# changelog

author: Igor Savenko <bliss@cloudlinux.com> 4.0.50-5
changelog:
  - Fixed spec file (added /opt/passenger to %files section)
  - Added pre-creating dir for apache conf files in handle_module.py


author: Oleksiy Shchukin <oshchukin@cloudlinux.com> 5.0.26-21
changelog:
  - Rebase upon passenger-5.0.26
  - Added support for DirectAdmin
  - More robust alt-mod-passenger installation routine for CPanel servers
  - Deploy pre-built binaries for non CPanel servers
    (thus no custom httpd-devel, alt-mod-passenger depends on)
  - Use pre-built ruby native support library for all CloudLinux alt-ruby versions,
    so that the library is not built on-fly per user app first invokation


author: Oleksiy Shchukin <oshchukin@cloudlinux.com> 5.0.29-22
changelog:
  - Rebase upon passenger-5.0.29
  - Return back to Passenger 4.0 tmp/restart.txt behavour (minimal lag
    between touching app/tmp/restart.txt and app restart)
  - Fixup installation script for non-panel server


author: Vladimir Prokofev <vprokofev@cloudlinux.com> 5.0.29-26
changelog:
  - Support httpd, httpd24 and EA4 apache with same passenger
  - New passenger version 5.0.29
  - Small bug fixes


author: Vladimir Prokofev <vprokofev@cloudlinux.com> 5.0.29-27
changelog:
  - Improve checking of the building passenger native libs.
  - Bug fix usage of have_ functions to build native libs


author: Vladimir Prokofev <vprokofev@cloudlinux.com> - 5.0.29-27.2
changelog:
  - Improve checking of the building passenger native libs.
  - Bug fix usage of have_ functions to build native libs
  - Provides ea-apache24-alt_mod_passenger package name


author: Joe Orton <jorton@redhat.com> - 2.2.15-3
changelog:
  - default config tweaks:
   * harden httpd.conf w.r.t. .htaccess restriction (#591293)
   * load mod_substitute, mod_version by default
   * drop proxy_ajp.conf, load mod_proxy_ajp in httpd.conf
   * add commented list of shipped-but-unloaded modules
   * bump up worker defaults a little
   * drop KeepAliveTimeout to 5 secs per upstream
  - fix LSB compliance in init script (#522074)
  - bundle NOTICE in -tools
  - use init script in logrotate postrotate to pick up PIDFILE
  - drop some old Obsoletes/Conflicts


author: Joe Orton <jorton@redhat.com> - 2.2.17-7
changelog:
  - generate dummy mod_ssl cert with CA:FALSE constraint (#667841)
  - add man page stubs for httpd.event, httpd.worker
  - drop distcache support
  - add STOP_TIMEOUT support to init script


author: Joe Orton <jorton@redhat.com> - 2.2.21-6
changelog:
  - complete conversion to systemd, drop init script (#770311)
  - fix comments in /etc/sysconfig/httpd (#771024)
  - enable PrivateTmp in service file (#781440)
  - set LANG=C in /etc/sysconfig/httpd


author: Joe Orton <jorton@redhat.com> - 2.4.1-1
changelog:
  - update to 2.4.1
  - adopt upstream default httpd.conf (almost verbatim)
  - split all LoadModules to conf.modules.d/*.conf
  - include conf.d/*.conf at end of httpd.conf
  - trim %changelog


author: Joe Orton <jorton@redhat.com> - 2.4.1-2
changelog:
  - clean docroot better
  - ship proxy, ssl directories within /var/cache/httpd
  - default config:
   * unrestricted access to (only) /var/www
   * remove (commented) Mutex, MaxRanges, ScriptSock
   * split autoindex config to conf.d/autoindex.conf
  - ship additional example configs in docdir


author: Joe Orton <jorton@redhat.com> - 2.4.1-3
changelog:
  - add mod_proxy_html subpackage (w/mod_proxy_html + mod_xml2enc)
  - move mod_ldap, mod_authnz_ldap to mod_ldap subpackage


author: Joe Orton <jorton@redhat.com> - 2.4.2-4
changelog:
  - pull from upstream:
    * use TLS close_notify alert for dummy_connection (r1326980+)
    * cleanup symbol exports (r1327036+)


author: Joe Orton <jorton@redhat.com> - 2.4.2-15
changelog:
  - move tmpfiles.d fragment into /usr/lib per new guidelines
  - package /run/httpd not /var/run/httpd
  - set runtimedir to /run/httpd likewise


author: Joe Orton <jorton@redhat.com> - 2.4.2-18
changelog:
  - avoid use of "core" GIF for a "core" directory (#168776)
  - drop use of "syslog.target" in systemd unit file


author: Joe Orton <jorton@redhat.com> - 2.4.3-7
changelog:
  - use systemd scriptlets if available (#850149)
  - don't run posttrans restart if /etc/sysconfig/httpd-disable-posttrans exists


author: Joe Orton <jorton@redhat.com> - 2.4.3-13
changelog:
  - filter mod_*.so auto-provides (thanks to rcollet)
  - pull in syslog logging fix from upstream (r1344712)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.4-5
changelog:
  - execute systemctl reload as result of apachectl graceful
  - mod_ssl: ignore SNI hints unless required by config
  - mod_cache: forward-port CacheMaxExpire "hard" option
  - mod_ssl: fall back on another module's proxy hook if mod_ssl proxy
    is not configured.


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.4-6
changelog:
  - htpasswd/htdbm: fix hash generation bug (#956344)
  - do not dump vhosts twice in httpd -S output (#928761)
  - mod_cache: fix potential crash caused by uninitialized variable (#954109)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.4-12
changelog:
  - mod_unique_id: replace use of hostname + pid with PRNG output (#976666)
  - apxs: mention -p option in manpage


author: Joe Orton <jorton@redhat.com> - 2.4.6-13
changelog:
  - mod_ssl: sanity-check use of "SSLCompression" (#1036666)
  - mod_proxy_http: fix brigade memory usage (#1040447)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-17
changelog:
  - mod_dav: add security fix for CVE-2013-6438 (#1077907)
  - mod_log_config: add security fix for CVE-2014-0098 (#1077907)


author: Jim Perrin <jperrin@centos.org> - 2.4.6-17.el7.centos.1
changelog:
  - Remove index.html, add centos-noindex.tar.gz
  - update welcome.conf with proper aliases
  - change symlink for poweredby.png


author: Trinity Quirk <trinity.quirk@cpanel.net> - 2.4.6-17.el6.cpanel.1
changelog:
  - Added cPanel-specific patches
  - Removed apache user creation, configured to run as nobody
  - Repaired incorrect run directories


author: Trinity Quirk <trinity.quirk@cpanel.net> - 2.4.6-20.el6.cpanel.1
changelog:
  - Each module now has its own conf.modules.d file
  - conf.modules.d files are created programmatically
  - Simplified ssl, proxy_html, ldap, and session package file lists


author: Trinity Quirk <trinity.quirk@cpanel.net> - 2.4.6-21.el6.cpanel.1
changelog:
  - Split the MPMs into their own packages
  - mod_heartbeat needs to be loaded after mod_status and mod_watchdog


author: S. Kurt Newman <kurt.newman@cpanel.net> - 2.4.12-10
changelog:
  - Fixed mpm conflicts
  - Removed itk conflict since apache shouldn't be concerned with that..
    only itk should be
  - Removed unused cloudlinux cagefs patch


author: Julian Brown <julian.brown@cpanel.net> - 2.4.16-2
changelog:
  - Added requirements for ea-apache24-mod_proxy and mod_proxy_http
  - so we can support proxy subdomains


author: S. Kurt Newman <kurt.newman@cpanel.net> - 2.4.16-5
changelog:
  - Added /etc/apache2/bin directory for apache-specific utility scripts
  - Added additional macros to /etc/rpm/macros.apache2 so other rpms
    can make use of those paths


author: S. Kurt Newman <kurt.newman@cpanel.net> - 2.4.18-2
changelog:
  - Applied fix for Apache Bug #58854.  This patch should be removed
    once it has made into upstream.


author: Eugene Zamriy <ezamriy@cloudlinux.com> - 1:2.4.18-2.1.cloudlinux
changelog:
  - httpd2-cagefs_jail.patch and httpd-2.4-suexec-safe.patch applied
  - Epoch bumped to 1
  - dist macro added to Release
  - Dependencies adjusted to use ea-* packages from CloudLinux OS


author: David Nielson <david.nielson@cpanel.net> 2.4.18-3
changelog:
  - Remove conflict on 'webserver' and add conflict on 'httpd-mmn' so
    Nginx can be installed from EPEL.


author: Edwin Buck <e.buck@cpanel.net> - 2.4.23-1
changelog:
  - EA-4872: Updated to verison 2.4.23
  - Added mod_proxy_hcheck (side effect of upstream 2.5 backport into 2.4.23)


author: S. Kurt Newman <kurt.newman@cpanel.net> - 2.4.23-2
changelog:
  - mod_lua can be installed, but is off by default (EA-4825)
  - fixed a few rpmlint warnings complaining about lack of attr macros


author: S. Kurt Newman <kurt.newman@cpanel.net> - 2.4.23-7
changelog:
  - Update apachectl with ulimit calls modifying the open file
    descriptor limit so that Apache will start up (EA-5662)


author: Dan Muey <dan@cpanel.net> - 2.4.23-9
changelog:
  - EA-5557: turn off icon directives by default since the icons are broken under symlink protect
  -          and are used by HTMLTable even when fancy indexinf is off


author: Jacob Perkins <jacob.perkins@cpanel.net> - 2.4.29-1
changelog:
  - Updated to version 2.4.29 via update_pkg.pl (ZC-2981)
  - Removed mod_unique_id patch as it was patched upstream.


author: Cory McIntire <cory@cpanel.net> - 2.4.29-2
changelog:
  - EA-6020: Restarting Apache while using splitlogs can result in "Broken pipe" errors
  - Applying patch provided by Gary Stanley (gary@cpanel.net)


author: Rishwanth Yeddula <rish@cpanel.net> - 2.4.29-5
changelog:
  - EA-7127: Ensure the mod_proxy_html and mod_xml2enc modules
    build against ea-libxml2. Additionally, updated the build
    process to avoid modifying the LDFLAGS - as it caused the
    libxml2 dependency to be carried to extensions compiled
    separately.


author: Rishwanth Yeddula <rish@cpanel.net> - 2.4.29-7
changelog:
  - EA-7159: Use 'elinks' instead of 'links' as a dependency
    to ensure that EA4 does not pull any packages from
    the EPEL repos.


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 2.4.33-5.cloudlinux.3
changelog:
  - EA4D-66: Remove %triggerin for ea-apache24-mod_security2 package to avoid apache
    downtime during the update


author: Vladimir Prokofev <vprokofev@cloudlinux.com> 5.0.30-3
changelog:
  - Check configs to migrate from 4.x to 5.x Passenger
  - Restart Passenger (via httpd) to reload fresh liblve


author: Vladimir Prokofev <vprokofev@cloudlinux.com> 5.0.30-4
changelog:
  - Install Passenger into separate version folders
  - Tune simlinks to point to proper Passenger version
  - Fix permissions of PassengerInstanceRegistryDir to 755


author: Serhii Kokhan <skokhan@cloudlinux.com> - 5.1.6-1
changelog:
  - ALMODP-77: Make /var/passenger less worldwide accessible
  - ALMODP-60: Use `PASSENGER_INSTANCE_REGISTRY_DIR` instead `PASSENGER_TEMP_DIR`
  - ALMODP-81: Add conflict for package ea-ruby24-mod_passenger


author: Serhii Kokhan <skokhan@cloudlinux.com> - 5.1.11-1
changelog:
  - ALMODP-91: Arbitrary file read vulnerability in passenger
  - ALMODP-89: Made graceful reload Apache instead of restart when alt-mod-passenger install/update
  - Remove dependency from old package which obsoletes ea-apache24-alt_mod_passenger
  - ALMODP-86: Add Node.js language support for alt-mod-passenger


author: Sergey Kokhan <skokhan@cloudlinux.com> - 5.3.7-2
changelog:
  - ALMODP-112: disable nodejs handler by default
  - ALMODP-111: allow PassengerFriendlyErrorPages PassengerAppEnv passenger directives in htaccess


author: Sergey Kokhan <skokhan@cloudlinux.com> - 5.3.7-4
changelog:
  - ALMODP-121: Removed files with 1667 uid
  - ALMODP-120: fix httpd24-alt-mod-passenger spec for new httpd24-httpd


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 5.3.7-6
changelog:
  - ALMODP-134: Fix write application custom passenger log to user's tmp under cagefs
  - ALMODP-135: Deleted writing warning to main apache log when using user's custom log


author: Igor Seletskiy <iseletsk@piter.seletskiy.com>
changelog:
  - Ability to provide which handlers to treat as suexec, and which to treat regularly <commit: 37ad6a8d6dafd9486217f60e369c530c17510ac6>


author: Igor Seletskiy <iseletsk@piter.seletskiy.com>
changelog:
  - Fixed issue when mod_hostinglimits intercepts request already in lve (when php is done via cgi) <commit: abccd6a8276eefca2e50dcf03cfb0519fe3b6f26>


author: Alexey Berezhok <alexey_com@ukr.net>
changelog:
  - add mode -m 644 to spec file and add php-script to modhostinglimits.conf <commit: 6bf688d72a68442b2886926fba8cb19ba6a10fc7>


author: Igor Seletskiy <iseletsk@piter.seletskiy.com>
changelog:
  - Added directories/confgis to make sure mod_hostinglimits compiles under directadmin <commit: 242e320b83b167435f2b2dccb7c4d3ca045e3a42>


author: Alexey Berezhok <alexey_com@ukr.net>
changelog:
  - fix spec file's string with liblve to lve-devel. liblve - for future releases <commit: fb10d65ba6364b6ce78e70e3decbf8200b8a0be2>


author: Igor Seletskiy <iseletsk@piter.seletskiy.com>
changelog:
  - moved p_cookie to be taken from request_config, making module MPM Worker safe <commit: fdab876e8fb52f0f3a21f9fa836cc411b9d4a392>


author: Igor Seletskiy <iseletsk@piter.seletskiy.com>
changelog:
  - Merge branch 'master' of gitosis@pylesos.interdon.net:mod_hostinglimits <commit: f3b7c8df2280fa81b54c33dc53bf6d46f7cf4caa>


author: Alexey Berezhok <alexey_com@ukr.net>
changelog:
  - Fix bug when p_cookie is not installed process was fall down <commit: 44668ecf8599ee39ab8f21ae632d0e4514f67192>


author: Alexey Berezhok <alexey_com@ukr.net>
changelog:
  - Add private thread variable p-cookie instead mutex <commit: a3d7f50a59f2f94b463edfdf76f67c4a5235cfd8>


author: Alexey Berezhok <alexey_com@ukr.net>
changelog:
  - Fix bug with User and Group params. I can get it bu using server record <commit: 54be580ac5db55913a32a5cf8fb01981a671ef84>


author: Anton Volkov <avolkov@cloudlinux.com> 0.7-1
changelog:
  - [#Feature 189] AllowedHandlers and DenyHandlers directives regex support is added
    - [#Feature 191] DenyHandlers directive support is added
    - Allow to serve content on LVE re-entry(apache 1.3)


author: Alexey Berezhok <alexey_com@ukr.net> 0.7-1
changelog:
  - Add new spec file 3 rpm in 1 spec file
    - Add fix in *.cmake file for building under H-Sphere 3.1


author: Anton Volkov <avolkov@cloudlinux.com> 0.7-2
changelog:
  - Added support for new LVEErrorCode directive
    - Default LVEErrorCode is changed from 503 to 508, default error 508 page is added in module source
    - Bug fix: checking whether we are already in LVE (errno should be EPERM, not -EALREADY)
    - Bug fix: logging "already in LVE" error in module for Apache 1.3


author: Alexey Berezhok <alexey_com@ukr.net> 0.7-8
changelog:
  - Restored leave hendler                                                                                                                                    
  - Removed request pool data storing                                                                                                                         
  - Disable empty host debugging
  - Added new directive LVESitesDebug                                                                                                                         
  - Re-entry procedure restored                                                                                                                               
  - Optimized leave handler                                                                                                                                   
  - Optimized work with child pools
  - Reset errno on module initializtion
  - Repaired lve available check
  - Added support mod_ruid2                                                                                                                                   
  - Added new derctive LVEUser                                                                                                   
  - Added support of apache-mpm-itk


author: Alexey Berezhok <alexey_com@ukr.net> 0.7-15
changelog:
  - Added support new apr                                                                                                                                     
  - Removed h-sphere support. No more need


author: Alexey Berezhok <alexey_com@ukr.net> 0.8-1
changelog:
  - Added LVERetryAfter: send RetryAfter header
  - Added LVEParseMode: there are three modes of working(CONF, PATH, OWNER)
  - Added LVEPathRegexp: regexp expression for username extracting from path(PATH mode)
  - Added LVEHeaderName: not supported yet
  - Added URL with error description in log


author: Alexey Berezhok <alexey_com@ukr.net> 1.0-5
changelog:
  - Added LVEUids debug
  - Fixed bug with mod_userdir + mod_hostinglimits
  - Renew lve api for apache 1.3


author: Stefan Mortensen <stefan.mortensen@atomia.com>, Mikhail Zhbankov <mzhbankov@cloudlinux.com> 1.0-26
changelog:
  - Fixed issue where cfg->path_regex was never being set when setting a custom path with LVEPathRegexp causing the default to always be used
  - AAP-57: mod_hostinglimits not increases EP in cgi mode (but process is in LVE)


author: Eugen Vodilov <evodilov@cloudlinux.com> - 1.0-30
changelog:
  - AAP-142: avoid lve_leave using filters
  - AAP-151: add EP limit hiting when EP is reached max value


author: Joe Orton <jorton@redhat.com> 0.9.3-7
changelog:
  - use AI_ADDRCONFIG in getaddrinfo() support (#73350)
  - include a working libtool script rather than relying on
   /usr/bin/libtool (#97695)


author: Joe Orton <jorton@redhat.com> 0.9.4-6
changelog:
  - define apr_off_t as int/long/... to prevent it changing
    with _FILE_OFFSET_BITS on 32-bit platforms


author: Joe Orton <jorton@redhat.com> 0.9.4-10
changelog:
  - fix configure check for mmap of /dev/zero
  - just put -D_GNU_SOURCE in CPPFLAGS not _{BSD,SVID,XOPEN}_SOURCE


author: Joe Orton <jorton@redhat.com> 0.9.4-13
changelog:
  - entirely remove 2Gb file size limit from apr_file_copy();
    fixes "svnadmin hotcopy" on repos with >2Gb strings table
  - work around getnameinfo bugs with v4-mapped addresses
  - fix apr_time_exp_get() for dates in 2038 (Philip Martin)


author: Joe Orton <jorton@redhat.com> 0.9.4-14
changelog:
  - enable posixsem and process-shared pthread mutex support, but
    ensure that sysvsem remains the default mechanism


author: Joe Orton <jorton@redhat.com> 0.9.4-15
changelog:
  - add support for setuid/setgid/sticky bits (André Malo)
  - add apr_threadattr_{guardsize,stacksize}_set() (latter by Jeff Trawick)


author: Joe Orton <jorton@redhat.com> 0.9.4-22
changelog:
  - backport fixes from HEAD:
   * correct implementation of nested mutexes
   * support for POSIX semaphores on LP64 platforms


author: Joe Orton <jorton@redhat.com> 0.9.6-5
changelog:
  - add from 0.9.x branch:
   * fix for apr_{uid,gid}_* error handling (r239592)
   * fix for apr_file_ write flushing (r267192)
  - add backport for use of readdir64_r (r265032, r265681, r265684)


author: Joe Orton <jorton@redhat.com> 0.9.6-6
changelog:
  - don't override CFLAGS at build time
  - allow setting TCP_NODELAY and TCP_CORK concurrently
  - use _exit() not exit() in child if exec*() fails (upstream #30913)


author: Joe Orton <jorton@redhat.com> 1.2.2-2
changelog:
  - avoid linking against -lrt
  - don't print -L${libdir} in --libs output
  - don't export -lcrypt/-luuid in .la file


author: Joe Orton <jorton@redhat.com> 1.2.8-6
changelog:
  - merge review (#225253): drop .a archive; drop use of CC/CXX,
    use BuildRequires; drop old Conflicts; URL reference for Source


author: Bojan Smojver <bojan@rexursive.com> 1.2.12-1
changelog:
  - bump up to 1.2.12
  - add dist
  - remove a comment from apr-1.2.7-psprintfpi.patch (applied upstream)


author: Joe Orton <jorton@redhat.com> - 1.4.2-3
changelog:
  - work around alising issue in ring macros (upstream PR 50190)
  - fix buildconf with newer libtool (#670621)


author: Eugene Zamriy <ezamriy@cloudlinux.com> - 1:1.5.2-1.1.cloudlinux
changelog:
  - apr-1.4.2.1_cloudlinux_apr.patch was replaced with apr-1.4.2.2.lve.patch
  - Epoch bumped to 1
  - dist macro added to Release


author: Rex Dieter <rdieter@fedoraproject.org> - 0.99.0-20.20091203
changelog:
  - 20091203 snapshot
  - spec housecleaning
  - Tidy erroniously removes whitespace, causing mangled text (#481350)


author: Sergey Budnevitch <sb@nginx.com>
changelog:
  - spec file cleanup (thanks to Yury V. Zaytsev)
  - log dir permitions fixed
  - logrotate creates new logfiles with nginx owner
  - "upgrade" argument to init-script added (based on fedora one)


author: Sergey Budnevitch <sb@nginx.com>
changelog:
  - 1.0.11
  - init script enhancements (thanks to Gena Makhomed)
  - one second sleep during upgrade replaced with 0.1 sec usleep


author: Sergey Budnevitch <sb@nginx.com>
changelog:
  - 1.5.12
  - spec cleanup
  - openssl version dependence added
  - upgrade() function in the init script improved
  - warning added when binary upgrade returns non-zero exit code


author: Sergey Budnevitch <sb@nginx.com>
changelog:
  - common configure args are now in macros
  - xslt, image-filter and geoip dynamic modules added
  - 1.9.12


author: Konstantin Pavlov <thresh@nginx.com>
changelog:
  - 1.9.13
  - Added perl and njs dynamic modules
  - Fixed Requires section for dynamic modules on CentOS7/RHEL7


author: Konstantin Pavlov <thresh@nginx.com>
changelog:
  - 1.11.3.
  - njs updated to 0.1.0.
  - njs stream dynamic module added to nginx-module-njs package.
  - geoip stream dynamic module added to nginx-module-geoip package.


author: Konstantin Pavlov <thresh@nginx.com>
changelog:
  - 1.11.9
  - Extended hardening build flags.
  - Added check-reload target to init script / systemd service.


author: Konstantin Pavlov <thresh@nginx.com>
changelog:
  - 1.11.13
  - CentOS7/RHEL7: made upgrade loops/timeouts configurable via
    /etc/sysconfig/nginx.
  - Bumped upgrade defaults to five loops one second each.


author: Tom Callaway <tcallawa@redhat.com>
changelog:
  - bump to 5.0.0
  - add patch to prevent clobbering struct re_registers from regex.h
  - remove domxml references, replaced with dom now built-in
  - fix php.ini to refer to php5 not php4


author: Joe Orton <jorton@redhat.com> 5.0.1-1
changelog:
  - update to 5.0.1
  - only build shared modules once
  - put dom extension in php-dom subpackage again
  - move extension modules into %{_libdir}/php/modules
  - don't use --with-regex=system, it's ignored for the apache* SAPIs


author: Joe Orton <jorton@redhat.com> 5.0.2-4
changelog:
  - update to 5.0.2 (#127980)
  - build against mysqlclient10-devel
  - use new RTLD_DEEPBIND to load extension modules
  - drop explicit requirement for elfutils-devel
  - use AddHandler in default conf.d/php.conf (#135664)
  - "fix" round() fudging for recent gcc on x86
  - disable sqlite pending audit of warnings and subpackage split


author: Joe Orton <jorton@redhat.com> 5.0.2-5
changelog:
  - fix phpize installation for lib64 platforms
  - add fix for segfault in variable parsing introduced in 5.0.2


author: Joe Orton <jorton@redhat.com> 5.0.2-7
changelog:
  - truncate changelog at 4.3.1-1
  - merge from 4.3.x package:
   - enable mime_magic extension and Require: file (#130276)


author: Joe Orton <jorton@redhat.com> 5.0.3-1
changelog:
  - update to 5.0.3 (thanks to Robert Scheck et al, #143101)
  - enable xsl extension (#142174)
  - package both the xsl and dom extensions in php-xml
  - enable soap extension, shared (php-soap package) (#142901)
  - add patches from upstream 5.0 branch:
   * Zend_strtod.c compile fixes
   * correct php_sprintf return value usage


author: Joe Orton <jorton@redhat.com> 5.0.3-2
changelog:
  - install the ext/gd headers (#145891)
  - enable pcntl extension in /usr/bin/php (#142903)
  - add libmbfl array arithmetic fix (dcb314@hotmail.com, #143795)
  - add BuildRequire for recent pcre-devel (#147448)


author: Joe Orton <jorton@redhat.com> 5.0.3-4
changelog:
  - package mysqli extension in php-mysql
  - really enable pcntl (#142903)
  - don't build with --enable-safe-mode (#148969)
  - use "Instant Client" libraries for oci8 module (Kai Bolay, #149873)


author: Joe Orton <jorton@redhat.com> 5.0.3-5
changelog:
  - BuildRequire mysql-devel >= 4.1
  - don't mark php.ini as noreplace to make upgrades work (#152171)
  - fix subpackage descriptions (#152628)
  - fix memset(,,0) in Zend (thanks to Dave Jones)
  - fix various compiler warnings in Zend


author: Joe Orton <jorton@redhat.com> 5.0.4-1
changelog:
  - update to 5.0.4 (#153068)
  - add .phps AddType to php.conf (#152973)
  - better gcc4 fix for libxmlrpc


author: Joe Orton <jorton@redhat.com> 5.0.4-4
changelog:
  - bundle from PEAR: HTTP, Mail, XML_Parser, Net_Socket, Net_SMTP
  - snmp: disable MSHUTDOWN function to prevent error_log noise (#153988)
  - mysqli: add fix for crash on x86_64 (Georg Richter, upstream #32282)


author: Joe Orton <jorton@redhat.com> 5.0.4-6
changelog:
  - build /usr/bin/php with the CLI SAPI, and add /usr/bin/php-cgi,
    built with the CGI SAPI (thanks to Edward Rudd, #137704)
  - add php(1) man page for CLI
  - fix more test cases to use -n when invoking php


author: Joe Orton <jorton@redhat.com> 5.0.4-7
changelog:
  - split out dba and bcmath extensions into subpackages
  - BuildRequire gcc-c++ to avoid AC_PROG_CXX{,CPP} failure (#155221)
  - pear: update to DB-1.7.6
  - enable FastCGI support in /usr/bin/php-cgi (#149596)


author: Joe Orton <jorton@redhat.com> 5.0.4-9
changelog:
  - build simplexml_import_dom even with shared dom (#156434)
  - prevent truncation of copied files to ~2Mb (#155916)
  - install /usr/bin/php from CLI build alongside CGI
  - enable sysvmsg extension (#142988)


author: Joe Orton <jorton@redhat.com> 5.0.5-3
changelog:
  - update to 5.0.5
  - add fix for upstream #34435
  - devel: require autoconf, automake (#159283)
  - pear: update to HTTP-1.3.6, Mail-1.1.8, Net_SMTP-1.2.7, XML_RPC-1.4.1
  - fix imagettftext et al (upstream, #161001)


author: Joe Orton <jorton@redhat.com> 5.1.1-2
changelog:
  - update to 5.1.1
  - remove pear subpackage
  - enable pdo extensions (php-pdo subpackage)
  - remove non-standard conditional module builds
  - enable xmlreader extension


author: Joe Orton <jorton@redhat.com> 5.1.2-5
changelog:
  - provide php-api (#183227)
  - add provides for all builtin modules (Tim Jackson, #173804)
  - own %{_libdir}/php/pear for PEAR packages (per #176733)
  - add obsoletes to allow upgrade from FE4 PDO packages (#181863)


author: Joe Orton <jorton@redhat.com> 5.1.4-5
changelog:
  - provide mod_php (#187891)
  - provide php-cli (#192196)
  - use correct LDAP fix (#181518)
  - define _GNU_SOURCE in php_config.h and leave it defined
  - drop (circular) dependency on php-pear


author: Joe Orton <jorton@redhat.com> 5.1.4-8
changelog:
  - Provide php-posix (#194583)
  - only provide php-pcntl from -cli subpackage
  - add missing defattr's (thanks to Matthias Saou)


author: Joe Orton <jorton@redhat.com> 5.2.0-3
changelog:
  - update to 5.2.0 (#213837)
  - php-xml provides php-domxml (#215656)
  - fix php-pdo-abi provide (#214281)


author: Joe Orton <jorton@redhat.com> 5.2.0-4
changelog:
  - provide php-zend-abi (#212804)
  - add /etc/rpm/macros.php exporting interface versions
  - synch with upstream recommended php.ini


author: Joe Orton <jorton@redhat.com> 5.2.0-5
changelog:
  - build json and zip shared, in -common (Remi Collet, #215966)
  - obsolete php-json and php-pecl-zip
  - build readline extension into /usr/bin/php* (#210585)
  - change module subpackages to require php-common not php (#177821)


author: Joe Orton <jorton@redhat.com> 5.2.0-9
changelog:
  - add php(api), php(zend-abi) provides (#221302)
  - package /usr/share/php and append to default include_path (#225434)


author: Joe Orton <jorton@redhat.com> 5.2.0-10
changelog:
  - bump default memory_limit to 32M (#220821)
  - mark config files noreplace again (#174251)
  - drop trailing dots from Summary fields
  - use standard BuildRoot
  - drop libtool15 patch (#226294)


author: Joe Orton <jorton@redhat.com> 5.2.3-3
changelog:
  - add mcrypt, mhash, tidy, mssql subpackages (Dmitry Butskoy)
  - enable dbase extension and package in -common


author: Joe Orton <jorton@redhat.com> 5.2.6-3
changelog:
  - update to 5.2.6
  - sync default php.ini with upstream
  - drop extension_dir from default php.ini, rely on hard-coded
    default, to make php-common multilib-safe (#455091)
  - update to r3 of systzdata patch


author: Joe Orton <jorton@redhat.com> 5.2.6-6
changelog:
  - move gd_README to php-gd
  - update to r4 of systzdata patch; introduces a default timezone
    name of "System/Localtime", which uses /etc/localtime (#469532)


author: Joe Orton <jorton@redhat.com> 5.2.8-4
changelog:
  - move wddx to php-xml, build curl shared in -common
  - remove BR for expat-devel, bogus configure option


author: Joe Orton <jorton@redhat.com> 5.2.8-9
changelog:
  - add recode support, -recode subpackage (#106755)
  - add -zts subpackage with ZTS-enabled build of httpd SAPI
  - adjust php.conf to use -zts SAPI build for worker MPM


author: Remi Collet <Fedora@famillecollet.com> 5.3.0-1
changelog:
  - update to 5.3.0
  - remove ncurses, dbase, mhash extensions
  - add enchant, sqlite3, intl, phar, fileinfo extensions
  - raise sqlite version to 3.6.0 (for sqlite3, build with --enable-load-extension)
  - sync with upstream "production" php.ini


author: Joe Orton <jorton@redhat.com> 5.3.0-2
changelog:
  - update to v5 of systzdata patch; parses zone.tab and extracts
    timezone->{country-code,long/lat,comment} mapping table


author: Remi Collet <Fedora@famillecollet.com> 5.3.1-1
changelog:
  - update to 5.3.1
  - remove openssl patch (merged upstream)
  - add provides for php-pecl-json
  - add prod/devel php.ini in doc


author: Remi Collet <Fedora@famillecollet.com> 5.3.2-1
changelog:
  - PHP 5.3.2 Released!
  - remove mime_magic option (now provided by fileinfo, by emu)
  - add patch for http://bugs.php.net/50578
  - remove patch for libedit (upstream)
  - add runselftest option to allow build without test suite


author: Remi Collet <remi@fedoraproject.org> 5.3.8-2
changelog:
  - add mysqlnd sub-package
  - drop patch4, use --libdir to use /usr/lib*/php/build
  - add patch to redirect mysql.sock (in mysqlnd)


author: Remi Collet <remi@fedoraproject.org> 5.3.8-3
changelog:
  - revert is_a() to php <= 5.3.6 behavior (from upstream)
    with new option (allow_string) for new behavior


author: Remi Collet <remi@fedoraproject.org> 5.4.0-0.3.RC7
changelog:
  - update to PHP 5.4.0RC7
  - provides env file for php-fpm (#784770)
  - add patch to use system libzip (thanks to spot)
  - don't provide INSTALL file


author: Remi Collet <remi@fedoraproject.org> 5.4.0-5
changelog:
  - fix Loadmodule with MPM event (use ZTS if not MPM worker)
  - split conf.d/php.conf + conf.modules.d/10-php.conf with httpd 2.4


author: Remi Collet <remi@fedoraproject.org> 5.4.4-1
changelog:
  - update to 5.4.4 (CVE-2012-2143, CVE-2012-2386)
  - use /usr/lib/tmpfiles.d instead of /etc/tmpfiles.d
  - use /run/php-fpm instead of /var/run/php-fpm


author: Remi Collet <rcollet@redhat.com> 5.4.7-8
changelog:
  - systemd integration, https://bugs.php.net/63085
  - no odbc call during timeout, https://bugs.php.net/63171
  - check sqlite3_column_table_name, https://bugs.php.net/63149


author: Remi Collet <remi@fedoraproject.org> 5.4.7-9
changelog:
  - php-fpm: enable PrivateTmp
  - php-fpm: new systemd macros (#850268)
  - php-fpm: add upstream patch for startup issue (#846858)


author: Remi Collet <rcollet@redhat.com> 5.4.7-2
changelog:
  - missing requires on scl-runtime
  - relocate /var/lib/session
  - fix php-devel requires
  - rename, but don't relocate macros.php


author: Remi Collet <rcollet@redhat.com> 5.4.7-3
changelog:
  - add configtest option to init script
  - test configuration before service reload
  - fix php-fpm service relocation
  - fix php-fpm config relocation
  - drop embdded subpackage for scl


author: Remi Collet <rcollet@redhat.com> 5.4.8-1
changelog:
  - update to 5.4.8
  - define both session.save_handler and session.save_path
  - fix possible segfault in libxml (#828526)
  - use SKIP_ONLINE_TEST during make test
  - php-devel requires pcre-devel and php-cli (instead of php)
  - provides php-phar
  - update systzdata patch to v10, timezone are case insensitive


author: Remi Collet <rcollet@redhat.com> 5.4.8-1.2
changelog:
  - minor macro fixes for RHEL-5 build
  - update autotools workaround for RHEL-5
  - use readline when libedit not available (RHEL-5)


author: Remi Collet <rcollet@redhat.com> 5.4.8-2.1
changelog:
  - make php-enchant optionnal, not available on RHEL-5
  - make php-recode optionnal, not available on RHEL-5
  - disable t1lib on RHEL-5


author: Remi Collet <rcollet@redhat.com> 5.4.8-6
changelog:
  - clarify Licenses
  - missing provides xmlreader and xmlwriter
  - change php embedded library soname version to 5.4


author: Remi Collet <rcollet@redhat.com> 5.4.8-6
changelog:
  - filter private shared in _httpd_modir
  - improve system libzip patch to use pkg-config
  - use _httpd_contentdir macro and fix php.gif path
  - switch back to upstream generated scanner/parser
  - use system pcre only when recent enough


author: Remi Collet <rcollet@redhat.com> 5.4.10-1
changelog:
  - update to 5.4.10
  - remove patches merged upstream
  - drop "Configure Command" from phpinfo output
  - prevent php_config.h changes across (otherwise identical)
    rebuilds


author: Remi Collet <rcollet@redhat.com> 5.4.13-1
changelog:
  - update to 5.4.13
  - security fixes for CVE-2013-1635 and CVE-2013-1643
  - make php-mysql package optional (and disabled)
  - make ZTS build optional (and disabled)
  - always try to load mod_php (apache warning is usefull)
  - Hardened build (links with -z now option)
  - Remove %config from /etc/rpm/macros.php


author: Remi Collet <rcollet@redhat.com> 5.4.14-2
changelog:
  - rebuild for libjpeg (instead of libjpeg_turbo)
  - fix unowned dir %{_datadir}/fpm and %{_libdir}/httpd (#956221)


author: Remi Collet <rcollet@redhat.com> 5.4.16-1
changelog:
  - rebase to 5.4.16
  - fix hang in FindTishriMolad(), #965144
  - patch for upstream Bug #64915 error_log ignored when daemonize=0
  - patch for upstream Bug #64949 Buffer overflow in _pdo_pgsql_error, #969103
  - patch for upstream bug #64960 Segfault in gc_zval_possible_root


author: Remi Collet <rcollet@redhat.com> 5.4.16-4
changelog:
  - improve mod_php, pgsql and ldap description
  - add missing man pages (phar, php-cgi)
  - add provides php(pdo-abi) for consistency with php(api) and php(zend-abi)
  - use %__isa_bits instead of %__isa in ABI suffix #985350


author: Remi Collet <rcollet@redhat.com> 5.4.16-8
changelog:
  - relocate RPM macro #1008483
  - remove ZTS conditional stuf for ligibility
  - add mod_php for httpd24 collection


author: Remi Collet <rcollet@redhat.com> - 5.4.16-18
changelog:
  - fix heap-based buffer over-read in DateInterval CVE-2013-6712
  - gd: fix NULL pointer dereference in gdImageCreateFromXpm().
    CVE-2014-2497
  - gd: fix NUL byte injection in file names. CVE-2014-5120
  - spl: fix use-after-free in ArrayIterator due to object
    change during sorting. CVE-2014-4698
  - spl: fix use-after-free in SPL Iterators. CVE-2014-4670
  - core: fix heap-based buffer overflow in DNS TXT record
    parsing. CVE-2014-4049
  - network: fix segfault in dns_get_record
    (incomplete fix for CVE-2014-4049). CVE-2014-3597
  - core: type confusion issue in phpinfo(). CVE-2014-4721
  - core: unserialize() SPL ArrayObject / SPLObjectStorage
    type confusion flaw. CVE-2014-3515
  - fileinfo: fix infinite recursion. CVE-2014-1943
  - fileinfo: fix out-of-bounds memory access. CVE-2014-2270
  - fileinfo: fix extensive backtracking CVE-2013-7345
  - fileinfo: cdf_unpack_summary_info() excessive looping
    DoS. CVE-2014-0237
  - fileinfo: CDF property info parsing nelements infinite
    loop. CVE-2014-0238
  - fileinfo: cdf_read_short_sector insufficient boundary
    check. CVE-2014-0207
  - fileinfo: fix extensive backtracking in regular expression
    (incomplete fix for CVE-2013-7345). CVE-2014-3538
  - fileinfo: cdf_check_stream_offset insufficient boundary
    check. CVE-2014-3479
  - fileinfo: cdf_count_chain insufficient boundary check
    CVE-2014-3480
  - fileinfo: fix mconvert incorrect handling of truncated
    pascal string size. CVE-2014-3478
  - fileinfo: cdf_read_property_info insufficient boundary
    check. CVE-2014-3487
  - fileinfo: fix cdf_read_property_info
    (incomplete fix for CVE-2012-1571). CVE-2014-3587


author: Remi Collet <rcollet@redhat.com> - 5.4.16-20
changelog:
  - xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668
  - core: fix integer overflow in unserialize() CVE-2014-3669
  - exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670


author: S. Kurt Newman <kurt.newman@cpanel.net> - 5.4.45-10
changelog:
  - Added imap extension for all CentOS versions.  It now depends on
    our internal SCL libc-client package.


author: S. Kurt Newman <kurt.newman@cpanel.net> - 5.4.45-11
changelog:
  - mod_php adjusted to conflict with other mod_php versions, and
    not itself.  this lets the user reinstall the package without
    conflict. (ZC-1459)


author: Remi Collet <rcollet@redhat.com> 5.5.4-1
changelog:
  - update to PHP 5.5.4
  - improve security, use specific soap.wsdl_cache_dir
    use /var/lib/php/wsdlcache for mod_php and php-fpm
  - sync short_tag comments in php.ini with upstream
  - relocate RPM macro


author: Remi Collet <rcollet@redhat.com> - 5.5.6-8
changelog:
  - fix patch name
  - fix memory leak introduce in patch for CVE-2014-1943
  - fix heap-based buffer over-read in DateInterval CVE-2013-6712


author: Remi Collet <rcollet@redhat.com> - 5.5.6-9
changelog:
  - gd: fix NULL deref in imagecrop CVE-2013-7327
  - gd: drop vpx support, fix huge memory consumption #1075201


author: Remi Collet <rcollet@redhat.com> - 5.5.6-10
changelog:
  - fileinfo: fix out-of-bounds memory access CVE-2014-2270
  - fileinfo: fix extensive backtracking CVE-2013-7345


author: Remi Collet <rcollet@redhat.com> - 5.5.6-11
changelog:
  - gd: fix NULL pointer dereference in gdImageCreateFromXpm().
    CVE-2014-2497
  - gd: fix NUL byte injection in file names. CVE-2014-5120
  - core: fix heap-based buffer overflow in DNS TXT record
    parsing. CVE-2014-4049
  - network: fix segfault in dns_get_record
    (incomplete fix for CVE-2014-4049). CVE-2014-3597
  - core: unserialize() SPL ArrayObject / SPLObjectStorage
    type confusion flaw. CVE-2014-3515
  - core: type confusion issue in phpinfo(). CVE-2014-4721
  - spl: fix use-after-free in ArrayIterator due to object
    change during sorting. CVE-2014-4698
  - spl: fix use-after-free in SPL Iterators. CVE-2014-4670
  - fileinfo: cdf_unpack_summary_info() excessive looping
    DoS. CVE-2014-0237
  - fileinfo: CDF property info parsing nelements infinite
    loop. CVE-2014-0238
  - fileinfo: cdf_read_short_sector insufficient boundary
    check. CVE-2014-0207
  - fileinfo: fix extensive backtracking in regular expression
    (incomplete fix for CVE-2013-7345). CVE-2014-3538
  - fileinfo: cdf_check_stream_offset insufficient boundary
    check. CVE-2014-3479
  - fileinfo: cdf_count_chain insufficient boundary check
    CVE-2014-3480
  - fileinfo: fix mconvert incorrect handling of truncated
    pascal string size. CVE-2014-3478
  - fileinfo: cdf_read_property_info insufficient boundary
    check. CVE-2014-3487
  - fileinfo: fix cdf_read_property_info
    (incomplete fix for CVE-2012-1571). CVE-2014-3587


author: S. Kurt Newman <kurt.newman@cpanel.net> - 5.5.22-1
changelog:
  - Set imap and recode to be incompatible
  - developer version of opcache.ini is distributed instead of auto-gen


author: Eugene Zamriy <ezamriy@cloudlinux.com> - 1:5.5.31-1.2.cloudlinux
changelog:
  - php-fpm.5.dl.patch applied
  - build with LSAPI 6.9
  - added explicit declaration for debuginfo package
  - Epoch bumped to 1
  - Vendor removed
  - dist macro added to Release


author: S. Kurt Newman <kurt.newman@cpanel.net> - 5.6.6-1
changelog:
  - Set imap and recode to be incompatible
  - Added libzip compile flags, but set to incompatible with all
    current versions of CentOS (e.g. <= 7).  RHEL patches PHP to
    be compatible with the version of libzip that's supplied by
    them.
  - developer version of opcache.ini is distributed instead of auto-gen


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> - 5.6.27-2.cloudlinux.1
changelog:
  - ALTPHP-238: litespeed-php updated to 6.10
  - AL-1865: Back to ea-php "Ensure that php.d is not scanned when PHPRC is set" patch with mod_lsapi mode support


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> - 1:5.6.30-1.cloudlinux.2
changelog:
  - ALTPHP-306: LSPHP: Return response code and response status line in cgi/fcgi manner
  - Update CRIU patch to version 7
  - Supress warnings about deprecated $HTTP_RAW_POST_DATA


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 5.6.31-1.cloudlinux.1
changelog:
  - ALTPHP-351: make lsphp error messaqges more informative
  - ALTPHP-354: SIGCHILD handler fix after CRIU restoring


author: Remi Collet <rcollet@redhat.com> - 5.6.0-0.1.RC4
changelog:
  - initial spec for PHP 5.6 as Software Collection
  - adapted from php 5.6 spec file from remi repository
  - adapted from php 5.5 spec file from rhscl 1.1


author: Remi Collet <remi@fedoraproject.org> 5.6.1-1
changelog:
  - Update to PHP 5.6.1
    http://php.net/releases/5_6_1.php
  - use default system cipher list by Fedora policy
    http://fedoraproject.org/wiki/Changes/CryptoPolicy
  - add system php library to default include_path


author: Remi Collet <remi@fedoraproject.org> 5.6.3-0.1.RC1
changelog:
  - update to 5.6.3RC1
  - new version of systzdata patch, fix case sensitivity
  - ignore Factory in date tests
  - disable opcache.fast_shutdown in default config
  - add php56-cgi command in base system


author: Remi Collet <remi@fedoraproject.org> 5.6.3-2
changelog:
  - FPM: add upstream patch for https://bugs.php.net/68421
    access.format=R doesn't log ipv6 address
  - FPM: add upstream patch for https://bugs.php.net/68420
    listen=9000 listens to ipv6 localhost instead of all addresses
  - FPM: add upstream patch for https://bugs.php.net/68423
    will no longer load all pools


author: Remi Collet <remi@fedoraproject.org> 5.6.4-2
changelog:
  - Update to 5.6.4
    http://www.php.net/releases/5_6_4.php
  - add sybase_ct extension (in mssql sub-package)
  - xmlrpc requires xml


author: Remi Collet <remi@fedoraproject.org> 5.6.5-0.1.RC1
changelog:
  - update to 5.6.5RC1
  - add base system path in default include path
  - FPM: enable ACL for Unix Domain Socket


author: Remi Collet <remi@fedoraproject.org> 7.0.0-0.1.20150325git23336d7
changelog:
  - update for php 7.0.0
  - ereg, mssql, mysql and sybase_ct extensions are removed
  - add pdo-dblib subpackage (instead of php-mssql)
  - disable oci8 extension, not yet adapted for 7.0
  - add php-zip subpackage
  - add php-json subpackage


author: Remi Collet <remi@fedoraproject.org> 7.0.0-0.15.RC2
changelog:
  - Update to 7.0.0RC2
  - enable oci8 and pdo_oci extensions
  - sync php.ini with upstream php.ini-production


author: Remi Collet <remi@fedoraproject.org> 7.0.0-0.19.RC5
changelog:
  - Update to 7.0.0RC5
  - update php-fpm.d/www.conf comments
  - API and Zend API are now set to 20151012


author: Remi Collet <remi@fedoraproject.org> 7.0.0-0.26.RC8
changelog:
  - set opcache.huge_code_pages=0 on EL-6
    see  https://bugs.php.net/70973 and https://bugs.php.net/70977


author: S. Kurt Newman <kurt.newman@cpanel.net> - 7.0.0-4
changelog:
  - Update spec to reflect how cpanel deploys its other php packages.
  - Disable file-based opcaching for cpanel because it introduces
    security concerns and incompatibilities on multi-user systems.


author: Daniel Muey <dan@cpanel.net> - 7.0.8-1
changelog:
  - Updated to version 7.0.8 via update_pkg.pl (EA-4738)
  - Remove opcache check since it was removed in d41920c (EA-4755)


author: S. Kurt Newman <kurt.newman@cpanel.net> - 7.0.9-2
changelog:
  - Removed reference to unused patches.
  - Used prior choon.net mail-header patch as a basis for updating
    it with PHP 7 compatibility (EA-4199).


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> - 1:7.0.15-1.cloudlinux.2
changelog:
  - ALTPHP-306: LSPHP: Return response code and response status line in cgi/fcgi manner
  - Update CRIU patch to version 7


author: Jacob Perkins <jacob.perkins@cpanel.net> - 7.1.0-alpha3
changelog:
  * Mon Jun 27 2016 Daniel Muey <dan@cpanel.net> - 7.0.8-1
  - Updated to version 7.0.8 via update_pkg.pl (EA-4738)
  - Remove opcache check since it was removed in d41920c (EA-4755)


author: Edwin Buck <e.buck@cpanel.net> - 7.1.0-2.beta1
changelog:
  - Updated to PHP 7.1 (beta) sources
  - Added php imap support
  - Applied fpm and updated mail header patches


author: Eugene Zamriy <ezamriy@cloudlinux.com> - 1:7.1.0-4.beta3.cloudlinux
changelog:
  - epoch bumped to 1
  - cPanel vendor removed
  - php-7.0.x-ea4-ini.patch disabled because it breaks mod_lsapi in some cases
  - php-fpm.7.1.dl.v2.patch patch applied
  - php-5.6.10-litespeed-sa_mask.patch patch applied
  - lsapi-6.9-wink_server_is_ready.patch patch applied
  - php-litespeed69-max_idle_timeout.patch patch applied


author: Eugene Zamriy <ezamriy@cloudlinux.com> - 7.1.2-1.cloudlinux.1
changelog:
  - EA-5946: force requirement of ea-libtidy instead of .so from BuildRequires ea-libtidy-devel
  - EA-5839: Add opcache.validate_permission to opcache ini
  - EA-5807: enable php-tidy on rhel 6 and above


author: <dan@cpanel.net> - 7.2.0-3.RC1
changelog:
  - EA-6757: Update 7.2.0 from beta3 to RC1
  - fix version specific symlinks
  - remove TZ patch for now (EA-6764 may re-add a version of it)
  - Add patch to fix RC1 bug  https://bugs.php.net/bug.php?id=75149 until the next version


author: Daniel Muey <dan@cpanel.net> - 8.5.24-7
changelog:
  - EA-7489: General UX Improvements
      RPM:

      - add Requires for mysql-connector-java
      - add Requires for jakarta-commons-daemon and jakarta-commons-daemon-jsvc

      cpanel script:

      - Have its Include match `/servlets?/` in subdirectories
      - Add `refresh` subcommand
      - Add --verbose support to `status` sub command
      - Add support for custom server.xml `<Host>` entry
      - Add support for custom httpd Include
      - cleanup domain’s `work/` and `conf/` files


author: Cory McIntire <cory@cpanel.net> - 8.5.32-1
changelog:
  - EA-7691: Update to 8.5.32 to handle CVEs
    CVE-2018-1304 Security constraints mapped to context root are ignored
    CVE-2018-1305 Security constraint annotations applied too late
    CVE-2018-1336 A bug in the UTF-8 decoder can lead to DoS
    CVE-2018-8014 CORS filter has insecure defaults
    CVE-2018-8034 host name verification missing in WebSocket client
    CVE-2018-8037 Due to a mishandling of close in NIO/NIO2 connectors user sessions can get mixed up


author: Daniel Muey <dan@cpanel.net> - 8.5.32-8
changelog:
  - ZC-4142: Change RPM to not run tomcat by default
  - ZC-3874: avoid spurious `cat: /var/run/catalina.pid: No such file or directory`
  - ZC-4081: do not remove tomcat user
  - ZC-4082: change %files so tomcat does not have write access to things it shouldn't


author: Daniel Muey <dan@cpanel.net> - 8.5.32-9
changelog:
  - ZC-4252: Adjust for private instance in jailshell
  - ZC-4198: stop/restart private instances on update/uninstall as appropriate (ZC-4202/ZC-4203)
  - ZC-4198: Make private instance default configuration more secure (ZC-4205)


author: Daniel Muey <dan@cpanel.net> - 8.5.32-10
changelog:
  - ZC-4319: Minor security improvements
  - ZC-4318: do not suppress errors from code run under dropped privileges
  - ZC-4303: do not load external DTDs or external entities in tomcat’s XML files
  - ZC-4299: set umask when doing things as the user for better permissions
  - ZC-4300: remove pointless redirectPort that is in the default setup


author: Daniel Muey <dan@cpanel.net> - 8.5.32-13
changelog:
  - ZC-4427: Fix cosmetic USER issue caused by Cpanel::AccessIds lack of setting ENV
  - Fix stop/restart scriptlet ordering


