alt-php71 (7.1.33-53.1) stable; urgency=medium

  * ALTPHP-1764: Bumped release

 -- Ilya Voyskovsky <ivoyskovsky@cloudlinux.com>  Thu, 23 May 2024 13:32:00 +0200

alt-php71 (7.1.33-53) stable; urgency=medium

  * ALTPHP-1738: Always build with alt-sqlite

 -- Ilya Voyskovsky <ivoyskovsky@cloudlinux.com>  Wed, 15 May 2024 20:32:00 +0200

alt-php71 (7.1.33-52) stable; urgency=medium

  * Fix for hardened PHP
    - CVE-2024-2756: fix __Host-/__Secure-cookie bypass due to partial
      CVE-2022-31629 fix
    - CVE-2024-3096: Disallow null character in bcrypt password to fix bug
      causing password_verify to erroneously return true

 -- Dmitriy Popov <dpopov@cloudlinux.com>  Tue, 07 May 2024 15:46:32 +0000

alt-php71 (7.1.33-51) stable; urgency=medium

  * ALTPHP-855: set for mysql exts default path to /var/lib/mysql/mysql.sock

 -- Sergey Fokin <sfokin@cloudlinux.com>  Thu, 14 Mar 2024 15:11:00 +0100

alt-php71 (7.1.33-50) stable; urgency=medium

  * ALTPHP-1665: pack fpm as sub-package
  * ALTPHP-1573: update LiteSpeed to 8.1

 -- Sergey Fokin <sfokin@cloudlinux.com>  Tue, 20 Feb 2024 15:57:00 +0100

alt-php71 (7.1.33-49) stable; urgency=medium

  * CVE-2023-3247: Fix missing randomness check for SOAP HTTP Digest

 -- Dmitriy Popov <dpopov@cloudlinux.com>  Thu, 28 Sep 2023 14:13:05 +0000

alt-php71 (7.1.33-48) stable; urgency=medium

  * ALTPHP-1541: Enable cache_phpdata calling after package installation on debian systems.

 -- Eduard Chiganov <echiganov@cloudlinux.com>  Tue, 26 Sep 2023 15:20:00 +0100

alt-php71 (7.1.33-43) stable; urgency=medium

  * Fix path for sed

 -- Sergey Fokin <sfokin@cloudlinux.com>  Tue, 19 Sep 2023 11:33:00 +0200

php (7.1.33-42) stable; urgency=medium

  * Fix for hardened PHP
    - CVE-2023-3823: Fix external entity loading in XML without enabling by
      sanitizing libxml2 globals before parsing
    - CVE-2023-3824: Fix buffer mismanagement in phar_dir_read()

 -- Nikita Ivanov <nivanov@cloudlinux.com>  Fri, 18 Aug 2023 07:05:45 +0000

php (7.1.33-41) stable; urgency=medium

  * Add optimization flag
  * Some code polishing of the rules

 -- Pavel Mayorov <pmayorov@cloudlinux.com>  Thu, 06 Apr 2023 15:00:00 +0300

php (7.1.33-40) stable; urgency=medium

  * Fix for hardened PHP
    - CVE-2023-0567: Fix validation of malformed BCrypt hashes
    - CVE-2023-0568: Fix array overrun when appending slash to paths
    - CVE-2023-0662: Fix DOS vulnerabality by limiting number of parsed
      multipart body parts and printing upload limit exceed error message only once

 -- Nikita Ivanov <nivanov@cloudlinux.com>  Mon, 20 Mar 2023 09:59:59 +0000

php (7.1.33-39) stable; urgency=medium

  * fix place of system lib dir in rpath

 -- Sergey Fokin <sfokin@cloudlinux.com>  Fri, 03 Feb 2023 17:11:00 +0100

php (7.1.33-38) stable; urgency=medium

  * Fix for Harden PHP
    - CVE-2022-31631: Fix integer overflow that could cause PDO::quote() to return an improperly quoted string

 -- Pavel Mayorov <pmayorov@cloudlinux.com>  Fri, 13 Jan 2023 12:49:35 +0000

php (7.1.33-37) stable; urgency=medium

  * Fix for harden PHP
    - CVE-2022-31628: Fix potential infinite recursion in phar wrapper when using quine gzip file
    - CVE-2022-31629: Add cookie integrity validation

 -- Pavel Mayorov <pmayorov@cloudlinux.com>  Fri, 28 Oct 2022 21:29:03 +0000

php (7.1.33-36) stable; urgency=medium

  * Fix for Harden PHP
    - CVE-2021-21705: add user name and password validation in filters module

 -- Nikita Ivanov <nivanov@cloudlinux.com>  Mon, 17 Oct 2022 10:26:45 -0400

php (7.1.33-35) stable; urgency=medium

  * ELS-189: Fix for Harden PHP
    - CVE-2022-31625: Fix freeing of uninitialized memory leading to RCE
    - CVE-2022-31626: Fix buffer overflow in mysqlnd driver leading to RCE

 -- Nikita Ivanov <nivanov@cloudlinux.com>  Fri, 15 Jul 2022 08:40:06 +0000

php (7.1.33-34.2) stable; urgency=medium

  * ALTPHP-1278: simulate RHEL SCL
  * add /opt/alt/php71/link

 -- Sergey Fokin <sfokin@cloudlinux.com>  Wed, 20 Apr 2022 20:31:00 +0200

php (7.1.33-34.1) stable; urgency=medium

  * ALTPHP-1262: fix pre/post scripts
  * ALTPHP-1276: Added --wait-lock to cagefsctl calling
  * ALTPHP-1277: skip failing of selectorctl in prostrm script

 -- Sergey Fokin <sfokin@cloudlinux.com>  Mon, 11 Apr 2022 18:11:00 +0200

php (7.1.33-34) stable; urgency=medium

  * ALTPHP-1266: update litespeed to 8.0.1

 -- Sergey Fokin <sfokin@cloudlinux.com>  Sat, 05 Mar 2022 15:11:00 +0100

php (7.1.33-33) stable; urgency=medium

  * ELS-165: Fix for harden PHP for Ubuntu
    - CVE-2021-21703: fix error in php fpm shared memory organization leading to privilage escalation
    - CVE-2021-21707: fix handling of paths with percent encoded NULL byte

 -- Nikita Ivanov <nivanov@cloudlinux.com>  Tue, 28 Dec 2021 12:55:21 +0700

php (7.1.33-32) stable; urgency=medium

  * add alt-php-config dependency

 -- Anatholy Scryabin <ascryabin@cloudlinux.com>  Mon, 27 Dec 2021 17:32:21 +0300

php (7.1.33-31) stable; urgency=medium

  * ALTPHP-1218: set request_order=GP in php.ini

 -- Sergey Fokin <sfokin@cloudlinux.com>  Fri, 03 Dec 2021 15:24:00 +0300

php (7.1.33-28) stable; urgency=medium

  * ALTPHP-1190: Update hardened php

 -- Eduard Abdullin <eabdullin@cloudlinux.com>  Fri, 10 Sep 2021 13:45:22 +0300

php (7.1.33-27) stable; urgency=medium

  * ALTPHP-1164: Update hardened php

 -- Eduard Abdullin <eabdullin@cloudlinux.com>  Mon, 19 Jul 2021 13:45:22 +0300

php (7.1.33-25) stable; urgency=medium

  * ALTPHP-1132: Update hardened php

 -- Eduard Abdullin <eabdullin@cloudlinux.com>  Thu, 13 May 2021 13:45:22 +0300

php (7.1.33-24) stable; urgency=medium

  * ALTPHP-1093: Update php-fpm lve patch
  * ALTPHP-1094: Update litespeed to 7.9

 -- Anatholy Scryabin <ascryabin@cloudlinux.com>  Tue, 06 Apr 2021 12:37:21 +0300

php (7.1.33-23) stable; urgency=medium

  * ALTPHP-1053: Update move_override_ini patch
  * ALTPHP-1038: Update litespeed log patch
  * ALTPHP-1082: Add alt-php-pdo requires for alt-php-mysqlnd and alt-php-firebird

 -- Eduard Abdullin <eabdullin@cloudlinux.com>  Mon, 26 Feb 2021 14:23:21 +0300

php (7.1.33-21) stable; urgency=medium

  * Fix bug #80523: Bogus parse error on >4GB source code
  * Fix bug #80672: Null Dereference in SoapClient. (CVE-2021-21702)

 -- Daniil Leonov <dleonov@cloudlinux.com>  Fri, 19 Feb 2021 17:30:00 +0300

php (7.1.33-20) stable; urgency=medium

  * AAP-178: Added disable killing of PHP-FPM parent process in LVE when not enough of memory

 -- Eduard Abdullin <eabdullin@cloudlinux.com>  Wed, 20 Jan 2021 16:35:43 +0300

php (7.1.33-19) stable; urgency=medium

  * Fix Bug #73809: Phar Zip parse crash - mmap fail
  * Fix Bug #77322: PharData::addEmptyDir('/') Possible integer overflow
  * Fix Bug #77961: Slow reqursive functions with MySQL
  * Fix Bug #80366: Potential issue in ext/standard/iptc.c: Return Value Not Checked
  * Fix Bug #80411: References to null-serialized object break serialize()

 -- Daniil Leonov <dleonov@cloudlinux.com>  Mon, 18 Jan 2021 21:38:00 +0300

php (7.1.33-18) stable; urgency=medium

  * Enable for Ubuntu 20.04

 -- Anatholy Scryabin <ascryabin@cloudlinux.com>  Thu, 24 Dec 2020 12:25:23 +0300

php (7.1.33-16) stable; urgency=medium

  * Fix bug #79601: Wrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV (CVE-2020-7069)
  * Fix bug #79699: PHP parses encoded cookie names so malicious `__Host-` cookies can be sent (CVE-2020-7070)
  * Fix bug #79825: opcache.file_cache causes SIGSEGV when custom opcode handlers changed
  * Fix bug #79986: str_ireplace bug with diacritics characters
  * Fix bug #80007: Potential type confusion in unixtojd() parameter parsing
  * Fix bug #80049: Memleak when coercing integers to string via variadic argument

 -- Nikolai Mikhno <nmikhno@cloudlinux.com>  Fri, 09 Oct 2020 20:05:00 +0300

php (7.1.33-13) stable; urgency=medium

  * Fix bug #79787: mb_strimwidth does not trim string
  * Fix bug #79797: Use of freed hash key in the phar_parse_zipfile function (CVE-2020-7068)
  * Fix bug #70362: Can't copy() large 'data://' with open_basedir
  * Fix bug #73527: Invalid memory access in php_filter_strip
  * Fix bug #74267: segfault with streams and invalid data
  * Fix bug #79783: Segfault in php_str_replace_common
  * Fix bug #79877: getimagesize function silently truncates after a null byte
  * Fix bug #62890: default_socket_timeout=-1 causes connection to timeout

 -- Nikolai Mikhno <nmikhno@cloudlinux.com>  Wed, 12 Aug 2020 14:05:00 +0300

php (7.1.33-12) stable; urgency=medium

  * MODLS-741: Make LSCRIU log messages with timestamps
  * MODLS-804: Improve mod_lsapi & lsphp error reporting in case of php memory limit reached
  * ALTPHP-961: Update litespeed to 7.7 version

 -- Darya Malyavkina <dmalyavkina@cloudlinux.com>  Wed, 29 Jul 2020 18:23:00 -0400

php (7.1.33-11) stable; urgency=medium

   * Fix bug #78221: DOMNode::normalize() doesn't remove empty text nodes
   * Fix bug #78875: Long variables cause OOM and temp files are not cleaned (CVE-2019-11048)
   * Fix bug #78876: Long variables in multipart/form-data cause OOM and temp files are not cleaned (CVE-2019-11048)
   * Fix bug #79497: stream_socket_client() throws an unknown error sometimes with <1s timeout
   * Fix bug #79503: Memory leak on duplicate metadata
   * Fix bug #79514: Memory leaks while including unexistent file
   * Fix bug #79528: Different object of the same xml between 7.4.5 and 7.4.4

 -- Nikoali Mikhno <nmikhno@cloudlinux.com>  Mon, 01 Jun 2020 18:27:00 +0300

php (7.1.33-9.1) stable; urgency=medium

  * Fix bug #79468: SIGSEGV when closing stream handle with a stream filter appended

 -- Nikolai Mikhno <nmikhno@cloudlinux.com>  Wed, 06 May 2020 10:05:00 +0300

php (7.1.33-9) stable; urgency=medium

  * Fix bug #61597: SXE properties may lack attributes and content
  * Fix bug #74940: DateTimeZone loose comparison always true
  * Fix bug #75673: SplStack::unserialize() behavior
  * Fix bug #79199: curl_copy_handle() memory leak
  * Fix bug #79200: Some iconv functions cut Windows-1258
  * Fix bug #79296: ZipArchive::open fails on empty file (libzip 1.6.0)
  * Fix bug #79330: shell_exec() silently truncates after a null byte
  * Fix bug #79364: When copy empty array, next key is unspecified
  * Fix bug #79393: Null coalescing operator failing with SplFixedArray
  * Fix bug #79396: setting Date/Time during a forward DST transition
  * Fix bug #79410: system() swallows last chunk if it is exactly 4095 bytes without newline
  * Fix bug #79413: session_create_id() fails for active sessions
  * Fix bug #79424: php_zip_glob uses gl_pathc after call to globfree
  * Fix bug #79465: OOB Read in urldecode() (CVE-2020-7067)
  * Fix bug #79468: SIGSEGV when closing stream handle with a stream filter appended

 -- Nikolai Mikhno <nmikhno@cloudlinux.com>  Thu, 23 Apr 2020 19:05:00 +0300

php (7.1.33-6.2) stable; urgency=medium

  * ALTPHP-869: add support for debian 10 

 -- Anatholy Scryabin <ascryabin@cloudlinux.com>  Thu, 09 Apr 2020 17:54:05 +0300

php (7.1.33-6.1) stable; urgency=medium

  * ALTPHP-869: add support for debian 9

 -- Anatholy Scryabin <ascryabin@cloudlinux.com>  Tue, 31 Mar 2020 19:20:30 +0300

php (7.1.33-5) stable; urgency=medium

  * Fix bug #77569: Write Access Violation in DomImplementation
  * Fix bug #79078: Hypothetical use-after-free in curl_multi_add_handle
  * Fix bug #79282: Use-of-uninitialized-value in exif (CVE-2020-7064)
  * Fix bug #79329: get_headers silently truncates after a null byte (CVE-2020-7066)

 -- Ivan Danilov <idanilov@cloudlinux.com>  Mon, 23 Mar 2020 21:02:33 +0400

php (7.1.33-4) stable; urgency=medium

  * MODLS-735: Delete criu images for host/user when lsapi_backend_pgrp_max_crashes triggered

 -- Darya Malyavkina <dmalyavkina@cloudlinux.com>  Thu, 27 Feb 2020 21:02:33 +0400

php (7.1.33-3) stable; urgency=medium

  * Fix bug #79037: global buffer-overflow in `mbfl_filt_conv_big5_wchar` (CVE-2020-7060)
  * Fix bug #79082: Files added to tar with Phar::buildFromIterator have all-access permissions (CVE-2020-7063)
  * Fix bug #79091: heap use-after-free in session_create_id()
  * Fix bug #79099: OOB read in php_strip_tags_ex (CVE-2020-7059)
  * Fix bug #79221: Null Pointer Dereference in PHP Session Upload Progress (CVE-2020-7062)

 -- Ivan Danilov <idanilov@cloudlinux.com>  Tue, 18 Feb 2020 00:23:23 +0300

php (7.1.33-1) stable; urgency=medium

  * Update to 7.1.33 version

 -- CloudLinux Packaging Team <packager@cloudlinux.com>  Thu, 24 Oct 2019 18:41:39 -0400

php (7.1.32-3) stable; urgency=medium

  * Apply allow_coredump patch for MODLS-694

 -- Darya Malyavkina <dmalyavkina@cloudlinux.com>  Mon, 7 Oct 2019 19:37:22 +0400

php (7.1.32-2) stable; urgency=medium

  * MODLS-689: Apply crash_limit patch

 -- Darya Malyavkina <dmalyavkina@cloudlinux.com>  Mon, 26 Aug 2019 16:23:43 +0400

php (7.1.32-1) stable; urgency=medium

  * Update to 7.1.32 version

 -- CloudLinux Packaging Team <packager@cloudlinux.com>  Fri, 30 Aug 2019 04:42:14 -0400

php (7.1.31-1) stable; urgency=medium

  * Update to 7.1.31 version

 -- CloudLinux Packaging Team <packager@cloudlinux.com>  Thu, 01 Aug 2019 16:42:05 -0400

php (7.1.30-8) stable; urgency=medium

  * Update litespeed to 7.5 version

 -- Darya Malyavkina <dmalyavkina@cloudlinux.com>  Mon, 22 Jul 2019 21:34:11 +0400

php (7.1.30-6) stable; urgency=medium

  * rebuild with new alt-icu

 -- Sergey Fokin <sfokin@cloudlinux.com>  Wed, 10 Jul 2019 13:16:00 +0400

php (7.1.30-5) stable; urgency=medium

  * Update litespeed to 7.4.3 version

 -- Darya Malyavkina <dmalyavkina@cloudlinux.com>  Thu, 04 Jul 2019 22:55:42 +0400

php (7.1.30-4) stable; urgency=medium

  * Update litespeed to 7.4.2 version

 -- Darya Malyavkina <dmalyavkina@cloudlinux.com>  Wed, 03 Jul 2019 22:45:12 +0400

php (7.1.30-3) stable; urgency=medium

  * AAP-272: fix error with uid comparison

 -- Darya Malyavkina <dmalyavkina@cloudlinux.com>  Fri, 21 Jun 2019 01:02:11 +0400

php (7.1.30-2) stable; urgency=medium

  * Update litespeed to version 7.4

 -- Darya Malyavkina <dmalyavkina@cloudlinux.com>  Thu, 20 Jun 2019 17:12:22 +0400

php (7.1.30-1) stable; urgency=medium

  * Update to 7.1.30 version

 -- CloudLinux Packaging Team <packager@cloudlinux.com>  Thu, 30 May 2019 14:41:37 -0400

php (7.1.29-2) stable; urgency=medium

  * Update litespeed to version 7.3

 -- Darya Makyavkina <dmalyavkina@cloudlinux.com>  Thu, 09 May 2019 22:17:23 +0400

php (7.1.29-1) stable; urgency=medium

  * Update to 7.1.29 version

 -- CloudLinux Packaging Team <packager@cloudlinux.com>  Fri, 03 May 2019 02:42:42 -0400

php (7.1.28-1) stable; urgency=medium

  * Update to 7.1.28 version

 -- CloudLinux Packaging Team <packager@cloudlinux.com>  Thu, 04 Apr 2019 14:44:12 -0400

php (7.1.27-1) unstable; urgency=medium

  * update to 7.1.27

 -- Darya Makyavkina <dmalyavkina@cloudlinux.com>  Thu, 07 Mar 2019 17:33:21 +0300

php (7.1.26-4) stable; urgency=medium

  * MODLS-627: Fix php_value priority issue 
  * MODLS-626: Update LiteSpeed patches for V 7.2

 -- Darya Makyavkina <dmalyavkina@cloudlinux.com>  Wed, 06 Feb 2019 23:12:03 +0300

php (7.1.26-3) stable; urgency=medium

  * ALTPHP-686: Apply mod_lsapi_mode patch

 -- Darya Makyavkina <dmalyavkina@cloudlinux.com>  Wed, 23 Jan 2019 14:26:04 +0300

php (7.1.26-1) unstable; urgency=medium

  * update to 7.1.26

 -- Darya Makyavkina <dmalyavkina@cloudlinux.com>  Thu, 10 Jan 2018 22:12:33 +0300


php (7.1.25-2) unstable; urgency=medium

  * Add recode extension

 -- Sergey Fokin <sfokin@cloudlinux.com>  Wed, 12 Dec 2018 13:05:00 +0300

php (7.1.25-1) stable; urgency=medium

  * update to 7.1.25

 -- Darya Makyavkina <dmalyavkina@cloudlinux.com>  Fri, 07 Dec 2018 01:14:02 +0300

php (7.1.24-3) stable; urgency=medium

  * ALTPHP-639: Update SIGTERM cleanup patch

 -- Darya Makyavkina <dmalyavkina@cloudlinux.com>  Thu, 04 Dec 2018 18:14:02 +0300

php (7.1.24-2) stable; urgency=medium

  * ALTPHP-614: Enabled support of the huge code pages for opcache

 -- Vasiliy Kleschov <vkleschov@cloudlinux.com>  Fri, 23 Nov 2018 10:57:00 +0300

php (7.1.24-1) stable; urgency=medium

  * update to 7.1.24

 -- Vasiliy Kleschov <vkleschov@cloudlinux.com>  Fri, 09 Nov 2018 10:57:00 +0300

php (7.1.23-1) stable; urgency=medium

  * update to 7.1.23

 -- Sergey Fokin <sfokin@cloudlinux.com>  Mon, 29 Oct 2018 11:49:00 +0300

php (7.1.19-2.2cloudlinux1) unstable; urgency=medium

  * Fix dependencies

 -- CloudLinux Packaging Team <packager@cloudlinux.com>  Wed, 04 Jul 2018 18:02:44 +0300

php (7.1.19-2cloudlinux1) unstable; urgency=medium

  * Update to 7.1.19-2
    - ALTPHP-526: Updated patch for Litespeed SIGTERM cleanup handling

 -- CloudLinux Packaging Team <packager@cloudlinux.com>  Mon, 02 Jul 2018 11:22:04 +0300

php (7.1.19-1cloudlinux1) unstable; urgency=medium

  * Initial release for Imunify360

 -- CloudLinux Packaging Team <packager@cloudlinux.com>  Thu, 28 Jun 2018 18:00:01 +0300
