies can be sent (CVE-2020-7070)


author: Eugene Zamriy <ezamriy@cloudlinux.com> - 1-6.1
changelog:
  - added install trigger for cl-MySQL50-client, cl-MySQL51-client,
    cl-MySQL55-client, cl-MySQL56-client


author: Eugene Zamriy <ezamriy@cloudlinux.com> - 1-6.2
changelog:
  - added install trigger for cl-MySQL50-shared, cl-MySQL51-shared,
    cl-MySQL55-shared, cl-MySQL56-shared


author: Eugene Zamriy <ezamriy@cloudlinux.com> - 1-6.4
changelog:
  - ALTPHP-189: call alt-php-mysql-reconfigure.py instead of deprecated
    alt-php-mysql-reconfigure in posttrans section
  - add alt-php70-mysql5.7 and alt-php70-mariadb101 requirements


author: Anton Volkov <avolkov@cloudlinux.com> 5.1.6-2
changelog:
  - add / remove lines of file /etc/cagefs/alternatives.conf on install/update/uninstall of the package
  - removed httpd from requires


author: Anton Volkov <avolkov@cloudlinux.com> 5.1.6-3
changelog:
  - /etc/cagefs/alternatives.conf has been moved to /etc/cl.alt/alternatives.conf
  - execute cagefsctl --setup-cl-alt in posttrans
  - execute cagefsctl --remove-cl-alt in postun


author: Anton Volkov <avolkov@cloudlinux.com> 5.1.6-5
changelog:
  - install additional ini files (for extensions) to php.d.all directory (instead of php.d)
  - create symlink /opt/alt/php51/etc/php.d -> /etc/cl.php.d/alt-php51
  - extension_dir directive has been commented out in php.ini


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.1.6-35
changelog:
  - disable firebird/interbase in CL7
  - fix db4 requires for CL7
  - remove redunant libmm-devel require
  - move /var/lib/php/session to /opt/alt/php55/var/lib/php/session
  - add filde-devel to build requires
  - change __GMP_BITS_PER_MP_LIMB to GMP_LIMB_BITS in ext/gmp/*
  - use autoconf213 and autoheader213


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.1.6-36
changelog:
  - add /opt/alt/php51/usr/include/php/ext/date to includes
  - use autoconf213 adn autoheader213 for all builds


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.1.6-41
changelog:
  - add support of 'p' option in zend_get_parameters_ex
  - fix patches: CVE-2012-0830, CVE-2015-4025, CVE-2015-4026


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.1.6-45
changelog:
  - add mail.log and mail.add_x_header configuration directives
  - add extended mail header (X-PHP-Script)
  - remove linksafe group creation


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.1.6-49
changelog:
  - add HardenedPHP patches:
  -   bug70661: Use After Free Vulnerability in WDDX Packet Deserialization
  -   bug70741: Session WDDX Packet Deserialization Type Confusion Vulnerability
  -   bug70728: Type Confusion Vulnerability in PHP_to_XMLRPC_worker()


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.1.6-51
changelog:
  - add HardenedPHP patches:
  - security bug #71587: Use-After-Free / Double-Free in WDDX Deserialize
  https://bugs.php.net/bug.php?id=71587


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.1.6-53
changelog:
  - add HardenedPHP patches for:
  -   * security bug 71912: libgd: signedness vulnerability (CVE-2016-3074)
  -     https://bugs.php.net/bug.php?id=71912
  -   * security bug 72094: Out of bounds heap read access in exif header processing (CVE-2016-4542, CVE-2016-4543, CVE-2016-4544)
  -     https://bugs.php.net/bug.php?id=72094
  -   * security bug 72093: bcpowmod accepts negative scale and corrupts _one_ definition (CVE-2016-4537, CVE-2016-4538)
  -     https://bugs.php.net/bug.php?id=72093


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.1.6-55
changelog:
  - add HardenedPHP patches:
  -     CVE-2016-5094: (core) integer overflow in php_html_entities
  -     https://bugs.php.net/72135


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.1.6-56
changelog:
  - add Hardened PHP patches:
  -   CVE-2015-6835: Use after free vulnerability in session deserializer
  -   https://bugs.php.net/70219
  -   security bug 65481: Shutdown segfault due to serialize
  -   https://bugs.php.net/65481
  -   bug 45706: Serializing of ArrayIterator extended Objects
  -   https://bugs.php.net/45706


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.1.6-59
changelog:
  - update mail-header patch
  - ALTPHP-212: Implement additional code to mail.c to track sending file path (X-PHP-Filename)
  - add Hardened PHP patches:
  -   security bug #72837: integer overflow in bzdecompress caused heap corruption (bz2)
  -   http://bugs.php.net/72837
  -   security bug #72681: PHP Session Data Injection Vulnerability (core)
  -   http://bugs.php.net/72681
  -   security bug #72807: integer overflow in curl_escape caused heap corruption (curl)
  -   http://bugs.php.net/72807
  -   security bug #72697: select_colors write out-of-bounds (gd)
  -   http://bugs.php.net/72697
  -   security bug #72730: imagegammacorrect allows arbitrary write access (gd)
  -   http://bugs.php.net/72730
  -   security bug #72836: integer overflow in base64_decode caused heap corruption (standard)
  -   http://bugs.php.net/72836
  -   security bug #72849: integer overflow in urlencode caused heap corruption (standard)
  -   http://bugs.php.net/72849
  -   security bug #72850: integer overflow in php_uuencode caused heap corruption (standard)
  -   http://bugs.php.net/72850
  -   security bug #72771: ftps:// wrapper is vulnerable to protocol downgrade attack (streams)
  -   http://bugs.php.net/72771
  -   security bug #72749: wddx_deserialize allows illegal memory access (wddx)
  -   http://bugs.php.net/72749
  -   security bug #72750: wddx_deserialize null dereference (wddx)
  -   http://bugs.php.net/72750
  -   security bug #72790: wddx_deserialize null dereference with invalid xml (wddx)
  -   http://bugs.php.net/72790
  -   security bug #72799: wddx_deserialize null dereference in php_wddx_pop_element (wddx)
  -   http://bugs.php.net/72799


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.1.6-63
changelog:
  - add HardenedPHP patches:
  -   security bug 73150: missing NULL check in dom_document_save_html
  -   security bug 73208: integer overflow in imap_8bit caused heap corruption
  -   security bug 73082: string length overflow in mb_encode_* function
  -   security bug 73017: memory corruption in wordwrap function
  -   security bug 73073: CachingIterator null dereference when convert to string


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.1.6-65
changelog:
  - add HardenedPHP patches:
  -   security bug 73452: Segfault (Regression for #69152)
  -   security bug 73631: Invalid read when wddx decodes empty boolean element


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.1.6-69
changelog:
  - add HaredenedPHP patches:
  -   Added check that soap.wsdl_cache_dir conforms to open_basedir (CVE-2013-1635)
  -   bug 70081: SoapClient info leak / null pointer dereference via multiple type confusions (CVE-2015-8835)
  -   Improve check for :memory: pseudo-filename in SQlite (CVE-2012-3365)
  -   bug 72627: Memory Leakage In exif_process_IFD_in_TIFF (CVE-2016-7128)


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.1.6-77
changelog:
  - add HardenedPHP patches:
  - CVE-2017-11143: wddx parsing empty boolean tag leads to SIGSEGV
  - CVE-2017-11144: negative-size-param (-1) in memcpy in zif_openssl_seal()
  - CVE-2017-11145: wddx_deserialize() heap out-of-bound read via php_parse_date()
  - CVE-2017-11146: wddx_deserialize() heap out-of-bound read via php_parse_date() (caused by CVE-2017-11145)
  - CVE-2017-7890: Buffer over-read into uninitialized memory
  - CVE-2017-9224: Buffer Overflow in match_at() (Oniguruma issue)
  - CVE-2017-9226: Heap corruption in next_state_val() in 15 encodings (Oniguruma issue)
  - CVE-2017-9227: Bug in mbc_enc_len() (Oniguruma issue)
  - CVE-2017-9228: Heap corruption in next_state_val() due to uninitialized local variable (Oniguruma issue)
  - CVE-2017-9229: SIGSEGV in left_adjust_char_head() due to bad dereference (Oniguruma issue)
  - bug70436: Use After Free Vulnerability in unserialize()
  - bug74603: PHP INI Parsing Stack Buffer Overflow Vulnerability
  -
  - add LSAPI patches:
  - ALTPHP-351: make lsphp error messaqges more informative
  - ALTPHP-354: SIGCHILD handler fix after CRIU restoring


author: Ivan Danilov <idanilov@cloudlinux.com> 5.1.6-94
changelog:
  - Fix for bug 76130 Heap Buffer Overflow (READ: 1786) in exif_iif_add_value
  - Fix for bug 76249 Stream filter convert.iconv leads to infinite loop on invalid sequence
  - Fix for bug 76248 LDAP-Server Response causes Crash
  - Fix for bug 76129 (CVE-2018-10547) Reflected XSS on the PHAR 403 and 404 error pages via request data of a request for a .phar file
  - Fix for bug 75981 Stack-buffer-overflow while parsing HTTP response


author: Ivan Danilov <idanilov@cloudlinux.com> - 5.1.6-101
changelog:
  - Fix for bug #76505 (array_merge_recursive() is duplicating sub-array keys)
  - Fix for bug #76532 (excessive memory usage in mb_strimwidth)
  - Fix for bug #76548 pg_fetch_result did not fetch the next row
  - Fix for bug #74670
  - Fix for bug #76488 Memory leak when fetching a BLOB field
  - Fix for bug #75402 Possible Memory Leak using PDO::CURSOR_SCROLL option
  - Fix for #76704: mb_detect_order return value varies based on argument type
  - Fix for incorrect restoring of LDFLAGS
  - Fix for bug #72443: Generate enabled extension
  - Fix for #55146: iconv_mime_decode_headers() skips some headers
  - Fix for #63839: iconv_mime_decode_headers function is skipping headers
  - Fix for #60494: iconv_mime_decode does ignore special characters
  - Fix for #68180: iconv_mime_decode can return extra characters in a header


author: Ivan Danilov <idanilov@cloudlinux.com> - 5.1.6-102
changelog:
  - backported fix for bug #73457
  - backported fix for #74454: Wrong exception being thrown when using ReflectionMethod
  - backported fix for bug #74764 and add a test case
  - backported fix for bug #76800 (foreach inconsistent if array modified during loop)
  - backported fix for #76886: Can't build xmlrpc with expat
  - backported fix for bug #76901


author: Ivan Danilov <idanilov@cloudlinux.com> - 5.1.6-104
changelog:
  - Fix bug #77242: heap out of bounds read in xmlrpc_decode()
  - Fix bug #77270: imagecolormatch Out Of Bounds Write on Heap
  - Fix bug #77371: heap buffer overflow in mb regex functions - compile_string_node
  - Fix bug #77380: Global out of bounds read in xmlrpc base64 code


author: Ivan Danilov <idanilov@cloudlinux.com> - 5.1.6-110
changelog:
  - Fix bug #77390 (feof might hang on TLS streams in case of fragmented TLS records)
  - Fix #77431 SplFileInfo::__construct() accepts NUL bytes
  - Fixed bug #77494 (Disabling class causes segfault on member access)
  - Fix bug #77540 - Invalid Read on exif_process_SOFn
  - Fix #77546 iptcembed broken function
  - Fix bug #77563 - Uninitialized read in exif_process_IFD_in_MAKERNOTE
  - Fix bug #77630 - safer rename() procedure
  - LSAPI sem_timedwait synchronization fixed


author: Ivan Danilov <idanilov@cloudlinux.com> - 5.1.6-115
changelog:
  - Fixed bug #76717
  - Fix #77024: SplFileObject::__toString() may return array
  - Fix #77700: Writing truecolor images as GIF ignores interlace flag
  - Fixed bug #77742
  - Fixed bug #77765
  - Fixed bug #77945


author: Ivan Danilov <idanilov@cloudlinux.com> - 5.1.6-121
changelog:
  - Fix bug #77124
  - Fix bug #78192 PDO SQLite SegFault when reuse statement after schema has changed
  - Fix #78212: Segfault in built-in webserver
  - Fix bug #78222 (heap-buffer-overflow on exif_scan_thumbnail)
  - Fix bug #78256 (heap-buffer-overflow on exif_process_user_comment)


author: Ivan Danilov <idanilov@cloudlinux.com> - 5.1.6-127
changelog:
  - Fixed bug #78793 (Use-after-free in exif parsing under memory sanitizer)
  - Fixed bug #78878 (Buffer underflow in bc_shift_addsub). (CVE-2019-11046)
  - Fixed bug #78910 (Heap-buffer-overflow READ in exif). (CVE-2019-11047)
  - Updated Litespeed SAPI to 7.6


author: Ivan Danilov <idanilov@cloudlinux.com> - 5.1.6-130
changelog:
  - Fix bug #79282: Use-of-uninitialized-value in exif (CVE-2020-7064)
  - Fix bug #79329: get_headers silently truncates after a null byte (CVE-2020-7066)


author: Nikolai Mikhno <nmikhno@cloudlinux.com> - 5.1.6-134
changelog:
  - Fix bug #61597: SXE properties may lack attributes and content
  - Fix bug #79200: Some iconv functions cut Windows-1258
  - Fix bug #79330: shell_exec() silently truncates after a null byte
  - Fix bug #79364: When copy empty array, next key is unspecified
  - Fix bug #79465: OOB Read in urldecode() (CVE-2020-7067)
  - Fix bug #79410: system() swallows last chunk if it is exactly 4095 bytes without newline


author: Nikolai Mikhno <nmikhno@cloudlinux.com> - 5.1.6-136
changelog:
  - Fix bug #78221: DOMNode::normalize() doesn't remove empty text nodes
  - Fix bug #78875: Long variables cause OOM and temp files are not cleaned. (CVE-2019-11048)
  - Fix bug #78876: Long variables in multipart/form-data cause OOM and temp files are not cleaned. (CVE-2019-11048)
  - Fix bug #79528: Different object of the same xml between 7.4.5 and 7.4.4


author: Darya Malyavkina <dmalyavkina@cloudlinux.com> - 5.1.6-139
changelog:
  - MODLS-741: Make LSCRIU log messages with timestamps
  - MODLS-804: Improve mod_lsapi & lsphp error reporting in case of php memory limit reached
  - ALTPHP-961: Update litespeed to 7.7 version


author: Nikolai Mikhno <nmikhno@cloudlinux.com> - 5.1.6-140
changelog:
  - Fix bug #74267: segfault with streams and invalid data
  - Fix bug #79787: mb_strimwidth does not trim string
  - Fix bug #79877: getimagesize function silently truncates after a null byte


author: Eduard Abdullin <eabdullin@cloudlinux.com> - 5.1.6-147
changelog:
  - ALTPHP-1053: Update move_override_ini patch
  - ALTPHP-1038: Update litespeed log patch
  - ALTPHP-1082: Add alt-php-pdo requires for alt-php-firebird


author: Eduard Abdullin <eabdullin@cloudlinux.com> - 5.1.6-150
changelog:
  - ALTPHP-1154: Fix libxml requires
  - ALTPHP-1156: Get rid of manipulations with enabling extensions (mysqli.so) in default.ini


author: Pavel Mayorov <pmayorov@cloudlinux.com> - 5.1.6-160
changelog:
  - Fix for Harden PHP
  - CVE-2022-31631: Fix integer overflow that could cause PDO::quote() to return an improperly quoted string


author: Nikita Ivanov <nivanov@cloudlinux.com> - 5.1.6-161
changelog:
  - Fix for hardened PHP
  - CVE-2023-0568: Fix array overrun when appending slash to paths
  - CVE-2023-0662: Fix DOS vulnerabality by limiting number of parsed
    multipart body parts and printing upload limit exceed error message only once


author: Nikita Ivanov <nivanov@cloudlinux.com> - 5.1.6-163
changelog:
  - Fix for hardened PHP
  - CVE-2023-3823: Fix external entity loading in XML without enabling by
    sanitizing libxml2 globals before parsing


author: Dmitriy Popov <dpopov@cloudlinux.com> - 5.1.6-169
changelog:
  - Fix for hardened PHP
  - CVE-2022-31629: use stack instead of heap, check correct one var
  - CVE-2024-2756: fix __Host-/__Secure-cookie bypass due to partial
    CVE-2022-31629 fix


author: Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 5.1.6-171
changelog:
  - Security fixes
  - CVE-2024-8927: Fix bypass of cgi.force_redirect configuration
  - CVE-2024-8925: Fix data integrity violation while parsing multipart/form-data
    boundaries larger than the read buffer


author: Eduard Chiganov <echiganov@cloudlinux.com> - 5.1.6-32
changelog:
  - ALTPHP-1719: Remove deprecated sql bindings:
  - mysql50, mysql51, mysql55, mariadb55, mariadb100, mariadb101, percona55, percona56.


author: Joe Orton <jorton@redhat.com> 1:1.4.9-2
changelog:
  - update to 1.4.9 (thanks to Remi Collet, #183359)
  - package /usr/share/pear/.pkgxml (#190252)
  - update to XML_RPC-1.4.8
  - bundle the v3.0 LICENSE file


author: Joe Orton <jorton@redhat.com> 1:1.4.11-3
changelog:
  - use BuildArch not BuildArchitectures (#226925)
  - fix to use preferred BuildRoot (#226925)
  - strip more buildroot-relative paths from *.reg
  - force correct gpg path in default pear.conf


author: Remi Collet <Fedora@FamilleCollet.com> 1:1.6.2-1
changelog:
  - update to 1.6.2
  - remove patches merged upstream
  - Fix : "pear install" hangs on non default channel (#283401)


author: Tim Jackson <rpm@timj.co.uk> 1:1.7.1-2
changelog:
  - Set cfg_dir to be %{_sysconfdir}/pear (and own it)
  - Update install-pear.php script
  - Add %pear_cfgdir and %pear_wwwdir macros


author: Remi Collet <Fedora@FamilleCollet.com> 1:1.9.2-1
changelog:
  - update to 1.9.2 (bug + security fix)
  http://pear.php.net/advisory-20110228.txt
  - update Console_Getopt to 1.3.0
  - don't require php-devel (#657812)
  - update install-pear.php


author: Remi Collet <Fedora@FamilleCollet.com> 1:1.9.2-3
changelog:
  - move %{pear_docdir} to %{_docdir}/pear
  https://fedorahosted.org/fpc/ticket/69
  - update Console_Getopt to 1.3.1 (no change)


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1-3
changelog:
  - extension Auth_SASL updated from 1.0.6 to 1.1.0
  - extension Mail updated from 1.2.0 to 1.4.1
  - extension Mail_Mime updated from 1.8.9 to 1.10.1
  - extension Net_SMTP updated from 1.6.2 to 1.8.0
  - extension Mail_mimeDecode updated from 1.5.5 to 1.5.6
  - extension Net_Socket updated from 1.0.24 to 1.2.2
  - extension Net_Sieve 1.4.1 added


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1-10
changelog:
  - move sources for all alt-php to single git project
  - extension File_MARC 1.2.0 added
  - extension Structures_LinkedList 0.2.2 added


author: Sergey Fokin <sfokin@cloudlinux.com> 1-12
changelog:
  - update File_MARC to 1.3.0
  - update Mail_Mime to 1.10.2
  - update Net_IDNA2 to 0.2.0
  - update Net_SMTP to 1.8.1
  - update Net_Sieve to 1.4.4


author: Anatholy Scryabin <ascryabin@cloudlinux.com> 1-13
changelog:
  - update File_MARC to 1.4.1
  - update Mail_Mime to 1.10.11
  - update Net_SMTP to 1.10.0
  - update Net_Sieve to 1.4.5


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1-12
changelog:
  - APM downgraded from 1.1.0beta1 to 1.1.0RC2
  - doublemetaphone updated from 1.0.0 to 1.0.1
  - igbinary updated from 1.1.1 to 1.2.1
  - xdebug updated from 2.2.4 to 2.2.5


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1-12.el6
changelog:
  - APM downgraded from 1.1.0beta1 to 1.1.0RC2
  - doublemetaphone updated from 1.0.0 to 1.0.1
  - igbinary updated from 1.1.1 to 1.2.1
  - xdebug updated from 2.2.4 to 2.2.5
  -


author: Eugene Zamriy <ezamriy@cloudlinux.com> 1-19
changelog:
  - lzf updated from 1.6.2 to 1.6.3
  - timezonedb updated from 2015.4 to 2015.7
  - gnupg-1.3.6 added to builtin modules


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-45
changelog:
  - Moved igbinary to separate package
  - Moved memcache to separate package
  - Moved redis to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-47
changelog:
  - Moved timezonedb to separate package
  - Moved imagick to separate package
  - Added dependency to new xdebug extension in separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-51
changelog:
  - ALTPHP-1946: Moved bitset to separate package
  - ALTPHP-1948: Moved geoip to separate package
  - ALTPHP-1950: Moved inotify to separate package


author: Anton Volkov <avolkov@cloudlinux.com> 5.2.17-5
changelog:
  - install additional ini files (for extensions) to php.d.all directory (instead of php.d)
  - create symlink /opt/alt/php51/etc/php.d -> /etc/cl.php.d/alt-php52


author: Dmitry Kasyanov <dkasyanov@cloudlinux.com> 5.2.17-36
changelog:
  - enable t1lib build
  - build sockets as shared extension
  - add paches for CVE-2013-4248 and CVE-2013-6420


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.2.17-65
changelog:
  - add patches for bugs 69720 (https://bugs.php.net/bug.php?id=69720) and 70433 (https://bugs.php.net/bug.php?id=70433)
  - LSAPI: initialize empty sa_mask
  - fix Hardened tests


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.2.17-77
changelog:
  - add HardenedPHP patches:
  -   bug 64343: PharData::extractTo fails for tarball created by BSD tar
  -     https://bugs.php.net/bug.php?id=64343
  -   security bug #71039: exec functions ignore length but look for NULL termination
  -     https://bugs.php.net/bug.php?id=71039
  -   security bug #71323: Output of stream_get_meta_data can be falsified by its input
  -     https://bugs.php.net/bug.php?id=71323
  -   security bug #71354: Heap corruption in tar/zip/phar parser.
  -     https://bugs.php.net/bug.php?id=71354
  -   security bug #71391: NULL Pointer Dereference in phar_tar_setupmetadata()
  -     https://bugs.php.net/bug.php?id=71391
  -   security bug #71459: Integer overflow in iptcembed()
  -     https://bugs.php.net/bug.php?id=71459
  -   security bug #71488: Stack overflow when decompressing tar archives
  -     https://bugs.php.net/bug.php?id=71488
  -   security bug CVE-2015-5590: Buffer overflow and stack smashing error in phar_fix_filepath
  -     https://bugs.php.net/bug.php?id=69923


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.2.17-78
changelog:
  - add HardenedPHP patches:
  - security bug #71587: Use-After-Free / Double-Free in WDDX Deserialize
  https://bugs.php.net/bug.php?id=71587
  - security bug #71498: Out-of-Bound Read in phar_parse_zipfile()
  https://bugs.php.net/bug.php?id=71498


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.2.17-78.el6
changelog:
  - add HardenedPHP patches:
  - 	* security bug #71587: Use-After-Free / Double-Free in WDDX Deserialize
  - 	  https://bugs.php.net/bug.php?id=71587
  - 	* security bug #71498: Out-of-Bound Read in phar_parse_zipfile()
  - 	  https://bugs.php.net/bug.php?id=71498


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.2.17-79
changelog:
  - ALTPHP-141: backported patches
  -     - security bug 71860: Invalid memory write in phar on filename with \0 in name
  -       https://bugs.php.net/bug.php?id=71860
  -     - security bug 71798: Integer Overflow in php_raw_url_encode
  -       https://bugs.php.net/bug.php?id=71798
  - ALTPHP-135: execute "cagefsctl --setup-cl-alt" command only once per alt-php
  - group installation/update to speed up the installation process


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.2.17-80
changelog:
  - add HardenedPHP patches for:
  -   * security bug 72099: xml_parse_into_struct segmentation fault (CVE-2016-4539)
  -     https://bugs.php.net/bug.php?id=72099
  -   * security bug 72061: Out-of-bounds reads in zif_grapheme_stripos with negative offset (CVE-2016-4540, CVE-2016-4541)
  -     https://bugs.php.net/bug.php?id=72061
  -   * security bug 71912: libgd: signedness vulnerability (CVE-2016-3074)
  -     https://bugs.php.net/bug.php?id=71912
  -   * security bug 72094: Out of bounds heap read access in exif header processing (CVE-2016-4542, CVE-2016-4543, CVE-2016-4544)
  -     https://bugs.php.net/bug.php?id=72094
  -   * security bug 72093: bcpowmod accepts negative scale and corrupts _one_ definition (CVE-2016-4537, CVE-2016-4538)
  -     https://bugs.php.net/bug.php?id=72093


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.2.17-82
changelog:
  - add HardenedPHP patches:
  -     bug49910: (phar) no support for ././@LongLink for long filenames in phar tar support
  -     https://bugs.php.net/49910
  -     bug61065: (phar) Secunia SA44335 - arbitrary code execution
  -     https://bugs.php.net/61065
  -     CVE-2016-4343: (phar) uninitialized pointer in phar_make_dirstream()
  -     https://bugs.php.net/71331
  -     CVE-2016-5093: (intl) get_icu_value_internal out-of-bounds read
  -     https://bugs.php.net/72241
  -     CVE-2016-5094: (core) integer overflow in php_html_entities
  -     https://bugs.php.net/72135
  -     CVE-2016-5096: (core) integer underflow / arbitrary null write in fread/gzread
  -     https://bugs.php.net/72114


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.2.17-85
changelog:
  - add Hardened PHP patches:
  -   CVE-2016-5399: Inadequate error handling in bzread()
  -   http://bugs.php.net/72613
  -   CVE-2016-6288: php_url_parse_ex() buffer overflow read
  -   http://bugs.php.net/70480
  -   CVE-2016-6289: Stack-based buffer overflow vulnerability in virtual_file_ex
  -   http://bugs.php.net/72513
  -   CVE-2016-6290: Use After Free in unserialize() with Unexpected Session Deserialization
  -   http://bugs.php.net/72562
  -   CVE-2016-6291: Out of bound read in exif_process_IFD_in_MAKERNOTE
  -   http://bugs.php.net/72603
  -   CVE-2016-6294: locale_accept_from_http out-of-bounds access
  -   http://bugs.php.net/72533
  -   CVE-2015-8879: PHP segfaults when accessing nvarchar(max) defined columns
  -   http://bugs.php.net/69975
  -   CVE-2016-6296: heap-buffer-overflow (write) simplestring_addn simplestring.c
  -   http://bugs.php.net/72606
  -   CVE-2016-6297: Stack-based buffer overflow vulnerability in php_stream_zip_opener
  -   http://bugs.php.net/72520


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.2.17-86
changelog:
  - update mail-header patch
  - ALTPHP-212: Implement additional code to mail.c to track sending file path (X-PHP-Filename)
  - add HardenedPHP patches:
  -   security bug #72837: integer overflow in bzdecompress caused heap corruption (bz2)
  -   http://bugs.php.net/72837
  -   security bug #72681: PHP Session Data Injection Vulnerability (core)
  -   http://bugs.php.net/72681
  -   security bug #72807: integer overflow in curl_escape caused heap corruption (curl)
  -   http://bugs.php.net/72807
  -   security bug #72697: select_colors write out-of-bounds (gd)
  -   http://bugs.php.net/72697
  -   security bug #72730: imagegammacorrect allows arbitrary write access (gd)
  -   http://bugs.php.net/72730
  -   security bug #72836: integer overflow in base64_decode caused heap corruption (standard)
  -   http://bugs.php.net/72836
  -   security bug #72849: integer overflow in urlencode caused heap corruption (standard)
  -   http://bugs.php.net/72849
  -   security bug #72850: integer overflow in php_uuencode caused heap corruption (standard)
  -   http://bugs.php.net/72850
  -   security bug #72771: ftps:// wrapper is vulnerable to protocol downgrade attack (streams)
  -   http://bugs.php.net/72771
  -   security bug #72749: wddx_deserialize allows illegal memory access (wddx)
  -   http://bugs.php.net/72749
  -   security bug #72750: wddx_deserialize null dereference (wddx)
  -   http://bugs.php.net/72750
  -   security bug #72790: wddx_deserialize null dereference with invalid xml (wddx)
  -   http://bugs.php.net/72790
  -   security bug #72799: wddx_deserialize null dereference in php_wddx_pop_element (wddx)
  -   http://bugs.php.net/72799


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.2.17-87
changelog:
  - add HardenedPHP patches:
  -   CVE-2016-7413: wddx_deserialize use-after-free
  -   CVE-2016-7414: Out of bound when verify signature of zip phar in phar_parse_zipfile
  -   CVE-2016-7416: SEH buffer overflow msgfmt_format_message
  -   CVE-2016-7418: Out-Of-Bounds Read in php_wddx_push_element of wddx.c


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.2.17-90
changelog:
  - add HardenedPHP patches
  -   security bug 73150: missing NULL check in dom_document_save_html
  -   security bug 73218: stack-buffer-overflow through "ResourceBundle" methods
  -   security bug 73208: integer overflow in imap_8bit caused heap corruption
  -   security bug 73082: string length overflow in mb_encode_* function
  -   security bug 73174: heap overflow in php_pcre_replace_impl
  -   security bug 73017: memory corruption in wordwrap function
  -   security bug 73073: CachingIterator null dereference when convert to string
  -   security bug 73293: NULL pointer dereference in SimpleXMLElement::asXML()


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.2.17-91
changelog:
  - add HardenedPHP patches:
  -   security bug 73356: crash in bzcompress function
  -   CVE-2016-8670: Stack Buffer Overflow in GD dynamicGetbuf
  -   security bug 72482: Illegal write/read access caused by gdImageAALine overflow
  -   security bug 72696: imagefilltoborder stackoverflow on truecolor images
  -   security bug 73418: Integer Overflow in "_php_imap_mail" leads Heap Overflow
  -   security bug 73144: Use-after-free in ArrayObject Deserialization


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.2.17-92
changelog:
  - add HardenedPHP patches:
  -   security bug 73452: Segfault (Regression for #69152)
  -   security bug 73631: Invalid read when wddx decodes empty boolean element
  - ALTPHP-271: Fixed bug 71465: PHAR doesn't know about litespeed


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.2.17-94
changelog:
  - add HaredenedPHP patches:
  -   bug 73764: Crash while loading hostile phar archive (CVE-2016-10159)
  -   bug 73768: Memory corruption when loading hostile phar (CVE-2016-10160)
  -   bug 73825: Heap out of bounds read on unserialize in finish_nested_data() (CVE-2016-10161)
  -   bug 68447: grapheme_extract take an extra trailing character
  -   bug 73737: FPE when parsing a tag format (CVE-2016-10158)
  -   bug 73773: Seg fault when loading hostile phar
  -   bug 73868: Fix DOS vulnerability in gdImageCreateFromGd2Ctx()
  -   bug 73869: Signed Integer Overflow gd_io.c


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.2.17-96
changelog:
  - add HaredenedPHP patches:
  -   Improve check for :memory: pseudo-filename in SQlite (CVE-2012-3365)
  -   bug 70081: SoapClient info leak / null pointer dereference via multiple type confusions (CVE-2015-8835)
  -   Added check that soap.wsdl_cache_dir conforms to open_basedir (CVE-2013-1635)
  -   bug 70350: ZipArchive::extractTo allows for directory traversal when creating directories (CVE-2014-9767)
  -   Disabled external entities loading (CVE-2013-1643, CVE-2013-1824)
  -   bug 72627: Memory Leakage In exif_process_IFD_in_TIFF (CVE-2016-7128)


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.2.17-106
changelog:
  - add conflicts with alt-php-config and lvemanager
  - alt-phpXY-intl requires alt-libcu >= 57.1
  - ALTPHP-380: added user.ini lookup in home dir
  - ALTPHP-380: changed CRIU messaging


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.2.17-112
changelog:
  - bug 75571: Potential infinite loop in gdImageCreateFromGifCtx
  - bug 74782: Reflected XSS in .phar 404 page


author: Ivan Danilov <idanilov@cloudlinux.com> - 5.2.17-121
changelog:
  - ALTPHP-498: Fixed ability to override parameters with ini_set() that
    were defined via php_value
  - ALTPHP-499: Fixed patch for LiteSpeed SIGTERM cleanup


author: Ivan Danilov <idanilov@cloudlinux.com> - 5.2.17-125
changelog:
  - Fixed bug #74385 Locale::parseLocale() broken with some arguments
  - ALTPHP-510: Backport patches from 7.1.18 and 7.2.6 updates


author: Ivan Danilov <idanilov@cloudlinux.com> - 5.2.17-129
changelog:
  - Fix for bug #76505 (array_merge_recursive() is duplicating sub-array keys)
  - Fix for bug #76532 (excessive memory usage in mb_strimwidth)
  - Fix for bug #76548 pg_fetch_result did not fetch the next row
  - Fix for bug #74670
  - Fix for bug #76488 Memory leak when fetching a BLOB field
  - Fix for bug #75402 Possible Memory Leak using PDO::CURSOR_SCROLL option
  - Fix for incorrect restoring of LDFLAGS
  - Fix for bug #72443: Generate enabled extension
  - Fix for arginfo for bzcompress
  - Fix for #68175: RegexIterator pregFlags are NULL instead of 0
  - Fix for #68825: Exception in DirectoryIterator::getLinkTarget()
  - Fix for #55146: iconv_mime_decode_headers() skips some headers
  - Fix for #63839: iconv_mime_decode_headers function is skipping headers
  - Fix for #60494: iconv_mime_decode does ignore special characters
  - Fix for #68180: iconv_mime_decode can return extra characters in a header


author: Ivan Danilov <idanilov@cloudlinux.com> - 5.2.17-130
changelog:
  - backported fix for #66828: iconv_mime_encode Q-encoding longer than it should be
  - backported fix for bug #73457
  - backported fix for #74454: Wrong exception being thrown when using ReflectionMethod
  - backported fix for bug #74764 and add a test case
  - backported fix for #75273: php_zlib_inflate_filter() may not update bytes_consumed
  - backported fix for #75696: posix_getgrnam fails to print details of group
  - backported fix for 76480: Use curl_multi_wait() so that timeouts are respected
  - backported fix for bug #76800 (foreach inconsistent if array modified during loop)
  - backported fix for #76886: Can't build xmlrpc with expat
  - backported fix for bug #76901


author: Ivan Danilov <idanilov@cloudlinux.com> - 5.2.17-133
changelog:
  - Fix bug #77242: heap out of bounds read in xmlrpc_decode()
  - Fix bug #77247: heap buffer overflow in phar_detect_phar_fname_ext
  - Fix bug #77270: imagecolormatch Out Of Bounds Write on Heap
  - Fix bug #77371: heap buffer overflow in mb regex functions - compile_string_node
  - Fix bug #77380: Global out of bounds read in xmlrpc base64 code


author: Ivan Danilov <idanilov@cloudlinux.com> - 5.2.17-139
changelog:
  - Fix bug #77390 (feof might hang on TLS streams in case of fragmented TLS records)
  - Fix bug #77396 - Null Pointer Dereference in phar_create_or_parse_filename
  - Fix #77431 SplFileInfo::__construct() accepts NUL bytes
  - Fixed bug #77494 (Disabling class causes segfault on member access)
  - Fix bug #77540 - Invalid Read on exif_process_SOFn
  - Fix #77546 iptcembed broken function
  - Fix bug #77563 - Uninitialized read in exif_process_IFD_in_MAKERNOTE
  - Fix bug #77586 - phar_tar_writeheaders_int() buffer overflow
  - Fix bug #77630 - safer rename() procedure
  - LSAPI sem_timedwait synchronization fixed


author: Ivan Danilov <idanilov@cloudlinux.com> - 5.2.17-144
changelog:
  - Fixed bug #76717
  - Fix #77024: SplFileObject::__toString() may return array
  - Fixed bug #77697 (Crash on Big_Endian platform)
  - Fix #77700: Writing truecolor images as GIF ignores interlace flag
  - Fixed bug #77742
  - Fixed bug #77765
  - Fixed bug #77945


author: Ivan Danilov <idanilov@cloudlinux.com> - 5.2.17-155
changelog:
  - Fix #77946: Bad cURL resources returned by curl_multi_info_read
  - Fix #78333: Exif crash (bus error) due to wrong alignment and invalid cast


author: Ivan Danilov <idanilov@cloudlinux.com> - 5.2.17-158
changelog:
  - Fix #76342: file_get_contents waits twice specified timeout
  - Fix #76859 stream_get_line skips data if used with data-generating filter


author: Ivan Danilov <idanilov@cloudlinux.com> - 5.2.17-160
changelog:
  - Fix bug #79082: Files added to tar with Phar::buildFromIterator have all-access permissions (CVE-2020-7063)
  - Fix bug #79099: OOB read in php_strip_tags_ex (CVE-2020-7059)


author: Nikolai Mikhno <nmikhno@cloudlinux.com> - 5.2.17-166
changelog:
  - Fix bug #61597: SXE properties may lack attributes and content
  - Fix bug #74940: DateTimeZone loose comparison always true
  - Fix bug #79200: Some iconv functions cut Windows-1258
  - Fix bug #79296: ZipArchive::open fails on empty file (libzip 1.6.0)
  - Fix bug #79330: shell_exec() silently truncates after a null byte
  - Fix bug #79364: When copy empty array, next key is unspecified
  - Fix bug #79396: setting Date/Time during a forward DST transition
  - Fix bug #79410: system() swallows last chunk if it is exactly 4095 bytes without newline
  - Fix bug #79465: OOB Read in urldecode() (CVE-2020-7067)


author: Nikolai Mikhno <nmikhno@cloudlinux.com> - 5.2.17-167
changelog:
  - Fix bug #78221: DOMNode::normalize() doesn't remove empty text nodes
  - Fix bug #78875: Long variables cause OOM and temp files are not cleaned (CVE-2019-11048)
  - Fix bug #78876: Long variables in multipart/form-data cause OOM and temp files are not cleaned (CVE-2019-11048)
  - Fix bug #79528: Different object of the same xml between 7.4.5 and 7.4.4


author: Nikolai Mikhno <nmikhno@cloudlinux.com> - 5.2.17-171
changelog:
  - Fix bug #70362: Can't copy() large 'data://' with open_basedir
  - Fix bug #73527: Invalid memory access in php_filter_strip
  - Fix bug #74267: segfault with streams and invalid data
  - Fix bug #79787: mb_strimwidth does not trim string
  - Fix bug #79877: getimagesize function silently truncates after a null byte


author: Daniil Leonov <dleonov@cloudlinux.com> - 5.2.17-175
changelog:
  - Fix bug #73809: Phar Zip parse crash - mmap fail
  - Fix bug #80366: Potential issue in ext/standard/iptc.c: Return Value Not Checked


author: Eduard Abdullin <eabdullin@cloudlinux.com> - 5.2.17-178
changelog:
  - ALTPHP-1053: Update move_override_ini patch
  - ALTPHP-1038: Update litespeed log patch
  - ALTPHP-1082: Add alt-php-pdo requires for alt-php-firebird and alt-php-sqlite


author: Eduard Abdullin <eabdullin@cloudlinux.com> - 5.2.17-182
changelog:
  - ALTPHP-1164: Update hardened php
  - ALTPHP-1154: Fix libxml requires
  - ALTPHP-1156: Get rid of manipulations with enabling extensions (mysqli.so) in default.ini


author: Nikita Ivanov <nivanov@cloudlinux.com> - 5.2.17-188
changelog:
  - Fix for Harden PHP
  - CVE-2021-21704: fix errors in pdo_firebird extension
  - CVE-2021-21705: add user name and password validation in filters module


author: Pavel Mayorov <pmayorov@cloudlinux.com> - 5.2.17-189
changelog:
  - Fix for harden PHP
  - CVE-2022-31628: Fix potential infinite recursion in phar wrapper when using quine gzip file
  - CVE-2022-31629: Add cookie integrity validation


author: Nikita Ivanov <nivanov@cloudlinux.com> - 5.2.17-194
changelog:
  - Fix for hardened PHP
  - CVE-2023-3823: Fix external entity loading in XML without enabling by
    sanitizing libxml2 globals before parsing
  - CVE-2023-3824: Fix buffer mismanagement in phar_dir_read()


author: Dmitriy Popov <dpopov@cloudlinux.com> - 5.2.17-198
changelog:
  - Fix for hardened PHP
  - CVE-2024-2756: fix __Host-/__Secure-cookie bypass due to partial
    CVE-2022-31629 fix


author: Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 5.2.17-203
changelog:
  - Security fixes
  - CVE-2024-11236: prevent integer overflow in quoters causing OOB writes
  - CVE-2024-11234: fix HTTP fulluri CRLF injection
  - CVE-2024-11233: fix single byte overread with convert.quoted-printable-decode
    filter


author: Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 5.2.17-206
changelog:
  - Security fixes
  - CVE-2018-19935: fix null pointer dereference in imap_mail
  - CVE-2018-14883: fix int overflow leading to heap-based buffer over-read in
    exif.c
  - CVE-2018-20783: fix a buffer over-read in PHAR reading functions


author: Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 5.2.17-207
changelog:
  - Security fixes
  - CVE-2018-17082: fix cross-site scripting in apache2handler sapi
  - CVE-2018-19518: disable rsh/ssh functionality in imap to prevent argument
    injection


author: Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 5.2.17-208
changelog:
  - Security fixes
  - CVE-2019-11034: fix possible infoleak or crush caused by read past allocated
    buffer in exif_process_IFD_TAG()
  - CVE-2019-9025: fix possible memcpy() execution with negative argument in
    mb_split()


author: Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 5.2.17-210
changelog:
  - Security fixes
  - CVE-2019-11035: fix potential infoleak or crash via read past allocated buffer
    in exif_iif_add_value()
  - CVE-2019-11036: fix infoleak of crash via read past allocated buffer in
    exif_process_IFD_TAG()


author: Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 5.2.17-211
changelog:
  - Security fixes
  - CVE-2019-9022: fix DNS response parsing
  - CVE-2019-9023: complete fix heap-based buffer over-read in mbstring regular
    expression functions when supplied with invalid multibyte data


author: Matthias Saou <http://freshrpms.net/> 4.x.x_0.9.3-3
changelog:
  - Include buffer overflow patch from zoeloelip, this should fix the real
    problem that wasn't in fact solved with the removal of _smp_mflags.
  - Add explicit shm_and_disk defaults to the ini file.


author: Matthias Saou <http://freshrpms.net/> 4.x.x_0.9.3-4
changelog:
  - Re-add %{?_smp_mflags}, as this was a false alarm.
  - Force SEM to FCNTL as the IPC version is buggy on x86_64 SMP at least.


author: Matthias Saou <http://freshrpms.net/> 5.1.x_0.9.3-0.1
changelog:
  - Update to 5.1.x compatible snapshot.
  - Will try to make re2c available in Extras in order to build require it.


author: Matthias Saou <http://freshrpms.net/> 5.1.x_0.9.5-0.2.beta2
changelog:
  - Rework heavily the API version requirement detection, should work with
    chroots builds where PHP isn't installed outside.
  - Replace the CC way of getting the API version with php -i output.


author: Matthias Saou <http://freshrpms.net/> 5.1.4_0.9.5-0.3.rc1
changelog:
  - Update to 0.9.5-rc1.
  - Enable shared-memory, sessions and content-caching (#201319).
  - Remove both patches of fixes, merged upstream.
  - Change from creating a full eaccelerator.ini to using the included one with
    path substitutions and a patch to change default values.


author: Matthias Saou <http://freshrpms.net/> 5.1.6_0.9.5-0.4.rc1
changelog:
  - Rebuild for PHP 5.1.6, eA still checks the exact PHP version it seems :-(
  - Put "Requires: php = %{php_version}" back to avoid broken setups if/when
    PHP gets updated.


author: Matthias Saou <http://freshrpms.net/> 1:0.9.5.1-1
changelog:
  - Update to 0.9.5.1.
  - Major spec file cleanup, based on current PHP packaging guidelines.
  - Set Epoch to 1, since the proper versionning is lower than previously :-(
  - Remove two upstreamed patches (php52fix and trac187).
  - Use sed instead of perl for the config file changes.
  - No longer use dist because we want to use the same package on F-n and n+1.


author: Matthias Saou <http://freshrpms.net/> 1:0.9.5.1-3
changelog:
  - Include patch to skip the exact PHP version check, we'll rely on our
    package's php_zend_api version requirement to "get it right".


author: Matthias Saou <http://freshrpms.net/> 1:0.9.5.3-2
changelog:
  - Update default cache dir to be ghosted and take care of creating it and
    changing default ownership in the %post scriplet (fixes #443407).


author: Remi Collet <Fedora@FamilleCollet.com> - 1:0.9.6-0.1.svn358
changelog:
  - rebuild for new PHP 5.3.0 ABI (20090626)
  - update to latest SVN snapshot
  - remove shared-memory, sessions and content-caching options


author: Matthias Saou <http://freshrpms.net/> 1:0.9.6.1-7
changelog:
  - Add missing tmpwatch requirement (#711236).
  - Stop using macros for simple commands, following recent guidelines changes.


author: Eduard Chiganov <echiganov@cloudlinux.com> - 5.2.17-39
changelog:
  - ALTPHP-1719: Remove deprecated sql bindings:
  - mysql50, mysql51, mysql55, mariadb55, mariadb100, mariadb101, percona55, percona56.
  - ALTPHP-1769: Build for RHEL 9.


author: Sergey Fokin <sfokin@cloudlinux.com> - 3-11
changelog:
  - add mysqlnd dependency for pdo_mysql for alt-php83
  - replace and backup ini with new if it was changed
  - rebuild alt-php.ini in posttrans section for alt-php >= 83


author: Eduard Chiganov <echiganov@cloudlinux.com> - 3-12
changelog:
  - ALTPHP-1719: Remove deprecated sql bindings:
  - mysql51, mysql55, mariadb55, mariadb100, mariadb101, percona55, percona56.


author: - Chris Chabot <chabotc@xs4all.nl> - 3.0.10-3
changelog:
  - Renamed to php-pecl-apc and added provides php-apc
  - Removed php version string from the package version


author: Tim Jackson <rpm@timj.co.uk> - 3.0.19-1
changelog:
  - Update to 3.0.19
  - Fix PHP Zend API/ABI dependencies to work on EL-4/5
  - Fix "License" tag
  - Fix encoding of "NOTICE" file
  - Add registration via PECL


author: Remi Collet <Fedora@FamilleCollet.com> - 3.1.3p1-1
changelog:
  - update to 3.1.3 patch1 (beta, for PHP 5.3 support)
  - add test suite (disabled for http://pecl.php.net/bugs/bug.php?id=16793)
  - add use_request_time, lazy_classes, lazy_functions options (apc.ini)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 3.1.9-1
changelog:
  - update to 3.1.9 (bugfix, stable) (#662655)
  - create -devel subpackage with header files
  - ship apc.php for easier referral in the config files


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1-76
changelog:
  - APM upgraded from 1.1.0beta1 to 1.1.0RC2
  - doublemetaphone updated from 1.0.0 to 1.0.1
  - igbinary updated from 1.1.1 to 1.2.1
  - memcached updated from 2.1.0 to 2.2.0
  - mongo updated from 1.5.1 to 1.5.7
  - timezonedb updated from 2014.2 to 2014.9
  - xdebug updated from 2.2.4 to 2.2.5
  - yaf updated from 2.2.9 to 2.3.2
  - ZendOpcache updated from 7.0.2 to 7.0.3
  - rar-3.0.2 added to builtin modules


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1-80
changelog:
  - mongo updated from 1.5.7 to 1.6.0
  - stomp updated from 1.0.5 to 1.0.6
  - timezonedb updated from 2014.9 to 2015.1
  - xdebug updated from 2.2.5 to 2.2.7
  - ZendOpcache updated from 7.0.3 to 7.0.4


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1-80.el6
changelog:
  - mongo updated from 1.5.7 to 1.6.0
  - stomp updated from 1.0.5 to 1.0.6
  - timezonedb updated from 2014.9 to 2015.1
  - xdebug updated from 2.2.5 to 2.2.7
  - ZendOpcache updated from 7.0.3 to 7.0.4
  -


author: Eugene Zamriy <ezamriy@cloudlinux.com> 1-86
changelog:
  - lzf updated from 1.6.2 to 1.6.3
  - timezonedb updated from 2015.4 to 2015.7
  - yaf updated from 2.3.2 to 2.3.5


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-121
changelog:
  - Updated gnupg to 1.5.1
  - Updated uploadprogress to 1.1.4
  - Updated rar to 4.2.0
  - ALTPHP-1509: alt-ImageMagick is linked statically now


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-123
changelog:
  - Moved igbinary to separate package
  - Moved memcache to separate package
  - Moved memcached to separate package
  - Moved geos to separate package
  - Moved redis to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-129
changelog:
  - ALTPHP-1788: Moved http to separate package
  - ALTPHP-1790: Moved msgpack to separate package
  - ALTPHP-1796: CL9 support


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-131
changelog:
  - ALTPHP-1825: Moved gnupg to separate package
  - ALTPHP-1827: Moved stats to separate package
  - ALTPHP-1828: Moved pdflib to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-132
changelog:
  - ALTPHP-1935: Moved xhprof to separate package
  - ALTPHP-1946: Moved bitset to separate package
  - ALTPHP-1948: Moved geoip to separate package
  - ALTPHP-1949: Moved htscanner to separate package
  - ALTPHP-1950: Moved inotify to separate package


author: Eduard Chiganov <echiganov@cloudlinux.com> 2.1.0-1
changelog:
  - ALTPHP-1654: Newer version of memcached for alt-php 74-82.
  - EA4D-454: Create alt-phpXX-pecl-memcached.


author: Anton Volkov <avolkov@cloudlinux.com> 5.3.12-3
changelog:
  - /etc/cagefs/alternatives.conf has been moved to /etc/cl.alt/alternatives.conf
  - execute cagefsctl --setup-cl-alt in posttrans
  - execute cagefsctl --remove-cl-alt in postun
  - add / remove lines of file alternatives.conf on install/update/uninstall of the package
  - removed httpd from requires


author: Anton Volkov <avolkov@cloudlinux.com> 5.3.12-5
changelog:
  - install additional ini files (for extensions) to php.d.all directory (instead of php.d)
  - create symlink /opt/alt/php53/etc/php.d -> /etc/cl.php.d/alt-php53


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.3.29-7
changelog:
  - disable firebird/interbase in CL7
  - fix db4 requires for CL7
  - remove redunant libmm-devel require
  - move /var/lib/php/session to /opt/alt/php55/var/lib/php/session


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.3.29-19
changelog:
  - add patches for bugs 69720 (https://bugs.php.net/bug.php?id=69720) and 70433 (https://bugs.php.net/bug.php?id=70433)
  - LSAPI: initialize empty sa_mask
  - fix Hardened PHP patches


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.3.29-28.el6
changelog:
  - add HardenedPHP patches:
  - 	* security bug #71587: Use-After-Free / Double-Free in WDDX Deserialize
  - 	https://bugs.php.net/bug.php?id=71587
  - 	* security bug #71498: Out-of-Bound Read in phar_parse_zipfile()
  - 	  https://bugs.php.net/bug.php?id=71498


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.3.29-32
changelog:
  - add HardenedPHP patches:
  -   CVE-2016-4343: (phar) uninitialized pointer in phar_make_dirstream()
  -   https://bugs.php.net/71331
  -   CVE-2016-5093: (intl) get_icu_value_internal out-of-bounds read
  -   https://bugs.php.net/72241
  -   CVE-2016-5094: (core) integer overflow in php_html_entities
  -   https://bugs.php.net/72135
  -   CVE-2016-5096: (core) integer underflow / arbitrary null write in fread/gzread
  -   https://bugs.php.net/72114


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.3.29-33
changelog:
  - add Hardened PHP patches:
  -   CVE-2015-6835: Use after free vulnerability in session deserializer
  -   https://bugs.php.net/70219
  -   security bug 65481: Shutdown segfault due to serialize
  -   https://bugs.php.net/65481


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.3.29-35.1
changelog:
  - update mail-header patch
  - ALTPHP-212: Implement additional code to mail.c to track sending file path (X-PHP-Filename)


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.3.29-36
changelog:
  -   security bug #72837: integer overflow in bzdecompress caused heap corruption (bz2)
  -   http://bugs.php.net/72837
  -   security bug #72681: PHP Session Data Injection Vulnerability (core)
  -   http://bugs.php.net/72681
  -   security bug #72807: integer overflow in curl_escape caused heap corruption (curl)
  -   http://bugs.php.net/72807
  -   security bug #72838: Integer overflow lead to heap corruption in sql_regcase (ereg)
  -   http://bugs.php.net/72838
  -   security bug #72697: select_colors write out-of-bounds (gd)
  -   http://bugs.php.net/72697
  -   security bug #72730: imagegammacorrect allows arbitrary write access (gd)
  -   http://bugs.php.net/72730
  -   security bug #72836: integer overflow in base64_decode caused heap corruption (standard)
  -   http://bugs.php.net/72836
  -   security bug #72848: integer overflow in quoted_printable_encode caused heap corruption (standard)
  -   http://bugs.php.net/72848
  -   security bug #72849: integer overflow in urlencode caused heap corruption (standard)
  -   http://bugs.php.net/72849
  -   security bug #72850: integer overflow in php_uuencode caused heap corruption (standard)
  -   http://bugs.php.net/72850
  -   security bug #72771: ftps:// wrapper is vulnerable to protocol downgrade attack (streams)
  -   http://bugs.php.net/72771
  -   security bug #72749: wddx_deserialize allows illegal memory access (wddx)
  -   http://bugs.php.net/72749
  -   security bug #72750: wddx_deserialize null dereference (wddx)
  -   http://bugs.php.net/72750
  -   security bug #72790: wddx_deserialize null dereference with invalid xml (wddx)
  -   http://bugs.php.net/72790
  -   security bug #72799: wddx_deserialize null dereference in php_wddx_pop_element (wddx)
  -   http://bugs.php.net/72799


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.3.29-37
changelog:
  - add HardenedPHP patches:
  -   CVE-2016-7413: wddx_deserialize use-after-free
  -   CVE-2016-7414: Out of bound when verify signature of zip phar in phar_parse_zipfile
  -   CVE-2016-7416: SEH buffer overflow msgfmt_format_message
  -   CVE-2016-7417: Missing type check when unserializing SplArray
  -   CVE-2016-7418: Out-Of-Bounds Read in php_wddx_push_element of wddx.c


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.3.29-40
changelog:
  - add HardenedPHP patches
  -   security bug 73189: Memcpy negative size parameter php_resolve_path
  -   security bug 73150: missing NULL check in dom_document_save_html
  -   security bug 73284: heap overflow in php_ereg_replace function
  -   security bug 73218: stack-buffer-overflow through "ResourceBundle" methods
  -   security bug 73208: integer overflow in imap_8bit caused heap corruption
  -   security bug 73082: string length overflow in mb_encode_* function
  -   security bug 73174: heap overflow in php_pcre_replace_impl
  -   security bug 73276: crash in openssl_random_pseudo_bytes function
  -   security bug 73275: crash in openssl_encrypt function
  -   security bug 73017: memory corruption in wordwrap function
  -   security bug 73240: Write out of bounds at number_format
  -   security bug 73073: CachingIterator null dereference when convert to string
  -   security bug 73293: NULL pointer dereference in SimpleXMLElement::asXML()


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.3.29-41
changelog:
  - add HardenedPHP patches:
  -   security bug 73356: crash in bzcompress function
  -   CVE-2016-8670: Stack Buffer Overflow in GD dynamicGetbuf
  -   security bug 72482: Illegal write/read access caused by gdImageAALine overflow
  -   security bug 72696: imagefilltoborder stackoverflow on truecolor images
  -   security bug 73418: Integer Overflow in "_php_imap_mail" leads Heap Overflow
  -   security bug 73144: Use-after-free in ArrayObject Deserialization
  -   security bug 73192: parse_url return wrong hostname
  -   security bug 73331: NULL Pointer Dereference in WDDX Packet Deserialization with PDORow


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.3.29-42
changelog:
  - add HardenedPHP patches:
  -   security bug 73452: Segfault (Regression for #69152)
  -   security bug 73631: Invalid read when wddx decodes empty boolean element
  - ALTPHP-271: Fixed bug 71465: PHAR doesn't know about litespeed
  - Fixed bug 67587: Redirection loop on nginx with FPM


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.3.29-45
changelog:
  - add HaredenedPHP patches:
  -   bug 70014: openssl_random_pseudo_bytes() is not cryptographically secure (CVE-2015-8867)
  -   bug 70081: SoapClient info leak / null pointer dereference via multiple type confusions (CVE-2015-8835)
  -   bug 70121: unserialize() could lead to unexpected methods execution / NULL pointer deref (CVE-2015-8876)
  -   bug 70350: ZipArchive::extractTo allows for directory traversal when creating directories (CVE-2014-9767)
  -   bug 71906: AddressSanitizer: negative-size-param (-1) in mbfl_strcut (CVE-2016-4073)
  -   bug 72627: Memory Leakage In exif_process_IFD_in_TIFF (CVE-2016-7128)


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.3.29-46
changelog:
  - ALTPHP-313: Add to lsphp support for custom php.ini defined via .htaccess
  - ALTPHP-315: Remove mod_php provide


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.3.29-56
changelog:
  - add FPM build
  - AAP-176: Add correct exit from lve if the nproc limit is reached for php-fpm
  - Change lve log levels for php-fpm


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.3.29-63
changelog:
  - bug 75055 Out-Of-Bounds Read in timelib_meridian()
  - bug 72535 arcfour encryption stream filter crashes php


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.3.29-64
changelog:
  - ALTPHP-415: Fix MariaDB102 segfault
  - ALTPHP-420: update phpNN.dat files while installing alt-php
  - CVE-2016-5773: ZipArchive class Use After Free Vulnerability in PHP's GC algorithm and unserialize


author: Ivan Danilov <idanilov@cloudlinux.com> 5.3.29-73
changelog:
  - ALTPHP-450: Fix for Bug #71335 Type Confusion in WDDX Packet Deserialization
  - ALTPHP-451: Fix for CVE-2016-7478 Unserialize Exception object can lead to infinite loop


author: Ivan Danilov <idanilov@cloudlinux.com> 5.3.29-75
changelog:
  - ALTPHP-482: Fix for bug 75605 Dumpable FPM child processes allow bypassing opcache access controls


author: Ivan Danilov <idanilov@cloudlinux.com> - 5.3.29-87
changelog:
  - Fix for bug #76505 (array_merge_recursive() is duplicating sub-array keys)
  - Fix for bug #76532 (excessive memory usage in mb_strimwidth)
  - Fix for bug #76548 pg_fetch_result did not fetch the next row
  - Fix for bug #76488 Memory leak when fetching a BLOB field
  - Fix for #76665: SQLite3Stmt::bindValue() with SQLITE3_FLOAT doesn't juggle
  - Fix for bug #75402 Possible Memory Leak using PDO::CURSOR_SCROLL option
  - Fix for bug #76335 "link(): Bad file descriptor" with non-ASCII path
  - Fix for incorrect restoring of LDFLAGS
  - Fix for bug #72443: Generate enabled extension
  - Fix for arginfo for bzcompress
  - Fix for #68175: RegexIterator pregFlags are NULL instead of 0
  - Fix for #68825: Exception in DirectoryIterator::getLinkTarget()
  - Fix for #55146: iconv_mime_decode_headers() skips some headers
  - Fix for #63839: iconv_mime_decode_headers function is skipping headers
  - Fix for #60494: iconv_mime_decode does ignore special characters
  - Fix for #68180: iconv_mime_decode can return extra characters in a header
  - Fix for bug #76383 (array_map on $GLOBALS returns IS_INDIRECT)
  - Fix for bug #73342


author: Ivan Danilov <idanilov@cloudlinux.com> - 5.3.29-99
changelog:
  - Fix bug #51068 (glob:// do not support current path relative)
  - Fix bug #77390 (feof might hang on TLS streams in case of fragmented TLS records)
  - Fix bug #77396 - Null Pointer Dereference in phar_create_or_parse_filename
  - Fix #77431 SplFileInfo::__construct() accepts NUL bytes
  - Fixed bug #77494 (Disabling class causes segfault on member access)
  - Fix bug #77540 - Invalid Read on exif_process_SOFn
  - Fix #77546 iptcembed broken function
  - Fix bug #77563 - Uninitialized read in exif_process_IFD_in_MAKERNOTE
  - Fix bug #77586 - phar_tar_writeheaders_int() buffer overflow
  - Fix bug #77630 - safer rename() procedure
  - LSAPI sem_timedwait synchronization fixed


author: Ivan Danilov <idanilov@cloudlinux.com> - 5.3.29-100
changelog:
  - revert:
    - add /etc/cl.selector/symlinks.rules for CL
    - recreate handlers for Plesk/
  - Fix problem with /etc/cl.selector/symlinks.rules


author: Sergey Fokin <sfokin@cloudlinux.com> - 5.3.29-101
changelog:
  - add all extensions in default.ini and disable by default except mysqli.so
  - update plesk php hadlers if add new extensions in default.ini
  - set "serialize_precision = 17" in php.ini


author: Ivan Danilov <idanilov@cloudlinux.com> - 5.3.29-105
changelog:
  - Fixed bug #50020 (DateInterval:createDateFromString() silently fails)
  - Fixed bug #76717
  - Fix #77024: SplFileObject::__toString() may return array
  - Fixed bug #77664 (Segmentation fault when using undefined constant in custom wrapper)
  - Fix bug #77677: WCOREDUMP not available on all systems
  - Fixed bug #77697 (Crash on Big_Endian platform)
  - Fix #77700: Writing truecolor images as GIF ignores interlace flag
  - Fixed bug #77742
  - Fixed bug #77765
  - Fix #77921: static.php.net doesn't work anymore
  - Fix bug #77934 (php-fpm kill -USR2 not working)
  - Fix #77943: imageantialias($image, false); does not work
  - Fix #77944: Wrong meta pdo_type for bigint on LLP64
  - Fixed bug #77945


author: Ivan Danilov <idanilov@cloudlinux.com> - 5.3.29-108
changelog:
  - Fix bug #77967 - Bypassing open_basedir restrictions via file uris
  - Fix #77973: Uninitialized read in gdImageCreateFromXbm
  - Fix bug #77988 - heap-buffer-overflow on php_jpg_get16
  - Fix bug #78069 - Out-of-bounds read in iconv.c:_php_iconv_mime_decode() due to integer overflow


author: Ivan Danilov <idanilov@cloudlinux.com> - 5.3.29-118
changelog:
  - Fix #69100: Bus error from stream_copy_to_stream
  - Fix #77946: Bad cURL resources returned by curl_multi_info_read
  - Fix #78333: Exif crash (bus error) due to wrong alignment and invalid cast


author: Ivan Danilov <idanilov@cloudlinux.com> - 5.3.29-121
changelog:
  - Fix #76342: file_get_contents waits twice specified timeout
  - Fix #76859 stream_get_line skips data if used with data-generating filter
  - Fix #78579: mb_decode_numericentity: args number inconsistency
  - Fix bug #78599 (env_path_info underflow can lead to RCE) (CVE-2019-11043)


author: Ivan Danilov <idanilov@cloudlinux.com> - 5.3.29-122
changelog:
  - Fixed bug #78793 (Use-after-free in exif parsing under memory sanitizer)
  - Fixed bug #78878 (Buffer underflow in bc_shift_addsub). (CVE-2019-11046)
  - Fixed bug #78910 (Heap-buffer-overflow READ in exif). (CVE-2019-11047)
  - Fixed bug #78863 (DirectoryIterator class silently truncates after a nullbyte). (CVE-2019-11045)
  - Updated Litespeed SAPI to 7.6


author: Ivan Danilov <idanilov@cloudlinux.com> - 5.3.29-125
changelog:
  - Fix bug #79078: Hypothetical use-after-free in curl_multi_add_handle
  - Fix bug #79282: Use-of-uninitialized-value in exif (CVE-2020-7064)
  - Fix bug #79329: get_headers silently truncates after a null byte (CVE-2020-7066)


author: Nikolai Mikhno <nmikhno@cloudlinux.com> - 5.3.29-128
changelog:
  - Fix bug #61597: SXE properties may lack attributes and content
  - Fix bug #74940: DateTimeZone loose comparison always true
  - Fix bug #79200: Some iconv functions cut Windows-1258
  - Fix bug #79296: ZipArchive::open fails on empty file
  - Fix bug #79330: shell_exec() silently truncates after a null byte
  - Fix bug #79364: When copy empty array, next key is unspecified
  - Fix bug #79396: setting Date/Time during a forward DST transition
  - Fix bug #79410: system() swallows last chunk if it is exactly 4095 bytes without newline
  - Fix bug #79424: php_zip_glob uses gl_pathc after call to globfree
  - Fix bug #79465: OOB Read in urldecode() (CVE-2020-7067)


author: Nikolai Mikhno <nmikhno@cloudlinux.com> - 5.3.29-129
changelog:
  - Fix bug #78221: DOMNode::normalize() doesn't remove empty text nodes
  - Fix bug #78875: Long variables cause OOM and temp files are not cleaned (CVE-2019-11048)
  - Fix bug #78876: Long variables in multipart/form-data cause OOM and temp files are not cleaned (CVE-2019-11048)
  - Fix bug #79514: Memory leaks while including unexistent file
  - Fix bug #79528: Different object of the same xml between 7.4.5 and 7.4.4


author: Nikolai Mikhno <nmikhno@cloudlinux.com> - 5.3.29-133
changelog:
  - Fix bug #62890: default_socket_timeout=-1 causes connection to timeout
  - Fix bug #70362: Can't copy() large 'data://' with open_basedir
  - Fix bug #73527: Invalid memory access in php_filter_strip
  - Fix bug #74267: segfault with streams and invalid data
  - Fix bug #79787: mb_strimwidth does not trim string
  - Fix bug #79877: getimagesize function silently truncates after a null byte


author: Nikolai Mikhno <nmikhno@cloudlinux.com> - 5.3.29-135
changelog:
  - Fix bug #79699: PHP parses encoded cookie names so malicious `__Host-` cookies can be sent (CVE-2020-7070)
  - Fix bug #80007: Potential type confusion in unixtojd() parameter parsing


author: Eduard Abdullin <eabdullin@cloudlinux.com> - 5.3.29-141
changelog:
  - ALTPHP-1053: Update move_override_ini patch
  - ALTPHP-1038: Update litespeed log patch
  - ALTPHP-1082: Add alt-php-pdo requires for alt-php-sqlite, alt-php-mysqlnd and alt-php-firebird


author: Nikita Ivanov <nivanov@cloudlinux.com> - 5.3.29-152
changelog:
  - CVE-2021-21703: fix error in php fpm shared memory organization leading to privilage escalation
  - CVE-2021-21707: fix handling of paths with percent encoded NULL byte


author: Nikita Ivanov <nivanov@cloudlinux.com> - 5.3.29-160
changelog:
  - Fix for hardened PHP
  - CVE-2023-0567: Fix validation of malformed BCrypt hashes
  - CVE-2023-0568: Fix array overrun when appending slash to paths
  - CVE-2023-0662: Fix DOS vulnerabality by limiting number of parsed
    multipart body parts and printing upload limit exceed error message only once


author: Sergey Fokin <sfokin@cloudlinux.com> - 5.3.29-167
changelog:
  - ALTPHP-953: restart lsphp when update its binary
  - ALTPHP-1573: update LiteSpeed to 8.1
  - ALTPHP-1665: pack fpm as sub-package
  - ALTPHP-1713: add ext/curl/php_curl.h to devel sub-package


author: Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 5.3.29-173
changelog:
  - Security fixes
  - CVE-2024-8925: Fix data integrity violation while parsing multipart/form-data
    boundaries larger than the read buffer
  - CVE-2024-8927: Fix bypass of cgi.force_redirect configuration


author: Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 5.3.29-175
changelog:
  - Security fixes
  - CVE-2024-11234: fix HTTP fulluri CRLF injection
  - CVE-2024-11233: fix single byte overread with convert.quoted-printable-decode
    filter
  - CVE-2024-11236: prevent integer overflow in quoters causing OOB writes


author: Azat Nurgaliev <anurgaliev@cloudlinux.com> - 5.3.29-178
changelog:
  - Security fixes
  - CVE-2020-7068: fix using of freed hash key in the phar_parse_zipfile function
  - CVE-2020-7071: avoid parse_url() returning a wrong host to user


author: Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 5.3.29-179
changelog:
  - Security fixes
  - CVE-2018-20783: fix a buffer over-read in PHAR reading functions
  - CVE-2018-19935: fix null pointer dereference in imap_mail
  - CVE-2018-14883: fix int overflow leading to heap-based buffer over-read in
    exif.c


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1:1.9.5-3
changelog:
  - Structures_Graph updated from 1.0.4 to 1.1.1
  - Archive_Tar updated from 1.3.12 to 1.4.0
  - XML_Util updated from 1.2.3 to 1.3.0
  -


author: Shawn Iwinski <shawn.iwinski@gmail.com> 2.0.14-1
changelog:
  - Updated to upstream version 2.0.14
  - %global instead of %define
  - Removed unnecessary cd from %build section


author: Shawn Iwinski <shawn.iwinski@gmail.com> 2.0.14-2
changelog:
  - Removed BuildRoot
  - Changed php require to php-common
  - Added the following requires based on phpci results:
    php-ctype, php-date, php-iconv, php-json, php-mbstring, php-pcre
  - Removed %defattr from %files section


author: Shawn Iwinski <shawn.iwinski@gmail.com> 2.0.15-1
changelog:
  - Updated to upstream version 2.0.15
  - Removed "BuildRequires: php-pear >= 1:1.4.9-1.2"
  - Updated %prep section
  - Removed cleaning buildroot from %install section
  - Removed documentation move from %install section (fixed upstream)
  - Removed %clean section
  - Updated %doc in %files section


author: Shawn Iwinski <shawn.iwinski@gmail.com> 2.1.2-1
changelog:
  - Updated to upstream version 2.1.2
  - PHP minimum version 5.3.3 instead of 5.3.2
  - Added PEAR package.xml modifications
  - Added patch for tests' bootstrap.php
  - Added tests (%check)


author: Dmitry Kasyanov <dkasyanov@cloudlinux.com> 3.7.32-1
changelog:
  - update:
  DbUnit to 1.3.0
  PHP_CodeCoverage to 1.2.16
  phpcpd to 2.0.0
  phploc to 2.0.4
  PHPUnit to 3.7.32
  PHPUnit_Selenium to 1.3.3
  PHPUnit_TestListener_XHProf to 1.0.0
  Text_Template to 1.2.0
  Version to 1.0.2


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1-86
changelog:
  - doublemetaphone updated from 1.0.0 to 1.0.1
  - igbinary updated from 1.1.1 to 1.2.1
  - mongo updated from 1.5.1 to 1.5.5
  - timezonedb updated from 2014.2 to 2014.7
  - xdebug updated from 2.2.4 to 2.2.5
  - ZendOpcache updated from 7.0.2 to 7.0.3
  -


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1-87
changelog:
  - doublemetaphone updated from 1.0.0 to 1.0.1
  - igbinary updated from 1.1.1 to 1.2.1
  - mongo updated from 1.5.1 to 1.5.5
  - timezonedb updated from 2014.2 to 2014.7
  - xdebug updated from 2.2.4 to 2.2.5
  - ZendOpcache updated from 7.0.2 to 7.0.3
  - Add APCu extension


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1-91
changelog:
  - APM updated from 1.1.0beta1 to 1.1.0RC2
  - timezonedb updated from 2014.7 to 2014.9
  - APCu updated from 4.0.6 to 4.0.7
  - propro-1.0.0 added to builtin modules
  - raphf-1.0.4 added to builtin modules
  - pecl_http-2.1.3 added to builtin modules


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1-94
changelog:
  - APM updated from 1.1.0beta1 to 1.1.0RC2
  - timezonedb updated from 2014.7 to 2014.9
  - APCu updated from 4.0.6 to 4.0.7
  - rar-3.0.2 added to builtin modules
  - pecl_http-2.1.3 added to builtin modules
  - propro-1.0.0 added to builtin modules
  - raphf-1.0.4 added to builtin modules


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1-96
changelog:
  - mongo updated from 1.5.7 to 1.5.8
  - stomp updated from 1.0.5 to 1.0.6
  - timezonedb downgraded from 2014.9 to 2014.10
  - xdebug updated from 2.2.5 to 2.2.6
  - ZendOpcache updated from 7.0.3 to 7.0.4
  - libevent-0.1.0 added to builtin modules
  - mongo updated from 1.5.7 to 1.5.8
  - stomp updated from 1.0.5 to 1.0.6
  - timezonedb downgraded from 2014.9 to 2014.10
  - xdebug updated from 2.2.5 to 2.2.6
  - ZendOpcache updated from 7.0.3 to 7.0.4
  - libevent-0.1.0 added to builtin modules
  - mongo updated from 1.5.7 to 1.5.8
  - stomp updated from 1.0.5 to 1.0.6
  - timezonedb downgraded from 2014.9 to 2014.10
  - xdebug updated from 2.2.5 to 2.2.6
  - ZendOpcache updated from 7.0.3 to 7.0.4
  - libevent-0.1.0 added to builtin modules
  - mongo updated from 1.5.7 to 1.5.8
  - stomp updated from 1.0.5 to 1.0.6
  - timezonedb downgraded from 2014.9 to 2014.10
  - xdebug updated from 2.2.5 to 2.2.6
  - ZendOpcache updated from 7.0.3 to 7.0.4
  - libevent-0.1.0 added to builtin modules
  - mongo updated from 1.5.7 to 1.5.8
  - stomp updated from 1.0.5 to 1.0.6
  - timezonedb downgraded from 2014.9 to 2014.10
  - xdebug updated from 2.2.5 to 2.2.6
  - ZendOpcache updated from 7.0.3 to 7.0.4
  - libevent-0.1.0 added to builtin modules


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1-96.el6
changelog:
  - mongo updated from 1.5.7 to 1.5.8
  - stomp updated from 1.0.5 to 1.0.6
  - timezonedb downgraded from 2014.9 to 2014.10
  - xdebug updated from 2.2.5 to 2.2.6
  - ZendOpcache updated from 7.0.3 to 7.0.4
  - libevent-0.1.0 added to builtin modules
  - mongo updated from 1.5.7 to 1.5.8
  - stomp updated from 1.0.5 to 1.0.6
  - timezonedb downgraded from 2014.9 to 2014.10
  - xdebug updated from 2.2.5 to 2.2.6
  - ZendOpcache updated from 7.0.3 to 7.0.4
  - libevent-0.1.0 added to builtin modules
  - mongo updated from 1.5.7 to 1.5.8
  - stomp updated from 1.0.5 to 1.0.6
  - timezonedb downgraded from 2014.9 to 2014.10
  - xdebug updated from 2.2.5 to 2.2.6
  - ZendOpcache updated from 7.0.3 to 7.0.4
  - libevent-0.1.0 added to builtin modules
  - mongo updated from 1.5.7 to 1.5.8
  - stomp updated from 1.0.5 to 1.0.6
  - timezonedb downgraded from 2014.9 to 2014.10
  - xdebug updated from 2.2.5 to 2.2.6
  - ZendOpcache updated from 7.0.3 to 7.0.4
  - libevent-0.1.0 added to builtin modules
  - mongo updated from 1.5.7 to 1.5.8
  - stomp updated from 1.0.5 to 1.0.6
  - timezonedb downgraded from 2014.9 to 2014.10
  - xdebug updated from 2.2.5 to 2.2.6
  - ZendOpcache updated from 7.0.3 to 7.0.4
  - libevent-0.1.0 added to builtin modules
  -


author: Eugene Zamriy <ezamriy@cloudlinux.com> 1-99
changelog:
  - mongo updated from 1.5.8 to 1.6.0
  - timezonedb updated from 2014.10 to 2015.1
  - xdebug updated from 2.2.6 to 2.2.7


author: Eugene Zamriy <ezamriy@cloudlinux.com> 1-101
changelog:
  - jsmin updated from 1.0.0 to 1.1.0
  - redis updated from 2.2.5 to 2.2.7
  - timezonedb updated from 2015.1 to 2015.2
  - mongo updated from 1.6.0 to 1.6.6


author: Eugene Zamriy <ezamriy@cloudlinux.com> 1-102
changelog:
  - mongo updated from 1.6.6 to 1.6.7
  - timezonedb updated from 2014.2 to 2015.4
  - trader updated from 0.3.0 to 0.4.0
  - ZendOpcache updated from 7.0.4 to 7.0.5


author: Eugene Zamriy <ezamriy@cloudlinux.com> 1-103
changelog:
  - pecl_http 2.1.3 extension added (was missing after 1-94 version)
  - raphf 1.0.4 extension added (was missing after 1-94 version)
  - rar 3.0.2 extension added (was missing after 1-94 version)


author: Eugene Zamriy <ezamriy@cloudlinux.com> 1-104
changelog:
  - mongo updated from 1.6.7 to 1.6.11
  - stomp updated from 1.0.6 to 1.0.8
  - timezonedb updated from 2015.4 to 2015.6.1
  - uuid updated from 1.0.3 to 1.0.4
  - yaf updated from 2.3.2 to 2.3.5
  - raphf updated from 1.0.4 to 1.1.0
  - pecl_http updated from 2.1.3 to 2.5.2


author: Eugene Zamriy <ezamriy@cloudlinux.com> 1-106
changelog:
  - eio updated from 1.2.5 to 1.2.6
  - lzf updated from 1.6.2 to 1.6.3
  - timezonedb updated from 2015.6.1 to 2015.7
  - pecl_http updated from 2.5.2 to 2.5.3


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1-112
changelog:
  - ssh2 updated from 0.12 to 0.13
  - jsmin updated from 1.1.0 to 2.0.1
  - APCu updated from 4.0.7 to 4.0.11
  - Bitset updated from 1.0.1 to 2.0.3
  - timezonedb updated from 2015.7 to 2016.4
  - gender updated from 1.0.0 to 1.1.0
  - stats updated from 1.0.3 to 1.0.5
  - mongo updated from 1.6.11 to 1.6.14
  - radius updated from 1.2.7 to 1.3.0
  - redis updated from 2.2.7 to 2.2.8
  - lzf updated from 1.6.2 to 1.6.5
  - yaml-1.2.0 added to builtin modules


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1-114
changelog:
  - timezonedb updated from 2016.6 to 2016.8
  - pdflib updated from 3.0.4 to 4.0.1
  - yaz updated from 1.1.9 to 1.2.1
  - yaml updated from 1.2.0 to 1.3.0


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> - 1-123
changelog:
  - move APC from alt-phpXY-pecl-apc to the current package
  - move dbase from alt-phpXY-pecl-dbase to the current package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-155
changelog:
  - ALTPHP-1752: Moved trader to separate package
  - ALTPHP-1753: Moved eio to separate package
  - ALTPHP-1756: Moved yaz to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-156
changelog:
  - ALTPHP-1778: Moved APM to separate package
  - ALTPHP-1779: Moved weakref to separate package
  - ALTPHP-1780: Moved solr to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-157
changelog:
  - ALTPHP-1786: Moved propro to separate package
  - ALTPHP-1787: Moved raphf to separate package
  - ALTPHP-1788: Moved http to separate package
  - ALTPHP-1789: Moved yaml to separate package
  - ALTPHP-1790: Moved msgpack to separate package
  - ALTPHP-1796: CL9 support


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-158
changelog:
  - ALTPHP-1800: Moved gmagick to separate package
  - ALTPHP-1801: Moved apcu to separate package
  - ALTPHP-1803: Moved oauth to separate package
  - ALTPHP-1804: Moved zmq to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-159
changelog:
  - ALTPHP-1087: Removed non-functional amqp package
  - ALTPHP-1825: Moved gnupg to separate package
  - ALTPHP-1826: Moved dbase to separate package
  - ALTPHP-1827: Moved stats to separate package
  - ALTPHP-1828: Moved pdflib to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-161
changelog:
  - ALTPHP-1935: Moved xhprof to separate package
  - ALTPHP-1946: Moved bitset to separate package
  - ALTPHP-1948: Moved geoip to separate package
  - ALTPHP-1949: Moved htscanner to separate package
  - ALTPHP-1950: Moved inotify to separate package
  - ALTPHP-1951: Moved jsmin to separate package


author: Eduard Chiganov <echiganov@cloudlinux.com> - 4.1.6-1
changelog:
  - ALTPHP-1935: Support for tideways_xhprof for alt-php84.
  - ALTPHP-1957: Create alt-phpXX-pecl-xhprof-extension.


author: Oleg Cherniy <oleg.cherniy@gmail.com> 0.5.0.20120912-1
changelog:
  - Update to last beta relase 0.5.0 from github 20120912
  - Fixing bug in Phalcon\Http\Response::setContentType charset param


author: Oleg Cherniy <oleg.cherniy@gmail.com> 0.5.0.20120914-1
changelog:
  - Update to last beta relase 0.5.0 from github 20120914
  - Fixing bug in Phalcon\Http\Response::setContentType charset param


author: Oleg Cherniy <oleg.cherniy@gmail.com> 0.5.2.20121019-1
changelog:
  - Update to last beta relase 0.5.2 from github 20121019
  - Fixed bug in Phalcon\Mvc\Model::_exists making PHQL inserts fail
  - Fixed bug in Phalcon\Mvc\Model making that a magic method call doesn't accept extra parameters
  - Fixed bug in Phalcon\Loader producing that pathFound event wasn't triggered
  - Added throwing exception in Phalcon\Loader when trying to write in a read only file
  - Now Phalcon\Loader replaces _ by DIRECTORY_SEPARATOR in most strategies
  - Fixed bug in Phalcon\Mvc\Model\Resultset::seek that doesn't allow to paginate results in Phalcon\Paginator
  - Fixed bug in Phalcon\Mvc\Dispatcher that doesn't throws an exception when an infinite forward is produced
  - PDO error mode was changed to PDO::ERRMODE_EXCEPTION producing exceptions instead of silent error messages
  - Fixed wrong precedence in PHQL operators
  - Fixed bug that makes that the correct value for SERIAL columns wasn't filled for PostgreSQL
  - Added an extra parameter "data" to an event triggering in Phalcon\Events allowing to get more information about certain event
  - Added an extra parameter to Phalcon\Db::query and Phalcon\Db::execute to bind parameters by their data type
  - Added recognition of the related sequence for PostgreSQL when inserting data into tables with SERIAL columns Phalcon\Mvc\Model
  - Phalcon\Db\Adapter\*::describeColumns try to find the best bind param type for every column
  - Added bindType to Phalcon\Db\Column to know what its best bind param to cast according to its data type
  - Added getDefaultValue() to Phalcon\Db\Adapter\* in order the best value to insert in an auto-increment or serial column
  - Added bindTypes param to Phalcon\Mvc\Model::find and Phalcon\Mvc\Model::findFirst
  - Due to the new agressive type-casting when binding parameters, Phalcon\Mvc\Model isn't capable anymore of generate reliable automatic ke
  - Fixed bug that makes actions and events implemented in a parent class innaccessibles for Phalcon
  - Now Phalcon\Text::camelize checks for underscores and dashes
  - Added Phalcon\Mvc\Model::getRelated to return related relation models on namespaced models
  - Added Phalcon\CLI components to create CLI applications
  - Added SQLite support


author: Oleg Cherniy <oleg.cherniy@gmail.com> 0.6.0.20121101-1
changelog:
  - Update to last beta relase 0.6.0 from github 20121101
  - Added functions version, version_id, date and time to Volt
  - PHQL OFFSET complete implementation
  - Fixed bug in Phalcon\Mvc\Collection::find and Phalcon\Mvc\Collection::findFirst
  - Removing unnecessary duplications in zval PHALCON_GET_FOREACH_VALUE
  - Merging PHALCON_INIT_NVAR into PHALCON_GET_FOREACH_KEY
  - Added HTML/XHTML document type support in Phalcon\Tag
  - Added "exists" method to every backend in Phalcon\Cache\Backend
  - Now is required pass true as parameter to Phalcon\Http\Request::getClientAddress if the user want to check the client address in the $_SERVER['HTTP_X_FORWARDED_FOR'] header
  - Removed unnecessary duplication of function names when calling function and methods
  - Now Phalcon can call functions from the PHP userspace without use call_user_func_array/call_user_func increasing performance
  - Added beforeException event triggered from Phalcon\Dispatcher before launch an exception allowing to inject code before launch a real exception modifing the behavior of the component
  - Now is possible attach listeners directly to specific events in Phalcon\Event\Managers
  - Added Phalcon\Http\Request::get and Phalcon\Http\Request::has to read/check values from $_REQUEST
  - Added Phalcon\Cache\Backend\Mongo that uses a MongoDB collection as backend
  - Added options (compiled path, compiled separator, stat) for Volt
  - Concatenation on the same variable is now faster by using realloc instead of zval duplication
  - Some internal macros like PHALCON_INIT_VAR now produces less C-code making the extension lighter
  - Removed initialization of the memory stack frame when isn't needed
  - Inlining of scope locating functions to make read/write on objects faster
  - Array joins are now faster because a zval needle isn't needed anymore
  - Implemented fast copy/ctor to return_value reducing the overall memory usage
  - Added Phalcon\Tag::friendlyTitle to create friendly titles
  - Added a new C-based template engine highly coupled with Phalcon called Volt
  - Registered Phalcon\Mvc\Model\Transaction\Manager in Phalcon\DI\FactoryDefault as 'transactionManager'
  - Added Phalcon\Escaper to add contextual escaping of different kinds of texts
  - Registered Phalcon\Escaper in Phalcon\DI\FactoryDefault as 'escaper'
  - Phalcon\Tag now caches resolved services such as 'url' and 'dispatcher' making the view generation faster
  - Added support to the OFFSET clause in PHQL
  - Optimized Phalcon\Mvc\Model\Metadata to use less memory when using a high number of tables
  - Changed the use of strpos by phalcon_memnstr to search for strings into other strings reducing unnecessary zval allocations
  - Added faster camelize/uncamelize functions
  - Now a model can implement the method metaData to return the model meta-data insteaf of leave Phalcon do it automatically
  - Phalcon\Mvc\Model::skipAttributes allows to set a group of attributes that must be skipped from the INSERT/UPDATE SQL generation
  - Added Phalcon\Mvc\Collection to manage non-structured data models, for example: MongoDB


author: Oleg Cherniy <oleg.cherniy@gmail.com> 0.6.1.20121111-1
changelog:
  - Fixed bug in Phalcon\Mvc\Micro's not-found handler
  - Fixed bug reading named-parameters with quantifiers in Phalcon\Mvc\Router
  - Now named-routes are processed without use regular expressions
  - Now $this->view->disable() disables the auto-rendering mode completely
  - Added Phalcon\Mvc\View::enable that re-enables the auto-rendering mode
  - Added Phalcon\Cache\Backend::stop() to stop the cache without store anything into the backend
  - Fixed bug in Phalcon\Mvc\View that saves a empty cached content when using a cache
  - Implemented Phalcon\Db::FETCH_OBJ to return objects instead of arrays
  - Removed checking for callable definitions in Phalcon\DI due to security reasons


author: Oleg Cherniy <oleg.cherniy@gmail.com> 0.7.0.20121205-0
changelog:
  - Update to last relase 0.7.0 from github 20121205
  - Now the namespace can be set in a path of the route and it will passed automatically to the dispatcher
  - Implementing URL generation based on routed without regular expressions
  - Now is possible register a template engine in Phalcon\Mvc\View with an anonymous function
  - Passing 'compileAlways' => true as option for Volt makes that the templates will be always compiled instead of checking if they have changes
  - Now Phalcon\Cache\Backend adapters return false in the "exists" method if the cache has expired
  - Reduced number of re-executions when using scrollable cursors
  - Reducing class entry resolution in function calls
  - Disabling search of class execution scope when classes don't have a parent class
  - Removing unnecessary duplication of memory when printing string zvals
  - Implemented a fast way to retrieve object's members without add a memory frame
  - Now Phalcon\Mvc\Dispatcher checks for methods beforeExecuteRoute and afterExecuteRoute in the controller handler
  - Added phalcon_start_with to check if a zval string starts with other string avoiding substrs in PHP userland
  - Added interfaces to most classes helping the developer to easily create component replacements and add new adapters/classes
  - Implemented interfaces on their own components
  - Implemented event propagation, event cancelation and ability to stop events in EventsManager
  - Added Phalcon\Dispatcher::getDefaultNamespace
  - Added a $merge parameter to every Phalcon\Loader strategy to merge current values with a new array
  - Implemented registering services as "always shared"
  - Now Phalcon\Mvc\Model::save, Phalcon\Mvc\Model::create, Phalcon\Mvc\Model::update receives an array to assign the model's attributes from it
  - Support for UTF-8/UTF-16 characters on 32 bit platforms for PHQL/Volt parsers
  - Support for custom schemas in PHQL
  - Now is possible pass bound parameters to Phalcon\DB::fetchOne and Phalcon\Db::fetchAll
  - Implemented independent column map for models and a full escaping system for columns/tables/schemas according to the database system conventions
  - Added a $merge parameter to Phalcon\Mvc\Application::registerModules to merge new modules with current ones
  - Phalcon\Mvc\Application now allows registering a module using an anonymous function
  - Added Phalcon\Mvc\Model\Query\Builder to aid in the creation of PHQL queries using an OO interface
  - Support for COUNT(DISTINCT x) syntax in PHQL
  - Allowing user-defined messages in most Phalcon\Mvc\Model\Validators
  - Now Phalcon\Mvc\Model\Validator\StringLength uses mb_strlen when it is available
  - Allowed pass a URI manually to Phalcon\Mvc\Micro::handle()
  - Fixed missing json_encode filter in Volt
  - Moving cache implementation from Phalcon\Mvc\Model to Phalcon\Mvc\Model\Query, this allows caching both simple and complex resultsets


author: Oleg Cherniy <oleg.cherniy@gmail.com> 0.8.0.20121218-0
changelog:
  - Update to last alfa relase 0.8.0 from github 20121218
  - Removed unnecessary intermediate zvals when retrieving array items reducing overall memory comsumption
  - Removed unnecessary intermediate zvals when retrieving object members reducing overall memory comsumption
  - Removed PH_CHECK constant making simpler calling functions and methods internally
  - Added Phalcon\Text::increment, Phalcon\Text::random, Phalcon\Text::lower, Phalcon\Text::upper, Phalcon\Text::
  - Added Phalcon\Config::merge to merge recursively a configuration with another one
  - Added Phalcon\Config::toArray method to recursively convert an object to an array
  - Improved Volt runtime error/syntax error messages including always line and file
  - Added Phalcon\Security providing a set of functions to improve the security in Phalcon applications like bcry
  - Added Phalcon\Mvc\View\Engine\Volt\Compiler::addFunction to register user functions
  - Added Phalcon\Mvc\View\Engine\Volt\Compiler::addFilter to register user filters
  - Added Phalcon\Mvc\Model\Relation as class for model relationships
  - Added support for aliasing of model relationships in Phalcon\Mvc\Model
  - Relationships in Models are now case insensitive to be compliant with the PHP standard
  - Looking for a relationship in the models manager now performs a search in O(1) order
  - Added "cache" statement in Volt to cache view fragments
  - Added "do" statement to Volt to execute an expression without printing its evaluated value
  - Added "include" statement to Volt to perform a statical include of other views in compiling time
  - Added an internal method cache to speed up overall execution
  - Reduced memory allocation when reading/writing properties from objects
  - Added missing Phalcon\Mvc\Collection::getMessages() and Phalcon\Mvc\Collection::appendMessage
  - Added Phalcon\Config::get method to obtain a value from the configuration object setting a default value
  - Added an optional default value to Phalcon\Session\Adapter::get if this method returns a null value
  - Added OO methods to Phalcon\Session\Bag::get
  - Added an optional default value to Phalcon\Session\Bag::get if this method returns a null value
  - Added multiple inheritance and two-way replacement of blocks in Volt
  - Added evaluation of "tests" to Volt
  - Added support to call methods and read properties in sub-objects in Volt
  - Volt now checks if a variable name is a registered service and injects it to the views
  - The "For" statement in Volt now supports get the current key and add an optional if evaluation
  - Added support to read PHP constants in Volt
  - Added "prefix" option to Volt, allowing prefixing the resulting compiled paths
  - Now registerAutoloader in module definitions receives the services container (DI) as first parameter
  - Fixed skipAttributes methods in Phalcon\Mvc\Model
  - Fixed use of muliples databases in the ORM
  - Fixed use of a common events manager databases in the ORM
  - Now Phalcon\Mvc\Router can be configured to remove extra slashes passed in the URI
  - In Phalcon\Mvc\Router the default route is '/' when none is giving


author: Oleg Cherniy <oleg.cherniy@gmail.com> 0.8.0.20130110-0
changelog:
  - Update to version 0.8.0b1
  - Improved Phalcon\Escaper, this component provides contextual escaping of different kinds of texts (CSS, Javascript, URL, HTML Attributes etc)
  - Added serialization of Mvc\Collection instances
  - Added Phalcon\Mvc\View::setLayout to change the layout instead of looking for a controller with the same name as the latest controller dispatched
  - Now is possible to pass an option called 'options' to any of the Phalcon\Db\Adapter\Pdo adapters to set extra PDO options in the connection
  - Removed filtering of keys from Phalcon\Cache\Backend\File
  - Support for creating groups of routes using Phalcon\Router\Route\Group
  - Added Phalcon\Mvc\Micro middleware events
  - Implemented virtual scopes in Phalcon\Mvc\View

  - Update to version 0.8.0a2
  - Added support for behaviors in the ORM including: Phalcon\Mvc\Model\Behavior\Timestampable and Phalcon\Mvc\Model\Behavior\SoftDelete
  - Improved serialization of Mvc\Model instances and complex resultsets
  - Added an option to change the layouts directory and partials directory in Phalcon\Mvc\View
  - Added an option to disable an specific level of rendering in Phalcon\Mvc\View
  - Added Phalcon\Mvc\Model::setup to globally enable/disable specific features in the ORM
  - Added Phalcon\Db::setup to globally enable/disable specific features in the database component
  - Added Phalcon\Mvc\Model\Resultset::delete to delete every complete object returned in a resultset using a transaction
  - Added Phalcon\Mvc\Model\Resultset::update to update every complete object returned in a resultset using a transaction
  - Added support for converters in Phalcon\Mvc\Router
  - Added Phalcon\Mvc\View::getRender to return contents of a template into a string
  - Added methods to support HTTP method PATCH
  - Now Phalcon\Mvc\Model uses the last part of a namespaced class name as source name
  - Phalcon\DI now implements ArrayAccess to get/set services
  - Phalcon\Mvc\Micro now implements ArrayAccess to get services from the related services container
  - Improved building of complex service definitions in the DI
  - Added toArray method to Phalcon\Mvc\Model instances
  - Added autoescape mode in Volt


author: Oleg Cherniy <oleg.cherniy@gmail.com> 0.9.0.20130201-0
changelog:
  - Update to version 0.9.0b2
  - Added 'elseif' statement to Volt
  - Changed static key in Volt's 'cache' to any valid expression
  - Added Phalcon\Logger\Adapter\Syslog and Phalcon\Logger\Adapter\Stream to Phalcon\Logger
  - Added Phalcon\Logger\Multiple to send logs to multiples adapters
  - Added formatters abstraction to Phalcon\Logger, now including: Phalcon\Logger\Formatter\Line, Phalcon\Logger\Formatter\Json and Phalcon\L
  - Added Phalcon\Annotations\Adapter\Files to Phalcon\Annotations, this adapter stores the annotations in PHP files

  - Update to version 0.9.0b1
  - Added Phalcon\Annotations, a general purpose component to read annotations from docblocks
  - Phalcon\Mvc\Model now supports saving related records using magic methods with a unique call to 'save'
  - Adding autoescaping option to Phalcon\Tag
  - Added andWhere/orWhere to Phalcon\Mvc\Model\Criteria
  - Added passing an HTTP body to the Phalcon\Http\Response's constructor
  - Phalcon\Mvc\View is now able to pass variables to the views using magic methods
  - Support for slice with filter and built-in syntax in Volt
  - Added magic methods in the ORM to find/findFirst by a single field
  - Improved XSS protection in Phalcon\Tag
  - Implemented queuing events with priorities in Phalcon\Events
  - Implemented collecting of returned responses in Phalcon\Events
  - Added toArray method to Phalcon\Mvc\Model\Resultset classes
  - Added hydration modes to Phalcon\Mvc\Model\Resultset (HYDRATE_RECORDS, HYDRATE_ARRAYS, HYDRATE_OBJECTS)


author: Oleg Cherniy <oleg.cherniy@gmail.com> 0.9.0.20130206-0
changelog:
  - Update to last stable release
  - Support for reusable records. A relation can be marked to cache in memory the records to speedup getting related records


author: Anton Volkov <avolkov@cloudlinux.com> 5.4.2-5
changelog:
  - add / remove lines of file /etc/cagefs/alternatives.conf on install/update/uninstall of the package


author: Anton Volkov <avolkov@cloudlinux.com> 5.4.2-8
changelog:
  - install additional ini files (for extensions) to php.d.all directory (instead of php.d)
  - create symlink /opt/alt/php54/etc/php.d -> /etc/cl.php.d/alt-php54


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.4.45-2
changelog:
  - hardened PHP init build
  - add patches for bugs 69720 (https://bugs.php.net/bug.php?id=69720) and 70433 (https://bugs.php.net/bug.php?id=70433)
  - LSAPI: initialize empty sa_mask


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.4.45-9
changelog:
  - add HardenedPHP patches:
  -   bug70661: Use After Free Vulnerability in WDDX Packet Deserialization
  -   bug70741: Session WDDX Packet Deserialization Type Confusion Vulnerability
  -   bug70728: Type Confusion Vulnerability in PHP_to_XMLRPC_worker()
  -   bug70755: fpm_log.c memory leak and buffer overflow


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.4.45-10
changelog:
  - add HardenedPHP patches:
  -   bug 64343: PharData::extractTo fails for tarball created by BSD tar
  -   security bug #71039: exec functions ignore length but look for NULL termination
  -   security bug #71323: Output of stream_get_meta_data can be falsified by its input
  -   security bug #71354: Heap corruption in tar/zip/phar parser.
  -   security bug #71391: NULL Pointer Dereference in phar_tar_setupmetadata()
  -   security bug #71459: Integer overflow in iptcembed()
  -   security bug #71488: Stack overflow when decompressing tar archives


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.4.45-14
changelog:
  - ALTPHP-141: backported patches
  -     - security bug 71860: Invalid memory write in phar on filename with \0 in name
  -       https://bugs.php.net/bug.php?id=71860
  -     - security bug 71704: php_snmp_error() Format String Vulnerability
  -       https://bugs.php.net/bug.php?id=71704
  -     - security bug 71798: Integer Overflow in php_raw_url_encode
  -       https://bugs.php.net/bug.php?id=71798
  - ALTPHP-135: execute "cagefsctl --setup-cl-alt" command only once per alt-php
  - group installation/update to speed up the installation process


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.4.45-17
changelog:
  - add HardenedPHP patches:
  -     CVE-2016-4343: (phar) uninitialized pointer in phar_make_dirstream()
  -     https://bugs.php.net/71331
  -     CVE-2016-5093: (intl) get_icu_value_internal out-of-bounds read
  -     https://bugs.php.net/72241
  -     CVE-2016-5094: (core) integer overflow in php_html_entities
  -     https://bugs.php.net/72135
  -     CVE-2016-5096: (core) integer underflow / arbitrary null write in fread/gzread
  -     https://bugs.php.net/72114


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.4.45-18
changelog:
  - add HardenedPHP patches:
  -   CVE-2016-5766: Integer Overflow in _gd2GetHeader() resulting in heap overflow
  -   https://bugs.php.net/bug.php?id=72339
  -   CVE-2016-5768: _php_mb_regex_ereg_replace_exec - double free
  -   https://bugs.php.net/bug.php?id=72402
  -   CVE-2016-5771: Use After Free Vulnerability in PHP's GC algorithm and unserialize
  -   https://bugs.php.net/bug.php?id=72433
  -   CVE-2016-5772: Double Free Corruption in wddx_deserialize
  -   https://bugs.php.net/bug.php?id=72340
  -   CVE-2016-5773: ZipArchive class Use After Free Vulnerability in PHP's GC algorithm and unserialize
  -   https://bugs.php.net/bug.php?id=72434
  -   CVE-2015-8874: Stack overflow with imagefilltoborder
  -   https://bugs.php.net/bug.php?id=66387
  - ALTPHP-177: Re-patch alt-phpXX with wink_server_is_ready.patch


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.4.45-19
changelog:
  - add HardenedPHP patches:
  -   CVE-2016-5399: Inadequate error handling in bzread()
  -   http://bugs.php.net/72613
  -   CVE-2016-6288: php_url_parse_ex() buffer overflow read
  -   http://bugs.php.net/70480
  -   CVE-2016-6289: Stack-based buffer overflow vulnerability in virtual_file_ex
  -   http://bugs.php.net/72513
  -   CVE-2016-6290: Use After Free in unserialize() with Unexpected Session Deserialization
  -   http://bugs.php.net/72562
  -   CVE-2016-6291: Out of bound read in exif_process_IFD_in_MAKERNOTE
  -   http://bugs.php.net/72603
  -   CVE-2016-6292: NULL Pointer Dereference in exif_process_user_comment
  -   http://bugs.php.net/72618
  -   CVE-2016-6294: locale_accept_from_http out-of-bounds access
  -   http://bugs.php.net/72533
  -   CVE-2015-8879: PHP segfaults when accessing nvarchar(max) defined columns
  -   http://bugs.php.net/69975
  -   CVE-2016-6295: Use After Free Vulnerability in SNMP with GC and unserialize()
  -   http://bugs.php.net/72479
  -   CVE-2016-6296: heap-buffer-overflow (write) simplestring_addn simplestring.c
  -   http://bugs.php.net/72606
  -   CVE-2016-6297: Stack-based buffer overflow vulnerability in php_stream_zip_opener
  -   http://bugs.php.net/72520


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.4.45-20
changelog:
  - update mail-header patch
  - ALTPHP-212: Implement additional code to mail.c to track sending file path (X-PHP-Filename)
  - add HardenedPHP patches:
  -   security bug #72837: integer overflow in bzdecompress caused heap corruption (bz2)
  -   http://bugs.php.net/72837
  -   security bug #70436: Use After Free Vulnerability in unserialize() (core)
  -   http://bugs.php.net/70436
  -   security bug #72633: Create an Unexpected Object and Don't Invoke __wakeup() in Deserialization (core)
  -   http://bugs.php.net/72663
  -   security bug #72681: PHP Session Data Injection Vulnerability (core)
  -   http://bugs.php.net/72681
  -   security bug #72807: integer overflow in curl_escape caused heap corruption (curl)
  -   http://bugs.php.net/72807
  -   security bug #72838: Integer overflow lead to heap corruption in sql_regcase (ereg)
  -   http://bugs.php.net/72838
  -   security bug #72697: select_colors write out-  of-   bounds (gd)
  -   http://bugs.php.net/7- 2697
  -   security bug #72730: imagegammacorrect allows arbitrary write access (gd)
  -   http://bugs.php.net/72730
  -   security bug #72708: php_snmp_parse_oid integer overflow in memory allocation (snmp)
  -   http://bugs.php.net/72708
  -   security bug #72836: integer overflow in base64_decode caused heap corruption (standard)
  -   http://bugs.php.net/72836
  -   security bug #72848: integer overflow in quoted_printable_encode caused heap corruption (standard)
  -   http://bugs.php.net/72848
  -   security bug #72849: integer overflow in urlencode caused heap corruption (standard)
  -   http://bugs.php.net/72849
  -   security bug #72850: integer overflow in php_uuencode caused heap corruption (standard)
  -   http://bugs.php.net/72850
  -   security bug #72771: ftps:// wrapper is vulnerable to protocol downgrade attack (streams)
  -   http://bugs.php.net/72771
  -   security bug #72749: wddx_deserialize allows illegal memory access (wddx)
  -   http://bugs.php.net/72749
  -   security bug #72750: wddx_deserialize null dereference (wddx)
  -   http://bugs.php.net/72750
  -   security bug #72790: wddx_deserialize null dereference with invalid xml (wddx)
  -   http://bugs.php.net/72790
  -   security bug #72799: wddx_deserialize null dereference in php_wddx_pop_element (wddx)
  -   http://bugs.php.net/72799


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.4.45-21
changelog:
  - add HardenedPHP patches:
  -   CVE-2016-7412: Heap overflow in mysqlnd related to BIT fields
  -   CVE-2016-7413: wddx_deserialize use-after-free
  -   CVE-2016-7414: Out of bound when verify signature of zip phar in phar_parse_zipfile
  -   CVE-2016-7416: SEH buffer overflow msgfmt_format_message
  -   CVE-2016-7417: Missing type check when unserializing SplArray
  -   CVE-2016-7418: Out-Of-Bounds Read in php_wddx_push_element of wddx.c


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.4.45-24
changelog:
  - add HardenedPHP patches:
  -   security bug 73189: Memcpy negative size parameter php_resolve_path
  -   security bug 73190: memcpy negative parameter _bc_new_num_ex
  -   security bug 73150: missing NULL check in dom_document_save_html
  -   security bug 73284: heap overflow in php_ereg_replace function
  -   security bug 73218: stack-buffer-overflow through "ResourceBundle" methods
  -   security bug 73208: integer overflow in imap_8bit caused heap corruption
  -   security bug 73082: string length overflow in mb_encode_* function
  -   security bug 73174: heap overflow in php_pcre_replace_impl
  -   security bug 73276: crash in openssl_random_pseudo_bytes function
  -   security bug 73275: crash in openssl_encrypt function
  -   security bug 73017: memory corruption in wordwrap function
  -   security bug 73240: Write out of bounds at number_format
  -   security bug 73073: CachingIterator null dereference when convert to string
  -   security bug 73293: NULL pointer dereference in SimpleXMLElement::asXML()


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.4.45-26
changelog:
  - add HardenedPHP patches:
  -   security bug 73452: Segfault (Regression for #69152)
  -   security bug 73631: Invalid read when wddx decodes empty boolean element
  - ALTPHP-271: bug 71465: PHAR doesn't know about litespeed


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.4.45-27
changelog:
  - add HaredenedPHP patches:
  -   bug 73764: Crash while loading hostile phar archive (CVE-2016-10159)
  -   bug 73768: Memory corruption when loading hostile phar (CVE-2016-10160)
  -   bug 73825: Heap out of bounds read on unserialize in finish_nested_data() (CVE-2016-10161)
  -   bug 68447: grapheme_extract take an extra trailing character
  -   bug 70213: Unserialize context shared on double class lookup
  -   bug 73549: Use after free when stream is passed to imagepng
  -   bug 73737: FPE when parsing a tag format (CVE-2016-10158)
  -   bug 73773: Seg fault when loading hostile phar
  -   bug 73868: Fix DOS vulnerability in gdImageCreateFromGd2Ctx()
  -   bug 73869: Signed Integer Overflow gd_io.c


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.4.45-29
changelog:
  - add HaredenedPHP patches:
  -   bug 71906: AddressSanitizer: negative-size-param (-1) in mbfl_strcut (CVE-2016-4073)
  -   bug 72627: Memory Leakage In exif_process_IFD_in_TIFF (CVE-2016-7128)


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.4.45-37
changelog:
  - add HardenedPHP patches:
  - CVE-2017-11143: wddx parsing empty boolean tag leads to SIGSEGV
  - CVE-2017-11144: negative-size-param (-1) in memcpy in zif_openssl_seal()
  - CVE-2017-11145: wddx_deserialize() heap out-of-bound read via php_parse_date()
  - CVE-2017-11146: wddx_deserialize() heap out-of-bound read via php_parse_date() (caused by CVE-2017-11145)
  - CVE-2017-7890: Buffer over-read into uninitialized memory
  - CVE-2017-9224: Buffer Overflow in match_at() (Oniguruma issue)
  - CVE-2017-9226: Heap corruption in next_state_val() in 15 encodings (Oniguruma issue)
  - CVE-2017-9227: Bug in mbc_enc_len() (Oniguruma issue)
  - CVE-2017-9228: Heap corruption in next_state_val() due to uninitialized local variable (Oniguruma issue)
  - CVE-2017-9229: SIGSEGV in left_adjust_char_head() due to bad dereference (Oniguruma issue)
  - bug70436: Use After Free Vulnerability in unserialize()
  - bug74087: Segmentation fault in PHP7.1.1(compiled using the bundled PCRE library)
  - bug74603: PHP INI Parsing Stack Buffer Overflow Vulnerability
  -
  - add LSAPI patches:
  - ALTPHP-351: make lsphp error messaqges more informative
  - ALTPHP-354: SIGCHILD handler fix after CRIU restoring


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.4.45-40
changelog:
  - AAP-176: Add сorrect exit from lve if the nproc limit is reached for php-fpm
  - Change lve log levels for php-fpm


author: Ivan Danilov <idanilov@cloudlinux.com> - 5.4.45-67
changelog:
  - Fix for bug #76505 (array_merge_recursive() is duplicating sub-array keys)
  - Fix for bug #76532 (excessive memory usage in mb_strimwidth)
  - Fix for bug #76548 pg_fetch_result did not fetch the next row
  - Fix for bug #76488 Memory leak when fetching a BLOB field
  - Fix for #73817: Incorrect entries in get_html_translation_table
  - Fix for #76665: SQLite3Stmt::bindValue() with SQLITE3_FLOAT doesn't juggle
  - Fix for bug #75402 Possible Memory Leak using PDO::CURSOR_SCROLL option
  - Fix for bug #76335 "link(): Bad file descriptor" with non-ASCII path
  - Fix for #76704: mb_detect_order return value varies based on argument type
  - Fix for incorrect restoring of LDFLAGS
  - Fix for bug #72443: Generate enabled extension
  - Fix for bug #65988: Zlib version check fails
  - Fix for arginfo for bzcompress
  - Fix for bug #76754 (parent private constant in extends class memory leak)
  - Fix for #68175: RegexIterator pregFlags are NULL instead of 0
  - Fix for bug #76296 (openssl_pkey_get_public does not respect open_basedir)
  - Fix for #68825: Exception in DirectoryIterator::getLinkTarget()
  - Fix for #55146: iconv_mime_decode_headers() skips some headers
  - Fix for #63839: iconv_mime_decode_headers function is skipping headers
  - Fix for #60494: iconv_mime_decode does ignore special characters
  - Fix for #68180: iconv_mime_decode can return extra characters in a header
  - Fix for bug #76367 (NoRewindIterator segfault 11)
  - Fix for bug #76383 (array_map on $GLOBALS returns IS_INDIRECT)
  - Fix for bug #73342


author: Ivan Danilov <idanilov@cloudlinux.com> - 5.4.45-72
changelog:
  - Fix bug #77242: heap out of bounds read in xmlrpc_decode()
  - Fix bug #77247: heap buffer overflow in phar_detect_phar_fname_ext
  - Fix bug #77270: imagecolormatch Out Of Bounds Write on Heap
  - Fix bug #77371: heap buffer overflow in mb regex functions - compile_string_node
  - Fix bug #77380: Global out of bounds read in xmlrpc base64 code
  - Fix bug #77418: Heap overflow in utf32be_mbc_to_code


author: Ivan Danilov <idanilov@cloudlinux.com> - 5.4.45-85
changelog:
  - Fixed bug #50020 (DateInterval:createDateFromString() silently fails)
  - Fixed bug #76717
  - Fix #77024: SplFileObject::__toString() may return array
  - Fixed bug #77664 (Segmentation fault when using undefined constant in custom wrapper)
  - Fix bug #77677: WCOREDUMP not available on all systems
  - Fixed bug #77697 (Crash on Big_Endian platform)
  - Fix #77700: Writing truecolor images as GIF ignores interlace flag
  - Fixed bug #77722
  - Fixed bug #77742
  - Fixed bug #77765
  - Fix #77921: static.php.net doesn't work anymore
  - Fix bug #77934 (php-fpm kill -USR2 not working)
  - Fix #77943: imageantialias($image, false); does not work
  - Fix #77944: Wrong meta pdo_type for bigint on LLP64
  - Fixed bug #77945


author: Ivan Danilov <idanilov@cloudlinux.com> - 5.4.45-94
changelog:
  - Fix bug #77124
  - Fix bug #78192 PDO SQLite SegFault when reuse statement after schema has changed
  - Fix #78212: Segfault in built-in webserver
  - Fix bug #78222 (heap-buffer-overflow on exif_scan_thumbnail)
  - Fix bug #78256 (heap-buffer-overflow on exif_process_user_comment)
  - Fix bug #78291 Missing opcache directives


author: Ivan Danilov <idanilov@cloudlinux.com> - 5.4.45-98
changelog:
  - Fix #69100: Bus error from stream_copy_to_stream
  - Fix #75457: heap-use-after-free
  - Fix #77946: Bad cURL resources returned by curl_multi_info_read
  - Fix #78333: Exif crash (bus error) due to wrong alignment and invalid cast
  - Fix #78363: Buffer overflow in zendparse


author: Ivan Danilov <idanilov@cloudlinux.com> - 5.4.45-103
changelog:
  - Fix bug #79037: global buffer-overflow in `mbfl_filt_conv_big5_wchar` (CVE-2020-7060)
  - Fix bug #79082: Files added to tar with Phar::buildFromIterator have all-access permissions (CVE-2020-7063)
  - Fix bug #79099: OOB read in php_strip_tags_ex (CVE-2020-7059)
  - Fix bug #79221: Null Pointer Dereference in PHP Session Upload Progress (CVE-2020-7062)


author: Nikolai Mikhno <nmikhno@cloudlinux.com> - 5.4.45-109
changelog:
  - Fix bug #61597: SXE properties may lack attributes and content
  - Fix bug #74940: DateTimeZone loose comparison always true
  - Fix bug #75673: SplStack::unserialize() behavior
  - Fix bug #79200: Some iconv functions cut Windows-1258
  - Fix bug #79296: ZipArchive::open fails on empty file
  - Fix bug #79330: shell_exec() silently truncates after a null byte
  - Fix bug #79364: When copy empty array, next key is unspecified
  - Fix bug #79396: setting Date/Time during a forward DST transition
  - Fix bug #79410: system() swallows last chunk if it is exactly 4095 bytes without newline
  - Fix bug #79424: php_zip_glob uses gl_pathc after call to globfree
  - Fix bug #79465: OOB Read in urldecode() (CVE-2020-7067)


author: Darya Malyavkina <dmalyavkina@cloudlinux.com> - 5.4.45-113
changelog:
  - MODLS-741: Make LSCRIU log messages with timestamps
  - MODLS-804: Improve mod_lsapi & lsphp error reporting in case of php memory limit reached
  - ALTPHP-961: Update litespeed to 7.7 version
  - ALTPHP-911: alt-php54-fpm.service cannot start out-of-the-box for CL8


author: Eduard Abdullin <eabdullin@cloudlinux.com> - 5.4.45-122
changelog:
  - ALTPHP-1053: Update move_override_ini patch
  - ALTPHP-1038: Update litespeed log patch
  - ALTPHP-1082: Add alt-php-pdo requires for alt-php-mysqlnd and alt-php-firebird


author: Nikita Ivanov <nivanov@cloudlinux.com> - 5.4.45-134
changelog:
  - ELS-189: Fix for Harden PHP
  - CVE-2022-31625: Fix freeing of uninitialized memory leading to RCE
  - CVE-2022-31626: Fix buffer overflow in mysqlnd driver leading to RCE


author: Sergey Fokin <sfokin@cloudlinux.com> - 5.4.45-143
changelog:
  - ALTPHP-1531: add provides alt-php-handler-lsphp and alt-php81-handler-lsphp
  - remove changes from ALTPHP-1508


author: Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 5.4.45-162
changelog:
  - CVE-2018-20783: fix a buffer over-read in PHAR reading functions
  - CVE-2018-19935: fix null pointer dereference in imap_mail
  - CVE-2018-14883: fix int overflow leading to heap-based buffer over-read in
    exif.c


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1:1.10.3-1
changelog:
  - update PEAR to 1.10.3
  - update ArchiveTar to 1.4.2
  - update Structures Graph to 1.1.1
  - update XML_Util to 1.4.2
  - update Console_Getopt to 1.4.1


author: Tim Jackson <rpm@timj.co.uk> 1:1.7.1-2
changelog:
  - Set cfg_dir to be /etc/pear (and own it)
  - Update install-pear.php script
  - Add %pear_cfgdir and %pear_wwwdir macros


author: Remi Collet <Fedora@FamilleCollet.com> 1:1.9.2-3
changelog:
  - move %{pear_docdir} to /usr/share/doc/pear
  https://fedorahosted.org/fpc/ticket/69
  - update Console_Getopt to 1.3.1 (no change)


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1:1.9.5-3
changelog:
  - Structures_Graph updated from 1.0.4 to 1.1.1
  - Archive_Tar updated from 1.3.12 to 1.4.0
  - Console_Getopt updated from 1.3.1 to 1.4.1
  - XML_Util updated from 1.2.3 to 1.3.0
  -


author: Shawn Iwinski <shawn.iwinski@gmail.com> 2.0.14-2
changelog:
  - Removed BuildRoot
  - Changed php require to php-common
  - Added the following requires based on phpci results:
  php-ctype, php-date, php-iconv, php-json, php-mbstring, php-pcre
  - Removed %defattr from %files section


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1-76
changelog:
  - doublemetaphone updated from 1.0.0 to 1.0.1
  - igbinary updated from 1.1.1 to 1.2.1
  - mongo updated from 1.5.1 to 1.5.5
  - timezonedb updated from 2014.2 to 2014.7
  - xdebug updated from 2.2.4 to 2.2.5
  - ZendOpcache updated from 7.0.2 to 7.0.3


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1-77
changelog:
  - doublemetaphone updated from 1.0.0 to 1.0.1
  - igbinary updated from 1.1.1 to 1.2.1
  - mongo updated from 1.5.1 to 1.5.5
  - timezonedb updated from 2014.2 to 2014.7
  - xdebug updated from 2.2.4 to 2.2.5
  - ZendOpcache updated from 7.0.2 to 7.0.3
  - add APCu extension


author: Eugene Zamriy <ezamriy@cloudlinux.com> 1-89
changelog:
  - jsmin updated from 1.0.0 to 1.1.0
  - redis updated from 2.2.5 to 2.2.7
  - timezonedb updated from 2015.1 to 2015.2
  - mongo updated from 1.6.0 to 1.6.6
  - xdebug updated from 2.2.7 to 2.3.2


author: Eugene Zamriy <ezamriy@cloudlinux.com> 1-90
changelog:
  - timezonedb updated from 2015.2 to 2015.4
  - trader updated from 0.3.0 to 0.4.0
  - mongo updated from 1.6.6 to 1.6.7
  - ZendOpcache updated from 7.0.4 to 7.0.5


author: Eugene Zamriy <ezamriy@cloudlinux.com> 1-91
changelog:
  - pecl_http 2.5.2 added (was missing after some update)
  - raphf 1.1.0 added (was missing after some update)


author: Eugene Zamriy <ezamriy@cloudlinux.com> 1-92
changelog:
  - mongo updated from 1.6.7 to 1.6.11
  - stomp updated from 1.0.6 to 1.0.8
  - timezonedb updated from 2015.4 to 2015.6.1
  - uuid updated from 1.0.3 to 1.0.4
  - xdebug updated from 2.3.2 to 2.3.3


author: Eugene Zamriy <ezamriy@cloudlinux.com> 1-94
changelog:
  - pecl_http updated from 2.5.2 to 2.5.3
  - eio updated from 1.2.5 to 1.2.6
  - timezonedb updated from 2015.6.1 to 2015.7
  - yaf updated from 2.3.2 to 2.3.5


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1-100
changelog:
  - ssh2 updated from 0.12 to 0.13
  - jsmin updated from 1.1.0 to 2.0.1
  - xdebug updated from 2.3.3 to 2.4.0
  - redis updated from 2.2.7 to 2.2.8
  - APCu updated from 4.0.7 to 4.0.11
  - Bitset updated from 1.0.1 to 2.0.3
  - lzf updated from 1.6.2 to 1.6.5
  - timezonedb updated from 2015.7 to 2016.4
  - gender updated from 1.0.0 to 1.1.0
  - stats updated from 1.0.3 to 1.0.5
  - mongo updated from 1.6.11 to 1.6.14
  - radius updated from 1.2.7 to 1.3.0
  - yaml-1.2.0 added to builtin modules


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1-102
changelog:
  - timezonedb updated from 2016.6 to 2016.8
  - pdflib updated from 3.0.4 to 4.0.1
  - oci8 updated from 2.0.8 to 2.0.12
  - xdebug updated from 2.4.0 to 2.4.1
  - yaz updated from 1.1.9 to 1.2.1
  - yaml updated from 1.2.0 to 1.3.0


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1-105
changelog:
  - libsodium 1.0.6 extension added
  - imagick updated from 3.4.3RC1 to 3.4.3RC4
  - mongodb updated from 1.1.9 to 1.2.4


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-144
changelog:
  - Updated gnupg to 1.5.1
  - Updated uploadprogress to 1.1.4
  - Updated rar to 4.2.0
  - ALTPHP-1509: alt-ImageMagick is linked statically now
  - Updated imagick to 3.7.0


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-150
changelog:
  - ALTPHP-1751: Moved mongodb to separate package
  - ALTPHP-1752: Moved trader to separate package
  - ALTPHP-1753: Moved eio to separate package
  - ALTPHP-1756: Moved yaz to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-151
changelog:
  - ALTPHP-1778: Moved APM to separate package
  - ALTPHP-1779: Moved weakref to separate package
  - ALTPHP-1780: Moved solr to separate package
  - ALTPHP-1772: Moved LuaSandbox to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-154
changelog:
  - ALTPHP-1087: Moved amqp to separate package
  - ALTPHP-1825: Moved gnupg to separate package
  - ALTPHP-1826: Moved dbase to separate package
  - ALTPHP-1827: Moved stats to separate package
  - ALTPHP-1828: Moved pdflib to separate package
  - ALTPHP-1822: Moved oci8 to separate package


author: Eugene Zamriy <ezamriy@cloudlinux.com> 1:5.5.25-2
changelog:
  - group is changed to linksafe
  - add linksafe configuration to /etc/sysctl.conf in pre section
  - SCL imitation


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1:5.5.38-2
changelog:
  - update mail-header patch
  - ALTPHP-212: Implement additional code to mail.c to track sending file path (X-PHP-Filename)
  - HardenedPHP patches added:
  -   security bug #72837: integer overflow in bzdecompress caused heap corruption (bz2)
  -   http://bugs.php.net/72837
  -   security bug #70436: Use After Free Vulnerability in unserialize() (core)
  -   http://bugs.php.net/70436
  -   bug #72024: microtime() leaks memory (core)
  -   http://bugs.php.net/72024
  -   security bug #72633: Create an Unexpected Object and Don't Invoke __wakeup() in Deserialization (core)
  -   http://bugs.php.net/72663
  -   security bug #72681: PHP Session Data Injection Vulnerability (core)
  -   http://bugs.php.net/72681
  -   security bug #72807: integer overflow in curl_escape caused heap corruption (curl)
  -   http://bugs.php.net/72807
  -   security bug #72838: Integer overflow lead to heap corruption in sql_regcase (ereg)
  -   http://bugs.php.net/72838
  -   security bug #72697: select_colors write out-of-bounds (gd)
  -   http://bugs.php.net/72697
  -   security bug #72730: imagegammacorrect allows arbitrary write access (gd)
  -   http://bugs.php.net/72730
  -   security bug #72708: php_snmp_parse_oid integer overflow in memory allocation (snmp)
  -   http://bugs.php.net/72708
  -   security bug #72836: integer overflow in base64_decode caused heap corruption (standard)
  -   http://bugs.php.net/72836
  -   security bug #72848: integer overflow in quoted_printable_encode caused heap corruption (standard)
  -   http://bugs.php.net/72848
  -   security bug #72849: integer overflow in urlencode caused heap corruption (standard)
  -   http://bugs.php.net/72849
  -   security bug #72850: integer overflow in php_uuencode caused heap corruption (standard)
  -   http://bugs.php.net/72850
  -   security bug #72771: ftps:// wrapper is vulnerable to protocol downgrade attack (streams)
  -   http://bugs.php.net/72771
  -   security bug #72749: wddx_deserialize allows illegal memory access (wddx)
  -   http://bugs.php.net/72749
  -   security bug #72750: wddx_deserialize null dereference (wddx)
  -   http://bugs.php.net/72750
  -   security bug #72790: wddx_deserialize null dereference with invalid xml (wddx)
  -   http://bugs.php.net/72790
  -   security bug #72799: wddx_deserialize null dereference in php_wddx_pop_element (wddx)
  -   http://bugs.php.net/72799


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1:5.5.38-3
changelog:
  - add HardenedPHP patches:
  -   CVE-2016-7411: Memory Corruption in During Deserialized-object Destruction
  -   CVE-2016-7412: Heap overflow in mysqlnd related to BIT fields
  -   CVE-2016-7413: wddx_deserialize use-after-free
  -   CVE-2016-7414: Out of bound when verify signature of zip phar in phar_parse_zipfile
  -   CVE-2016-7416: SEH buffer overflow msgfmt_format_message
  -   CVE-2016-7417: Missing type check when unserializing SplArray
  -   CVE-2016-7418: Out-Of-Bounds Read in php_wddx_push_element of wddx.c


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1:5.5.38-6
changelog:
  - add HardenedPHP patches:
  -   security bug 73189: Memcpy negative size parameter php_resolve_path
  -   security bug 73147: Use After Free in unserialize()
  -   security bug 73190: memcpy negative parameter _bc_new_num_ex
  -   security bug 73150: missing NULL check in dom_document_save_html
  -   security bug 73284: heap overflow in php_ereg_replace function
  -   CVE-2016-7568: Integer Overflow in gdImageWebpCtx of gd_webp.c
  -   security bug 73218: stack-buffer-overflow through "ResourceBundle" methods
  -   security bug 73208: integer overflow in imap_8bit caused heap corruption
  -   security bug 73082: string length overflow in mb_encode_* function
  -   security bug 73174: heap overflow in php_pcre_replace_impl
  -   security bug 73276: crash in openssl_random_pseudo_bytes function
  -   security bug 73275: crash in openssl_encrypt function
  -   security bug 73017: memory corruption in wordwrap function
  -   security bug 73240: Write out of bounds at number_format
  -   security bug 73073: CachingIterator null dereference when convert to string
  -   security bug 73293: NULL pointer dereference in SimpleXMLElement::asXML()


author: Dmtriy Kasyanov <dkasyanov@cloudlinux.com> 1:5.5.38-13
changelog:
  - ALTPHP-318: bug 69090: opcache: add prefix/xor to cache keys/check permissions or separate caches
  - ALTPHP-323: LSPHP: CRIU support added


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1:5.5.38-19
changelog:
  - add HardenedPHP patches:
  - CVE-2017-11143: wddx parsing empty boolean tag leads to SIGSEGV
  - CVE-2017-11144: negative-size-param (-1) in memcpy in zif_openssl_seal()
  - CVE-2017-11145: wddx_deserialize() heap out-of-bound read via php_parse_date()
  - CVE-2017-11146: wddx_deserialize() heap out-of-bound read via php_parse_date() (caused by CVE-2017-11145)
  - CVE-2017-7890: Buffer over-read into uninitialized memory
  - CVE-2017-9224: Buffer Overflow in match_at() (Oniguruma issue)
  - CVE-2017-9226: Heap corruption in next_state_val() in 15 encodings (Oniguruma issue)
  - CVE-2017-9227: Bug in mbc_enc_len() (Oniguruma issue)
  - CVE-2017-9228: Heap corruption in next_state_val() due to uninitialized local variable (Oniguruma issue)
  - CVE-2017-9229: SIGSEGV in left_adjust_char_head() due to bad dereference (Oniguruma issue)
  - bug74087: Segmentation fault in PHP7.1.1(compiled using the bundled PCRE library)
  - bug74603: PHP INI Parsing Stack Buffer Overflow Vulnerability
  -
  - add LSAPI patches:
  - ALTPHP-351: make lsphp error messaqges more informative
  - ALTPHP-354: SIGCHILD handler fix after CRIU restoring


author: Ivan Danilov <idanilov@cloudlinux.com> - 5.5.38-48
changelog:
  - Fix for bug #76505 (array_merge_recursive() is duplicating sub-array keys)
  - Fix for bug #76532 (excessive memory usage in mb_strimwidth)
  - Fix for bug #76548 pg_fetch_result did not fetch the next row
  - Fix for bug #76488 Memory leak when fetching a BLOB field
  - Fix for #73817: Incorrect entries in get_html_translation_table
  - Fix for #52974: jewish.c: compile error under Windows with GBK charset
  - Fix for #76665: SQLite3Stmt::bindValue() with SQLITE3_FLOAT doesn't juggle
  - Fix for bug #75402 Possible Memory Leak using PDO::CURSOR_SCROLL option
  - Fix for bug #76335 "link(): Bad file descriptor" with non-ASCII path
  - Fix for #76704: mb_detect_order return value varies based on argument type
  - Fix for incorrect restoring of LDFLAGS
  - Fix for bug #72443: Generate enabled extension
  - Fix for bug #65988: Zlib version check fails
  - Fix for arginfo for bzcompress
  - Fix for #68175: RegexIterator pregFlags are NULL instead of 0
  - Fix for bug #76296 (openssl_pkey_get_public does not respect open_basedir)
  - Fix for #68825: Exception in DirectoryIterator::getLinkTarget()
  - Fix for #55146: iconv_mime_decode_headers() skips some headers
  - Fix for #63839: iconv_mime_decode_headers function is skipping headers
  - Fix for #60494: iconv_mime_decode does ignore special characters
  - Fix for #68180: iconv_mime_decode can return extra characters in a header
  - Fix for bug #76367 (NoRewindIterator segfault 11)
  - Fix for bug #76383 (array_map on $GLOBALS returns IS_INDIRECT)
  - Fix for bug #73342


author: Ivan Danilov <idanilov@cloudlinux.com> - 5.5.38-49
changelog:
  - backported fix for #66828: iconv_mime_encode Q-encoding longer than it should be
  - backported fix for bug #76800 (foreach inconsistent if array modified during loop)
  - backported fix for bug #76901
  - backported fix for 76480: Use curl_multi_wait() so that timeouts are respected
  - backported fix for bug #76832 ZendOPcache.MemoryBase periodically deleted by the 
  - backported fix for #75696: posix_getgrnam fails to print details of group
  - backported fix for #74454: Wrong exception being thrown when using ReflectionMethod
  - backported fix for bug #73457
  - backported fix for bug #74764 and add a test case
  - backported fix for #76886: Can't build xmlrpc with expat
  - backported fix for #75273: php_zlib_inflate_filter() may not update bytes_consumed


author: Ivan Danilov <idanilov@cloudlinux.com> - 5.5.38-53
changelog:
  - Fix bug #77242: heap out of bounds read in xmlrpc_decode()
  - Fix bug #77247: heap buffer overflow in phar_detect_phar_fname_ext
  - Fix bug #77269: Potential unsigned underflow in gdImageScale
  - Fix bug #77270: imagecolormatch Out Of Bounds Write on Heap
  - Fix bug #77371: heap buffer overflow in mb regex functions - compile_string_node
  - Fix bug #77380: Global out of bounds read in xmlrpc base64 code
  - Fix bug #77418: Heap overflow in utf32be_mbc_to_code


author: Ivan Danilov <idanilov@cloudlinux.com> - 5.5.38-60
changelog:
  - Fix bug #51068 (glob:// do not support current path relative)
  - Fix bug #77390 (feof might hang on TLS streams in case of fragmented TLS records)
  - Fix bug #77396 - Null Pointer Dereference in phar_create_or_parse_filename
  - Fix #77431 SplFileInfo::__construct() accepts NUL bytes
  - Fix bug #77540 - Invalid Read on exif_process_SOFn
  - Fix #77546 iptcembed broken function
  - Fix bug #77563 - Uninitialized read in exif_process_IFD_in_MAKERNOTE
  - Fix bug #77586 - phar_tar_writeheaders_int() buffer overflow
  - Fix bug #77630 - safer rename() procedure
  - LSAPI sem_timedwait synchronization fixed


author: Ivan Danilov <idanilov@cloudlinux.com> - 5.5.38-75
changelog:
  - Fix bug #77124
  - Fix bug #78192 PDO SQLite SegFault when reuse statement after schema has changed
  - Fix #78212: Segfault in built-in webserver
  - Fix bug #78222 (heap-buffer-overflow on exif_scan_thumbnail)
  - Fix bug #78256 (heap-buffer-overflow on exif_process_user_comment)
  - Fixed bug #78279
  - Fix bug #78291 Missing opcache directives


author: Ivan Danilov <idanilov@cloudlinux.com> - 5.5.38-79
changelog:
  - Fix #69100: Bus error from stream_copy_to_stream
  - Fix #75457: heap-use-after-free
  - Fix #77946: Bad cURL resources returned by curl_multi_info_read
  - Fix #78333: Exif crash (bus error) due to wrong alignment and invalid cast
  - Fix #78342: Bus error in configure test for iconv //IGNORE
  - Fix #78363: Buffer overflow in zendparse


author: Nikolai Mikhno <nmikhno@cloudlinux.com> - 5.5.38-91
changelog:
  - Fix bug #78221: DOMNode::normalize() doesn't remove empty text nodes
  - Fix bug #78875: Long variables cause OOM and temp files are not cleaned (CVE-2019-11048)
  - Fix bug #78876: Long variables in multipart/form-data cause OOM and temp files are not cleaned (CVE-2019-11048)
  - Fix bug #79497: stream_socket_client() throws an unknown error sometimes with <1s timeout
  - Fix bug #79514: Memory leaks while including unexistent file
  - Fix bug #79528: Different object of the same xml between 7.4.5 and 7.4.4


author: Dmitriy Popov <dpopov@cloudlinux.com> - 5.5.38-126
changelog:
  - CVE-2023-3247: Fix missing randomness check for SOAP HTTP Digest
  - Remove generated zend_language files from tarball
  - Expand allowed version list for bison package


author: Dmitriy Popov <dpopov@cloudlinux.com> - 5.5.38-131
changelog:
  - Fix for hardened PHP
  - CVE-2024-2756: fix __Host-/__Secure-cookie bypass due to partial
    CVE-2022-31629 fix
  - CVE-2024-3096: Disallow null character in bcrypt password to fix bug causing
    password_verify to erroneously return true


author: Azat Nurgaliev <anurgaliev@cloudlinux.com> - 5.5.38-141
changelog:
  - Security fixes
  - CVE-2020-7071: avoid parse_url() returning a wrong host to user
  - CVE-2020-7068: fix using of freed hash key in the phar_parse_zipfile function


author: Eugene Zamriy <ezamriy@cloudlinux.com> 1-62
changelog:
  - mongo updated from 1.5.5 to 1.5.7
  - yaf updated from 2.2.9 to 2.3.2
  - APCu updated from 4.0.2 to 4.0.6
  - doublemetaphone updated from 1.0.0 to 1.0.1
  - igbinary updated from 1.1.1 to 1.2.1
  - timezonedb updated from 2014.2 to 2014.7
  - xdebug updated from 2.2.4 to 2.2.5


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1-66
changelog:
  - APCu updated from 4.0.6 to 4.0.7
  - APM updated from 1.1.0beta1 to 1.1.0RC2
  - timezonedb updated from 2014.7 to 2014.9
  - rar-3.0.2 added to builtin modules
  - pecl_http-2.1.3 added to builtin modules
  - propro-1.0.0 added to builtin modules
  - raphf-1.0.4 added to builtin modules


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1-68
changelog:
  - mongo updated from 1.5.7 to 1.5.8
  - stomp updated from 1.0.5 to 1.0.6
  - timezonedb downgraded from 2014.9 to 2014.10
  - xdebug updated from 2.2.5 to 2.2.6
  - libevent-0.1.0 added to builtin modules


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1-68.el6
changelog:
  - mongo updated from 1.5.7 to 1.5.8
  - stomp updated from 1.0.5 to 1.0.6
  - timezonedb downgraded from 2014.9 to 2014.10
  - xdebug updated from 2.2.5 to 2.2.6
  - libevent-0.1.0 added to builtin modules
  -


author: Eugene Zamriy <ezamriy@cloudlinux.com> 1-74
changelog:
  - timezonedb updated from 2015.2 to 2015.4
  - trader updated from 0.3.0 to 0.4.0
  - mongo updated from 1.6.6 to 1.6.7


author: Eugene Zamriy <ezamriy@cloudlinux.com> 1-75
changelog:
  - propro 1.0.0 added (was missing after some update)
  - pecl_http 2.5.2 added (was missing after some update)
  - raphf updated from 1.0.4 to 1.1.0


author: Eugene Zamriy <ezamriy@cloudlinux.com> 1-78
changelog:
  - pecl_http updated from 2.5.2 to 2.5.3
  - eio updated from 1.2.5 to 1.2.6
  - timezonedb updated from 2015.6.1 to 2015.7
  - yaf updated from 2.3.2 to 2.3.5
  -


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1-84
changelog:
  - jsmin updated from 1.1.0 to 2.0.1
  - xdebug updated from 2.3.3 to 2.4.0
  - redis updated from 2.2.7 to 2.2.8
  - APCu updated from 4.0.7 to 4.0.11
  - oci8 updated from 2.0.8 to 2.0.11
  - Bitset updated from 1.0.1 to 2.0.3
  - lzf updated from 1.6.2 to 1.6.3
  - timezonedb updated from 2015.7 to 2016.4
  - gender updated from 1.0.0 to 1.1.0
  - stats updated from 1.0.3 to 1.0.5
  - mongo updated from 1.6.11 to 1.6.14
  - radius updated from 1.2.7 to 1.3.0
  - ssh2 updated from 0.12 to 0.13
  - yaml-1.2.0 added to builtin modules


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1-86
changelog:
  - timezonedb updated from 2016.6 to 2016.8
  - pdflib updated from 3.0.4 to 4.0.1
  - oci8 updated from 2.0.11 to 2.0.12
  - xdebug updated from 2.4.0 to 2.4.1
  - yaz updated from 1.1.9 to 1.2.1
  - yaml updated from 1.2.0 to 1.3.0


author: Eduard Abdullin <eabdullin@cloudlinux.com> 1-127
changelog:
  - ALTPHP-1195: Updated alt-ImageMagick require to 7.1.0 version
  - ALTPHP-1188: Update imagick to 3.5.1


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-133
changelog:
  - Moved igbinary to separate package
  - Moved memcache to separate package
  - Moved memcached to separate package
  - Moved grpc to separate package
  - Moved geos to separate package
  - Moved redis to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-138
changelog:
  - ALTPHP-1786: Moved propro to separate package
  - ALTPHP-1787: Moved raphf to separate package
  - ALTPHP-1788: Moved http to separate package
  - ALTPHP-1789: Moved yaml to separate package
  - ALTPHP-1781: Added dependency to new protobuf extension
  - ALTPHP-1790: Moved msgpack to separate package
  - ALTPHP-1796: CL9 support


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.6.30-2
changelog:
  - ALTPHP-306: LSPHP: Return response code and response status line in cgi/fcgi manner
  - Update CRIU patch to version 7
  - Fix always_populate_raw_post_data


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.6.30-7
changelog:
  - LSPHP: fix php_value wrong priorities
  - LSPHP: fix using options from .user.ini
  - build shmop as build-in extension


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.6.31-2
changelog:
  - ALTPHP-351: make lsphp error messaqges more informative
  - ALTPHP-354: SIGCHILD handler fix after CRIU restoring


author: Ivan Danilov <idanilov@cloudlinux.com> - 5.6.36-5
changelog:
  - Fixed bug #74385 Locale::parseLocale() broken with some arguments
  - Fixed bug #76075 --with-fpm-acl wrongly tries to find libacl on FreeBSD


author: Ivan Danilov <idanilov@cloudlinux.com> - 5.6.38-2
changelog:
  - backported fix for bug #76505 (array_merge_recursive() is duplicating sub-array keys)
  - backported fix for bug #76534 (PHP hangs on 'illegal string offset on string references with an error handler)
  - backported fix for bug #76536 (PHP crashes with core dump when throwing exception in error handler). (Laruence)
  - backported fix for bug #76532 (excessive memory usage in mb_strimwidth)
  - backported fix for bug #76548 pg_fetch_result did not fetch the next row
  - backported fix for bug #74670
  - backported fix for bug #75231
  - backported fix for bug #76333 PHP built-in server does not find files if root path contains special characters
  - backported fix for bug #76488 Memory leak when fetching a BLOB field
  - backported fix for bug #76524 - ZipArchive memory leak
  - backported fix for #73817: Incorrect entries in get_html_translation_table
  - backported fix for #52974: jewish.c: compile error under Windows with GBK charset
  - backported fix for #76665: SQLite3Stmt::bindValue() with SQLITE3_FLOAT doesn't juggle
  - backported fix for bug #75402 Possible Memory Leak using PDO::CURSOR_SCROLL option
  - backported fix for bug #76335 "link(): Bad file descriptor" with non-ASCII path
  - backported fix for #76704: mb_detect_order return value varies based on argument type
  - backported fix for incorrect restoring of LDFLAGS
  - backported fix for bug #72443: Generate enabled extension
  - backported fix for bug #65988: Zlib version check fails
  - backported fix for bug #76709: Minimal required zlib library is 1.2.0.4
  - backported fix for bug #74484 MessageFormatter::formatMessage memory corruption
  - backported fix for arginfo for bzcompress
  - backported fix for bug #76754 (parent private constant in extends class memory leak)
  - backported fix for #68175: RegexIterator pregFlags are NULL instead of 0
  - backported fix for bug #76296 (openssl_pkey_get_public does not respect open_basedir)
  - backported fix for bug #76705 (unusable ssl => peer_fingerprint in stream_context_create())
  - backported fix for #68825: Exception in DirectoryIterator::getLinkTarget()
  - backported fix for #55146: iconv_mime_decode_headers() skips some headers
  - backported fix for #63839: iconv_mime_decode_headers function is skipping headers
  - backported fix for #60494: iconv_mime_decode does ignore special characters
  - backported fix for #68180: iconv_mime_decode can return extra characters in a header
  - backported fix for bug #76367 (NoRewindIterator segfault 11)
  - backported fix for bug #76383 (array_map on $GLOBALS returns IS_INDIRECT)
  - backported fix for bug #73342


author: Ivan Danilov <idanilov@cloudlinux.com> - 5.6.40-15
changelog:
  - Fixed bug #50020 (DateInterval:createDateFromString() silently fails)
  - Fixed bug #76717
  - Fix #77024: SplFileObject::__toString() may return array
  - Fixed bug #77597
  - Fixed bug #77664 (Segmentation fault when using undefined constant in custom wrapper)
  - Fix bug #77677: WCOREDUMP not available on all systems
  - Fixed bug #77697 (Crash on Big_Endian platform)
  - Fix #77700: Writing truecolor images as GIF ignores interlace flag
  - Fixed bug #77722
  - Fixed bug #77742
  - Fixed bug #77765
  - Fix #77767: phpdbg break command help message shows incorrect aliases
  - Fix #77921: static.php.net doesn't work anymore
  - Fix bug #77934 (php-fpm kill -USR2 not working)
  - Fix #77943: imageantialias($image, false); does not work
  - Fix #77944: Wrong meta pdo_type for bigint on LLP64
  - Fixed bug #77945


author: Ivan Danilov <idanilov@cloudlinux.com> - 5.6.40-24
changelog:
  - Fix bug #77124
  - Fix bug #78192 PDO SQLite SegFault when reuse statement after schema has changed
  - Fix #78212: Segfault in built-in webserver
  - Fix bug #78222 (heap-buffer-overflow on exif_scan_thumbnail)
  - Fix bug #78256 (heap-buffer-overflow on exif_process_user_comment)
  - Fixed bug #78279
  - Fix bug #78291 Missing opcache directives
  - Fixed bug #78297


author: Ivan Danilov <idanilov@cloudlinux.com> - 5.6.40-31
changelog:
  - Fix #76342: file_get_contents waits twice specified timeout
  - Fix #76859 stream_get_line skips data if used with data-generating filter
  - Fix #78413: php-fpm request_terminate_timeout does not take effect after fastcgi_finish_request
  - Fix #78579: mb_decode_numericentity: args number inconsistency
  - Fix bug #78599 (env_path_info underflow can lead to RCE) (CVE-2019-11043)


author: Dmitriy Popov <dpopov@cloudlinux.com> - 5.6.40-80
changelog:
  - CVE-2023-3247: Fix missing randomness check for SOAP HTTP Digest
  - Remove generated zend_language files from tarball
  - Constraint max version for bison package


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1:1.9.5-3
changelog:
  - Structures_Graph updated from 1.0.4 to 1.1.1
  - Archive_Tar updated from 1.3.15 to 1.4.0
  - Console_Getopt updated from 1.3.1 to 1.4.1
  - XML_Util updated from 1.2.1 to 1.3.0
  -


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1-21
changelog:
  - doublemetaphone updated from 1.0.0 to 1.0.1
  - mongo updated from 1.5.1 to 1.5.5
  - timezonedb updated from 2014.2 to 2014.5
  - xdebug updated from 2.2.4 to 2.2.5


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1-21.el6
changelog:
  - doublemetaphone updated from 1.0.0 to 1.0.1
  - mongo updated from 1.5.1 to 1.5.5
  - timezonedb updated from 2014.2 to 2014.5
  - xdebug updated from 2.2.4 to 2.2.5
  -


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1-31
changelog:
  - APCu updated from 4.0.6 to 4.0.7
  - APM updated from 1.1.0beta1 to 1.1.0RC2
  - timezonedb updated from 2014.7 to 2014.9
  - rar-3.0.2 added to builtin modules
  - pecl_http-2.1.3 added to builtin modules
  - raphf-1.0.4 added to builtin modules
  - propro-1.0.0 added to builtin modules


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1-33
changelog:
  - mongo updated from 1.5.7 to 1.5.8
  - stomp updated from 1.0.5 to 1.0.6
  - timezonedb downgraded from 2014.9 to 2014.10
  - xdebug updated from 2.2.5 to 2.2.6
  - libevent-0.1.0 added to builtin modules
  - mongo updated from 1.5.7 to 1.5.8
  - stomp updated from 1.0.5 to 1.0.6
  - timezonedb downgraded from 2014.9 to 2014.10
  - xdebug updated from 2.2.5 to 2.2.6
  - libevent-0.1.0 added to builtin modules
  - mongo updated from 1.5.7 to 1.5.8
  - stomp updated from 1.0.5 to 1.0.6
  - timezonedb downgraded from 2014.9 to 2014.10
  - xdebug updated from 2.2.5 to 2.2.6
  - libevent-0.1.0 added to builtin modules
  - mongo updated from 1.5.7 to 1.5.8
  - stomp updated from 1.0.5 to 1.0.6
  - timezonedb downgraded from 2014.9 to 2014.10
  - xdebug updated from 2.2.5 to 2.2.6
  - libevent-0.1.0 added to builtin modules


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1-33.el6
changelog:
  - mongo updated from 1.5.7 to 1.5.8
  - stomp updated from 1.0.5 to 1.0.6
  - timezonedb downgraded from 2014.9 to 2014.10
  - xdebug updated from 2.2.5 to 2.2.6
  - libevent-0.1.0 added to builtin modules
  - mongo updated from 1.5.7 to 1.5.8
  - stomp updated from 1.0.5 to 1.0.6
  - timezonedb downgraded from 2014.9 to 2014.10
  - xdebug updated from 2.2.5 to 2.2.6
  - libevent-0.1.0 added to builtin modules
  - mongo updated from 1.5.7 to 1.5.8
  - stomp updated from 1.0.5 to 1.0.6
  - timezonedb downgraded from 2014.9 to 2014.10
  - xdebug updated from 2.2.5 to 2.2.6
  - libevent-0.1.0 added to builtin modules
  - mongo updated from 1.5.7 to 1.5.8
  - stomp updated from 1.0.5 to 1.0.6
  - timezonedb downgraded from 2014.9 to 2014.10
  - xdebug updated from 2.2.5 to 2.2.6
  - libevent-0.1.0 added to builtin modules
  -


author: Eugene Zamriy <ezamriy@cloudlinux.com> 1-40
changelog:
  - raphf updated from 1.0.4 to 1.1.0
  - pecl_http updated from 2.1.3 to 2.5.2
  - Fixed json extension duplication in http.ini


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1-50
changelog:
  - yaml 1.2.0 extension added
  - rar 3.0.2 extension added
  - jsmin updated from 1.1.0 to 2.0.1
  - APCu updated from 4.0.7 to 4.0.11
  - stats updated from 1.0.3 to 1.0.5
  - redis updated from 2.2.7 to 2.2.8
  - ssh2 updated from 0.12 to 0.13
  - eio updated from 1.2.6 to 2.0.0
  - timezonedb updated from 2015.7 to 2016.4
  - radius updated from 1.2.7 to 1.3.0
  - LZF updated from 1.6.2 to 1.6.3
  - gender updated from 1.0.0 to 1.1.0


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1-52
changelog:
  - timezonedb updated from 2016.6 to 2016.8
  - yaml updated from 1.2.0 to 1.3.0
  - xdebug updated from 2.3.3 to 2.4.1
  - oci8 updated from 2.0.8 to 2.0.12
  - update pdflib from 3.0.4 to 4.0.1
  - update bitset from 2.0.1 to 2.0.3
  - update LZF from 1.6.3 fo 1.6.5
  - update yaz from 1.1.9 to 1.2.1
  - update gnupg from 1.3.6 to 1.4.0


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1-54
changelog:
  - timezonedb updated from 2016.9 to 2016.10
  - imagick updated from 3.1.2 to 3.4.3RC1
  - xdebug updated from 2.4.1 to 2.5.0


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-113
changelog:
  - Moved timezonedb to separate package
  - Moved imagick to separate package
  - Moved xdebug to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-116
changelog:
  - ALTPHP-1786: Moved propro to separate package
  - ALTPHP-1787: Moved raphf to separate package
  - ALTPHP-1788: Moved http to separate package
  - ALTPHP-1789: Moved yaml to separate package
  - ALTPHP-1781: Added dependency to new protobuf extension
  - ALTPHP-1790: Moved msgpack to separate package


author: Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 7.0.33-92
changelog:
  - Security fixes
  - CVE-2024-11233: fix single byte overread with convert.quoted-printable-decode
    filter
  - CVE-2024-11234: fix HTTP fulluri CRLF injection
  - CVE-2024-11236: prevent integer overflow in quoters causing OOB writes
  - Fix #74960: Heap buffer overflow via str_repeat


author: Azat Nurgaliev <anurgaliev@cloudlinux.com> - 7.0.33-96
changelog:
  - Security fixes
  - CVE-2017-9120: Integer overflow in mysqli_real_escape_string()
  - CVE-2017-9119: handle memory limit error during string reallocation correctly
  - CVE-2017-9118: fix out of bounds access in php_pcre_replace_impl


author: Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 7.0.33-97
changelog:
  - Security fixes
  - CVE-2019-9025: fix possible memcpy() execution with negative argument in
    mb_split()
  - CVE-2019-11034: fix possible infoleak or crush caused by read past allocated
    buffer in exif_process_IFD_TAG()


author: Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 7.0.33-99
changelog:
  - Security fixes
  - CVE-2019-11036: fix infoleak of crash via read past allocated buffer in
    exif_process_IFD_TAG()
  - CVE-2019-11035: fix potential infoleak or crash via read past allocated buffer
    in exif_iif_add_value()


author: Eugene Zamriy <ezamriy@cloudlinux.com> 7.0.0-0.alpha.0.2
changelog:
  - Update to the latest phpng snapshot (ce862a25d52850d93e16f784c1953f9a4c50fadc)
  - Remove deprecated mysql.so extension from the spec file


author: Eugene Zamriy <ezamriy@cloudlinux.com> 7.0.0-0.rc.6.1
changelog:
  - update to PHP 7.0.0 RC 6
  - Link Traversal Protection configuration removed from pre section,
  added cloudlinux-linksafe dependency which does the same thing


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 7.0.8-1.1
changelog:
  - ALTPHP-177: Re-patch alt-phpXX with wink_server_is_ready.patch
  - ALTPHP-182: enable pdo_dblib build
  - ALTPHP-185: fix empty configure line


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 7.0.9-1.4
changelog:
  - add mail-header patch
  - ALTPHP-212: Implement additional code to mail.c to track sending file path (X-PHP-Filename)


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> - 7.0.15-2
changelog:
  - ALTPHP-306: LSPHP: Return response code and response status line in cgi/fcgi manner
  - Update CRIU patch to version 7


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 7.0.26-1
changelog:
  - update to 7.0.26
  - ALTPHP-415: Fix MariaDB102 segfault
  - ALTPHP-420: update phpNN.dat files while installing alt-php


author: Ivan Danilov <idanilov@cloudlinux.com> - 7.0.30-5
changelog:
  - Fixed bug #74385 Locale::parseLocale() broken with some arguments
  - Fixed bug #76205 PHP-FPM sporadic crash when running Infinitewp
  - Fixed bug #76075 --with-fpm-acl wrongly tries to find libacl on FreeBSD


author: Ivan Danilov <idanilov@cloudlinux.com> - 7.0.32-2
changelog:
  - backported fix for bug #76505 (array_merge_recursive() is duplicating sub-array keys)
  - backported fix for bug #76502
  - backported fix for bug #76534 (PHP hangs on 'illegal string offset on string references with an error handler)
  - backported fix for bug #76536 (PHP crashes with core dump when throwing exception in error handler). (Laruence)
  - backported fix for bug #76532 (excessive memory usage in mb_strimwidth)
  - backported fix for bug #76548 pg_fetch_result did not fetch the next row
  - backported fix for bug #74670
  - backported fix for bug #75231
  - backported fix for bug #76333 PHP built-in server does not find files if root path contains special characters
  - backported fix for bug #76488 Memory leak when fetching a BLOB field
  - backported fix for bug #76366 (references in sub-array for filtering breaks the filter)
  - backported fix for bug #76524 - ZipArchive memory leak
  - backported fix for #73817: Incorrect entries in get_html_translation_table
  - backported fix for #52974: jewish.c: compile error under Windows with GBK charset
  - backported fix for bug #68553 (array_column: null values in $index_key become incrementing keys in result)
  - backported fix for #76665: SQLite3Stmt::bindValue() with SQLITE3_FLOAT doesn't juggle
  - backported fix for bug #75402 Possible Memory Leak using PDO::CURSOR_SCROLL option
  - backported fix for bug #76335 "link(): Bad file descriptor" with non-ASCII path
  - backported fix for #76704: mb_detect_order return value varies based on argument type
  - backported fix for incorrect restoring of LDFLAGS
  - backported fix for bug #72443: Generate enabled extension
  - backported fix for bug #65988: Zlib version check fails
  - backported fix for bug #76709: Minimal required zlib library is 1.2.0.4
  - backported fix for bug #74484 MessageFormatter::formatMessage memory corruption
  - backported fix for arginfo for bzcompress
  - backported fix for bug #76747 (Opcache treats path containing "test.pharma.tld" as a phar file)
  - backported fix for bug #76754 (parent private constant in extends class memory leak)
  - backported fix for #68175: RegexIterator pregFlags are NULL instead of 0
  - backported fix for bug #76296 (openssl_pkey_get_public does not respect open_basedir)
  - backported fix for bug #76705 (unusable ssl => peer_fingerprint in stream_context_create())
  - backported fix for bug #76777 and added test
  - backported fix for #76778: array_reduce leaks memory if callback throws exception
  - backported fix for #68825: Exception in DirectoryIterator::getLinkTarget()
  - backported fix for #55146: iconv_mime_decode_headers() skips some headers
  - backported fix for #63839: iconv_mime_decode_headers function is skipping headers
  - backported fix for #60494: iconv_mime_decode does ignore special characters
  - backported fix for #68180: iconv_mime_decode can return extra characters in a header
  - backported fix for bug #76174 (openssl extension fails to build with LibreSSL 2.7)
  - backported fix for bug #76367 (NoRewindIterator segfault 11)
  - backported fix for bug #76383 (array_map on $GLOBALS returns IS_INDIRECT)
  - backported fix for bug #76462 Undefined property: DateInterval::$f
  - backported fix for bug #73342


author: Ivan Danilov <idanilov@cloudlinux.com> - 7.0.32-3
changelog:
  - backported fix for bug #76800 (foreach inconsistent if array modified during loop)
  - backported fix for bug #76901
  - backported fix for 76480: Use curl_multi_wait() so that timeouts are respected
  - backported fix for #66828: iconv_mime_encode Q-encoding longer than it should be
  - backported fix for bug #76832 ZendOPcache.MemoryBase periodically deleted by the
  - backported fix for bug #76796
  - backported fix for #75696: posix_getgrnam fails to print details of group
  - backported fix for #74454: Wrong exception being thrown when using ReflectionMethod
  - backported fix for bug #73457
  - backported fix for bug #74764 and add a test case
  - backported fix for bug #75533: array_reduce is slow when $carry is large array
  - backported fix for #76886: Can't build xmlrpc with expat
  - backported fix for #75273: php_zlib_inflate_filter() may not update bytes_consumed


author: Ivan Danilov <idanilov@cloudlinux.com> - 7.0.33-7
changelog:
  - Fix #77269: Potential unsigned underflow in gdImageScale
  - Fix #77270: imagecolormatch Out Of Bounds Write on Heap
  - Fix bug #77370 - check that we do not read past buffer end when parsing multibytes
  - Fix bug #77371 (heap buffer overflow in mb regex functions - compile_string_node)
  - Fix bug #77418 - Heap overflow in utf32be_mbc_to_code
  - Fix bug #77247 (heap buffer overflow in phar_detect_phar_fname_ext)
  - Fix bug #77242 (heap out of bounds read in xmlrpc_decode())
  - Fix bug #77380  (Global out of bounds read in xmlrpc base64 code)


author: Ivan Danilov <idanilov@cloudlinux.com> - 7.0.33-17
changelog:
  - Fixed bug #50020 (DateInterval:createDateFromString() silently fails)
  - Fixed bug #75113: Added DatePeriod::getRecurrences() method.
  - Fixed bug #75186
  - Fixed bug #76717
  - Fix #77024: SplFileObject::__toString() may return array
  - Fixed bug #77345 (Stack Overflow caused by circular reference in garbage collection)
  - Fixed bug #77597
  - Fixed bug #77652
  - Fixed bug #77660 (Segmentation fault on break 2147483648)
  - Fixed bug #77664 (Segmentation fault when using undefined constant in custom wrapper)
  - Fix shared module generation on AIX bug #77676
  - Fix bug #77677: WCOREDUMP not available on all systems
  - Fixed bug #77697 (Crash on Big_Endian platform)
  - Fix #77700: Writing truecolor images as GIF ignores interlace flag
  - Fixed bug #77722
  - Fixed bug #77738 (Nullptr deref in zend_compile_expr)
  - Fixed bug #77742
  - Fixed bug #77765
  - Fix #77767: phpdbg break command help message shows incorrect aliases
  - Fixed bug #77843
  - Fix #77921: static.php.net doesn't work anymore
  - Fix bug #77934 (php-fpm kill -USR2 not working)
  - Fix #77943: imageantialias($image, false); does not work
  - Fix #77944: Wrong meta pdo_type for bigint on LLP64
  - Fixed bug #77945


author: Ivan Danilov <idanilov@cloudlinux.com> - 7.0.33-26
changelog:
  - Fix bug #77124
  - Fix #77919: Potential UAF in Phar RSHUTDOWN
  - Fix #78173: XML-RPC mutates immutable objects during encoding
  - Fix bug #78192 PDO SQLite SegFault when reuse statement after schema has changed
  - Fix #78202: Opcache stats for cache hits are capped at 32bit NUM
  - Fix #78212: Segfault in built-in webserver
  - Fix bug #78222 (heap-buffer-overflow on exif_scan_thumbnail)
  - Fix #78241: touch() does not handle dates after 2038 in PHP 64-bit
  - Fix bug #78256 (heap-buffer-overflow on exif_process_user_comment)
  - Fixed bug #78279
  - Fix bug #78291 Missing opcache directives
  - Fixed bug #78297


author: Ivan Danilov <idanilov@cloudlinux.com> - 7.0.33-29
changelog:
  - Fix #69100: Bus error from stream_copy_to_stream
  - Fix #75457: heap-use-after-free
  - Fix #77946: Bad cURL resources returned by curl_multi_info_read
  - Fix #78282: atime and mtime mismatch
  - Fix #78326: improper memory deallocation on stream_get_contents
  - Fix #78333: Exif crash (bus error) due to wrong alignment and invalid cast
  - Fix #78342: Bus error in configure test for iconv //IGNORE
  - Fix #78379: (Cast to object confuses GC, causes crash)


author: Ivan Danilov <idanilov@cloudlinux.com> - 7.0.33-32
changelog:
  - Fix #76342: file_get_contents waits twice specified timeout
  - Fix #76859 stream_get_line skips data if used with data-generating filter
  - Fix #78413: php-fpm request_terminate_timeout does not take effect after fastcgi_finish_request
  - Fix #78535: auto_detect_line_endings value not parsed as bool
  - Fix #78579: mb_decode_numericentity: args number inconsistency
  - Fix bug #78599 (env_path_info underflow can lead to RCE) (CVE-2019-11043)
  - Fixed bug #78612
  - Fix #78620: Out of memory error
  - Fix #78641: addGlob can modify given remove_path value


author: Ivan Danilov <idanilov@cloudlinux.com> - 7.0.33-33
changelog:
  - Fixed bug #78793 (Use-after-free in exif parsing under memory sanitizer)
  - Fixed bug #78878 (Buffer underflow in bc_shift_addsub). (CVE-2019-11046)
  - Fixed bug #78910 (Heap-buffer-overflow READ in exif). (CVE-2019-11047)
  - Fixed bug #78863 (DirectoryIterator class silently truncates after a nullbyte). (CVE-2019-11045)
  - Fixed bug #78862 (link() silently truncates after a null byte on Windows). (CVE-2019-11044)
  - Updated Litespeed SAPI to 7.6


author: Ivan Danilov <idanilov@cloudlinux.com> - 7.0.33-36
changelog:
  - Fix bug #77569: Write Access Violation in DomImplementation
  - Fix bug #79078: Hypothetical use-after-free in curl_multi_add_handle
  - Fix bug #79282: Use-of-uninitialized-value in exif (CVE-2020-7064)
  - Fix bug #79329: get_headers silently truncates after a null byte (CVE-2020-7066)


author: Nikolai Mikhno <nmikhno@cloudlinux.com> - 7.0.33-40
changelog:
  - Fix bug #61597: SXE properties may lack attributes and content
  - Fix bug #74940: DateTimeZone loose comparison always true
  - Fix bug #75673: SplStack::unserialize() behavior
  - Fix bug #79199: curl_copy_handle() memory leak
  - Fix bug #79200: Some iconv functions cut Windows-1258
  - Fix bug #79296: ZipArchive::open fails on empty file (libzip 1.6.0)
  - Fix bug #79330: shell_exec() silently truncates after a null byte
  - Fix bug #79364: When copy empty array, next key is unspecified
  - Fix bug #79393: Null coalescing operator failing with SplFixedArray
  - Fix bug #79396: setting Date/Time during a forward DST transition
  - Fix bug #79410: system() swallows last chunk if it is exactly 4095 bytes without newline
  - Fix bug #79424: php_zip_glob uses gl_pathc after call to globfree
  - Fix bug #79465: OOB Read in urldecode() (CVE-2020-7067)
  - Fix bug #79468: SIGSEGV when closing stream handle with a stream filter appended


author: Nikolai Mikhno <nmikhno@cloudlinux.com> - 7.0.33-42
changelog:
  - Fix bug #78221: DOMNode::normalize() doesn't remove empty text nodes
  - Fix bug #78875: Long variables cause OOM and temp files are not cleaned (CVE-2019-11048)
  - Fix bug #78876: Long variables in multipart/form-data cause OOM and temp files are not cleaned (CVE-2019-11048)
  - Fix bug #79497: stream_socket_client() throws an unknown error sometimes with <1s timeout
  - Fix bug #79503: Memory leak on duplicate metadata
  - Fix bug #79514: Memory leaks while including unexistent file
  - Fix bug #79528: Different object of the same xml between 7.4.5 and 7.4.4


author: Nikolai Mikhno <nmikhno@cloudlinux.com> - 7.0.33-44
changelog:
  - Fix bug #62890: default_socket_timeout=-1 causes connection to timeout
  - Fix bug #70362: Can't copy() large 'data://' with open_basedir
  - Fix bug #73527: Invalid memory access in php_filter_strip
  - Fix bug #74267: segfault with streams and invalid data
  - Fix bug #79783: Segfault in php_str_replace_common
  - Fix bug #79787: mb_strimwidth does not trim string
  - Fix bug #79797: Use of freed hash key in the phar_parse_zipfile function (CVE-2020-7068)
  - Fix bug #79877: getimagesize function silently truncates after a null byte


author: Nikolai Mikhno <nmikhno@cloudlinux.com> - 7.0.33-47
changelog:
  - Fix bug #79699: PHP parses encoded cookie names so malicious `__Host-` cookies can be sent (CVE-2020-7070)
  - Fix bug #79825: opcache.file_cache causes SIGSEGV when custom opcode handlers changed
  - Fix bug #79986: str_ireplace bug with diacritics characters
  - Fix bug #80007: Potential type confusion in unixtojd() parameter parsing
  - Fix bug #80049: Memleak when coercing integers to string via variadic argument


author: Daniil Leonov <dleonov@cloudlinux.com> - 7.0.33-51
changelog:
  - Fix Bug #73809: Phar Zip parse crash - mmap fail
  - Fix Bug #77322: PharData::addEmptyDir('/') Possible integer overflow
  - Fix Bug #77961: Slow reqursive functions with MySQL
  - Fix Bug #80366: Potential issue in ext/standard/iptc.c: Return Value Not Checked
  - Fix Bug #80411: References to null-serialized object break serialize()


author: Daniil Leonov <dleonov@cloudlinux.com> - 7.0.33-54
changelog:
  - Fix bug #80523: Bogus parse error on >4GB source code
  - Fix bug #80672: Null Dereference in SoapClient. (CVE-2021-21702)


author: Sergey Fokin <sfokin@cloudlinux.com> - 7.0.33-66
changelog:
  - ALTPHP-1255: rebuild with removed webp support from php for getting it from alt-ImageMagick
  - ALTPHP-1266: update litespeed to 8.0.1


author: Pavel Mayorov <pmayorov@cloudlinux.com> - 7.0.33-71
changelog:
  - Fix for Harden PHP
  - CVE-2022-31631: Fix integer overflow that could cause PDO::quote() to return an improperly quoted string
  - Fix build dependencies


author: Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 7.0.33-86
changelog:
  - Fix for hardened PHP
  - CVE-2024-5458: Fix early-out for ipv6 hostname validation, ensure full check
    is performed


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1:1.9.5-3
changelog:
  - Structures_Graph updated from 1.0.4 to 1.1.1
  - Archive_Tar updated from 1.3.15 to 1.4.0
  - Console_Getopt updated from 1.3.1 to 1.4.1
  - XML_Util updated from 1.2.1 to 1.3.0


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1-6
changelog:
  - APCu updated from 5.1.0 to 5.1.2
  - eio 2.0.0RC1 extension added
  - imagick 3.4.0RC3 extension added
  - oci8 2.1.0 extension added
  - pecl_http 3.0.0RC1 extension added
  - propro 2.0.0RC1 extension added
  - raphf 2.0.0RC1 extension added


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1-10
changelog:
  - update APCu to 5.1.3
  - update pecl_http to 3.0.1
  - update raphf to 2.0.0
  - update propro to 2.0.0
  - update oci8 to 1.1.0
  - update imagick to 3.4.1
  - update timezonedb to 2016.2
  - update xdebug to 2.4.0


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1-13
changelog:
  - inotify 2.0.0 extension added
  - stats 2.0.3 extension added
  - yaml 2.0.0RC8 extension added
  - updated imagick to 3.4.3RC1
  - updated oci8 to 2.1.1
  - added libyaml to requires


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1-15
changelog:
  - updated timezonedb from 2016.4 to 2016.6
  - updated redis from 2.2.8 to 3.0.0
  - mailparse 3.0.1 extension added


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1-16
changelog:
  - geoip 1.1.1 extension added
  - gnupg 1.4.0 extension added
  - LZF updated from 1.6.3 to 1.6.5
  - oci8 updated from 2.1.1 to 2.1.2


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1-17
changelog:
  - dbase updated from 7.0.0-338472 to 7.0.0beta1
  - xdebug updated from 2.4.0 to 2.4.1
  - APCu updated from 5.1.5 to 5.1.7
  - timezonedb updated from 2016.6 to 2016.8
  - yaml updated from 2.0.0RC8 to 2.0.0
  - pdflib 4.0.1 extension added
  - bitset 3.0.0 extension added
  - yaz 1.2.1 extension added


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1-18
changelog:
  - mongodb 1.1.9 extension added (CL6, CL7)
  - ssh2 1.0 extension added
  - timezonedb updated from 2016.8 to 2016.9


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1-19
changelog:
  - igbinary 2.0.1 extension added
  - oauth 2.0.2 extension added
  - rar 4.0.3 (dev) extension added
  - uploadprogress 1.0.3.1 (dev) extension added
  - mailparse updated from 3.0.1 to 3.0.2
  - redis updated from 3.0.0 to 3.1.0
  - timezonedb updated from 2016.9 to 2016.10
  - xdebug updated from 2.4.1 to 2.5.0


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1-20
changelog:
  - libsodium 1.0.6 extension added
  - imagick updated from 3.4.3RC1 to 3.4.3RC4
  - apcu updated from 5.1.7 to 5.1.8
  - mongodb updated from 1.1.9 to 1.2.4


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1-21
changelog:
  - timezonedb updated from 2016.10 to 2017.2
  - memcached updated from 3.0.0dev to 3.0.3
  - zmq 1.1.3 added
  - sqlsrv 4.3.0RC1 added
  - pdo_sqlsrv 4.3.0RC1 added


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1-22
changelog:
  - LZF updated to 1.6.6
  - eio updated to 2.0.2
  - igbinary updated to 2.0.4
  - oci8 updated to 2.1.7
  - pdo_sqlsrv updated to 4.3.0
  - redis updated to 3.1.4
  - sqlsrv updated to 4.3.0
  - xdebug updated to 2.5.5
  - yaml updated to 2.0.2


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1-42
changelog:
  - ALTPHP-563: updated mongodb extension to version 1.5.2
  - Updated timezonedb extension to 2018.5 version


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1-43
changelog:
  - ALTPHP-583: Updated redis extension to 4.1.1 version
  - ALTPHP-568: Fixed test execution for Zend Opcache


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1-47
changelog:
  - ALTPHP-609: Updated apcu extension to 5.1.12 version
  - Updated timezonedb extension to 2018.7 version


author: Darya Malyavkina <dmalyavkina@cloudlinux.com> - 1-49
changelog:
  - ALTPHP-628: Updated apcu extensions to 5.1.14 version
  - Updated redis extensions to 4.2.0 version
  - Updated swoole extensions to 4.2.9 version
  - Updated yaml extensions to 2.0.3 version
  - Updated libsodium extensions to 2.0.15 version


author: Darya Malyavkina <dmalyavkina@cloudlinux.com> - 1-57
changelog:
  - Update timezinedb to 2019.1 version
  - Update mongodb to 1.5.5 version
  - Update imagick to 3.4.4 version
  - Update dbase to 7.0.0 version
  - Update swoole to 4.3.5 version


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-93
changelog:
  - Updated gnupg to 1.5.1
  - Updated gmagick to 2.0.6RC1
  - Updated uploadprogress to 2.0.2
  - Updated rar to 4.2.0
  - ALTPHP-1509: alt-ImageMagick is linked statically now
  - Brought back old newrelic for CL6


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-96
changelog:
  - Moved swoole to separate package
  - Moved gender to separate package
  - Moved uuid to separate package
  - Moved rar to separate package
  - Added dependency to new msgpack extension in separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-98
changelog:
  - ALTPHP-1751: Moved mongodb to separate package
  - ALTPHP-1752: Moved trader to separate package
  - ALTPHP-1753: Moved eio to separate package
  - ALTPHP-1755: Moved sqlsrv to separate package
  - ALTPHP-1756: Moved yaz to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-99
changelog:
  - ALTPHP-1778: Added APM in separate package
  - ALTPHP-1779: Added weakref in separate package
  - ALTPHP-1780: Moved solr to separate package
  - ALTPHP-1772: Moved LuaSandbox to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-100
changelog:
  - ALTPHP-1786: Moved propro to separate package
  - ALTPHP-1787: Moved raphf to separate package
  - ALTPHP-1788: Moved http to separate package
  - ALTPHP-1789: Moved yaml to separate package
  - ALTPHP-1781: Added dependency to new protobuf extension


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-101
changelog:
  - ALTPHP-1800: Moved gmagick to separate package
  - ALTPHP-1801: Moved apcu to separate package
  - ALTPHP-1798: Added dependency to new apcu-bc extension
  - ALTPHP-1802: Moved rrd to separate package
  - ALTPHP-1803: Moved oauth to separate package
  - ALTPHP-1804: Moved zmq to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-103
changelog:
  - ALTPHP-1935: Moved xhprof to separate package
  - ALTPHP-1946: Moved bitset to separate package
  - ALTPHP-1947: Moved gearman to separate package
  - ALTPHP-1948: Moved geoip to separate package
  - ALTPHP-1949: Moved htscanner to separate package
  - ALTPHP-1950: Moved inotify to separate package
  - ALTPHP-1951: Moved jsmin to separate package


author: Eduard Chiganov <echiganov@cloudlinux.com> 3.2.15-1
changelog:
  - EA4D-454: Create alt-phpXX-pecl-igbinary.
  - ALTPHP-1686: Newer version of igbinary for alt-php 70-83.


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 7.1.0-0.alpha.3.1
changelog:
  - update to 7.1.0alpha3
  - ALTPHP-182: enable pdo_dblib build
  - ALTPHP-177: Re-patch alt-phpXX with wink_server_is_ready.patch


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 7.1.0-0.beta.2.1
changelog:
  - ALTPHP-211: update to 7.1.0beta2
  - ALTPHP-203: add requires(pre): cloudlinux-linksafe
  - ALTPHP-202: add enable-opcache-file config option


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 7.1.0-0.beta.3.1
changelog:
  - update to 7.1.0beta3
  - add mail-header patch
  - ALTPHP-212: Implement additional code to mail.c to track sending file path (X-PHP-Filename)


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 7.1.0-0.beta.3.2
changelog:
  - ALTPHP-220: remove alt-php71 lines from /etc/cl.selector/selector.conf
  - add libc-client require for IMAP


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 7.1.0-3
changelog:
  - ALTPHP-292: do not build shared extensions in LSPHP binary
  - ALTPHP-290: add odbc and pdo_odbc extensions


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 7.1.12-1
changelog:
  - update to 7.1.12
  - ALTPHP-415: Fix MariaDB102 segfault
  - ALTPHP-420: update phpNN.dat files while installing alt-php


author: Sergey Fokin <sfokin@cloudlinux.com> - 7.1.28-4
changelog:
  - add all extensions in default.ini and disable by default except mysqli.so
  - update plesk php hadlers if add new extensions in default.ini
  - set "serialize_precision = -1" in php.ini


author: Ivan Danilov <idanilov@cloudlinux.com> - 7.1.33-3
changelog:
  - Fix bug #79037: global buffer-overflow in `mbfl_filt_conv_big5_wchar` (CVE-2020-7060)
  - Fix bug #79082: Files added to tar with Phar::buildFromIterator have all-access permissions (CVE-2020-7063)
  - Fix bug #79091: heap use-after-free in session_create_id()
  - Fix bug #79099: OOB read in php_strip_tags_ex (CVE-2020-7059)
  - Fix bug #79221: Null Pointer Dereference in PHP Session Upload Progress (CVE-2020-7062)


author: Nikolai Mikhno <nmikhno@cloudlinux.com> - 7.1.33-9
changelog:
  - Fix bug #61597: SXE properties may lack attributes and content
  - Fix bug #74940: DateTimeZone loose comparison always true
  - Fix bug #75673: SplStack::unserialize() behavior
  - Fix bug #79199: curl_copy_handle() memory leak
  - Fix bug #79200: Some iconv functions cut Windows-1258
  - Fix bug #79296: ZipArchive::open fails on empty file (libzip 1.6.0)
  - Fix bug #79330: shell_exec() silently truncates after a null byte
  - Fix bug #79364: When copy empty array, next key is unspecified
  - Fix bug #79393: Null coalescing operator failing with SplFixedArray
  - Fix bug #79396: setting Date/Time during a forward DST transition
  - Fix bug #79410: system() swallows last chunk if it is exactly 4095 bytes without newline
  - Fix bug #79413: session_create_id() fails for active sessions
  - Fix bug #79424: php_zip_glob uses gl_pathc after call to globfree
  - Fix bug #79465: OOB Read in urldecode() (CVE-2020-7067)
  - Fix bug #79468: SIGSEGV when closing stream handle with a stream filter appended


author: Nikolai Mikhno <nmikhno@cloudlinux.com> - 7.1.33-13
changelog:
  - Fix bug #79787: mb_strimwidth does not trim string
  - Fix bug #79797: Use of freed hash key in the phar_parse_zipfile function (CVE-2020-7068)
  - Fix bug #70362: Can't copy() large 'data://' with open_basedir
  - Fix bug #73527: Invalid memory access in php_filter_strip
  - Fix bug #74267: segfault with streams and invalid data
  - Fix bug #79783: Segfault in php_str_replace_common
  - Fix bug #79877: getimagesize function silently truncates after a null byte
  - Fix bug #62890: default_socket_timeout=-1 causes connection to timeout


author: Nikolai Mikhno <nmikhno@cloudlinux.com> - 7.1.33-16
changelog:
  - Fix bug #79601: Wrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV (CVE-2020-7069)
  - Fix bug #79699: PHP parses encoded cookie names so malicious `__Host-` cookies can be sent (CVE-2020-7070)
  - Fix bug #79825: opcache.file_cache causes SIGSEGV when custom opcode handlers changed
  - Fix bug #79986: str_ireplace bug with diacritics characters
  - Fix bug #80007: Potential type confusion in unixtojd() parameter parsing
  - Fix bug #80049: Memleak when coercing integers to string via variadic argument


author: Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 7.1.33-62
changelog:
  - Security fixes
  - CVE-2024-11233: fix single byte overread with convert.quoted-printable-decode
    filter
  - CVE-2024-11234: fix HTTP fulluri CRLF injection
  - CVE-2024-11236: prevent integer overflow in quoters causing OOB writes
  - Fix #74960: heap buffer overflow via str_repeat


author: Azat Nurgaliev <anurgaliev@cloudlinux.com> - 7.1.33-65
changelog:
  - Security fixes
  - CVE-2017-9118: fix out of bounds access in php_pcre_replace_impl
  - CVE-2017-8923: fix integer overflow when concatenating strings
  - CVE-2017-9120: Integer overflow in mysqli_real_escape_string()
  - CVE-2017-9119: handle memory limit error during string reallocation correctly


author: Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 7.1.33-66
changelog:
  - Security fixes
  - CVE-2019-9025: fix possible memcpy() execution with negative argument in
    mb_split()


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 7.1.12-1
changelog:
  - update to 7.1.12
  - ALTPHP-415: Fix MariaDB102 segfault
  - bug70110: Increase the PCRE JIT stack size to 512K


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1-4
changelog:
  - mongodb 1.1.9 extension added
  - ssh2 1.0 extension added
  - timezonedb updated from 2016.6 to 2016.9
  - redis updated from 2.2.8 to 3.0.0


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1-5
changelog:
  - igbinary 2.0.1 extension added
  - mailparse 3.0.2 extension added
  - xdebug 2.5.0 extension added
  - oauth 2.0.2 extension added
  - rar 4.0.3 (dev) extension added
  - uploadprogress 1.0.3.1 (dev) extension added
  - redis updated from 3.0.0 to 3.1.0
  - timezonedb updated from 2016.9 to 2016.10
  - apcu updated from 5.1.5 to 5.1.7
  - yaml updated from 2.0.0RC8 to 2.0.0


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1-7
changelog:
  - timezonedb updated from 2016.10 to 2017.2
  - memcached updated from 3.0.0dev to 3.0.3
  - zmq 1.1.3 added
  - sqlsrv 4.3.0RC1 added (CL7)
  - pdo_sqlsrv 4.3.0RC1 added (CL7)


author: Sergey Fokin <sfokin@cloudlinux.com> - 1-26
changelog:
  - fix logrotate permissions
  - fix install newrelic for php > 7.0
  - disable debuginfo and strip binaries


author: Darya Malyavkina <dmalyavkina@cloudlinux.com> - 1-37
changelog:
  - ALTPHP-627: Updated apcu extensions to 5.1.14 version
  - Updated redis extensions to 4.2.0 version
  - Updated swoole extensions to 4.2.9 version
  - Updated yaml extensions to 2.0.3 version
  - Updated libsodium extensions to 2.0.15 version


author: Darya Malyavkina <dmalyavkina@cloudlinux.com> - 1-47
changelog:
  - Update timezinedb to 2019.3 version
  - Update xdebug to 2.8.0 version
  - Update swoole to 4.4.12 version


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-83
changelog:
  - Updated gnupg to 1.5.1
  - Updated gmagick to 2.0.6RC1
  - Updated uploadprogress to 2.0.2
  - Updated rar to 4.2.0
  - ALTPHP-1509: alt-ImageMagick is linked statically now
  - ALTPHP-1507: Updated swoole to 4.8.13
  - Brought back old newrelic for CL6


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-84
changelog:
  - Moved uploadprogress to separate package
  - Moved newrelic to separate package
  - Added dependency to new scoutapm extension in separate package


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 7.2.0-0.beta.3.2
changelog:
  - add symlinks for MultiPHP support
  - change permissions for /opt/alt/php72/var/lib/php/session to 5733
  - session.save_path set to "/opt/alt/phpXY/var/lib/php/sessions"
  - enable JIT support in PCRE


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 7.2.0-0.rc.6.2
changelog:
  - ALTPHP-415: Fix MariaDB102 segfault
  - ALTPHP-420: update phpNN.dat files while installing alt-php
  - bug70110: Increase the PCRE JIT stack size to 512K


author: Sergey Fokin <sfokin@cloudlinux.com> - 7.2.21-2
changelog:
  - make php.d.all as symbol link for php.d.all.def
  - rename ini config files for zts modules
  - fix posttrans to non-overwrite /etc/cl.selector/selector.conf


author: Pavel Mayorov <pmayorov@cloudlinux.com> - 7.2.34-22
changelog:
  - Fix for Harden PHP
  - CVE-2022-31628: Fix potential infinite recursion in phar wrapper when using quine gzip file
  - CVE-2022-31629: Add cookie integrity validation


author: Pavel Mayorov <pmayorov@cloudlinux.com> - 7.2.34-23
changelog:
  - Fix for Harden PHP
  - CVE-2022-37454: Fix buffer overflow in the Keccak XKCP SHA-3 reference implementation


author: Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 7.2.34-47
changelog:
  - Security fixes
  - CVE-2024-11233: fix single byte overread with convert.quoted-printable-decode
    filter
  - CVE-2024-11234: fix HTTP fulluri CRLF injection
  - CVE-2024-11236: prevent integer overflow in quoters causing OOB writes
  - Fix #74960: heap buffer overflow via str_repeat
  - Fix #74267: segfault with streams and invalid data


author: Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 7.2.34-50
changelog:
  - Security fixes
  - CVE-2019-19246: fix heap-based buffer over-read in str_lower_case_match in
    regexec.c
  - CVE-2019-9025: fix possible memcpy() execution with negative argument in
    mb_split()


author: Azat Nurgaliev <anurgaliev@cloudlinux.com> - 7.2.34-52
changelog:
  - Security fixes
  - CVE-2017-8923: fix integer overflow when concatenating strings
  - CVE-2017-9118: fix out of bounds access in php_pcre_replace_impl
  - CVE-2017-9119: handle memory limit error during string reallocation correctly
  - CVE-2017-9120: Integer overflow in mysqli_real_escape_string()


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> - 1-10
changelog:
  - extension memcached updated to 3.0.4
  - extension pdo_sqlsrv updated to 4.3.0
  - extension sqlsrv updated to 4.3.0


author: Darya Malyavkina <dmalyavkina@cloudlinux.com> - 1-31
changelog:
  - ALTPHP-626: Updated apcu extensions to 5.1.14 version
  - Updated redis extensions to 4.2.0 version
  - Updated swoole extensions to 4.2.9 version
  - Updated yaml extensions to 2.0.3 version
  - Updated libsodium extensions to 2.0.15 version


author: Ivan Danilov <idanilov@cloudlinux.com> - 1-34
changelog:
  - ALTPHP-645: Added libcurl in dependencies for pecl_http
  - Remove waste libsodium-devel from requirements


author: Nikolai Mikhno <nmikhno@cloudlinux.com> - 1-53.2
changelog:
  - Improved checking during build process
  - Improved build process
  - Removed pdo_sqlsrv and sqlsrv from i686 builds


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-75
changelog:
  - ALTPHP-1269: Update xdebug to 3.1.4 version
  - Update timezonedb to version 2021.5
  - Update imagick to version 3.6.0
  - Update mongodb to version 1.13.0
  - Update swoole to version 4.8.9


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-87
changelog:
  - Updated gnupg to 1.5.1
  - Updated gmagick to 2.0.6RC1
  - Updated uploadprogress to 2.0.2
  - alt-ImageMagick is linked statically now
  - Updated swoole to 4.8.13
  - Brought back old newrelic for CL6


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-90
changelog:
  - Moved swoole to separate package
  - Moved gender to separate package
  - Moved uuid to separate package
  - Added dependency to new rar extension in separate package
  - Added dependency to new msgpack extension in separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-93
changelog:
  - ALTPHP-1778: Added APM in separate package
  - ALTPHP-1779: Added weakref in separate package
  - ALTPHP-1780: Added solr in separate package
  - ALTPHP-1772: Moved LuaSandbox to separate package


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 7.3.0alpha2-2
changelog:
  - ALTPHP-511: added patches to avoid creating zombies when using lsphp
  - ALTPHP-539: Improved Litespeed SIGTERM cleanup handling patch


author: Dmitriy Popov <dpopov@cloudlinux.com> - 7.3.33-23
changelog:
  - Fix for hardened PHP
  - CVE-2024-3096: Disallow null character in bcrypt password to fix bug causing
    password_verify to erroneously return true
  - CVE-2024-2756: fix __Host-/__Secure-cookie bypass due to partial
    CVE-2022-31629 fix


author: Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 7.3.33-33
changelog:
  - Security fixes
  - CVE-2024-11234: fix HTTP fulluri CRLF injection
  - CVE-2024-11236: prevent integer overflow in quoters causing OOB writes
  - CVE-2024-11233: fix single byte overread with convert.quoted-printable-decode
    filter


author: Azat Nurgaliev <anurgaliev@cloudlinux.com> - 7.3.33-36
changelog:
  - Security fixes
  - CVE-2017-8923: fix integer overflow when concatenating strings
  - CVE-2017-9118: fix out of bounds access in php_pcre_replace_impl


author: Darya Malyavkina <dmalyavkina@cloudlinux.com> - 1-RC6
changelog:
  - ALTPHP-625: Updated apcu extensions to 5.1.14 version
  - Updated redis extensions to 4.2.0 version
  - Added swoole extensions to 4.2.9 version
  - Updated yaml extensions to 2.0.3 version
  - Added libsodium extensions to 2.0.15 version


author: Sergey Fokin <sfokin@cloudlinux.com> - 1-4
changelog:
  - update newrelic to 8.5.0.235
  - fix logrotate permissions for newrelic extension
  - update memcached to 3.1.3
  - update oci8 to 2.2.0
  - update xdebug to 2.7.0beta1
  - update yaf to 3.0.7


author: Ivan Danilov <idanilov@cloudlinux.com> - 1-36
changelog:
  - ALTPHP-1023: update tideways to 5.0.4
  - ALTPHP-1027: update igbinary to 3.2.1
  - ALTPHP-1095: Add memcache and support of igbinary in memcached


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-47
changelog:
  - ALTPHP-1269: Update xdebug to 3.1.4 version
  - Update timezonedb to version 2021.5
  - Update mongodb to version 1.13.0
  - Update swoole to version 4.8.9
  - Update pdo_sqlsrv to version 5.10.1
  - Update sqlsrv to version 5.10.1
  - Update imagick to version 3.7.0


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-66
changelog:
  - ALTPHP-1935: Moved xhprof to separate package
  - ALTPHP-1946: Added dependency to new bitset extension
  - ALTPHP-1947: Moved gearman to separate package
  - ALTPHP-1948: Moved geoip to separate package
  - ALTPHP-1949: Added dependency to new htscanner extension
  - ALTPHP-1950: Moved inotify to separate package
  - ALTPHP-1951: Moved jsmin to separate package
  - ALTPHP-1952: Moved leveldb to separate package


author: Sergey Fokin <sfokin@cloudlinux.com> - 7.4.33-3
changelog:
  - ALTPHP-1355: fix linksafe for all sub-packages
  - fix rpath for zip extension
  - add alt-php74-imunify-leveldb provides


author: Sergey Fokin <sfokin@cloudlinux.com> - 7.4.33-18
changelog:
  - ALTPHP-953: restart lsphp when update its binary
  - ALTPHP-1573: update LiteSpeed to 8.1
  - ALTPHP-1665: pack fpm as sub-package


author: Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 7.4.33-28
changelog:
  - Security fixes
  - CVE-2024-8925: Fix data integrity violation while parsing multipart/form-data
    boundaries larger than the read buffer
  - CVE-2024-9026: Fix possible altering of children logs
  - CVE-2024-8927: Fix bypass of cgi.force_redirect configuration


author: Eduard Abdullin <eabdullin@cloudlinux.com> 1-24
changelog:
  - ALTPHP-1195: Updated alt-ImageMagick require to 7.1.0 version
  - ALTPHP-1188: Update imagick to 3.5.1
  - ALTPHP-1197: Added cyrus-sasl-plain to requires


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-53
changelog:
  - ALTPHP-1935: Moved xhprof to separate package
  - ALTPHP-1946: Added dependency to new bitset extension
  - ALTPHP-1947: Moved gearman to separate package
  - ALTPHP-1948: Moved geoip to separate package
  - ALTPHP-1949: Added dependency to new htscanner extension
  - ALTPHP-1950: Moved inotify to separate package
  - ALTPHP-1951: Moved jsmin to separate package
  - ALTPHP-1952: Added dependency to new leveldb extension


author: Ivan Danilov <idanilov@cloudlinux.com> - 8.0.0s-2
changelog:
  - ALTPHP-1026: Fixed directory for scanning ini files
  - ALTPHP-1029: Fixed adding records for alt-php80 in selector.conf
  - ALTPHP-1028: Fixed scripts to make usage of php 8.0 possible for panels
  - ALTPHP-1025: Add lsphp to requires of php-cli package


author: Ivan Danilov <idanilov@cloudlinux.com> - 8.0.0s-3
changelog:
  - ALTPHP-1036: Disable unnecessary config files from alt-php80 in httpd conf directory
  - ALTPHP-1039: Fix of permissions for provided files


author: Dmitriy Popov <dpopov@cloudlinux.com> - 8.0.30-8
changelog:
  - Fix for hardened PHP
  - CVE-2024-3096: Disallow null character in bcrypt password to fix bug
    causing password_verify to erroneously return true
  - CVE-2024-2756: fix __Host-/__Secure-cookie bypass due to partial
    CVE-2022-31629 fix


author: Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 8.0.30-11
changelog:
  - Actually apply php-8.0-CVE-2024-3096.patch and php-8.0-CVE-2024-2756.patch
    for Ubuntu < 22.04 and Debian < 11 systems


author: Eduard Abdullin <eabdullin@cloudlinux.com> - 1-6
changelog:
  - Update dbase to 7.1.0RC2
  - Add gmagick-2.0.6RC1
  - Add gnupg-1.5.0RC2(only CL7)
  - Add grpc-1.36.0
  - Add igbinary-3.2.1
  - Add mongodb-1.9.0
  - Add oauth-2.0.7
  - Add oci8-3.0.1
  - Add sqlsrv- & pdo_sqlsrv- -5.9.0
  - Add swoole-4.6.4
  - Add trader-0.5.1
  - Add uploadprogress 1.1.3
  - Add xdebug 3.0.3
  - Add yaml to 2.2.1


author: Ivan Danilov <idanilov@cloudlinux.com> - 1-8
changelog:
  - ALTPHP-1023: update tideways to 5.0.4
  - ALTPHP-1095: Add memcache and support of igbinary in memcached


author: Sergey Fokin <sfokin@cloudlinux.com> - 1-24
changelog:
  - update inotify to 3.0.0
  - update timezonedb to 2020.4
  - update xdebug to 3.1.4
  - update yaf to 3.3.5
  - ALTPHP-1313: Updated MongoDB to 1.14.0


author: Eduard Chiganov <echiganov@cloudlinux.com> - 1-28
changelog:
  - ALTPHP-1402: update mailparse to 3.1.4
  - ALTPHP-1408: Redis extension updated to 5.3.7
  - ALTPHP-1507: Swoole extension updated to 5.0.3
  - ALTPHP-1509: alt-ImageMagick is linked statically now
  - yaz updated to 1.2.4


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-31
changelog:
  - Fixed requires
  - Brought back yaf and gnupg
  - Updated uploadprogress to 2.0.2
  - Updated vips to 1.0.13
  - Updated gnupg to 1.5.1
  - alt-ImageMagick is linked statically now
  - Updated swoole to 5.0.3


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-33
changelog:
  - Moved igbinary to separate package
  - Moved memcache to separate package
  - Moved memcached to separate package
  - Moved grpc to separate package
  - Moved redis to separate package
  - Added dependency to new geos ext


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-34
changelog:
  - Moved swoole to separate package
  - Moved uuid to separate package
  - Added dependency to new rar extension in separate package
  - Added dependency to new msgpack extension in separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-36
changelog:
  - ALTPHP-1751: Moved mongodb to separate package
  - ALTPHP-1752: Moved trader to separate package
  - ALTPHP-1753: Moved eio to separate package
  - ALTPHP-1754: Moved xmlrpc to separate package
  - ALTPHP-1755: Moved sqlsrv to separate package
  - ALTPHP-1756: Moved yaz to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-38
changelog:
  - ALTPHP-1787: Moved raphf to separate package
  - ALTPHP-1788: Moved http to separate package
  - ALTPHP-1789: Moved yaml to separate package
  - ALTPHP-1781: Added dependency to new protobuf extension


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-39
changelog:
  - ALTPHP-1800: Moved gmagick to separate package
  - ALTPHP-1801: Moved apcu to separate package
  - ALTPHP-1802: Moved rrd to separate package
  - ALTPHP-1803: Moved oauth to separate package
  - ALTPHP-1804: Moved zmq to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-40
changelog:
  - ALTPHP-1087: Moved amqp to separate package
  - ALTPHP-1825: Moved gnupg to separate package
  - ALTPHP-1826: Moved dbase to separate package
  - ALTPHP-1827: Moved stats to separate package
  - ALTPHP-1828: Moved pdflib to separate package


author: Eduard Chiganov <echiganov@cloudlinux.com> - 1-6
changelog:
  - ALTPHP-1281: Sqlsrv and pdosqlsrv extensions updated to 5.10.1
  - Imagick updated to 3.7.0
  - Oci8 updated to 3.2.1


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-7
changelog:
  - ALTPHP-1313: Updated MongoDB to 1.14.0
  - enable building newrelic
  - add propro 2.1.0
  - add solr 2.5.1
  - add yaz 1.2.3
  - update amqp to 1.11.0
  - update grpc to 1.36.0
  - update newrelic to 10.0.0.312
  - update xdebug to 3.1.4
  - update yaf to 3.3.5


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-19
changelog:
  - Fixed requires
  - Updated mcrypt to 1.0.6
  - Updated vips to 1.0.13
  - alt-ImageMagick is linked statically now
  - Updated swoole to 5.0.3


author: Sergey Fokin <sfokin@cloudlinux.com> - 8.2.5-2
changelog:
  - ALTPHP-1487: add opcache.jit_buffer_size=100M as default value to opcache.ini
  - rebuild without ffi for rhel < 7
  - add provides and obsoletes for alt-php-internal-sqlite3


author: Sergey Fokin <sfokin@cloudlinux.com> - 8.2.16-1
changelog:
  - update to 8.2.16
  - ALTPHP-1665: pack fpm as sub-package
  - ALTPHP-953: restart lsphp wheb update its binary


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-20
changelog:
  - Fixed requires
  - Updated mcrypt to 1.0.6
  - Updated vips to 1.0.13
  - Updated yaml to 2.2.3
  - Updated igbinary to 3.2.14
  - alt-ImageMagick is linked statically now
  - Updated swoole to 5.0.3


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-31
changelog:
  - ALTPHP-1935: Moved xhprof to separate package
  - ALTPHP-1946: Moved bitset to separate package
  - ALTPHP-1947: Moved gearman to separate package
  - ALTPHP-1948: Moved geoip to separate package
  - ALTPHP-1949: Moved htscanner to separate package
  - ALTPHP-1950: Moved inotify to separate package
  - ALTPHP-1951: Moved jsmin to separate package
  - ALTPHP-1952: Moved leveldb to separate package


author: Sergey Fokin <sfokin@cloudlinux.com> - 8.3.3-1
changelog:
  - update to 8.3.3
  - ALTPHP-1665: pack fpm as sub-package
  - ALTPHP-953: restart lsphp wheb update its binary


author: Eduard Chiganov <echiganov@cloudlinux.com> - 8.4.0-0.rc3
changelog:
  - ALTPHP-1880: Updated to RC3.
  - ALTPHP-1860: Remove deprecated sid_length and sid_bits settings.
  - Disabled thread safety by default.


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-3
changelog:
  - ALTPHP-1935: Added xhprof in separate package
  - ALTPHP-1946: Added bitset in separate package
  - ALTPHP-1947: Moved gearman to separate package
  - ALTPHP-1948: Moved geoip to separate package
  - ALTPHP-1949: Added htscanner in separate package
  - ALTPHP-1950: Moved inotify to separate package
  - ALTPHP-1951: Moved jsmin to separate package
  - ALTPHP-1952: Added leveldb in separate package


author: Sergey Fokin <sfokin@cloudlinux.com> - 1-4
changelog:
  - ALTPHP-2043: add to requires:
      alt-php84-newrelic
      alt-php84-pecl-gender
      alt-php84-pecl-propro


author: Kaj J. Niemi <kajtzu@fi.basen.net> 7.4-0.1
changelog:
  - 7.4
  - Fixed Patch #1 (now rpm-pgsql-7.4.patch)
  - Fixed Patch #2 (now rpm-multilib-7.4.patch):
  - Patch #4 is unnecessary (upstream)
  - Fixed Patch #6 (now postgresql-7.4-src-tutorial.patch)
  - Added Patch #8 (postgresql-7.4-com_err.patch) as com_err()
    is provided by e2fsprogs and CPPFLAGS gets lost somewhere
    inside configure (bad macro?)
  - No 7.4 PDF docs available yet (Source #17)
  - PyGreSQL is separated from the upstream distribution but
    we include it as usual (Source #18)
  - Default to compiling libpq and ECPG as fully thread-safe

  - 7.4 Origin.  See previous spec files for previous history. Adapted
  - from Red Hat and PGDG's 7.3.4 RPM, directly descended from 
  - postgresql-7.3.4-2 as shipped in Fedora Core 1.


author: Lamar Owen <lowen@pari.edu> <lamar.owen@wgcr.org>
changelog:
  - 7.4-0.1PGDG
  - Development JDBC jars in addition to the 7.3 jars; will replace the
  - 7.3 jars once 7.4 official jars are released.
  - Changed to use the bzip2 source to save a little size.
  - Removed some commented out portions of the specfile.
  - Removed the 7.3.4 PDF docs.  Will replace with 7.4 PDF's once they
  - are ready.


author: David Jee <djee@redhat.com> 7.4-4
changelog:
  - Add PyGreSQL patch for deprecated column pg_type.typprtlen [Bug #111263]
  - Add headers patch which moves ecpg headers to /usr/include/ecpg
    [Bug #111195]


author: Lamar Owen <lowen@pari.edu>
changelog:
  - 7.4.1-1PGDG
  - Merge Sander Steffann's changes up to 7.4-0.5PGDG
  - Proper 7.4.1 JDBC jars this time.
  - Patch for no pl/python from Alvaro


author: Tom Lane <tgl@redhat.com> 7.4.2-1
changelog:
  - Update to PostgreSQL 7.4.2; sync with community SRPM as much as possible.
  - Support PGOPTS from /etc/sysconfig/pgsql, per bug 111504.
  - Fix permissions on /etc/sysconfig/pgsql, per bug 115278.
  - SELinux patch in init file: always su </dev/null, per bug 117901.
  - Rebuilt


author: Tom Lane <tgl@redhat.com> 7.4.3-1
changelog:
  - Update to PostgreSQL 7.4.3.
  - Uninstalling server RPM stops postmaster first, per bug 114846.
  - Fix su commands to not assume PG user's shell is sh-like, per bug 124024.
  - Fix permissions on postgresql-python doc files, per bug 124822.
  - Minor postgresql.init improvements.


author: Tom Lane <tgl@redhat.com> 7.4.3-3
changelog:
  - Undo ill-considered chkconfig change that causes server to start
    immediately upon install.  Mea culpa (bug 127552).


author: Tom Lane <tgl@redhat.com> 7.4.5-1
changelog:
  - Update to PostgreSQL 7.4.5.
  - Update JDBC jars to driver build 215.
  - Add Obsoletes: entries for rh-postgresql packages, per bug 129278.


author: Tom Lane <tgl@redhat.com> 7.4.5-3
changelog:
  - Solve the stale lockfile problem (bugs 71295, 96981, 134090)
  - Use runuser instead of su for SELinux (bug 134588)


author: Tom Lane <tgl@redhat.com> 7.4.5-4
changelog:
  - Remove contrib/oidjoins stuff from installed fileset; it's of no use
    to ordinary users and has a security issue (bugs 136300, 136301)
  - adjust chkconfig priority (bug 128852)


author: Tom Lane <tgl@redhat.com> 7.4.6-1
changelog:
  - Update to PostgreSQL 7.4.6 (bugs 136947, 136949)
  - Make init script more paranoid about mkdir step of initializing a new
    database (bugs 136947, 136949)


author: Tom Lane <tgl@redhat.com> 7.4.6-3
changelog:
  - Update to PyGreSQL 3.6 (to fix bug #142711)
  - Adjust a few file permissions (bug #142431)
  - Assign %{_libdir}/pgsql to base package instead of -server (bug #74003)


author: Tom Lane <tgl@redhat.com> 8.0.0-1
changelog:
  - Update to PostgreSQL 8.0.0, PyGreSQL 3.6.1, pgtcl 1.5.2,
    and jdbc driver build 309.
  - Extensive cleanout of obsolete cruft in patch set.
  - Regression tests are run during RPM build (NOTE: cannot build as root when
    this is enabled).
  - Postmaster stderr goes someplace useful, not /dev/null (bz#76503, #103767)
  - Make init script return a useful exit status (bz#80782)
  - Move docs' tutorial directory to %{_libdir}/pgsql/tutorial, since it
    includes .so files that surely do not belong under /usr/share.
  - Remove useless .sgml files from docs RPM (bz#134450)
  - Put regression tests under /usr/lib64 on 64-bit archs, since .so files
    are not architecture-independent.


author: Tom Lane <tgl@redhat.com> 8.0.1-2
changelog:
  - Repair improper error message in init script when PGVERSION doesn't match.
  - Arrange for auto update of version embedded in init script.


author: Tom Lane <tgl@redhat.com> 8.0.1-4
changelog:
  - Attach Obsoletes: declarations for rh-postgresql to subpackages (bz#144435)
  - Make Requires: and Prereq: package linkages specify release not only
    version, as per recent mailing list discussion.


author: Tom Lane <tgl@redhat.com> 8.0.3-1
changelog:
  - Update to PostgreSQL 8.0.3 (includes security and data-loss fixes; see
    bz#156727, CAN-2005-1409, CAN-2005-1410)
  - Update to jdbc driver build 311
  - Recreate postgres user after superseding an rh-postgresql install (bug #151911)
  - Ensure postgresql server is restarted if running during an upgrade


author: Tom Lane <tgl@redhat.com> 8.0.4-1
changelog:
  - Update to PostgreSQL 8.0.4, PyGreSQL 3.6.2, and jdbc driver build 312
  - Adjust pgtcl link command to ensure it binds to correct libpq (bug #166665)
  - Remove obsolete Conflicts: against other python versions (bug #166754)
  - Add /etc/pam.d/postgresql (bug #167040)
  - Include contrib/xml2 in build (bug #167492)


author: Tom Lane <tgl@redhat.com> 8.1.0-1
changelog:
  - Update to PostgreSQL 8.1.0, PyGreSQL 3.7, and jdbc driver build 404
  - Fix PAM config file (must have account not only auth) (bug #167040)
  - Add BuildPrereq: libxslt-devel (bug #170141)
  - Sync with PGDG SRPM as much as feasible


author: Tom Lane <tgl@redhat.com> 8.1.1-1
changelog:
  - Update to PostgreSQL 8.1.1
  - Make pg_config.h architecture-independent for multilib installs;
    put the original pg_config.h into pg_config_$ARCH.h


author: Tom Lane <tgl@redhat.com> 8.1.1-3
changelog:
  - fix pg_config.h for 64-bit and ppc platforms
  - update Makefile.regress (needs to --load-language=plpgsql)


author: Tom Lane <tgl@redhat.com> 8.1.2-1
changelog:
  - Update to PostgreSQL 8.1.2
  - Repair extraneous quote in pgtcl configure script ... odd that bash
    didn't use to spit up on this.


author: Tom Lane <tgl@redhat.com> 8.1.3-1
changelog:
  - Update to PostgreSQL 8.1.3 (fixes bug #180617, CVE-2006-0553)
  - Update to jdbc driver build 405
  - Modify multilib header hack to not break non-RH arches, per bug #177564


author: Tom Lane <tgl@redhat.com> 8.1.4-1
changelog:
  - Update to PostgreSQL 8.1.4 (includes fixes for CVE-2006-2313, CVE-2006-2314;
    see bug #192173)
  - Update to PyGreSQL 3.8
  - Suppress noise from chcon, per bug #187744


author: Tom Lane <tgl@redhat.com> 8.2.0-1
changelog:
  - Update to PostgreSQL 8.2.0
  - Update to PyGreSQL 3.8.1
  - Fix chcon arguments in test/regress/Makefile
  Related: #201035
  - Adjust init script to not fool /etc/rc.d/rc
  Resolves: #161470
  - Change init script to not do initdb automatically, but require
    manual "service postgresql initdb" for safety.  Per upstream discussions.


author: Tom Lane <tgl@redhat.com> 8.2.1-1
changelog:
  - Update to PostgreSQL 8.2.1
  - Update to pgtcl 1.5.3
  - Be sure we link to libncurses, not libtermcap which is disappearing in Fedora


author: Tom Lane <tgl@redhat.com> 8.2.1-2
changelog:
  - Split -pl subpackage into three new packages to reduce dependencies
    and track upstream project's packaging.


author: Tom Lane <tgl@redhat.com> 8.2.4-2
changelog:
  - Fix oversight in postgresql-test makefile: pg_regress isn't a shell script
    anymore.  Per upstream bug 3398.


author: Tom Lane <tgl@redhat.com> 8.2.4-4
changelog:
  - Use tzdata package's data files instead of private copy, so that
    postgresql-server need not be turned for routine timezone updates
  - Don't remove postgres user/group during RPM uninstall, per Fedora
    packaging guidelines
  - Seems we need an explicit BuildRequires on gawk now
  - Rebuild to fix Fedora toolchain issues


author: Tom Lane <tgl@redhat.com> 8.2.4-5
changelog:
  - Use nicer solution for tzdata file substitution: upstream discussion
    concluded that hardwiring the path was better than a symlink after all.


author: Tom Lane <tgl@redhat.com> 8.2.6-1
changelog:
  - Update to PostgreSQL 8.2.6 to fix CVE-2007-4769, CVE-2007-4772,
    CVE-2007-6067, CVE-2007-6600, CVE-2007-6601
  - Make initscript and pam config files be installed unconditionally;
    seems new buildroots don't necessarily have those directories in place


author: Tom Lane <tgl@redhat.com> 8.3RC2-1
changelog:
  - Update to PostgreSQL 8.3RC2 (not waiting for 8.3.0 because Fedora 9 alpha
    should be 8.3-based not 8.2-based).
  - Update to pgtcl 1.6.2


author: Tom Lane <tgl@redhat.com> 8.3.1-2
changelog:
  - Clean up cross-subpackage Requires: to ensure that updating any one
    subpackage brings in the matching versions of others.
  Resolves: #444271


author: Tom Lane <tgl@redhat.com> 8.3.1-4
changelog:
  - Enable LDAP support
  Resolves: #445315
  - Use -Wl,--as-needed to suppress bogus dependencies for libraries that
    are really only needed by some of the subpackages


author: Tom Lane <tgl@redhat.com> 8.3.3-1
changelog:
  - Update to PostgreSQL 8.3.3.
  - Remove postgresql-prefer-ncurses.patch, no longer needed in recent
    Fedora releases because libtermcap is gone.


author: Tom Lane <tgl@redhat.com> 8.3.3-2
changelog:
  - Install Pgtcl in /usr/lib/tcl$TCL_VERSION, not directly in /usr/lib.
    Needed because tcl 8.5 no longer puts /usr/lib into its package search path.
    NOTE: do not back-port this change into branches using pre-8.5 tcl, because
    /usr/lib/tcl8.4 had been a symlink to /usr/share/tcl8.4, and /usr/share
    is exactly where we must not put Pgtcl.
  Resolves: #228263


author: Tom Lane <tgl@redhat.com> 8.3.5-1
changelog:
  - Update to PostgreSQL 8.3.5.
  - Improve display from init script's initdb action, per Michael Schwendt


author: Tom Lane <tgl@redhat.com> 8.3.6-1
changelog:
  - Update to PostgreSQL 8.3.6, for various fixes described at
    http://www.postgresql.org/docs/8.3/static/release-8-3-6.html


author: Tom Lane <tgl@redhat.com> 8.3.6-4
changelog:
  - Prevent dependent packages from needing to include sys/sdt.h
    (unintended side effect of previous patch)
  - Use -O1 on alpha, per report from Oliver Falk; -O2 tickles gcc bugs


author: Tom Lane <tgl@redhat.com> 8.3.7-1
changelog:
  - Update to PostgreSQL 8.3.7, for various fixes described at
    http://www.postgresql.org/docs/8.3/static/release-8-3-7.html
    notably the fix for CVE-2009-0922


author: Tom Lane <tgl@redhat.com> 8.4.0-1
changelog:
  - Update to PostgreSQL 8.4.0.  See release notes at
    http://www.postgresql.org/docs/8.4/static/release-8-4.html


author: Tom "spot" Callaway <tcallawa@redhat.com> 8.4.0-2
changelog:
  - update License tag to MIT (PostgreSQL calls it "BSD", but it is MIT)
  - Note: This changes nothing from a license compatibility perspective.


author: Tom Lane <tgl@redhat.com> 8.4.1-1
changelog:
  - Update to PostgreSQL 8.4.1, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-1.html
    including two security issues
  Related: #522085
  Related: #522092


author: Tom Lane <tgl@redhat.com> 8.4.2-1
changelog:
  - Update to PostgreSQL 8.4.2, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-2.html
    including two security issues
  Related: #546321
  Related: #547662
  - Use -N not the obsolete -n in useradd call
  Resolves: #495727
  - Clean up specfile to eliminate rpmlint gripes, mainly by removing
    no-longer-needed provisions for superseding rh-postgresql


author: Tom Lane <tgl@redhat.com> 8.4.2-2
changelog:
  - Remove static libraries (.a files) from package, per packaging guidelines
  - Change %define to %global, per packaging guidelines


author: Tom Lane <tgl@redhat.com> 8.4.2-3
changelog:
  - Remove the postgresql-python and postgresql-tcl subpackages.  These files
    are now broken out as their own packages (PyGreSQL and tcl-pgtcl,
    respectively), to reflect the now longstanding split of upstream projects.
  Related: #452306, #452321


author: Tom Lane <tgl@redhat.com> 8.4.2-4
changelog:
  - Arrange for the postmaster, but not any of its child processes, to be run
    with oom_adj -17.  This compensates for the OOM killer not being smart about
    accounting for shared memory usage.


author: Tom Lane <tgl@redhat.com> 8.4.2-5
changelog:
  - Latest version of systemtap needs the probes.o file to be built again
  Resolves: #557266
  - Provide script and instructions for building the documentation PDF


author: Tom Lane <tgl@redhat.com> 8.4.3-1
changelog:
  - Update to PostgreSQL 8.4.3, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-3.html


author: Tom Lane <tgl@redhat.com> 8.4.4-1
changelog:
  - Update to PostgreSQL 8.4.4, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-4.html
    including fixes for CVE-2010-1169 and CVE-2010-1170
  Resolves: #593032


author: Orcan Ogetbil <oget[dot]fedora[at]gmail[dot]com> - 8.4.4-3
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild
  - Duplicate COPYRIGHT in -libs subpackage, per revised packaging guidelines


author: Tom Lane <tgl@redhat.com> 8.4.5-1
changelog:
  - Update to PostgreSQL 8.4.5, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-5.html
    including the fix for CVE-2010-3433
  Related: #639371
  - Add -p "$pidfile" to initscript's status call to improve corner cases.
  Related: #561010


author: Tom Lane <tgl@redhat.com> 8.4.6-1
changelog:
  - Update to PostgreSQL 8.4.6, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-6.html
  - Ensure we don't package any .gitignore files from the source tarball
  Related: #642210


author: Tom Lane <tgl@redhat.com> 9.0.2-1
changelog:
  - Update to PostgreSQL 9.0.2 (major version bump)
  - Create infrastructure for in-place database upgrade using pg_upgrade
  Resolves: #398221


author: Tom Lane <tgl@redhat.com> 9.0.3-1
changelog:
  - Update to PostgreSQL 9.0.3, for various fixes described at
    http://www.postgresql.org/docs/9.0/static/release-9-0-3.html
    including the fix for CVE-2010-4015
  Resolves: #674296


author: Tom Lane <tgl@redhat.com> 9.0.3-2
changelog:
  - Remove filter-requires-perl-Pg.sh, which doesn't seem to be needed now that
    PyGreSQL has been split out; and our use of it isn't compatible with rpm 4.9
    anyway


author: Tom Lane <tgl@redhat.com> 9.0.4-1
changelog:
  - Update to PostgreSQL 9.0.4, for various fixes described at
    http://www.postgresql.org/docs/9.0/static/release-9-0-4.html
  - Add %{?_isa} to cross-subpackage Requires, per latest packaging guidelines


author: Tom Lane <tgl@redhat.com> 9.1.0-1
changelog:
  - Update to PostgreSQL 9.1.0 (major version bump);
    in-place upgrade support now works from 9.0.x as the previous version


author: Tom Lane <tgl@redhat.com> 9.1.1-1
changelog:
  - Update to PostgreSQL 9.1.1, for various fixes described at
    http://www.postgresql.org/docs/9.1/static/release-9-1-1.html
  - Enable build (but not test) of contrib/sepgsql
  - Clean up specfile build options so that turning options off works again


author: Honza Horak <hhorak@redhat.com> 9.1.1-2
changelog:
  - Create a symlink of pg_regress instead of full copy;
    Don't strip symbols from regress libs
  Related: #729012


author: Tom Lane <tgl@redhat.com> 9.1.2-1
changelog:
  - Update to PostgreSQL 9.1.2, for various fixes described at
    http://www.postgresql.org/docs/9.1/static/release-9-1-2.html


author: Tom Lane <tgl@redhat.com> 9.1.2-2
changelog:
  - Make systemd unit file more user-friendly by resurrecting the old init
    script's checks for data directory presence and version match
  Resolves: #771496


author: Tom Lane <tgl@redhat.com> 9.1.3-1
changelog:
  - Update to PostgreSQL 9.1.3, for various fixes described at
    http://www.postgresql.org/docs/9.1/static/release-9-1-3.html
    including the fixes for CVE-2012-0866, CVE-2012-0867, CVE-2012-0868
  Resolves: #797918


author: Tom Lane <tgl@redhat.com> 9.1.3-2
changelog:
  - Fix postgresql-setup to look for unit file in /usr/lib and to ignore
    comments therein
  Resolves: #802835
  - Resurrect a now-mostly-dummy postgresql init script, so that people can
    keep on using "service postgresql initdb" if they wish
  Resolves: #800416


author: Tom Lane <tgl@redhat.com> 9.1.3-3
changelog:
  - Fix postgresql-setup to rely on systemd to parse the unit file, instead
    of using ad-hoc code
  Resolves: #804290


author: Tom Lane <tgl@redhat.com> 9.1.4-1
changelog:
  - Update to PostgreSQL 9.1.4, for various fixes described at
    http://www.postgresql.org/docs/9.1/static/release-9-1-4.html
    including the fixes for CVE-2012-2143, CVE-2012-2655
  Resolves: #826606
  - Update previous version (embedded in postgresql-upgrade) to 9.0.8
    because fix in whole-row variable dumping could be needed for upgrades
  - Revert fix for bug #800416, per fedora-packaging discussion at
    http://lists.fedoraproject.org/pipermail/packaging/2012-April/008314.html
    "service postgresql initdb" is dead and will stay that way


author: Tom Lane <tgl@redhat.com> 9.1.4-3
changelog:
  - Update code to use oom_score_adj not oom_adj, thereby suppressing
    whining in the kernel log
  - Add "legacy action" scripts to support "service postgresql initdb" and
    "service postgresql upgrade" in a now-approved fashion (requires a
    recent version of initscripts to work)
  Resolves: #800416


author: Tom Lane <tgl@redhat.com> 9.1.4-5
changelog:
  - Back-port upstream support for postmaster listening on multiple Unix sockets
  - Configure postmaster to create sockets in both /var/run/postgresql and /tmp;
    the former is now the default place for libpq to contact the postmaster.
  Resolves: #825448
  - Annotate postgresql.conf about not setting port number there
  - Minor specfile cleanup per suggestions from Tom Callaway
  Related: #845110


author: Tom Lane <tgl@redhat.com> 9.1.5-1
changelog:
  - Update to PostgreSQL 9.1.5, for various fixes described at
    http://www.postgresql.org/docs/9.1/static/release-9-1-5.html
    including the fixes for CVE-2012-3488, CVE-2012-3489


author: Tom Lane <tgl@redhat.com> 9.2.0-1
changelog:
  - Update to PostgreSQL 9.2.0 (major version bump);
    in-place upgrade support now works from 9.1.x as the previous version
  - Add postgresql-plpython3 subpackage with PL/Python built against Python 3


author: Tom Lane <tgl@redhat.com> 9.2.1-1
changelog:
  - Update to PostgreSQL 9.2.1, for various fixes described at
    http://www.postgresql.org/docs/9.2/static/release-9-2-1.html
    including a nasty data-loss bug
  - Adopt new systemd macros for server package install/uninstall triggers
  Resolves: #850277


author: Tom Lane <tgl@redhat.com> 9.2.2-1
changelog:
  - Update to PostgreSQL 9.2.2, for various fixes described at
    http://www.postgresql.org/docs/9.2/static/release-9-2-2.html
  - Use new systemd install/uninstall trigger macros conditionally,
    so that package can still be installed on pre-F18 branches


author: Tom Lane <tgl@redhat.com> 9.2.2-3
changelog:
  - Prevent creation of TCP socket during pg_upgrade regression test, so that
    concurrent RPM builds on the same machine won't fail
  Resolves: #891531
  - Make sure $PGDATA/pg_log/ gets the right SELinux label in postgresql-setup
  Resolves: #891547


author: Tom Lane <tgl@redhat.com> 9.2.3-1
changelog:
  - Update to PostgreSQL 9.2.3, for various fixes described at
    http://www.postgresql.org/docs/9.2/static/release-9-2-3.html
    including the fix for CVE-2013-0255
  Resolves: #908722
  - Make the package build with selinux option disabled
  Resolves: #894367
  - Include old version of pg_controldata in postgresql-upgrade subpackage
  Related: #896161


author: Tom Lane <tgl@redhat.com> 9.2.4-1
changelog:
  - Update to PostgreSQL 9.2.4, for various fixes described at
    http://www.postgresql.org/docs/9.2/static/release-9-2-4.html
    including the fixes for CVE-2013-1899, CVE-2013-1900, CVE-2013-1901
  Resolves: #929223, #929255, #929328
  - fix build for aarch64 and ppc64p7


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.4-2
changelog:
  - postgresql-setup: don't create whole path to server's data to make sure that
    the parent directory has correct permissions (#972425)


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.4-3
changelog:
  - add atomic operations support for aarch64 to preupgrade version also (#970661)
  - apply the forgotten man-page-day patch (#948933)


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.4-5
changelog:
  - %beta implies debug everywhere (also in upgrade part of build)
  - allow `rpmbuild -bi --short-circuit`
  - upgrade: setup previous (RHEL6) version as 8.14.3
  - upgrade: start old postgres with socket file in /var/run/postgresql


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.4-6
changelog:
  - disable aggressive loop optimizations for old codebase (#993532)
  - upgrade: stop old server in case of permissions problem (#896161)


author: Jozef Mlich <jmlich@redhat.com> - 9.2.5-1
changelog:
  - rebase postgresql to 9.2.5 #1019762 
    http://www.postgresql.org/docs/9.2/static/release-9-2-5.html


author: Jozef Mlich <jmlich@redhat.com> - 9.2.5-2
changelog:
  - Resolves: #1019762 
  - additionally fixes rpmdiff filelist problem with
    /usr/share/doc/postgresql-9.2.5/html/bookindex.html.orig


author: Jozef Mlich <jmlich@redhat.com> - 9.2.6-1
changelog:
  - Resolves #1038688
  - rebase to 9.2.6 see changes at
    http://www.postgresql.org/docs/9.2/static/release-9-2-6.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.7-1
changelog:
  - update to 9.2.7 per release notes (#1065845)
    http://www.postgresql.org/docs/9.2/static/release-9-2-7.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.10-1
changelog:
  - update to 9.2.10 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-10.html
    http://www.postgresql.org/docs/9.2/static/release-9-2-9.html
    http://www.postgresql.org/docs/9.2/static/release-9-2-8.html
    (rhbz#1198672 rhbz#1198673)


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.11-1
changelog:
  - update to 9.2.11 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-11.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.12-1
changelog:
  - update to 9.2.12 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-12.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.13-1
changelog:
  - update to 9.2.13 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-13.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.14-1
changelog:
  - update to 9.2.14 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-14.html


author: Pavel Kajaba <pkajaba@redhat.com> - 9.2.15-1
changelog:
  - update to 9.2.15 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-15.html


author: Petr Kubat <pkubat@redhat.com> - 9.2.18-1
changelog:
  - update to 9.2.18 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
    http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
    http://www.postgresql.org/docs/9.2/static/release-9-2-16.html


author: Petr Kubat <pkubat@redhat.com> - 9.2.21-1
changelog:
  - update to 9.2.21 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
    http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
    http://www.postgresql.org/docs/9.2/static/release-9-2-19.html


author: Petr Kubat <pkubat@redhat.com> - 9.2.22-1
changelog:
  - update to 9.2.22 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-22.html


author: Petr Kubat <pkubat@redhat.com> - 9.2.23-1
changelog:
  - update to 9.2.23 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-23.html


author: Sergey Fokin <sfokin@cloudlinux.com> 3.8.12-2
changelog:
  - ALTPYTH-413: move -fno-semantic-interposition to CFLAGS_NODIST
  - remove changing gcc to devtoolset-gcc
  - change BuildRequire from gcc-toolset to system gcc for CL8


author: Jeremy Hinegardner <jeremy@hinegardner.org> - 5.19-3
changelog:
  - replace RPM_BUILD_ROOT in spec file with buildroot macro
  - cleanup rpmlint errors for the src.rpm
  - add ragel(1) man page patch


author: Jeremy Hinegardner <jeremy@hinegardner.org> - 5.22-1
changelog:
  - update to 5.22
  - remove ragel-Makefile-in.patch - it was applied upstream
  - update ragel-rlcodegen-replace.patch to apply cleanly


author: Silas Sewell <silas@sewell.ch> - 1.2.6-3
changelog:
  - Add Fedora build flags
  - Send all scriplet output to /dev/null
  - Remove debugging flags
  - Add redis.conf check to init script


author: Fabian Deutsch <fabiand@fedoraproject.org> - 2.4.6-1
changelog:
  - Update to 2.4.6
  - systemd unit file added
  - Compiler flags changed to compile 2.4.6
  - Remove doc/ and Changelog


author: Remi Collet <remi@fedoraproject.org> - 2.6.10-1
changelog:
  - Redis 2.6.10
    upgrade urgency: MODERATE, this release contains many non
    critical fixes and many small improvements.


author: Remi Collet <remi@fedoraproject.org> - 2.6.11-1
changelog:
  - Redis 2.6.11
    upgrade urgency: LOW, however updating is encouraged
    if you have many instances per server and you want
    to lower the CPU / energy usage.


author: Remi Collet <remi@fedoraproject.org> - 2.6.14-1
changelog:
  - Redis 2.6.14
    upgrade urgency: HIGH because of the following two issues:
      Lua scripting + Replication + AOF in slaves problem
      AOF + expires possible race condition
  - add option to run tests during build (not in mock)


author: Remi Collet <remi@fedoraproject.org> - 2.6.15-1
changelog:
  - Redis 2.6.15
    upgrade urgency: MODERATE, upgrade ASAP only if you experience
    issues related to the expired keys collection algorithm,
    or if you use the ZUNIONSTORE command.


author: Fabian Deutsch <fabian.deutsch@gmx.de> - 2.6.16-1
changelog:
  - Update to 2.6.16
  - Fix rhbz#973151
  - Fix rhbz#656683
  - Fix rhbz#977357 (Jan Vcelak <jvcelak@fedoraproject.org>)


author: Remi Collet <remi@fedoraproject.org> - 2.8.3-1
changelog:
  - Redis 2.8.3
    upgrade urgency: MODERATE for Redis, HIGH for Sentinel.
  - redis own /etc/redis.conf (needed CONFIG WRITE)
  - add sentinel.conf as documentation


author: Remi Collet <remi@fedoraproject.org> - 2.8.3-2
changelog:
  - add redis-sentinel command (link to redis-server)
  - don't rely on config for daemonize and pidfile
  - add redis-sentinel service


author: Remi Collet <remi@fedoraproject.org> - 2.8.9-1
changelog:
  - Redis 2.8.9 - Release date: 22 Apr 2014
    upgrade urgency: LOW, only new features introduced, no bugs fixed.


author: Remi Collet <remi@fedoraproject.org> - 2.8.10-1
changelog:
  - Redis 2.8.10 - Release date: 5 Jun 2014
    upgrade urgency: HIGH if you use min-slaves-to-write option.


author: Remi Collet <remi@fedoraproject.org> - 2.8.11-1
changelog:
  - Redis 2.8.11 - Release date: 11 Jun 2014
    upgrade urgency: HIGH if you use Lua scripting, LOW otherwise.


author: Remi Collet <remi@fedoraproject.org> - 2.8.12-1
changelog:
  - Redis 2.8.12 - Release date: 23 Jun 2014
    upgrade urgency: HIGH for Redis, CRITICAL for Sentinel.
  - always use jemalloc (instead of tcmalloc)


author: Remi Collet <remi@fedoraproject.org> - 2.8.14-1
changelog:
  - Redis 2.8.14 - Release date:  1 Sep 2014
    upgrade urgency: HIGH for Lua scripting users, otherwise LOW.


author: Remi Collet <remi@fedoraproject.org> - 2.8.15-1
changelog:
  - Redis 2.8.15 - Release date: 12 Sep 2014
    upgrade urgency: LOW for Redis, HIGH for Sentinel.
  - move commands from /usr/sbin to /usr/bin
  - add redis-shutdown command (systemd)


author: Remi Collet <remi@fedoraproject.org> - 2.8.17-1
changelog:
  - Redis 2.8.17 - Release date: 19 Sep 2014
    upgrade urgency: HIGH for Redis Sentinel, LOW for Redis Server.


author: Remi Collet <remi@fedoraproject.org> - 2.8.18-1
changelog:
  - Redis 2.8.18 - Release date: 4 Dec 2014
    upgrade urgency: LOW for both Redis and Sentinel.
  - fix isfinite missing on EL-5


author: Remi Collet <remi@fedoraproject.org> - 2.8.18-2
changelog:
  - provides /etc/systemd/system/redis.service.d/limit.conf
    and /etc/systemd/system/redis-sentinel.service.d/limit.conf
    or /etc/security/limits.d/95-redis.conf


author: Remi Collet <remi@fedoraproject.org> - 3.0.0-2
changelog:
  - rebuild with new redis-shutdown from rawhide
  - improved description from rawhide
  - use redis/redis owner for directories under /var


author: Remi Collet <remi@fedoraproject.org> - 3.0.1-1
changelog:
  - Redis 3.0.1 - Release date: 5 May 2015
  - Upgrade urgency: LOW for Redis and Cluster, MODERATE for Sentinel.


author: Remi Collet <remi@fedoraproject.org> - 3.0.2-1
changelog:
  - Redis 3.0.2 - Release date: 4 Jun 2015
  - Upgrade urgency: HIGH for Redis because of a security issue.
                     LOW for Sentinel.


author: Remi Collet <remi@fedoraproject.org> - 3.2.1-1
changelog:
  - Redis 3.2.1 - Release date: Fri Jun 17 15:01:56 CEST 2016
  - Upgrade urgency HIGH: Critical fix to Redis Sentinel,
    due to 3.2.0 regression compared to 3.0.


author: Remi Collet <remi@fedoraproject.org> - 3.2.2-1
changelog:
  - Redis 3.2.2 - Release date: Thu Jul 28 14:14:54 CEST 2016
  - Upgrade urgency MODERATE:
    A Redis server and a Sentinel crash are now fixed.
    GEORADIUS errors in reported entries are fixed.


author: Remi Collet <remi@fedoraproject.org> - 3.2.3-1
changelog:
  - Redis 3.2.3 - Release date: Tue Aug 02 10:55:24 CEST 2016
  - Upgrade urgency MODERATE: Fix replication delay and redis-cli
    security issue.


author: Remi Collet <remi@fedoraproject.org> - 3.2.3-2
changelog:
  - add man pages from https://github.com/antirez/redis/pull/3491
  - data and configuration should not be publicly readable
  - remove /var/run/redis with systemd
  - provide redis-check-rdb as a symlink to redis-server


author: Remi Collet <remi@fedoraproject.org> - 3.2.4-1
changelog:
  - Redis 3.2.4 - Released Mon Sep 26 08:58:21 CEST 2016
  - Upgrade urgency CRITICAL: Redis 3.2 and unstable contained
    a security vulnerability fixed by this release.


author: Remi Collet <remi@fedoraproject.org> - 3.2.5-1
changelog:
  - Redis 3.2.5 - Released Wed Oct 26 09:16:40 CEST 2016
  - Upgrade urgency LOW: This release only fixes a compilation issue


author: Remi Collet <remi@remirepo.net> - 4.0.0-0.4.RC3
changelog:
  - rebuild with some fedora changes:
   - Add RuntimeDirectory=redis to systemd unit file (RHBZ #1454700)
   - Fix a shutdown failure with Unix domain sockets (RHBZ #1444988)


author: Remi Collet <remi@remirepo.net> - 4.0.1-1
changelog:
  - Redis 4.0.1 - Released Mon Jul 24 15:51:31 CEST 2017
  - Upgrade urgency MODERATE: A few serious but non critical bugs


author: Remi Collet <remi@remirepo.net> - 4.0.2-1
changelog:
  - Redis 4.0.2 - Released Thu Sep 21 15:47:53 CEST 2017
  - Upgrade urgency HIGH: Several potentially critical bugs fixed.


author: Remi Collet <remi@remirepo.net> - 4.0.2-3
changelog:
  - add doc and devel subpackages, synced from Fedora
  - keep man pages in main package
  - minor fix for EL-6 and tests


author: Remi Collet <remi@remirepo.net> - 4.0.3-1
changelog:
  - Redis 4.0.3 - Released Thu Nov 30 13:14:50 CET 2017
  - Upgrade urgency CRITICAL: Several PSYNC2 bugs can corrupt the
    slave data set after a restart and a successful PSYNC2 handshake.
  - drop duplicated documentation from main package


author: Nathan Scott <nathans@redhat.com> - 4.0.4-1
changelog:
  - Upstream 4.0.4 release.
  - Update to current upstream redis-doc also.
  - Fix man page issues (RHBZ #1513594 and RHBZ #1515417).


author: Remi Collet <remi@remirepo.net> - 4.0.5-1
changelog:
  - Redis 4.0.5 - Released Thu Dec 1 16:03:32 CET 2017
  - Upgrade urgency CRITICAL: Redis 4.0.4 fix for PSYNC2 was broken,
    causing the slave to crash when receiving an RDB file from the
    master that contained a duplicated Lua script.


author: Remi Collet <remi@remirepo.net> - 4.0.6-1
changelog:
  - Redis 4.0.6 - Released Thu Dec 4 17:54:10 CET 2017
  - Upgrade urgency CRITICAL: More errors in the fixes for PSYNC2
    in Redis 4.0.5 were identified.


author: Remi Collet <remi@remirepo.net> - 4.0.7-1
changelog:
  - Redis 4.0.7 - Released Wed Jan 24 11:01:40 CET 2018
  - Upgrade urgency MODERATE: Several bugs fixed, but none of critical level.
  - Update to current upstream redis-doc


author: Remi Collet <remi@remirepo.net> - 4.0.8-1
changelog:
  - Update to 4.0.8 - Released Fri Feb 2 11:17:40 CET 2018
  - Upgrade urgency CRITICAL ONLY for Redis Cluster users.


author: Remi Collet <remi@remirepo.net> - 4.0.9-1
changelog:
  - Update to 4.0.9 - Released Mon Mar 26 17:52:32 CEST 2018
  - Upgrade urgency CRITICAL: Critical upgrade for users
    using AOF with the fsync policy set to "always".


author: Remi Collet <remi@remirepo.net> - 5.0.0~RC2-1
changelog:
  - Redis 5.0 RC2 (4.9.102) - Released Wed Jun 13 12:49:13 CEST 2018
  - Upgrade urgency CRITICAL: This release fixes important security issues.
                        HIGH: This release fixes a SCAN commands family bug.
                    MODERATE: This release fixes a PSYNC2 edge case with expires.
                    MODERATE: Sentinel related fixes.
                         LOW: All the other issues


author: Remi Collet <remi@remirepo.net> - 5.0.0~RC4-1
changelog:
  - Redis 5.0 RC4 (4.9.104) - Released Fri Aug 03 13:51:02 CEST 2018
  - Drop the pandoc build dependency, install only markdown.


author: Remi Collet <remi@remirepo.net> - 5.0.0-1
changelog:
  - Redis 5.0.0 - Released Wed Oct 17 13:28:26 CEST 2018
  - Upgrade urgency CRITICAL: Several fixes to streams AOF and replication.
  - Update to current upstream redis-doc


author: Remi Collet <remi@remirepo.net> - 5.0.1-1
changelog:
  - Redis 5.0.1 - Released Wed Nov 07 13:09:30 CET 2018
  - Upgrade urgency: URGENT if you use Redis Streams. MODERATE otherwise.


author: Remi Collet <remi@remirepo.net> - 5.0.2-1
changelog:
  - Redis 5.0.2 - Released Thu Nov 22 11:22:37 CET 2018
  - Upgrade urgency: CRITICAL if you use streams and consumer groups.
    HIGH if you use redis-cli with Redis Cluster. LOW otherwise.


author: Remi Collet <remi@remirepo.net> - 5.0.3-1
changelog:
  - Redis 5.0.3 - Released Tue Dec 11 18:17:26 CET 2018
  - Upgrade urgency HIGH: Redis 5 is consolidating, upgrading is a good idea.


author: Remi Collet <remi@remirepo.net> - 5.0.5-1
changelog:
  - Redis 5.0.5 - Released Wed May 15 17:57:41 CEST 2019
  - Upgrade urgency CRITICAL: This release fixes an important AOF
    fysnc bug and other less critical issues.
  - drop redis-trib sub-package now in redis-cli (F30, EL8)


author: Remi Collet <remi@remirepo.net> - 5.0.6-1
changelog:
  - Redis 5.0.6 - Released Wed Sep 25 12:33:56 CEST 2019
  - Upgrade urgency CRITICAL: Only in case of exposed instances
    to untrusted users.


author: Remi Collet <remi@remirepo.net> - 5.0.7-1
changelog:
  - Redis 5.0.7 - Released Tue Nov 19 17:52:44 CET 2019
  - Upgrade urgency HIGH: many issues fixed, some may have an impact.


author: Remi Collet <remi@remirepo.net> - 6.0.0-1
changelog:
  - Redis 6.0.0 GA - Released Thu Apr 30 14:55:02 CEST 2020
  - Upgrade urgency CRITICAL: many bugs fixed compared to the last RC


author: Remi Collet <remi@remirepo.net> - 6.0.1-1
changelog:
  - Redis 6.0.1 - Released Sat May 02 00:06:07 CEST 2020
  - Upgrade urgency HIGH:
    This release fixes a crash when builiding against Libc malloc.


author: Remi Collet <remi@remirepo.net> - 6.0.2-1
changelog:
  - Redis 6.0.2 - Released Fri May 15 22:24:36 CEST 2020
  - Upgrade urgency MODERATE: many not critical bugfixes in different areas.
    Critical fix to client side caching when keys are evicted from the
    tracking table but no notifications are sent.


author: Remi Collet <remi@remirepo.net> - 6.0.3-1
changelog:
  - Redis 6.0.3 - Released Sat May 16 18:10:21 CEST 2020
  - Upgrade urgency CRITICAL: a crash introduced in 6.0.2 is now fixed.


author: Remi Collet <remi@remirepo.net> - 6.0.3-3
changelog:
  - add comment for TimeoutStartSec and TimeoutStopSec in limit.conf
  - fix missing notification to systemd for sentinel
    patch from https://github.com/antirez/redis/pull/7168


author: Remi Collet <remi@remirepo.net> - 6.0.4-2
changelog:
  - Redis 6.0.4 - Released Thu May 28 11:36:45 CEST 2020
  - Upgrade urgency CRITICAL: this release fixes a severe replication bug.


author: Remi Collet <remi@remirepo.net> - 6.0.5-1
changelog:
  - Redis 6.0.5 - Released Tue Jun 09 11:56:08 CEST 2020
  - Upgrade urgency MODERATE: several bugs with moderate impact are fixed here.


author: Remi Collet <remi@remirepo.net> - 6.0.6-1
changelog:
  - Redis 6.0.6 - Released Mon Jul 20 09:31:30 IDT 2020
  - Upgrade urgency MODERATE: several bugs with moderate impact are fixed here.
  - open https://github.com/redis/redis/pull/7543 fix deprecated tail syntax


author: Remi Collet <remi@remirepo.net> - 6.0.7-1
changelog:
  - Redis 6.0.7 - Released Fri Aug 28 11:05:09 IDT 2020
  - Upgrade urgency MODERATE: several bugs with moderate impact are fixed.
  - drop patch merged upstream


author: Remi Collet <remi@remirepo.net> - 6.0.8-1
changelog:
  - Redis 6.0.8 - Released Wed Sep 09 23:34:17 IDT 2020
  - Upgrade urgency HIGH: Anyone who's using Redis 6.0.7 with Sentinel or
    CONFIG REWRITE command is affected and should upgrade ASAP.


author: Remi Collet <remi@remirepo.net> - 6.0.9-3
changelog:
  - move configuration in /etc/redis per upstream recommendation
    see https://github.com/redis/redis/issues/8051


author: Remi Collet <remi@remirepo.net> - 6.2.0-1
changelog:
  - Redis 6.2.0 GA - Released Tue Feb 22 14:00:00 IST 2021
  - Upgrade urgency: SECURITY if you use 32bit build of redis,
    MODERATE if you used earlier versions of Redis 6.2, LOW otherwise


author: Remi Collet <remi@remirepo.net> - 6.2.2-1
changelog:
  - Redis 6.2.2 - Released Mon April 19 19:00:00 IST 2021
  - Upgrade urgency: HIGH, if you're using ACL and pub/sub,
    CONFIG REWRITE, or suffering from performance regression.


author: Paul Nasrat <pnasrat@redhat.com> - 3.3.6-1
changelog:
  - Update to 3.3.6
  - Fix typo  (#189647)
  - Enable threading fixes (#181298)
  - Conditionalize static library


author: Panu Matilainen <pmatilai@redhat.com> - 3.5.9-2
changelog:
  - Remove references to temporary registers from cache on release (#463061)
  - Enable loading of external extensions (#457433)


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.6.2-2
changelog:
  - require tcl(abi) in sqlite-tcl subpackage (#474034)
  - move tcl extensions to arch-specific location
  - enable dependency extraction on the tcl dso
  - require pkgconfig in sqlite-devel


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.12-2
changelog:
  - disable strict aliasing to work around brokenness on 3.6.12 (#494266)
  - run test-suite on build but let it fail for now


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.14-1
changelog:
  - update to 3.6.14 (http://www.sqlite.org/releaselog/3_6_14.html)
  - merge-review cosmetics (#226429)
    - drop ancient sqlite3 obsoletes
    - fix tab vs space whitespace issues
    - remove commas from summaries
  - fixup io-test fsync expectations wrt SQLITE_DISABLE_DIRSYNC


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.17-1
changelog:
  - update to 3.6.17 (http://www.sqlite.org/releaselog/3_6_17.html)
  - disable to failing tests until upstream fixes


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.18-1
changelog:
  - update to 3.6.18 (http://www.sqlite.org/releaselog/3_6_18.html)
  - drop no longer needed test-disabler patches


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.23-1
changelog:
  - update to 3.6.23 (http://www.sqlite.org/releaselog/3_6_23.html)
  - drop the lemon sprintf patch, upstream doesn't want it
  - make test-suite errors fail build finally


author: Panu Matilainen <pmatilai@redhat.com> - 3.7.4-1
changelog:
  - update to 3.7.4 (http://www.sqlite.org/releaselog/3_7_4.html)
  - deal with upstream source naming, versioning and format changing
  - fixup wal2-test expections wrt SQLITE_DISABLE_DIRSYNC use


author: Panu Matilainen <pmatilai@redhat.com> - 3.7.7.1-1
changelog:
  - update to 3.7.7.1 (http://www.sqlite.org/releaselog/3_7_7_1.html)
  - autoconf no longer needed for build, libdl check finally upstreamed


author: Panu Matilainen <pmatilai@redhat.com> - 3.7.13-1
changelog:
  - update to 3.7.13 (http://www.sqlite.org/releaselog/3_7_13.html)
  - drop no longer needed savepoint relase patch


author: Panu Matilainen <pmatilai@redhat.com> - 3.7.15-1
changelog:
  - update to 3.7.15 (http://www.sqlite.org/releaselog/3_7_15.html)
  - fix an old incorrect date in spec changelog


author: Jan Stanek <jstanek@redhat.com> - 3.7.16.2-1
changelog:
  - update to 3.7.16.2 (http://www.sqlite.org/releaselog/3_7_16_2.html)
  - add support for aarch64 (rerunning autoconf) (#926568)


author: Michael A. Peters <mpeters@mac.com> - 5.1.0-1
changelog:
  - updated version
  - remove Patch0 (in upstream), added Patch6
  - Does not BuildRequire xfree/xorg devel
  - no longer BuildRequire autoconf (Patch0 removed)


author: Patrice Dumas <pertusus[AT]free.fr> - 5.1.1-4
changelog:
  - separate subpackage for static library
  - keep timestamps
  - add more paths to t1libconfig and use rpm macros for those paths
  - fix the -maxdepth position in find
  - put t1lib.config and FontDatabase in %{_datadir} these are not
    config files, they are generated
  - fix a segfault in t1lib with long TYPE1 lines


author: Jaroslav Škarvada <jskarvad@redhat.com> - 5.1.2-6
changelog:
  - Resolves: #556398
  - Directly included relevant patches, scripts and man pages from Debian
  - Removed rpath
  - rpmlint is silent now


author: Jaroslav Škarvada <jskarvad@redhat.com> - 5.1.2-6.1
changelog:
  - Fixed CVE-2010-2642, CVE-2011-0433, CVE-2011-0764, CVE-2011-1552, CVE-2011-1553, CVE-2011-1554
    Resolves: rhbz#772900


author: Matthias Saou <http://freshrpms.net/> 0.5.0-1
changelog:
  - Update to 0.5.0.
  - Remove empty files from %doc.
  - There are no more shared libraries, only a static one, so update %files.


author: Matthias Saou <http://freshrpms.net/> 0.7.2-1
changelog:
  - Update to 0.7.2.
  - Remove useless /sbin/ldconfig calls, as we don't ship any shared library.
  - Update summary.


author: Travis Kendrick <pouar@pouar.net> - 0.6.0-3
changelog:
  - wrong directory for ctest
  - LICENSE not needed in -devel
  - fix "spurious-executable-perm"
  - rpmbuild does the cleaning for us, so 'rm -rf %{buildroot}' isn't needed


author: Matthew Truch <matt at truch.net> - 3.004-0.2.b
changelog:
  - Include gcc-gfortran build requirment and make sure it gets used.
  - Use macros instead of hard coded paths.
  - Include home page in description


author: Matthew Truch <matt at truch.net> - 3.004-0.5.b
changelog:
  - Shorten summary.
  - Improve specfile post and postun syntax.
  - Install headers in cfitsio include subdir.
  - Include more documentation provided in tarball.


author: Matthew Truch <matt at truch.net> - 3.004-0.10.b
changelog:
  - Set environment variables correctly.
  - Include patch so Makefile will put things where they belong.


author: Matthew Truch <matt at truch.net> - 3.006-4
changelog:
  - Don't use macro {buildroot} in build, only in install as per 
    appended comments to Bugzilla bug 172042


author: Matthew Truch <matt at truch.net> - 3.030-2
changelog:
  - Require pkgconfig for -devel.
  - export CC=gcc so we don't clobber $RPM_OPT_FLAGS, thereby 
    ruining any -debuginfo packages.  
    See RedHat Bugzilla 229041.


author: Matthew Truch <matt at truch.net> - 3.060-3
changelog:
  - Properly indicated include and lib directories in .pc file
    (BZ 436539)
  - Fix typo in -static descrition.


author: Matthew Truch <matt at truch.net> - 3.270-1
changelog:
  - Upstream 3.270 release.
  -   Several bugfixes.
  -   A few new library functions.
  -   License change (no longer uses GPL code).


author: Sergio Pascual <sergiopr@fedoraproject.org> - 3.330-2
changelog:
  - Using libcfitsio-version.so.0 as soname
  - Fixed permissions of libcfitsio and fpack, funpack
  - Soname contains full package version (upstream doesn't track API changes)


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1-1.11.1
changelog:
  - Added hook for fixing Plesk work with enabled linksafe protection
  - Fixed work of linksafe configuration for 2.6.18 kernel
  - Fixed creation of fs.protected_*links_create parameters in /etc/sysctl.conf
  - Fixed fs.protected_* parameters cleanup during package uninstallation


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1-1.20
changelog:
  - AL-2064: Add psaadm user to linksafe group on Plesk Onyx
  - AL-2069: Fix alt-* packages files permissions correction


author: Stepan Oksanichenko <soksanichenko@cloudlinux.com> - 1-1.22
changelog:
  - CAG-714: cloudlinux-linksafe package should turn off symlink traversal protection by default. Part II


author:
  Stas Django <ssergiienko@cloudlinux.com>, Stepan Oksanichenko <soksanichenko@cloudlinux.com> - 1-1.23

changelog:
  - CAG-833: /scripts/postupcp issue (cloudlinux-linksafe?)
  - LU-482 Added root permission check to cl-linksafe-reconfigure


author: Anton Volkov <avolkov@cloudlinux.com>, Sergey Kozhekin <skozhekin@cloudlinux.com> - 1-1.24
changelog:
  - LU-1641: investigate issues with CL8 installation into empty chroot (ISO install)
  - SonarQube cloudlinux-linksafe ger_ev


author: Anton Volkov <avolkov@cloudlinux.com> - 1-1.25
changelog:
  - LVEMAN-1648: add "--skip-php-reload" to cagefsctl --setup-cl-selector called by /usr/bin/cl-linksafe-reconfigure


author: Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> - 1-3.2
changelog:
  - LVEMAN-1748: Move linksafe group creation to %pre
  - LU-2436: Remove cllib dependency from cloudlinux-linksafe


author: Jonathan MERCIER <bioinfornatics at gmail.com> 2.1.2.18116.0-2
changelog:
  - Update to 2.1.2
  - Use %global instead of %define
  - Change ${SOURCE1} to %{SOURCE1}
  - Change Group Database to Applications/Databases
  - Change License IPL to Interbase
  - Perform %configure section's with some module
  - Cconvert cyrillic character to UTF-8


author: Jonathan MERCIER <bioinfornatics at gmail.com> 2.1.2.18116.0-3
changelog:
  - Perform %configure with option --with-system-icu
  - Add libicu-devel in BuildRequires
  - Use iconv for convert files to UTF-8


author: Philippe Makowski <makowski at firebird-fr.eu.org> 2.1.1.17190.0-4
changelog:
  - Create a doc package
  - major cleaning to avoid rpmlint errors
  - revert to 2.1.1 (last stable build published)


author: Philippe Makowski <makowski at firebird-fr.eu.org> 2.1.2.18118.0-1
changelog:
  - backport doc patch
  - update to 2.1.2.18118
  - cleanup macros
  - specifie libdir
  - change firebird user login


author: Philippe Makowski <makowski at firebird-fr.eu.org> 2.1.2.18118.0-4
changelog:
  - major cleaning install process to take care of the two architectures (Classic and Superserver) the right way


author: Philippe Makowski <makowski at firebird-fr.eu.org> 2.1.2.18118.0-6
changelog:
  - add filesystem-subpackage
  - remove common subpackage and use the main instead
  - add logrotate config


author: Philippe Makowski <makowski at firebird-fr.eu.org> 2.1.2.18118.0-7
changelog:
  - patch to change lock files location and avoid %{fbroot} owned by firebird user (rh #500219)
  - add README.fedora
  - add symlinks in /usr/bin
  - change xinetd reload (rh #500219)


author: Philippe Makowski <makowski at firebird-fr.eu.org> 2.1.2.18118.0-11
changelog:
  - change xinetd script (rh #506528)
  - add missing library (and header files) for build php4-interbase module (rh #506728)
  - update README.fedora
  - automatically created user now have /bin/nologin as shell to make things a little more secure


author: Philippe Makowski <makowski at firebird-fr.eu.org> 2.1.3.18185.0-2
changelog:
  - rename /usr/bin/gstat to /usr/bin/gstat-fb  to avoid conflict with ganglia-gmond (rh #515510)
  - remove stupid rm -rf in postun


author: Philippe Makowski <makowski at fedoraproject.org> 2.1.3.18185.0-4
changelog:
  - build it against system edit lib
  - set correct setuid for Classic lock manager
  - set correct permission for /var/run/firebird


author: Dan Horák <dan[at]danny.cz> 2.5.0.26074.0-2
changelog:
  - sync the s390(x) utilities list with other arches
  - add libatomic_ops-devel as BR: on non-x86 arches


author: Orion Poplawski <orion@cora.nwra.com> 1.6.4-3
changelog:
  - Add --enable-threads --with-pthreads to configure
  - Add %check
  - Add some %docs
  - Use %makeinstall
  - Add patch to fix test for h5repack
  - Add patch to fix h5diff_attr.c


author: Orion Poplawski <orion@cora.nwra.com> 1.6.5-5
changelog:
  - Change rpath patch to not need autoconf
  - Add patch for libtool on x86_64
  - Fix shared lib permissions


author: Orion Poplawski <orion@cora.nwra.com> 1.6.5-7
changelog:
  - New project URL
  - Add patch to use POSIX sort key option
  - Remove useless and multilib conflicting Makefiles from html docs
    (bug #228365)
  - Make hdf5-devel own %{_docdir}/%{name}


author: Orion Poplawski <orion@cora.nwra.com> 1.8.0-1
changelog:
  - Update to 1.8.0, drop upstreamed patches
  - Update signal patch
  - Move static libraries into -static sub-package
  - Make -devel multiarch (bug #341501)


author: Orion Poplawski <orion@cora.nwra.com> 1.8.0.snap5-1
changelog:
  - Update to 1.8.0-snap5
  - Remove --enable-threadsafe, incompatible with --enable-cxx and
    --enable-fortran
  - ExcludeArch ppc64 until we can get it to build (bug #445423)


author: Orion Poplawski <orion@cora.nwra.com> 1.8.0.snap5-2
changelog:
  - Use new %{_fmoddir} macro
  - Re-enable ppc64, disable failing tests.  Failing tests are for
    experimental long double support.


author: Orion Poplawski <orion@cora.nwra.com> 1.8.2-1
changelog:
  - Update to 1.8.2
  - Add patch to compile H5detect without optimization - make detection
    of datatype characteristics more robust - esp. long double
  - Update signal patch
  - Drop destdir patch fixed upstream
  - Drop scaleoffset patch
  - Re-add -fno-strict-aliasing
  - Keep settings file needed for -showconfig (bug #481032)
  - Wrapper script needs to pass arguments (bug #481032)


author: Orion Poplawski <orion@cora.nwra.com> 1.8.3-3.snap12
changelog:
  - Update to 1.8.3-snap12
  - Update signal patch
  - Drop detect and filter-as-option patch fixed upstream
  - Drop ppc only patch
  - Add patch to skip tstlite test for now, problem reported upstream
  - Fixup some source file permissions


author: Orion Poplawski <orion@cora.nwra.com> 1.8.4-1
changelog:
  - Update to 1.8.4
  - Must compile with -O0 due to gcc-4.4 incompatability
  - No longer need -fno-strict-aliasing


author: Orion Poplawski <orion@cora.nwra.com> 1.8.5.patch1-2
changelog:
  - Build parallel hdf5 packages for mpich2 and openmpi
  - Rework multiarch support and drop multiarch patch


author: Orion Poplawski <orion@cora.nwra.com> 1.8.12-5
changelog:
  - Use parallel make
  - Limit number of processors to 4 in parallel tests to avoid mpich issue with
    oversubscription


author: Orion Poplawski <orion@cora.nwra.com> - 1.8.12-6
changelog:
  - Add patch to add ppc64le to config.guess (bug #1080122)
  - Add patch to fix long double conversions on ppc64le (bug #1078173)
  - Run autoreconf for patches and to remove rpaths


author: Kaj J. Niemi <kajtzu@fi.basen.net> 0:2002e-0.1
changelog:
  - c-client 2002e is based on imap-2002d
  - Build shared version, build logic is copied from FreeBSD net/cclient


author: Joe Orton <jorton@redhat.com> 2002e-3
changelog:
  - install .so with permissions 0755
  - make auth_md5.c functions static to avoid symbol conflicts
  - remove Epoch: 0


author: Kaj J. Niemi <kajtzu@fi.basen.net> 2002e-4
changelog:
  - Use CFLAGS (and RPM_OPT_FLAGS) during the compilation
  - Build the .so through gcc instead of directly calling ld


author: Rex Dieter <rexdieter at sf.net> 2004-0.fdr.1
changelog:
  - imap-2004
  - use mlock, if available.
  - Since libc-client is an attrocious name choice, we'll trump it, 
    and provide imap, imap-libs, imap-devel instead (redhat bug #120873)


author: Rex Dieter <rexdieter at sf.net> 1:2004-0.fdr.6.a
changelog:
  - remove Obsoletes/Provides: libc-client (they can, in fact, co-xist)
  - -devel: remove O/P: libc-client-devel -> Conflicts: libc-client-devel


author: Rex Dieter <rexdieter[AT]users.sf.net> 1:2004-0.fdr.9.c
changelog:
  - imap2004c
  - -utils: dmail,mailutil,tmail
  - -libs: include mlock (so it's available for other imap clients, like pine)
  - remove extraneous patches
  - %_sysconfigdir/c-client.cf: use to set MailDir (but don't if upgrading from
    an older version (ie, if folks don't want/expect a change in behavior)


author: Rex Dieter <rexdieter[AT]users.sf.net> 1:2004-0.fdr.11.c1
changelog:
  - change default driver from mbox to mbx
  - comply with RFC 3501 security: Unencrypted plaintext passwords are prohibited


author: Rex Dieter <rexdieter[AT]users.sf.net> 1:2004d-1
changelog:
  - 2004d
  - imap-libs -> lib%{soname}%{version} (ie, libc-client2004d), so we can 
    have multiple versions (shared-lib only) installed
  - move mlock to -utils.
  - revert RFC2301, locks out too many folks where SSL is unavailable


author: Rex Dieter <rexdieter[AT]users.sf.net> 2004e-1
changelog:
  - imap-2004e
  - rename: imap -> uw-imap (yay, we get to drop the Epoch)
  - sslcerts=%{_sysconfdir}/pki/tls/certs if exists, else /usr/share/ssl/certs


author: Rex Dieter <rdieter@fedoraproject.org> 2007-2
changelog:
  - Obsoletes: libc-client2006 (#429796)
  - drop libc-client hacks for parallel-installability, fun while it lasted


author: Rex Dieter <rdieter@fedoraproject.org> 2007e-13
changelog:
  - _with_system_libc_client option (el6+) 
  - tight deps via %?_isa
  - drop extraneous Requires(post,postun): xinetd


author: Oliver Falk <oliver@linux-kernel.at> 0.11-1
changelog:
  - Update to latest upstream version (#565808)
  - Add missing Req. libevent-devel for libgearman-devel (#565808)
  - Remove libmemcache patch - should be fixed in 0.11


author: BJ Dierkes <wdierkes@rackspace.com> - 0.14-1
changelog:
  - Latest sources from upstream.  Full changelog available from:
    https://launchpad.net/gearmand/trunk/0.14


author: BJ Dierkes <wdierkes@rackspace.com> - 0.20-1
changelog:
  - Latest sources from upstream.  
  - Add %ghost to /var/run/gearmand. Resolves BZ#656592
  - BuildRequires: boost-devel >= 1.37.0
  - Adding gearadmin files
  - Converted to Systemd.  Resolves BZ#661643


author: BJ Dierkes <wdierkes@rackspace.com> - 0.23-1
changelog:
  - Latest source from upstream.  Release information available at:
    https://launchpad.net/gearmand/+milestone/0.23


author: BJ Dierkes <wdierkes@rackspace.com> - 0.25-1
changelog:
  - Latest sources from upstream.  Release notes here:
    https://launchpad.net/gearmand/trunk/0.25
  - Also rebuild against libboost_program_options-mt.so.1.47.0 
  - Added libgearman-1.0, libgearman-1.0-devel per upstream


author: BJ Dierkes <wdierkes@rackspace.com> - 0.28-1
changelog:
  - Latest sources from upstream.  Release notes here:
    https://launchpad.net/gearmand/trunk/0.28
  - Removing Patch0: gearmand-0.27-lp914495.patch (applied upstream)
  - Removing _smp_mflags per https://bugs.launchpad.net/bugs/901007


author: BJ Dierkes <wdierkes@rackspace.com> - 0.31-1
changelog:
  - Latest sources from upstream.  Release notes here:
    https://launchpad.net/gearmand/trunk/0.31
    https://launchpad.net/gearmand/trunk/0.29
  - Removed Patch1: gearmand-0.28-lp932994.patch (applied upstream)
  - Added Patch2: gearmand-0.31-lp978235.patch.  Resolves LP#978235.


author: BJ Dierkes <wdierkes@rackspace.com> - 0.32-1
changelog:
  - Latest sources from upstream.  Release notes here:
    https://launchpad.net/gearmand/trunk/0.32
  - Removed Patch2: gearmand-0.31-lp978235.patch (applied upstream)


author: BJ Dierkes <wdierkes@rackspace.com> - 0.33-1
changelog:
  - Latest sources from upstream.  Release notes here:
    https://launchpad.net/gearmand/trunk/0.33
  - Adding Patch3: gearmand-0.33-lp1020778.patch


author: BJ Dierkes <wdierkes@rackspace.com> - 0.33-3
changelog:
  - Rebuilt for latest boost.
  - BuildRequires: boost-thread
  - Added -lboost_system to LDFLAGS to work around boost issue
    related to boost-thread.


author: BJ Dierkes <wdierkes@rackspace.com> - 0.35-1
changelog:
  - Latest sources from upstream. Release notes here:
    https://launchpad.net/gearmand/trunk/0.35
  - Removed Patch3: gearmand-0.33-lp1020778.patch (applied upstream)
  - Added zlib support
  - Added MySQL support


author: BJ Dierkes <wdierkes@rackspace.com> - 0.39-1
changelog:
  - Latest sources from upstream. Release notes here:
    https://launchpad.net/gearmand/trunk/0.39
  - Added Postgres support
  - Added Sqlite support


author: BJ Dierkes <wdierkes@rackspace.com> - 1.1.2-1
changelog:
  - Bumping to 1.2 branch (1.1.2 current development version).
    Release notes are available here:
    https://launchpad.net/gearmand/1.2/1.1.2
  - Repackaged libgearman-1.0, and libgearman-1.0-devel under the
    devel sub-package.
  - Updated scriptlets per BZ#850127


author: Ken Dreyer <ktdreyer@ktdreyer.com> - 1.1.8-1
changelog:
  - Update to latest upstream release.
  - Add EL5 and EL6 conditionals to unify the spec across all branches.
  - Add mandirs.
  - Add /var/log/gearmand.log.
  - Add tokyocabinet support.
  - Remove commented patches.
  - rpmlint fixes (macros in comments).


author: Ken Dreyer <ktdreyer@ktdreyer.com> - 1.1.12-1
changelog:
  - Update to latest upstream release
  - Drop Fedora 18 conditional
  - Add el5 e2fsprogs-libs minimum version requirement
  - Fix bogus changelog date


author: Adam Jackson <ajax@redhat.com> 1.1.12-10
changelog:
  - Re-add Fedora conditional dropped in 1.1.12-1, which had the (probably)
    unintended side-effect of reverting Fedora to sysvinit from systemd.


author: Remi Collet <remi@remirepo.net> - 1.0.16-1
changelog:
  - update to 1.0.16
  - soname bump to 23 (libsodium13 compat package exists)
  - manage update from libsodium23 (3rd party repository)
  - Add static library subpackage
  - fix license management


author: Rex Dieter <rdieter@fedoraproject.org> - 0.99.0-20.20091203
changelog:
  - 20091203 snapshot
  - spec housecleaning
  - Tidy erroniously removes whitespace, causing mangled text (#481350)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.5.1-2
changelog:
  - Disable amd64 assembly on non-intel architectures (#2035802):
    this should avoid the issue where an executable stack is created.


author: Michael Schwendt <mschwendt[AT]users.sf.net> - 0.9.7.1-4
changelog:
  - Fix big-endian memory leaks in haval.c
  - Patch is sufficient to pass test-suite on ppc. Fixes #226987.


author: Michael Schwendt <mschwendt[AT]users.sf.net> - 0.9.9-4
changelog:
  - Remove AC_CHECK_SIZEOF definitions from mhash_config.h
    since stdint.h is used. Add a guard after running configure.
    This shall fix the multiarch conflict in mhash-devel (#342601).


author: Adam Goode <adam@spicenitz.org> - 2.1.0-1
changelog:
  - New upstream release
     + MIRAX support
     + More Aperio support
     + Properties and associated images support
     + Bug fixes


author: Adam Goode <adam@spicenitz.org> - 2.3.1-1
changelog:
  - New upstream release
     + Support for generic tiled TIFF
     + Bug fixes
     + Try to be less chatty with TIFF output


author: Adam Goode <adam@spicenitz.org> - 3.0.0-1
changelog:
  - New upstream release
     + License change from GPLv2 to LGPLv2
     + Bug fixes
     + Support more MIRAX files
     + Improve perforamance of MIRAX
     + Add some command-line tools
     + Rework API documentation
     + Add some new properties
     + Remove some unimplemented functions from the header file


author: Adam Goode <adam@spicenitz.org> - 3.1.0-1
changelog:
  - New upstream release
     + Support newer Aperio files (compression 33005)
     + Be more robust in reading raw TIFF tiles
     + Reject invalid TIFF files earlier
     + Fix many memory leaks when probing for TIFF files


author: Adam Goode <adam@spicenitz.org> - 3.1.1-1
changelog:
  - New upstream release
     + Don't crash or leak memory on some invalid VMS files
     + Ignore extra layers in VMS files


author: Adam Goode <adam@spicenitz.org> - 3.2.2-1
changelog:
  - New upstream release
     + Add openslide-write-png
     + Support for VMU files
     + New error handling system


author: Adam Goode <adam@spicenitz.org> - 3.2.5-1
changelog:
  - New upstream release
     + Support for MIRAX 1.03 files
     + openslide_read_region now works for large dimensions
     + quickhash-1 is disabled for unusual TIFFs where it is very slow


author: Adam Goode <adam@spicenitz.org> - 3.2.6-1
changelog:
  - New upstream release
     + Support for downsampled MIRAX files
     + Improved MIRAX performance and bugfixes
     + Fix for openslide_read_region with large dimensions


author: Benjamin Gilbert <bgilbert@backtick.net> - 3.3.0-1
changelog:
  - New upstream release
     + Support for Leica SCN format (requires libtiff 4)
     + Partial support for MIRAX 2.2
     + Standard properties for microns-per-pixel and objective power
     + Improved reporting of open errors
     + Command-line tool improvements
  - Add versioned dependency on main package to subpackages


author: Benjamin Gilbert <bgilbert@backtick.net> - 3.3.1-1
changelog:
  - New upstream release
     + Parallelize concurrent openslide_read_region calls
     + Performance improvements for MIRAX and Hamamatsu VMS


author: Benjamin Gilbert <bgilbert@backtick.net> - 3.3.2-1
changelog:
  - New upstream release
     + Fix seams in MIRAX 2.2 slides
     + Fix associated images in single-level Aperio slides
     + Improve performance on MIRAX and Hamamatsu VMU


author: Benjamin Gilbert <bgilbert@backtick.net> - 3.3.3-1
changelog:
  - New upstream release
     + Minor compatibility improvements for Aperio JP2K and Hamamatsu slides
  - Update Source0 URL


author: Charles Duffy <cduffy@spamcop.net>
changelog:
  - upgraded to 4.13
   - added 7z (not just 7za) with a shell wrapper
   - added gcc-c++ to the BuildRequires list


author: Marcin Zajączkowski <mszpak@wp.pl>
changelog:
  - added 7za script and moved SFX module to _datadir/name/ to allow 7za & 7z
     use it simultaneously
   - returned to plugins in separate package


author: Matthias Saou <matthias@saou.eu> 4.14.01-1
changelog:
  - Spec file cleanup.
  - Fix wrapper scripts : Double quote $@ for filenames with spaces to work.
  - Move files from /usr/share to /usr/libexec.
  - Various other minor changes.


author: Matthias Saou <matthias@saou.eu> 4.39-1
changelog:
  - Update to 4.39.
  - Remove no longer needed gcc 4.1 patch.
  - Use the gcc_4.X makefile.
  - Remove RAR licensed files and RAR license itself (#190277).


author: Matthias Saou <matthias@saou.eu> 4.47-1
changelog:
  - Update to 4.47.
  - Include now required patch to exclude removed Rar bits from makefiles.
  - Switch to using "make install" for installation... so patch and hack.
  - Use the asm makefile for x86_64, so build require yasm for it too.
  - Add ppc64 to the main %ifarch.
  - Remove no longer included Codecs and Formats dirs (7z.so replaces them?).
  - Remove our wrapper scripts, since the install script creates its own.


author: Matthias Saou <matthias@saou.eu> 9.20.1-1
changelog:
  - Update to 9.20.1 (#688564).
  - Update norar, nostrip and install patches.
  - Minor clean ups : Don't use trivial macros + new email address.
  - Don't require the main package from the plugins package (#690551).
  - Use the any_cpu_gcc_4.X makefile for ppc* since the ppc specific one is gone.


author: Sérgio Basto <sergio@serjux.com> - 15.09-1
changelog:
  - Update to p7zip_15.09
  - Use cmake.
  - Refactor norar patch.
  - Deleted: p7zip_9.20.1-execstack.patch (upstreamed)
  - Deleted: p7zip_9.20.1-install.patch (upstreamed)
  - Deleted: p7zip_9.20.1-nostrip.patch (upstreamed)


author: Sérgio Basto <sergio@serjux.com> - 15.09-6
changelog:
  - Stating in License.txt file that we removed non-Free unrar code
    from sources (#190277)
  - Fix incorrect fsf address in the license files.
  - Add p7zip_15.09-no7zG_and_7zFM.patch in a diferent patch.


author: Sérgio Basto <sergio@serjux.com> - 15.14-1
changelog:
  - Update to 15.14 .
  - Rebase norar_cmake.patch
  - Minor improvement in snippet of documentation.
  - Drop patch1, from changelog build on s390 is fixed.
  - Drop p7zip-15.09-CVE-2015-1038.patch, from changelog if fixed.
  - Drop upstreamed p7zip_15.09-incorrect-fsf-address.patch .
  - Drop p7zip_15.09-no7zG_and_7zFM.patch, p7zip build is fixed.
  - Add sub-package p7zip-gui with 7zG.


author: Sérgio Basto <sergio@serjux.com> - 15.14-2
changelog:
  - Fix non-executable-in-bin for p7zipForFilemanager.
  - Remove p7zip_compress2.desktop to not duplicate the menu entries.
  - Also build 7zFM, rebuild p7zip_15.14_src_all-norar.tar.bz2, to build 7zFM
    instead 7zFM_do_not_use.


author: Sérgio Basto <sergio@serjux.com> - 15.14.1-1
changelog:
  - Update to 15.14.1
  - Revert 7zFM build, upstream recomends not build it
    http://sourceforge.net/p/p7zip/bugs/175/


author: Tomas Hoger <thoger@redhat.com> - 16.02-7
changelog:
  - Add conditional for building with(out) GUI support.  Keep GUI enabled for
    Fedora and EPEL builds, but disabled for RHEL.
  - Add missing dependency - 7zG requires 7z.so, so p7zip-gui needs to require
    p7zip-plugins.


author: Sérgio Basto <sergio@serjux.com> - 16.02-9
changelog:
  - Security fix for CVE-2017-17969 (from Debian)
  - Add 05-hardening-flags.patch, 09-man-update.patch, 10-drop-fm-doc.patch
    and 14-Fix-g++-warning.patch patches from Debian, very small changes
    better documentation, compile flags and compile warning.


author: Fedora Release Engineering <releng@fedoraproject.org> - 16.02-13
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
  - https://fedoraproject.org/wiki/Changes/Remove_GCC_from_BuildRoot


author: Adam Goode <adam@spicenitz.org> - 7.10.20-3
changelog:
  - Include results of running automake in the patch for undefined symbols
  - No longer run automake or autoconf (autoconf was never actually necessary)


author: Adam Goode <adam@spicenitz.org> - 7.20.6-1
changelog:
  - New upstream release
     + About half of the VIPS library has been revised
     + Now using gtk-doc
     + Better image file support
     + MATLAB file read supported
     + New interpolation system
     + Support for Radiance files


author: Adam Goode <adam@spicenitz.org> - 7.20.7-1
changelog:
  - New upstream release
     + C++ and Python bindings now have support for deprecated functions
     + Bugfixes for YCbCr JPEG TIFF files


author: Adam Goode <adam@spicenitz.org> - 7.22.1-1
changelog:
  - New upstream release
     + More revision of VIPS library
     + New threading system
     + New command-line program, vipsthumbnail
     + Improved interpolators
     + German translation
     + PFM (portable float map) image format read and write
     + Much lower VM use with many small images open
     + Rewritten flood-fill


author: Adam Goode <adam@spicenitz.org> - 7.24.2-1
changelog:
  - New upstream release
     * Run-time code generation, for 4x speedup in some operations
     * Open via disc mode, saving memory
     * FITS supported
     * Improved TIFF and JPEG load


author: Adam Goode <adam@spicenitz.org> - 7.26.3-1
changelog:
  - New upstream release
     * More permissive operators
     * Better TIFF, JPEG, PNG, FITS support
     * VIPS rewrite!


author: Adam Goode <adam@spicenitz.org> - 7.28.2-1
changelog:
  - New upstream release
     * libvips rewrite
     * OpenSlide support
     * better jpeg, png, tiff support
     * sequential mode read
     * operation cache


author: Benjamin Gilbert <bgilbert@backtick.net> - 7.30.3-1
changelog:
  - New release
  - Enable gobject introspection
  - Add versioned dependency on base package
  - Minor specfile cleanups


author: Benjamin Gilbert <bgilbert@backtick.net> - 7.40.2-1
changelog:
  - New release
  - Add libgsf dependency
  - Fix version string consistency across architectures
  - Use macros for package and soname versions


author: Benjamin Gilbert <bgilbert@backtick.net> - 8.5.6-1
changelog:
  - New release
  - Rename Python packages per policy
  - Update project URLs
  - Rename pygobject3-base dependency to python-gobject-base
  - Switch python3-gobject dependency to python3-gobject-base
  - Add missing arch-specific Python provide
  - Drop Group tags


