# changelog

author: Paul Oehler <poehler@interworx.com>
changelog:
  - Set Epoch to 3, to combat incompatible updates from 3rd party repos.
  - Added port 24 to default open ports, as sftp will be there by default.


author: Paul Oehler <poehler@interworx.com>
changelog:
  - Upgrade to https://github.com/rfxn/advanced-policy-firewall/commit/93adac0e19f8e486826dda4c2706dbf294b4b2b8


author: Paul Oehler <poehler@interworx.com>
changelog:
  - Backported newer TLS_PROTOCOL management from latest courier
  - Added mkdhparams logic
  - Changed default TLS_PROTOCOL value from SSL3 to TLSv1+


author: Peter Ajamian <pj@ghettoforge.org> - 1:2.3.0-1
changelog:
  - Dovecot to 2.3.0.rc1
  - Pigeonhole to 0.5.0.rc1
  - Renamed to dovecot23
  - Rebase waitonline patch
  - Log reopen patch no longer needed.
  - Removed libstats files and replaced with old-stats.
  - Added 20-submission.conf.


author: Remi Collet <remi@fedoraproject.org> - 2.2.1-2
changelog:
  - Update to 2.2.1 (from Fedora)
  - remove unneeded sources
  - fix EL-5 and EL-6 build
  - obsolete gd-last when needed
  - use libwebp instead of libvpx for webp images


author: Remi Collet <remi@fedoraproject.org> - 2.2.5-1
changelog:
  - Update to 2.2.5
  - fix double-free in gdImagePngPtr(). CVE-2017-6362
  - fix buffer over-read into uninitialized memory. CVE-2017-7890


author: Tim College <tcollege@interworx.com>
changelog:
  - Dropped unsupported OSes from build
  - Added new config files for working with iworxphp72
  - Added iworx-httpd-mmn


author: Nathan Roth <nroth@interworx.com>
changelog:
  - Stop shipping dovecot-sql.conf.ext; InterWorx writes iworx-vpopmail-dovecot-sql.conf.ext at install time
  - Remove legacy /etc/dovecot/dovecot-sql.conf.ext on upgrade


author: Nathan Roth <nroth@interworx.com>
changelog:
  - Add Requires(pre) dependency on interworx-unix-users-vpopmail for horde and iworx packages to ensure vchkpw group exists


author: Tomislav Plavcic <tomislav.plavcic@percona.com>
changelog:
  - Fixed RPMs assumes that .pid file is located in datadir (bug1201896)
  - Fixed errors in debug build when maintainer mode is on (bug1408232)


author: Tim College <tcollege@interworx.com>
changelog:
  - Added .iworx. to the name of the RPM to be included in automatic updates
  - Added restarting of the IWorx DB to the %post section


author: Paul Oehler <poehler@interworx.com>
changelog:
  - Removed interworx-5.1.0 dependency, broke rpmbuild of proftpd etc.
  - Added back libmysqlclient naming convention logic.


author: William Horka <whorka@hmdc.harvard.edu> 2.4.6-2
changelog:
  - Add selinux module
  - Remove unused log dir and add IPC socket dir
  - Add FastCgiWrapper, FastCgiConfig, and FastCgiWrapper to fastcgi.conf
  - Set httpd User and Group in fastcgi.conf so mod_fastcgi.so will load


author: Tim College <tcollege@interworx.com>
changelog:
  - Changed to run as iworx-web instead of iworx user
  - Added code to create iworx-web user and group if needed


author: Remi Collet <remi@remirepo.net> 1.0-2
changelog:
  - add conflict between php73-syspaths and php80-syspaths
  - add conflict between php74-syspaths and php80-syspaths


author: Remi Collet <remi@remirepo.net> 8.1-2
changelog:
  - add weak dependencies on commonly used SAPI and extensions:
    fpm, mbstring, opcache, pdo, sodium and xml


author: Remi Collet <remi@remirepo.net> 8.1-3
changelog:
  - define %scl_vendor and %_scl_prefix in macros.php81-config
  - move man page out of scl tree
  - improve the man page


author: Remi Collet <remi@remirepo.net> - 12.0.0-1
changelog:
  - update to 12.0.0 (Aug 5, 2022)
  - open https://support.ioncube.com/index.php?/Tickets/Ticket/View/25726
    [12.0.0] undefined symbol: zend_exception_uncaught_error on 8.1


author: Remi Collet <remi@remirepo.net> - 1.10.13-5
changelog:
  - fix PHP 8.2 deprecations using patch from
    https://github.com/pear/pear-core/pull/124
  - use SPDX license IDs


author: Remi Collet <remi@remirepo.net> - 3.2.2-1
changelog:
  - update to 3.2.2
  - build out of sources tree
  - use new SPDX license ID Xdebug-1.03
  - open https://github.com/xdebug/xdebug/pull/896 relax test expectation


author: Remi Collet <remi@remirepo.net> - 8.2.28-1
changelog:
  - Update to 8.2.28 - http://www.php.net/releases/8_2_28.php
  - use oracle client library version 23.7 on x86_64 and arm64


author: Remi Collet <remi@remirepo.net> - 13.0.3-1
changelog:
  - update to 13.0.3 (May 14, 2024)
  - open https://support.ioncube.com/index.php?/Tickets/Ticket/View/28121
    undefined symbol: zend_vspprintf with PHP 7.1


author: Remi Collet <remi@remirepo.net> - 15.5.0~beta-1
changelog:
  - update to 15.5.0 Beta (November 11, 2025)
  - open https://support.ioncube.com/index.php?/Tickets/Ticket/View/YFF-156-91044
    undefined symbol: zend_constant_add_attributes


author: Remi Collet <remi@remirepo.net> - 1.10.17-2
changelog:
  - remove report_memleaks usage with PHP 8.5 using patch from
    https://github.com/pear/pear-core/pull/164


author: Remi Collet <remi@remirepo.net> - 1.0.9-1
changelog:
  - update to 1.0.9
  - drop patch merged upstream
  - re-license spec file to CECILL-2.1
  - add pie virtual provides


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-12.5
changelog:
  - rabbitmq-cluster: get cluster status from mnesia during monitor
  - rabbitmq-cluster: fail monitor when node is in minority partition

    Resolves: rhbz#1641944
    Resolves: rhbz#1641946


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-12.10
changelog:
  - ocf_log: do not log debug messages when HA_debug unset
  - tomcat: use systemd when catalina.sh is unavailable

    Resolves: rhbz#1655655
    Resolves: rhbz#1646770


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-12.13
changelog:
  - aws-vpc-move-ip: use "--query" to avoid a possible race condition
  - aws-vpc-move-ip: add multi route-table support and fix issue
    w/multiple NICs

    Resolves: rhbz#1711165
    Resolves: rhbz#1711925


author: Rex Dieter <rdieter@fedoraproject.org> 2007e-13
changelog:
  - _with_system_libc_client option (el6+) 
  - tight deps via %?_isa
  - drop extraneous Requires(post,postun): xinetd


author: Pavel Šimerda <psimerda@redhat.com> - 3:2.1.15-23
changelog:
  - Resolves: #1232749 - fix bad subject of the welcome email when creating list
    using newlist command


author: Vitaly Lipatov <lav@altlinux.ru> 1.4.2-alt3
changelog:
  - update to real 1.4.2 version
  - detection and alerting of openssl heartbleed vulnerability
  - update signatures


author: Athmane Madjoudj <athmane@fedoraproject.org> 2.7.1-5
changelog:
  - Use conditional for loading mod_unique_id (rhbz #879264)
  - Fix syntax errors on httpd 2.4.x by using IncludeOptional (rhbz #879264, comment #2)


author: Athmane Madjoudj <athmane@fedoraproject.org> 2.7.3-2
changelog:
  - Fix NULL pointer dereference (DoS, crash) (CVE-2013-2765) (RHBZ #967615)
  - Fix a possible memory leak.


author: Daniel Kopecek <dkopecek@redhat.com> - 2.9.2-1
changelog:
  - RHEL-7.5 erratum
   - Update to 2.9.2
   - Fixed bogus dates in the spec file
   - Enabled mlogc subpackage
   - Enabled collection global lock to prevent collection
     removal failures
    Resolves: rhbz#1388656
    Resolves: rhbz#1139728
    Resolves: rhbz#1473420


author: Tim College <tcollege@interworx.com> - 6.0.0
changelog:
  - Changed to dummy package as part of changing to iworxphp72
  - Stupid change to trigger build attempt


author: jpurkis <jpurkis@interworx.com>
changelog:
  - Added TLSOptions NoSessionReuseRequired
  - Work around for a FileZilla bug when using TLS 1.3
  - Allows other FTP clients that do not reuse SSL sessions, like curl.


author: Paul Howarth <paul@city-fan.org> - 1.3.8-0.4.rc4
changelog:
  - Update mod_vroot to 0.9.10
    - Fix unexpected filtering behaviour with mod_vroot (#2104972, GH#1491)


author: Paul Howarth <paul@city-fan.org> - 1.3.8-1
changelog:
  - Update to 1.3.8
    - 1.3.8rc4 failed to build mod_sftp with OpenSSL 1.1.0 due to X448 check
      (GH#1488)
    - 1.3.8rc4 failed to build on Solaris due to missing type declarations
      (GH#1494)
    - mod_ifsession doesn't change the effect of SFTPMaxChannels (GH#1500)
    - mod_tls module unexpectedly allows TLS handshake after authentication in
      some configurations (GH#1533)
    - Disable FSCachePolicy by default (GH#1528)
    - Avoid logging "session closed" messages unless there is a corresponding
      "session opened" log message, to avoid user confusion (GH#1539)
    - Implement support for the CSID FTP command (GH#1550)
    - Unable to verify signed data: signature type 'rsa-sha2-512' does not match
      publickey algorithm 'ssh-rsa' (Bug #4491)
    - mod_auth_otp improperly allows keyboard-interactive logins for users
      lacking OTP entries (GH#1560)
  - Update mod_vroot to 0.9.11
    - Addresses a bad interaction with mod_auth_file, and failed login attempts,
      which can lead to inexplicably "stuck" processes that cannot be terminated
      (https://github.com/proftpd/proftpd/issues/1384)
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 1.3.8-4
changelog:
  - Ensure mod_rewrite is linked against libidn2 so that it loads properly
    (rhbz#2166454, https://github.com/proftpd/proftpd/issues/1590)
  - No longer need to explicitly remove libtool archives from Fedora 36 onwards


author: Paul Howarth <paul@city-fan.org> - 1.3.8a-1
changelog:
  - Update to 1.3.8a
    - Fix mod_sftp failure to handle SFTP requests to truncate files to zero size
      (GH#1581)
    - Fix mod_sftp improperly handling SFTP WRITE requests for files opened for
      appending (GH#1584)
    - Build-time detection of Linux POSIX ACL support was broken since 1.3.8rc2
      (GH#1568)
    - Fix failure to load mod_rewrite as a dynamic module due to
      incomplete/missing library linker flags (GH#1590)
    - <Class> section is allowed to be in <Global>, but From directive is not
      (GH#1597)
    - ExtendedLog SSH, SFTP classes not working as expected (GH#1617)
    - Fix mod_sftp not handling multiple concurrent open file handles/transfers
      well for logging (GH#1646)
    - "TLSRequired off" plus Protocols directive caused mod_tls to terminate the
      session abruptly (GH#1679)
    - Fix mod_tls failure to compile against OpenSSL 3.0.8 due to missing
      ENGINE_METHOD_ flags (GH#1689)
    - Unknown named connection error when using different SQL backends (GH#1659)
    - Fix mod_sql not properly closing all named backend connections on session
      exit (GH#1697)
    - SSH key exchanges failed unexpectedly with "unable to write X bytes of raw
      data" errors due to small ProFTPD buffer (GH#1694)
    - Fix high session memory usage caused by SFTP outgoing data buffering
      (GH#1678)
    - Out-of-bounds buffer read when handling FTP commands (GH#1683)
    - SFTP algorithm settings in <Global> section were not being used (GH#1712)


author: Paul Howarth <paul@city-fan.org> - 1.3.8b-1
changelog:
  - Update to 1.3.8b
    - Compiling ProFTPD 1.3.8a mod_sftp, mod_tls using libressl 3.7.3 failed
      (GH#1735)
    - Build system failed for specific module names (GH#1756)
    - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
      (CVE-2023-48795, GH#1760)


author: Paul Oehler <poehler@interworx.com>
changelog:
  - Upgraded to 1.3.4a
  - Added mod_clamav
  - Removed old unneeded patches
  - Added /var/log/proftpd/system.log
  - Moved other proftpd logs to /var/log/proftpd/*.log


author: Paul Oehler <poehler@interworx.com>
changelog:
  - Added patch to support openssl 1.1.1
  - updated sources/qmail-gentestcrt.sh.bz2 to make work on almalinux


author: jpurkis <jpurkis@interworx.com>
changelog:
  - Update makecert.sh to use 2048 bit keys
  - Update makecert.sh to use SHA256
  - Regen certs on install


author: Remi Collet <remmi@remirepo.net> - 7.1-1
changelog:
  - add remi-safe repository
  - translate repository name
  - update repository configuration for "remirepo.net" domain


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 20100211.0-1
changelog:
  - New upstream release 20100211.0.
  - New project URL, now distributed as a tarball.
  - New docs, including a license file.


author: Joseph Purkis <jpurkis@interworx.com>
changelog:
  - Adding Almalinux and cleaning up old rhexs
  - Added interworx-prep-vpopmail for details look at interworx-prep-vpopmail notes.


author: Nathan Roth <nroth@interworx.com>
changelog:
  - Add Dovecot domain alias map generation (bug #14179)
  - New vwrite_dovecot_map() function generates /home/vpopmail/etc/dovecot_domain_map
  - Automatically updates map when domains/aliases are added or modified
  - Security: O_EXCL prevents symlink attacks, atomic file updates via rename
  - Security: Explicit 0644 permissions bypass umask, stale temp file cleanup
  - Logs errors and warnings to syslog with LOG_MAIL facility
  - Added vupdate-dovecot utility for manual map regeneration (EL8+)


