# changelog

author: Andrei Zheregelia <azheregelia@cloudlinux.com> 6.0.26-3
changelog:
  - CLOS-3362: Migrate alt-mod-passenger to use cloudlinux-venv provided Python instead of alt-python37


author: Haluk Yilmaz <hyilmaz@cloudlinux.com> 6.0.26-4
changelog:
  - CLOS-3500: Add CL10 support for passenger by adding the required compilation flag for successful build


author: Luboš Uhliarik <luhliari@redhat.com> - 1.7.5-1
changelog:
  - new version 1.7.5
  - Resolves: RHEL-56637 - apr: Lax permissions in Apache Portable Runtime shared
    memory (CVE-2023-49582)


author: Sandro Kalatozishvili <skalatozishvili@cloudlinux.com> - 10.11.8-1
changelog:
  - CLOS-2692: Updated to 10.11.8
  - CLOS-2692: Fixed "Can't enter LVE" logging message
  - CLOS-2557: tmpfiles config added


author: Timur Averianov <taverianov@cloudlinux.com> - 10.11.14-1
changelog:
  - CLOS-3531: Updated to 10.11.14
  - CLOS-3538: Stopped patching "mysql.server.sh", the upstream version will be used further on


author: Timur Averianov <taverianov@cloudlinux.com> - 10.6.23-1
changelog:
  - CLOS-3534: Updated to 10.6.23
  - CLOS-3538: Stopped patching "mysql.server.sh", the upstream version will be used further on


author: Timur Averianov <taverianov@cloudlinux.com> - 11.4.8-1
changelog:
  - CLOS-3526: Updated to 11.4.8
  - CLOS-3538: Stopped patching "mysql.server.sh", the upstream version will be used further on


author: Timur Averianov <taverianov@cloudlinux.com> - 8.0.43-1
changelog:
  - CLOS-3491: Update cl-MySQL80 to 8.0.43
  - CLOS-3538: Stop patching "mysql.server.sh", the upstream version will be used further on


author: Miroslav Rajcic <miroslav.rajcic@oracle.com> - 8.4.0-1
changelog:
  - mysql_stmt_bind_param C API removed, so increase the libmysqlclient major version to 24.
  - Removed mysqlpump, mysql_upgrade, zlib_decompress and lz4_decompress binaries


author: Timur Averianov <taverianov@cloudlinux.com> - 8.4.6-1
changelog:
  - CLOS-3529: Update cl-MySQL 8.4 to 8.4.6
  - CLOS-3538: Stop patching "mysql.server.sh", the upstream version will be used further on


author: Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> - 1-3.2
changelog:
  - LVEMAN-1748: Move linksafe group creation to %pre
  - LU-2436: Remove cllib dependency from cloudlinux-linksafe


author:
  Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Andrew Lukoshko <alukoshko@cloudlinux.com> - 10-2.el10

changelog:
  - CLOS-3504: Add sending systemid to rollout service
  - CLOS-3481: Update EULA text in cloudlinux-release
  - Update spec and repos, add dependency on alt-common-release


author: Timur Kalimullin <tkalimullin@cloudlinux.com> - 1.1-22
changelog:
  - Added support for CloudLinux MAx WebServer (AP2NGX-222, AP2NGX-220)
  - Improved page warming performance (AP2NGX-247)


author: Roman Krompets <rkrompets@cloudlinux.com>, Timur Kalimullin <tkalimullin@cloudlinux.com> - 1.1-24
changelog:
  - Fixed the issue with version discrepancies between the plugin and composer.json (CLPRO-2687)
  - Update plugin to version 3.18.3 (CLPRO-951)


author: Ruslan Koliada <rkoliada@cloudlinux.com>, Roman Krompets <rkrompets@cloudlinux.com> - 1.1-29
changelog:
  - Improved AccelerateWP tmp location handling (CLPRO-2786)
  - Prevent convert images with size more then 16383 × 16383 to WEBP format (CLPRO-2830)


author: Timur Averianov <taverianov@cloudlinux.com> 1.2-125
changelog:
  - CLOS-2663, CLOS-3257: Improve error reporting
  - CLOS-3257: Fix crash during statistics collection for LVE-Stats


author: Timur Averianov <taverianov@cloudlinux.com> 1.2-127
changelog:
  - CLOS-3342: Fix outdated limitations in the scenario of several new DB users showed up in sequence fast, and then no new users seen for long
  - CLOS-3361: Fix MariaDB installation on machines with unknown "mysql" DNF module
  - CLOS-3354: Improve error reporting


author: Timur Averianov <taverianov@cloudlinux.com> 1.2-131
changelog:
  - CLOS-2945: Improve error reporting
  - CLOS-3340: Fix restriction causes reported to LVE-stats
  - CLOS-3340: Fix "dbctl restrict <user>" in period-based mode - it was decreasing restriction level
  - CLOS-3340: Fix "dbctl --lve-mode=..." - max. connection count limitation was not removed after restriction reset
  - CLOS-3340: Speed up "dbctl restrict <user>" and "dbctl unrestrict <user>" on machines with many users
  - CLOS-3340: Reduce resource consumption in period-based mode combined with max. connection count limitation
  - CLOS-3340: Reduce resource consumption by duplicate "dbctl unrestrict <user>"
  - CLOS-3340: Fix "penalty period" configuration in period-based mode - setting it to zero didn't turn it off, but still produced a 1 sec penalty period
  - CLOS-3340: Fix "dbgovernor-restrict.log" - remove redundant and misleading items
  - CLOS-3340: Fix "dbctl restrict <user>" - it could restrict administrative DB account
  - CLOS-3418: Fix outdated limitations


author: Haluk Yilmaz <hyilmaz@cloudlinux.com> 1.2-132
changelog:
  - CLOS-3217: Fix "dbtop" and "dbctl" - reports could be inconsistent under high load
  - CLOS-3217: Speed up "dbtop" and "dbctl"


author: Haluk Yilmaz <hyilmaz@cloudlinux.com> 1.2-133
changelog:
  - CLOS-3027: Strengthen string copy operations
  - CLOS-3027: Support long DB user names, up to 80 characters
  - CLOS-3027: Change shared memory structure to consume less memory


author: Timur Averianov <taverianov@cloudlinux.com> 1.2-134
changelog:
  - CLOS-3514: Reduce overhead in the scenario when a new DB user shows up in the middle of already high load
  - CLOS-3317: Fix invalid Linux user names reported to LVE-stats in cases of advanced authentication, like LDAP


author: Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> 1.2-136
changelog:
  - CLOS-3521: Fix mysql installation on Ubuntu
  - CLOS-3570: Do not install mysqlclient18 & mysqlclient21 on CloudLinux 10


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.61-1
changelog:
  - new version 2.4.61
  - Resolves: RHEL-45753 - httpd: Potential SSRF in 
    mod_rewrite (CVE-2024-39573)
  - Resolves: RHEL-45757 - httpd: null pointer dereference in
    mod_proxy (CVE-2024-38477)
  - Resolves: RHEL-45776 - httpd: Improper escaping of output in
    mod_rewrite (CVE-2024-38475)
  - Resolves: RHEL-45791 - httpd: Encoding problem in 
    mod_proxy (CVE-2024-38473)
  - Resolves: RHEL-45811 - httpd: Substitution encoding issue in 
    mod_rewrite (CVE-2024-38474)
  - Resolves: RHEL-46051 - httpd: Security issues via backend applications 
    whose response headers are malicious or exploitable (CVE-2024-38476)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-3
changelog:
  - Resolves: RHEL-53632 - RFE: httpd, add IP_FREEBIND support for Listen
  - Resolves: RHEL-53722 - [RFE] ProxyWebsocketIdleTimeout from
    httpd mod_proxy_wstunnel


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-1
changelog:
  - new version 2.4.63
  - Resolves: RHEL-76358 - httpd rebase to 2.4.63
  - Resolves: RHEL-73414 - RewriteRule proxying to UDS (unix domain socket)
    configured in .htaccess doesn't work on httpd-2.4.62-1
  - Resolves: RHEL-66489 - Apache HTTPD no longer parse PHP files with unicode
    characters in the name


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-1.2
changelog:
  - Resolves: RHEL-99944 - CVE-2025-49812 httpd: HTTP Session Hijack via a TLS upgrade
  - Resolves: RHEL-99969 - CVE-2024-47252 httpd: insufficient escaping of
    user-supplied data in mod_ssl
  - Resolves: RHEL-99961 - CVE-2025-23048 httpd: access control bypass by trusted
    clients is possible using TLS 1.3 session resumption
  - Resolves: RHEL-103623 - stickysession field does not work when specifying it
    in the query parameter after upgrade to 9.5


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-41
changelog:
  - CLKRN-1717: enable lve_pmem_nocache by default
  - CLKRN-1716: adapted SP hooks variants for Ubuntu 22
  - CLKRN-1715: adapt datacycle hook for Ubuntu 22
  - CLKRN-1715: adapted XFS quota flag for Ubuntu 22 kernel (5.15.0)


author: Aleksandr Demeshko <ademeshko@cloudlinux.com> Nikolay Petukhov <npetukhvov@cloulinux.com> - 1.0-40
changelog:
  - AAP-510: log level changed to WARN for limited requests
  - AAP-493: Improved log output
  - AAP-508: Allowed AllowedHandlers and DenyHandlers directives inside Directory, Location and Files contexts


author: Dzmitry Ryzhykau <dryzhykau@cloudlinux.com>, Roman Prilipskii <rprilipskii@cloudlinux.com> 2.12.0-1
changelog:
  - CLOS-3052: Add Ubuntu 22 support. Remove up2date_client.cldetect Python module.
  - CLOS-3032: Skip the unused registration calls: add_packages, add_hw_profile


author: Roman Prilipskii <rprilipskii@cloudlinux.com> 2.12.5-1
changelog:
  - CLOS-3231: Add a fallback mechanism to the server URL configuration
  - CLOS-3379: Add additional server URL configuration for connections over IPv6


author: Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> 3.0.1-1
changelog:
  - CLOS-3495: Report number of users on machine to CLN during registration
  - CLOS-3533: Preparations for CloudLinux 10 and internal codebase cleanup
  - CLOS-3422: Upgrade and cleanup of core functionality


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> 0.2-7
changelog:
  - CLKRN-1123: switch to cloudlinux-default from rhel default profile
  - CLKRN-1105: don't touch readahead value for NVME


