# changelog

author: Paul Oehler <poehler@interworx.com>
changelog:
  - Set Epoch to 3, to combat incompatible updates from 3rd party repos.
  - Added port 24 to default open ports, as sftp will be there by default.


author: Paul Oehler <poehler@interworx.com>
changelog:
  - Upgrade to https://github.com/rfxn/advanced-policy-firewall/commit/93adac0e19f8e486826dda4c2706dbf294b4b2b8


author: Paul Oehler <poehler@interworx.com>
changelog:
  - Backported newer TLS_PROTOCOL management from latest courier
  - Added mkdhparams logic
  - Changed default TLS_PROTOCOL value from SSL3 to TLSv1+


author: Peter Ajamian <pj@ghettoforge.org> - 1:2.3.0-1
changelog:
  - Dovecot to 2.3.0.rc1
  - Pigeonhole to 0.5.0.rc1
  - Renamed to dovecot23
  - Rebase waitonline patch
  - Log reopen patch no longer needed.
  - Removed libstats files and replaced with old-stats.
  - Added 20-submission.conf.


author: Remi Collet <remi@fedoraproject.org> - 2.2.1-2
changelog:
  - Update to 2.2.1 (from Fedora)
  - remove unneeded sources
  - fix EL-5 and EL-6 build
  - obsolete gd-last when needed
  - use libwebp instead of libvpx for webp images


author: Remi Collet <remi@fedoraproject.org> - 2.2.5-1
changelog:
  - Update to 2.2.5
  - fix double-free in gdImagePngPtr(). CVE-2017-6362
  - fix buffer over-read into uninitialized memory. CVE-2017-7890


author: Tim College <tcollege@interworx.com>
changelog:
  - Dropped unsupported OSes from build
  - Added new config files for working with iworxphp72
  - Added iworx-httpd-mmn


author: Jonathan Perkin <jonathan.perkin@oracle.com>
changelog:
  - Large number of changes to build using CMake
  - Introduce distribution-specific RPMs
  - Drop debuginfo, build all binaries with debug/symbols
  - Remove __os_install_post, use native macro
  - Remove _unpackaged_files_terminate_build, make it an error to have
    unpackaged files
  - Remove cluster RPMs


author: Joerg Bruehe <joerg.bruehe@sun.com>
changelog:
  - Change the behaviour on installation and upgrade:
    On installation, do not autostart the server.
    *Iff* the server was stopped before the upgrade is started, this is taken as a
    sign the administrator is handling that manually, and so the new server will
    not be started automatically at the end of the upgrade.
    The start/stop scripts will still be installed, so the server will be started
    on the next machine boot.
    This is the 5.5 version of fixing bug#27072 (RPM autostarting the server).


author: Joerg Bruehe <joerg.bruehe@oracle.com>
changelog:
  - With a recent spec file cleanup, names have changed: A "-community" part was dropped.
    Reflect that in the "Obsoletes" specifications.
  - Add a "triggerpostun" to handle the uninstall of the "-community" server RPM.
  - This fixes bug#55015 "MySQL server is not restarted properly after RPM upgrade".


author: Jonathan Perkin <jonathan.perkin@oracle.com>
changelog:
  - EXCEPTIONS-CLIENT has been deleted, remove it from here too
  - Support MYSQL_BUILD_MAKE_JFLAG environment variable for passing
    a '-j' argument to make.


author: Tomislav Plavcic <tomislav.plavcic@percona.com>
changelog:
  - Fixed RPMs assumes that .pid file is located in datadir (bug1201896)
  - Fixed errors in debug build when maintainer mode is on (bug1408232)


author: Tim College <tcollege@interworx.com>
changelog:
  - Added .iworx. to the name of the RPM to be included in automatic updates
  - Added restarting of the IWorx DB to the %post section


author: Paul Oehler <poehler@interworx.com>
changelog:
  - Removed interworx-5.1.0 dependency, broke rpmbuild of proftpd etc.
  - Added back libmysqlclient naming convention logic.


author: William Horka <whorka@hmdc.harvard.edu> 2.4.6-2
changelog:
  - Add selinux module
  - Remove unused log dir and add IPC socket dir
  - Add FastCgiWrapper, FastCgiConfig, and FastCgiWrapper to fastcgi.conf
  - Set httpd User and Group in fastcgi.conf so mod_fastcgi.so will load


author: Tim College <tcollege@interworx.com>
changelog:
  - Changed to run as iworx-web instead of iworx user
  - Added code to create iworx-web user and group if needed


author: Remi Collet <remi@remirepo.net> - 7.2.26-1
changelog:
  - Update to 7.2.26 - http://www.php.net/releases/7_2_26.php
  - use oracle client library version 19.5 (18.5 on EL-6)


author: Remi Collet <remi@remirepo.net> - 7.2.29-1
changelog:
  - Update to 7.2.29 - http://www.php.net/releases/7_2_29.php
  - use oracle client library version 19.6 (18.5 on EL-6)


author: Remi Collet <remi@remirepo.net> - 7.2.34-6
changelog:
  - Fix #81122 SSRF bypass in FILTER_VALIDATE_URL
    CVE-2021-21705
  - Fix #76448 Stack buffer overflow in firebird_info_cb
  - Fix #76449 SIGSEGV in firebird_handle_doer
  - Fix #76450 SIGSEGV in firebird_stmt_execute
  - Fix #76452 Crash while parsing blob data in firebird_fetch_blob
    CVE-2021-21704


author: Remi Collet <remi@remirepo.net> - 7.2.34-9
changelog:
  - fix PHP-FPM oob R/W in root process leading to priv escalation
    CVE-2021-21703
  - use libicu version 69
  - use oracle client library version 21.3


author: Remi Collet <remi@remirepo.net> - 7.2.34-11
changelog:
  - use oracle client library version 21.6
  - mysqlnd: fix #81719: mysqlnd/pdo password buffer overflow. CVE-2022-31626
  - pgsql: fix #81720: Uninitialized array in pg_query_params(). CVE-2022-31625


author: Remi Collet <remi@remirepo.net> - 7.2.34-13
changelog:
  - phar: fix #81726 DOS when using quine gzip file. CVE-2022-31628
  - core: fix #81727 Don't mangle HTTP variable names that clash with ones
    that have a specific semantic meaning. CVE-2022-31629
  - use oracle client library version 21.7


author: Remi Collet <remi@remirepo.net> - 7.2.34-15
changelog:
  - pdo: fix #81740: PDO::quote() may return unquoted string
    CVE-2022-31631
  - use oracle client library version 21.8


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-12.5
changelog:
  - rabbitmq-cluster: get cluster status from mnesia during monitor
  - rabbitmq-cluster: fail monitor when node is in minority partition

    Resolves: rhbz#1641944
    Resolves: rhbz#1641946


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-12.10
changelog:
  - ocf_log: do not log debug messages when HA_debug unset
  - tomcat: use systemd when catalina.sh is unavailable

    Resolves: rhbz#1655655
    Resolves: rhbz#1646770


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-12.13
changelog:
  - aws-vpc-move-ip: use "--query" to avoid a possible race condition
  - aws-vpc-move-ip: add multi route-table support and fix issue
    w/multiple NICs

    Resolves: rhbz#1711165
    Resolves: rhbz#1711925


author: Rex Dieter <rdieter@fedoraproject.org> 2007e-13
changelog:
  - _with_system_libc_client option (el6+) 
  - tight deps via %?_isa
  - drop extraneous Requires(post,postun): xinetd


author: Vitaly Lipatov <lav@altlinux.ru> 1.4.2-alt3
changelog:
  - update to real 1.4.2 version
  - detection and alerting of openssl heartbleed vulnerability
  - update signatures


author: Athmane Madjoudj <athmane@fedoraproject.org> 2.7.1-5
changelog:
  - Use conditional for loading mod_unique_id (rhbz #879264)
  - Fix syntax errors on httpd 2.4.x by using IncludeOptional (rhbz #879264, comment #2)


author: Athmane Madjoudj <athmane@fedoraproject.org> 2.7.3-2
changelog:
  - Fix NULL pointer dereference (DoS, crash) (CVE-2013-2765) (RHBZ #967615)
  - Fix a possible memory leak.


author: Daniel Kopecek <dkopecek@redhat.com> - 2.9.2-1
changelog:
  - RHEL-7.5 erratum
   - Update to 2.9.2
   - Fixed bogus dates in the spec file
   - Enabled mlogc subpackage
   - Enabled collection global lock to prevent collection
     removal failures
    Resolves: rhbz#1388656
    Resolves: rhbz#1139728
    Resolves: rhbz#1473420


author: Teddy Wells <twells@nexcess.net> - 2.2.9-20190802
changelog:
  - Rename to modsecurity-rules
  - Update description to indicate this is Nexcess specific
  - Switch owasp-crs to nexcess fork of 2.2.9


author: Teddy Wells <twells@nexcess.net> - 2.2.9-20191014
changelog:
  - Include modsecurity_crs_99_minimal.conf from git repo
  - update release to 20191014
  - List %files individually, only set some of them to %config(noreplace)


author: Teddy Wells <twells@nexcess.net> - 2.2.9-20200210
changelog:
  - [NSE-416] reduce anomaly score for session fixation rules
  - [NSE-1355] whitelist for url param used by WP Migrate Pro


author: Tim College <tcollege@interworx.com> - 6.0.0
changelog:
  - Changed to dummy package as part of changing to iworxphp72
  - Stupid change to trigger build attempt


author: jpurkis <jpurkis@interworx.com>
changelog:
  - Added TLSOptions NoSessionReuseRequired
  - Work around for a FileZilla bug when using TLS 1.3
  - Allows other FTP clients that do not reuse SSL sessions, like curl.


author: Paul Oehler <poehler@interworx.com>
changelog:
  - Added patch to support openssl 1.1.1
  - updated sources/qmail-gentestcrt.sh.bz2 to make work on almalinux


author: Remi Collet <remmi@remirepo.net> - 7.1-1
changelog:
  - add remi-safe repository
  - translate repository name
  - update repository configuration for "remirepo.net" domain


author: Joseph Purkis <jpurkis@interworx.com>
changelog:
  - Adding Almalinux and cleaning up old rhexs
  - Added interworx-prep-vpopmail for details look at interworx-prep-vpopmail notes.


