# changelog

author: Remi Collet <remi@remirepo.net> 1.0-2
changelog:
  - add conflict between php73-syspaths and php80-syspaths
  - add conflict between php74-syspaths and php80-syspaths


author: Remi Collet <remi@remirepo.net> 8.1-2
changelog:
  - add weak dependencies on commonly used SAPI and extensions:
    fpm, mbstring, opcache, pdo, sodium and xml


author: Remi Collet <remi@remirepo.net> 8.1-3
changelog:
  - define %scl_vendor and %_scl_prefix in macros.php81-config
  - move man page out of scl tree
  - improve the man page


author: Remi Collet <remi@remirepo.net> - 8.1.7~RC1-2
changelog:
  - add upstream patch to initialize pcre before mbstring
  - add upstream patch to use more sha256 in openssl tests


author: Remi Collet <remi@remirepo.net> - 8.1.15-1
changelog:
  - Update to 8.1.15 - http://www.php.net/releases/8_1_15.php
  - add dependency on pcre2 minimal version


author: Remi Collet <remi@remirepo.net> - 12.0.0-1
changelog:
  - update to 12.0.0 (Aug 5, 2022)
  - open https://support.ioncube.com/index.php?/Tickets/Ticket/View/25726
    [12.0.0] undefined symbol: zend_exception_uncaught_error on 8.1


author: Remi Collet <remi@remirepo.net> - 1.10.13-5
changelog:
  - fix PHP 8.2 deprecations using patch from
    https://github.com/pear/pear-core/pull/124
  - use SPDX license IDs


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.51-5
changelog:
  - Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
    when parsing multipart content


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.51-7
changelog:
  - Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
    vulnerability in Apache HTTP Server 2.4.52 and earlier
  - Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
    in forward proxy configurations


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.53-1
changelog:
  - new version 2.4.53
  - Resolves: #2079939 - httpd rebase to 2.4.53
  - Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
    with core


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.53-3
changelog:
  - Resolves: #2065677 - httpd minimisation for ubi-micro
  - minimize httpd dependencies (new httpd-core package)
  - mod_systemd and mod_brotli are now packaged in the main httpd package


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.53-7
changelog:
  - Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
    smuggling
  - Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
    ap_strcmp_match()
  - Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
    by hop-by-hop mechanism
  - Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
  - Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
  - Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
  - Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
    with websockets


author: Malin Lorch <mlorch@interworx.com> - 2.4.53
changelog:
  - Add CloudLinux suexec patch
  - Add huge string length patch
  - Add harden symlinks patch
  - Manual rebase onto Centos9-stream 2.4.53 build


author: Joseph Purkis <jpurkis@interworx.com>
changelog:
  - Added basic build of qmail and a commented vpopmail install that I used for testing.
  - This is for use as a dependancy for vpopmail as it looks for the qmaildir and then "$qmaildir"/bin/qmail-newu.
  - Did not go beyond this test.
  - Qmail on the other hand needs vpopmail before it can be fully patched and compiled.
  - Take a look at https://notes.sagredo.eu/en/qmail-notes-185/netqmail-106-basic-setup-42.html,
  - a large number of qmail patch's are post vpopmail install.


author: Joseph Purkis <jpurkis@interworx.com>
changelog:
  - Remove ancient dynamic gcc resolution (always resulted in just 'gcc')
  - Cleaned up Distro Statements


author: Paul Oehler <poehler@interworx.com>
changelog:
  - Added patch to support openssl 1.1.1
  - updated sources/qmail-gentestcrt.sh.bz2 to make work on almalinux


author: Joseph Purkis <jpurkis@interworx.com>
changelog:
  - Adding Almalinux and cleaning up old rhexs
  - Added interworx-prep-vpopmail for details look at interworx-prep-vpopmail notes.


