# changelog

author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.65-2
changelog:
  - mod_ssl: Add SSLVHostSNIPolicy directive to set the compatibility level
    required for VirtualHost matching.


author: Jan Macku <jamacku@redhat.com> - 10.10-1
changelog:
  - Translated using Weblate (Friulian) (#381)
  - Translations update from Weblate (#378)
  - added veth support
  - ifup-eth: add a new PERSISTENT_DHCLIENT_IPV6 option for IPv6 dhclient daemon
  - ifdown removes veth pair if both peers are down
  - rename_device: also support dracut-style kernel cmdline configuration
  - spec: Mark network-scripts as deprecated
  - spec: Initscripts now requires chkconfig (#374)
  - Translations update from Weblate (#371)
  - spec: Move service script into subpackage
  - ci: Onboard initscripts to Packit
  - ci: Migrate from Travis to GH Actions


author: Jan Macku <jamacku@redhat.com> - 10.11.1-1
changelog:
  - spec: Update relation between initscripts and initscripts-service
  - spec: Replace not working awk command with sed
  - use downstream version style


author: Jan Macku <jamacku@redhat.com> - 10.11.2-1
changelog:
  - ifup-routes: Revert quotes
  - ifup-routes: Use `ip replace` only on type `route`
  - ifup-routes: Log when using `ip $type replace`
  - ifup-routes: Use `ip route repace` to avoid race
  - ci: Update path to csdiff repository (#391)


author: Jan Macku <jamacku@redhat.com> - 10.11.3-1
changelog:
  - Drop unnecessary obsoletes
  - spec: Move rename_device to subpackage `initscripts-rename-device`
  - ci: Update `.packit.yml` to run on `c9s`
  - ci: Use Differential ShellCheck action


author: Nathan Roth <nroth@interworx.com>
changelog:
  - Stop shipping dovecot-sql.conf.ext; InterWorx writes iworx-vpopmail-dovecot-sql.conf.ext at install time
  - Remove legacy /etc/dovecot/dovecot-sql.conf.ext on upgrade


author: Joseph Purkis <jpurkis@interworx.com>
changelog:
  - Added basic build of qmail and a commented vpopmail install that I used for testing.
  - This is for use as a dependancy for vpopmail as it looks for the qmaildir and then "$qmaildir"/bin/qmail-newu.
  - Did not go beyond this test.
  - Qmail on the other hand needs vpopmail before it can be fully patched and compiled.
  - Take a look at https://notes.sagredo.eu/en/qmail-notes-185/netqmail-106-basic-setup-42.html,
  - a large number of qmail patch's are post vpopmail install.


author: Brandon Locke <blocke@liquidweb.com>
changelog:
  - Move Qmail/Vpopmail-only Requires (daemontools, ucspi-tcp, simscan,
    ripmime, libdomainkeys, perl-Mail-DKIM, maildrop) to interworx-mail-qmail


author: Nathan Roth <nroth@interworx.com>
changelog:
  - Add Requires(pre) dependency on interworx-unix-users-vpopmail for horde and iworx packages to ensure vchkpw group exists


author: Remi Collet <remi@remirepo.net> 8.1-2
changelog:
  - add weak dependencies on commonly used SAPI and extensions:
    fpm, mbstring, opcache, pdo, sodium and xml


author: Remi Collet <remi@remirepo.net> 8.1-3
changelog:
  - define %scl_vendor and %_scl_prefix in macros.php81-config
  - move man page out of scl tree
  - improve the man page


author: Remi Collet <remi@remirepo.net> - 12.0.0-1
changelog:
  - update to 12.0.0 (Aug 5, 2022)
  - open https://support.ioncube.com/index.php?/Tickets/Ticket/View/25726
    [12.0.0] undefined symbol: zend_exception_uncaught_error on 8.1


author: Remi Collet <remi@remirepo.net> - 1.10.13-5
changelog:
  - fix PHP 8.2 deprecations using patch from
    https://github.com/pear/pear-core/pull/124
  - use SPDX license IDs


author: Remi Collet <remi@remirepo.net> - 3.2.2-1
changelog:
  - update to 3.2.2
  - build out of sources tree
  - use new SPDX license ID Xdebug-1.03
  - open https://github.com/xdebug/xdebug/pull/896 relax test expectation


author: Remi Collet <remi@remirepo.net> - 8.2.28-1
changelog:
  - Update to 8.2.28 - http://www.php.net/releases/8_2_28.php
  - use oracle client library version 23.7 on x86_64 and arm64


author: Remi Collet <remi@remirepo.net> - 13.0.3-1
changelog:
  - update to 13.0.3 (May 14, 2024)
  - open https://support.ioncube.com/index.php?/Tickets/Ticket/View/28121
    undefined symbol: zend_vspprintf with PHP 7.1


author: Remi Collet <remi@remirepo.net> - 15.5.0~beta-1
changelog:
  - update to 15.5.0 Beta (November 11, 2025)
  - open https://support.ioncube.com/index.php?/Tickets/Ticket/View/YFF-156-91044
    undefined symbol: zend_constant_add_attributes


author: Remi Collet <remi@remirepo.net> - 1.10.17-2
changelog:
  - remove report_memleaks usage with PHP 8.5 using patch from
    https://github.com/pear/pear-core/pull/164


author: Remi Collet <remi@remirepo.net> - 1.0.9-1
changelog:
  - update to 1.0.9
  - drop patch merged upstream
  - re-license spec file to CECILL-2.1
  - add pie virtual provides


author: Joseph Purkis <jpurkis@interworx.com>
changelog:
  - Remove ancient dynamic gcc resolution (always resulted in just 'gcc')
  - Cleaned up Distro Statements


author: jpurkis <jpurkis@interworx.com>
changelog:
  - Added TLSOptions NoSessionReuseRequired
  - Work around for a FileZilla bug when using TLS 1.3
  - Allows other FTP clients that do not reuse SSL sessions, like curl.


author: jpurkis <jpurkis@interworx.com>
changelog:
  - New Install self-signed ssl changed to RSA-2048
  - Fix's Filezilla connections to rhe8x \ TLS1.3. When default self-signed SSL.


author: Paul Howarth <paul@city-fan.org> - 1.3.8-1
changelog:
  - Update to 1.3.8
    - 1.3.8rc4 failed to build mod_sftp with OpenSSL 1.1.0 due to X448 check
      (GH#1488)
    - 1.3.8rc4 failed to build on Solaris due to missing type declarations
      (GH#1494)
    - mod_ifsession doesn't change the effect of SFTPMaxChannels (GH#1500)
    - mod_tls module unexpectedly allows TLS handshake after authentication in
      some configurations (GH#1533)
    - Disable FSCachePolicy by default (GH#1528)
    - Avoid logging "session closed" messages unless there is a corresponding
      "session opened" log message, to avoid user confusion (GH#1539)
    - Implement support for the CSID FTP command (GH#1550)
    - Unable to verify signed data: signature type 'rsa-sha2-512' does not match
      publickey algorithm 'ssh-rsa' (Bug #4491)
    - mod_auth_otp improperly allows keyboard-interactive logins for users
      lacking OTP entries (GH#1560)
  - Update mod_vroot to 0.9.11
    - Addresses a bad interaction with mod_auth_file, and failed login attempts,
      which can lead to inexplicably "stuck" processes that cannot be terminated
      (https://github.com/proftpd/proftpd/issues/1384)
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 1.3.8-4
changelog:
  - Ensure mod_rewrite is linked against libidn2 so that it loads properly
    (rhbz#2166454, https://github.com/proftpd/proftpd/issues/1590)
  - No longer need to explicitly remove libtool archives from Fedora 36 onwards


author: Paul Howarth <paul@city-fan.org> - 1.3.8a-1
changelog:
  - Update to 1.3.8a
    - Fix mod_sftp failure to handle SFTP requests to truncate files to zero size
      (GH#1581)
    - Fix mod_sftp improperly handling SFTP WRITE requests for files opened for
      appending (GH#1584)
    - Build-time detection of Linux POSIX ACL support was broken since 1.3.8rc2
      (GH#1568)
    - Fix failure to load mod_rewrite as a dynamic module due to
      incomplete/missing library linker flags (GH#1590)
    - <Class> section is allowed to be in <Global>, but From directive is not
      (GH#1597)
    - ExtendedLog SSH, SFTP classes not working as expected (GH#1617)
    - Fix mod_sftp not handling multiple concurrent open file handles/transfers
      well for logging (GH#1646)
    - "TLSRequired off" plus Protocols directive caused mod_tls to terminate the
      session abruptly (GH#1679)
    - Fix mod_tls failure to compile against OpenSSL 3.0.8 due to missing
      ENGINE_METHOD_ flags (GH#1689)
    - Unknown named connection error when using different SQL backends (GH#1659)
    - Fix mod_sql not properly closing all named backend connections on session
      exit (GH#1697)
    - SSH key exchanges failed unexpectedly with "unable to write X bytes of raw
      data" errors due to small ProFTPD buffer (GH#1694)
    - Fix high session memory usage caused by SFTP outgoing data buffering
      (GH#1678)
    - Out-of-bounds buffer read when handling FTP commands (GH#1683)
    - SFTP algorithm settings in <Global> section were not being used (GH#1712)


author: Paul Howarth <paul@city-fan.org> - 1.3.8b-1
changelog:
  - Update to 1.3.8b
    - Compiling ProFTPD 1.3.8a mod_sftp, mod_tls using libressl 3.7.3 failed
      (GH#1735)
    - Build system failed for specific module names (GH#1756)
    - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
      (CVE-2023-48795, GH#1760)


author: jpurkis <jpurkis@interworx.com>
changelog:
  - Update makecert.sh to use 2048 bit keys
  - Update makecert.sh to use SHA256
  - Regen certs on install


author: Joseph Purkis <jpurkis@interworx.com>
changelog:
  - Adding Almalinux and cleaning up old rhexs
  - Added interworx-prep-vpopmail for details look at interworx-prep-vpopmail notes.


author: Nathan Roth <nroth@interworx.com>
changelog:
  - Add Dovecot domain alias map generation (bug #14179)
  - New vwrite_dovecot_map() function generates /home/vpopmail/etc/dovecot_domain_map
  - Automatically updates map when domains/aliases are added or modified
  - Security: O_EXCL prevents symlink attacks, atomic file updates via rename
  - Security: Explicit 0644 permissions bypass umask, stale temp file cleanup
  - Logs errors and warnings to syslog with LOG_MAIL facility
  - Added vupdate-dovecot utility for manual map regeneration (EL8+)


author: Michel Alexandre Salim <salimma@centosproject.org> - 1.5.1-1
changelog:
  - Rebase to the latest upstream version
  - Enable optional gz, xz/lzma, and lz4 support in the zstd tool
  - Disable amd64 assembly on non-x86_64 architectures (rhbz#2035802)
    this should avoid the issue where an executable stack is created
  - Re-enable CET protections (rhbz#2039353)
    Resolves: rhbz#2039488


