<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="976">
<package pkgid="54b166cfc091c6bb306b3fe405ef44fb985677587cb81f40cea8974591b9e2cd" name="ea-apache24-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="5aa657baf3c34f692a5819ef9df5a0330b3d0173b627a3a1f59c634c6c7ec8d5" name="ea-apache24-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="bd35fd75b96fba4f706598628d39b3dfde387728dbe740c69f6b65361d7bc8bd" name="ea-apache24-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="fa47ab2f95404fd8db9be118676414454f985285f79fa5221dbb26467c659800" name="ea-apache24-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="083fe1349a27663ba86c64958a5ebc7e84893a0e5911665d63c2dc2eae604b6b" name="ea-apache24-debugsource" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="757430b9239d4750d4871a0c80b44fae4e387aefeb4948d7fcf960143edc69bb" name="ea-apache24-debugsource" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="8bf57f2f148abee6090b84e29e8629e8183d7586d3068d269705672d32256019" name="ea-apache24-debugsource" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="88904341fc04004ef7f6082a249b5b0889dcb96d7addfac1c964a8cf72d7cf21" name="ea-apache24-debugsource" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="ce348edef4d21bd9a834918fed83b8de76d1072b5b65df304e1b8fc353a97be1" name="ea-apache24-mod_allowmethods-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="b1be6d3e7d957569750cd815051917f2ecd5dd0ed29a816ee491139c0474ed39" name="ea-apache24-mod_allowmethods-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="1284807c6ce82f97f746cfb596610b380709e916d6c0325e4b59f01bdcfe9532" name="ea-apache24-mod_allowmethods-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="05e45f645e46be966242d8bdcf2bc9d3dc0c742685f2ca5f2852698c583ec54a" name="ea-apache24-mod_allowmethods-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="bfe3d8a74465a7d54602dd19487e1f595dc96cc283215b1be7f1c0bdb810682e" name="ea-apache24-mod_asis-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="3843a56928701357888b97c446e10881419c1ca25850c6cf414c66e1f5ef2c41" name="ea-apache24-mod_asis-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="3aae8506f713aa8e217483d2ebe848ed0936298060bc809304b3f396d2388b30" name="ea-apache24-mod_asis-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="1f8043ebead53dea3ff918624c42004281a7a041ce2db271142e2e9ae59e4f42" name="ea-apache24-mod_asis-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="42a0fc19feb3c07d400d50387f424fbcb3188fbbdbc2acb7e901f9a018aa0d6e" name="ea-apache24-mod_auth_digest-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="8a4c46c98b09e921970494bf33708037f46b5b48b4c97530e4c09d0bcf53b972" name="ea-apache24-mod_auth_digest-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="6ebc19b796136913667e5fc1bcf171b9774f541b0451b01a8de50f22ca65b26e" name="ea-apache24-mod_auth_digest-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="ca294012def477d8742b43d75af8af0384c75c902accc2506e262f0cbfdb0d65" name="ea-apache24-mod_auth_digest-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="2efeb2a70df19601c472d49e5eef118a1e043e2981c8a19e5655f3f92d6d9fee" name="ea-apache24-mod_authn_anon-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="091ea7d0f1dd3c4c0189bde31aee9c435fb212f5deace37858fa7f073aa11b00" name="ea-apache24-mod_authn_anon-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="899a0f3a14962bdc7627fee2b056372f75b6197914cd0a8aaf2d750f1668d576" name="ea-apache24-mod_authn_anon-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="323c8d542f4a9994047440c75e6d2db285d95eab297aed5186122f06a6de726b" name="ea-apache24-mod_authn_anon-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="5777d4f9bc513faaf4ad8b2f002e994448be4f350c8360433b062d009fbc312e" name="ea-apache24-mod_authn_dbd-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="a5e13ac9c6d6d2e135a709b06ea587b9bb74655f2204836ef592de7279c2d171" name="ea-apache24-mod_authn_dbd-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="e5f7e3d75e712173639794451839d2fd1700a572a2c81f05c9e7d44c34d472a0" name="ea-apache24-mod_authn_dbd-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="80fdb2fd5aca811c8c3a9cd2301fd4c3c78941a4e7203ba0baeb59190d8722e4" name="ea-apache24-mod_authn_dbd-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="8c94439de2729ae7b22f2bba90d5a4073b1f0eed1a2b1c6739cb26e3550185ec" name="ea-apache24-mod_authn_dbm-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="046915224293ecf1ffce401ae0c89ebb75bd35bd51a6da707d163c93605a5b99" name="ea-apache24-mod_authn_dbm-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="823d3990ad662e37c0c73ebcb534eae46e04f74b366cf15ada0d4f9b0498d0b0" name="ea-apache24-mod_authn_dbm-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="5c6f2404120e177ef4ced0e80eac33a4c4fd032c28df3d48d3798493b7c40b70" name="ea-apache24-mod_authn_dbm-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="e61161237bd8341463743d67e0c49ac1f7a152501a2d1d2bd94b9fc3fa2f9f0b" name="ea-apache24-mod_authn_socache-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="d5e6770e50c036dd68870fb05f5767a803f6126c9ebe8a07c6015230d667fc7d" name="ea-apache24-mod_authn_socache-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="d7a4be8d1ed85c00b6a5e21a05b18d50bea9da0a89036fbbe8b7518577f8650e" name="ea-apache24-mod_authn_socache-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="354025d13eb0ffdaf0c9b82b9c4200b370a7b2079a46fb0a46b8cbe6603e081c" name="ea-apache24-mod_authn_socache-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="9efc0a79316c6a7fc1e6f5b8976f948274bde97ac95d5dce56bd0d42dfdb5541" name="ea-apache24-mod_authnz_ldap-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="f07b5a141650295e409e1ebd195192490a6502aed65446212f42a196149dae58" name="ea-apache24-mod_authnz_ldap-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="f7ce851287705511539b4b3f755a90af79b2054daf5f80de7a9546a647c5fa49" name="ea-apache24-mod_authnz_ldap-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="36515c4b9f952b72034b3edf5b7920e2af30422a95c27525a06165d8323dda87" name="ea-apache24-mod_authnz_ldap-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="11a63687e168d2ce4bd1132385a3bb99742a65c5fb9792445a7222236059af56" name="ea-apache24-mod_authz_dbd-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="f3e6d8711b0bba3b668e92eb0b4cda51d1bd6f3dee68d4ccbf250e820eab5aee" name="ea-apache24-mod_authz_dbd-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="7422716c2d146f568ad86e02d8373c030f4df62023bb880bdf33f8d4933b4b7a" name="ea-apache24-mod_authz_dbd-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="e36adc64b32cd73cf5f21573464f9269007673ae0b491e4f60ad674e88d20e05" name="ea-apache24-mod_authz_dbd-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="2659ebf6b6aa1e72988744af4605e3c2bad15fb01df8f52feb4a37d59da208c2" name="ea-apache24-mod_authz_dbm-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="d68b77fbd4b283a8667f98ecef68d52c3a5a625c95fbe13f7a34cde70b49ab59" name="ea-apache24-mod_authz_dbm-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="4c389cda5dce0418183d0e8c9bb3cafeb3c200e4e496a7b50bc149aa91ef7786" name="ea-apache24-mod_authz_dbm-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="824c95a16f9907006bde8570cb36382b7004848b4ae26c480c94c259376010e4" name="ea-apache24-mod_authz_dbm-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="0c8f2a5b5c32f1d589b6f5cacdd4d42c292828593f4ea63105a417cfef8ff50c" name="ea-apache24-mod_authz_owner-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="995ab45af71f20e9c045b36642f6818803354fd464e7c1e8fd6e0b73a047c107" name="ea-apache24-mod_authz_owner-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="37a043b08be72149e687712f23950063157138fcfa0d59b84811680c3efbfeb2" name="ea-apache24-mod_authz_owner-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="5d7106cb0754df4f258a75c04bfa81fddd4cdafb4a0f1cf9e830d9f40684e37e" name="ea-apache24-mod_authz_owner-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="cc7ae06ad8b1d6bf44755222113bb30b7bbb5838f65bd7e0843a4ee6a304cee1" name="ea-apache24-mod_brotli-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="bdd6f9d7b00e884a3f8c73405a35a9fe59e636e1bd79077d5bf4db67e84e1a86" name="ea-apache24-mod_brotli-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="6ac556f555ce9419ee3a8d8cb262d37e9fc026221d1c3e3eb69770dc37596117" name="ea-apache24-mod_brotli-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="74e409dd92b949e34ab3b0f57bad1e41e34521eea762866880520379e7a931dd" name="ea-apache24-mod_brotli-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="c0a4b3abb04f273d00e91b395567afb21f297db532642065f658383e2e060a59" name="ea-apache24-mod_buffer-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="e38faefe4a2ae2cf471f3584ba2a0ef7ceba57d136de2b77997858875e7d5582" name="ea-apache24-mod_buffer-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="37acf1b9f5b1ffa8d513517cc8e7b642576b0b1327b843f5bacafccb6efe89e5" name="ea-apache24-mod_buffer-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="3c03b1432f318497ff14a42976449971ad1b5b8749f90513ba4d2943670c4ad1" name="ea-apache24-mod_buffer-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="e5b039a370ab7e36616f18b367d9aa245a035fed9a3577a57f0ffb97ebb926cb" name="ea-apache24-mod_cache-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="cc0d22b96661841bcba90f903b8865718f634d96c3f5c2c792e97efc8ff8deb7" name="ea-apache24-mod_cache-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="e7e7ac6b8bef5a9ea2d173b765bf5f9a35e30be8f2ecaf5b0423a1c3cf11e006" name="ea-apache24-mod_cache-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="75c38f6ba4be3ccd8a0d520b579fb26e783a0bd5b50b4e7f4a32c1a786148ab3" name="ea-apache24-mod_cache-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="b1d5f5c19591ccd92109851f6670f17d05a0d5cb63bef59e837c1c1e7a5e052a" name="ea-apache24-mod_cache_disk-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="de1f73aeebac4381a5a8a486f27b2095d17426b5e93ba2ef2db52c903c856183" name="ea-apache24-mod_cache_disk-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="c4e62fc3931179db463f305c3945563cbd9ac01876d5fd1eae5f1d30c9237086" name="ea-apache24-mod_cache_disk-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="fe2234bdbb0a9ad1f5852a4475afad796e16ac764022b507e5e62e2b3407d5c6" name="ea-apache24-mod_cache_disk-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="b9c5ddda649f89b2aa61c315ecd2cb0ab802bac3f4ef7291fc8245e2b7312d9b" name="ea-apache24-mod_cache_socache-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="7a79a737a90ed8fa665f985e3bb236c52ddb865b4b50e28d52eb9077af226294" name="ea-apache24-mod_cache_socache-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="c7bd33410686b22422a039dbcca97bed01dc4e5416a027078c387cae0b9ec3e4" name="ea-apache24-mod_cache_socache-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="61030f10a6ec4bf63bd5adee1e9abd948ab94fdd2f21307ba78b4160ff12b784" name="ea-apache24-mod_cache_socache-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="919066fd5b4d0317689138723a4b948f16710a115a2231af541f490100200c0a" name="ea-apache24-mod_cgi-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="071a73cfd58ef5de0ea37b90bdca5a5bb63f84a06105af0cbeba8d28af4e0443" name="ea-apache24-mod_cgi-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="7ba98d6b4157c2608f7370bc6771b0b166404c8da47de8e4ffb19b2028ce9372" name="ea-apache24-mod_cgi-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="caf0e99446f52d12a41740291d0efcebadb1bc1ffdd88c014f68980f7565a6bf" name="ea-apache24-mod_cgi-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="7e272289a522c4fb1a16997bd08c7dd10b462586d5603e22e8847f33f3bd0d51" name="ea-apache24-mod_cgid-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="b60974209d1e48eb853a2604ef50d47d5c51257b904988ef8a76e30b9ab28053" name="ea-apache24-mod_cgid-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="bfd8ef4e3512dcabe31aa2f457ea0257b924f42b6d58a6049b4b5053397ba56e" name="ea-apache24-mod_cgid-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="de629844e391a576de108b833c4dd60467ef71360ac771b2275969ff9ef41314" name="ea-apache24-mod_cgid-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="1e427a9d5777a77b9630ee4dc8cdeaa14e83bf0588cd3f197bd728230f5f5655" name="ea-apache24-mod_charset_lite-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="1f194b8d5b4dda75a9f4d3b87d5d8730d97820aa1ceba974ce1dbaa72c03b1ba" name="ea-apache24-mod_charset_lite-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="4fb7584126a108599e6a80341c178cd107ce97737d15ed3bf5d11ec7bc1b4f08" name="ea-apache24-mod_charset_lite-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="34ea04145ef91fd0b651a34de751a6c8d5469c11908d546fbd852cfe3a652152" name="ea-apache24-mod_charset_lite-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="66fb96f8f1bb0919147f19e78b044e403e00b207d4cdd14ddf18a4c05fc3d157" name="ea-apache24-mod_data-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="fc4f83d007b78d46b0da1713740a32bac777e81aa16c12964b1975a813a1dddb" name="ea-apache24-mod_data-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="bbf872b9420f460fc65fbf1ba6c0c1bceee83f803cc1e3f643b0e8042ff8e61f" name="ea-apache24-mod_data-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="4b3e34155153d6b930c547ea97e4e4fea089da3bf3d5c3bb5a7047428e5f136e" name="ea-apache24-mod_data-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="6591bbaf0dd45141a3442424d17cd1c7c501dc5c0ee30b02c195dcb7988d6e88" name="ea-apache24-mod_dav-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="d2ac9624c84ebfb0e98ed7548bdf9fb523ded513edd07c199f1016c64104e08c" name="ea-apache24-mod_dav-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="2beb9cff693b54eda386c151eed7117b8b91bd307df8c00a5f029eae23cfdadc" name="ea-apache24-mod_dav-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="6c79eadb76f24d09d483dc61713af45dca2389b1030dd3929267e4258285379d" name="ea-apache24-mod_dav-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="d09d9488484fc9a3f105bdd8b09403f7cb3e97fb668a4592ba3c8530acbffe44" name="ea-apache24-mod_dav_fs-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="5b7f4e3a29e2acc5c907b1ce5a3f8e972ffa274e2cf98676557ed4bf31d18983" name="ea-apache24-mod_dav_fs-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="152e6dd7d895ae8daa15329289866bad47ffc3cc50a6d9c0344ab851dd665b57" name="ea-apache24-mod_dav_fs-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="8dcab28fef9680137ffcb7d94565c23ec14ccc691fe3b034de9f751fbbc62bc3" name="ea-apache24-mod_dav_fs-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="b4fb11de9fb8b7dfe364a2ab30c29384b1f4cda22811d51a88f61af672fad5ab" name="ea-apache24-mod_dav_lock-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="2d6841ddcac68f2b0ed12054ad1f706fff07802389bac2744c83623a385091cf" name="ea-apache24-mod_dav_lock-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="482ac468884cb92c5ae5c634228cbce59358abe67a25c38d991c862a2c60aa99" name="ea-apache24-mod_dav_lock-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="01f588845a27c6ee387a58199a9f7ba0dac6d34129a49797f85c22ff2d63df3d" name="ea-apache24-mod_dav_lock-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="f0b400947d85aa6186944cd9e49adc0b7c36ee83d553f01e0f0cde13c791ca83" name="ea-apache24-mod_dbd-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="3ae4e1cb952334cbbeab641c074d8f47d90acf5dee3c542f1f4d6203f44282a6" name="ea-apache24-mod_dbd-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="0bb62ca87b01f6320eeb89db6b3cd52acb88f56b43f8c15b29f14e234b71cfac" name="ea-apache24-mod_dbd-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="5190e2680cb97cdbed65430cfd1af3a1e910f0bbf704e54efb5a3481c379017a" name="ea-apache24-mod_dbd-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="a06e1ca6d59defd7ddd7301737e0fb64e2f20c8b8a2966ef7341759171d39fec" name="ea-apache24-mod_deflate-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="e236fc5d7149eaa81fc1913e5b52fde86feb9fb78bb970bd9ec11a14834498cb" name="ea-apache24-mod_deflate-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="88cbaff5b00b042b8af9956c301051335a9702ab02092a348ad98403e4e2d247" name="ea-apache24-mod_deflate-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="fd4744f0591ad0043e4768813b1dac034aa2fd50a3c1446776d787293bb05b66" name="ea-apache24-mod_deflate-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="12ee9a603f62e551019f668da2e2b8fbf06856200706892263850e69ed656a34" name="ea-apache24-mod_dialup-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="d61c664b13401e69fcf55747fb8606ca1d40a534320f0e5bf9e0e6d835c4d22a" name="ea-apache24-mod_dialup-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="450c7c984a8c1448d51841f5d4deaeba42d14743b746036e57cd825f57040de4" name="ea-apache24-mod_dialup-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="4f21b7c6061a74534cbe8027a7712eed12ce752371b9f99d54b75086a066c148" name="ea-apache24-mod_dialup-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="175c258619dd7d788c300676e5f06e492e34de2c85e266e7100119789ad0a5e8" name="ea-apache24-mod_dumpio-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="b600d1b155e733f963396f02124424a61541d9669db0c89ab028f6f7c82b3737" name="ea-apache24-mod_dumpio-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="f2988548a867740275f88ac15146d01bccb7a13448c6d38d73331e7a131abd0a" name="ea-apache24-mod_dumpio-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="8b626d185857a127cff28a406f7c5e699c1e423ad54d1a3b52afaeb4dd11c56b" name="ea-apache24-mod_dumpio-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="83df7c77103e72d9a9649ae7df4c3d4602cd92688eaf3e81e5137fe18b212f4c" name="ea-apache24-mod_env-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="2b7a65cd8a9c1a3d9e97e64a719252e83760449b1e9c3ccdd4542686e1bc7dd5" name="ea-apache24-mod_env-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="7b99db38665373b3f177d96a3349c4a402307526066b241384c494e7808a5913" name="ea-apache24-mod_env-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="5652a0879d89003a2fc0b08db5b42168d721980a68fba8a98f772b121b31c544" name="ea-apache24-mod_env-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="38a74d41c159ba2a7a1faef53cb017f0ccd2beda0ca1d75be9d361002e554ca8" name="ea-apache24-mod_evasive-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.10.1" rel="6.el9.cloudlinux"/>
  <changelog author="CloudLinux Packaging Team &lt;packager@cloudlinux.com&gt; - 1:1.10.1-6.cloudlinux" date="1784721600">- EA4D-903: Rebuild of cPanel 1.10.1-6 for CloudLinux</changelog>
</package>
<package pkgid="8553ea561326744ad476f40c5aa0a71cbab4417fadac0942ccf05b3d2094845b" name="ea-apache24-mod_evasive-debugsource" arch="x86_64">
  <version epoch="1" ver="1.10.1" rel="6.el9.cloudlinux"/>
  <changelog author="CloudLinux Packaging Team &lt;packager@cloudlinux.com&gt; - 1:1.10.1-6.cloudlinux" date="1784721600">- EA4D-903: Rebuild of cPanel 1.10.1-6 for CloudLinux</changelog>
</package>
<package pkgid="a00a614c32cdb091fa1ae0b7a56b8bc5a0299a92b6316f101125b19b4fd5058f" name="ea-apache24-mod_expires-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="0cb05274e9ef777596472fcc85059a1988c7ac09566136d82e5c4ae9dde9c54a" name="ea-apache24-mod_expires-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="c0371d68558dc0676f74e118e876c158736c1c6487bef5b7903446024b42189e" name="ea-apache24-mod_expires-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="226af5a3a9c5ac9bc04ed04161f26101732788688b1a482e4d55d3fa5d8c3ffe" name="ea-apache24-mod_expires-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="fa1890cabd6f0bb6876b7d28bbffb85bb12c9210252a6c322c72159065756d4e" name="ea-apache24-mod_ext_filter-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="13bc9ee6bbe6f7edf115f7b02ed57fe789f696ab22ad0ed427a484adfa21981c" name="ea-apache24-mod_ext_filter-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="856e5bb0345628c83ca849801a970fd57f262757a7a40cbc902354ccd0f56795" name="ea-apache24-mod_ext_filter-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="876dec469389bf8be64b727281fec167c78317a4a9b3cdd50325c2ce0e8fb283" name="ea-apache24-mod_ext_filter-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="31801c0092f788cadd6a2b0c6538e1acffcc7c3c218ae2ea3c86ff75ecf0ea38" name="ea-apache24-mod_file_cache-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="2fc04d198a57bbf2f01c433e1069bedb903c17193db824a692e9fec9cc832de0" name="ea-apache24-mod_file_cache-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="91a0d5c54a20978a6c2098590cffba612110ddbd14356b10c4ed04b590d9f8db" name="ea-apache24-mod_file_cache-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="816fcaee0b0f003a4c211eda42d517e8884ea24c076ae337c73ad351763ef4dc" name="ea-apache24-mod_file_cache-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="5b4397cdfe082dd93a7b48f03d0a4455e54790d78818272cbb793d0e0f672bb1" name="ea-apache24-mod_headers-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="d50e0fc346b87c565bc4b7de86c46fcfb42a435d866d2ce78cc13152251ffcd0" name="ea-apache24-mod_headers-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="cec4a025a68ec21b7f38bd5c75f12c6a34ebb2fe5aba1a90eaad8316fbaa68fd" name="ea-apache24-mod_headers-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="7f03997d7b58a6415b337c780488192606912a96a22ae986b9884b4ef59c2a29" name="ea-apache24-mod_headers-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="1b37d357b7dace07d47ef92a4edc61cde74e71df639e4d7673d0245d725fc814" name="ea-apache24-mod_heartbeat-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="0b567be09b1f0f005107d955c593f00ffed91ed92bd0834ac3941855151e192e" name="ea-apache24-mod_heartbeat-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="3598acb6fb7c4a2993771f8bcd0fcfb513d70ad3043681df7d4713f6585b6ec1" name="ea-apache24-mod_heartbeat-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="9630b9aeffcf1a8e4eb9a4d74f619c79c401823a3a796c408bfd9625181a4a54" name="ea-apache24-mod_heartbeat-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="ee8edec73f0fe01aa0cf787063677fae92cf029a25355ca7e47a22f6719f2afa" name="ea-apache24-mod_heartmonitor-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="ccd85ebd3627435bba00e20cb38f2589014f6dc5842cfaf75eb02c7bca281e6a" name="ea-apache24-mod_heartmonitor-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="eafcb71eee00402521d37c0d8840991465851427cf7f4819258c0d2c93050609" name="ea-apache24-mod_heartmonitor-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="26604125450c8825870a03bdba64adb46fbc63de4ebc10e984a2936885ebaf47" name="ea-apache24-mod_heartmonitor-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="e029ae0fbbff3b42142b5762d0578e88f96810345788f87b54d2fe2771c98cbd" name="ea-apache24-mod_hostinglimits-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0" rel="46.el9.cloudlinux"/>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1.0-42" date="1772366400">- CLOS-3983: Add LVD per-domain LVE lookup support via lvd_map_lookup from liblve</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1.0-43" date="1776168000">- CLOS-4126: Maintenance update</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1.0-44" date="1777291200">- CLOS-4284: Maintenance update</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1.0-45" date="1778500800">- CLOS-4373: Maintenance update</changelog>
  <changelog author="Nika Keshelava &lt;nkeshelava@cloudlinux.com&gt; - 1.0-46" date="1782734400">- CLOS-3754: fix SIGSEGV in process_lve_error() when mod_brotli is loaded
- CLOS-4441: Maintenance update
- CLOS-4585: Maintenance update</changelog>
</package>
<package pkgid="173e3fc598b264a0034b0a2e426248a3913ad03d5d5ab16ff16e5728fb942493" name="ea-apache24-mod_hostinglimits-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0" rel="48.el9.cloudlinux"/>
  <changelog author="Nika Keshelava &lt;nkeshelava@cloudlinux.com&gt; - 1.0-47" date="1785153600">- Maintenance update</changelog>
  <changelog author="Georgy Lepsaya &lt;glepsaya@cloudlinux.com&gt; - 1.0-48" date="1785931200">- CLOS-4729: Fix LVE accounting on cgroups v2</changelog>
</package>
<package pkgid="75936bd9131d83264a7190cc88c9f0e31439a77a0e506923ef93ec959cd515e5" name="ea-apache24-mod_hostinglimits-debugsource" arch="x86_64">
  <version epoch="0" ver="1.0" rel="46.el9.cloudlinux"/>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1.0-42" date="1772366400">- CLOS-3983: Add LVD per-domain LVE lookup support via lvd_map_lookup from liblve</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1.0-43" date="1776168000">- CLOS-4126: Maintenance update</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1.0-44" date="1777291200">- CLOS-4284: Maintenance update</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1.0-45" date="1778500800">- CLOS-4373: Maintenance update</changelog>
  <changelog author="Nika Keshelava &lt;nkeshelava@cloudlinux.com&gt; - 1.0-46" date="1782734400">- CLOS-3754: fix SIGSEGV in process_lve_error() when mod_brotli is loaded
- CLOS-4441: Maintenance update
- CLOS-4585: Maintenance update</changelog>
</package>
<package pkgid="6d8513efd9180f21db0bba177db500a10eecdc439ba9abaf5dd4be0dbb207aa5" name="ea-apache24-mod_hostinglimits-debugsource" arch="x86_64">
  <version epoch="0" ver="1.0" rel="48.el9.cloudlinux"/>
  <changelog author="Nika Keshelava &lt;nkeshelava@cloudlinux.com&gt; - 1.0-47" date="1785153600">- Maintenance update</changelog>
  <changelog author="Georgy Lepsaya &lt;glepsaya@cloudlinux.com&gt; - 1.0-48" date="1785931200">- CLOS-4729: Fix LVE accounting on cgroups v2</changelog>
</package>
<package pkgid="3ea1218054c1c4fb6f93baf5397e70c999b56e89c2451e1b2c52e567b83f874e" name="ea-apache24-mod_http2-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="f4a5386b462b3ed08c58110f92deb57005c32d5521381ae5dce8f89daf635854" name="ea-apache24-mod_http2-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="ff6c27220221a18d4ca2983c94e1e7db4a2ff55202f6dbb3a552e02326798cf3" name="ea-apache24-mod_http2-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="9e5761ea5722622a917d28a5dc7a78942b3ce0dd394a6cbaf4b0f5c50d9f16f5" name="ea-apache24-mod_http2-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="a1d4cedfe719733e115dd49b5ad0e01842df6e40c547c2130e2cf6ba4fe6c3ff" name="ea-apache24-mod_imagemap-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="2c482a72b3677a25e21ca6d7519251370f704e11bf3a7a91d904bb7199d5539e" name="ea-apache24-mod_imagemap-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="0011dff877bc0b55b994075fa02179860c246d32272f7d7dd2b98973a20918f1" name="ea-apache24-mod_imagemap-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="6d42fc8b730917e731161d1582bfff17967c953f19ad72eeeef2e0c18fa3f5c1" name="ea-apache24-mod_imagemap-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="55f449f592785b84f2d2e7ae565556a3569041a5acdf666b843836bc3964e13b" name="ea-apache24-mod_info-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="22c2b1d899c31d32b6e54ef5b0e97b25e59d32a093c1c891d6d5dfba7fc5091a" name="ea-apache24-mod_info-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="11964564b7f3d220c1ee5d13efbf534ba0f9dff8acf7713185c8ebbad7bcdc78" name="ea-apache24-mod_info-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="adcb54b98fc85b6a2cc65b6d0b53a45874d8156439b15c1227e8d6fae3e6a032" name="ea-apache24-mod_info-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="cdb4de6a8e8298a0df2a78d861a2e8a94f580a8f42eae73226778f161534662a" name="ea-apache24-mod_lbmethod_bybusyness-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="014b2e6f04f8542d8200dd7a962ae321df6eae1762619da217ecebd76be3936a" name="ea-apache24-mod_lbmethod_bybusyness-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="8a7a2d643238e49eadfa4bb421fce064db856eaa21627f64dc23d45ee43832cb" name="ea-apache24-mod_lbmethod_bybusyness-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="c06cbd0feef0d74353f351c0c2f16710ed8e0289b1820663dac3b3e0b7a5c40a" name="ea-apache24-mod_lbmethod_bybusyness-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="526ea9e5653a23654fb66004eec664d546a0f3862e612401335df45ac7cfc2f4" name="ea-apache24-mod_lbmethod_byrequests-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="b78ea6ba6a51cc48ea9aac43ba5198b57ca3901bd381892114279c0fae035f27" name="ea-apache24-mod_lbmethod_byrequests-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="ba58d9392ffc9c59f85cd1f39bf998cdc0c872dba659e296ef0c6c2ded8fd195" name="ea-apache24-mod_lbmethod_byrequests-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="856fa013f6e0f46cec06cfae934a12437ba896bc007e47202189378d85294c0b" name="ea-apache24-mod_lbmethod_byrequests-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="b5a5c28b8907ab634135da349009a1ed35313fb39cbc63f56937ec183e1da811" name="ea-apache24-mod_lbmethod_bytraffic-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="f632723616104f91e78dd14c4bf6958d0d275cfa4e811427ab44330cba8bfb1b" name="ea-apache24-mod_lbmethod_bytraffic-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="9fc54fe143c8608c25d6319a51f04502fca0e6684088212b06499f9dabde1bfc" name="ea-apache24-mod_lbmethod_bytraffic-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="de693eb21adbcea3527c96521d78c800bad2686ba9479723b81bf6d826f12362" name="ea-apache24-mod_lbmethod_bytraffic-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="71cebe0b870b22156dbd02e68e75569f0caa4c09426bad92caaa9225075daa2a" name="ea-apache24-mod_lbmethod_heartbeat-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="085e970b5b1c0776323d60784a399daae6d953e4f2102c8de7860c2ddcd71da9" name="ea-apache24-mod_lbmethod_heartbeat-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="215a21aab4fb154c9c74b80d6fc427004cc96482e8028dce1eb4b43a43d95d06" name="ea-apache24-mod_lbmethod_heartbeat-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="fa7c6123f986b37824f22a10331071dc591b2793f6921d87719a1ec72074cf4f" name="ea-apache24-mod_lbmethod_heartbeat-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="3cb71055f33c1fddb4b5660502de52fc72d12307ac1dca9b4d6861a392a29ce3" name="ea-apache24-mod_ldap-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="cf28549c5c57c8f1289a7a43966677d43394f4c06d3f86bfd19da37dd72f7db0" name="ea-apache24-mod_ldap-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="29f5ecf18d9265a03bd93281ed336ed7e531dfb59ad2f4f3d559832cc69c1ac4" name="ea-apache24-mod_ldap-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="c5959efcbc48abd3bdbf161b323e049d014425d393e0019150ced783f24dd7b4" name="ea-apache24-mod_ldap-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="d39b4c735eb842806b44155c736356138b0b60d1466e78713b77e24f1a2cff25" name="ea-apache24-mod_log_debug-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="b9a5f24909d545c505f58ac51f559842d35e9d255cb1f788e8a77aba8422f15c" name="ea-apache24-mod_log_debug-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="8d4b5bca4bcdef99fba3cbb6579b073914b988a3976e0d3ccc54f97de287c1b5" name="ea-apache24-mod_log_debug-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="4439a46b8f712cced241a3a86567f69a2dc0469d52c4a45dd9eb744a2226ce1d" name="ea-apache24-mod_log_debug-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="7e8ea5741c5f2c14cba066c0286e1a76aa7517c9fbf9b55f52834ffbec03f18e" name="ea-apache24-mod_log_forensic-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="21c15c2923d090e65ea11323512cf59b45fe7d923d0ce46958c11d5f11f3594d" name="ea-apache24-mod_log_forensic-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="07d34d136dd1e420c8b4689d8b556e959aa7320d40933d3f8ea80a22e6af21e2" name="ea-apache24-mod_log_forensic-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="36fa67e9648b2224de3f32d1d47f1e624fdcfa3688f8dd40dadc0d79a93366a6" name="ea-apache24-mod_log_forensic-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="d6236044ecc54652d8622b2f6243ef34bff736c409a8e7987421d524998f4e92" name="ea-apache24-mod_lsapi-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.1" rel="79.el9.cloudlinux"/>
  <changelog author="Nikolay Petukhov &lt;npetukhov@cloudlinux.com&gt; Alexandr Demeshko &lt;ademeshko@cloudlinux.com&gt; 1.1-63" date="1672660800">- MODLS-952: Fixed the bug added when solving MODLS-935
- CRIU support disabled on CL9 due to MODLS-955</changelog>
  <changelog author="Alexandr Demeshko &lt;ademeshko@cloudlinux.com&gt; 1.1-64" date="1674216000">- MODLS-946: lsapi_backend_use_own_log option context fixed
- MODLS-956: liblsapi dependency made strict for mod_lsapi packages
- MODLS-959: HTTP output filter error processing changed</changelog>
  <changelog author="Alexandr Demeshko &lt;ademeshko@cloudlinux.com&gt; 1.1-65" date="1678363200">- MODLS-963: ea-php82 handler added
- MODLS-962: DA installation script modified to be called without parameters</changelog>
  <changelog author="Alexandr Demeshko &lt;ademeshko@cloudlinux.com&gt; 1.1-66" date="1679054400">- MODLS-967: Added support of alt-php82</changelog>
  <changelog author="Alexandr Demeshko &lt;ademeshko@cloudlinux.com&gt; 1.1-67" date="1681473600">- MODLS-968: make sulsphp_log closed for lsphp</changelog>
  <changelog author="Alexandr Demeshko &lt;ademeshko@cloudlinux.com&gt; 1.1-68" date="1685102400">- MODLS-971: Made own backend log file owned by user</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; 1.1-70" date="1693915200">- CLOS-1843: Added support of alt-php83</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; 1.1-71" date="1696420800">- CLOS-1981: Added common.py script to the httpd24-mod_lsapi package</changelog>
  <changelog author="Dmitry Shibut &lt;dshibut@cloudlinux.com&gt; 1.1-72" date="1700654400">- CLOS-1653: Migrate mod_lsapi on Python 3.11</changelog>
  <changelog author="Alexandr Demeshko &lt;ademeshko@cloudlinux.com&gt; 1.1-73" date="1707134400">- CLOS-2334: Minor mod_lsapi scripts corrections
- CLOS-2348: Execute condition changed in switch_mod_lsapi script</changelog>
  <changelog author="Redouane Elkaboussi &lt;relkaboussi@cloudlinux.com&gt; 1.1-74" date="1714651200">- CLOS-2334: Fixed native PHP config error for Webuzo</changelog>
  <changelog author="Alexandr Demeshko &lt;ademeshko@cloudlinux.com&gt; 1.1-75" date="1724155200">- CLOS-2832: AlmaLinux support added
- CLOS-2818: Changed requirement from alt-php56 to alt-php81
- CLOS-2860: Added lsapi_get_status_line declaration</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; 1.1-76" date="1725624000">- CLOS-2857: Implemented blacklist for LSPHP handlers</changelog>
  <changelog author="Alexandr Demeshko &lt;ademeshko@cloudlinux.com&gt;  1.1-77" date="1726488000">- CLOS-2951: Add support of alt-php 5.2-5.5 for Alma
- CLOS-2904: Ignore errors in blacklisted config files</changelog>
  <changelog author="Alexandr Demeshko &lt;ademeshko@cloudlinux.com&gt;  1.1-78" date="1732795200">- CLOS-3055: Restore CRIU support in mod_lsapi DA tarballs
- CLOS-3007: Add PHP 8.4 support as well as support of future PHP versions
- CLOS-3007: Add heuristic to resolve unlisted PHP handlers
- CLOS-3043: Add support of Ubuntu 22</changelog>
  <changelog author="Alexandr Demeshko &lt;ademeshko@cloudlinux.com&gt;  1.1-79" date="1734955200">- CLOS-3136: Use mod_hostinglimits uid to enter LVE</changelog>
</package>
<package pkgid="08927a5bc66fb8d875194069c118be4a4c90361332e953fc8824a492e1fd53b8" name="ea-apache24-mod_lsapi-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.1" rel="92.el9.cloudlinux"/>
  <changelog author="Timur Averianov &lt;taverianov@cloudlinux.com&gt;  1.1-82" date="1744113600">- CLOS-3315: Enable configuring default LSPHP version on AlmaLinux</changelog>
  <changelog author="Timur Averianov &lt;taverianov@cloudlinux.com&gt;  1.1-83" date="1745841600">- CLOS-3349: Add "/opt/remi" to the list of safe directories on AlmaLinux</changelog>
  <changelog author="Timur Averianov &lt;taverianov@cloudlinux.com&gt;  1.1-84" date="1747656000">- CLOS-3376: Preserve "lsapi.conf" during upgrades on AlmaLinux</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; 1.1-85" date="1753185600">- MAXWS-655: Filter out lsphp process with socket to kill proper backend on exit/restart</changelog>
  <changelog author="Timur Averianov &lt;taverianov@cloudlinux.com&gt; Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; 1.1-86" date="1756900800">- MAXWS-785: Fix backend termination script hanging in the background when there were too many processes
- CLOS-3499: Update package to be compatible with CloudLinux 10</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; Timur Averianov &lt;taverianov@cloudlinux.com&gt; 1.1-87" date="1763640000">- CLOS-3355: Set the docroot and domain information in the env before spawning lsphp
- CLOS-3574: Use LSPHPRC instead of PHPRC if ea-php is version 8.4 and higher
- CLOS-3646: Support RLIMITs</changelog>
  <changelog author="Timur Averianov &lt;taverianov@cloudlinux.com&gt; 1.1-88" date="1768478400">- CLOS-3821: Add option to control PHP "open_basedir" setting</changelog>
  <changelog author="Timur Averianov &lt;taverianov@cloudlinux.com&gt; 1.1-89" date="1768737600">- CLOS-3838: Support putting lsphp stderr log into document root</changelog>
  <changelog author="Timur Averianov &lt;taverianov@cloudlinux.com&gt; 1.1-90" date="1769169600">- CLOS-3851: Support arbitrary lsphp stderr log path</changelog>
  <changelog author="Mikalai Voina &lt;mvoina@cloudlinux.com&gt; 1.1-91" date="1770897600">- CLOS-3613: Switch to unified build pipeline</changelog>
  <changelog author="Serhii Kokhan &lt;skokhan@cloudlinux.com&gt; 1.1-92" date="1774353600">- MAXWS-1023: Security hardening for mod_lsapi configuration scripts</changelog>
</package>
<package pkgid="ed263f067090c57039e96ee1db0e753618b418a02985706c44c6ce0373a609ef" name="ea-apache24-mod_lsapi-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.1" rel="93.el9.cloudlinux"/>
  <changelog author="Timur Averianov &lt;taverianov@cloudlinux.com&gt;  1.1-83" date="1745841600">- CLOS-3349: Add "/opt/remi" to the list of safe directories on AlmaLinux</changelog>
  <changelog author="Timur Averianov &lt;taverianov@cloudlinux.com&gt;  1.1-84" date="1747656000">- CLOS-3376: Preserve "lsapi.conf" during upgrades on AlmaLinux</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; 1.1-85" date="1753185600">- MAXWS-655: Filter out lsphp process with socket to kill proper backend on exit/restart</changelog>
  <changelog author="Timur Averianov &lt;taverianov@cloudlinux.com&gt; Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; 1.1-86" date="1756900800">- MAXWS-785: Fix backend termination script hanging in the background when there were too many processes
- CLOS-3499: Update package to be compatible with CloudLinux 10</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; Timur Averianov &lt;taverianov@cloudlinux.com&gt; 1.1-87" date="1763640000">- CLOS-3355: Set the docroot and domain information in the env before spawning lsphp
- CLOS-3574: Use LSPHPRC instead of PHPRC if ea-php is version 8.4 and higher
- CLOS-3646: Support RLIMITs</changelog>
  <changelog author="Timur Averianov &lt;taverianov@cloudlinux.com&gt; 1.1-88" date="1768478400">- CLOS-3821: Add option to control PHP "open_basedir" setting</changelog>
  <changelog author="Timur Averianov &lt;taverianov@cloudlinux.com&gt; 1.1-89" date="1768737600">- CLOS-3838: Support putting lsphp stderr log into document root</changelog>
  <changelog author="Timur Averianov &lt;taverianov@cloudlinux.com&gt; 1.1-90" date="1769169600">- CLOS-3851: Support arbitrary lsphp stderr log path</changelog>
  <changelog author="Mikalai Voina &lt;mvoina@cloudlinux.com&gt; 1.1-91" date="1770897600">- CLOS-3613: Switch to unified build pipeline</changelog>
  <changelog author="Serhii Kokhan &lt;skokhan@cloudlinux.com&gt; 1.1-92" date="1774353600">- MAXWS-1023: Security hardening for mod_lsapi configuration scripts</changelog>
  <changelog author="Nika Keshelava &lt;nkeshelava@cloudlinux.com&gt;, Serhii Kokhan &lt;skokhan@cloudlinux.com&gt; 1.1-93" date="1776859200">- CLOS-1655: Add CRIU support for CL9 and CL10
- CLOS-4290: Minor fixes in request parsing and configuration scripts</changelog>
</package>
<package pkgid="7dcb4524e4f8f9bda343e9971988433454369b53d0457968a5ec8a37c5668023" name="ea-apache24-mod_lsapi-debugsource" arch="x86_64">
  <version epoch="1" ver="1.1" rel="79.el9.cloudlinux"/>
  <changelog author="Nikolay Petukhov &lt;npetukhov@cloudlinux.com&gt; Alexandr Demeshko &lt;ademeshko@cloudlinux.com&gt; 1.1-63" date="1672660800">- MODLS-952: Fixed the bug added when solving MODLS-935
- CRIU support disabled on CL9 due to MODLS-955</changelog>
  <changelog author="Alexandr Demeshko &lt;ademeshko@cloudlinux.com&gt; 1.1-64" date="1674216000">- MODLS-946: lsapi_backend_use_own_log option context fixed
- MODLS-956: liblsapi dependency made strict for mod_lsapi packages
- MODLS-959: HTTP output filter error processing changed</changelog>
  <changelog author="Alexandr Demeshko &lt;ademeshko@cloudlinux.com&gt; 1.1-65" date="1678363200">- MODLS-963: ea-php82 handler added
- MODLS-962: DA installation script modified to be called without parameters</changelog>
  <changelog author="Alexandr Demeshko &lt;ademeshko@cloudlinux.com&gt; 1.1-66" date="1679054400">- MODLS-967: Added support of alt-php82</changelog>
  <changelog author="Alexandr Demeshko &lt;ademeshko@cloudlinux.com&gt; 1.1-67" date="1681473600">- MODLS-968: make sulsphp_log closed for lsphp</changelog>
  <changelog author="Alexandr Demeshko &lt;ademeshko@cloudlinux.com&gt; 1.1-68" date="1685102400">- MODLS-971: Made own backend log file owned by user</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; 1.1-70" date="1693915200">- CLOS-1843: Added support of alt-php83</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; 1.1-71" date="1696420800">- CLOS-1981: Added common.py script to the httpd24-mod_lsapi package</changelog>
  <changelog author="Dmitry Shibut &lt;dshibut@cloudlinux.com&gt; 1.1-72" date="1700654400">- CLOS-1653: Migrate mod_lsapi on Python 3.11</changelog>
  <changelog author="Alexandr Demeshko &lt;ademeshko@cloudlinux.com&gt; 1.1-73" date="1707134400">- CLOS-2334: Minor mod_lsapi scripts corrections
- CLOS-2348: Execute condition changed in switch_mod_lsapi script</changelog>
  <changelog author="Redouane Elkaboussi &lt;relkaboussi@cloudlinux.com&gt; 1.1-74" date="1714651200">- CLOS-2334: Fixed native PHP config error for Webuzo</changelog>
  <changelog author="Alexandr Demeshko &lt;ademeshko@cloudlinux.com&gt; 1.1-75" date="1724155200">- CLOS-2832: AlmaLinux support added
- CLOS-2818: Changed requirement from alt-php56 to alt-php81
- CLOS-2860: Added lsapi_get_status_line declaration</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; 1.1-76" date="1725624000">- CLOS-2857: Implemented blacklist for LSPHP handlers</changelog>
  <changelog author="Alexandr Demeshko &lt;ademeshko@cloudlinux.com&gt;  1.1-77" date="1726488000">- CLOS-2951: Add support of alt-php 5.2-5.5 for Alma
- CLOS-2904: Ignore errors in blacklisted config files</changelog>
  <changelog author="Alexandr Demeshko &lt;ademeshko@cloudlinux.com&gt;  1.1-78" date="1732795200">- CLOS-3055: Restore CRIU support in mod_lsapi DA tarballs
- CLOS-3007: Add PHP 8.4 support as well as support of future PHP versions
- CLOS-3007: Add heuristic to resolve unlisted PHP handlers
- CLOS-3043: Add support of Ubuntu 22</changelog>
  <changelog author="Alexandr Demeshko &lt;ademeshko@cloudlinux.com&gt;  1.1-79" date="1734955200">- CLOS-3136: Use mod_hostinglimits uid to enter LVE</changelog>
</package>
<package pkgid="5be4da33ac72f2281759bed868d172918b4682c53a5c839afabfb6fae0e8dac9" name="ea-apache24-mod_lsapi-debugsource" arch="x86_64">
  <version epoch="1" ver="1.1" rel="92.el9.cloudlinux"/>
  <changelog author="Timur Averianov &lt;taverianov@cloudlinux.com&gt;  1.1-82" date="1744113600">- CLOS-3315: Enable configuring default LSPHP version on AlmaLinux</changelog>
  <changelog author="Timur Averianov &lt;taverianov@cloudlinux.com&gt;  1.1-83" date="1745841600">- CLOS-3349: Add "/opt/remi" to the list of safe directories on AlmaLinux</changelog>
  <changelog author="Timur Averianov &lt;taverianov@cloudlinux.com&gt;  1.1-84" date="1747656000">- CLOS-3376: Preserve "lsapi.conf" during upgrades on AlmaLinux</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; 1.1-85" date="1753185600">- MAXWS-655: Filter out lsphp process with socket to kill proper backend on exit/restart</changelog>
  <changelog author="Timur Averianov &lt;taverianov@cloudlinux.com&gt; Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; 1.1-86" date="1756900800">- MAXWS-785: Fix backend termination script hanging in the background when there were too many processes
- CLOS-3499: Update package to be compatible with CloudLinux 10</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; Timur Averianov &lt;taverianov@cloudlinux.com&gt; 1.1-87" date="1763640000">- CLOS-3355: Set the docroot and domain information in the env before spawning lsphp
- CLOS-3574: Use LSPHPRC instead of PHPRC if ea-php is version 8.4 and higher
- CLOS-3646: Support RLIMITs</changelog>
  <changelog author="Timur Averianov &lt;taverianov@cloudlinux.com&gt; 1.1-88" date="1768478400">- CLOS-3821: Add option to control PHP "open_basedir" setting</changelog>
  <changelog author="Timur Averianov &lt;taverianov@cloudlinux.com&gt; 1.1-89" date="1768737600">- CLOS-3838: Support putting lsphp stderr log into document root</changelog>
  <changelog author="Timur Averianov &lt;taverianov@cloudlinux.com&gt; 1.1-90" date="1769169600">- CLOS-3851: Support arbitrary lsphp stderr log path</changelog>
  <changelog author="Mikalai Voina &lt;mvoina@cloudlinux.com&gt; 1.1-91" date="1770897600">- CLOS-3613: Switch to unified build pipeline</changelog>
  <changelog author="Serhii Kokhan &lt;skokhan@cloudlinux.com&gt; 1.1-92" date="1774353600">- MAXWS-1023: Security hardening for mod_lsapi configuration scripts</changelog>
</package>
<package pkgid="f702e684f9733aecad5b5fdf2e50a87dbb9798c665dad63a057942da5e20ec3a" name="ea-apache24-mod_lsapi-debugsource" arch="x86_64">
  <version epoch="1" ver="1.1" rel="93.el9.cloudlinux"/>
  <changelog author="Timur Averianov &lt;taverianov@cloudlinux.com&gt;  1.1-83" date="1745841600">- CLOS-3349: Add "/opt/remi" to the list of safe directories on AlmaLinux</changelog>
  <changelog author="Timur Averianov &lt;taverianov@cloudlinux.com&gt;  1.1-84" date="1747656000">- CLOS-3376: Preserve "lsapi.conf" during upgrades on AlmaLinux</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; 1.1-85" date="1753185600">- MAXWS-655: Filter out lsphp process with socket to kill proper backend on exit/restart</changelog>
  <changelog author="Timur Averianov &lt;taverianov@cloudlinux.com&gt; Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; 1.1-86" date="1756900800">- MAXWS-785: Fix backend termination script hanging in the background when there were too many processes
- CLOS-3499: Update package to be compatible with CloudLinux 10</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; Timur Averianov &lt;taverianov@cloudlinux.com&gt; 1.1-87" date="1763640000">- CLOS-3355: Set the docroot and domain information in the env before spawning lsphp
- CLOS-3574: Use LSPHPRC instead of PHPRC if ea-php is version 8.4 and higher
- CLOS-3646: Support RLIMITs</changelog>
  <changelog author="Timur Averianov &lt;taverianov@cloudlinux.com&gt; 1.1-88" date="1768478400">- CLOS-3821: Add option to control PHP "open_basedir" setting</changelog>
  <changelog author="Timur Averianov &lt;taverianov@cloudlinux.com&gt; 1.1-89" date="1768737600">- CLOS-3838: Support putting lsphp stderr log into document root</changelog>
  <changelog author="Timur Averianov &lt;taverianov@cloudlinux.com&gt; 1.1-90" date="1769169600">- CLOS-3851: Support arbitrary lsphp stderr log path</changelog>
  <changelog author="Mikalai Voina &lt;mvoina@cloudlinux.com&gt; 1.1-91" date="1770897600">- CLOS-3613: Switch to unified build pipeline</changelog>
  <changelog author="Serhii Kokhan &lt;skokhan@cloudlinux.com&gt; 1.1-92" date="1774353600">- MAXWS-1023: Security hardening for mod_lsapi configuration scripts</changelog>
  <changelog author="Nika Keshelava &lt;nkeshelava@cloudlinux.com&gt;, Serhii Kokhan &lt;skokhan@cloudlinux.com&gt; 1.1-93" date="1776859200">- CLOS-1655: Add CRIU support for CL9 and CL10
- CLOS-4290: Minor fixes in request parsing and configuration scripts</changelog>
</package>
<package pkgid="107ef15a55bcaa63d2b007b6e9d4ed818919bf889a93f30c838af9f140a82240" name="ea-apache24-mod_lua-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="ff6b3ec63d59c461f263e5be16f54c946897cd9c82309dc445763f9d53c7dc12" name="ea-apache24-mod_lua-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="b70e8577f0b72557a19e24bf885c6c64ca2c5362067f04565051160dce88d504" name="ea-apache24-mod_lua-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="64a7813460a4e3d30585e556d50b33aca616f74fcf787d56ccfa57f26e734f3f" name="ea-apache24-mod_lua-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="a4c107c416aeea6569a2749f88087f170d21a10dbe3fcd85314b39fca032404d" name="ea-apache24-mod_macro-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="d59a30f6c8db680accc18661314c62b0e0f2b05601d732c317c90dc9d2cfa78c" name="ea-apache24-mod_macro-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="f3a51821dbd0070de3b6b32fa07b0c9937294c0fd429ebe7a9d44cb24d51a3e9" name="ea-apache24-mod_macro-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="b0c37753c468360174df0e3200b939e759aacd4e97827f4d4f88868278f793cf" name="ea-apache24-mod_macro-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="32cab29fb41ceb28b5a9a0051af8a44ef89ee198bc2a620980a64173311e861f" name="ea-apache24-mod_maxcache-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.0.0" rel="1.el9.cloudlinux"/>
  <changelog author="Danila Vershinin &lt;dvershinin@cloudlinux.com&gt;, Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt;, Sergey Kokhan &lt;skokhan@cloudlinux.com&gt; 1.0.0-1" date="1766491200">- Initial MAx Cache implementation for CloudLinux</changelog>
</package>
<package pkgid="b7f2a80fa23bbd6dcf342d54631bfd674e54a1e1ffef35b872087a04b74a127a" name="ea-apache24-mod_maxcache-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.0.2" rel="1.el9.cloudlinux"/>
  <changelog author="Danila Vershinin &lt;dvershinin@cloudlinux.com&gt;, Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt;, Sergey Kokhan &lt;skokhan@cloudlinux.com&gt; - 1.0.0-1" date="1766491200">- Initial MaxCache implementation for CloudLinux</changelog>
  <changelog author="Sergey Kokhan &lt;skokhan@cloudlinux.com&gt; - 1.0.1-1" date="1771156800">- Fix dynamic cookies filename parity</changelog>
  <changelog author="Sergey Kokhan &lt;skokhan@cloudlinux.com&gt; - 1.0.2-1" date="1773662400">- Initial implementation of caching htaccess inside maxcache module</changelog>
</package>
<package pkgid="f5318e626379bd62fd6a90bf051414c6087ac9826fdfde25a238cc71af7c9b24" name="ea-apache24-mod_maxcache-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.1.0" rel="1.el9.cloudlinux"/>
  <changelog author="Danila Vershinin &lt;dvershinin@cloudlinux.com&gt;, Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt;, Sergey Kokhan &lt;skokhan@cloudlinux.com&gt; - 1.0.0-1" date="1766491200">- Initial MaxCache implementation for CloudLinux</changelog>
  <changelog author="Sergey Kokhan &lt;skokhan@cloudlinux.com&gt; - 1.0.1-1" date="1771156800">- Fix dynamic cookies filename parity</changelog>
  <changelog author="Sergey Kokhan &lt;skokhan@cloudlinux.com&gt; - 1.0.2-1" date="1773662400">- Initial implementation of caching htaccess inside maxcache module</changelog>
  <changelog author="Serhii Kokhan &lt;skokhan@cloudlinux.com&gt; - 1.1.0-1" date="1776945600">- MAXWS-1043: Remove htcache-watchd dependency; use per-request stat() polling (RevalidateInterval=0)
- MAXWS-1042: Rename MaxCacheHTCache* directives to MaxCacheHtaccess*; old names kept as deprecated aliases
- MAXWS-1042: Rename htcache-status handler to maxcache-htaccess-status; old name kept as deprecated alias
- MAXWS-1042: Rename config file maxcache_htcache.conf to maxcache_htaccess.conf with migration</changelog>
</package>
<package pkgid="b48e3854c222bad3d49fbf0de856d9e5df3f86d115feb58e375e51cad5cf8d46" name="ea-apache24-mod_maxcache-debugsource" arch="x86_64">
  <version epoch="1" ver="1.0.0" rel="1.el9.cloudlinux"/>
  <changelog author="Danila Vershinin &lt;dvershinin@cloudlinux.com&gt;, Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt;, Sergey Kokhan &lt;skokhan@cloudlinux.com&gt; 1.0.0-1" date="1766491200">- Initial MAx Cache implementation for CloudLinux</changelog>
</package>
<package pkgid="b1e4c902f9f578b6b3e59ca6e0f1e48a92164f128cca258bda6c3fe706d37220" name="ea-apache24-mod_maxcache-debugsource" arch="x86_64">
  <version epoch="1" ver="1.0.2" rel="1.el9.cloudlinux"/>
  <changelog author="Danila Vershinin &lt;dvershinin@cloudlinux.com&gt;, Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt;, Sergey Kokhan &lt;skokhan@cloudlinux.com&gt; - 1.0.0-1" date="1766491200">- Initial MaxCache implementation for CloudLinux</changelog>
  <changelog author="Sergey Kokhan &lt;skokhan@cloudlinux.com&gt; - 1.0.1-1" date="1771156800">- Fix dynamic cookies filename parity</changelog>
  <changelog author="Sergey Kokhan &lt;skokhan@cloudlinux.com&gt; - 1.0.2-1" date="1773662400">- Initial implementation of caching htaccess inside maxcache module</changelog>
</package>
<package pkgid="6629e5b422b0f69147ddc73d64afeabbd4f675122648167bcfc0b4862060ff1a" name="ea-apache24-mod_maxcache-debugsource" arch="x86_64">
  <version epoch="1" ver="1.1.0" rel="1.el9.cloudlinux"/>
  <changelog author="Danila Vershinin &lt;dvershinin@cloudlinux.com&gt;, Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt;, Sergey Kokhan &lt;skokhan@cloudlinux.com&gt; - 1.0.0-1" date="1766491200">- Initial MaxCache implementation for CloudLinux</changelog>
  <changelog author="Sergey Kokhan &lt;skokhan@cloudlinux.com&gt; - 1.0.1-1" date="1771156800">- Fix dynamic cookies filename parity</changelog>
  <changelog author="Sergey Kokhan &lt;skokhan@cloudlinux.com&gt; - 1.0.2-1" date="1773662400">- Initial implementation of caching htaccess inside maxcache module</changelog>
  <changelog author="Serhii Kokhan &lt;skokhan@cloudlinux.com&gt; - 1.1.0-1" date="1776945600">- MAXWS-1043: Remove htcache-watchd dependency; use per-request stat() polling (RevalidateInterval=0)
- MAXWS-1042: Rename MaxCacheHTCache* directives to MaxCacheHtaccess*; old names kept as deprecated aliases
- MAXWS-1042: Rename htcache-status handler to maxcache-htaccess-status; old name kept as deprecated alias
- MAXWS-1042: Rename config file maxcache_htcache.conf to maxcache_htaccess.conf with migration</changelog>
</package>
<package pkgid="345b98d2ab502a40ec801e8f488aa7021fe04e8bbd05134fa622ed6fb38e585a" name="ea-apache24-mod_mime_magic-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="42346416cd1072fa1bd8239252331d7a97479b1a79a2bac9b60f1b80f755f479" name="ea-apache24-mod_mime_magic-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="4632a3198bcc07cb41f2299db3da4ce85ee02bce7c3dd162e8b3881df8cdc5b7" name="ea-apache24-mod_mime_magic-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="f2483961fb6a38ec4e36cb53dba4e9b24fd45c228d20ca45a4f34f72e8818b77" name="ea-apache24-mod_mime_magic-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="94d22cc97a779baa54cc1e2e495190507f00faf5d17822236ef8402e2811ebae" name="ea-apache24-mod_mpm_event-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="0b520864fbd5e689dfc35536f075880e9bfe85f7068e4408d80f79229ab50cff" name="ea-apache24-mod_mpm_event-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="99fd2a0fb638d3249c475d45d454e14392aebad33ae2ff413b8695ef134e48bc" name="ea-apache24-mod_mpm_event-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="6d8ee11ab1c27171cb1b062b2215db5e032f4f3acad62ec78bb3205d7b2b1180" name="ea-apache24-mod_mpm_event-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="aefc046c9ee82c06a4d7254ee64ce4cb0112d754244d371910dad03fad9a2f77" name="ea-apache24-mod_mpm_prefork-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="2dda6a287b924b861cd8c2aafac1a0d6ee1de2d930ff8ac17baebedf65572910" name="ea-apache24-mod_mpm_prefork-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="2224df930cdea53ebb0be16b931b217ff9bca6ef41e78c05f74628fda732df5e" name="ea-apache24-mod_mpm_prefork-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="9be2a77cf88ce08be4571a43b8c747d3337c8cf8aa109c1f3b7ef1c2451f0139" name="ea-apache24-mod_mpm_prefork-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="5a98bc544e191c792c4fe7cd6068db697950e2a224b261c7407a597f9cee0172" name="ea-apache24-mod_mpm_worker-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="6fb87304f89b55552c8fee07476afbaf097e8ae9e56ae7255568f0091ddd257a" name="ea-apache24-mod_mpm_worker-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="adb21e9a8d1ddbee7e711e8737cb792f3271190a14bce45026b6f1a9931ba278" name="ea-apache24-mod_mpm_worker-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="3e236f8145a6abf9f1a9bc46dc9a8db1e9e36b33d5f5599a25220306d566f400" name="ea-apache24-mod_mpm_worker-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="8a7f26feec17a8e1d3e9689fb6f09ec4ba1b70d60b3283f2e44d33e93855274c" name="ea-apache24-mod_proxy-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="571d924b2809fdff6016af840517f6ab9edc6885efee2b616afe7efc9012908e" name="ea-apache24-mod_proxy-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="889ed33aba1a01184cbee7378ceae1c992b723efc030dcfc49884109b49a7ff5" name="ea-apache24-mod_proxy-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="b581e3763b1dafc76683b2133c6a81f1ce33f090dac5f392f256c25ad4dfc97f" name="ea-apache24-mod_proxy-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="91d9a09bfcee56eca851045369ffd9d7fa839756e2fdab49ca7a61b2599bf59c" name="ea-apache24-mod_proxy_ajp-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="7b089efceadca9b5881ae63bd0a16fad0594c249d2ec59c9bc51cc3c3f092ba2" name="ea-apache24-mod_proxy_ajp-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="2b2380d83a6791f5419ead19763c938110ff11cc4ca2815edfbacc7517ac0453" name="ea-apache24-mod_proxy_ajp-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="671c15acfa4a95c5f848e2735756267747a8d84915058050aa414f51bddd4b95" name="ea-apache24-mod_proxy_ajp-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="678d83537a788edd26294cc1b13f5bf4cc218341e4c7647a7885bff13cb2113f" name="ea-apache24-mod_proxy_balancer-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="aa0102b414a6a20ad9d3ee83a62f831e4123af2b47685fa580999e683bb744b0" name="ea-apache24-mod_proxy_balancer-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="fc7ef843eb59313570b5c9d3127d28d1b2fafb795d73186f250efcd458602975" name="ea-apache24-mod_proxy_balancer-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="7e2f354704fd34b9097d60f7dd3de42e4b235e877ea2a750ede4ddabfcc01a2e" name="ea-apache24-mod_proxy_balancer-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="bb173f31c921e2af2faac5dae6a4cb440061932d26d473a5393d2afa1c7b2c05" name="ea-apache24-mod_proxy_connect-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="4ad45106ae8d56559355c35268b35af06087e422154e53576fdb982ebfb91a31" name="ea-apache24-mod_proxy_connect-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="6fc2f6ca82c965e792aefd0ebb3296e534b367a6a30d11508432cfd2a23b8cf1" name="ea-apache24-mod_proxy_connect-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="eddc873900e8c01dde56ea00aba6bc8558cd6a23dae45dfc86b19b923ea86f40" name="ea-apache24-mod_proxy_connect-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="9bc4eb65349fa38121268538b7faba1f39f7e0c110c01b5425730bc6a1124f74" name="ea-apache24-mod_proxy_express-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="1cae7521e57856eb5910b3fd528bd25097f89f21fef711412bbb292f8c827a76" name="ea-apache24-mod_proxy_express-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="ec3d61832e749daf679a7804c61b857310dd170356364260de805adea1601a0b" name="ea-apache24-mod_proxy_express-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="8897d3d7d270d3dd7cec439be43a877ee4c79607fa447ba5793c025714dfb590" name="ea-apache24-mod_proxy_express-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="4d6139e15efaa2ea9a8deea6fa59080f364ae256549e6ac98dd76a14ef941760" name="ea-apache24-mod_proxy_fcgi-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="285c941dfa33b4e5d55035e30e00fede41075818cc297d60ca355580b78df69e" name="ea-apache24-mod_proxy_fcgi-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="9c99e4bae35f540f775cde5428cef4aabd54baacb130b3550ad787f3d68bb231" name="ea-apache24-mod_proxy_fcgi-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="4654d5b5f2213494eb1413a50a0a8216caf64eca4ec5dbdfa185fc3cbf4d8538" name="ea-apache24-mod_proxy_fcgi-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="2aa0e184827b8bf7a7873f2f591747724bca2fb3c56779e753d57cace9fd5c25" name="ea-apache24-mod_proxy_fdpass-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="b69fd5a4a05940c0ac94477c16cb44281c4344bacc1aa8fcf1b06d87c648aec1" name="ea-apache24-mod_proxy_fdpass-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="8a058d08b692c97efcde75fbe1583433a8a8721d2b9acf8f74fbf42694e5cefa" name="ea-apache24-mod_proxy_fdpass-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="bec3576d630f5a312c20b5a2d44a278439f926f10537e8e0b7be66c802cd4e0f" name="ea-apache24-mod_proxy_fdpass-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="537a53bb6e53cca15e408d26d1cf8940ccff0557b6b5412d1c26402cff41de45" name="ea-apache24-mod_proxy_ftp-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="84e3abd4369a234ea36a4bf0c0da8984093a105efc76e0d5c5a0c2255f75087e" name="ea-apache24-mod_proxy_ftp-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="30cd610dabe37b77d8f1990ae35b0ac5798cdc81b38240cc875c5efe6f4d8cba" name="ea-apache24-mod_proxy_ftp-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="7315ebae256d9354b75bccd5209396bb6d9ea9a9229116ff6cd7d438ee72cf74" name="ea-apache24-mod_proxy_ftp-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="b1d005f81c49f27f397948ef7726d3a3d5ca410bba758063ed9f2d8510e2dc81" name="ea-apache24-mod_proxy_hcheck-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="778eb14712dba60dd601593fa944b57aa8edb0bd25a1c00768b3ffa18a9adb3e" name="ea-apache24-mod_proxy_hcheck-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="77ebe84aee60e8463e87bc8cc5356e1bbbb2f233fc37351f1ea5040bccdcafb3" name="ea-apache24-mod_proxy_hcheck-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="64afd55e06dea33d98530efa3de5e6db0b47c1e5772321f3e185c627a2de050b" name="ea-apache24-mod_proxy_hcheck-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="48714709a7af9d5aa33ea1f600037aeee68fe76d5c21c9ad720fcc0a03507f50" name="ea-apache24-mod_proxy_html-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="8d31a40426f12cabab4238f3fca203e1b5d60824f1c34132e18f7976a4d36bc2" name="ea-apache24-mod_proxy_html-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="8bde97c656976b07cf7ac5e0870b45cf2721a2d603f28042e06621b5ee2a3e3f" name="ea-apache24-mod_proxy_html-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="fe55049c0e9dc73f1e80507135a62df2dd6334bdb18a299aff1d3b71d0ad486f" name="ea-apache24-mod_proxy_html-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="66597a3a0a4bdb75cbbfeff03050834fb219e306538c79fbf0a63e017a0e53d4" name="ea-apache24-mod_proxy_http-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="acaca9f25a620a710b895c3aa32a5eedbb59aa28c1940269fba3406ab8605178" name="ea-apache24-mod_proxy_http-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="e4273013f0110c7dcabddaf93be40d35db4ca0d5de9b0063ba2d7e4e964bbf71" name="ea-apache24-mod_proxy_http-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="51ac304a8708aafc9ddb571a7f71b7cbe66618a8b3e69fbf7f1f64e32ca489c8" name="ea-apache24-mod_proxy_http-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="94d95a2f1d7fffc429b340f6c48a5e5198ddfcd6109e483e72cea3478e91f230" name="ea-apache24-mod_proxy_scgi-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="306ed11fa648b93165f5fb2baaf3714d7118760cfaba07802bdf4995dd4e5241" name="ea-apache24-mod_proxy_scgi-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="7ec1c3f2e2bd2dcdc514177f3c444e9498183cd159f1a1d4724d00acad0de937" name="ea-apache24-mod_proxy_scgi-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="5847d2a53fc774fa425d4381bb9a909ed9f4dc40ec90cee634270754830fe9f1" name="ea-apache24-mod_proxy_scgi-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="c9b8b221284234c65eb75154fd21a66c5465aa10a9b2ff9f13078ac61c79a263" name="ea-apache24-mod_proxy_uwsgi-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="fdf0f5b72f89f832a097a72d44270110c5199c55d8db18d1fe896b78d3899655" name="ea-apache24-mod_proxy_uwsgi-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="287e84160a02725e45f146f39352a46fc7368612700cb0acd6bada1f84bf3209" name="ea-apache24-mod_proxy_uwsgi-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="9a26c6d8e4d4295f3d2236371d0d822728f828565e1b50c69e6dc014a858b7ee" name="ea-apache24-mod_proxy_uwsgi-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="c712f45bc6e07152b8e9bf642e3c8e30f00b574135fb12c4816d5082b770825e" name="ea-apache24-mod_proxy_wstunnel-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="7f708eb7a49ebf87e32710203d6c66c0d2cf500c88f708bb4b96d7208624ab65" name="ea-apache24-mod_proxy_wstunnel-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="3d635ac932b15bc1aa8f3588731888c34faa0ab8062d3e5ae4ff992d28ff033a" name="ea-apache24-mod_proxy_wstunnel-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="9cacf2f948e2a072299ec78fdea308dd6cdf90750c97dd0c2f0c30c745724c68" name="ea-apache24-mod_proxy_wstunnel-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="97eed525c91e76ffc347fc7f46be8ba2da2aba666013ae6faca0619a07bfce0c" name="ea-apache24-mod_ratelimit-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="a19422b7a19b84f7e9afe39e30eacbdaa3e004cc4828412d3aabbcb446be0fce" name="ea-apache24-mod_ratelimit-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="cafae3a0080ff34e7d2d4e5ff7fc6ce8f32335865e3dec8ab23ddb4300213a06" name="ea-apache24-mod_ratelimit-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="11c60fc5770e81e8844985c3ffd35a21c05629c8e116cd62a50b82316565ec33" name="ea-apache24-mod_ratelimit-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="6838120059cb5303fbb6df64e049fcd56749f18d741787571aa964345c80681e" name="ea-apache24-mod_reflector-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="0fd51d908497498974264a9c21de4d458153b7cfd94f6590e49a219bf82f9af7" name="ea-apache24-mod_reflector-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="f9d7a81b9a158130fbdf7a5ccac511a8eb81f956630b559dc5666c5a690b7efd" name="ea-apache24-mod_reflector-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="fb04ba0d936538c62fc69020b259d6091f016f390141c8be7461c5b46808869b" name="ea-apache24-mod_reflector-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="95610093832f9cd8a36df90dd1d72810efea912b2074359d50e815ea34974f60" name="ea-apache24-mod_remoteip-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="d3aa0357dfb960f425edeb52c3e886230a429a72a87d8c7b597eac88081c5f45" name="ea-apache24-mod_remoteip-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="5a92a88cd3d49d66a2c7aed44e8082b99ca422a55e00c0ba8a923d270facb26a" name="ea-apache24-mod_remoteip-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="1694bf2f430150149268d5c7e069ae496d204798f84d90cfa5b6c114e96815fa" name="ea-apache24-mod_remoteip-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="fb53deec603c736d305f1b89938b861bf4a027092f80dadbb5eccb06eaa54cbe" name="ea-apache24-mod_reqtimeout-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="d4cc098c53f357a25fe4b52c2f733b8658f6d4cf53498cdf4f8823fe040d9a1e" name="ea-apache24-mod_reqtimeout-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="2a01cbd68507a751519eeb4e6d5bfbbe47a9190a710acba3de46f77ab24222d4" name="ea-apache24-mod_reqtimeout-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="e02bedc55364d15553f1536b7bf837f80abffcc24beb2d2ad0db5a0f5da72a92" name="ea-apache24-mod_reqtimeout-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="34b07307fad9c70f8d720fc413d0375182e07827e4c43301aaf3063ab7ea97f2" name="ea-apache24-mod_request-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="e15d05a5519a849b2e5b8b2a5ac603c568d99900883c963071d7b6696d307067" name="ea-apache24-mod_request-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="bee7b23f902030eec4b0e93f60137db0cd60ac12cb9b9630131a7a7fef877072" name="ea-apache24-mod_request-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="5ab066d635f95501b804fa89bed6d4d55d3079e85634465ea4fb25bac230a11f" name="ea-apache24-mod_request-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="280e952d47dde6739d239cde28955536231a176240e2cb2efcf18efb292bf1fe" name="ea-apache24-mod_sed-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="59925976526a0b497d57ab057fbe0fafaea003f510f527823a3d010c5aff0b97" name="ea-apache24-mod_sed-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="eba84e87834b75548424e2c8018da122ff52ca1d1b86a61e92ac472086b02777" name="ea-apache24-mod_sed-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="7e76571150d19e43fa5c4367b77121401590e6117c1a75fb36deafc9128f0b5a" name="ea-apache24-mod_sed-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="41f86027f7e15dd6fc7a79120f1529eab8f5ea6cc35ba6eef8dd90ab3d28074e" name="ea-apache24-mod_session-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="c81f7fc2f6387a7eec7fa2c31eff429970b7b1ed6338f54d8354418eba8fa754" name="ea-apache24-mod_session-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="ea4673f568823427dd5ba2466601917703468eeb9d89b9b91debeac287e28e57" name="ea-apache24-mod_session-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="32176cb541977d653f114c6042a5784b29468c9aa69997f42722bfde700fc3a9" name="ea-apache24-mod_session-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="7fad58f27a502ada03b4ae6e6b7233ac26f698452edc482c0154a71a55593b1f" name="ea-apache24-mod_slotmem_plain-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="45c64f13e32519b3f62d1574a664366baab8eb4926a082bd720177636b36f8ce" name="ea-apache24-mod_slotmem_plain-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="1ff37132dd49fb2c59de8fe1e15c2a5d65943de15187602428d9a2768f016062" name="ea-apache24-mod_slotmem_plain-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="656acd3aad9a97646ecd29ff1e7bd00cdf3652b5d1325254d23eea3ac2117c26" name="ea-apache24-mod_slotmem_plain-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="45a478aa8705ab19b73fb610fed2081152961c3e19e22250d739c39c6201a155" name="ea-apache24-mod_socache_memcache-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="994d725d3faf958a83799b1ef7ed1cc91cdb8967f0065052a410a37328887414" name="ea-apache24-mod_socache_memcache-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="2dcc2a77a8e8613761cdb0547f40949e9bb166d514d5d3819f97219572e039ad" name="ea-apache24-mod_socache_memcache-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="b4db1298447d95bbeeee65707b6ae79a373c0550e0fee1f02c5ed3466933438f" name="ea-apache24-mod_socache_memcache-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="8aa5f4dd796e801f1552b33a0fd318171e47d2db362a2da40797d088a144f10a" name="ea-apache24-mod_socache_redis-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="2f9e9c6f2b1b37bffea454449684a2f18b5bb6af721ddaad7ec00047c9d56bdf" name="ea-apache24-mod_socache_redis-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="275f819493840c440e816b069a69ceed5c679919ec25ad5c337f33f0103a431a" name="ea-apache24-mod_socache_redis-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="e9b1ce7b6ab2797216be9a4c307413c18dc4445287f9f7aad7c5c2462e2e0982" name="ea-apache24-mod_socache_redis-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="6393e6d3930f0ac72a1c9b0f63f3684c3e4da1bfc6c5632cce9fb7d799c41d8e" name="ea-apache24-mod_speling-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="f112becbd3b0474f7913f9045d33e478246c6fad52b076361f02fc4b701c55da" name="ea-apache24-mod_speling-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="2c234b39e6781ed5bca7ef622f0a1e75e65e29fa9d509f67b74da38ca0b54c1f" name="ea-apache24-mod_speling-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="a561a7102067f196b9ff812b199a0ef4ecd632b345ee936ec37663782d6a7c58" name="ea-apache24-mod_speling-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="4243305fbce32ee323b3101067ee6f0a35e63576af4a06b770ef9ba740c7ae65" name="ea-apache24-mod_ssl-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="075e3f269018b44b9094f45cd7bac07b159f5e3318a223dae29dbcc9c99126d5" name="ea-apache24-mod_ssl-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="24bb2f28f700fa5040064b8941954a024bc257be6ce439525f1b98516af80346" name="ea-apache24-mod_ssl-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="8681c421c741a837131725baaaf5beadfefb31e04692b3a2220706cced760f7c" name="ea-apache24-mod_ssl-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="d3b66a108a78186a581346bf6c0756b6e3380dc84e68d0d84ffb1f75fc7b0a3e" name="ea-apache24-mod_substitute-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="7832d274cca908dcaeb4bb911af0f62b32e8cd4cea7c6a2169ac1e9a27c1b775" name="ea-apache24-mod_substitute-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="aec473b9c54f2314cfb40fa8ac4475895a747dbc62646fe29983f8120e78aec9" name="ea-apache24-mod_substitute-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="8d8b57cb297b940350cb73a4a18d12a45bc9fe58a145e348ed2269e06d7ef55f" name="ea-apache24-mod_substitute-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="365b8c9562868f7d925b166cc1e5cd23f307f02702506385770869fdd9023a47" name="ea-apache24-mod_suexec-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="64d7db1aa5aef5596c613ce2d463396bd66c94e5eeabc2c62b19abdccb8192e5" name="ea-apache24-mod_suexec-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="f9bc2d0a3f7c68b6da0d383a459d6c6d044f990592581bc961a4ede34650f4c6" name="ea-apache24-mod_suexec-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="449e8f7df48e11d564be7646fbc341a10f379838ae9c7f1232ef456be8f355d3" name="ea-apache24-mod_suexec-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="b5d33551ce7304b5c7aa2835ff085e8afd6243e6c8e46a2f75243dfe7664796a" name="ea-apache24-mod_suphp-debuginfo" arch="x86_64">
  <version epoch="1" ver="0.7.2" rel="40.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 0.7.2-37" date="1732536000">- ZC-12236: Add PHP 8.4 to /etc/suphp.conf</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 0.7.2-38" date="1754913600">- EA4-96: Remove exec_code_asuser</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 0.7.2-39" date="1762776000">- EA4-186: Add ea-php85 handler</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 0.7.2-40" date="1777032000">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="CloudLinux Packaging Team &lt;packager@cloudlinux.com&gt; - 1:0.7.2-40.cloudlinux" date="1784203200">- Rebuild of cPanel 0.7.2-40 for CloudLinux</changelog>
</package>
<package pkgid="3cdf5287cdec3ca5fdb9849a4b808a5957530757e4fb01def8341d2871e75992" name="ea-apache24-mod_suphp-debugsource" arch="x86_64">
  <version epoch="1" ver="0.7.2" rel="40.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 0.7.2-37" date="1732536000">- ZC-12236: Add PHP 8.4 to /etc/suphp.conf</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 0.7.2-38" date="1754913600">- EA4-96: Remove exec_code_asuser</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 0.7.2-39" date="1762776000">- EA4-186: Add ea-php85 handler</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 0.7.2-40" date="1777032000">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="CloudLinux Packaging Team &lt;packager@cloudlinux.com&gt; - 1:0.7.2-40.cloudlinux" date="1784203200">- Rebuild of cPanel 0.7.2-40 for CloudLinux</changelog>
</package>
<package pkgid="dd6b1514ee5ffff3c3300ea402652a823118d4806e87d9184b25c389a39774be" name="ea-apache24-mod_unique_id-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="e74b21b5f4cb01189984e8afd9d73c0ce45e0faf4382bd123da9370cfcbda792" name="ea-apache24-mod_unique_id-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="ced83edee83b096499802c164a4de9dbec5c24878ad80292962925567d7f6714" name="ea-apache24-mod_unique_id-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="ad88bbe4be64b17a429de248de278154e301546d13c08aee4326bc318167fbc1" name="ea-apache24-mod_unique_id-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="347381e775926e5d0736765182dc0fbc52c2f97dac3289b9240313d254893fea" name="ea-apache24-mod_usertrack-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="79a62687850fc32fec4201e871c6526e46e1cdbe631a94f43de9b083187b95ee" name="ea-apache24-mod_usertrack-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="b6ea95f99aa897bec7459c6be6052580e2ff4629ac4ab6f4968ae52cff4a0731" name="ea-apache24-mod_usertrack-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="223d47366da1376c729541be27feaa37c7f7a1fc6e95a3b81c235549ee48250b" name="ea-apache24-mod_usertrack-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="0e85a36bcfaa7e731d1e57aa3c882bbbb99819b4a78f1f95ea009472bc37d3ea" name="ea-apache24-mod_version-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="da7b68d2fc9d1dcf0a86a8ed9ae6afbe9002a90c68200e8616511d35428cae0e" name="ea-apache24-mod_version-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="7e73cd826059cfd5bdcdb0e64170f437e7285032b37826f9b13c7cf998e70e77" name="ea-apache24-mod_version-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="3a9c3951ea7347b14805fd2529f887972a67836cae3bc93504f815ac22072a3d" name="ea-apache24-mod_version-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="b1447cb0f57ab7c9e44d2aacd0fb254ddd5ba7cab37a1aebf5f82ac219986cf6" name="ea-apache24-mod_vhost_alias-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="34eda23463c1d8d13904744f159d5534ee1d44243de2fe77fac11dc41f0210d7" name="ea-apache24-mod_vhost_alias-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="d0cf7b30a1dec7031567f790efe629e0d78f2f13e80f782e3e2ea410dd4a6739" name="ea-apache24-mod_vhost_alias-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="6af39a40d7209a12133363f40c7cbedddca12dc903f6a69b986012cef80e5430" name="ea-apache24-mod_vhost_alias-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="bb8f5f209591ed2c72963e9e11c38e4236d64db81619e4995a91a682a217f555" name="ea-apache24-mod_watchdog-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="a631bc29728ce0d6546c9c7a3d2b83350e4358e63e8cc31a6ed498b5ac8f9d28" name="ea-apache24-mod_watchdog-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="866abbd6c90d4909a959f3f93dcf862edf26b60048536cf37ea024a50f307002" name="ea-apache24-mod_watchdog-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="3d8e7a5f42cc47ab78869f29305e0ca9653ef92675f5ac197d55087eadff66d8" name="ea-apache24-mod_watchdog-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="eb4ed663b3b4c51391a35156c22a71a59f046798f6084ddaa81afe40354e42de" name="ea-apache24-tools-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="4.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.64-2" date="1752840000">- EA-13040: Revert SNI update to address proxy issues with SNI 421 Redirects</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.64-3" date="1752840001">- EA-13041: Rolling “ea-apache24” back to “35b37d6c7295199c5157c68145f220d9fa61ff02”: Apache v2.4.64 broke SNI (rando 421)</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
</package>
<package pkgid="d942669196d0501e4ba1b63b592a7cf05cad7e5518751c3129d4f85b088b631f" name="ea-apache24-tools-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.66" rel="5.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-1" date="1753272000">- EA-13044: Update ea-apache24 from v2.4.64 to v2.4.65</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-2" date="1754568000">-- EA4-82: Update 421 workaround to 65 in prep for Monday update</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
</package>
<package pkgid="d535627a5878839ddea135b576d73d325d611fec6537974dd466b216bd6061a6" name="ea-apache24-tools-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="1.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 2.4.65-3" date="1754654400">- EA4-90: Update to 65 proper</changelog>
  <changelog author="Julian Brown &lt;julian.brown@webpros.com&gt; - 2.4.65-4" date="1754913600">- EA4-98: Adjust exec_code_asuser</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
</package>
<package pkgid="a78d4d78963278fb128208e2039007c9625ac2fc1d2883379868cf14c64f62d4" name="ea-apache24-tools-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.67" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-1" date="1764849600">- EA-13281: Update ea-apache24 from v2.4.65 to v2.4.66
	- low: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
	- low: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)
	- moderate: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF (CVE-2025-59775)
	- low: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
	- moderate: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-2" date="1765195200">- EA-13281: Backport mod_md v2.6.7 fix for MDStapleOthers regression</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-3" date="1768910400">- EA-13319: Backport mod_http2 v2.0.37 fix for double-free vulnerability (PR 69899)</changelog>
  <changelog author="Jared Wright &lt;jared.wright@webpros.com&gt; - 2.4.66-4" date="1768996800">- CPANEL-46581: Update apachectl to use new whm-server-status-endpoint.</changelog>
  <changelog author="Timur Kalimullin &lt;tkalimullin@cloudlinux.com&gt; - 2.4.66-4.cloudlinux.1" date="1773316800">- MAXWS-999: Add O(1) hash-based vhost name lookup for server/vhost.c</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.66-5" date="1773921600">- EA4-242: Remove exec_code_asuser self-conflict from mod_suexec</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.net&gt; - 2.4.66-5.cloudlinux.1" date="1777291200">- EA4D-819: Use system libxml2 on all OS</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-1" date="1777896000">- EA-13423: Update ea-apache24 from v2.4.66 to v2.4.67
	- important: Apache HTTP Server: http2: double free and possible RCE on early reset (CVE-2026-23918)
	- moderate: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr (CVE-2026-24072)
	- moderate: Apache HTTP Server: mod_auth_digest timing attack (CVE-2026-33006)
	- low: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (CVE-2026-28780)
	- low: Apache HTTP Server: mod_md unrestricted OCSP response (CVE-2026-29168)
	- low: Apache HTTP Server: mod_dav_lock indirect lock crash (CVE-2026-29169)
	- low: Apache HTTP Server: mod_authn_socache crash (CVE-2026-33007)
	- low: Apache HTTP Server: multiple modules HTTP response splitting (CVE-2026-33523)
	- low: Apache HTTP Server: off-by-one OOB reads in AJP getter functions (CVE-2026-33857)
	- low: Apache HTTP Server: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string (CVE-2026-34032)
	- low: Apache HTTP Server: mod_proxy_ajp heap over-read in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Heekyoung Park &lt;heekyoung.park@webpros.com&gt; - 2.4.67-2" date="1777896001">- EA4-260: Build for Ubuntu 26.04</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 2.4.67-1.cloudlinux" date="1777982400">- EA4D-829: Update ea-apache24 from v2.4.66 to v2.4.67</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 2.4.67-3" date="1780488000">- EA-13454: Backport mod_http2 v2.0.41 fix for CVE-2026-49975 (HTTP/2 Bomb - cookie LimitRequestFields bypass)</changelog>
</package>
<package pkgid="1a948f8ec850d76e092871ab137c69e8edc15a0d7afdb91a64d8616aa9ed58b6" name="ea-nginx-debuginfo" arch="x86_64">
  <version epoch="3" ver="1.29.5" rel="2.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 1.29.1-1" date="1755086400">- EA-13069: Update ea-nginx from v1.26.3 to v1.29.1
- CVE-2025-53859: A security issue in ngx_mail_smtp_module,which might allow an attacker to cause buffer over-read</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; alutsiuk &lt;alutsiuk@cloudlinux.com&gt; - 3:1.29.1-1.cloudlinux" date="1758110400">- MAXWS-821: Fixed ea-nginx build after merge of nginx-1.29.1 version
- MAXWS-793: Bump conflict version for max_webserver
- MAXWS-756: Remove lsapi_check_script directive from cpanel-lsapi.conf
- MAXWS-673: Implemented varmatch block based on precompiled action handlers</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 3:1.29.1-1.cloudlinux.1" date="1758542400">- MAXWS-821: Evaluate varmatch block for access directives in the access phase
- MAXWS-828: Added return and return_status_code directives support in varmatch block
- MAXWS-849: Added remove_type directive support in nginx
- MAXWS-851: Normalize varmatch regex with base= to match filenames
- MAXWS-828: Fixed error_page usage in varmatch if defined in global context
- MAXWS-861: Fixed regex normalization and matching under varmatch subdirs
- MAXWS-889: Re-evaluate varmatch rules against the resolved index file URI</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.3-1" date="1761652800">- EA-13235: Update ea-nginx from v1.29.1 to v1.29.3</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.3-2" date="1762257600">- EA-13235: Fix ngxdev tarball filename to match what nginx module packages expect</changelog>
  <changelog author="Brian Mendoza &lt;brian.mendoza@webpros.com&gt; - 1.29.3-3" date="1762430400">- CPANEL-50009: Add wp and wp2 service subdomains for wp2 servers</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.4-1" date="1765281600">- EA-13286: Update ea-nginx from v1.29.3 to v1.29.4</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1.29.4-1.cloudlinux.1" date="1765368000">- EA-726: Build for EA10</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 1.29.4-2" date="1765454400">- CPANEL-50596: Add support for lsapi to nginx standalone</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.5-1" date="1770206400">- EA-13333: Update ea-nginx from v1.29.4 to v1.29.5
- Security: an attacker might inject plain text data in the response from an SSL backend (CVE-2026-1642).</changelog>
  <changelog author="Gary Stanley &lt;gary.stanley@webpros.com&gt; - 1.29.5-2" date="1772452800">- EA4-250: Fix ea-nginx bug when PHP is not installed</changelog>
</package>
<package pkgid="c42685629bc62050d44f46d3f3004a7d769a47b941a76eb399b2c6db11a45813" name="ea-nginx-debuginfo" arch="x86_64">
  <version epoch="3" ver="1.29.6" rel="1.el9.cloudlinux"/>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; alutsiuk &lt;alutsiuk@cloudlinux.com&gt; - 3:1.29.1-1.cloudlinux" date="1758110400">- MAXWS-821: Fixed ea-nginx build after merge of nginx-1.29.1 version
- MAXWS-793: Bump conflict version for max_webserver
- MAXWS-756: Remove lsapi_check_script directive from cpanel-lsapi.conf
- MAXWS-673: Implemented varmatch block based on precompiled action handlers</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 3:1.29.1-1.cloudlinux.1" date="1758542400">- MAXWS-821: Evaluate varmatch block for access directives in the access phase
- MAXWS-828: Added return and return_status_code directives support in varmatch block
- MAXWS-849: Added remove_type directive support in nginx
- MAXWS-851: Normalize varmatch regex with base= to match filenames
- MAXWS-828: Fixed error_page usage in varmatch if defined in global context
- MAXWS-861: Fixed regex normalization and matching under varmatch subdirs
- MAXWS-889: Re-evaluate varmatch rules against the resolved index file URI</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.3-1" date="1761652800">- EA-13235: Update ea-nginx from v1.29.1 to v1.29.3</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.3-2" date="1762257600">- EA-13235: Fix ngxdev tarball filename to match what nginx module packages expect</changelog>
  <changelog author="Brian Mendoza &lt;brian.mendoza@webpros.com&gt; - 1.29.3-3" date="1762430400">- CPANEL-50009: Add wp and wp2 service subdomains for wp2 servers</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.4-1" date="1765281600">- EA-13286: Update ea-nginx from v1.29.3 to v1.29.4</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1.29.4-1.cloudlinux.1" date="1765368000">- EA-726: Build for EA10</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 1.29.4-2" date="1765454400">- CPANEL-50596: Add support for lsapi to nginx standalone</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.5-1" date="1770206400">- EA-13333: Update ea-nginx from v1.29.4 to v1.29.5
- Security: an attacker might inject plain text data in the response from an SSL backend (CVE-2026-1642).</changelog>
  <changelog author="Gary Stanley &lt;gary.stanley@webpros.com&gt; - 1.29.5-2" date="1772452800">- EA4-250: Fix ea-nginx bug when PHP is not installed</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.6-1" date="1773144000">- EA-13369: Update ea-nginx from v1.29.5 to v1.29.6</changelog>
</package>
<package pkgid="caf8f059da91ee12c58139fce3dee90b8eab387c96b3abf29dc852b00c8b57c9" name="ea-nginx-debuginfo" arch="x86_64">
  <version epoch="3" ver="1.29.7" rel="2.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.3-1" date="1761652800">- EA-13235: Update ea-nginx from v1.29.1 to v1.29.3</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.3-2" date="1762257600">- EA-13235: Fix ngxdev tarball filename to match what nginx module packages expect</changelog>
  <changelog author="Brian Mendoza &lt;brian.mendoza@webpros.com&gt; - 1.29.3-3" date="1762430400">- CPANEL-50009: Add wp and wp2 service subdomains for wp2 servers</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.4-1" date="1765281600">- EA-13286: Update ea-nginx from v1.29.3 to v1.29.4</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1.29.4-1.cloudlinux.1" date="1765368000">- EA-726: Build for EA10</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 1.29.4-2" date="1765454400">- CPANEL-50596: Add support for lsapi to nginx standalone</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.5-1" date="1770206400">- EA-13333: Update ea-nginx from v1.29.4 to v1.29.5
- Security: an attacker might inject plain text data in the response from an SSL backend (CVE-2026-1642).</changelog>
  <changelog author="Gary Stanley &lt;gary.stanley@webpros.com&gt; - 1.29.5-2" date="1772452800">- EA4-250: Fix ea-nginx bug when PHP is not installed</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.6-1" date="1773144000">- EA-13369: Update ea-nginx from v1.29.5 to v1.29.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.7-1" date="1774353600">- EA-13381: Update ea-nginx from v1.29.6 to v1.29.7</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.7-2" date="1774958400">- EA4-257: Explicitly set proxy_http_version 1.0 to avoid 421 Misdirected Request</changelog>
</package>
<package pkgid="239667b3aa25ccfd75f8a34a0e66fd9ca474b7988d82a10fa3e790ff47827ef9" name="ea-nginx-debuginfo" arch="x86_64">
  <version epoch="3" ver="1.29.8" rel="1.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.3-2" date="1762257600">- EA-13235: Fix ngxdev tarball filename to match what nginx module packages expect</changelog>
  <changelog author="Brian Mendoza &lt;brian.mendoza@webpros.com&gt; - 1.29.3-3" date="1762430400">- CPANEL-50009: Add wp and wp2 service subdomains for wp2 servers</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.4-1" date="1765281600">- EA-13286: Update ea-nginx from v1.29.3 to v1.29.4</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1.29.4-1.cloudlinux.1" date="1765368000">- EA-726: Build for EA10</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 1.29.4-2" date="1765454400">- CPANEL-50596: Add support for lsapi to nginx standalone</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.5-1" date="1770206400">- EA-13333: Update ea-nginx from v1.29.4 to v1.29.5
- Security: an attacker might inject plain text data in the response from an SSL backend (CVE-2026-1642).</changelog>
  <changelog author="Gary Stanley &lt;gary.stanley@webpros.com&gt; - 1.29.5-2" date="1772452800">- EA4-250: Fix ea-nginx bug when PHP is not installed</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.6-1" date="1773144000">- EA-13369: Update ea-nginx from v1.29.5 to v1.29.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.7-1" date="1774353600">- EA-13381: Update ea-nginx from v1.29.6 to v1.29.7
- Security: buffer overflow in COPY or MOVE request handling with "alias" directive (CVE-2026-27654).
- Security: processing of a specially crafted MP4 file by ngx_http_mp4_module on 32-bit platforms might cause a worker process crash (CVE-2026-27784).
- Security: processing of a specially crafted MP4 file by ngx_http_mp4_module might cause a worker process crash (CVE-2026-32647).
- Security: segmentation fault in worker process with CRAM-MD5 or APOP authentication when retry enabled (CVE-2026-27651).
- Security: PTR DNS record injection in auth_http requests and XCLIENT command (CVE-2026-28753).
- Security: SSL handshake succeeds despite OCSP rejecting client certificate in stream module (CVE-2026-28755).</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.7-2" date="1774958400">- EA4-257: Explicitly set proxy_http_version 1.0 to avoid 421 Misdirected Request</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 1.29.8-1" date="1775649600">- EA-13402: Update ea-nginx from v1.29.7 to v1.29.8</changelog>
</package>
<package pkgid="0066e0aaaee2a9b78d7a0e9b87f0eb5baeb429ed743bdf4709bcef782e754cb0" name="ea-nginx-debuginfo" arch="x86_64">
  <version epoch="3" ver="1.30.0" rel="1.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.4-1" date="1765281600">- EA-13286: Update ea-nginx from v1.29.3 to v1.29.4</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1.29.4-1.cloudlinux.1" date="1765368000">- EA-726: Build for EA10</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 1.29.4-2" date="1765454400">- CPANEL-50596: Add support for lsapi to nginx standalone</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.5-1" date="1770206400">- EA-13333: Update ea-nginx from v1.29.4 to v1.29.5
- Security: an attacker might inject plain text data in the response from an SSL backend (CVE-2026-1642).</changelog>
  <changelog author="Gary Stanley &lt;gary.stanley@webpros.com&gt; - 1.29.5-2" date="1772452800">- EA4-250: Fix ea-nginx bug when PHP is not installed</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.6-1" date="1773144000">- EA-13369: Update ea-nginx from v1.29.5 to v1.29.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.7-1" date="1774353600">- EA-13381: Update ea-nginx from v1.29.6 to v1.29.7
- Security: buffer overflow in COPY or MOVE request handling with "alias" directive (CVE-2026-27654).
- Security: processing of a specially crafted MP4 file by ngx_http_mp4_module on 32-bit platforms might cause a worker process crash (CVE-2026-27784).
- Security: processing of a specially crafted MP4 file by ngx_http_mp4_module might cause a worker process crash (CVE-2026-32647).
- Security: segmentation fault in worker process with CRAM-MD5 or APOP authentication when retry enabled (CVE-2026-27651).
- Security: PTR DNS record injection in auth_http requests and XCLIENT command (CVE-2026-28753).
- Security: SSL handshake succeeds despite OCSP rejecting client certificate in stream module (CVE-2026-28755).</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.7-2" date="1774958400">- EA4-257: Explicitly set proxy_http_version 1.0 to avoid 421 Misdirected Request</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 1.29.8-1" date="1775649600">- EA-13402: Update ea-nginx from v1.29.7 to v1.29.8</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.30.0-1" date="1776340800">- EA-13411: Update ea-nginx from v1.29.8 to v1.30.0</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 1.30.0-1.cloudlinux.1" date="1776859200">- EA-13411: Fix Version to use main_version macro</changelog>
</package>
<package pkgid="5bda1c48ea9c877ba2d5a68b4870ac26bcb91a4905d9e2a0ed11f5fdaec51064" name="ea-nginx-debuginfo" arch="x86_64">
  <version epoch="3" ver="1.31.0" rel="1.el9.cloudlinux"/>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1.29.4-1.cloudlinux.1" date="1765368000">- EA-726: Build for EA10</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 1.29.4-2" date="1765454400">- CPANEL-50596: Add support for lsapi to nginx standalone</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.5-1" date="1770206400">- EA-13333: Update ea-nginx from v1.29.4 to v1.29.5
- Security: an attacker might inject plain text data in the response from an SSL backend (CVE-2026-1642).</changelog>
  <changelog author="Gary Stanley &lt;gary.stanley@webpros.com&gt; - 1.29.5-2" date="1772452800">- EA4-250: Fix ea-nginx bug when PHP is not installed</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.6-1" date="1773144000">- EA-13369: Update ea-nginx from v1.29.5 to v1.29.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.7-1" date="1774353600">- EA-13381: Update ea-nginx from v1.29.6 to v1.29.7
- Security: buffer overflow in COPY or MOVE request handling with "alias" directive (CVE-2026-27654).
- Security: processing of a specially crafted MP4 file by ngx_http_mp4_module on 32-bit platforms might cause a worker process crash (CVE-2026-27784).
- Security: processing of a specially crafted MP4 file by ngx_http_mp4_module might cause a worker process crash (CVE-2026-32647).
- Security: segmentation fault in worker process with CRAM-MD5 or APOP authentication when retry enabled (CVE-2026-27651).
- Security: PTR DNS record injection in auth_http requests and XCLIENT command (CVE-2026-28753).
- Security: SSL handshake succeeds despite OCSP rejecting client certificate in stream module (CVE-2026-28755).</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.7-2" date="1774958400">- EA4-257: Explicitly set proxy_http_version 1.0 to avoid 421 Misdirected Request</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 1.29.8-1" date="1775649600">- EA-13402: Update ea-nginx from v1.29.7 to v1.29.8</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.30.0-1" date="1776340800">- EA-13411: Update ea-nginx from v1.29.8 to v1.30.0</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 1.30.0-1.cloudlinux.1" date="1776859200">- EA-13411: Fix Version to use main_version macro</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.31.0-1" date="1778673600">- EA-13436: Update ea-nginx from v1.30.0 to v1.31.0
- Security: heap buffer overflow in ngx_http_rewrite_module (CVE-2026-42945).</changelog>
</package>
<package pkgid="18a02f96646d8aaf7546ea5ad2d496f37bb8aafb0127f6b2e502a7dba4ef5c7e" name="ea-nginx-debuginfo" arch="x86_64">
  <version epoch="3" ver="1.31.1" rel="1.el9.cloudlinux"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 1.29.4-2" date="1765454400">- CPANEL-50596: Add support for lsapi to nginx standalone</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.5-1" date="1770206400">- EA-13333: Update ea-nginx from v1.29.4 to v1.29.5
- Security: an attacker might inject plain text data in the response from an SSL backend (CVE-2026-1642).</changelog>
  <changelog author="Gary Stanley &lt;gary.stanley@webpros.com&gt; - 1.29.5-2" date="1772452800">- EA4-250: Fix ea-nginx bug when PHP is not installed</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.6-1" date="1773144000">- EA-13369: Update ea-nginx from v1.29.5 to v1.29.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.7-1" date="1774353600">- EA-13381: Update ea-nginx from v1.29.6 to v1.29.7
- Security: buffer overflow in COPY or MOVE request handling with "alias" directive (CVE-2026-27654).
- Security: processing of a specially crafted MP4 file by ngx_http_mp4_module on 32-bit platforms might cause a worker process crash (CVE-2026-27784).
- Security: processing of a specially crafted MP4 file by ngx_http_mp4_module might cause a worker process crash (CVE-2026-32647).
- Security: segmentation fault in worker process with CRAM-MD5 or APOP authentication when retry enabled (CVE-2026-27651).
- Security: PTR DNS record injection in auth_http requests and XCLIENT command (CVE-2026-28753).
- Security: SSL handshake succeeds despite OCSP rejecting client certificate in stream module (CVE-2026-28755).</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.7-2" date="1774958400">- EA4-257: Explicitly set proxy_http_version 1.0 to avoid 421 Misdirected Request</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 1.29.8-1" date="1775649600">- EA-13402: Update ea-nginx from v1.29.7 to v1.29.8</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.30.0-1" date="1776340800">- EA-13411: Update ea-nginx from v1.29.8 to v1.30.0</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 1.30.0-1.cloudlinux.1" date="1776859200">- EA-13411: Fix Version to use main_version macro</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.31.0-1" date="1778673600">- EA-13436: Update ea-nginx from v1.30.0 to v1.31.0
- Security: heap buffer overflow in ngx_http_rewrite_module (CVE-2026-42945).</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.31.1-1" date="1779451200">- EA-13448: Update ea-nginx from v1.31.0 to v1.31.1
- Security: remote code execution via worker process memory pool handling (CVE-2026-9256).</changelog>
</package>
<package pkgid="f91d2d42f09ae846031d7e13a9ef0d5fdd237650f149486e787f5cd358e93ead" name="ea-nginx-debuginfo" arch="x86_64">
  <version epoch="3" ver="1.31.2" rel="2.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.5-1" date="1770206400">- EA-13333: Update ea-nginx from v1.29.4 to v1.29.5
- Security: an attacker might inject plain text data in the response from an SSL backend (CVE-2026-1642).</changelog>
  <changelog author="Gary Stanley &lt;gary.stanley@webpros.com&gt; - 1.29.5-2" date="1772452800">- EA4-250: Fix ea-nginx bug when PHP is not installed</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.6-1" date="1773144000">- EA-13369: Update ea-nginx from v1.29.5 to v1.29.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.7-1" date="1774353600">- EA-13381: Update ea-nginx from v1.29.6 to v1.29.7
- Security: buffer overflow in COPY or MOVE request handling with "alias" directive (CVE-2026-27654).
- Security: processing of a specially crafted MP4 file by ngx_http_mp4_module on 32-bit platforms might cause a worker process crash (CVE-2026-27784).
- Security: processing of a specially crafted MP4 file by ngx_http_mp4_module might cause a worker process crash (CVE-2026-32647).
- Security: segmentation fault in worker process with CRAM-MD5 or APOP authentication when retry enabled (CVE-2026-27651).
- Security: PTR DNS record injection in auth_http requests and XCLIENT command (CVE-2026-28753).
- Security: SSL handshake succeeds despite OCSP rejecting client certificate in stream module (CVE-2026-28755).</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.7-2" date="1774958400">- EA4-257: Explicitly set proxy_http_version 1.0 to avoid 421 Misdirected Request</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 1.29.8-1" date="1775649600">- EA-13402: Update ea-nginx from v1.29.7 to v1.29.8</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.30.0-1" date="1776340800">- EA-13411: Update ea-nginx from v1.29.8 to v1.30.0</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 1.30.0-1.cloudlinux.1" date="1776859200">- EA-13411: Fix Version to use main_version macro</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.31.0-1" date="1778673600">- EA-13436: Update ea-nginx from v1.30.0 to v1.31.0
- Security: heap buffer overflow in ngx_http_rewrite_module (CVE-2026-42945).</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.31.1-1" date="1779451200">- EA-13448: Update ea-nginx from v1.31.0 to v1.31.1
- Security: remote code execution via worker process memory pool handling (CVE-2026-9256).</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.31.2-2" date="1781697600">- EA-13466: Update ea-nginx from v1.31.1 to v1.31.2 (CVE-2026-42055, CVE-2026-48142)</changelog>
</package>
<package pkgid="c3dbc39ce2c3d3f687212bd2398fab86a1df8346c4a16e39eac182bcc49bcb79" name="ea-nginx-debuginfo" arch="x86_64">
  <version epoch="3" ver="1.31.3" rel="1.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.6-1" date="1773144000">- EA-13369: Update ea-nginx from v1.29.5 to v1.29.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.7-1" date="1774353600">- EA-13381: Update ea-nginx from v1.29.6 to v1.29.7
- Security: buffer overflow in COPY or MOVE request handling with "alias" directive (CVE-2026-27654).
- Security: processing of a specially crafted MP4 file by ngx_http_mp4_module on 32-bit platforms might cause a worker process crash (CVE-2026-27784).
- Security: processing of a specially crafted MP4 file by ngx_http_mp4_module might cause a worker process crash (CVE-2026-32647).
- Security: segmentation fault in worker process with CRAM-MD5 or APOP authentication when retry enabled (CVE-2026-27651).
- Security: PTR DNS record injection in auth_http requests and XCLIENT command (CVE-2026-28753).
- Security: SSL handshake succeeds despite OCSP rejecting client certificate in stream module (CVE-2026-28755).</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.7-2" date="1774958400">- EA4-257: Explicitly set proxy_http_version 1.0 to avoid 421 Misdirected Request</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 1.29.8-1" date="1775649600">- EA-13402: Update ea-nginx from v1.29.7 to v1.29.8</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.30.0-1" date="1776340800">- EA-13411: Update ea-nginx from v1.29.8 to v1.30.0</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 1.30.0-1.cloudlinux.1" date="1776859200">- EA-13411: Fix Version to use main_version macro</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.31.0-1" date="1778673600">- EA-13436: Update ea-nginx from v1.30.0 to v1.31.0
- Security: heap buffer overflow in ngx_http_rewrite_module (CVE-2026-42945).</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.31.1-1" date="1779451200">- EA-13448: Update ea-nginx from v1.31.0 to v1.31.1
- Security: remote code execution via worker process memory pool handling (CVE-2026-9256).</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.31.2-2" date="1781697600">- EA-13466: Update ea-nginx from v1.31.1 to v1.31.2 (CVE-2026-42055, CVE-2026-48142)</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 1.31.3-1" date="1784203200">- EA-13503: Update ea-nginx from v1.31.2 to v1.31.3
- Security: heap buffer overflow when using map with regex, potentially allowing remote code execution or worker process denial of service via a crafted HTTP request (CVE-2026-42533).
- Security: memory disclosure when using the ngx_http_slice_module (CVE-2026-60005).
- Security: use-after-free when using the ngx_http_ssi_module (CVE-2026-56434).</changelog>
  <changelog author="CloudLinux Packaging Team &lt;packager@cloudlinux.com&gt; - 3:1.31.3-1.cloudlinux" date="1784289600">- Rebuild of cPanel 1.31.3-1 for CloudLinux</changelog>
</package>
<package pkgid="5d635236d47ce189446a48b6cb0dfbe4872c67736f9e361039c3d82e2cf8c04e" name="ea-nginx-debugsource" arch="x86_64">
  <version epoch="3" ver="1.29.5" rel="2.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 1.29.1-1" date="1755086400">- EA-13069: Update ea-nginx from v1.26.3 to v1.29.1
- CVE-2025-53859: A security issue in ngx_mail_smtp_module,which might allow an attacker to cause buffer over-read</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; alutsiuk &lt;alutsiuk@cloudlinux.com&gt; - 3:1.29.1-1.cloudlinux" date="1758110400">- MAXWS-821: Fixed ea-nginx build after merge of nginx-1.29.1 version
- MAXWS-793: Bump conflict version for max_webserver
- MAXWS-756: Remove lsapi_check_script directive from cpanel-lsapi.conf
- MAXWS-673: Implemented varmatch block based on precompiled action handlers</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 3:1.29.1-1.cloudlinux.1" date="1758542400">- MAXWS-821: Evaluate varmatch block for access directives in the access phase
- MAXWS-828: Added return and return_status_code directives support in varmatch block
- MAXWS-849: Added remove_type directive support in nginx
- MAXWS-851: Normalize varmatch regex with base= to match filenames
- MAXWS-828: Fixed error_page usage in varmatch if defined in global context
- MAXWS-861: Fixed regex normalization and matching under varmatch subdirs
- MAXWS-889: Re-evaluate varmatch rules against the resolved index file URI</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.3-1" date="1761652800">- EA-13235: Update ea-nginx from v1.29.1 to v1.29.3</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.3-2" date="1762257600">- EA-13235: Fix ngxdev tarball filename to match what nginx module packages expect</changelog>
  <changelog author="Brian Mendoza &lt;brian.mendoza@webpros.com&gt; - 1.29.3-3" date="1762430400">- CPANEL-50009: Add wp and wp2 service subdomains for wp2 servers</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.4-1" date="1765281600">- EA-13286: Update ea-nginx from v1.29.3 to v1.29.4</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1.29.4-1.cloudlinux.1" date="1765368000">- EA-726: Build for EA10</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 1.29.4-2" date="1765454400">- CPANEL-50596: Add support for lsapi to nginx standalone</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.5-1" date="1770206400">- EA-13333: Update ea-nginx from v1.29.4 to v1.29.5
- Security: an attacker might inject plain text data in the response from an SSL backend (CVE-2026-1642).</changelog>
  <changelog author="Gary Stanley &lt;gary.stanley@webpros.com&gt; - 1.29.5-2" date="1772452800">- EA4-250: Fix ea-nginx bug when PHP is not installed</changelog>
</package>
<package pkgid="b892342107dbf1e8d4cc693a74e299a523ff69737240db452cd0b0f85de84e96" name="ea-nginx-debugsource" arch="x86_64">
  <version epoch="3" ver="1.29.6" rel="1.el9.cloudlinux"/>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; alutsiuk &lt;alutsiuk@cloudlinux.com&gt; - 3:1.29.1-1.cloudlinux" date="1758110400">- MAXWS-821: Fixed ea-nginx build after merge of nginx-1.29.1 version
- MAXWS-793: Bump conflict version for max_webserver
- MAXWS-756: Remove lsapi_check_script directive from cpanel-lsapi.conf
- MAXWS-673: Implemented varmatch block based on precompiled action handlers</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 3:1.29.1-1.cloudlinux.1" date="1758542400">- MAXWS-821: Evaluate varmatch block for access directives in the access phase
- MAXWS-828: Added return and return_status_code directives support in varmatch block
- MAXWS-849: Added remove_type directive support in nginx
- MAXWS-851: Normalize varmatch regex with base= to match filenames
- MAXWS-828: Fixed error_page usage in varmatch if defined in global context
- MAXWS-861: Fixed regex normalization and matching under varmatch subdirs
- MAXWS-889: Re-evaluate varmatch rules against the resolved index file URI</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.3-1" date="1761652800">- EA-13235: Update ea-nginx from v1.29.1 to v1.29.3</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.3-2" date="1762257600">- EA-13235: Fix ngxdev tarball filename to match what nginx module packages expect</changelog>
  <changelog author="Brian Mendoza &lt;brian.mendoza@webpros.com&gt; - 1.29.3-3" date="1762430400">- CPANEL-50009: Add wp and wp2 service subdomains for wp2 servers</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.4-1" date="1765281600">- EA-13286: Update ea-nginx from v1.29.3 to v1.29.4</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1.29.4-1.cloudlinux.1" date="1765368000">- EA-726: Build for EA10</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 1.29.4-2" date="1765454400">- CPANEL-50596: Add support for lsapi to nginx standalone</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.5-1" date="1770206400">- EA-13333: Update ea-nginx from v1.29.4 to v1.29.5
- Security: an attacker might inject plain text data in the response from an SSL backend (CVE-2026-1642).</changelog>
  <changelog author="Gary Stanley &lt;gary.stanley@webpros.com&gt; - 1.29.5-2" date="1772452800">- EA4-250: Fix ea-nginx bug when PHP is not installed</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.6-1" date="1773144000">- EA-13369: Update ea-nginx from v1.29.5 to v1.29.6</changelog>
</package>
<package pkgid="d91ca4e8579fed59725d6691614673fca5642383ad61d093c9f70bb4c0e46e32" name="ea-nginx-debugsource" arch="x86_64">
  <version epoch="3" ver="1.29.7" rel="2.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.3-1" date="1761652800">- EA-13235: Update ea-nginx from v1.29.1 to v1.29.3</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.3-2" date="1762257600">- EA-13235: Fix ngxdev tarball filename to match what nginx module packages expect</changelog>
  <changelog author="Brian Mendoza &lt;brian.mendoza@webpros.com&gt; - 1.29.3-3" date="1762430400">- CPANEL-50009: Add wp and wp2 service subdomains for wp2 servers</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.4-1" date="1765281600">- EA-13286: Update ea-nginx from v1.29.3 to v1.29.4</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1.29.4-1.cloudlinux.1" date="1765368000">- EA-726: Build for EA10</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 1.29.4-2" date="1765454400">- CPANEL-50596: Add support for lsapi to nginx standalone</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.5-1" date="1770206400">- EA-13333: Update ea-nginx from v1.29.4 to v1.29.5
- Security: an attacker might inject plain text data in the response from an SSL backend (CVE-2026-1642).</changelog>
  <changelog author="Gary Stanley &lt;gary.stanley@webpros.com&gt; - 1.29.5-2" date="1772452800">- EA4-250: Fix ea-nginx bug when PHP is not installed</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.6-1" date="1773144000">- EA-13369: Update ea-nginx from v1.29.5 to v1.29.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.7-1" date="1774353600">- EA-13381: Update ea-nginx from v1.29.6 to v1.29.7</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.7-2" date="1774958400">- EA4-257: Explicitly set proxy_http_version 1.0 to avoid 421 Misdirected Request</changelog>
</package>
<package pkgid="7d1bfd6f7d304febcd448d37a166cbc2749352c73af8d8863131ba304ca30875" name="ea-nginx-debugsource" arch="x86_64">
  <version epoch="3" ver="1.29.8" rel="1.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.3-2" date="1762257600">- EA-13235: Fix ngxdev tarball filename to match what nginx module packages expect</changelog>
  <changelog author="Brian Mendoza &lt;brian.mendoza@webpros.com&gt; - 1.29.3-3" date="1762430400">- CPANEL-50009: Add wp and wp2 service subdomains for wp2 servers</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.4-1" date="1765281600">- EA-13286: Update ea-nginx from v1.29.3 to v1.29.4</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1.29.4-1.cloudlinux.1" date="1765368000">- EA-726: Build for EA10</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 1.29.4-2" date="1765454400">- CPANEL-50596: Add support for lsapi to nginx standalone</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.5-1" date="1770206400">- EA-13333: Update ea-nginx from v1.29.4 to v1.29.5
- Security: an attacker might inject plain text data in the response from an SSL backend (CVE-2026-1642).</changelog>
  <changelog author="Gary Stanley &lt;gary.stanley@webpros.com&gt; - 1.29.5-2" date="1772452800">- EA4-250: Fix ea-nginx bug when PHP is not installed</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.6-1" date="1773144000">- EA-13369: Update ea-nginx from v1.29.5 to v1.29.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.7-1" date="1774353600">- EA-13381: Update ea-nginx from v1.29.6 to v1.29.7
- Security: buffer overflow in COPY or MOVE request handling with "alias" directive (CVE-2026-27654).
- Security: processing of a specially crafted MP4 file by ngx_http_mp4_module on 32-bit platforms might cause a worker process crash (CVE-2026-27784).
- Security: processing of a specially crafted MP4 file by ngx_http_mp4_module might cause a worker process crash (CVE-2026-32647).
- Security: segmentation fault in worker process with CRAM-MD5 or APOP authentication when retry enabled (CVE-2026-27651).
- Security: PTR DNS record injection in auth_http requests and XCLIENT command (CVE-2026-28753).
- Security: SSL handshake succeeds despite OCSP rejecting client certificate in stream module (CVE-2026-28755).</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.7-2" date="1774958400">- EA4-257: Explicitly set proxy_http_version 1.0 to avoid 421 Misdirected Request</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 1.29.8-1" date="1775649600">- EA-13402: Update ea-nginx from v1.29.7 to v1.29.8</changelog>
</package>
<package pkgid="566ef013edd64a6b2217e96e1b577dfb7cabd366c07ff15bb97c145bcc856508" name="ea-nginx-debugsource" arch="x86_64">
  <version epoch="3" ver="1.30.0" rel="1.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.4-1" date="1765281600">- EA-13286: Update ea-nginx from v1.29.3 to v1.29.4</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1.29.4-1.cloudlinux.1" date="1765368000">- EA-726: Build for EA10</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 1.29.4-2" date="1765454400">- CPANEL-50596: Add support for lsapi to nginx standalone</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.5-1" date="1770206400">- EA-13333: Update ea-nginx from v1.29.4 to v1.29.5
- Security: an attacker might inject plain text data in the response from an SSL backend (CVE-2026-1642).</changelog>
  <changelog author="Gary Stanley &lt;gary.stanley@webpros.com&gt; - 1.29.5-2" date="1772452800">- EA4-250: Fix ea-nginx bug when PHP is not installed</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.6-1" date="1773144000">- EA-13369: Update ea-nginx from v1.29.5 to v1.29.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.7-1" date="1774353600">- EA-13381: Update ea-nginx from v1.29.6 to v1.29.7
- Security: buffer overflow in COPY or MOVE request handling with "alias" directive (CVE-2026-27654).
- Security: processing of a specially crafted MP4 file by ngx_http_mp4_module on 32-bit platforms might cause a worker process crash (CVE-2026-27784).
- Security: processing of a specially crafted MP4 file by ngx_http_mp4_module might cause a worker process crash (CVE-2026-32647).
- Security: segmentation fault in worker process with CRAM-MD5 or APOP authentication when retry enabled (CVE-2026-27651).
- Security: PTR DNS record injection in auth_http requests and XCLIENT command (CVE-2026-28753).
- Security: SSL handshake succeeds despite OCSP rejecting client certificate in stream module (CVE-2026-28755).</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.7-2" date="1774958400">- EA4-257: Explicitly set proxy_http_version 1.0 to avoid 421 Misdirected Request</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 1.29.8-1" date="1775649600">- EA-13402: Update ea-nginx from v1.29.7 to v1.29.8</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.30.0-1" date="1776340800">- EA-13411: Update ea-nginx from v1.29.8 to v1.30.0</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 1.30.0-1.cloudlinux.1" date="1776859200">- EA-13411: Fix Version to use main_version macro</changelog>
</package>
<package pkgid="5575c7e3b7d86557334ca6968a34e4b7f3913bc8c2f78c528f436865e8002d34" name="ea-nginx-debugsource" arch="x86_64">
  <version epoch="3" ver="1.31.0" rel="1.el9.cloudlinux"/>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1.29.4-1.cloudlinux.1" date="1765368000">- EA-726: Build for EA10</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 1.29.4-2" date="1765454400">- CPANEL-50596: Add support for lsapi to nginx standalone</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.5-1" date="1770206400">- EA-13333: Update ea-nginx from v1.29.4 to v1.29.5
- Security: an attacker might inject plain text data in the response from an SSL backend (CVE-2026-1642).</changelog>
  <changelog author="Gary Stanley &lt;gary.stanley@webpros.com&gt; - 1.29.5-2" date="1772452800">- EA4-250: Fix ea-nginx bug when PHP is not installed</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.6-1" date="1773144000">- EA-13369: Update ea-nginx from v1.29.5 to v1.29.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.7-1" date="1774353600">- EA-13381: Update ea-nginx from v1.29.6 to v1.29.7
- Security: buffer overflow in COPY or MOVE request handling with "alias" directive (CVE-2026-27654).
- Security: processing of a specially crafted MP4 file by ngx_http_mp4_module on 32-bit platforms might cause a worker process crash (CVE-2026-27784).
- Security: processing of a specially crafted MP4 file by ngx_http_mp4_module might cause a worker process crash (CVE-2026-32647).
- Security: segmentation fault in worker process with CRAM-MD5 or APOP authentication when retry enabled (CVE-2026-27651).
- Security: PTR DNS record injection in auth_http requests and XCLIENT command (CVE-2026-28753).
- Security: SSL handshake succeeds despite OCSP rejecting client certificate in stream module (CVE-2026-28755).</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.7-2" date="1774958400">- EA4-257: Explicitly set proxy_http_version 1.0 to avoid 421 Misdirected Request</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 1.29.8-1" date="1775649600">- EA-13402: Update ea-nginx from v1.29.7 to v1.29.8</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.30.0-1" date="1776340800">- EA-13411: Update ea-nginx from v1.29.8 to v1.30.0</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 1.30.0-1.cloudlinux.1" date="1776859200">- EA-13411: Fix Version to use main_version macro</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.31.0-1" date="1778673600">- EA-13436: Update ea-nginx from v1.30.0 to v1.31.0
- Security: heap buffer overflow in ngx_http_rewrite_module (CVE-2026-42945).</changelog>
</package>
<package pkgid="b3dc3fb73276f4bd5bbb701e031de9a66b265d80b2ed56624d0116c526254404" name="ea-nginx-debugsource" arch="x86_64">
  <version epoch="3" ver="1.31.1" rel="1.el9.cloudlinux"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 1.29.4-2" date="1765454400">- CPANEL-50596: Add support for lsapi to nginx standalone</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.5-1" date="1770206400">- EA-13333: Update ea-nginx from v1.29.4 to v1.29.5
- Security: an attacker might inject plain text data in the response from an SSL backend (CVE-2026-1642).</changelog>
  <changelog author="Gary Stanley &lt;gary.stanley@webpros.com&gt; - 1.29.5-2" date="1772452800">- EA4-250: Fix ea-nginx bug when PHP is not installed</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.6-1" date="1773144000">- EA-13369: Update ea-nginx from v1.29.5 to v1.29.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.7-1" date="1774353600">- EA-13381: Update ea-nginx from v1.29.6 to v1.29.7
- Security: buffer overflow in COPY or MOVE request handling with "alias" directive (CVE-2026-27654).
- Security: processing of a specially crafted MP4 file by ngx_http_mp4_module on 32-bit platforms might cause a worker process crash (CVE-2026-27784).
- Security: processing of a specially crafted MP4 file by ngx_http_mp4_module might cause a worker process crash (CVE-2026-32647).
- Security: segmentation fault in worker process with CRAM-MD5 or APOP authentication when retry enabled (CVE-2026-27651).
- Security: PTR DNS record injection in auth_http requests and XCLIENT command (CVE-2026-28753).
- Security: SSL handshake succeeds despite OCSP rejecting client certificate in stream module (CVE-2026-28755).</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.7-2" date="1774958400">- EA4-257: Explicitly set proxy_http_version 1.0 to avoid 421 Misdirected Request</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 1.29.8-1" date="1775649600">- EA-13402: Update ea-nginx from v1.29.7 to v1.29.8</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.30.0-1" date="1776340800">- EA-13411: Update ea-nginx from v1.29.8 to v1.30.0</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 1.30.0-1.cloudlinux.1" date="1776859200">- EA-13411: Fix Version to use main_version macro</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.31.0-1" date="1778673600">- EA-13436: Update ea-nginx from v1.30.0 to v1.31.0
- Security: heap buffer overflow in ngx_http_rewrite_module (CVE-2026-42945).</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.31.1-1" date="1779451200">- EA-13448: Update ea-nginx from v1.31.0 to v1.31.1
- Security: remote code execution via worker process memory pool handling (CVE-2026-9256).</changelog>
</package>
<package pkgid="afda0f964e4198789b75280cd44f57a49eb39b83c92792f13b019c7c5a615368" name="ea-nginx-debugsource" arch="x86_64">
  <version epoch="3" ver="1.31.2" rel="2.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.5-1" date="1770206400">- EA-13333: Update ea-nginx from v1.29.4 to v1.29.5
- Security: an attacker might inject plain text data in the response from an SSL backend (CVE-2026-1642).</changelog>
  <changelog author="Gary Stanley &lt;gary.stanley@webpros.com&gt; - 1.29.5-2" date="1772452800">- EA4-250: Fix ea-nginx bug when PHP is not installed</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.6-1" date="1773144000">- EA-13369: Update ea-nginx from v1.29.5 to v1.29.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.7-1" date="1774353600">- EA-13381: Update ea-nginx from v1.29.6 to v1.29.7
- Security: buffer overflow in COPY or MOVE request handling with "alias" directive (CVE-2026-27654).
- Security: processing of a specially crafted MP4 file by ngx_http_mp4_module on 32-bit platforms might cause a worker process crash (CVE-2026-27784).
- Security: processing of a specially crafted MP4 file by ngx_http_mp4_module might cause a worker process crash (CVE-2026-32647).
- Security: segmentation fault in worker process with CRAM-MD5 or APOP authentication when retry enabled (CVE-2026-27651).
- Security: PTR DNS record injection in auth_http requests and XCLIENT command (CVE-2026-28753).
- Security: SSL handshake succeeds despite OCSP rejecting client certificate in stream module (CVE-2026-28755).</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.7-2" date="1774958400">- EA4-257: Explicitly set proxy_http_version 1.0 to avoid 421 Misdirected Request</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 1.29.8-1" date="1775649600">- EA-13402: Update ea-nginx from v1.29.7 to v1.29.8</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.30.0-1" date="1776340800">- EA-13411: Update ea-nginx from v1.29.8 to v1.30.0</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 1.30.0-1.cloudlinux.1" date="1776859200">- EA-13411: Fix Version to use main_version macro</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.31.0-1" date="1778673600">- EA-13436: Update ea-nginx from v1.30.0 to v1.31.0
- Security: heap buffer overflow in ngx_http_rewrite_module (CVE-2026-42945).</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.31.1-1" date="1779451200">- EA-13448: Update ea-nginx from v1.31.0 to v1.31.1
- Security: remote code execution via worker process memory pool handling (CVE-2026-9256).</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.31.2-2" date="1781697600">- EA-13466: Update ea-nginx from v1.31.1 to v1.31.2 (CVE-2026-42055, CVE-2026-48142)</changelog>
</package>
<package pkgid="6df6f97d78315207e48098f614bbbc002ba14a48d371baa4bbfbaf58a0a09892" name="ea-nginx-debugsource" arch="x86_64">
  <version epoch="3" ver="1.31.3" rel="1.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.6-1" date="1773144000">- EA-13369: Update ea-nginx from v1.29.5 to v1.29.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.7-1" date="1774353600">- EA-13381: Update ea-nginx from v1.29.6 to v1.29.7
- Security: buffer overflow in COPY or MOVE request handling with "alias" directive (CVE-2026-27654).
- Security: processing of a specially crafted MP4 file by ngx_http_mp4_module on 32-bit platforms might cause a worker process crash (CVE-2026-27784).
- Security: processing of a specially crafted MP4 file by ngx_http_mp4_module might cause a worker process crash (CVE-2026-32647).
- Security: segmentation fault in worker process with CRAM-MD5 or APOP authentication when retry enabled (CVE-2026-27651).
- Security: PTR DNS record injection in auth_http requests and XCLIENT command (CVE-2026-28753).
- Security: SSL handshake succeeds despite OCSP rejecting client certificate in stream module (CVE-2026-28755).</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.29.7-2" date="1774958400">- EA4-257: Explicitly set proxy_http_version 1.0 to avoid 421 Misdirected Request</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 1.29.8-1" date="1775649600">- EA-13402: Update ea-nginx from v1.29.7 to v1.29.8</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.30.0-1" date="1776340800">- EA-13411: Update ea-nginx from v1.29.8 to v1.30.0</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 1.30.0-1.cloudlinux.1" date="1776859200">- EA-13411: Fix Version to use main_version macro</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.31.0-1" date="1778673600">- EA-13436: Update ea-nginx from v1.30.0 to v1.31.0
- Security: heap buffer overflow in ngx_http_rewrite_module (CVE-2026-42945).</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.31.1-1" date="1779451200">- EA-13448: Update ea-nginx from v1.31.0 to v1.31.1
- Security: remote code execution via worker process memory pool handling (CVE-2026-9256).</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 1.31.2-2" date="1781697600">- EA-13466: Update ea-nginx from v1.31.1 to v1.31.2 (CVE-2026-42055, CVE-2026-48142)</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 1.31.3-1" date="1784203200">- EA-13503: Update ea-nginx from v1.31.2 to v1.31.3
- Security: heap buffer overflow when using map with regex, potentially allowing remote code execution or worker process denial of service via a crafted HTTP request (CVE-2026-42533).
- Security: memory disclosure when using the ngx_http_slice_module (CVE-2026-60005).
- Security: use-after-free when using the ngx_http_ssi_module (CVE-2026-56434).</changelog>
  <changelog author="CloudLinux Packaging Team &lt;packager@cloudlinux.com&gt; - 3:1.31.3-1.cloudlinux" date="1784289600">- Rebuild of cPanel 1.31.3-1 for CloudLinux</changelog>
</package>
<package pkgid="8459b21e693aaff47e542f69e72c7a3ee915015c008f4cf83bc3dfdac05cae66" name="ea-nginx-echo-debuginfo" arch="x86_64">
  <version epoch="2" ver="0.64" rel="4.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory@cpanel.net&gt; - 0.63-7" date="1713873600">- EA-12112: Build against ea-nginx version v1.26.0</changelog>
  <changelog author="Cory McIntire &lt;cory@cpanel.net&gt; - 0.63-8" date="1718020800">- EA-12203: Build against ea-nginx version v1.26.1</changelog>
  <changelog author="Cory McIntire &lt;cory@cpanel.net&gt; - 0.63-9" date="1723636800">- EA-12337: Build against ea-nginx version v1.26.2</changelog>
  <changelog author="Danila Vershinin &lt;dvershinin@cloudlinux.com&gt; - 1.26.2+0.63-9.cloudlinux.1" date="1725364800">- AP2NGX-158: Added proper dependency on NGINX version the module depends on</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.63-10" date="1739275200">- EA-12703: Build against ea-nginx version v1.26.3</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 0.63-11" date="1755086400">- EA-13069: Build against ea-nginx version v1.29.1</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.63-12" date="1761652800">- EA-13235: Build against ea-nginx version v1.29.3</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-1" date="1763121600">- EA-13262: Update ea-nginx-echo from v0.63 to v0.64</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-2" date="1765281600">- EA-13286: Build against ea-nginx version v1.29.4</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-3" date="1770206400">- EA-13333: Build against ea-nginx version v1.29.5</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-4" date="1773144000">- EA-13369: Build against ea-nginx version v1.29.6</changelog>
</package>
<package pkgid="b9f3d09302319064cac863dd97f451a720493ee5f0129d93b7edf7db71f45959" name="ea-nginx-echo-debuginfo" arch="x86_64">
  <version epoch="2" ver="0.64" rel="5.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory@cpanel.net&gt; - 0.63-8" date="1718020800">- EA-12203: Build against ea-nginx version v1.26.1</changelog>
  <changelog author="Cory McIntire &lt;cory@cpanel.net&gt; - 0.63-9" date="1723636800">- EA-12337: Build against ea-nginx version v1.26.2</changelog>
  <changelog author="Danila Vershinin &lt;dvershinin@cloudlinux.com&gt; - 1.26.2+0.63-9.cloudlinux.1" date="1725364800">- AP2NGX-158: Added proper dependency on NGINX version the module depends on</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.63-10" date="1739275200">- EA-12703: Build against ea-nginx version v1.26.3</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 0.63-11" date="1755086400">- EA-13069: Build against ea-nginx version v1.29.1</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.63-12" date="1761652800">- EA-13235: Build against ea-nginx version v1.29.3</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-1" date="1763121600">- EA-13262: Update ea-nginx-echo from v0.63 to v0.64</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-2" date="1765281600">- EA-13286: Build against ea-nginx version v1.29.4</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-3" date="1770206400">- EA-13333: Build against ea-nginx version v1.29.5</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-4" date="1773144000">- EA-13369: Build against ea-nginx version v1.29.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-5" date="1774958400">- EA-13381: Build against ea-nginx version v1.29.7</changelog>
</package>
<package pkgid="c62a8340d2a0335614182500c911d01f1d9d5be3c7b66c02c6c9d3e98d08c1f2" name="ea-nginx-echo-debuginfo" arch="x86_64">
  <version epoch="2" ver="0.64" rel="6.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory@cpanel.net&gt; - 0.63-9" date="1723636800">- EA-12337: Build against ea-nginx version v1.26.2</changelog>
  <changelog author="Danila Vershinin &lt;dvershinin@cloudlinux.com&gt; - 1.26.2+0.63-9.cloudlinux.1" date="1725364800">- AP2NGX-158: Added proper dependency on NGINX version the module depends on</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.63-10" date="1739275200">- EA-12703: Build against ea-nginx version v1.26.3</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 0.63-11" date="1755086400">- EA-13069: Build against ea-nginx version v1.29.1</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.63-12" date="1761652800">- EA-13235: Build against ea-nginx version v1.29.3</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-1" date="1763121600">- EA-13262: Update ea-nginx-echo from v0.63 to v0.64</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-2" date="1765281600">- EA-13286: Build against ea-nginx version v1.29.4</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-3" date="1770206400">- EA-13333: Build against ea-nginx version v1.29.5</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-4" date="1773144000">- EA-13369: Build against ea-nginx version v1.29.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-5" date="1774958400">- EA-13381: Build against ea-nginx version v1.29.7</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 0.64-6" date="1775649600">- EA-13402: Build against ea-nginx version v1.29.8</changelog>
</package>
<package pkgid="1a95c101ecc5bb7957c75ee6fd11a165b8c7c33c22a263ce3512489d10e54344" name="ea-nginx-echo-debuginfo" arch="x86_64">
  <version epoch="2" ver="0.64" rel="7.el9.cloudlinux"/>
  <changelog author="Danila Vershinin &lt;dvershinin@cloudlinux.com&gt; - 1.26.2+0.63-9.cloudlinux.1" date="1725364800">- AP2NGX-158: Added proper dependency on NGINX version the module depends on</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.63-10" date="1739275200">- EA-12703: Build against ea-nginx version v1.26.3</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 0.63-11" date="1755086400">- EA-13069: Build against ea-nginx version v1.29.1</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.63-12" date="1761652800">- EA-13235: Build against ea-nginx version v1.29.3</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-1" date="1763121600">- EA-13262: Update ea-nginx-echo from v0.63 to v0.64</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-2" date="1765281600">- EA-13286: Build against ea-nginx version v1.29.4</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-3" date="1770206400">- EA-13333: Build against ea-nginx version v1.29.5</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-4" date="1773144000">- EA-13369: Build against ea-nginx version v1.29.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-5" date="1774958400">- EA-13381: Build against ea-nginx version v1.29.7</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 0.64-6" date="1775649600">- EA-13402: Build against ea-nginx version v1.29.8</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 0.64-7" date="1776859200">- EA-13411: Build against ea-nginx version v1.30.0</changelog>
</package>
<package pkgid="a1b8315e50444e54e3882d14c9bd21c748405ec71e0900dd6f2f649df0021f4a" name="ea-nginx-echo-debuginfo" arch="x86_64">
  <version epoch="2" ver="0.64" rel="8.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.63-10" date="1739275200">- EA-12703: Build against ea-nginx version v1.26.3</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 0.63-11" date="1755086400">- EA-13069: Build against ea-nginx version v1.29.1</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.63-12" date="1761652800">- EA-13235: Build against ea-nginx version v1.29.3</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-1" date="1763121600">- EA-13262: Update ea-nginx-echo from v0.63 to v0.64</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-2" date="1765281600">- EA-13286: Build against ea-nginx version v1.29.4</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-3" date="1770206400">- EA-13333: Build against ea-nginx version v1.29.5</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-4" date="1773144000">- EA-13369: Build against ea-nginx version v1.29.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-5" date="1774958400">- EA-13381: Build against ea-nginx version v1.29.7</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 0.64-6" date="1775649600">- EA-13402: Build against ea-nginx version v1.29.8</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 0.64-7" date="1776859200">* Thu Apr 16 2026 Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-7
- EA-13411: Build against ea-nginx version v1.30.0</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-8" date="1778673600">- EA-13436: Build against ea-nginx version v1.31.0</changelog>
</package>
<package pkgid="2b458b81e4817b42dac9f52e1b46dc902e88ff29bd7f4aa062b4ac6188a37b95" name="ea-nginx-echo-debuginfo" arch="x86_64">
  <version epoch="2" ver="0.64" rel="9.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.63-12" date="1761652800">- EA-13235: Build against ea-nginx version v1.29.3</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-1" date="1763121600">- EA-13262: Update ea-nginx-echo from v0.63 to v0.64</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-2" date="1765281600">- EA-13286: Build against ea-nginx version v1.29.4</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-3" date="1770206400">- EA-13333: Build against ea-nginx version v1.29.5</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-4" date="1773144000">- EA-13369: Build against ea-nginx version v1.29.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-5" date="1774958400">- EA-13381: Build against ea-nginx version v1.29.7</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 0.64-6" date="1775649600">- EA-13402: Build against ea-nginx version v1.29.8</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 0.64-7" date="1776859200">* Thu Apr 16 2026 Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-7
- EA-13411: Build against ea-nginx version v1.30.0</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-8" date="1778673600">- EA-13436: Build against ea-nginx version v1.31.0</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-9" date="1779451200">- EA-13448: Build against ea-nginx version v1.31.1</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 0.64-9.cloudlinux.1" date="1781870400">- EA-13466: Build against ea-nginx version v1.31.2</changelog>
</package>
<package pkgid="a294a5b88ccfb7c8b693d1d29cc3fa4027987613b40832b8ac14234475cfbb2c" name="ea-nginx-echo-debuginfo" arch="x86_64">
  <version epoch="2" ver="0.64" rel="9.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 0.63-11" date="1755086400">- EA-13069: Build against ea-nginx version v1.29.1</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.63-12" date="1761652800">- EA-13235: Build against ea-nginx version v1.29.3</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-1" date="1763121600">- EA-13262: Update ea-nginx-echo from v0.63 to v0.64</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-2" date="1765281600">- EA-13286: Build against ea-nginx version v1.29.4</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-3" date="1770206400">- EA-13333: Build against ea-nginx version v1.29.5</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-4" date="1773144000">- EA-13369: Build against ea-nginx version v1.29.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-5" date="1774958400">- EA-13381: Build against ea-nginx version v1.29.7</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 0.64-6" date="1775649600">- EA-13402: Build against ea-nginx version v1.29.8</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 0.64-7" date="1776859200">* Thu Apr 16 2026 Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-7
- EA-13411: Build against ea-nginx version v1.30.0</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-8" date="1778673600">- EA-13436: Build against ea-nginx version v1.31.0</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-9" date="1779451200">- EA-13448: Build against ea-nginx version v1.31.1</changelog>
</package>
<package pkgid="27520c9bc02bf910059df3fd6287617bd5cfa4d720bc76aec87f6f8e5e1a4d43" name="ea-nginx-echo-debuginfo" arch="x86_64">
  <version epoch="2" ver="0.65" rel="1.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-3" date="1770206400">- EA-13333: Build against ea-nginx version v1.29.5</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-4" date="1773144000">- EA-13369: Build against ea-nginx version v1.29.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-5" date="1774958400">- EA-13381: Build against ea-nginx version v1.29.7</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 0.64-6" date="1775649600">- EA-13402: Build against ea-nginx version v1.29.8</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 0.64-7" date="1776859200">* Thu Apr 16 2026 Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-7
- EA-13411: Build against ea-nginx version v1.30.0</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-8" date="1778673600">- EA-13436: Build against ea-nginx version v1.31.0</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-9" date="1779451200">- EA-13448: Build against ea-nginx version v1.31.1</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-10" date="1781697600">- EA-13466: Rebuild against ea-nginx 1.31.2</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 0.64-9.cloudlinux.1" date="1781870400">- EA-13466: Build against ea-nginx version v1.31.2</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 0.65-1" date="1782043200">- EA-13468: Update ea-nginx-echo from v0.64 to v0.65</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 0.65-1.cloudlinux.1" date="1782388800">- EA-13468: Use %{version} for Source0/setup; drop stale module_version macro (fixes v0.64.tar.gz not found)</changelog>
</package>
<package pkgid="26f1d286164c3dce838ca299bd5add33129d787b1a9233922ab8ea0d9e349548" name="ea-nginx-echo-debuginfo" arch="x86_64">
  <version epoch="2" ver="0.65" rel="2.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-5" date="1774958400">- EA-13381: Build against ea-nginx version v1.29.7</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 0.64-6" date="1775649600">- EA-13402: Build against ea-nginx version v1.29.8</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 0.64-7" date="1776859200">* Thu Apr 16 2026 Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-7
- EA-13411: Build against ea-nginx version v1.30.0</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-8" date="1778673600">- EA-13436: Build against ea-nginx version v1.31.0</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-9" date="1779451200">- EA-13448: Build against ea-nginx version v1.31.1</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-10" date="1781697600">- EA-13466: Rebuild against ea-nginx 1.31.2</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 0.64-9.cloudlinux.1" date="1781870400">- EA-13466: Build against ea-nginx version v1.31.2</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 0.65-1" date="1782043200">- EA-13468: Update ea-nginx-echo from v0.64 to v0.65</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 0.65-1.cloudlinux.1" date="1782388800">- EA-13468: Use %{version} for Source0/setup; drop stale module_version macro (fixes v0.64.tar.gz not found)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.65-2" date="1784203200">- EA-13503: Build against ea-nginx version v1.31.3</changelog>
  <changelog author="CloudLinux Packaging Team &lt;packager@cloudlinux.com&gt; - 2:0.65-2.cloudlinux" date="1784289600">- Rebuild of cPanel 0.65-2 for CloudLinux</changelog>
</package>
<package pkgid="263a3c6a61ae3a7ae248bc9b407d187895488def45b565f0073dbebe4e9979a5" name="ea-nginx-echo-debugsource" arch="x86_64">
  <version epoch="2" ver="0.64" rel="4.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory@cpanel.net&gt; - 0.63-7" date="1713873600">- EA-12112: Build against ea-nginx version v1.26.0</changelog>
  <changelog author="Cory McIntire &lt;cory@cpanel.net&gt; - 0.63-8" date="1718020800">- EA-12203: Build against ea-nginx version v1.26.1</changelog>
  <changelog author="Cory McIntire &lt;cory@cpanel.net&gt; - 0.63-9" date="1723636800">- EA-12337: Build against ea-nginx version v1.26.2</changelog>
  <changelog author="Danila Vershinin &lt;dvershinin@cloudlinux.com&gt; - 1.26.2+0.63-9.cloudlinux.1" date="1725364800">- AP2NGX-158: Added proper dependency on NGINX version the module depends on</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.63-10" date="1739275200">- EA-12703: Build against ea-nginx version v1.26.3</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 0.63-11" date="1755086400">- EA-13069: Build against ea-nginx version v1.29.1</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.63-12" date="1761652800">- EA-13235: Build against ea-nginx version v1.29.3</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-1" date="1763121600">- EA-13262: Update ea-nginx-echo from v0.63 to v0.64</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-2" date="1765281600">- EA-13286: Build against ea-nginx version v1.29.4</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-3" date="1770206400">- EA-13333: Build against ea-nginx version v1.29.5</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-4" date="1773144000">- EA-13369: Build against ea-nginx version v1.29.6</changelog>
</package>
<package pkgid="2ba8369b11f43c2e5154bf95fa091cdabbeb99161021c4ddc9b30514b65b5d54" name="ea-nginx-echo-debugsource" arch="x86_64">
  <version epoch="2" ver="0.64" rel="5.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory@cpanel.net&gt; - 0.63-8" date="1718020800">- EA-12203: Build against ea-nginx version v1.26.1</changelog>
  <changelog author="Cory McIntire &lt;cory@cpanel.net&gt; - 0.63-9" date="1723636800">- EA-12337: Build against ea-nginx version v1.26.2</changelog>
  <changelog author="Danila Vershinin &lt;dvershinin@cloudlinux.com&gt; - 1.26.2+0.63-9.cloudlinux.1" date="1725364800">- AP2NGX-158: Added proper dependency on NGINX version the module depends on</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.63-10" date="1739275200">- EA-12703: Build against ea-nginx version v1.26.3</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 0.63-11" date="1755086400">- EA-13069: Build against ea-nginx version v1.29.1</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.63-12" date="1761652800">- EA-13235: Build against ea-nginx version v1.29.3</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-1" date="1763121600">- EA-13262: Update ea-nginx-echo from v0.63 to v0.64</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-2" date="1765281600">- EA-13286: Build against ea-nginx version v1.29.4</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-3" date="1770206400">- EA-13333: Build against ea-nginx version v1.29.5</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-4" date="1773144000">- EA-13369: Build against ea-nginx version v1.29.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-5" date="1774958400">- EA-13381: Build against ea-nginx version v1.29.7</changelog>
</package>
<package pkgid="6ffe306027df82156d93b0aed9cfb11d34daf96d72ee1f4255ff4125182c1508" name="ea-nginx-echo-debugsource" arch="x86_64">
  <version epoch="2" ver="0.64" rel="6.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory@cpanel.net&gt; - 0.63-9" date="1723636800">- EA-12337: Build against ea-nginx version v1.26.2</changelog>
  <changelog author="Danila Vershinin &lt;dvershinin@cloudlinux.com&gt; - 1.26.2+0.63-9.cloudlinux.1" date="1725364800">- AP2NGX-158: Added proper dependency on NGINX version the module depends on</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.63-10" date="1739275200">- EA-12703: Build against ea-nginx version v1.26.3</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 0.63-11" date="1755086400">- EA-13069: Build against ea-nginx version v1.29.1</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.63-12" date="1761652800">- EA-13235: Build against ea-nginx version v1.29.3</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-1" date="1763121600">- EA-13262: Update ea-nginx-echo from v0.63 to v0.64</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-2" date="1765281600">- EA-13286: Build against ea-nginx version v1.29.4</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-3" date="1770206400">- EA-13333: Build against ea-nginx version v1.29.5</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-4" date="1773144000">- EA-13369: Build against ea-nginx version v1.29.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-5" date="1774958400">- EA-13381: Build against ea-nginx version v1.29.7</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 0.64-6" date="1775649600">- EA-13402: Build against ea-nginx version v1.29.8</changelog>
</package>
<package pkgid="b19b8631e2f8e09d21f173fa009403287116834f9464f730a5a3eae5c96e33ec" name="ea-nginx-echo-debugsource" arch="x86_64">
  <version epoch="2" ver="0.64" rel="7.el9.cloudlinux"/>
  <changelog author="Danila Vershinin &lt;dvershinin@cloudlinux.com&gt; - 1.26.2+0.63-9.cloudlinux.1" date="1725364800">- AP2NGX-158: Added proper dependency on NGINX version the module depends on</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.63-10" date="1739275200">- EA-12703: Build against ea-nginx version v1.26.3</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 0.63-11" date="1755086400">- EA-13069: Build against ea-nginx version v1.29.1</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.63-12" date="1761652800">- EA-13235: Build against ea-nginx version v1.29.3</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-1" date="1763121600">- EA-13262: Update ea-nginx-echo from v0.63 to v0.64</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-2" date="1765281600">- EA-13286: Build against ea-nginx version v1.29.4</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-3" date="1770206400">- EA-13333: Build against ea-nginx version v1.29.5</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-4" date="1773144000">- EA-13369: Build against ea-nginx version v1.29.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-5" date="1774958400">- EA-13381: Build against ea-nginx version v1.29.7</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 0.64-6" date="1775649600">- EA-13402: Build against ea-nginx version v1.29.8</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 0.64-7" date="1776859200">- EA-13411: Build against ea-nginx version v1.30.0</changelog>
</package>
<package pkgid="9d7a2bc19738cad3cd56914345b90451eeeb3278b27da124b1005909c7dfa019" name="ea-nginx-echo-debugsource" arch="x86_64">
  <version epoch="2" ver="0.64" rel="8.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.63-10" date="1739275200">- EA-12703: Build against ea-nginx version v1.26.3</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 0.63-11" date="1755086400">- EA-13069: Build against ea-nginx version v1.29.1</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.63-12" date="1761652800">- EA-13235: Build against ea-nginx version v1.29.3</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-1" date="1763121600">- EA-13262: Update ea-nginx-echo from v0.63 to v0.64</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-2" date="1765281600">- EA-13286: Build against ea-nginx version v1.29.4</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-3" date="1770206400">- EA-13333: Build against ea-nginx version v1.29.5</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-4" date="1773144000">- EA-13369: Build against ea-nginx version v1.29.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-5" date="1774958400">- EA-13381: Build against ea-nginx version v1.29.7</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 0.64-6" date="1775649600">- EA-13402: Build against ea-nginx version v1.29.8</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 0.64-7" date="1776859200">* Thu Apr 16 2026 Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-7
- EA-13411: Build against ea-nginx version v1.30.0</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-8" date="1778673600">- EA-13436: Build against ea-nginx version v1.31.0</changelog>
</package>
<package pkgid="76964845dd6535b6bae318e4ff25d85571c5d242b5dcf9e86c0b1c96636239fc" name="ea-nginx-echo-debugsource" arch="x86_64">
  <version epoch="2" ver="0.64" rel="9.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.63-12" date="1761652800">- EA-13235: Build against ea-nginx version v1.29.3</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-1" date="1763121600">- EA-13262: Update ea-nginx-echo from v0.63 to v0.64</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-2" date="1765281600">- EA-13286: Build against ea-nginx version v1.29.4</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-3" date="1770206400">- EA-13333: Build against ea-nginx version v1.29.5</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-4" date="1773144000">- EA-13369: Build against ea-nginx version v1.29.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-5" date="1774958400">- EA-13381: Build against ea-nginx version v1.29.7</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 0.64-6" date="1775649600">- EA-13402: Build against ea-nginx version v1.29.8</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 0.64-7" date="1776859200">* Thu Apr 16 2026 Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-7
- EA-13411: Build against ea-nginx version v1.30.0</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-8" date="1778673600">- EA-13436: Build against ea-nginx version v1.31.0</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-9" date="1779451200">- EA-13448: Build against ea-nginx version v1.31.1</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 0.64-9.cloudlinux.1" date="1781870400">- EA-13466: Build against ea-nginx version v1.31.2</changelog>
</package>
<package pkgid="85c93c17d73bc11ff832ecb9471412c5c3463db75161dc68af57312ef3c40aea" name="ea-nginx-echo-debugsource" arch="x86_64">
  <version epoch="2" ver="0.64" rel="9.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 0.63-11" date="1755086400">- EA-13069: Build against ea-nginx version v1.29.1</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.63-12" date="1761652800">- EA-13235: Build against ea-nginx version v1.29.3</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-1" date="1763121600">- EA-13262: Update ea-nginx-echo from v0.63 to v0.64</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-2" date="1765281600">- EA-13286: Build against ea-nginx version v1.29.4</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-3" date="1770206400">- EA-13333: Build against ea-nginx version v1.29.5</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-4" date="1773144000">- EA-13369: Build against ea-nginx version v1.29.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-5" date="1774958400">- EA-13381: Build against ea-nginx version v1.29.7</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 0.64-6" date="1775649600">- EA-13402: Build against ea-nginx version v1.29.8</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 0.64-7" date="1776859200">* Thu Apr 16 2026 Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-7
- EA-13411: Build against ea-nginx version v1.30.0</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-8" date="1778673600">- EA-13436: Build against ea-nginx version v1.31.0</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-9" date="1779451200">- EA-13448: Build against ea-nginx version v1.31.1</changelog>
</package>
<package pkgid="22988e3127f459fc3b8a8ee9f9a9c0ecb6e32a8c8d0263c166923ab2abcd567a" name="ea-nginx-echo-debugsource" arch="x86_64">
  <version epoch="2" ver="0.65" rel="1.el9.cloudlinux.1"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-3" date="1770206400">- EA-13333: Build against ea-nginx version v1.29.5</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-4" date="1773144000">- EA-13369: Build against ea-nginx version v1.29.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-5" date="1774958400">- EA-13381: Build against ea-nginx version v1.29.7</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 0.64-6" date="1775649600">- EA-13402: Build against ea-nginx version v1.29.8</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 0.64-7" date="1776859200">* Thu Apr 16 2026 Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-7
- EA-13411: Build against ea-nginx version v1.30.0</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-8" date="1778673600">- EA-13436: Build against ea-nginx version v1.31.0</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-9" date="1779451200">- EA-13448: Build against ea-nginx version v1.31.1</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-10" date="1781697600">- EA-13466: Rebuild against ea-nginx 1.31.2</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 0.64-9.cloudlinux.1" date="1781870400">- EA-13466: Build against ea-nginx version v1.31.2</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 0.65-1" date="1782043200">- EA-13468: Update ea-nginx-echo from v0.64 to v0.65</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 0.65-1.cloudlinux.1" date="1782388800">- EA-13468: Use %{version} for Source0/setup; drop stale module_version macro (fixes v0.64.tar.gz not found)</changelog>
</package>
<package pkgid="5bad550800994e14594118c7bfba7fe634748e1f190ec24e2c73d81d5ee17ddd" name="ea-nginx-echo-debugsource" arch="x86_64">
  <version epoch="2" ver="0.65" rel="2.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-5" date="1774958400">- EA-13381: Build against ea-nginx version v1.29.7</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 0.64-6" date="1775649600">- EA-13402: Build against ea-nginx version v1.29.8</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 0.64-7" date="1776859200">* Thu Apr 16 2026 Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-7
- EA-13411: Build against ea-nginx version v1.30.0</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-8" date="1778673600">- EA-13436: Build against ea-nginx version v1.31.0</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-9" date="1779451200">- EA-13448: Build against ea-nginx version v1.31.1</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.64-10" date="1781697600">- EA-13466: Rebuild against ea-nginx 1.31.2</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 0.64-9.cloudlinux.1" date="1781870400">- EA-13466: Build against ea-nginx version v1.31.2</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 0.65-1" date="1782043200">- EA-13468: Update ea-nginx-echo from v0.64 to v0.65</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 0.65-1.cloudlinux.1" date="1782388800">- EA-13468: Use %{version} for Source0/setup; drop stale module_version macro (fixes v0.64.tar.gz not found)</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.65-2" date="1784203200">- EA-13503: Build against ea-nginx version v1.31.3</changelog>
  <changelog author="CloudLinux Packaging Team &lt;packager@cloudlinux.com&gt; - 2:0.65-2.cloudlinux" date="1784289600">- Rebuild of cPanel 0.65-2 for CloudLinux</changelog>
</package>
<package pkgid="a362e2ef146ce8b5638e8b63e43a151e346f78472cd12afb48a96275a0880dbc" name="ea-nginx-headers-more-debuginfo" arch="x86_64">
  <version epoch="1" ver="0.39" rel="10.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-1" date="1751630400">- EA-13002: Update ea-nginx-headers-more from v0.38 to v0.39</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 0.39-1.cloudlinux.1" date="1755086400">- MAXWS-673: Added support for varmatch block</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 0.39-2" date="1755086401">- EA-13069: Build against ea-nginx version v1.29.1</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-3" date="1761652800">- EA-13235: Build against ea-nginx version v1.29.3</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-4" date="1765281600">- EA-13286: Build against ea-nginx version v1.29.4</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-5" date="1770206400">- EA-13333: Build against ea-nginx version v1.29.5</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-6" date="1773144000">- EA-13369: Build against ea-nginx version v1.29.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-7" date="1774958400">- EA-13381: Build against ea-nginx version v1.29.7</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 0.39-8" date="1775649600">- EA-13402: Build against ea-nginx version v1.29.8</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 0.39-9" date="1776859200">- EA-13411: Build against ea-nginx version v1.30.0</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 0.39-10" date="1778760000">- EA-13436: Build against ea-nginx version v1.31.0</changelog>
</package>
<package pkgid="d0c479da99f35eae76a80e2040a0343137950387deb3acd96e9468174875d7da" name="ea-nginx-headers-more-debuginfo" arch="x86_64">
  <version epoch="1" ver="0.39" rel="11.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 0.39-2" date="1755086400">- EA-13069: Build against ea-nginx version v1.29.1</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-3" date="1761652800">- EA-13235: Build against ea-nginx version v1.29.3</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-4" date="1765281600">- EA-13286: Build against ea-nginx version v1.29.4</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-5" date="1770206400">- EA-13333: Build against ea-nginx version v1.29.5</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-6" date="1773144000">- EA-13369: Build against ea-nginx version v1.29.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-7" date="1774958400">- EA-13381: Build against ea-nginx version v1.29.7</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 0.39-8" date="1775649600">- EA-13402: Build against ea-nginx version v1.29.8</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 0.39-9" date="1776859200">- EA-13411: Build against ea-nginx version v1.30.0</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 0.39-10" date="1778760000">- EA-13436: Build against ea-nginx version v1.31.0</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 0.39-11" date="1779710400">- EA-13448: Build against ea-nginx version v1.31.1</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 0.39-11.cloudlinux.1" date="1781870400">- EA-13466: Build against ea-nginx version v1.31.2</changelog>
</package>
<package pkgid="66b38e9918bcfe1af92783b37c69f7a8916071834fee94c8aa4317271e9ed2fa" name="ea-nginx-headers-more-debuginfo" arch="x86_64">
  <version epoch="1" ver="0.39" rel="11.el9.cloudlinux"/>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 0.39-1.cloudlinux.1" date="1755086400">- MAXWS-673: Added support for varmatch block</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 0.39-2" date="1755086401">- EA-13069: Build against ea-nginx version v1.29.1</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-3" date="1761652800">- EA-13235: Build against ea-nginx version v1.29.3</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-4" date="1765281600">- EA-13286: Build against ea-nginx version v1.29.4</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-5" date="1770206400">- EA-13333: Build against ea-nginx version v1.29.5</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-6" date="1773144000">- EA-13369: Build against ea-nginx version v1.29.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-7" date="1774958400">- EA-13381: Build against ea-nginx version v1.29.7</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 0.39-8" date="1775649600">- EA-13402: Build against ea-nginx version v1.29.8</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 0.39-9" date="1776859200">- EA-13411: Build against ea-nginx version v1.30.0</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 0.39-10" date="1778760000">- EA-13436: Build against ea-nginx version v1.31.0</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 0.39-11" date="1779710400">- EA-13448: Build against ea-nginx version v1.31.1</changelog>
</package>
<package pkgid="a1b54c272204b8231528cfa5d330831d1cb5fcf09a90e7846cffe6b4dfb193a7" name="ea-nginx-headers-more-debuginfo" arch="x86_64">
  <version epoch="1" ver="0.39" rel="6.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.38-1" date="1739880000">- EA-12691: Update ea-nginx-headers-more from v0.37 to v0.38</changelog>
  <changelog author="Sergey Kokhan &lt;skokhan@cloudlinux.com&gt; - 0.38-1.cloudlinux.1" date="1745323200">- MAXWS-488: Add more_add_headers directive</changelog>
  <changelog author="Sergey Kokhan &lt;skokhan@cloudlinux.com&gt; - 0.38-1.cloudlinux.2" date="1747310400">- MAXWS-554: Add more_merge_headers directive</changelog>
  <changelog author="Sergey Kokhan &lt;skokhan@cloudlinux.com&gt; - 0.38-1.cloudlinux.3" date="1751630400">- MAXWS-607: Added support for if condition variable</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-1" date="1751630401">- EA-13002: Update ea-nginx-headers-more from v0.38 to v0.39</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 0.39-1.cloudlinux.1" date="1755086400">- MAXWS-673: Added support for varmatch block</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 0.39-2" date="1755086401">- EA-13069: Build against ea-nginx version v1.29.1</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-3" date="1761652800">- EA-13235: Build against ea-nginx version v1.29.3</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-4" date="1765281600">- EA-13286: Build against ea-nginx version v1.29.4</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-5" date="1770206400">- EA-13333: Build against ea-nginx version v1.29.5</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-6" date="1773144000">- EA-13369: Build against ea-nginx version v1.29.6</changelog>
</package>
<package pkgid="ee13d6e3a643df8c112026654f3ea1612909edb4f67265de68ca9af5264cb9ce" name="ea-nginx-headers-more-debuginfo" arch="x86_64">
  <version epoch="1" ver="0.39" rel="7.el9.cloudlinux"/>
  <changelog author="Sergey Kokhan &lt;skokhan@cloudlinux.com&gt; - 0.38-1.cloudlinux.1" date="1745323200">- MAXWS-488: Add more_add_headers directive</changelog>
  <changelog author="Sergey Kokhan &lt;skokhan@cloudlinux.com&gt; - 0.38-1.cloudlinux.2" date="1747310400">- MAXWS-554: Add more_merge_headers directive</changelog>
  <changelog author="Sergey Kokhan &lt;skokhan@cloudlinux.com&gt; - 0.38-1.cloudlinux.3" date="1751630400">- MAXWS-607: Added support for if condition variable</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-1" date="1751630401">- EA-13002: Update ea-nginx-headers-more from v0.38 to v0.39</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 0.39-1.cloudlinux.1" date="1755086400">- MAXWS-673: Added support for varmatch block</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 0.39-2" date="1755086401">- EA-13069: Build against ea-nginx version v1.29.1</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-3" date="1761652800">- EA-13235: Build against ea-nginx version v1.29.3</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-4" date="1765281600">- EA-13286: Build against ea-nginx version v1.29.4</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-5" date="1770206400">- EA-13333: Build against ea-nginx version v1.29.5</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-6" date="1773144000">- EA-13369: Build against ea-nginx version v1.29.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-7" date="1774958400">- EA-13381: Build against ea-nginx version v1.29.7</changelog>
</package>
<package pkgid="feb01db353142cc547ae4439b83618afab067d7066b794db42045c0f4e0d5198" name="ea-nginx-headers-more-debuginfo" arch="x86_64">
  <version epoch="1" ver="0.39" rel="8.el9.cloudlinux"/>
  <changelog author="Sergey Kokhan &lt;skokhan@cloudlinux.com&gt; - 0.38-1.cloudlinux.2" date="1747310400">- MAXWS-554: Add more_merge_headers directive</changelog>
  <changelog author="Sergey Kokhan &lt;skokhan@cloudlinux.com&gt; - 0.38-1.cloudlinux.3" date="1751630400">- MAXWS-607: Added support for if condition variable</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-1" date="1751630401">- EA-13002: Update ea-nginx-headers-more from v0.38 to v0.39</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 0.39-1.cloudlinux.1" date="1755086400">- MAXWS-673: Added support for varmatch block</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 0.39-2" date="1755086401">- EA-13069: Build against ea-nginx version v1.29.1</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-3" date="1761652800">- EA-13235: Build against ea-nginx version v1.29.3</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-4" date="1765281600">- EA-13286: Build against ea-nginx version v1.29.4</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-5" date="1770206400">- EA-13333: Build against ea-nginx version v1.29.5</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-6" date="1773144000">- EA-13369: Build against ea-nginx version v1.29.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-7" date="1774958400">- EA-13381: Build against ea-nginx version v1.29.7</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 0.39-8" date="1775649600">- EA-13402: Build against ea-nginx version v1.29.8</changelog>
</package>
<package pkgid="076edd79ee345e417fef8bc877768e50e1f5fc691b05d21eb98550bdb65767d4" name="ea-nginx-headers-more-debuginfo" arch="x86_64">
  <version epoch="1" ver="0.39" rel="9.el9.cloudlinux"/>
  <changelog author="Sergey Kokhan &lt;skokhan@cloudlinux.com&gt; - 0.38-1.cloudlinux.3" date="1751630400">- MAXWS-607: Added support for if condition variable</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-1" date="1751630401">- EA-13002: Update ea-nginx-headers-more from v0.38 to v0.39</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 0.39-1.cloudlinux.1" date="1755086400">- MAXWS-673: Added support for varmatch block</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 0.39-2" date="1755086401">- EA-13069: Build against ea-nginx version v1.29.1</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-3" date="1761652800">- EA-13235: Build against ea-nginx version v1.29.3</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-4" date="1765281600">- EA-13286: Build against ea-nginx version v1.29.4</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-5" date="1770206400">- EA-13333: Build against ea-nginx version v1.29.5</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-6" date="1773144000">- EA-13369: Build against ea-nginx version v1.29.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-7" date="1774958400">- EA-13381: Build against ea-nginx version v1.29.7</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 0.39-8" date="1775649600">- EA-13402: Build against ea-nginx version v1.29.8</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 0.39-9" date="1776859200">- EA-13411: Build against ea-nginx version v1.30.0</changelog>
</package>
<package pkgid="f573dca1a131b4f11d837eaf896efde8f64c3ca6f45492c9e22b71d18b9ae09c" name="ea-nginx-headers-more-debuginfo" arch="x86_64">
  <version epoch="1" ver="0.40" rel="1.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-6" date="1773144000">- EA-13369: Build against ea-nginx version v1.29.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-7" date="1774958400">- EA-13381: Build against ea-nginx version v1.29.7</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 0.39-8" date="1775649600">- EA-13402: Build against ea-nginx version v1.29.8</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 0.39-9" date="1776859200">* Thu Apr 16 2026 Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-9
- EA-13411: Build against ea-nginx version v1.30.0</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-10" date="1778673600">- EA-13436: Build against ea-nginx version v1.31.0</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 0.39-10" date="1778760000">- EA-13436: Build against ea-nginx version v1.31.0</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-11" date="1779451200">- EA-13448: Build against ea-nginx version v1.31.1</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 0.39-11" date="1779710400">- EA-13448: Build against ea-nginx version v1.31.1</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-12" date="1781697600">- EA-13466: Rebuild against ea-nginx 1.31.2</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 0.39-11.cloudlinux.1" date="1781870400">- EA-13466: Build against ea-nginx version v1.31.2</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 0.40-1" date="1782043200">- EA-13469: Update ea-nginx-headers-more from v0.39 to v0.40</changelog>
</package>
<package pkgid="2fd92493ba1cdfc7868b8edc7009d7d1c1e06e72e6aa520f480052a4d2f69b3b" name="ea-nginx-headers-more-debuginfo" arch="x86_64">
  <version epoch="1" ver="0.40" rel="2.el9.cloudlinux"/>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 0.39-8" date="1775649600">- EA-13402: Build against ea-nginx version v1.29.8</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 0.39-9" date="1776859200">* Thu Apr 16 2026 Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-9
- EA-13411: Build against ea-nginx version v1.30.0</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-10" date="1778673600">- EA-13436: Build against ea-nginx version v1.31.0</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 0.39-10" date="1778760000">- EA-13436: Build against ea-nginx version v1.31.0</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-11" date="1779451200">- EA-13448: Build against ea-nginx version v1.31.1</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 0.39-11" date="1779710400">- EA-13448: Build against ea-nginx version v1.31.1</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-12" date="1781697600">- EA-13466: Rebuild against ea-nginx 1.31.2</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 0.39-11.cloudlinux.1" date="1781870400">- EA-13466: Build against ea-nginx version v1.31.2</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 0.40-1" date="1782043200">- EA-13469: Update ea-nginx-headers-more from v0.39 to v0.40</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.40-2" date="1784203200">- EA-13503: Build against ea-nginx version v1.31.3</changelog>
  <changelog author="CloudLinux Packaging Team &lt;packager@cloudlinux.com&gt; - 1:0.40-2.cloudlinux" date="1784289600">- Rebuild of cPanel 0.40-2 for CloudLinux</changelog>
</package>
<package pkgid="3ee2ec95a985cc712eadfe1d840db7421acfdeab61673a162ad49651780c5910" name="ea-nginx-headers-more-debugsource" arch="x86_64">
  <version epoch="1" ver="0.39" rel="10.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-1" date="1751630400">- EA-13002: Update ea-nginx-headers-more from v0.38 to v0.39</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 0.39-1.cloudlinux.1" date="1755086400">- MAXWS-673: Added support for varmatch block</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 0.39-2" date="1755086401">- EA-13069: Build against ea-nginx version v1.29.1</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-3" date="1761652800">- EA-13235: Build against ea-nginx version v1.29.3</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-4" date="1765281600">- EA-13286: Build against ea-nginx version v1.29.4</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-5" date="1770206400">- EA-13333: Build against ea-nginx version v1.29.5</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-6" date="1773144000">- EA-13369: Build against ea-nginx version v1.29.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-7" date="1774958400">- EA-13381: Build against ea-nginx version v1.29.7</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 0.39-8" date="1775649600">- EA-13402: Build against ea-nginx version v1.29.8</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 0.39-9" date="1776859200">- EA-13411: Build against ea-nginx version v1.30.0</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 0.39-10" date="1778760000">- EA-13436: Build against ea-nginx version v1.31.0</changelog>
</package>
<package pkgid="db729ba554785a69d5a3032899f9dfb997a851f5c2de993ba9f86b8bac4963dc" name="ea-nginx-headers-more-debugsource" arch="x86_64">
  <version epoch="1" ver="0.39" rel="11.el9.cloudlinux.1"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 0.39-2" date="1755086400">- EA-13069: Build against ea-nginx version v1.29.1</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-3" date="1761652800">- EA-13235: Build against ea-nginx version v1.29.3</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-4" date="1765281600">- EA-13286: Build against ea-nginx version v1.29.4</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-5" date="1770206400">- EA-13333: Build against ea-nginx version v1.29.5</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-6" date="1773144000">- EA-13369: Build against ea-nginx version v1.29.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-7" date="1774958400">- EA-13381: Build against ea-nginx version v1.29.7</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 0.39-8" date="1775649600">- EA-13402: Build against ea-nginx version v1.29.8</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 0.39-9" date="1776859200">- EA-13411: Build against ea-nginx version v1.30.0</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 0.39-10" date="1778760000">- EA-13436: Build against ea-nginx version v1.31.0</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 0.39-11" date="1779710400">- EA-13448: Build against ea-nginx version v1.31.1</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 0.39-11.cloudlinux.1" date="1781870400">- EA-13466: Build against ea-nginx version v1.31.2</changelog>
</package>
<package pkgid="205731699bf828e7c56910f2023b6fc2387ba1563b7c9be93632bd5dcc46ebfb" name="ea-nginx-headers-more-debugsource" arch="x86_64">
  <version epoch="1" ver="0.39" rel="11.el9.cloudlinux"/>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 0.39-1.cloudlinux.1" date="1755086400">- MAXWS-673: Added support for varmatch block</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 0.39-2" date="1755086401">- EA-13069: Build against ea-nginx version v1.29.1</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-3" date="1761652800">- EA-13235: Build against ea-nginx version v1.29.3</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-4" date="1765281600">- EA-13286: Build against ea-nginx version v1.29.4</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-5" date="1770206400">- EA-13333: Build against ea-nginx version v1.29.5</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-6" date="1773144000">- EA-13369: Build against ea-nginx version v1.29.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-7" date="1774958400">- EA-13381: Build against ea-nginx version v1.29.7</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 0.39-8" date="1775649600">- EA-13402: Build against ea-nginx version v1.29.8</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 0.39-9" date="1776859200">- EA-13411: Build against ea-nginx version v1.30.0</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 0.39-10" date="1778760000">- EA-13436: Build against ea-nginx version v1.31.0</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 0.39-11" date="1779710400">- EA-13448: Build against ea-nginx version v1.31.1</changelog>
</package>
<package pkgid="d526d958e1edb1c656e9332b73bedd61127efde8923af3769e1bf99308bd512d" name="ea-nginx-headers-more-debugsource" arch="x86_64">
  <version epoch="1" ver="0.39" rel="6.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.38-1" date="1739880000">- EA-12691: Update ea-nginx-headers-more from v0.37 to v0.38</changelog>
  <changelog author="Sergey Kokhan &lt;skokhan@cloudlinux.com&gt; - 0.38-1.cloudlinux.1" date="1745323200">- MAXWS-488: Add more_add_headers directive</changelog>
  <changelog author="Sergey Kokhan &lt;skokhan@cloudlinux.com&gt; - 0.38-1.cloudlinux.2" date="1747310400">- MAXWS-554: Add more_merge_headers directive</changelog>
  <changelog author="Sergey Kokhan &lt;skokhan@cloudlinux.com&gt; - 0.38-1.cloudlinux.3" date="1751630400">- MAXWS-607: Added support for if condition variable</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-1" date="1751630401">- EA-13002: Update ea-nginx-headers-more from v0.38 to v0.39</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 0.39-1.cloudlinux.1" date="1755086400">- MAXWS-673: Added support for varmatch block</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 0.39-2" date="1755086401">- EA-13069: Build against ea-nginx version v1.29.1</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-3" date="1761652800">- EA-13235: Build against ea-nginx version v1.29.3</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-4" date="1765281600">- EA-13286: Build against ea-nginx version v1.29.4</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-5" date="1770206400">- EA-13333: Build against ea-nginx version v1.29.5</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-6" date="1773144000">- EA-13369: Build against ea-nginx version v1.29.6</changelog>
</package>
<package pkgid="c243cc0a959efc1fc81f8c3773276fb9ec05d2bec00b4b134cfd32c4fe9af8f9" name="ea-nginx-headers-more-debugsource" arch="x86_64">
  <version epoch="1" ver="0.39" rel="7.el9.cloudlinux"/>
  <changelog author="Sergey Kokhan &lt;skokhan@cloudlinux.com&gt; - 0.38-1.cloudlinux.1" date="1745323200">- MAXWS-488: Add more_add_headers directive</changelog>
  <changelog author="Sergey Kokhan &lt;skokhan@cloudlinux.com&gt; - 0.38-1.cloudlinux.2" date="1747310400">- MAXWS-554: Add more_merge_headers directive</changelog>
  <changelog author="Sergey Kokhan &lt;skokhan@cloudlinux.com&gt; - 0.38-1.cloudlinux.3" date="1751630400">- MAXWS-607: Added support for if condition variable</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-1" date="1751630401">- EA-13002: Update ea-nginx-headers-more from v0.38 to v0.39</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 0.39-1.cloudlinux.1" date="1755086400">- MAXWS-673: Added support for varmatch block</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 0.39-2" date="1755086401">- EA-13069: Build against ea-nginx version v1.29.1</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-3" date="1761652800">- EA-13235: Build against ea-nginx version v1.29.3</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-4" date="1765281600">- EA-13286: Build against ea-nginx version v1.29.4</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-5" date="1770206400">- EA-13333: Build against ea-nginx version v1.29.5</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-6" date="1773144000">- EA-13369: Build against ea-nginx version v1.29.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-7" date="1774958400">- EA-13381: Build against ea-nginx version v1.29.7</changelog>
</package>
<package pkgid="abcb652162ed78ae6235af1e94183cae5f58dc291df95522fa0d6a733771ade3" name="ea-nginx-headers-more-debugsource" arch="x86_64">
  <version epoch="1" ver="0.39" rel="8.el9.cloudlinux"/>
  <changelog author="Sergey Kokhan &lt;skokhan@cloudlinux.com&gt; - 0.38-1.cloudlinux.2" date="1747310400">- MAXWS-554: Add more_merge_headers directive</changelog>
  <changelog author="Sergey Kokhan &lt;skokhan@cloudlinux.com&gt; - 0.38-1.cloudlinux.3" date="1751630400">- MAXWS-607: Added support for if condition variable</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-1" date="1751630401">- EA-13002: Update ea-nginx-headers-more from v0.38 to v0.39</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 0.39-1.cloudlinux.1" date="1755086400">- MAXWS-673: Added support for varmatch block</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 0.39-2" date="1755086401">- EA-13069: Build against ea-nginx version v1.29.1</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-3" date="1761652800">- EA-13235: Build against ea-nginx version v1.29.3</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-4" date="1765281600">- EA-13286: Build against ea-nginx version v1.29.4</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-5" date="1770206400">- EA-13333: Build against ea-nginx version v1.29.5</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-6" date="1773144000">- EA-13369: Build against ea-nginx version v1.29.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-7" date="1774958400">- EA-13381: Build against ea-nginx version v1.29.7</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 0.39-8" date="1775649600">- EA-13402: Build against ea-nginx version v1.29.8</changelog>
</package>
<package pkgid="beb1ccecc56562a1a1d9652d817109b036391d0575d9dc0e98d4bfd88f06e348" name="ea-nginx-headers-more-debugsource" arch="x86_64">
  <version epoch="1" ver="0.39" rel="9.el9.cloudlinux"/>
  <changelog author="Sergey Kokhan &lt;skokhan@cloudlinux.com&gt; - 0.38-1.cloudlinux.3" date="1751630400">- MAXWS-607: Added support for if condition variable</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-1" date="1751630401">- EA-13002: Update ea-nginx-headers-more from v0.38 to v0.39</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 0.39-1.cloudlinux.1" date="1755086400">- MAXWS-673: Added support for varmatch block</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 0.39-2" date="1755086401">- EA-13069: Build against ea-nginx version v1.29.1</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-3" date="1761652800">- EA-13235: Build against ea-nginx version v1.29.3</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-4" date="1765281600">- EA-13286: Build against ea-nginx version v1.29.4</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-5" date="1770206400">- EA-13333: Build against ea-nginx version v1.29.5</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-6" date="1773144000">- EA-13369: Build against ea-nginx version v1.29.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-7" date="1774958400">- EA-13381: Build against ea-nginx version v1.29.7</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 0.39-8" date="1775649600">- EA-13402: Build against ea-nginx version v1.29.8</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 0.39-9" date="1776859200">- EA-13411: Build against ea-nginx version v1.30.0</changelog>
</package>
<package pkgid="4e0647935a140afe3ed096fe4fad6b92e5067e0e103e75566da4dfd741b54aa7" name="ea-nginx-headers-more-debugsource" arch="x86_64">
  <version epoch="1" ver="0.40" rel="1.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-6" date="1773144000">- EA-13369: Build against ea-nginx version v1.29.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-7" date="1774958400">- EA-13381: Build against ea-nginx version v1.29.7</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 0.39-8" date="1775649600">- EA-13402: Build against ea-nginx version v1.29.8</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 0.39-9" date="1776859200">* Thu Apr 16 2026 Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-9
- EA-13411: Build against ea-nginx version v1.30.0</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-10" date="1778673600">- EA-13436: Build against ea-nginx version v1.31.0</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 0.39-10" date="1778760000">- EA-13436: Build against ea-nginx version v1.31.0</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-11" date="1779451200">- EA-13448: Build against ea-nginx version v1.31.1</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 0.39-11" date="1779710400">- EA-13448: Build against ea-nginx version v1.31.1</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-12" date="1781697600">- EA-13466: Rebuild against ea-nginx 1.31.2</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 0.39-11.cloudlinux.1" date="1781870400">- EA-13466: Build against ea-nginx version v1.31.2</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 0.40-1" date="1782043200">- EA-13469: Update ea-nginx-headers-more from v0.39 to v0.40</changelog>
</package>
<package pkgid="20e02220ac88164d49cbf33cbba6bdde61a5b6eff7bda72740344ec63cadcde1" name="ea-nginx-headers-more-debugsource" arch="x86_64">
  <version epoch="1" ver="0.40" rel="2.el9.cloudlinux"/>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 0.39-8" date="1775649600">- EA-13402: Build against ea-nginx version v1.29.8</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 0.39-9" date="1776859200">* Thu Apr 16 2026 Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-9
- EA-13411: Build against ea-nginx version v1.30.0</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-10" date="1778673600">- EA-13436: Build against ea-nginx version v1.31.0</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 0.39-10" date="1778760000">- EA-13436: Build against ea-nginx version v1.31.0</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-11" date="1779451200">- EA-13448: Build against ea-nginx version v1.31.1</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 0.39-11" date="1779710400">- EA-13448: Build against ea-nginx version v1.31.1</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.39-12" date="1781697600">- EA-13466: Rebuild against ea-nginx 1.31.2</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 0.39-11.cloudlinux.1" date="1781870400">- EA-13466: Build against ea-nginx version v1.31.2</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 0.40-1" date="1782043200">- EA-13469: Update ea-nginx-headers-more from v0.39 to v0.40</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.40-2" date="1784203200">- EA-13503: Build against ea-nginx version v1.31.3</changelog>
  <changelog author="CloudLinux Packaging Team &lt;packager@cloudlinux.com&gt; - 1:0.40-2.cloudlinux" date="1784289600">- Rebuild of cPanel 0.40-2 for CloudLinux</changelog>
</package>
<package pkgid="9e6806565bc763bf7f77c28e757f02670ff1a532da1ea00a0acbf3c12d87025e" name="ea-nginx-njs-debuginfo" arch="x86_64">
  <version epoch="1" ver="0.9.6" rel="2.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.8.10-1" date="1744113600">- EA-12805: Update ea-nginx-njs from v0.8.9 to v0.8.10</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.0-1" date="1746446400">- EA-12846: Update ea-nginx-njs from v0.8.10 to v0.9.0</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.1-1" date="1752148800">- EA-13015: Update ea-nginx-njs from v0.9.0 to v0.9.1</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 0.9.1-2" date="1755086400">- EA-13069: Build against ea-nginx version v1.29.1</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.3-1" date="1759838400">- EA-13168: Update ea-nginx-njs from v0.9.1 to v0.9.3</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.4-1" date="1761739200">- EA-13244: Update ea-nginx-njs from v0.9.3 to v0.9.4</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.4-2" date="1765281600">- EA-13286: Build against ea-nginx version v1.29.4</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.5-1" date="1768305600">- EA-13313: Update ea-nginx-njs from v0.9.4 to v0.9.5</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.5-2" date="1770206400">- EA-13333: Build against ea-nginx version v1.29.5</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.6-1" date="1772539200">- EA-13361: Update ea-nginx-njs from v0.9.5 to v0.9.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.6-2" date="1773144000">- EA-13369: Build against ea-nginx version v1.29.6</changelog>
</package>
<package pkgid="818e13be50f57b2d83bd16a334f39f773b79bbfe59b8d947adaa6ac88676a934" name="ea-nginx-njs-debuginfo" arch="x86_64">
  <version epoch="1" ver="0.9.6" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.0-1" date="1746446400">- EA-12846: Update ea-nginx-njs from v0.8.10 to v0.9.0</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.1-1" date="1752148800">- EA-13015: Update ea-nginx-njs from v0.9.0 to v0.9.1</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 0.9.1-2" date="1755086400">- EA-13069: Build against ea-nginx version v1.29.1</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.3-1" date="1759838400">- EA-13168: Update ea-nginx-njs from v0.9.1 to v0.9.3</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.4-1" date="1761739200">- EA-13244: Update ea-nginx-njs from v0.9.3 to v0.9.4</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.4-2" date="1765281600">- EA-13286: Build against ea-nginx version v1.29.4</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.5-1" date="1768305600">- EA-13313: Update ea-nginx-njs from v0.9.4 to v0.9.5</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.5-2" date="1770206400">- EA-13333: Build against ea-nginx version v1.29.5</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.6-1" date="1772539200">- EA-13361: Update ea-nginx-njs from v0.9.5 to v0.9.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.6-2" date="1773144000">- EA-13369: Build against ea-nginx version v1.29.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.6-3" date="1774958400">- EA-13381: Build against ea-nginx version v1.29.7</changelog>
</package>
<package pkgid="225c7321ceb1c6fb5f95a85b00dcb232a38933b80997734d1e657e1571bb3090" name="ea-nginx-njs-debuginfo" arch="x86_64">
  <version epoch="1" ver="0.9.6" rel="4.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.1-1" date="1752148800">- EA-13015: Update ea-nginx-njs from v0.9.0 to v0.9.1</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 0.9.1-2" date="1755086400">- EA-13069: Build against ea-nginx version v1.29.1</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.3-1" date="1759838400">- EA-13168: Update ea-nginx-njs from v0.9.1 to v0.9.3</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.4-1" date="1761739200">- EA-13244: Update ea-nginx-njs from v0.9.3 to v0.9.4</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.4-2" date="1765281600">- EA-13286: Build against ea-nginx version v1.29.4</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.5-1" date="1768305600">- EA-13313: Update ea-nginx-njs from v0.9.4 to v0.9.5</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.5-2" date="1770206400">- EA-13333: Build against ea-nginx version v1.29.5</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.6-1" date="1772539200">- EA-13361: Update ea-nginx-njs from v0.9.5 to v0.9.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.6-2" date="1773144000">- EA-13369: Build against ea-nginx version v1.29.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.6-3" date="1774958400">- EA-13381: Build against ea-nginx version v1.29.7</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 0.9.6-4" date="1775649600">- EA-13402: Build against ea-nginx version v1.29.8</changelog>
</package>
<package pkgid="6fc247cc8562624bb1b1538d334c9f3c12ab59126c31712cab9f89c692bdc07b" name="ea-nginx-njs-debuginfo" arch="x86_64">
  <version epoch="1" ver="0.9.6" rel="5.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 0.9.1-2" date="1755086400">- EA-13069: Build against ea-nginx version v1.29.1</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.3-1" date="1759838400">- EA-13168: Update ea-nginx-njs from v0.9.1 to v0.9.3</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.4-1" date="1761739200">- EA-13244: Update ea-nginx-njs from v0.9.3 to v0.9.4</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.4-2" date="1765281600">- EA-13286: Build against ea-nginx version v1.29.4</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.5-1" date="1768305600">- EA-13313: Update ea-nginx-njs from v0.9.4 to v0.9.5</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.5-2" date="1770206400">- EA-13333: Build against ea-nginx version v1.29.5</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.6-1" date="1772539200">- EA-13361: Update ea-nginx-njs from v0.9.5 to v0.9.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.6-2" date="1773144000">- EA-13369: Build against ea-nginx version v1.29.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.6-3" date="1774958400">- EA-13381: Build against ea-nginx version v1.29.7</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 0.9.6-4" date="1775649600">- EA-13402: Build against ea-nginx version v1.29.8</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 0.9.6-5" date="1776859200">- EA-13411: Build against ea-nginx version v1.30.0</changelog>
</package>
<package pkgid="7fb34075afeadd8c24fd8fd4c6913cb1a13f9a156c343c1cbdf7958917c634d6" name="ea-nginx-njs-debuginfo" arch="x86_64">
  <version epoch="1" ver="0.9.7" rel="1.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.3-1" date="1759838400">- EA-13168: Update ea-nginx-njs from v0.9.1 to v0.9.3</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.4-1" date="1761739200">- EA-13244: Update ea-nginx-njs from v0.9.3 to v0.9.4</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.4-2" date="1765281600">- EA-13286: Build against ea-nginx version v1.29.4</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.5-1" date="1768305600">- EA-13313: Update ea-nginx-njs from v0.9.4 to v0.9.5</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.5-2" date="1770206400">- EA-13333: Build against ea-nginx version v1.29.5</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.6-1" date="1772539200">- EA-13361: Update ea-nginx-njs from v0.9.5 to v0.9.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.6-2" date="1773144000">- EA-13369: Build against ea-nginx version v1.29.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.6-3" date="1774958400">- EA-13381: Build against ea-nginx version v1.29.7</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 0.9.6-4" date="1775649600">- EA-13402: Build against ea-nginx version v1.29.8</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 0.9.6-5" date="1776859200">* Thu Apr 16 2026 Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.6-5
- EA-13411: Build against ea-nginx version v1.30.0</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 0.9.7-1" date="1776859201">- EA-13415: Update ea-nginx-njs from v0.9.6 to v0.9.7</changelog>
</package>
<package pkgid="0669cca5b754153c12385eedc8af611743662f34832222b7cd5dadb7636d321a" name="ea-nginx-njs-debuginfo" arch="x86_64">
  <version epoch="1" ver="0.9.8" rel="2.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.4-2" date="1765281600">- EA-13286: Build against ea-nginx version v1.29.4</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.5-1" date="1768305600">- EA-13313: Update ea-nginx-njs from v0.9.4 to v0.9.5</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.5-2" date="1770206400">- EA-13333: Build against ea-nginx version v1.29.5</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.6-1" date="1772539200">- EA-13361: Update ea-nginx-njs from v0.9.5 to v0.9.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.6-2" date="1773144000">- EA-13369: Build against ea-nginx version v1.29.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.6-3" date="1774958400">- EA-13381: Build against ea-nginx version v1.29.7</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 0.9.6-4" date="1775649600">- EA-13402: Build against ea-nginx version v1.29.8</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 0.9.6-5" date="1776859200">* Thu Apr 16 2026 Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.6-5
- EA-13411: Build against ea-nginx version v1.30.0</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 0.9.7-1" date="1776859201">- EA-13415: Update ea-nginx-njs from v0.9.6 to v0.9.7</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 0.9.8-1" date="1777550400">- EA-13420: Update ea-nginx-njs from v0.9.7 to v0.9.8</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.8-2" date="1778673600">- EA-13436: Build against ea-nginx version v1.31.0</changelog>
</package>
<package pkgid="84219a839fe0e522aed806448c79b536b90aef06740265c1a7aca6593709212b" name="ea-nginx-njs-debugsource" arch="x86_64">
  <version epoch="1" ver="0.9.6" rel="2.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.8.10-1" date="1744113600">- EA-12805: Update ea-nginx-njs from v0.8.9 to v0.8.10</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.0-1" date="1746446400">- EA-12846: Update ea-nginx-njs from v0.8.10 to v0.9.0</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.1-1" date="1752148800">- EA-13015: Update ea-nginx-njs from v0.9.0 to v0.9.1</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 0.9.1-2" date="1755086400">- EA-13069: Build against ea-nginx version v1.29.1</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.3-1" date="1759838400">- EA-13168: Update ea-nginx-njs from v0.9.1 to v0.9.3</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.4-1" date="1761739200">- EA-13244: Update ea-nginx-njs from v0.9.3 to v0.9.4</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.4-2" date="1765281600">- EA-13286: Build against ea-nginx version v1.29.4</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.5-1" date="1768305600">- EA-13313: Update ea-nginx-njs from v0.9.4 to v0.9.5</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.5-2" date="1770206400">- EA-13333: Build against ea-nginx version v1.29.5</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.6-1" date="1772539200">- EA-13361: Update ea-nginx-njs from v0.9.5 to v0.9.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.6-2" date="1773144000">- EA-13369: Build against ea-nginx version v1.29.6</changelog>
</package>
<package pkgid="015adb628f7c647d4fd0b75fb587e6faa178790c264bf7beb2e0c1cea6e60ff8" name="ea-nginx-njs-debugsource" arch="x86_64">
  <version epoch="1" ver="0.9.6" rel="3.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.0-1" date="1746446400">- EA-12846: Update ea-nginx-njs from v0.8.10 to v0.9.0</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.1-1" date="1752148800">- EA-13015: Update ea-nginx-njs from v0.9.0 to v0.9.1</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 0.9.1-2" date="1755086400">- EA-13069: Build against ea-nginx version v1.29.1</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.3-1" date="1759838400">- EA-13168: Update ea-nginx-njs from v0.9.1 to v0.9.3</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.4-1" date="1761739200">- EA-13244: Update ea-nginx-njs from v0.9.3 to v0.9.4</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.4-2" date="1765281600">- EA-13286: Build against ea-nginx version v1.29.4</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.5-1" date="1768305600">- EA-13313: Update ea-nginx-njs from v0.9.4 to v0.9.5</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.5-2" date="1770206400">- EA-13333: Build against ea-nginx version v1.29.5</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.6-1" date="1772539200">- EA-13361: Update ea-nginx-njs from v0.9.5 to v0.9.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.6-2" date="1773144000">- EA-13369: Build against ea-nginx version v1.29.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.6-3" date="1774958400">- EA-13381: Build against ea-nginx version v1.29.7</changelog>
</package>
<package pkgid="ec7dad10b55160477240fb5c194c9ee50029d6ac2088864b9013cdae5681cd9d" name="ea-nginx-njs-debugsource" arch="x86_64">
  <version epoch="1" ver="0.9.6" rel="4.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.1-1" date="1752148800">- EA-13015: Update ea-nginx-njs from v0.9.0 to v0.9.1</changelog>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 0.9.1-2" date="1755086400">- EA-13069: Build against ea-nginx version v1.29.1</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.3-1" date="1759838400">- EA-13168: Update ea-nginx-njs from v0.9.1 to v0.9.3</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.4-1" date="1761739200">- EA-13244: Update ea-nginx-njs from v0.9.3 to v0.9.4</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.4-2" date="1765281600">- EA-13286: Build against ea-nginx version v1.29.4</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.5-1" date="1768305600">- EA-13313: Update ea-nginx-njs from v0.9.4 to v0.9.5</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.5-2" date="1770206400">- EA-13333: Build against ea-nginx version v1.29.5</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.6-1" date="1772539200">- EA-13361: Update ea-nginx-njs from v0.9.5 to v0.9.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.6-2" date="1773144000">- EA-13369: Build against ea-nginx version v1.29.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.6-3" date="1774958400">- EA-13381: Build against ea-nginx version v1.29.7</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 0.9.6-4" date="1775649600">- EA-13402: Build against ea-nginx version v1.29.8</changelog>
</package>
<package pkgid="99cd6c6f5dd5d47003747a823847bb29fe0025bb10871ac5e886d81d904a2f91" name="ea-nginx-njs-debugsource" arch="x86_64">
  <version epoch="1" ver="0.9.6" rel="5.el9.cloudlinux"/>
  <changelog author="Dan Muey &lt;daniel.muey@webpros.com&gt; - 0.9.1-2" date="1755086400">- EA-13069: Build against ea-nginx version v1.29.1</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.3-1" date="1759838400">- EA-13168: Update ea-nginx-njs from v0.9.1 to v0.9.3</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.4-1" date="1761739200">- EA-13244: Update ea-nginx-njs from v0.9.3 to v0.9.4</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.4-2" date="1765281600">- EA-13286: Build against ea-nginx version v1.29.4</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.5-1" date="1768305600">- EA-13313: Update ea-nginx-njs from v0.9.4 to v0.9.5</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.5-2" date="1770206400">- EA-13333: Build against ea-nginx version v1.29.5</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.6-1" date="1772539200">- EA-13361: Update ea-nginx-njs from v0.9.5 to v0.9.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.6-2" date="1773144000">- EA-13369: Build against ea-nginx version v1.29.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.6-3" date="1774958400">- EA-13381: Build against ea-nginx version v1.29.7</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 0.9.6-4" date="1775649600">- EA-13402: Build against ea-nginx version v1.29.8</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 0.9.6-5" date="1776859200">- EA-13411: Build against ea-nginx version v1.30.0</changelog>
</package>
<package pkgid="fa98c6b3458a628b12468b5f559ad8297419bd140b6d46aa9083088064142127" name="ea-nginx-njs-debugsource" arch="x86_64">
  <version epoch="1" ver="0.9.7" rel="1.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.3-1" date="1759838400">- EA-13168: Update ea-nginx-njs from v0.9.1 to v0.9.3</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.4-1" date="1761739200">- EA-13244: Update ea-nginx-njs from v0.9.3 to v0.9.4</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.4-2" date="1765281600">- EA-13286: Build against ea-nginx version v1.29.4</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.5-1" date="1768305600">- EA-13313: Update ea-nginx-njs from v0.9.4 to v0.9.5</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.5-2" date="1770206400">- EA-13333: Build against ea-nginx version v1.29.5</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.6-1" date="1772539200">- EA-13361: Update ea-nginx-njs from v0.9.5 to v0.9.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.6-2" date="1773144000">- EA-13369: Build against ea-nginx version v1.29.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.6-3" date="1774958400">- EA-13381: Build against ea-nginx version v1.29.7</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 0.9.6-4" date="1775649600">- EA-13402: Build against ea-nginx version v1.29.8</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 0.9.6-5" date="1776859200">* Thu Apr 16 2026 Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.6-5
- EA-13411: Build against ea-nginx version v1.30.0</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 0.9.7-1" date="1776859201">- EA-13415: Update ea-nginx-njs from v0.9.6 to v0.9.7</changelog>
</package>
<package pkgid="f470c98695c5f3c3567ac96038a07ed46e515f36fab2db196bfc6be3b122491d" name="ea-nginx-njs-debugsource" arch="x86_64">
  <version epoch="1" ver="0.9.8" rel="2.el9.cloudlinux"/>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.4-2" date="1765281600">- EA-13286: Build against ea-nginx version v1.29.4</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.5-1" date="1768305600">- EA-13313: Update ea-nginx-njs from v0.9.4 to v0.9.5</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.5-2" date="1770206400">- EA-13333: Build against ea-nginx version v1.29.5</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.6-1" date="1772539200">- EA-13361: Update ea-nginx-njs from v0.9.5 to v0.9.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.6-2" date="1773144000">- EA-13369: Build against ea-nginx version v1.29.6</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.6-3" date="1774958400">- EA-13381: Build against ea-nginx version v1.29.7</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 0.9.6-4" date="1775649600">- EA-13402: Build against ea-nginx version v1.29.8</changelog>
  <changelog author="CloudLinux &lt;packages@cloudlinux.com&gt; - 0.9.6-5" date="1776859200">* Thu Apr 16 2026 Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.6-5
- EA-13411: Build against ea-nginx version v1.30.0</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 0.9.7-1" date="1776859201">- EA-13415: Update ea-nginx-njs from v0.9.6 to v0.9.7</changelog>
  <changelog author="EA4 Update Bot &lt;cory.mcintire@webpros.com&gt; - 0.9.8-1" date="1777550400">- EA-13420: Update ea-nginx-njs from v0.9.7 to v0.9.8</changelog>
  <changelog author="Cory McIntire &lt;cory.mcintire@webpros.com&gt; - 0.9.8-2" date="1778673600">- EA-13436: Build against ea-nginx version v1.31.0</changelog>
</package>
<package pkgid="f2945a3bf9714ba819adc2d42311a38d4220a7bf3d3755f2992971daf0e29e56" name="ea-php73-php-bcmath-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.10"/>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="f0dd2262c89f7abbb4977c9793fef15d43335b9640d415bf674424b3285e3985" name="ea-php73-php-bcmath-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.11"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
</package>
<package pkgid="1fc62fc886a28ce6b14d09d4c27679f6bfa33ca2d6a2f4a668fefb8a06d9d78a" name="ea-php73-php-bcmath-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.12"/>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="2b3c01c0d3bda1064cf08124204c637d33da00949456d52c93c1a393ad3f940d" name="ea-php73-php-bcmath-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.13"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="0aff131e6ef881ef42dd1f48d884880855f64f016e975bdeb9bfd6962e103a9d" name="ea-php73-php-bcmath-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.14"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.14" date="1784203200">- ELS-2599: Sync CVE patches from alt-php73
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="2c0497886f87b5d73da412ca5cc797fbe7e1c15bbd02535fc80ff91d1da8d054" name="ea-php73-php-bcmath-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.8"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.3.33-13.cloudlinux.7" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="e7aca6d03e8a350c5b6d46b471e6009adbe3c0ba7595b9f2b86cd0f3e29c10b2" name="ea-php73-php-bcmath-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.9"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="987fd4cf1401e63cdeab13734113648513a7b1a21ebf415fc3dd9abc2e1c55ac" name="ea-php73-php-bz2-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.10"/>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="ce654a0be961a137ddcb39173acdd3fe508436476ede980ef96df2688374dd65" name="ea-php73-php-bz2-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.11"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
</package>
<package pkgid="efbd9cc895aae041ab543241d39d0bb0b885e5ce6f4659011ad502ba1d01f853" name="ea-php73-php-bz2-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.12"/>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="647a7c90f39476e61f0fe55ab1450af4aabd0cc2499e8cae3dd48338d9b82058" name="ea-php73-php-bz2-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.13"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="8ceff3a2f8d7851ac605d77ea46a24853d592315c67e05c4d97766879447c923" name="ea-php73-php-bz2-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.14"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.14" date="1784203200">- ELS-2599: Sync CVE patches from alt-php73
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="188b0dd34fffb24b4901e9196015ad33d0ad87df480af396501331d571a24bc7" name="ea-php73-php-bz2-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.8"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.3.33-13.cloudlinux.7" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="3cac0609165ff51ddd7efae7431171bf91cdeb7831332498e68f99b563b963cf" name="ea-php73-php-bz2-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.9"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="8d620322b4f0c9570d1b5ed702c2101f3e64d054b04ef5a4de1fa591cc97ade8" name="ea-php73-php-calendar-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.10"/>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="ba8e61401f28977844b3e3e7452c3087916b0089d7d8321b437e3c69ade04159" name="ea-php73-php-calendar-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.11"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
</package>
<package pkgid="d2840f06b69935abd7bf6941f1cd853adaa21d02504b47298c1fdc7a0c3277e3" name="ea-php73-php-calendar-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.12"/>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="2c707ac24f0e092fcf684ade8cb96628c3b30c795959c6617bc459e783c6d8d7" name="ea-php73-php-calendar-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.13"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="30204bfcb98888829fb163a1416a3fdca2ee5e8cefbc66b18003d087f33af646" name="ea-php73-php-calendar-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.14"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.14" date="1784203200">- ELS-2599: Sync CVE patches from alt-php73
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="914af95398e2fd1dfc88337a8e08f35ebf62d8d7f7793c538088631674370d11" name="ea-php73-php-calendar-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.8"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.3.33-13.cloudlinux.7" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="c57172f8a5f63a34aa3f8373ecc81cbcdfe07527722d66c59713f260dbb8d06d" name="ea-php73-php-calendar-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.9"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="56cb5bd9440b31b6763f9ce0eea1f951b263fa61bf174803c7fb397fd0719a5a" name="ea-php73-php-cli-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.10"/>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="c49319e904eaaff53254f736b7f57b84f52706d9df9bd6112579e88aa26954a6" name="ea-php73-php-cli-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.11"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
</package>
<package pkgid="1f671b99075e32bcc607a7fdb8f6845133a0779377863962b4d8669d4b04ae5d" name="ea-php73-php-cli-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.12"/>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="9eb20bf17be51ce2d28dce4de3ad14ffe048e1a36351cb43e646079b933ae840" name="ea-php73-php-cli-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.13"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="59c6ee17a1532ccd67dc7f5e7402024bd00ca28a9e6ae7fdbecffb550b6604b5" name="ea-php73-php-cli-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.14"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.14" date="1784203200">- ELS-2599: Sync CVE patches from alt-php73
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="cb3c5620449fa5138bc4eb979355fe5317b99e8b4447f2b00328c8bb873e27fe" name="ea-php73-php-cli-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.8"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.3.33-13.cloudlinux.7" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="23cc7d913ba5341fb38fee945194a3f7ec741c53235c766db158021131025c7c" name="ea-php73-php-cli-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.9"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="d873a989068025dedf38838d2db108c7c01482e5638a1c598043c6b2ea86fece" name="ea-php73-php-common-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.10"/>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="341cb17416cce4327dd78ecc56dafd8f679c4abb6156131151dad36c552f245f" name="ea-php73-php-common-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.11"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
</package>
<package pkgid="1465093ab5ba46662ef709e80ff25a90429def320e22b66021fe4b4c1228b575" name="ea-php73-php-common-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.12"/>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="80458c20a8205cb7338c8f6c284a9dd3a908b754e4e48c75f493035f20254ba5" name="ea-php73-php-common-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.13"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="ce2140067527d42f6bae96f98a90bd4a12efdf1e70aacabfea5b7b96c37c8986" name="ea-php73-php-common-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.14"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.14" date="1784203200">- ELS-2599: Sync CVE patches from alt-php73
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="16429b9494b7f93baa7be7da4c4e582f9aa8b7578797a3c9aa445bb7fa82496a" name="ea-php73-php-common-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.8"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.3.33-13.cloudlinux.7" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="b26f9c55c52f271b2c76753928ae97cd3eb9677d297c4f341468ee460b4351de" name="ea-php73-php-common-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.9"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="68dee53489f5b9009c9b96fd92179ef6dc26062557841393ab7296bcc4edd021" name="ea-php73-php-curl-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.10"/>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="45b418496dbda71f8b65a71304a1174da2a7ba743f11297bc68dc10e948811f6" name="ea-php73-php-curl-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.11"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
</package>
<package pkgid="b08a64fbbd2c0eb702feefdec2e48364f096e467180c7963282b4b9c480d8c98" name="ea-php73-php-curl-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.12"/>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="efec7006253b3bf6590c8c4350584e8c83e3aad0672c05800120cb0c923c88ee" name="ea-php73-php-curl-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.13"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="60bacc44a28580526c2a48c22749241e52dba30522d51784ce0201418bc95e13" name="ea-php73-php-curl-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.14"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.14" date="1784203200">- ELS-2599: Sync CVE patches from alt-php73
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="0527c6340fcaf3ea9c8c14a276ed8aa1d2dfa2e81371e9253181bc90df4d569d" name="ea-php73-php-curl-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.8"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.3.33-13.cloudlinux.7" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="139c698fc9602dafd7bf203e7576915c6b77a2e851cea6eb4182bea5c1678135" name="ea-php73-php-curl-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.9"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="7f1699ce2a9e0330fce1d7446f711d29f6497955fc7ee0677a1745797ab533c5" name="ea-php73-php-dba-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.10"/>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="ffa22ab60deaf235b1cc68299496d7bc6c8125a554a7702a36508bdde85d3bc2" name="ea-php73-php-dba-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.11"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
</package>
<package pkgid="6e90a978f821c79ea364512ed7844c967f2361c8b9e7a4a8ea6864a1bad1ba35" name="ea-php73-php-dba-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.12"/>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="bbb4ca7a6cba71df7c5e7b7f06a2debbebf9f723519060993cb01a324df0cce3" name="ea-php73-php-dba-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.13"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="dc4723218c82779987658e8fae484e3dffb5fcdd6d6183bb109d67802b5eab95" name="ea-php73-php-dba-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.14"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.14" date="1784203200">- ELS-2599: Sync CVE patches from alt-php73
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="05a0010f7909edf639599ab568f783f33e8dc2ff9cc65adfe72f94e29942867b" name="ea-php73-php-dba-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.8"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.3.33-13.cloudlinux.7" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="4c614fdc0124128e9c9037c1b0745669a7580553c0a494efdf2270a254e7ef00" name="ea-php73-php-dba-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.9"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="f22ee2e7a022bd66f5d58e0b12e9ea36d2781c041337fa114e0171b6a68dd435" name="ea-php73-php-dbg-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.10"/>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="23dd1f42d8d855d86c95dc40662de1f4ac69f2e393f391e699c8e436b01d44e6" name="ea-php73-php-dbg-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.11"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
</package>
<package pkgid="34a9305406df10d5153638de179db6adc2fa5f7aa32d7e7aac002d0e888cea61" name="ea-php73-php-dbg-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.12"/>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="06397ba32616e4c54ce51399afe27ea8c49496def9efbf067996b1a178fdd0db" name="ea-php73-php-dbg-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.13"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="f5862c6b42d7152136696cd0002a8a2993ab0fe26297a8c92664a2c6ff0e7186" name="ea-php73-php-dbg-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.14"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.14" date="1784203200">- ELS-2599: Sync CVE patches from alt-php73
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="1e4e5fb99ff43221c8fb54ca4e2c9ce6e8d5c9bff4a736f046dee0a4d4a7e000" name="ea-php73-php-dbg-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.8"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.3.33-13.cloudlinux.7" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="6cf08b54e6a63b9ec34a87533716415c9f97eac13ce32ce82791d2088a08a03f" name="ea-php73-php-dbg-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.9"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="17e67cb44f871b6f2f23c41474aa4a6dde3cca29e53b27d8f5e36829e467b14c" name="ea-php73-php-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.10"/>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="b47658c99cc8ee4601301cc16e6216547304e3220e1a1a01a04577019eb3f6a3" name="ea-php73-php-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.11"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
</package>
<package pkgid="da4c54340b3b8a70b22f057f6d8453e56de18471a0ba3bd0e3922aee7c90b4ad" name="ea-php73-php-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.12"/>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="832e6cb1ebfb7338de29755951bd45030770c406267dc4f273d7bc34c5adf450" name="ea-php73-php-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.13"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="708a8684fd3ca9800ed7ba2aab48297e1262dfb02d096cfc5ed3589c6fae6575" name="ea-php73-php-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.14"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.14" date="1784203200">- ELS-2599: Sync CVE patches from alt-php73
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="e50362a0ff794cf81dc0ede496371f0fa2a5a909635f6e23e614ab6688bfc6a3" name="ea-php73-php-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.8"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.3.33-13.cloudlinux.7" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="51ea69fa4c6962a65eb4ab99e63e481285908b64d6a3d8a5dcd1f6249900af8c" name="ea-php73-php-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.9"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="9023593182343f217b104661851fb4499f412cb5b5d98aca82fdf8f6c68d7562" name="ea-php73-php-enchant-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.10"/>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="46428ab8bf4c1cbef9d4a53333ed1ae83af2432783ed358eb518854e67007401" name="ea-php73-php-enchant-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.11"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
</package>
<package pkgid="d7c02f64f9097675267071431529f4abf0445adf618f354dcdfc7ec5229c8e51" name="ea-php73-php-enchant-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.12"/>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="047640fdc3d06fecbc8be761455d0beaa170534d57f0c7448de1829f6d0de515" name="ea-php73-php-enchant-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.13"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="b53717b66bc3b3a4296a8bd1d3ecffe566c88aa3cb5a58929ca6fbe27bb6b1b1" name="ea-php73-php-enchant-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.14"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.14" date="1784203200">- ELS-2599: Sync CVE patches from alt-php73
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="9dadfe4758e4eb39bc3dd4fe6f4cff5497f4463a1c3e62a80c090ac134464816" name="ea-php73-php-enchant-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.8"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.3.33-13.cloudlinux.7" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="d0abf84c5be1700f2228ef935bdd69133fbc5b647ea0fb2f4d70992e9f1d6df4" name="ea-php73-php-enchant-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.9"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="26658737e6f16682d9496fbf766bc387b4e7ce9a22affe6725b876e5f2a273cd" name="ea-php73-php-exif-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.10"/>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="dd11adf0db7c4d4077c9b938ca2d44f90d013451222e27335b2fd00e79170d6c" name="ea-php73-php-exif-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.11"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
</package>
<package pkgid="c2acbe7b722139e3870687574c73e5d5658d1d652e392c0e632bfb6ee5ce1629" name="ea-php73-php-exif-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.12"/>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="0905689ba3833e813afbfee45f2b1273f21f71ce283f5a864a2491cf1308d8ac" name="ea-php73-php-exif-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.13"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="dc0a7b948f79d5f19fce1b13284f366247b9b784085a49341ebedc88c6ba506e" name="ea-php73-php-exif-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.14"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.14" date="1784203200">- ELS-2599: Sync CVE patches from alt-php73
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="5cf2fbd295fe99206e3139a5aa9046f8ca38104c84447a2aefed1b9d58dbb6f2" name="ea-php73-php-exif-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.8"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.3.33-13.cloudlinux.7" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="8d0a7fb1ab9a11b506482e28779b4bbf30ef56b3d05969de055e830447191ae7" name="ea-php73-php-exif-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.9"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="bc005127e242a6fa6d6b7e1a161702315c2c3c9bb4b42e7c3a5898bc2e01c992" name="ea-php73-php-fileinfo-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.10"/>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="e3e7012d618c205a440538636f10a27abe06f1bd7deda45af34e76150cf0e1c6" name="ea-php73-php-fileinfo-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.11"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
</package>
<package pkgid="e1f8799343f4d0802cf53eb6167db904840a7b8580217d731a8f328d7d66db1d" name="ea-php73-php-fileinfo-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.12"/>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="56ea53199ab899fbbb3580b4193299c401df33c129068b00a1ba9302e7189d27" name="ea-php73-php-fileinfo-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.13"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="a73ab7b9f89290f5d5097577ec48d3c0edb64827e86ae919fd2af30bddbd5b46" name="ea-php73-php-fileinfo-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.14"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.14" date="1784203200">- ELS-2599: Sync CVE patches from alt-php73
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="70c1a25fbd927de6aa13e7cb2b69e0c88b83c9b6e60f5bdc46c497782f755feb" name="ea-php73-php-fileinfo-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.8"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.3.33-13.cloudlinux.7" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="1199523b7dc8d2c573825e265c341be10d2b8c8bf7d2975809454eb726f3ee95" name="ea-php73-php-fileinfo-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.9"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="d4df6fe88103bf7a1fd5a77564a046addc170c0063507bcfdc1e2f7c7353e8d5" name="ea-php73-php-fpm-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.10"/>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="698b586e07be2183e2ab69f09ae1704f77adfd5dc6ef36f19b06b83a594a52c0" name="ea-php73-php-fpm-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.11"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
</package>
<package pkgid="0663bbd08661f87995710dbae255b4d3d03f2c14e8b4104fb6247dc3802d3dfa" name="ea-php73-php-fpm-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.12"/>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="b84180c00ecf0da21d7a6791527179b816201eec9ea5f30ac0eedffa73d3ad89" name="ea-php73-php-fpm-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.13"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="13814ef394ede7ede4ceae1358e76e0d3a97c800697a278d3efbf59b13362b93" name="ea-php73-php-fpm-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.14"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.14" date="1784203200">- ELS-2599: Sync CVE patches from alt-php73
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="2dbb94710fb31dc1f73cb626ef788a37c9000af0425b8e806025b7b1b2c855bc" name="ea-php73-php-fpm-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.8"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.3.33-13.cloudlinux.7" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="e6e20699c74bfc149c4be768bdf38bd5af842fbaeb0eeb44d30f03838cba945c" name="ea-php73-php-fpm-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.9"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="46a7fae88a515fea672dcfc506dc4f1c45c8a06c825cb5f27be74fbf8675e443" name="ea-php73-php-ftp-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.10"/>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="929c1c7e9d72522b51f0b15d4463330e0b29f8fe606ef1e1e072fb5e69b46767" name="ea-php73-php-ftp-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.11"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
</package>
<package pkgid="9b31be3a712f46149a9d998eee0ad3c43dfe8bbc2d46d022e68d9f7c1b4392aa" name="ea-php73-php-ftp-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.12"/>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="f21c4b5e31043e284e33ec532016aecd4c97ba499d0811c90410d8655bf23b37" name="ea-php73-php-ftp-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.13"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="69988e9a393c4dba40cc06f4802fdcc220d30de4bd56614189e5cb70faa9c62b" name="ea-php73-php-ftp-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.14"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.14" date="1784203200">- ELS-2599: Sync CVE patches from alt-php73
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="3b0381ab676b8659e0d19f099f339a36a6c8631321e655520f270fc2f85caf01" name="ea-php73-php-ftp-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.8"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.3.33-13.cloudlinux.7" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="caa06109fcbe0166494d4326aa44318abb6e5e8e2b3b085a3640698143ea8497" name="ea-php73-php-ftp-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.9"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="3913e1246e4bb7279110deec3b03bb606bcee15575d51a5ff5300d50b37401fc" name="ea-php73-php-gd-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.10"/>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="4979bb226691123526f9559762d749eb71f967397462ecbab6062ce2b858efc0" name="ea-php73-php-gd-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.11"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
</package>
<package pkgid="245240c903c581a271b50dfc50cce99d95bc72bf007e665c0677454f9ba71003" name="ea-php73-php-gd-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.12"/>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="d512aa429c6475a3a522cfdd15e2f2087f86c4b1f048683f150f9b364ffaab3b" name="ea-php73-php-gd-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.13"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="8b686a20296e3f4357cfdfd4f9948f878a5661d2a4756b555444f9a0aeea6839" name="ea-php73-php-gd-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.14"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.14" date="1784203200">- ELS-2599: Sync CVE patches from alt-php73
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="f8b8eb5a592bf73d5a80fdf5ec92286779e245c31b6e70d5682ea1d9da9f43fd" name="ea-php73-php-gd-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.8"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.3.33-13.cloudlinux.7" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="2df5c550d15b3d482f11c90a131256a92e24fecb68fdc8e6dc172264d8bf4dc7" name="ea-php73-php-gd-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.9"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="4011d905aea0ab8e426d894400f82f15a1651ec8e235c199ef715a93a0d30b8a" name="ea-php73-php-gettext-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.10"/>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="10f2c555f3cf0d8469cdb732edb739b3014819b5bf1eaf939c6587282ac5257f" name="ea-php73-php-gettext-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.11"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
</package>
<package pkgid="b732c6a98109c4dfa11b1dfe882cac143ec479a201c0bf23959c38a05ec424ef" name="ea-php73-php-gettext-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.12"/>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="725089beeaeccf6375bd69010e1452041523cef4f77442a68d504eab859b90a7" name="ea-php73-php-gettext-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.13"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="36669fddfc6fa8b3990d3d4628863165433b8678b236cc908256b3adc01cfe3c" name="ea-php73-php-gettext-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.14"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.14" date="1784203200">- ELS-2599: Sync CVE patches from alt-php73
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="10e4e40b3eb69c2d3336bd0eb35176aaf6ecf9528f3624186ae883ec03ac68e0" name="ea-php73-php-gettext-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.8"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.3.33-13.cloudlinux.7" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="f4021eb30e38cec57071eb36febb8aae22f9e501727a95ee10231b3293b736cb" name="ea-php73-php-gettext-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.9"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="4b46df3511a8e6c787805dd1c89c95c92302470cc195892cbfe7daff6e8e57f7" name="ea-php73-php-gmp-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.10"/>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="9388727825344a41e61c432c348a7d13c00c583b39f22008b5b80f748e5a98ac" name="ea-php73-php-gmp-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.11"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
</package>
<package pkgid="a45f6aa435815531af279f19ed737cc959829481d7975e38c74f982745491fe0" name="ea-php73-php-gmp-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.12"/>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="25f24b1babeb3f246074788ea49267dc75d0a57afbb86b6fc31b9060c786912d" name="ea-php73-php-gmp-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.13"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="104fbf8d9ed7c37c7f09ec1907c310ded4654717a9e154a9e30487ecce544c47" name="ea-php73-php-gmp-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.14"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.14" date="1784203200">- ELS-2599: Sync CVE patches from alt-php73
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="9a4aa2050011eb101c8e6d8b5c9452bbcd9c25f2c6b7a27b34cd0c10c717a68e" name="ea-php73-php-gmp-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.8"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.3.33-13.cloudlinux.7" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="55ba73873ef0ee8e1df8c6bc4d247deb870b5471a0390ffd429ac7cff75f15ab" name="ea-php73-php-gmp-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.9"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="20ae2f7ddf981573592ae5ba63a8774f9d7322cf7fb3a61cb96161f43555c572" name="ea-php73-php-iconv-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.10"/>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="82fd287e289353bcf163d78879fee014d7210e11f3795ab8c84bb21e141f2e55" name="ea-php73-php-iconv-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.11"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
</package>
<package pkgid="a2d6922587952901fdb7c32a7a25f7bc53b2683d3d8583de442d48b0de1914fa" name="ea-php73-php-iconv-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.12"/>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="48aa8ee5cd4af6bfff34bad81b6bd10703b9f0ef30bf9046baccec7a26c76b60" name="ea-php73-php-iconv-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.13"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="2760ad4faeba2525add844363b7df93f31b2c567a81193847555f2ba91d514df" name="ea-php73-php-iconv-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.14"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.14" date="1784203200">- ELS-2599: Sync CVE patches from alt-php73
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="78ec7dcbdb7d21ac8861a88d5663a02a4d22c792870d38104c2af47f061e2e5a" name="ea-php73-php-iconv-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.8"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.3.33-13.cloudlinux.7" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="e29834b0433ca09eab0e4665600758263b8619fa721bde3ebc9d2e470ca50423" name="ea-php73-php-iconv-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.9"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="edbdb3ea9f9dbaabd2f4f817f5a928c9f478c03c3b05287029ce71970c22543b" name="ea-php73-php-imap-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.10"/>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="91e985babf08a8bac23fd9ff2b72b7ee717e13b7fac329f1a1df329ce27104e2" name="ea-php73-php-imap-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.11"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
</package>
<package pkgid="ac7ff5383ebaef3ac27897d23653f62da9cd6cc5ee8db0f0450212a7f1c6332d" name="ea-php73-php-imap-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.12"/>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="2f4317af81a4bbd554a1b3389bb0327b05ea5abc237fb53e76e48825bd390ed3" name="ea-php73-php-imap-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.13"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="a60fc6495220598e218da18629f44a36cdd14c420df234d4dc7beaf903bf290e" name="ea-php73-php-imap-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.14"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.14" date="1784203200">- ELS-2599: Sync CVE patches from alt-php73
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="278f15620aaf6c7d44e9f04a2ddfdb3e29f92f69fbeae5ef0c60797320670242" name="ea-php73-php-imap-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.8"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.3.33-13.cloudlinux.7" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="d6c658b2969300619e5bef5417385bfcf5bb54d62e89f9879a8930525d2b82f1" name="ea-php73-php-imap-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.9"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="2f55a8be106055e49a26c049f6a071a222051ca2cfd174566a267f6068044192" name="ea-php73-php-intl-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.10"/>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="d4fa973f9acb539421226b1ec4b82a3ae3cf0eb4bd7b591e468bed8edca43bf8" name="ea-php73-php-intl-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.11"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
</package>
<package pkgid="afd05ede1cd0567a248d50843d0bb3b7e15e874b4b4fbdbe94462ee28eed1cf4" name="ea-php73-php-intl-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.12"/>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="161def9bd18056cb9482b6cc9e68be1605069f1eb2a109bce24159eb2750a0c9" name="ea-php73-php-intl-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.13"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="eebb84726f712b0d37e727a4f98b74565384e762a5e4ceb77c175954bb42c457" name="ea-php73-php-intl-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.14"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.14" date="1784203200">- ELS-2599: Sync CVE patches from alt-php73
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="6a5a7545aeb418aa432195b5ed1ebdb099a15f24dfc2e399d71b78997c1e55a5" name="ea-php73-php-intl-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.8"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.3.33-13.cloudlinux.7" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="eb6db58486fdbc90c5f299634e91482c5a335015eb5b4402f45a3c1d6dc1e6f1" name="ea-php73-php-intl-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.9"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="65a4c491995f6ce8363047a6682f9a645aaebd9c12ad270e8081f77ef053dbe8" name="ea-php73-php-ldap-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.10"/>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="d548eaf80bc04f968fafb85fc8f0eb3035ec3454c8795bf4d958b7bc20bf8d5f" name="ea-php73-php-ldap-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.11"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
</package>
<package pkgid="6b8e8f218195e578d8890c70838c6493fe91940ea0521f37f679ea488ea9d62e" name="ea-php73-php-ldap-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.12"/>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="14ef90ba7c5f411caae6734a7809636ccdf83cbfbb6e162fa8fc81bbc08bdb28" name="ea-php73-php-ldap-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.13"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="a22b4ff46a6f1e50265fd7e0869bcfc4a1b06616db637da655e31fe4e7e0dc08" name="ea-php73-php-ldap-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.14"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.14" date="1784203200">- ELS-2599: Sync CVE patches from alt-php73
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="8cedb6f329d70c054131b40717186d47486af8010e74407c0b88935b6d7e8435" name="ea-php73-php-ldap-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.8"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.3.33-13.cloudlinux.7" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="f884a16a035320d320be412cd22d86d8d4986ce2ffd46acddd29e0fc306f70d2" name="ea-php73-php-ldap-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.9"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="7b56d7f10e1457f0de9f7031e259e10eefccba1faad58de1e5d2c1bf5dde0b65" name="ea-php73-php-litespeed-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.10"/>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="288f54ae872c3cbb858d931d2365204418c0064b99ae017dc734d9935dc52f0f" name="ea-php73-php-litespeed-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.11"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
</package>
<package pkgid="95493a73b4af80982f725863089d6ddad00f51d77b9e557fa1f56547be24a221" name="ea-php73-php-litespeed-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.12"/>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="d017919e15f41c57e76e7aab72b37d3d41af8ee01310b3b026df8cf2921d2e9a" name="ea-php73-php-litespeed-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.13"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="2e7dc2c21e5c34e589d6a4c1a0b97d5bf83cdc4e785e739eaec1400b4aa6fe83" name="ea-php73-php-litespeed-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.14"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.14" date="1784203200">- ELS-2599: Sync CVE patches from alt-php73
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="f96d5ae28e00861be2173b1515ef8fb087c07fc7c1b0923fb24b14ed42f49b08" name="ea-php73-php-litespeed-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.8"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.3.33-13.cloudlinux.7" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="8e00767d9e155759f038af20278fdbe61a485c596d80655ead2db24e92290e31" name="ea-php73-php-litespeed-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.9"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="e432388957ab7642235fdfd98892f53664602c58746a7d29248f18b22c87d0f9" name="ea-php73-php-mbstring-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.10"/>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="c448d1761b3168a4e3bd3de31f9aead1be91c0e6153d90e8f148cab06391d65b" name="ea-php73-php-mbstring-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.11"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
</package>
<package pkgid="001889d8ad3c60a4da71a66b4b07b43511de413598b57827931d32dd0adc8825" name="ea-php73-php-mbstring-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.12"/>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="8612fad14f2b0aa432ce64f19ba8df1243ae41c4020d21da0602bbc2ddb9519c" name="ea-php73-php-mbstring-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.13"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="02a5efb9148306850e521cc21f6c853c7053cfe442c417bce97d1c7b5e895533" name="ea-php73-php-mbstring-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.14"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.14" date="1784203200">- ELS-2599: Sync CVE patches from alt-php73
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="bdf880540f5d3be947c1ecbb57c990d69db1d229774315c07e3968da7e17a4d4" name="ea-php73-php-mbstring-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.8"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.3.33-13.cloudlinux.7" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="4bc50b0d350c8186770b609118e8e719f31bb23371fd53c4113422159ce6b1cd" name="ea-php73-php-mbstring-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.9"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="15badf47a9e7b6f418d37cc194cde49e8a83eb1d9a7e7c42b2f5dbec574b8400" name="ea-php73-php-mysqlnd-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.10"/>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="171b738c3cb96aeb1a439534699a936f25d474d17660c3c961e96bc7cb1eba2f" name="ea-php73-php-mysqlnd-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.11"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
</package>
<package pkgid="fab7f2cd58c2db0ba2cbba97931da76ab3727b4cef745fbc4682517bdd43f1e5" name="ea-php73-php-mysqlnd-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.12"/>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="cb05b4e3d05f6fc9546608476eb8d98eb2c653cc71da752463d38f2d7dfb3c07" name="ea-php73-php-mysqlnd-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.13"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="afcea637082d612b95264f44db1d1dda41e7ff1ee53a8bfabb41b2601c15370a" name="ea-php73-php-mysqlnd-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.14"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.14" date="1784203200">- ELS-2599: Sync CVE patches from alt-php73
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="7da3c2b9ec237061025f612e32e6bb29f79e752dd8f2eecca91a133577c5349f" name="ea-php73-php-mysqlnd-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.8"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.3.33-13.cloudlinux.7" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="fbeb9e4f458b295e97af1a65324a0ab9f67925700ae35fc080f7a5e2c32704b1" name="ea-php73-php-mysqlnd-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.9"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="edf9a886a402401762fa04e493ffb1472972a9f7985af8191ef2bcf29d59e366" name="ea-php73-php-odbc-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.10"/>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="d02106003b62cd3c5405b6a4a1a61e79fa4068162d0743da1b70d4aeefc47bd2" name="ea-php73-php-odbc-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.11"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
</package>
<package pkgid="e1ed03a444536e42d878b4e798cfb7dafb52fd7174e3c67d378d15575537758f" name="ea-php73-php-odbc-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.12"/>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="3a086543698fa54972963004426dbdae800b539e94549406adec52f74d6af537" name="ea-php73-php-odbc-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.13"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="81aba35b917631ab864bd958d9ac3859d75b333c3a9f16563787c2fbe2d59a48" name="ea-php73-php-odbc-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.14"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.14" date="1784203200">- ELS-2599: Sync CVE patches from alt-php73
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="6acd42766e088d776994732c4a026a20a7ca7c860a686d1a6408e656ae4c413e" name="ea-php73-php-odbc-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.8"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.3.33-13.cloudlinux.7" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="9d518331380eebfb3c03819d2a9751f0cee893eab5beffe70661c24bd46c160f" name="ea-php73-php-odbc-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.9"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="5f666c57e3bcb1816bc6501a65ac656f2dcf7beaef932956a117b2a0fdb3986d" name="ea-php73-php-opcache-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.10"/>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="ba7dabcfaeaaee1f1f28d09e5fa00c4a3d663bc2c7cc807f1c0466f3ec84d023" name="ea-php73-php-opcache-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.11"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
</package>
<package pkgid="3b03c49afc1ad1cd689bb2da79397453a31197e277fad3703f42b6d49cab41db" name="ea-php73-php-opcache-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.12"/>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="cfd42677d15e89d80f2cddfbb05cc956f3663a0e26702bbd710ec7ce3e24c88b" name="ea-php73-php-opcache-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.13"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="27be1a592a87c8a7483af3fb365b7c33ec7ab9cc58544cef506ee49c49a92a18" name="ea-php73-php-opcache-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.14"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.14" date="1784203200">- ELS-2599: Sync CVE patches from alt-php73
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="6bbaa43226149c5e1d38cc819a03fa85fb55fba6e8cf42a06cb810212f9db9cb" name="ea-php73-php-opcache-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.8"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.3.33-13.cloudlinux.7" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="f6fea0d7e2540cae1b735ce76e1fe75e9b525d7bef3795a26b620153a07441ce" name="ea-php73-php-opcache-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.9"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="9f5ece4c60f94b8275c56cd86496c92f89937d8b5a6f6c0e1c91b37d24084572" name="ea-php73-php-pdo-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.10"/>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="a33c956d02141dd01ef35bf0823338dd20dad1dbee5dab2f9cf748ccc977750b" name="ea-php73-php-pdo-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.11"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
</package>
<package pkgid="0f0659fcb1e0f976250f7991ee0ceaec5c84fcfb700b3a068ac15601301f79d7" name="ea-php73-php-pdo-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.12"/>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="e121e51ed839159a2e62d3aff036e9aa803197ee47daa39d950fb95f3a0957c5" name="ea-php73-php-pdo-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.13"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="d8c86c9e3c9e30bcdb17075d8c8d6ba442c2010ae785653ff9116a9b6e9a22b4" name="ea-php73-php-pdo-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.14"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.14" date="1784203200">- ELS-2599: Sync CVE patches from alt-php73
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="ee53e5653eaadf8710dcad9b386ea90e0246574cdb21bdf8956102822d35db4d" name="ea-php73-php-pdo-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.8"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.3.33-13.cloudlinux.7" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="274294386cf82ac4711e2a94aa5516d0d3f8af5085329815ce2da5d635920520" name="ea-php73-php-pdo-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.9"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="39199b0a41a5dd808bdf8e5fda7d860864efe3cae3859d97ce0a47b24aff2456" name="ea-php73-php-pgsql-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.10"/>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="e48d10bd4437db49aa2a8f1ae8b21e80db17b86bb745e4c4699b2cdac558cc8a" name="ea-php73-php-pgsql-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.11"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
</package>
<package pkgid="4a72a7fb9df4aeb539561e8df4edbbfad9ce1cee8a41ce34b724709434bc442e" name="ea-php73-php-pgsql-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.12"/>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="b41fc85de18513e3e535652725eb512767b6aaf4ffd47d9e0c4c40f561205f2c" name="ea-php73-php-pgsql-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.13"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="46e6a58870cbad2369466cfa052bf91ded46f6b3df98fcac66182feab979de82" name="ea-php73-php-pgsql-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.14"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.14" date="1784203200">- ELS-2599: Sync CVE patches from alt-php73
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="85f9c8dedccc368239f3412decc827f6c73c532c866f7d269a473c979e75aeef" name="ea-php73-php-pgsql-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.8"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.3.33-13.cloudlinux.7" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="389e1fab5cc126817ed784bc7d62334da11b0e3ca3a7307e0f2d736bad7e3699" name="ea-php73-php-pgsql-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.9"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="51488d9da2bc132455a1d5ee1c7df68cc208c443e23e6903583952dfc44dcf26" name="ea-php73-php-posix-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.10"/>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="0f36f10c5c19b481bb55de1770ddf78b2bfba3cfb7addc43f8c6277543e68f8e" name="ea-php73-php-posix-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.11"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
</package>
<package pkgid="55e79cac279b549b0d55ac0c300647196f5e509ae5733ea4812143299e00bb93" name="ea-php73-php-posix-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.12"/>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="b91fb5a82195ffa6045d3c0bdac51c1bb4d9a89b2642e1945b3a8add80e6f602" name="ea-php73-php-posix-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.13"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="eaf81b45d89b88e78ab3669eb419d88a2a2abce3d4668ff8d2a65052c9c29ee9" name="ea-php73-php-posix-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.14"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.14" date="1784203200">- ELS-2599: Sync CVE patches from alt-php73
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="11df4233d774d1211a524e7127befa7809f781420453aeade7086adb8e26888d" name="ea-php73-php-posix-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.8"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.3.33-13.cloudlinux.7" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="ecac503956dabc67cc1103fe5681c00df2ae3cfe1103c8a2358e7c3e521d6f90" name="ea-php73-php-posix-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.9"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="5293645ac4cedbeed254e8b8144249c777bea4776ff661b8859980d7f75ecc21" name="ea-php73-php-process-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.10"/>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="eac9da003f656bd8836ce346ff90ccc54939fee4a542ed52718523e4202c1c43" name="ea-php73-php-process-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.11"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
</package>
<package pkgid="d85035550471b41f647519cbc5418e8ccf12445df4fef52cfc8d46a5a65324fc" name="ea-php73-php-process-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.12"/>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="f168d7d92fa27bec064da11665e55b58ba7f993e831042673997a6a8d1f7e69d" name="ea-php73-php-process-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.13"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="ce98e91b87fb2856ae29a97ee51c61400a7f726fe015b47d59a9723d04af279c" name="ea-php73-php-process-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.14"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.14" date="1784203200">- ELS-2599: Sync CVE patches from alt-php73
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="b4a77453d7e8fdd574e87f4cc89fd1cd316a6141bbbb988b38a4d4e8c77c2654" name="ea-php73-php-process-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.8"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.3.33-13.cloudlinux.7" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="5c73db9e603a4f1f7872573ce46bef95bf669181d5a67ef858ffe63da7c50f86" name="ea-php73-php-process-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.9"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="ed3d4f1f8d7955a47917c337dc041de80f323f7640cc7803a2ce732661e2a5af" name="ea-php73-php-pspell-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.10"/>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="8d0ae1fa88b568a7054557df7b5097a922e939362ed6546d0d82fcbc05c10912" name="ea-php73-php-pspell-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.11"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
</package>
<package pkgid="e24c90ef9d1e551135b9c63bf86ac9834e8fc33ed8142cda3bf8f32cc7095945" name="ea-php73-php-pspell-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.12"/>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="109bc087bd45e3481260fa50653336a65f2020b97292a2e42064834f0c88e080" name="ea-php73-php-pspell-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.13"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="fd710b0445e103b243057c7893bf1fff5e975ee1ef7511601f52a7a6fb3f9cf5" name="ea-php73-php-pspell-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.14"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.14" date="1784203200">- ELS-2599: Sync CVE patches from alt-php73
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="54ad6b0741de0f401a9afa6fb9f861cb6eccc725376dcaee1a5627289fbcea13" name="ea-php73-php-pspell-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.8"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.3.33-13.cloudlinux.7" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="f74da878ed75e149a5fbc241b5c27924d6a62fed1db6877ad7f14a9059df07e5" name="ea-php73-php-pspell-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.9"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="ba8c8531ac69654c8f084be74958c86f925901a622ea7b9b404d4f659b782769" name="ea-php73-php-recode-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.10"/>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="7856537b4afeba590c758a7a0c9ad7b3c3e7f394e6c39e63aa0a49f6ad00cf6c" name="ea-php73-php-recode-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.11"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
</package>
<package pkgid="0a9f3fac7db1bc4a84dacf1981da821a297175a3c33f582c3396c06d0ed6aaa4" name="ea-php73-php-recode-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.12"/>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="19808ec3487a187a3e74ba8cfb68515162a08a7e54d31e9d0190d16fe599ee49" name="ea-php73-php-recode-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.13"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="d296ce9895d15a86ba87ca3268c721737e7f8e7f6425dfc74363028d12d07ff6" name="ea-php73-php-recode-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.14"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.14" date="1784203200">- ELS-2599: Sync CVE patches from alt-php73
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="c2edc06fd09a00ef701a94667bf35c7ac168e33f156087ff06d3b53ace4dae91" name="ea-php73-php-recode-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.8"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.3.33-13.cloudlinux.7" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="4917f0b76ee1c3d0bc57b16487c699ff0946e5db3b6aeb1b778b2aef514f5507" name="ea-php73-php-recode-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.9"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="27ecfe0d1895f1ccbd7999f5612c271ca654052ea59c8ce5fa3d77e5f4d4b4f9" name="ea-php73-php-snmp-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.10"/>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="334e990a51d6d7006ddfa061d5504af7c50e93aee59799784cb359290a7f983f" name="ea-php73-php-snmp-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.11"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
</package>
<package pkgid="e2597fa2025fe898cb6365df34ac6fbd787716421ae9f1f21e639f5f78a74998" name="ea-php73-php-snmp-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.12"/>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="b502ea7a280563ea8cea92962694e17264e17292a3dcf9930ac893f7223b5178" name="ea-php73-php-snmp-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.13"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="5c39277d398ab4f525e894915e01012eb5ec7714d4c092de47de52d184410d5e" name="ea-php73-php-snmp-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.14"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.14" date="1784203200">- ELS-2599: Sync CVE patches from alt-php73
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="0ac1dd0f3d706b759f22d571d302685255e7d149e03b7ce01d8b39ae04fd2088" name="ea-php73-php-snmp-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.8"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.3.33-13.cloudlinux.7" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="5f0895c4a8ff4b6e0568fc057cbbe77a97055e69da02b64e7eb35f7b6c37e6ff" name="ea-php73-php-snmp-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.9"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="99fcb4ae28da242e15c902af98d935b81c238ed1ddf1782f67c1a7df921271a5" name="ea-php73-php-soap-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.10"/>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="082e37b7e208487d29e0222e9fce61d85c0978d641d735d0ff503b87ea6b7015" name="ea-php73-php-soap-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.11"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
</package>
<package pkgid="f8a27be0d9e77681a32a4a2b29821ac12414b20082767dc151178a22da964497" name="ea-php73-php-soap-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.12"/>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="c61a6fac83c757731b5296847f62b5e16bb2001b0c3e5ccd45397895dd8206bd" name="ea-php73-php-soap-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.13"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="cbdbefc1c24b0bb3c39cd55589950c6292ee963d6e0e99336bd2ddb1020fa9d8" name="ea-php73-php-soap-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.14"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.14" date="1784203200">- ELS-2599: Sync CVE patches from alt-php73
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="61be3465c4ae53d49686707216af705a3bd5d93fe006caad3486e69bc593eb3b" name="ea-php73-php-soap-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.8"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.3.33-13.cloudlinux.7" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="ff2b5728796dab7651410f3f99f3ffcd3594c0bf8765c17a67cbbe0920c725d2" name="ea-php73-php-soap-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.9"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="c49555defd4637fe7960337f3f12ee1dcad4273ee3c3d8f79af16c4a098aa5f3" name="ea-php73-php-sockets-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.10"/>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="8ade2ae3b180d89d58cb14edfe36784675f738ce9b36d5e3512575eb1ebb8b92" name="ea-php73-php-sockets-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.11"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
</package>
<package pkgid="c10d6c0b6e7bbb168e590de8a1acf350197f2a65b88ec993f9c21d930bf7dbc0" name="ea-php73-php-sockets-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.12"/>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="2c9a4cc76bfae9de9d2aee6f1ccf7bdf78e6c4d3f3837eddea9b57a3ec22ba0c" name="ea-php73-php-sockets-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.13"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="3a8a96277ad651033a2b937612d68c7276152860af4fd954bbf519e993b34efc" name="ea-php73-php-sockets-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.14"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.14" date="1784203200">- ELS-2599: Sync CVE patches from alt-php73
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="e8ed1db57a89417dd3e8296119c901f3717660c2ea71f23d2db3f3d85fba81ff" name="ea-php73-php-sockets-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.8"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.3.33-13.cloudlinux.7" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="72eef8081f26184abb2c321d77c64720fb7b53fea9602a7f2fc33408c69dae46" name="ea-php73-php-sockets-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.9"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="4bfbab79c28fae1cc356f49c5c3290213d4c0278a350ff214dd14795bc11eadd" name="ea-php73-php-tidy-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.10"/>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="b52aedca94eec691706a537bf25347b41c29c23f759e8ee8e8dfa8e783180ed2" name="ea-php73-php-tidy-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.11"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
</package>
<package pkgid="e3e82db9e0b60b45b2cb96be4ffee6d7b58b713d414e08ac4e58542b682b963d" name="ea-php73-php-tidy-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.12"/>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="92982c5a93625fd33d44411e338e577fd18979bf68da15e4abbfb42df38d7228" name="ea-php73-php-tidy-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.13"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="d346f98086be1afdaf3d81a2b3e8a240d2f7d300149e4efd9f44775688975e9c" name="ea-php73-php-tidy-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.14"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.14" date="1784203200">- ELS-2599: Sync CVE patches from alt-php73
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="d696f3c381a21a91ce998ea910cdf9fae7298676a9dce52283b13e215afee866" name="ea-php73-php-tidy-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.8"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.3.33-13.cloudlinux.7" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="571dc85215ea356e88cf20d58a0a59e0a707b49d379b0d80431767777f631989" name="ea-php73-php-tidy-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.9"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="11a38a87e82dd986d2970c28ae32d44a501c4473ba73055aec2e4ba8dd8191dc" name="ea-php73-php-xml-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.10"/>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="d9c84cae0709f84e3ddb0a4b266d292b70dd7a47b26756ba044e4b9e54e11e3c" name="ea-php73-php-xml-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.11"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
</package>
<package pkgid="77cd1f3f69fd6f3157ec147443e92a74b460cee92c7b6b462ab52f20332203af" name="ea-php73-php-xml-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.12"/>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="ef0c90ed87846b8e23751843d4bf149c37ac6dc2a3669c935181a6cda10ea46e" name="ea-php73-php-xml-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.13"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="dbb0c8e726a0248aa86c76544e887ed703da228d28d737d3f05c173c67c3d430" name="ea-php73-php-xml-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.14"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.14" date="1784203200">- ELS-2599: Sync CVE patches from alt-php73
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="50772aebda232b7303037725d4139bb88f4142a5c3fbc9bba44e0d95c11a7461" name="ea-php73-php-xml-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.8"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.3.33-13.cloudlinux.7" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="328141e1eb35add8a33c46c7f9ead8c39e869eda1082954d680cd0072beacc75" name="ea-php73-php-xml-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.9"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="aeeaeb624abc4d2a3b6d16e56a218ebbd5385f3f4092dd354f4fad7320f9fb0b" name="ea-php73-php-xmlrpc-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.10"/>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="ced0f7e991c356892f6219a24b3cd2dfe16a3d3161ccecf2fcbc07b11f325412" name="ea-php73-php-xmlrpc-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.11"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
</package>
<package pkgid="b2b5d7b9062fdf7b706184f38d38d7a4ef033e5bf23600f4f14789a3438bc78f" name="ea-php73-php-xmlrpc-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.12"/>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="d33a71e8e8ae96b4696ec7c3e7f70859431b922b78053de1629e4dc3235670c5" name="ea-php73-php-xmlrpc-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.13"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="e78222ce2d19b64d8184a7497c7480b9d71ea3f88e59c85b0c0a7274cf6df2c9" name="ea-php73-php-xmlrpc-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.14"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.14" date="1784203200">- ELS-2599: Sync CVE patches from alt-php73
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="abbe4fab2edf954a41b9e605c8dddfb8ea9d0cad6e52462c91642b3d81f3bbc6" name="ea-php73-php-xmlrpc-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.8"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.3.33-13.cloudlinux.7" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="c239fd2e595858a26967182349139774bfa5109f53db4b33425fe7316d1f0a0a" name="ea-php73-php-xmlrpc-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.9"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="ad053bb9f2be11d713a3bbeb7c3fce0bca6ca5a4e5913a4bc30d02c84ace4464" name="ea-php73-php-zip-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.10"/>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="1cbff1d14c8537eb5f5e6b61ed43ac2b29487fab265fd706e06c2549aa6e6645" name="ea-php73-php-zip-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.11"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
</package>
<package pkgid="43de8e7a9cec4e7370a2b9f3c8862f2d7c3ff2546148c314cc15d5840d23c3a4" name="ea-php73-php-zip-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.12"/>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="8bd05dcf461b01da7c217d8cb7154544a666eda441dbe32175b3114a6dd160ff" name="ea-php73-php-zip-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.13"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="bcf33f0bb27f2eedbbeeb28f31fa3b45d6098c1cb14112909f6680e842ca1320" name="ea-php73-php-zip-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.14"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.10" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.11" date="1778760000">- ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
  to avoid runtime infinite loop caused by SCCP+DFA miscompilation
  (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.12" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.13" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.14" date="1784203200">- ELS-2599: Sync CVE patches from alt-php73
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="24431a7efe453ff5c4022b593fae9750aba4a6dae4f05130b5812b115d6a7201" name="ea-php73-php-zip-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.8"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.3.33-13.cloudlinux.7" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="7a34c7d206542a45061876e2892f43557aa093ded72b80a91c24db2b4c9aba91" name="ea-php73-php-zip-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.3.33" rel="15.el9.cloudlinux.9"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.3.33-14" date="1759924800">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.3.33-15" date="1764331200">- EA4D-714: Fix gd.so linking against ea-brotli</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.1" date="1766491200">- build for rhel10
- build with alt-libicu65 for rhel10</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.2" date="1766664000">- EA4D-731: Fix for ea-libxml2 2.15+</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.3" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.4" date="1771502400">- EA4D-773: Rebuild ea-php73 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.5" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.6" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.7" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.3.33-15.cloudlinux.8" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.3.33-15.cloudlinux.9" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="e3f0d89101e8e61a9c1e7e7ac8fbf91f65a29e28b75ff366446d37e4dc4048c8" name="ea-php74-php-bcmath-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.10"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.10" date="1784203200">- ELS-2599: Sync CVE patches from alt-php74
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="415c81f69ca156e85997ff23ae3feab8c5479a7b606e6990a89b9d8becf05481" name="ea-php74-php-bcmath-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.4"/>
  <changelog author="Dmitrii Samoilov &lt;dsamoilov@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.5" date="1748260800">- EA4D-789: Security fixes
- CVE-2024-11235: use-after-free for ??= due to incorrect live-range calculation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="d2f6a6c75c897d1f51b006502a85b13c96862057240e86ddd9833c03069548bb" name="ea-php74-php-bcmath-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.5"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.5" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="5da1dbbc3752760b67ec8f47f40f769fa6cadc79da18e6ba378e2c1b428b341d" name="ea-php74-php-bcmath-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.6"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="64ce87d69e8eddc68cd74fa5ff932c7f3da4a041087b58a5d14f4ef6fd81b3c3" name="ea-php74-php-bcmath-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.7"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
</package>
<package pkgid="37ed1bc124e39127a60e11ba527adfa9c5fae7417d065bff0869497661eb8e80" name="ea-php74-php-bcmath-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.8"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="08178f802ae109ca8c561d7fec84fd65099628810716827846f221dbbb02538b" name="ea-php74-php-bcmath-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.9"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="49a9b5fd977312c0052f0935df4d6f874ebcdb7579167a3bf74d7f2a5b95bd0c" name="ea-php74-php-bz2-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.10"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.10" date="1784203200">- ELS-2599: Sync CVE patches from alt-php74
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="69624fea125a0ba292b83769461a2e21d89cb5a0d83f56e790d41d4ae515db46" name="ea-php74-php-bz2-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.4"/>
  <changelog author="Dmitrii Samoilov &lt;dsamoilov@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.5" date="1748260800">- EA4D-789: Security fixes
- CVE-2024-11235: use-after-free for ??= due to incorrect live-range calculation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="bec7fb291eaa101fb3ae6079e533133a7c0516ed15dff1abc141b97f2136e89a" name="ea-php74-php-bz2-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.5"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.5" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="51af74da84866761391bd1bb23175a9f5d1b84d93a94e30b72c98ce900dca012" name="ea-php74-php-bz2-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.6"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="c7c04ec4f07e6319a9e5793ac4024e38d0794c880e80b31ec15c5333af030e47" name="ea-php74-php-bz2-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.7"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
</package>
<package pkgid="42d8514db7389a7f1a8c446f5ec9a9e22b9c5772a0a5106b169310a797e7345e" name="ea-php74-php-bz2-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.8"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="f423df5bcaf1f84ac1536a939dc7de6fc9fa3d1c376a930a18cd9ae0ce389e9e" name="ea-php74-php-bz2-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.9"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="31fae64e801d436aebb14e67c792617189aa2a4e27208fcfffdeb1010a6554cc" name="ea-php74-php-calendar-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.10"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.10" date="1784203200">- ELS-2599: Sync CVE patches from alt-php74
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="0a0bd4c5f8be5c77ec702fd072176198f9ba6e1b7303a1e68c893722f36d9062" name="ea-php74-php-calendar-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.4"/>
  <changelog author="Dmitrii Samoilov &lt;dsamoilov@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.5" date="1748260800">- EA4D-789: Security fixes
- CVE-2024-11235: use-after-free for ??= due to incorrect live-range calculation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="af28aa03677ea6c2c5fe0ffe621a7b918303ede963e6dcd767e9c0a1c61a534f" name="ea-php74-php-calendar-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.5"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.5" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="bd964967c31e55d151e3476d0c5d466ad0eb4f29e71cf682194a86ae5464b5af" name="ea-php74-php-calendar-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.6"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="3b0f2a69bd32486bb22638ea73d80a64382ba5066618b61d8f05b8f9295907bf" name="ea-php74-php-calendar-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.7"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
</package>
<package pkgid="8e4fd74241c96eded84d039adcd4e0913a239d407a34961b4149385170ae26dd" name="ea-php74-php-calendar-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.8"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="3902befd04cfafa3f076e7fd13d508c71c85a87b6f222e9fb02082cca402fa9e" name="ea-php74-php-calendar-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.9"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="5fb0d81eb792286e037702786711bcc1096a7d558ecbda7e80506ba6ded4816b" name="ea-php74-php-cli-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.10"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.10" date="1784203200">- ELS-2599: Sync CVE patches from alt-php74
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="9fd80a35cda9ba273de031fddf4e6439929fb482d12ea50f771706541fe282b6" name="ea-php74-php-cli-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.4"/>
  <changelog author="Dmitrii Samoilov &lt;dsamoilov@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.5" date="1748260800">- EA4D-789: Security fixes
- CVE-2024-11235: use-after-free for ??= due to incorrect live-range calculation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="32770a38b3101028149e6b55b51aadee22f4d203c45e32311c2ef95f13e14915" name="ea-php74-php-cli-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.5"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.5" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="a07d53502dbd2aa978f090f6c98005b734c2e5422470912806e859e35e3a9827" name="ea-php74-php-cli-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.6"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="a77bd6158317bc69bc39618669b89595f3cca79db49f759a0803bf32ddc53031" name="ea-php74-php-cli-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.7"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
</package>
<package pkgid="99ed02722b8d078b5d6104b42cce61062a4a39c6eed168113faef5942b9a0fb3" name="ea-php74-php-cli-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.8"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="4c4dd601b47bde72a71d64990b5079d5110595e9bd1d6f07ebb77f7a7925c775" name="ea-php74-php-cli-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.9"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="2ca26d2056f77a0234d46d9e38537f56f737e98d29b677f88ebf602baa34017b" name="ea-php74-php-common-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.10"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.10" date="1784203200">- ELS-2599: Sync CVE patches from alt-php74
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="c39b3a4a0b52d43d3447a5137e8c79a34c23c3ccb143323ebd865ea9c05b938f" name="ea-php74-php-common-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.4"/>
  <changelog author="Dmitrii Samoilov &lt;dsamoilov@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.5" date="1748260800">- EA4D-789: Security fixes
- CVE-2024-11235: use-after-free for ??= due to incorrect live-range calculation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="210886e7a35afa593abbfd0492bfd4e6c80d583249d1eb947eef0c849d57eadf" name="ea-php74-php-common-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.5"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.5" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="3e4a0c58f1de14426f83b52c72a52902a17356a428b4d9acb2398667e766ee1b" name="ea-php74-php-common-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.6"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="83d767c34d0cff9594c49e4777180fc8990d09d58281585cb3201a736ae2f0a1" name="ea-php74-php-common-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.7"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
</package>
<package pkgid="bb5f2f1b7702a11dec9dadca9c367b6c4dfb71603dc90a22a68798c9cabcd707" name="ea-php74-php-common-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.8"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="03c0c47bb00ce54934a462c233195504505714e6b067a508d297c4b1f5d778c2" name="ea-php74-php-common-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.9"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="9c74975ad7748755253bae8b19ac34c7689cc00fee2f9b31b2193e3acda65099" name="ea-php74-php-curl-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.10"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.10" date="1784203200">- ELS-2599: Sync CVE patches from alt-php74
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="eeb2f7c492c67e317d283d1ba163f20ff8081a8fbbd2440fa405f99dda512fb8" name="ea-php74-php-curl-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.4"/>
  <changelog author="Dmitrii Samoilov &lt;dsamoilov@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.5" date="1748260800">- EA4D-789: Security fixes
- CVE-2024-11235: use-after-free for ??= due to incorrect live-range calculation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="8ed9bf61c1ebde755857a5468fe92eca6c19057379db0ab730d8758687851092" name="ea-php74-php-curl-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.5"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.5" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="04f9ad551c67a91e9ef942cdd39ab66c460e7c8b9a39eebb9c3d06ff21743402" name="ea-php74-php-curl-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.6"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="3fca9a4c0ab2e7160a6abb2c3d23e647b5a7fa8d628315c0b350d983541d09d4" name="ea-php74-php-curl-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.7"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
</package>
<package pkgid="b1e4c16ef5553d95a0379de5c9639165d7ad16ca6aa42858b1636ce707319323" name="ea-php74-php-curl-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.8"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="e35ee58bce5a8208578ad595b455a1ddb31d6053ad72659b48470bd787444042" name="ea-php74-php-curl-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.9"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="e76732166ebb20c10d32f96decba97326b4c9a4f6fb286724f5cbbe03d1a58da" name="ea-php74-php-dba-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.10"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.10" date="1784203200">- ELS-2599: Sync CVE patches from alt-php74
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="9607d397a49642ddafbb46f0dd9744404c302a8af632967d5e459e2927f273f0" name="ea-php74-php-dba-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.4"/>
  <changelog author="Dmitrii Samoilov &lt;dsamoilov@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.5" date="1748260800">- EA4D-789: Security fixes
- CVE-2024-11235: use-after-free for ??= due to incorrect live-range calculation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="ae7a61704bf7a2eb1290ccf2d4179a66f4ebe420474e43a590052f23d35dfb48" name="ea-php74-php-dba-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.5"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.5" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="660093da811a6625843433e0bdbfbda345b49465c5c15e4febe00c2f70634a03" name="ea-php74-php-dba-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.6"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="653d597b444ce6b7f91c662349a2b694e8dddf95351e72b1de57c63981848446" name="ea-php74-php-dba-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.7"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
</package>
<package pkgid="6a41e82f80cefe001c933eead749fed8c69726eaf3517fc0c09ac8f058f3c2c0" name="ea-php74-php-dba-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.8"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="d90808b375989d7b8479564a89dd73ead82b014d7b5d532f2dbe49e434e9d9b7" name="ea-php74-php-dba-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.9"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="186d1c331698fb5ae3daba013475b1a160611b108023da29304b9cd5c1e7fd61" name="ea-php74-php-dbg-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.10"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.10" date="1784203200">- ELS-2599: Sync CVE patches from alt-php74
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="1328b2107d574f5a8eeec816a89375fed20dee322798239df53d85cd92d81415" name="ea-php74-php-dbg-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.4"/>
  <changelog author="Dmitrii Samoilov &lt;dsamoilov@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.5" date="1748260800">- EA4D-789: Security fixes
- CVE-2024-11235: use-after-free for ??= due to incorrect live-range calculation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="20255546ae4f86082b4021d9a9a3f5dae0bd386c155211a6f944c35afd1afd2a" name="ea-php74-php-dbg-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.5"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.5" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="0b11616ac546f220c4b79e3a81a0456f0961ad49e5c6e08278847a25e639e6f0" name="ea-php74-php-dbg-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.6"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="f78756acaa601d0f1cd116c0d41bde60bdfc94f6baa4c513c2b8d199c85d6a8e" name="ea-php74-php-dbg-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.7"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
</package>
<package pkgid="e33a730659c9b0a25d9b796504606a8a0f46b56b1317351e8f1c97a4bce51c54" name="ea-php74-php-dbg-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.8"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="abd469907676168bde5330c9df486b35cbdc94696b6c603f7d4ef0e6e72b2632" name="ea-php74-php-dbg-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.9"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="38fa2242687e9900af4f2d82863f913132840081627c618063ffbf8814c0ebee" name="ea-php74-php-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.10"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.10" date="1784203200">- ELS-2599: Sync CVE patches from alt-php74
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="d72dac1cb0a3253d16987e6c311e55bfe5bc05d53531ded4fd40c8fc7b8229bc" name="ea-php74-php-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.4"/>
  <changelog author="Dmitrii Samoilov &lt;dsamoilov@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.5" date="1748260800">- EA4D-789: Security fixes
- CVE-2024-11235: use-after-free for ??= due to incorrect live-range calculation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="99b6d288e7a7f3b8cc726b1404c1ee141ad3c26a283a79993d0ef23b1c2a7cab" name="ea-php74-php-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.5"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.5" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="d4834cb186f53fa218b9eab5a961c9f9aac7d9f250c4788b0614ed98841d32a5" name="ea-php74-php-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.6"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="3c59f569730657bb4f459f6b7d3a13334a1a9c42ac4c76d0eaf12807b1bec855" name="ea-php74-php-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.7"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
</package>
<package pkgid="3d219f8f195bb591dcf92741627e7f3c7e5dd4db4c1a7cc06e3b1d8fbc4fafd1" name="ea-php74-php-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.8"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="a54bd0864b4ea49ab2a6da91238d2bc12e32984a921560b3f123c0762281ac61" name="ea-php74-php-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.9"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="8b4d3ca37386a77967e0851249d5f2d56a615c598a00a4f1229cf836e2e6505c" name="ea-php74-php-enchant-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.10"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.10" date="1784203200">- ELS-2599: Sync CVE patches from alt-php74
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="28d3e145b42c7b6d8cc84854ef705bf97cd212b3a87a9ca4529a843ca7161c10" name="ea-php74-php-enchant-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.4"/>
  <changelog author="Dmitrii Samoilov &lt;dsamoilov@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.5" date="1748260800">- EA4D-789: Security fixes
- CVE-2024-11235: use-after-free for ??= due to incorrect live-range calculation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="d8c30f6de16aa2b11fb032801b903b6cdae03815dd3365e78a291a7695e12b58" name="ea-php74-php-enchant-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.5"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.5" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="cd56728b1787229f6257fe32d288913115e0b552e517c861e41cc1f210732772" name="ea-php74-php-enchant-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.6"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="5b6d1fe3f7eff20a13c99b061cec5ff367036a3ce37f9d70189b80da30b9988e" name="ea-php74-php-enchant-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.7"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
</package>
<package pkgid="8f6eca01a5ce8743c2ccc79a1558ab7d8b62a15a875c42a3640652164ef205b9" name="ea-php74-php-enchant-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.8"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="2217124c009bcb1e6297f44f2295a747454d200cac939b33b7140affa47a53d2" name="ea-php74-php-enchant-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.9"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="276a1581c307c8121f3d6bcc8b86755d1403ea11f070e85cc89dfed6bad684a9" name="ea-php74-php-exif-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.10"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.10" date="1784203200">- ELS-2599: Sync CVE patches from alt-php74
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="7b1e4f1cb4bd08dbfa7a513ebf785dbd52721e0295d8e00863c44f87ebcd9ada" name="ea-php74-php-exif-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.4"/>
  <changelog author="Dmitrii Samoilov &lt;dsamoilov@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.5" date="1748260800">- EA4D-789: Security fixes
- CVE-2024-11235: use-after-free for ??= due to incorrect live-range calculation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="13cebd7af1f86bd663ab70f345940e0664d0f03de80d50df52d38ef634e35cfa" name="ea-php74-php-exif-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.5"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.5" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="bfcbab0f8ed58b87134d02f84d467ec60860310d864438f76fda52161da6295b" name="ea-php74-php-exif-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.6"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="bcbb02332be52a363119f6a97c71be3c1f15477fb74bd51182f45b25d506161e" name="ea-php74-php-exif-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.7"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
</package>
<package pkgid="388bfbeef31553c96adae917090114861a7dc218bedd4bd1e569b92344051abf" name="ea-php74-php-exif-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.8"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="a2b765fae5685c2a49642310a29a25e2960554cd1c1b5f9417324825bd42b7da" name="ea-php74-php-exif-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.9"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="63f6b42010de6877035ea529c4479ed66cf913dcdedba6700aaf08badbcb4f2b" name="ea-php74-php-fileinfo-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.10"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.10" date="1784203200">- ELS-2599: Sync CVE patches from alt-php74
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="e2d89b4ff2f3a947707f88c93bcbeb82c03e7b7544fc8c6713c1b762a685350f" name="ea-php74-php-fileinfo-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.4"/>
  <changelog author="Dmitrii Samoilov &lt;dsamoilov@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.5" date="1748260800">- EA4D-789: Security fixes
- CVE-2024-11235: use-after-free for ??= due to incorrect live-range calculation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="9e63c9548fd471b12b7bc626336a6aa56697887ff6419dec550ab25896d21d6c" name="ea-php74-php-fileinfo-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.5"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.5" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="ca9dc2ae8f7415f01f6fed698546a7d93d721c5fa3de89d7947a887c8cdefb2f" name="ea-php74-php-fileinfo-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.6"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="4c0e79630431be2213c9473e575c85f3c70104b3a68a214ca6624c37c0e7a21e" name="ea-php74-php-fileinfo-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.7"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
</package>
<package pkgid="ae27102f7a853671a9f87de53cc011d1745389fc0e12e3a487d91f61001b8075" name="ea-php74-php-fileinfo-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.8"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="8d293d78242301927377925a4f45f91033b7983398beee7aea9f51ead1b04ec6" name="ea-php74-php-fileinfo-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.9"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="62e30798d4682616004b6262be21d315062235693c04d391b8d82e880fe78661" name="ea-php74-php-fpm-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.10"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.10" date="1784203200">- ELS-2599: Sync CVE patches from alt-php74
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="7d83239c1f9627b7fb5d27bf70cf3ce911fa00306a7aea9b7a036479699c1da7" name="ea-php74-php-fpm-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.4"/>
  <changelog author="Dmitrii Samoilov &lt;dsamoilov@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.5" date="1748260800">- EA4D-789: Security fixes
- CVE-2024-11235: use-after-free for ??= due to incorrect live-range calculation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="1cdfae96e203508aa87c81adcd9726ef0e306bb551f70a53863d4d882943912f" name="ea-php74-php-fpm-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.5"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.5" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="9cc5cda107626bf0f427747453d7f5fdf8abddc4f8264f641eb92b200bdf956c" name="ea-php74-php-fpm-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.6"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="8ed85097aea8000022ab6ae5ac5e07d7fd7ad63763081f6c394ed03cf78ea081" name="ea-php74-php-fpm-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.7"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
</package>
<package pkgid="bad04e4ee4e1195304547756c16daa2347a006e6c66779a282f0c6935ac8107e" name="ea-php74-php-fpm-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.8"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="5494b10bd26d80a7630863144067782b35fb1f61a9b21feac64b09fe57810d5c" name="ea-php74-php-fpm-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.9"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="835aa0fe4fc6845e1f262ed52c36d58e501fbd15747c9dc066b99d6914a8ba66" name="ea-php74-php-ftp-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.10"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.10" date="1784203200">- ELS-2599: Sync CVE patches from alt-php74
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="c1ead7977036519cbe6e06447ca2d613c4f0602fc18fa7b35f2c1fea8d7cee20" name="ea-php74-php-ftp-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.4"/>
  <changelog author="Dmitrii Samoilov &lt;dsamoilov@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.5" date="1748260800">- EA4D-789: Security fixes
- CVE-2024-11235: use-after-free for ??= due to incorrect live-range calculation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="46ff2afd633f112f9a568f3de0fd691996dd3479ec62398483a49552a00c0f6f" name="ea-php74-php-ftp-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.5"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.5" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="379e7c72efbdd24fff3b70b89695b6fb73b3ca27ff4a9d802f7bb9834997704b" name="ea-php74-php-ftp-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.6"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="8acc0d208859907d4423d00bceedd1fdb4a3cbd9ab636bb79e92755551c2fd34" name="ea-php74-php-ftp-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.7"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
</package>
<package pkgid="6697412f7f058d0328bc36bf7534c84eb959ef984bbb245f6c6b63c0a4285d8d" name="ea-php74-php-ftp-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.8"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="d67f1be18e6f16949f5e77c4015b1dbfd97fff2eaf38fe13ef8e0a7712fac218" name="ea-php74-php-ftp-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.9"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="3cea10a099ab3a2a8dd42dd539708e126ecb5277bbe326dd7700cccee78ec137" name="ea-php74-php-gd-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.10"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.10" date="1784203200">- ELS-2599: Sync CVE patches from alt-php74
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="e514f9f714e695a3865c39aadc5744810a9a2354cba75ad0fd9376fb62310de9" name="ea-php74-php-gd-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.4"/>
  <changelog author="Dmitrii Samoilov &lt;dsamoilov@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.5" date="1748260800">- EA4D-789: Security fixes
- CVE-2024-11235: use-after-free for ??= due to incorrect live-range calculation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="60f4d58ad96fca0ffc500585763b2e30843e6b7e6cc17a40b20088dbdfab2294" name="ea-php74-php-gd-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.5"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.5" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="29db7b2a278af1c20cd0ef6d5099d61b3dae6ea8450bebc08a2034596af06589" name="ea-php74-php-gd-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.6"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="b23eec1509cbf126ce6394cb5b0381977174f54845f57c809216a3a8b9974db9" name="ea-php74-php-gd-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.7"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
</package>
<package pkgid="42dce99f26712ab30e5ac0706096b45adfb915ff66309c83a0837cb13b91171b" name="ea-php74-php-gd-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.8"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="8123281fadb44c7ad23bde285921b00b521ce000fc2c59918eaa4ea036e92330" name="ea-php74-php-gd-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.9"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="a97775003643dfce77a0ee551fb253b0a6342a99df785ecbf72ca74e12907f88" name="ea-php74-php-gettext-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.10"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.10" date="1784203200">- ELS-2599: Sync CVE patches from alt-php74
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="252af9b46876f037318daf9db44cfac3c08ee862bff6c8d325ab8299fce9b3f3" name="ea-php74-php-gettext-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.4"/>
  <changelog author="Dmitrii Samoilov &lt;dsamoilov@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.5" date="1748260800">- EA4D-789: Security fixes
- CVE-2024-11235: use-after-free for ??= due to incorrect live-range calculation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="21a05eb363a0900fb6531c1571307439ba0acf431262896dcdcb2eb6c5d5757e" name="ea-php74-php-gettext-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.5"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.5" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="edbccf8699fe6d247258c1e830f1d046cb1c3f62f0e815c2e799289233d7906d" name="ea-php74-php-gettext-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.6"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="5e5c133a08ee494a25cca6fde581617ff3e2cbea5b670316dd0b5bf12d9760d0" name="ea-php74-php-gettext-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.7"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
</package>
<package pkgid="8c529a48a1e55776b04c38cfc03eb7f963fe4bf8036e2100dfbe362b751b7534" name="ea-php74-php-gettext-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.8"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="445ffcb7a282ca73613d05ff5a2d7e0d64c538b2cac9139852c92c1a19962eda" name="ea-php74-php-gettext-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.9"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="03cf42cf1f6dec82ebb8345caa8644019726e37bf96687ebf75ea0c71bfa3ee2" name="ea-php74-php-gmp-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.10"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.10" date="1784203200">- ELS-2599: Sync CVE patches from alt-php74
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="e2988f446c63b3592daf4c81875e68f5f55958805331b7c3cfb5e51c54159077" name="ea-php74-php-gmp-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.4"/>
  <changelog author="Dmitrii Samoilov &lt;dsamoilov@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.5" date="1748260800">- EA4D-789: Security fixes
- CVE-2024-11235: use-after-free for ??= due to incorrect live-range calculation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="caa6825e14147b00ff5efad45e77d2a62d6f839f9b6850d26742d4b43eb80c15" name="ea-php74-php-gmp-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.5"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.5" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="93728d472cb7d6ad46b17a10506e5fc85e14d0f4f9ae08dc4f5d4e743a7b4be4" name="ea-php74-php-gmp-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.6"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="b84e176ae235fc92629c31a4c00dbf843485261fe59fad1949549ff4abdfc2a0" name="ea-php74-php-gmp-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.7"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
</package>
<package pkgid="44abeb8d31fec2acc76bb9ebbf17369c8034593f84e1a29069ac80141efa9e35" name="ea-php74-php-gmp-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.8"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="ff0da3f4ab640938f98bd60a87f46a1cadf012d3291855b4f622761d901a385a" name="ea-php74-php-gmp-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.9"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="ca1cdabe762f85a889972eda0d657f3f90be1e1f2589100b26424f03d18514ff" name="ea-php74-php-iconv-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.10"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.10" date="1784203200">- ELS-2599: Sync CVE patches from alt-php74
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="1c86cfbc5dabfdc8e8bfa282c1033396828daf8620449c4777c3f9a34ce66600" name="ea-php74-php-iconv-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.4"/>
  <changelog author="Dmitrii Samoilov &lt;dsamoilov@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.5" date="1748260800">- EA4D-789: Security fixes
- CVE-2024-11235: use-after-free for ??= due to incorrect live-range calculation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="34cae554d9849c144239aae099fa9b00306f421a4adfad7856ef74135a225046" name="ea-php74-php-iconv-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.5"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.5" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="1799fa18bad91c4387f4e47dcdce56dca2a476f6704467b6f19266713f4844f8" name="ea-php74-php-iconv-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.6"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="c01e185ec86cc620e14f96639cd2c85d6b8d501f3c2f8715716699476951ed5b" name="ea-php74-php-iconv-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.7"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
</package>
<package pkgid="757ed847c546dc799928fb8d745d53b3871f271768142a6f862e61b2f5b3d60d" name="ea-php74-php-iconv-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.8"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="24a1e691718a3f561b1fc0622eedc432db6022c5213962dd98cf9a7679650e82" name="ea-php74-php-iconv-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.9"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="475ae8d89be8d2a7dbf77b5c83a0b9a8fb973df1162318830bf8ac73dccfdacb" name="ea-php74-php-imap-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.10"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.10" date="1784203200">- ELS-2599: Sync CVE patches from alt-php74
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="96e3249991629f031114ade8141bfab42c836d13e80d11f4ca3f05540d4447c5" name="ea-php74-php-imap-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.4"/>
  <changelog author="Dmitrii Samoilov &lt;dsamoilov@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.5" date="1748260800">- EA4D-789: Security fixes
- CVE-2024-11235: use-after-free for ??= due to incorrect live-range calculation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="937badcb347fb57045511c4c8843e729eb2c5e26149baa0121513a69b77d61f6" name="ea-php74-php-imap-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.5"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.5" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="2ea8fdf2570ee85f32e834ecd6ab88cbb0d8861430d309c3637e64be7e9eff86" name="ea-php74-php-imap-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.6"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="a0a125df0bc5c072c41a1345c39a23427425b2b6b14ad4e99c358a8575f38852" name="ea-php74-php-imap-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.7"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
</package>
<package pkgid="b26b6a0ea47df390cdbfa044884b0bedf35ba83d6ee10b6506e0029c0247fb9b" name="ea-php74-php-imap-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.8"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="a0ba9d1fbd98a1e05a367606b181b063013ba68a24d8043a20944e7fbd0a1ba9" name="ea-php74-php-imap-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.9"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="9fa9d12640ceb5d27df9c8e0cba1688624f2d8998fb08ec60367be931dc638a1" name="ea-php74-php-intl-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.10"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.10" date="1784203200">- ELS-2599: Sync CVE patches from alt-php74
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="a0bc4358a10ee5fbf8157c8ea4cc4429c30deeff5f40e28d261e70a65bd86dc8" name="ea-php74-php-intl-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.4"/>
  <changelog author="Dmitrii Samoilov &lt;dsamoilov@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.5" date="1748260800">- EA4D-789: Security fixes
- CVE-2024-11235: use-after-free for ??= due to incorrect live-range calculation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="71a6188a4f8e518df0b3befb9aa66b7eca8df60c594bcd137aeb0c79d4559441" name="ea-php74-php-intl-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.5"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.5" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="a84ce0f132efbf1a54f0c4cf57b625b5ca974fc25afb892f58cb789ef956fb3a" name="ea-php74-php-intl-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.6"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="de4b03a5c9ceede1d39184adf847df783f219af3e49d348aac33260b5688c26e" name="ea-php74-php-intl-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.7"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
</package>
<package pkgid="4601905f32e5c53751224860dd8fd38bf101a9e9872eab1a93bc4bbe162eb51d" name="ea-php74-php-intl-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.8"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="7bb8fcb370721deff2fcb424e45651192b9106607e72e6eb979e5833786cc12a" name="ea-php74-php-intl-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.9"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="cbab3da5a1fc3ffb04156c02038306d9bb3c9891fae76c12f11da055297384a6" name="ea-php74-php-ldap-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.10"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.10" date="1784203200">- ELS-2599: Sync CVE patches from alt-php74
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="84e1d3d6e050bbfec821863853ad7ab08eb1de97822ea79fd8ca9db03c769311" name="ea-php74-php-ldap-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.4"/>
  <changelog author="Dmitrii Samoilov &lt;dsamoilov@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.5" date="1748260800">- EA4D-789: Security fixes
- CVE-2024-11235: use-after-free for ??= due to incorrect live-range calculation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="8364e53b51f36e9cc40d5cc547fc6444e832ffc7f1e4c38e2c77d3f81dce1555" name="ea-php74-php-ldap-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.5"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.5" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="bdc24b420f6a02482ad15d264297deb2ce6cdeded7771997cd8e02c75d7d2b57" name="ea-php74-php-ldap-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.6"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="cd7a73a3cdc8edfa30e2741928c5b81dc0a4544da7a76da927ec06607d7b58b0" name="ea-php74-php-ldap-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.7"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
</package>
<package pkgid="4c740a97183c60ea85be681607ae95ceadebb852031c6038f6280b7a79c7b0f6" name="ea-php74-php-ldap-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.8"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="17075410a14e960dee21e404340c8e8aee5513865bcf090d65999c6c1faed313" name="ea-php74-php-ldap-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.9"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="da93e67630b46aee73a45aee8b990963c99e42b08e82ce34d3c62147a6123b46" name="ea-php74-php-litespeed-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.10"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.10" date="1784203200">- ELS-2599: Sync CVE patches from alt-php74
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="c03465d98daa0ed97075b5667a7a593f13908918b3be0637e6825ba6789af46e" name="ea-php74-php-litespeed-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.4"/>
  <changelog author="Dmitrii Samoilov &lt;dsamoilov@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.5" date="1748260800">- EA4D-789: Security fixes
- CVE-2024-11235: use-after-free for ??= due to incorrect live-range calculation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="0f7a8f6c10ca9ccd2cd9867a8b7311c85b9143dd6512bba9a4b9a4e1504e1618" name="ea-php74-php-litespeed-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.5"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.5" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="0e6ccfbaf2810f03a546c6d3f2bb065e6ba38260da58a2747fd3910072db98b0" name="ea-php74-php-litespeed-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.6"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="d676bbc66c10672b0154761b81d085f7bd3079fe5e56114e74b06a062d91ba43" name="ea-php74-php-litespeed-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.7"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
</package>
<package pkgid="dba536417d4aec9d6424013bc1e765da89d9d95703fe3c71798b5e3b7bad1a55" name="ea-php74-php-litespeed-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.8"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="89860ec50304bd87c2dd4630021dbcc57b1d1d9627c319429f36731f3b46cee5" name="ea-php74-php-litespeed-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.9"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="7b84dd639869fb9cbe474820d7decf17a6b7854a3c19a721801c729e3e440727" name="ea-php74-php-mbstring-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.10"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.10" date="1784203200">- ELS-2599: Sync CVE patches from alt-php74
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="0a18aab1cf50e80652779c92843ffca3a9ef7e476e1b6d3d403856b6faf0db59" name="ea-php74-php-mbstring-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.4"/>
  <changelog author="Dmitrii Samoilov &lt;dsamoilov@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.5" date="1748260800">- EA4D-789: Security fixes
- CVE-2024-11235: use-after-free for ??= due to incorrect live-range calculation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="c344f54b37dd3ac28a3afb7e581e534172b90a490011b06add4f731c64e308ce" name="ea-php74-php-mbstring-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.5"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.5" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="b728cda54f6beaec49be6dbe2564ab3319efa4b3c06eaba8ac63718f0bea837d" name="ea-php74-php-mbstring-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.6"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="b8b8570df379aa14749d8621c28aa5d4e52ab66de36606709ea91473b9a20ede" name="ea-php74-php-mbstring-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.7"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
</package>
<package pkgid="d5d32c3bff913d1ee55d5ad65d774284252bec11b362ffec0fe9541462f88138" name="ea-php74-php-mbstring-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.8"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="74b678c057385d76c1c39b0b603ba8b24be1efad357617021d89a8c0b5d50bbd" name="ea-php74-php-mbstring-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.9"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="17a4ddebe1e1c60902244d177583fd1be840def0fc3be51ed61ff8b71c63b4d6" name="ea-php74-php-mysqlnd-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.10"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.10" date="1784203200">- ELS-2599: Sync CVE patches from alt-php74
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="4c77c0b1dc1dcaea247c6f774a23516202e3608fcfd7d4d4afa0d7c84c21b561" name="ea-php74-php-mysqlnd-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.4"/>
  <changelog author="Dmitrii Samoilov &lt;dsamoilov@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.5" date="1748260800">- EA4D-789: Security fixes
- CVE-2024-11235: use-after-free for ??= due to incorrect live-range calculation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="940c46012fc65c0a1af4d420ecb345bb7e7cbb2d8353ff93a9f82723147e99ea" name="ea-php74-php-mysqlnd-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.5"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.5" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="fa0d62ced342131b3728d21a24089cad2912b7524a4cd2de0d5c5a344410432f" name="ea-php74-php-mysqlnd-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.6"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="0e276fe5cf8c58df1076c9e0805fad1839f2cbace013be63fedde6293ecdb93d" name="ea-php74-php-mysqlnd-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.7"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
</package>
<package pkgid="255ce28508c64cd5134a50ab77e998ad6b11a0e8b0fcd693932a25e345274700" name="ea-php74-php-mysqlnd-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.8"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="e9a463cf70a4c5ab6bde44442b20555c9a6658c4eb91df67c4a484d5d94d9b1c" name="ea-php74-php-mysqlnd-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.9"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="af90c66ba589534f34a267fb02b4da8a8922af9596f612bfd2c42384e214080f" name="ea-php74-php-odbc-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.10"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.10" date="1784203200">- ELS-2599: Sync CVE patches from alt-php74
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="bc3abecd2e6e204ebfd4ec5dbfed8e162ddde5cafe92495e237bc7046dee1b24" name="ea-php74-php-odbc-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.4"/>
  <changelog author="Dmitrii Samoilov &lt;dsamoilov@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.5" date="1748260800">- EA4D-789: Security fixes
- CVE-2024-11235: use-after-free for ??= due to incorrect live-range calculation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="b3920794ca398b098eb69426fdbac5ddd6f6aa7567883b5fbdbb593037e8ea31" name="ea-php74-php-odbc-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.5"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.5" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="62141382e9f7e175d39b7439ddc82f5c633c0c08bb6034fa84a425c88c63774d" name="ea-php74-php-odbc-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.6"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="25e08a5ae368da2a475a9672501e3ab04d4405322cfc4c33fc4b733960371c04" name="ea-php74-php-odbc-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.7"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
</package>
<package pkgid="4880ec5b87bd82d305330af85c01a72e96a54ea5f7fdc2dcfe09146cec699e03" name="ea-php74-php-odbc-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.8"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="7f1a0f8fa46085b041877a4e3386c27614d6707dcdcb734959f9b4a6f325c0d4" name="ea-php74-php-odbc-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.9"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="9208ba0d1409c9c3521f25eeccba22da8570f46b6bc16f2df11d1d3cbf30a0a8" name="ea-php74-php-opcache-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.10"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.10" date="1784203200">- ELS-2599: Sync CVE patches from alt-php74
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="0f3105befd10fd0b2d2c1c07ae1852a7ef48e54b4564ba9436bb5d28d9ae859c" name="ea-php74-php-opcache-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.4"/>
  <changelog author="Dmitrii Samoilov &lt;dsamoilov@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.5" date="1748260800">- EA4D-789: Security fixes
- CVE-2024-11235: use-after-free for ??= due to incorrect live-range calculation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="f5ff2118720b2147931b971f319083367a33041e9ad35e5b15e115f9956c411a" name="ea-php74-php-opcache-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.5"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.5" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="3a401e779d650c2e97fcdd825856cbdb877044da756e654fc5fb6598d8c565cc" name="ea-php74-php-opcache-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.6"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="db6bdc01ecf7373728907169e52c76532fa21266cb88762c6c3f19a17ea5a205" name="ea-php74-php-opcache-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.7"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
</package>
<package pkgid="4381a002bcc046dc1fb01a3aed6d0a5b5b3ac010e7d530689211cc966ed5c6cb" name="ea-php74-php-opcache-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.8"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="51aa9e0a59e972826afd816a9bd872e3d0d1a54f3a6fe5f85ddc5179ba61b160" name="ea-php74-php-opcache-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.9"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="5072636986a9daf72369e6a75699a62ee02ff8de094acc4d62ecc56fea14cfab" name="ea-php74-php-pdo-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.10"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.10" date="1784203200">- ELS-2599: Sync CVE patches from alt-php74
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="6ffad8c5b411b7ef75f3781f5fc4dffefeab021329ac4a84d830a3fc91b7bb33" name="ea-php74-php-pdo-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.4"/>
  <changelog author="Dmitrii Samoilov &lt;dsamoilov@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.5" date="1748260800">- EA4D-789: Security fixes
- CVE-2024-11235: use-after-free for ??= due to incorrect live-range calculation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="d33da87582e5f3d27278ed9fc648bc426e12cdc5373d8f5f92246607edec11c4" name="ea-php74-php-pdo-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.5"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.5" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="e7cbfb8b181ed2c935cdb9159dac9c30f4c59d584b4fe6fa06c35b534d498cf3" name="ea-php74-php-pdo-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.6"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="002f8e686edab02da73fdcc1dfffc223708bc0ac535b6687e273bcfbf1abcfb5" name="ea-php74-php-pdo-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.7"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
</package>
<package pkgid="cd65d5904a0e473263cf8f7b83bccef465052f20dd59d253573c517b9ee3f455" name="ea-php74-php-pdo-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.8"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="4d9854dfdafdde59b4bdabb7c2f12fa4d13d25660d02c42422d6a0932f6c6a47" name="ea-php74-php-pdo-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.9"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="beeac03cc255b6c92def42f56b6bebcd9396deecdcde008be648d2f6b53d2caf" name="ea-php74-php-pgsql-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.10"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.10" date="1784203200">- ELS-2599: Sync CVE patches from alt-php74
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="1f03801cce115470640dd71e478b96d87d653fc8934b1767663e0709d12121ab" name="ea-php74-php-pgsql-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.4"/>
  <changelog author="Dmitrii Samoilov &lt;dsamoilov@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.5" date="1748260800">- EA4D-789: Security fixes
- CVE-2024-11235: use-after-free for ??= due to incorrect live-range calculation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="674a4c789d503b8ea93267ca67b28565d901de58f0c5544fd2b5fc2c892b12e6" name="ea-php74-php-pgsql-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.5"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.5" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="ccb3c108f9b2863bde9c17c30332cd4cf9e6f9fc7848f2bb39d761e72a58804c" name="ea-php74-php-pgsql-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.6"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="8813a64962a259ff66bbdbb7a0ea43a9dbff90afc4ede22c64cc079a245a592a" name="ea-php74-php-pgsql-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.7"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
</package>
<package pkgid="12d656f80870872248c3a308df92f22a3532ca8d25b6b3765dddafdd0b478081" name="ea-php74-php-pgsql-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.8"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="03b62de5d2f1e8ce5a6603f4bff75a39ced955cfbd3cd69aedab0891a11a0eb9" name="ea-php74-php-pgsql-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.9"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="978b7fd0184bc007d20f46f3bede2c5d241ef2968920fa4ee64fb06ff68c8b64" name="ea-php74-php-posix-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.10"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.10" date="1784203200">- ELS-2599: Sync CVE patches from alt-php74
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="5354da05102f2e109c69d77cf66db52599ee3bae56cf29dce4a7990e693443b1" name="ea-php74-php-posix-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.4"/>
  <changelog author="Dmitrii Samoilov &lt;dsamoilov@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.5" date="1748260800">- EA4D-789: Security fixes
- CVE-2024-11235: use-after-free for ??= due to incorrect live-range calculation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="cff47ba126ea61cfa8dbc306b7476949a8141a7791f99b5536323a8c865e818b" name="ea-php74-php-posix-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.5"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.5" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="609a16f61e909ae6baf6e37eaaff7060b4e5c9fb134db083f6ff5122a8471d96" name="ea-php74-php-posix-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.6"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="d9af83046788e7141f3191bcb6d8022a5d8b6ad807b9794b78048f1fef0b6cfd" name="ea-php74-php-posix-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.7"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
</package>
<package pkgid="6e16e0dd0bfdebe6730312c425e4ea5f37df2b4d662fb2d3c1c5009c3e04048a" name="ea-php74-php-posix-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.8"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="24239820c2ac444e3af7e12d7b305cc8e486cc4f00293d0d2394b141ab585de2" name="ea-php74-php-posix-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.9"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="1ec50bc8ec1ccd3ab991f84e30ce72d4c751a9106b3c7b93cc7a0fcb61ba483b" name="ea-php74-php-process-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.10"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.10" date="1784203200">- ELS-2599: Sync CVE patches from alt-php74
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="3ad268d8dc4be3d47d1e59a5b55a41a9c8949b5e940f7faff966f01419f6b7ec" name="ea-php74-php-process-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.4"/>
  <changelog author="Dmitrii Samoilov &lt;dsamoilov@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.5" date="1748260800">- EA4D-789: Security fixes
- CVE-2024-11235: use-after-free for ??= due to incorrect live-range calculation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="6173559a887dfe83cd39b0b4201ce4b57ac3a0e67ba02b2ea89f602fe0a74d4d" name="ea-php74-php-process-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.5"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.5" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="b60c278f3a6bc197c58f44e7f48e84732585a9684b07b7bd01837b52e02608cc" name="ea-php74-php-process-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.6"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="9932a7aca56b43abfca1e1d8ea7b61a322b557ea452234fd34d1528bdbf83a9f" name="ea-php74-php-process-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.7"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
</package>
<package pkgid="848ed4ac6e79b86a5908908a5803a0c6b3600556c4ea489df1f2ad1fba270c4c" name="ea-php74-php-process-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.8"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="0b9f5c9e2215412357afb454926bef2ab9bdb7f86160fc5a418b20bc0f67e106" name="ea-php74-php-process-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.9"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="a610e1a5928f2d0101a476bfb682465b19ba38ddf55a3ee1d7b80ad0a03dcb86" name="ea-php74-php-pspell-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.10"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.10" date="1784203200">- ELS-2599: Sync CVE patches from alt-php74
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="ca33465a7a785e4ecb0b19cb066148e984710d25499047538e383b55af72c230" name="ea-php74-php-pspell-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.4"/>
  <changelog author="Dmitrii Samoilov &lt;dsamoilov@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.5" date="1748260800">- EA4D-789: Security fixes
- CVE-2024-11235: use-after-free for ??= due to incorrect live-range calculation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="060bcca87233be1494f6143380521c73283ddbb8defdbc2f762c28e51621f50a" name="ea-php74-php-pspell-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.5"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.5" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="b35427a9a4da5f291dfa63886bb770d1228a7174de87d6b39dabd75d1f9f4024" name="ea-php74-php-pspell-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.6"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="7a5f33ca07e2b162e65a63ea89da4ea6df16b214425f3e7838e3086ed3d49829" name="ea-php74-php-pspell-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.7"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
</package>
<package pkgid="0dc51d3c187ccd2870259cd3f6b5c626a3b0d8e9b28e40efb02ebc594a78dca6" name="ea-php74-php-pspell-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.8"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="88aeb88bb95af7aa7427ce6d7ecc4dfe6512487b098317bbb19cdb6c2b817759" name="ea-php74-php-pspell-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.9"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="07c2398d190e3a57306d0af23c5d71fa0c844fccdd9147041a80a10850340e43" name="ea-php74-php-snmp-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.10"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.10" date="1784203200">- ELS-2599: Sync CVE patches from alt-php74
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="7b90efd3a131ac016c2030d12bf4965c0832eacad735d24f6e10f2fc5bc75643" name="ea-php74-php-snmp-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.4"/>
  <changelog author="Dmitrii Samoilov &lt;dsamoilov@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.5" date="1748260800">- EA4D-789: Security fixes
- CVE-2024-11235: use-after-free for ??= due to incorrect live-range calculation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="0423e77316f92c7366147f986ceebd8365e58af99b5d936b1c86857d0f5402a2" name="ea-php74-php-snmp-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.5"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.5" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="304da4849d3a77a699a044ecf0cef6d77e95869c96aec7b4229c3bd603bb83cf" name="ea-php74-php-snmp-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.6"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="68a7b41033a72da528355603fa273ffaba696419a0ce752a35f9cb1ace9041fd" name="ea-php74-php-snmp-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.7"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
</package>
<package pkgid="5ea0ce64b6eded9fffec7f5c6d4d0328db7a551c59a6b0e6a2205810b6ee9156" name="ea-php74-php-snmp-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.8"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="d2c28118ed02672ee278b9b15b521c7730040d2ba0e6ae46c7870d054fd6ed17" name="ea-php74-php-snmp-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.9"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="a5f044a6705ce03fa372be3f0ca0a3e0bfd4d5803891cef119a1638588c3892c" name="ea-php74-php-soap-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.10"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.10" date="1784203200">- ELS-2599: Sync CVE patches from alt-php74
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="9602180211a3b57c25aa8ecfb91b961218f654c28d10d5760b1775b4fa8dced0" name="ea-php74-php-soap-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.4"/>
  <changelog author="Dmitrii Samoilov &lt;dsamoilov@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.5" date="1748260800">- EA4D-789: Security fixes
- CVE-2024-11235: use-after-free for ??= due to incorrect live-range calculation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="9880cf66a992fe16d5dd10c54e234a41c1cac166f74c0a4ed4e12ce1a2428923" name="ea-php74-php-soap-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.5"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.5" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="dab258e92c344e02d290b9cd1e5d575f97a52d3a8a4c8609fbcf10193689544c" name="ea-php74-php-soap-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.6"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="5363d1016a73198b8c5309d744f622783d385f9551ec97dc168310f570ffaf89" name="ea-php74-php-soap-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.7"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
</package>
<package pkgid="0687011ff56ef09ae9ddf44a4cfbc47f0cf2b45aa645811042bf87700708b049" name="ea-php74-php-soap-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.8"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="e3c554de10f0a12ae2ba891601d6f0197dc8c9721f2d5ffa1dfb808240668c9b" name="ea-php74-php-soap-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.9"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="e2327491b1a77b2c07d587b166e64db3a32d84dcf46a1fc0b74a799ce56db215" name="ea-php74-php-sockets-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.10"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.10" date="1784203200">- ELS-2599: Sync CVE patches from alt-php74
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="de68253d394e4acdf51527537b1a3e99511689402d205464f1230f24d6f325fa" name="ea-php74-php-sockets-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.4"/>
  <changelog author="Dmitrii Samoilov &lt;dsamoilov@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.5" date="1748260800">- EA4D-789: Security fixes
- CVE-2024-11235: use-after-free for ??= due to incorrect live-range calculation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="0826eae73ab5dc458160e8da8d69081098fd97a6aa3ba247ae602cbbff2327ae" name="ea-php74-php-sockets-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.5"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.5" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="8450edecfdb296f76bd3c3e867366718048a824a29ac90fcc366a0423bad988d" name="ea-php74-php-sockets-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.6"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="42bf84ad128520f5f9c9661630e8e8194132b4c8970a3ae14bf16f9dbd62433a" name="ea-php74-php-sockets-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.7"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
</package>
<package pkgid="12e474c39cd52921153b1c6196ae47bac0d7d9816ea59356a7f6978cbd48183b" name="ea-php74-php-sockets-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.8"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="b5d9066110627ac5bbc9f02b30ca5bb56016b6a25f06db02dd65abcdbdaee09d" name="ea-php74-php-sockets-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.9"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="3ad99da0448379dedbac5f9ab821fa568f2fa0b2cc38446d8d709f011f367ae0" name="ea-php74-php-sodium-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.10"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.10" date="1784203200">- ELS-2599: Sync CVE patches from alt-php74
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="6f22e4221b9b278c9357b01b432a625c391adc28027569cab32a24d41b700b6b" name="ea-php74-php-sodium-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.4"/>
  <changelog author="Dmitrii Samoilov &lt;dsamoilov@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.5" date="1748260800">- EA4D-789: Security fixes
- CVE-2024-11235: use-after-free for ??= due to incorrect live-range calculation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="98b2b12f2f0da6a7b260cd69262cca546191426f280c36fee48abf81c5dc2eec" name="ea-php74-php-sodium-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.5"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.5" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="93217e6db0aaf18c8e7308a1908c47cc65595eabfc3d6570cb9c4e9f2394c6ec" name="ea-php74-php-sodium-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.6"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="f0077814f4f574bb94218d583799191701dfd8f293985f9262cb237f884dd146" name="ea-php74-php-sodium-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.7"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
</package>
<package pkgid="040b994214b76aea517a12e8a7933e386b3affefc579a875a217f85555f364bb" name="ea-php74-php-sodium-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.8"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="9ab85047f3334204e14bfe8ea3854781d4faf138bba8b5e26f28e10efcad0d08" name="ea-php74-php-sodium-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.9"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="818b3d15ed989676a138dd38c597619e403a49edfe92c887345d7e96d4509be0" name="ea-php74-php-tidy-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.10"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.10" date="1784203200">- ELS-2599: Sync CVE patches from alt-php74
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="853eb6f9bd15e9d6e9b2fe2c14305f350ee476444b1aa4307c250358b677e49f" name="ea-php74-php-tidy-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.4"/>
  <changelog author="Dmitrii Samoilov &lt;dsamoilov@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.5" date="1748260800">- EA4D-789: Security fixes
- CVE-2024-11235: use-after-free for ??= due to incorrect live-range calculation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="e5fbb25d9925bdfb18d9b78329c6d6629f45411ba72a499ebae1c9bf9fed0a20" name="ea-php74-php-tidy-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.5"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.5" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="670034f7932808c99d3df37330bf2738450b060a66a8a9b3f84f8ef39efd6cf3" name="ea-php74-php-tidy-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.6"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="3557f849a63847f9272ac2cb541d4b96d2a390fcaecfd377720176acf9825b42" name="ea-php74-php-tidy-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.7"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
</package>
<package pkgid="65acea05566615501da4f3991a0723452e8b1441a274ba085a683cc25bb307f5" name="ea-php74-php-tidy-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.8"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="6b5281d0cec34eaae951862ce0500ffcc3691b318b5d6a30ae5b3cdb44d1ae96" name="ea-php74-php-tidy-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.9"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="b2a9173b9c412f43df0f93379aab9a2c50119ccc0b20d9263526fb98f58b3cd2" name="ea-php74-php-xml-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.10"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.10" date="1784203200">- ELS-2599: Sync CVE patches from alt-php74
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="885255e1c74c46968f3e0e268683dd50be764c27e39f4d909507eeb125b1078d" name="ea-php74-php-xml-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.4"/>
  <changelog author="Dmitrii Samoilov &lt;dsamoilov@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.5" date="1748260800">- EA4D-789: Security fixes
- CVE-2024-11235: use-after-free for ??= due to incorrect live-range calculation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="9393a83cab6a8eaad93055eb9cdf08e7f5d44db8272663fbb373e631a800f598" name="ea-php74-php-xml-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.5"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.5" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="28eb1dba3bddf6eb4a804e0f92aef1d99376a5e789fd8861a986fb1aa5c2330c" name="ea-php74-php-xml-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.6"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="1af1c8d736b9810ca4a801e328d44f4da766a6d8e56a0f842317e40c0e96761e" name="ea-php74-php-xml-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.7"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
</package>
<package pkgid="8e3a0cd414f7cfa5b4d077dffbcd3f262efe971410c5ebbf65bf711fa16180de" name="ea-php74-php-xml-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.8"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="306be13222143bfa822324ecf0675f403fe4917f541ad3f99985528730e602e8" name="ea-php74-php-xml-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.9"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="e60421555ba81b2234280f7d1e11770c4b0fa95789d29b8409942b9ac5ed477a" name="ea-php74-php-xmlrpc-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.10"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.10" date="1784203200">- ELS-2599: Sync CVE patches from alt-php74
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="7336d2669b8e1d2e567bcc99e3b98455657652b68707dfea8cac024ed6ca9cb2" name="ea-php74-php-xmlrpc-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.4"/>
  <changelog author="Dmitrii Samoilov &lt;dsamoilov@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.5" date="1748260800">- EA4D-789: Security fixes
- CVE-2024-11235: use-after-free for ??= due to incorrect live-range calculation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="880756e1eb480db7365ceacbe110d9c20fc4d3bbad216584fef06e81dd11cd69" name="ea-php74-php-xmlrpc-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.5"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.5" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="d112ea7e5cf38c74b47691a159ef73ed7005e1534a0b95559af1cc55063a32a8" name="ea-php74-php-xmlrpc-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.6"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="994722a68e24b6dbeb14dcba0cccb2a96489f9e6f8a56ecfa9bf1e89678d13b9" name="ea-php74-php-xmlrpc-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.7"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
</package>
<package pkgid="9236797c54619790fd42619a01902571bd1056d5c4412691181d0ca8b5a409fe" name="ea-php74-php-xmlrpc-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.8"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="3ae466da20aea6baa444980b1be635f9c05fcdaa7fe5a1bffaee1de2b0f82f51" name="ea-php74-php-xmlrpc-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.9"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
<package pkgid="702bf2d83843f6d17d13e93c3a41e900c0b2ecb4dd2a3d4de54e5a7f2213389e" name="ea-php74-php-zip-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.10"/>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
  <changelog author="Juan-Carlos Garcia &lt;jgarcia@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.10" date="1784203200">- ELS-2599: Sync CVE patches from alt-php74
- CVE-2026-14355, CVE-2026-6722, CVE-2026-6735, CVE-2026-7261,
  CVE-2026-7262, CVE-2026-7568</changelog>
</package>
<package pkgid="002ede24cc5b6fc2090e92f2820dc0ee4adb9f2b20edd200155938fae59a5231" name="ea-php74-php-zip-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.4"/>
  <changelog author="Dmitrii Samoilov &lt;dsamoilov@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.5" date="1748260800">- EA4D-789: Security fixes
- CVE-2024-11235: use-after-free for ??= due to incorrect live-range calculation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
</package>
<package pkgid="37c1005aa95755f3d2c57d928cabc6ae61b7810abc7273889bd1845f9dc45492" name="ea-php74-php-zip-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.5"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-13.cloudlinux.6" date="1752494400">- EA4D-677: rebuild with new libtidy 5.8.0</changelog>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.5" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
</package>
<package pkgid="3f3a59b031f3dfaed353b8cf999ac060e80aa9ac19e15481a3f726accf45cd32" name="ea-php74-php-zip-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.6"/>
  <changelog author="Vladimir D. Seleznev &lt;vseleznev@cloudlinux.com&gt; - 7.4.33-15.cloudlinux.1" date="1754481600">- EA4D-789: Security fixes
- CVE-2025-1220: fix null byte termination in hostnames
- CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
  XML namespace prefix</changelog>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
</package>
<package pkgid="3bcf0906503c5721750ee78042ae23f5b3796817c9a49dee9e609ed5d4b4b56a" name="ea-php74-php-zip-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.7"/>
  <changelog author="Chris Castillo &lt;chris.castillo@webpros.com&gt; - 7.4.33-16" date="1759838400">- EA4-136: Fix libxml2 v2.15.0 compatibility</changelog>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
</package>
<package pkgid="57de775274bfdc34cc00c787a27daeddf906ba5ffb1df4c73cc7e58a2b8c516b" name="ea-php74-php-zip-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.8"/>
  <changelog author="Arseniy Zolotarev &lt;azolotarev@cloudlinux.com&gt; - 7.4.33-16.cloudlinux.1" date="1769515200">- EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
  for CageFS per-domain isolation</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
</package>
<package pkgid="e7634d5b2a1b0afd1ab9f7a316bcb05be5ad55c0cd068943b98998014d0858e1" name="ea-php74-php-zip-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.4.33" rel="18.el9.cloudlinux.9"/>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-17.cloudlinux" date="1770292800">- Synchronize with cpanel but leave using ea-libxml2 on all OS</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 7.4.33-18.cloudlinux" date="1771502400">- EA4D-773: Rebuild ea-php74 on rhel&gt;=9 with system libxml2 as cPanel</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.1" date="1771848000">- remove ea-mod_php provide and require</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.2" date="1772107200">- EA4D-789: Security fixes
- CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
- CVE-2025-1736: fix for PHP SOAP extension</changelog>
  <changelog author="Ilya Voyskovsky &lt;ivoyskovsky@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.3" date="1772625600">- EA4D-793: Update php-fpm LVE patch</changelog>
  <changelog author="Razmik Manvelyan &lt;rmanvelyan@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.4" date="1773835200">- Update php-fpm patch to v4 for per-domain resource isolation support</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.6" date="1774612800">- EA4D-797: revert to use system libxml2 lib for all platforms
- EA4D-808: fix Provides field in debian/control to use exact versions
- EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts</changelog>
  <changelog author="Levon Matshkalyan &lt;lmatshkalyan@cloudlinux.com&gt; - 7.4.33-cloudlinux.6" date="1775131200">- ALTPHP-2289: Update LiteSpeed SAPI to version 8.3</changelog>
  <changelog author="Sergey Fokin &lt;sfokin@cloudlinux.com&gt; - 7.4.33-18.cloudlinux.7" date="1777550400">- EA4D-824: Mark ea-php74 as EOL (EA4-173)</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.8" date="1779969600">- CLOS-4167: Add per-domain site isolation support to LiteSpeed SAPI; updated DEB LiteSpeed SAPI source to 8.3</changelog>
  <changelog author="Sandro Kalatozishvili &lt;skalatozishvili@cloudlinux.com&gt; - 1:7.4.33-18.cloudlinux.9" date="1781784000">- CLOS-4642: LSWS site-isolation - normalize trailing slash in docroot hash</changelog>
</package>
</otherdata>