# changelog

author: Ilia Gorchakov <igorchakov@cloudlinux.com> - 31.16.0-1
changelog:
  - Added more details about cleanup to report (DEF-19852)
  - Changed cron signature scanning algorithm (DEF-23239)
  - Added auth for CloudAV cleanup (DEF-23511)
  - Fixed CloudAV cleanup error (DEF-23538)


author: Ilia Gorchakov <igorchakov@cloudlinux.com> - 31.17.0-1
changelog:
  - Improved deobfuscator (DEF-23460, DEF-23362)
  - Fixed deobfuscator (DEF-23902, DEF-23605)
  - Adapted code to PHP 8.2 (DEF-23517)
  - Fixed a bug when MDS stopped on a broken table (DEF-23509)
  - Changed the process of parsing the config in MDS, it do not take commented lines(DEF-22518)


author: Ilia Gorchakov <igorchakov@cloudlinux.com> - 31.18.0-1
changelog:
  - Changed algorithm for working with black files in Rapid Account Scan mode (DEF-24063)
  - Added new field to MDS report (DEF-24135)
  - Changed regexes merge algorithm (DEF-21299)


author: Ilia Gorchakov <igorchakov@cloudlinux.com> - 31.19.0-1
changelog:
  - Added extended suspicious signatures (DEF-24158, DEF-24272, DEF-24290)
  - Changed output algorithm to stdout for MDS (DEF-24489)
  - Fixed normalization (DEF-24234)
  - Added ability to cleanup multibyte encoded files (DEF-17450)


author: Ilia Gorchakov <igorchakov@cloudlinux.com> - 31.19.1-1
changelog:
  - Fixed code for support PHP 8.2 (DEF-23972)
  - Fixed extended-suspicious id in RAS (DEF-24656)
  - Removed extended-suspicious signatures (DEF-24662)


author: Ilia Gorchakov <igorchakov@cloudlinux.com> - 31.19.2-1
changelog:
  - Fixed URL grabbing (DEF-24810)
  - Fixed LevelDB operation (DEF-24903)
  - Fixed hash verdicts transfer (DEF-24666)


author: Ilia Gorchakov <igorchakov@cloudlinux.com> - 31.20.1-2
changelog:
  - Changed algorithm for creating extended suspicious signatures (DEF-24319)
  - Changed algorithm of using whitelist filter with extended-suspicious files (DEF-24819)
  - Fixed algorithm for detect log files (DEF-25036)
  - Enabled rescan malicious files in RAS (DEF-24922)


author: Ilia Gorchakov <igorchakov@cloudlinux.com> - 31.20.2-1
changelog:
  - Added ability to extract base64 string for MDS (DEF-25115)
  - Fixed cleanup of files with multibyte encodings (DEF-25086)


author: Ilia Gorchakov <igorchakov@cloudlinux.com> - 31.20.3-1
changelog:
  - Fixed report format (DEF-24985)
  - Fixed MDS black url cleanup (DEF-24991)
  - Fixed crontab cleaup (DEF-25364)


author: Ilia Gorchakov <igorchakov@cloudlinux.com> - 31.20.4-1
changelog:
  - Added support for WP tags in MDS (DEF-25440)
  - Fixed HashTable implementation (DEF-25518)
  - Removed outdated vulnerability detection (DEF-22567)


author: Ilia Gorchakov <igorchakov@cloudlinux.com> - 31.20.6-1
changelog:
  - Added option for disable CloudAV (DEF-25765)
  - Moved deobfuscator patterns to separate file (DEF-25888)
  - Changed fast versions deobfuscator regexps for compatible with hyperscan (DEF-25887)
  - Fixed bug in procu2 long cleanup (DEF-25843)
  - Fixed bug in RAS with long inode (DEF-26030)


author: Ilia Gorchakov <igorchakov@cloudlinux.com> - 31.20.7-1
changelog:
  - Changed leveldb key logic (DEF-26031)
  - Fixed MDS parse escaped config values (DEF-25822)
  - Added early-filter Hyperscan DB (DEF-25858)


author: Ilia Gorchakov <igorchakov@cloudlinux.com> - 31.21.2-1
changelog:
  - Added an exception for the user www-data (DEF-26512)
  - Fixed MDS blackurls cleanup (DEF-25817, DEF-26509)
  - Added cgroup accounting to aibolit-resident service (DEF-26582)
  - Removed UID_MAX restriction (DEF-26918)


author: Ilia Gorchakov <igorchakov@cloudlinux.com> - 31.21.3-1
changelog:
  - Removed the use of mbstring (DEF-26805)
  - Added display_errors=stderr to launch params (DEF-26934)
  - Added more error markers to report to sentry (DEF-26799)


author: Ilia Gorchakov <igorchakov@cloudlinux.com> - 31.21.4-1
changelog:
  - Fixed error with empty resident job file (DEF-27062)
  - Fixed warning in procu2.php (DEF-27014, DEF-27104)
  - Fixed large memory consumption when finding blacklisted files (DEF-27091)
  - Added wake up agent on detection in resident mode (DEF-26667)
  - Started using extended-suspicious Hyperscan DB even if Hyperscan is disabled (DEF-26780)
  - Managed the hyperscan parameter for the resident mode according to Imunify360 config (DEF-26767)


author: Ilia Gorchakov <igorchakov@cloudlinux.com> - 31.21.5-1
changelog:
  - Fixed error in cleanup (DEF-27364)
  - Changed the file buffer accumulation order for CloudAV (DEF-27247)


author: Ilia Gorchakov <igorchakov@cloudlinux.com> - 32.1.5-1
changelog:
  - Changed the cleaning algorithm when using cloudav (DEF-27781)
  - Fixed MDS cleanup error (DEF-27226)


author: Martin Krcho <mkrcho@cloudlinux.com> - 32.1.6-1
changelog:
  - Added CAS check for files being cleaned (DEF-25914)
  - Added suspicious scan in resident mode for inotify_jobs (DEF-27522)
  - Fixed MDS cleanup error (DEF-27619)
  - Fixed CAS with RAS error reporting to Sentry (DEF-27966)


author: Martin Krcho <mkrcho@cloudlinux.com> - 32.1.9-1
changelog:
  - Use uniformity in reports (DEF-28429)
  - Changed to not use CAS / CloudAV when working with cron files (DEF-28365)


author: Dmitriy Leonov <dmleonov@cloudlinux.com> - 32.1.10-1
changelog:
  - Fixed allocating memory error in imunify_dbscan.php (DEF-28213)
  - Improved grouping of AI-Bolit Sentry events (DEF-28553)
  - Fixed MDS Cleanup error (DEF-28634)
  - Fixed regex for URL cleanup (DEF-28584)


author: Martin Krcho <mkrcho@cloudlinux.com> - 32.1.7-1
changelog:
  - Added support for WordPress postmeta table in MDS (DEF-27350)
  - Added mapping file and new signature DB for Patchman (DEF-28172, DEF-28173)
  - Changed license check for Cloudways (DEF-28216)


author: Martin Krcho <mkrcho@cloudlinux.com> - 32.1.11-1
changelog:
  - Fixed most frequent PCRE errors cause by deobfuscator (DEF-26429)
  - Fixed number total objects (rows_count) in MDS report (DEF-28703)
  - Changed MDS prefiltering rules to capture PHP opening tags (DEF-28758)


author: Martin Krcho <mkrcho@cloudlinux.com> - 32.1.12-1
changelog:
  - Changed size limit for ELF files to 100 MB to include them in cloud assisted scan (DEF-28627)
  - Added support for paths containing references to /./ and /../ for MDS (DEF-29081)


author: Dmitriy Leonov <dmleonov@cloudlinux.com> - 32.1.13-1
changelog:
  - Improved Sentry errors logging (DEF-28661, DEF-29052)
  - Improved the normalization process for covering mixed encodings case (DEF-29028)


author: Dmitriy Leonov <dmleonov@cloudlinux.com> - 32.1.14-1
changelog:
  - Improved Sentry errors logging (DEF-28661, DEF-29052)
  - Improved the normalization process for covering mixed encodings case (DEF-29028)
  - Decreased max ELF file size for scanner to 1M (DEF-29344)
  - Fixed regular expression for matching nested URLs, reworked logic for determining blacklisted URLs (DEF-29209)


author: Martin Krcho <mkrcho@cloudlinux.com> - 32.1.15-1
changelog:
  - Improved URL check against blacklist in MDS (DEF-29000)
  - Added more details to MDS error messages (DEF-28941)
  - Fixed wildcard handling in MDS scan path (DEF-29352)
  - Limited core dump file filtering to big ELF files (DEF-29454)


author: Dmitriy Leonov <dmleonov@cloudlinux.com> - 32.1.14-1
changelog:
  - Improved Sentry errors logging (DEF-28661, DEF-29052)
  - Improved the normalization process for covering mixed encodings case (DEF-29028)
  - Decreased max ELF file size for scanner to 10M (DEF-29344)
  - Fixed regular expression for matching nested URLs, reworked logic for determining blacklisted URLs (DEF-29209)


author: Martin Krcho <mkrcho@cloudlinux.com> - 32.1.16-1
changelog:
  - Added filtering of core dump files during scan (DEF-29484)
  - Changed max ELF file size for scanner to 100M (DEF-29750)


author: Martin Krcho <mkrcho@cloudlinux.com> - 32.1.18-1
changelog:
  - Make the process for obtaining data for scanning from database more memory efficient (DEF-28660)
  - Fix database scanner to handle large number of databases (DEF-30015)


author: Vitalii Rudnykh <vrudnykh@cloudlinux.com> - 32.1.19-1
changelog:
  - Added support hash-based ignore list (DEF-30171)
  - Fixed fatal error with writing the report to CSV (DEF-30396)


author: Maksim Klimchuk <mklimchuk@cloudlinux.com> - 32.1.21-1
changelog:
  - api.cas.imunify360.com endpoint is now used for all CAS requests. (DEF-30798)
  - Enhanced detection logic to identify obfuscated PHP code stored in a database. (e.g., SMW-INJ-27029-php.spam.redi-0). (DEF-30771)


author: Maksim Klimchuk <mklimchuk@cloudlinux.com> - 32.1.21-1
changelog:
  - api.cas.imunify360.com endpoint is now used for all CAS requests. (DEF-30798)
  - Enhanced detection logic to identify obfuscated PHP code stored in a database. (e.g., SMW-INJ-27029-php.spam.redi-0). (DEF-30771)
  - Increased size limits in real-time. (DEF-29770)


author: Maksim Klimchuk <mklimchuk@cloudlinux.com> - 32.2.1-1
changelog:
  - Removed hardcoded signatures; uses --avdb for external database. (DEF-8270)
  - Updated copyright year to 2025. (DEF-31174)
  - Added support for Magento 1 and 2 databases for vulnerable tables and fields. (DEF-31333)
  - Added extended-suspicious scanning for specific file extensions and detection of zipped PHP files < 10MB (DEF-31412)
  - Added scanning for wp_hfcm_scripts and wp_snippet tables in WordPress. (DEF-31527)
  - Fixed division by zero error in database restore for single-line cleanup files. (DEF-31523)
  - Fixed bug with infinite loop in deobfuscator (DEF-31754)


author: Maksim Klimchuk <mklimchuk@cloudlinux.com> - 32.2.2-1
changelog:
  - Optimized WHITE_EXTENDED verdict handling to avoid unnecessary scans. (DEF-31891)
  - Improved MDS scanner to detect non-standard Magento configs. (DEF-32011)
  - Fixed skipping of CMS configs files under 2K. (DEF-32011)


author: Maksim Klimchuk <mklimchuk@cloudlinux.com> - 32.3.1-1
changelog:
  - Improved malware cleanup reporting with precise hashes and timestamps. (DEF-19851)
  - Extended procu2 report with mtime and hash fields before/after cleanup. (DEF-19852)
  - Handled suspicious detections separately for upload consumers (modsec, ossec). (DEF-29483)
  - Added support for new patch verdicts from Cloud-Assisted Scan API. (DEF-31902)
  - Fixed %preun scriptlet failure in Elevate initramfs during CL8 to CL9 upgrade. (DEF-32217)
  - Implemented patching logic in procu2 using CAS API. (DEF-32652)


author: Dmitriy Leonov <dmleonov@cloudlinux.com> - 32.4.1-1
changelog:
  - Convert UTF-16 encoded files to UTF-8 before cleaning to avoid issues (DEF-29075)
  - Fix iconf func support detection (DEF-31028)
  - Disable collecting statistic for case where it is not needed (DEF-33854)


author: Dmitriy Leonov <dmleonov@cloudlinux.com> - 32.5.2-1
changelog:
  - Fixed group of admin tools detections. Added admin tools signatures sanitizing to all reports (DEF-34676)
  - Added handling of ambiguity silently by fall-back categor (DEF-34687)


author: Dmitriy Leonov <dmleonov@cloudlinux.com> - 32.6.1-1
changelog:
  - New MDS Reporting added (DEF-33704)
  - Removed chattr -i for ai-bolit Files (DEF-34156)
  - Hyperscan crash AiBolitError due to JSONDecodeError fixed (DEF-34584)
  - Added reading of /var/imunify360/.sentry_tags to report errors (DEF-34710)
  - Added the use the same config settings for different scan types (DEF-34875)
  - Improved regex signature optimizer to support Octal escape sequences (DEF-34910)


author: Dmitriy Leonov <dmleonov@cloudlinux.com> - 32.7.1-1
changelog:
  - Added scan_id tag to the Sentry event (DEF-35144)
  - Fixed the "--restore" action to correctly revert not all historical cleanups (DEF-35256)


author: Maksim Klimchuk <mklimchuk@cloudlinux.com> - 32.7.2-1
changelog:
  - Procu2 cleanup: fix normalization regression that modified legitimate files. (DEF-35239)
  - Return correct error code on failure (shared-memory). (DEF-35347)
  - Resident mode: allow admin tools upload when detection is disabled (adminer.php). (DEF-35394)
  - Fix --restore-sig-id restoration by creating proper workdir for detached scans. (DEF-35550)


author: Dmitriy Leonov <dmleonov@cloudlinux.com> - 32.7.3-1
changelog:
  - Resident mode: replace SIGTERM with SIGUSR2 for suspicious files. (DEF-35921)
  - Optimize DB restore to use the most recent backup. (DEF-36136)


author: Robert-André Mauchin <zebob.m@gmail.com> - 3.1.1-1
changelog:
  - Update to 3.1.1
  - Close: rhbz#1954337
  - Security fix for CVE-2021-30473
  - Fix: rhbz#1961375
  - Fix: rhbz#1961376
  - Security fix for CVE-2021-30475
  - Fix: rhbz#1968017
  - Fix: rhbz#1968018


author: Mosaab Alzoubi <moceap@hotmail.com> - 0.7.0-4
changelog:
  - First build on EPEL8
  - Use one branch to build on Fedora and EPEL
  - Use python3 as BR except EPEL7
  - Use LC_ALL=en_US.UTF-8 in EPEL7


author: Sergey Fokin <sfokin@cloudlinux.com> - 1-46
changelog:
  - rewrite code for versions comparing in multiphp_reconfigure.py script
  - rewrite alt-php-mysql-reconfigure.py for ubuntu support


author: Sergey Fokin <sfokin@cloudlinux.com> - 1-50
changelog:
  - ALTPHP-1376: fix detecting libmysqlclient.so version
  - ALTPHP-1396: restore alt-php.cfg if it's broken


author: Sergey Fokin <sfokin@cloudlinux.com> - 8.2.5-2
changelog:
  - ALTPHP-1487: add opcache.jit_buffer_size=100M as default value to opcache.ini
  - rebuild without ffi for rhel < 7
  - add provides and obsoletes for alt-php-internal-sqlite3


author: Sergey Fokin <sfokin@cloudlinux.com> 3.8.12-2
changelog:
  - ALTPYTH-413: move -fno-semantic-interposition to CFLAGS_NODIST
  - remove changing gcc to devtoolset-gcc
  - change BuildRequire from gcc-toolset to system gcc for CL8


author: Alexander Tishin <atishin@cloudlinux.com> - 3.9.0-1
changelog:
  - DEF-18719 Add zstd compressed tar support
  - DEF-19309 Include non-client domains to backup list on Plesk when user filter is applied


author: Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> - 1-3.2
changelog:
  - LVEMAN-1748: Move linksafe group creation to %pre
  - LU-2436: Remove cllib dependency from cloudlinux-linksafe


author: Alexander Tishyn <atishin@cloudlinux.com> 7.6.4-1
changelog:
  - DEF-24401 Fix scan queue stuck on avd/mds has been oom-killed
  - DEF-25301 Manual cleanup should bypass cleanup attempts limit/Error reporting improvements
  - DEF-27076 fix: Return the previous behaviour to save realtime scan hits


author: Arsenii Pastushenko <apastushenko@cloudlinux.com> - 2.2.0-1
changelog:
  - DEF-20330: extend auditd stats with the scanner type upon malware detection
  - DEF-21781: Do not keep i360db open while idle
  - DEF-22298 constantly watch for auditd service state and rule presence


author: Arsenii Pastushenko <apastushenko@cloudlinux.com> - 2.3.0-1
changelog:
  - DEF-23356 ignore write events to error_log
  - DEF-23377 reduce allocations by limiting paths count and removing strings.Trim


author: Arsenii Pastushenko <apastushenko@cloudlinux.com> - 2.3.1-1
changelog:
  - DEF-23606 correctly check if key starts at the end of line
  - DEF-23607 do not remove rules when the file is deleted (it is done by auditd automatically)


author: Arsenii Pastushenko <apastushenko@cloudlinux.com> - 2.4.0-1
changelog:
  - DEF-23637 report exact reason why log reader is not running
  - DEF-23866 add more sanity checks and additional stats on message parsing
  - DEF-23673 collect and send statistics on top noisy files that caused auditd events


author: Arsenii Pastushenko <apastushenko@cloudlinux.com> - 2.5.0-1
changelog:
  - DEF-24295 Implement `filters` section so it is possible to filter events on path before storing them
  - DEF-24297 Support I360 agent configuration reload
  - DEF-24298 Develop a first set of filters for auditd-log-reader
  - DEF-24304 Move trace logging of auditd-log-reader out of syslog to file


author: Arsenii Pastushenko <apastushenko@cloudlinux.com> - 2.6.0-1
changelog:
  - DEF-25106 send limited amount of events per hour (default for 500)
  - DEF-21829 remove obsolete stats fields
  - DEF-25120 improve config file  structure, auditd statistics collection and exclude more files


author: Arsenii Pastushenko <apastushenko@cloudlinux.com> - 2.6.2-1
changelog:
  - DEF-25263 make send limit configurable
  - DEF-25280 support enriched auditd log format
  - DEF-25299 drop wordpress temp write test files


author: Arsenii Pastushenko <apastushenko@cloudlinux.com> - 2.7.0-1
changelog:
  - DEF-26401 Store cron events for 1 day
  - DEF-26592 Report statistics when there are no auditd events for detected malware


author: Arsenii Pastushenko <apastushenko@cloudlinux.com> - 2.7.1-1
changelog:
  - DEF-26869 Do not search for audit events when no malware found
  - DEF-26867 Keep up to 6 paths for audit events
  - DEF-26868: report failed to parse lines to Sentry. Limit error count in /var/log/messages


author: Arsenii Pastushenko <apastushenko@cloudlinux.com> - 2.7.2-1
changelog:
  - DEF-27695 Fix crond events detection during filtering
  - DEF-27707 Track noisy files only when gathering top paths statistics


author: Arsenii Pastushenko <apastushenko@cloudlinux.com> - 2.8.1-1
changelog:
  - DEF-27924: Correctly track statistics on sent messages and db rows
  - DEF-26875: Do not drop wp-cache events
  - DEF-28023: auditd-log-reader unit is now managed by i360-agent


author: Nurzhan Bazhirov <nbazhirov@cloudlinux.com> - 2.8.3-1
changelog:
  - DEF-30200: add ability to set auditdctl custom fields to ignore mariadb/mysql generated events
  - DEF-30201: add public_html/wp-content/debug.log to auditd_exclude


author: Nurzhan Bazhirov <nbazhirov@cloudlinux.com> - 2.9.0-1
changelog:
  - DEF-29441: add monitoring rules, add filters to send /etc/valiases/, /etc/vfilters, /etc/vdomainaliases paths to corrAPI
  - DEF-28525: add imunify-auditd-log-reader support for Debian and Ubuntu OSes
  - DEF-28084: store and send all events associated with /usr/local/cpanel/uapi


author: Nurzhan Bazhirov <nbazhirov@cloudlinux.com> 2.9.4-1
changelog:
  - DEF-32609: bump go version to 1.24
  - DEF-33474: read complete log lines before parsing (and drop CL6 support)
  - DEF-34634: validate incoming events against basedirs instead of key
  - DEF-34711: use general Imunify approach to set sentry tags


author: Arsenii Pastushenko <apasutshenko@cloudlinux.com> - 2.9.5-1
changelog:
  - DEF-35454: Throttle events processing to avoid extremely high performance overhead
  - DEF-36047: Do not log validate errors
  - DEF-36046: correctly manage auditd configuration file
  - DEF-36062: fix out of range panic in formEvent
  - DEF-36036: correctly handle stale PID file on startup


author: Aleksandr Vorobev <avorobev@cloudlinux.com> - 1.2.0-1
changelog:
  - Forbidden run without --key arg
  - Switch to the new imunify360 config path
  - Use commit hash in gerrit builds
  - Update license
  - Add README.md


author: Amit Levy <alevy@cloudlinux.com> - 1.3.7-2
changelog:
  - DEF-35549: Remove GetIgnoredPaths RPC
  - DEF-35523: use grpc stream for ignore list
  - DEF-35345 Add cli interface for grpc-client
  - DEF-35345 Add generic grpc client
  - DEF-35257 Add gRPC client for proactive ignore lists
  - DEF-35109 Read proactive whitelist data from redis datastorage on update


author: Arsenii Pastushenko <apastushenko@cloudlinux.com> - 1.3.8-1
changelog:
  - DEF-35203: Make naming consistent and get rid of wrong repeated field
  - DEF-35281: Pick users from running Kubernetes pods and use application_id as username
  - DEF-35203: Edit proactive proto


author: Arsenii Pastushenko <apastushenko@cloudlinux.com> - 1.3.2-2
changelog:
  - DEF-32946: Use dedicated functions for io operations; use delimiters for detecting garbage data
  - DEF-32946: rework fgw tests
  - DEF-32924 Fix incorrect file management by FGW cli


author: Danil Khabibullin <dkhabibullin@cloudlinux.com> - 1.3.4-8
changelog:
  - DEF-34419 Make rotatable JWT secret for proxy API
  - Fix uninstall process
  - DEF-31596 Add proxy server for rpc commands


author: Mikhail Faraponov <mfaraponov@cloudlinux.com> - 2.1.6-1
changelog:
  - DEF-23058: Reduce number of sqlite accesses to database on empty payload
  - DEF-23050: Added graceful extractor sqlite3 connection shutdown


author: Dmitry Baynak <dbaynak@cloudlinux.com> - 7.2.0-1
changelog:
  - DEF-20205: Real-time scanner watchers improvements
  - DEF-19802: imunify-realtime-av: implement FC API watcher that directly reads kernel interface


author: Alexander Tishin <atishin@cloudlinux.com> - 7.2.2-1
changelog:
  - DEF-22397 Use a separate inotify watcher for /var/spool/cron real-time scanning
  - DEF-22871 Fix panic on centos 6 when optimize_realtime_scan set to true
  - DEF-23079 Fix 'open /dev/.lxd-mounts: permission denied'


author: Svyatoslav Gormash <sgormash@cloudlinux.com> 3.1.0-108
changelog:
  - WPT-60 Add support for PostgreSQL log monitoring
  - added service restart after upgrade. Version bump.


author: Svyatoslav Gormash <sgormash@cloudlinux.com> - 3.7.0-12
changelog:
  - WPT-1623 Remove lsof call from Active Response scripts for better performance 
  - DEF-35839 Remove leftover cronjob on uninstall


author: Nurzhan Bazhirov <nbazhirov@cloudlinux.com> 6.4.5-1
changelog:
  - DEF-23446: use yaml style in cpanel pure-ftpd config, trigger /scripts/setupftpserver on pure-ftpd enable/disable
  - DEF-23541: ignore nano version when linking i360_auth to i360_lib
  - DEF-23503: reduce network timeouts in pam module, pam daemon and native dovecot module


author: Pavel Zaikin <pzaikin@cloudlinux.com> 6.4.5-2
changelog:
  - DEF-24182 use imunify360-venv for python scripts 
  - DEF-24430: Install go-licenses v1.6.0 for current go version


author: Nurzhan Bazhirov <nbazhirov@cloudlinux.com> 6.4.6-1
changelog:
  - DEF-25203: add LimitNOFILE value to imunify360-pam.service to raise limit of open file descriptors
  - DEF-25862: fix osv-scanner vulnerabilities by updating go version and versions of go modules
  - DEF-26053: build imunify360-pam for Debian 12
  - DEF-26170: remove /usr/lib64/dovecot/|/lib64/dovecot path on DirectAdmin, version 6.4.6-1 only


author: Nurzhan Bazhirov <nbazhirov@cloudlinux.com> 6.4.7-1
changelog:
  - DEF-27057: add pure-ftpd hook to enable imunify360-pam pure-ftpd after /scripts/setupftpserver execution disables it on cPanel
  - DEF-26992: replace python wrapper with FailureWatchdog go code on systemd
  - DEF-27119: add systemd activation sockets, add ConnTracker to track idleness
  - DEF-25512: fix imunify360-pam status command


author: Nurzhan Bazhirov <nbazhirov@cloudlinux.com> 6.4.8-1
changelog:
  - DEF-29380: replace None value in get_cp_name return value with 'generic'
  - DEF-28575: use wafd's iplist service for whitelisted ips
  - DEF-28697: use local version identifier instead of hyphen in setup.py
  - DEF-29884: add support for dovecot-2.3.21
  - DEF-29917: validate license against alternative public key when present


author: Nurzhan Bazhirov <nbazhirov@cloudlinux.com> 6.4.9-1
changelog:
  - DEF-29976: add support for Ubuntu 24
  - DEF-28659: remove centos6/cl6 support
  - DEF-24286: do not log to syslog syscall.EPIPE errors on closed connections


author: Nurzhan Bazhirov <nbazhirov@cloudlinux.com> 6.4.10-1
changelog:
  - DEF-32268: wrap logging init in try except block
  - DEF-30929: use /usr/lib/security location instead of /lib/security only on ubuntu24 and debian12


author: Nurzhan Bazhirov <nbazhirov@cloudlinux.com> 6.4.12-1
changelog:
  - DEF-35434: add dovecot-native support for dovecot-2.4
  - DEF-37172: add dovecot-pam support for dovecot-2.4


author: Nurzhan Bazhirov <nbazhirov@cloudlinux.com> 6.4.13-1
changelog:
  - DEF-36381: build imunify360-pam for Debian 13
  - DEF-37452: add dovecot-native support for dovecot-2.4.2
  - DEF-37502: fix domainowner regex in dovecot-pam mode for dovecot versions higher than 2.4


author: Nurzhan Bazhirov <nbazhirov@cloudlinux.com> 6.4.14-1
changelog:
  - DEF-37513: remove symlink if dovecot version is not supported
  - DEF-38098: free post_set settings in native dovecot-2.4


author: Nurzhan Bazhirov <nbazhirov@cloudlinux.com>, 6.4.1-1
changelog:
  - DEF-14950: rate limit "no space left on device" errors
  - DEF-19519: rate limit "operation not permitted" errors


author: Eugene Vodilov <evodilov@cloudlinux.com> 7.5.0-1
changelog:
  - DEF-22684: Cross-server Auto-Immunity (Stage II)
  - DEF-23380: Disable HMAC verification for i360 messages


author: Eugene Vodilov <evodilov@cloudlinux.com> 7.6.0-2
changelog:
  - DEF-23621: Do not hook into zend_execute_ex() when JIT is enabled
  - DEF-23709: Collect statistics on communication between PHP daemon and i360.so
  - DEF-19739: Migrate from "queue" to "queue_sig" in PD reporting to the Correlation


author: Arsenii Pastushenko <apastushenko@cloudlinux.com> 7.6.1-1
changelog:
  - DEF-24118: provide correct proto* files for i360.so where packet statistics is marked as required
  - DEF-24243: enable statistics when there were rejected messages during the last request


author: Alexey Berezhok <aberezhok@cloudlinux.com> 7.7.0-1
changelog:
  - DEF-23971: Remove PCRE_ANCHORED flag for pcre_exec in Proactive Defense
  - DEF-23919: remove queue from i360.so
  - DEF-24418 calculate message drop on php-daemon side
  - DEF-24381 Revert DEF-23971 and send queue_sig as part of proactive defense messages


author: Arsenii Pastushenko <apastushenko@cloudlinux.com> 7.7.1-1
changelog:
  - DEF-24716 send timings and counters only when they fully enabled
  - DEF-24716 always send stats data to php-daemon (except when i360 is deactivated)


author: Arsenii Pastushenko <apastushenko@cloudlinux.com> 7.7.3-1
changelog:
  - DEF-25148: read config entries in MINIT before checking them
  - DEF-25200: increase api limits for perf stats


author: Nurzhan Bazhirov <nbazhirov@cloudlinux.com> 7.8.0-1
changelog:
  - DEF-24048: Implement segfault handling in i360.so
  - DEF-24284: add backtrace reporting on segfault
  - DEF-24605: Remove EF0_HASH from environment list
  - DEF-24781: optimize hot functions (i360_free_func_params_new, map_hash, brp_map_hash)
  - DEF-24949: initialize RINIT counters only once


author: Vladimir Pavlyuk <vpavlyuk@cloudlinux.com> 7.10.0-1
changelog:
  - DEF-25770 Clean up configs related to PHP 5.4 and PHP 5.5
  - DEF-25572 Collect monitoring data from i360 on mshutdown when conditions are met
  - DEF-25427 Track connection statistics on PHP daemon side
  - DEF-25427 Remove old communication statistics
  - DEF-25559: Replace I360_PD_DATABASE_BLOCK_BIT | I360_PD_DATABASE_BLOCK_EXCLUDE_BIT with I360_PD_DATABASE_BLOCK | I360_PD_DATABASE_BLOCK_EXCLUDE in I360_PD_CONDITION_INCLUDES, restore more optimized way of moving bits from conditions to matching bitmap
  - DEF-25431: replace I360_PD_DATABASE_WRITE_LOG with I360_PD_DATABASE_WRITE_LOG_BIT in i360_pd_database_func_foreach
  - DEF-25273: Implement Greylisted EF0 hashes support
  - DEF-25212: copy URL to absolute path field if no absolute path present
  - DEF-25277: fix script filename if it is a URL, include URL schema to environment variables in case it is present


author: Vladimir Pavlyuk <vpavlyuk@cloudlinux.com> 7.10.0-1
changelog:
  - DEF-25572 Collect monitoring data from i360 on mshutdown when conditions are met
  - DEF-25427 Track connection statistics on PHP daemon side
  - DEF-25427 Remove old communication statistics
  - DEF-25559: Replace I360_PD_DATABASE_BLOCK_BIT | I360_PD_DATABASE_BLOCK_EXCLUDE_BIT with I360_PD_DATABASE_BLOCK | I360_PD_DATABASE_BLOCK_EXCLUDE in I360_PD_CONDITION_INCLUDES, restore more optimized way of moving bits from conditions to matching bitmap
  - DEF-25431: replace I360_PD_DATABASE_WRITE_LOG with I360_PD_DATABASE_WRITE_LOG_BIT in i360_pd_database_func_foreach
  - DEF-25273: Implement Greylisted EF0 hashes support
  - DEF-25212: copy URL to absolute path field if no absolute path present
  - DEF-25277: fix script filename if it is a URL, include URL schema to environment variables in case it is present


author: Arsenii Pastushenko <apastushenko@cloudlinux.com> 7.11.0-1
changelog:
  - DEF-25578 Keep jit_compatible_mode parameter during upgrades (debian)
  - DEF-25851 Resolve security vulnerabilities in go projects
  - DEF-25196: Optimize string functions in i360.so
  - DEF-25195: Delete unused/obsolete functions
  - DEF-25601: Move jit_compatibility_mode to a separate config option to immunify360.conf; move reading yaml configs to MINIT
  - DEF-25866: Support event filtering in HDB / i360.so. Add SKIPLOG hash flag, bit 16 - 0x10000 hex, 1 dec


author: Arsenii Pastushenko <apastushenko@cloudlinux.com> 7.11.3-1
changelog:
  - DEF-26503: Fix: i360_free_global_copy is not called before reopening db with i360_make_global_copy thus leaking resources
  - DEF-26385: i360.so running by PHP-FPM can't read user config


author: Arsenii Pastushenko <apastushenko@cloudlinux.com> 7.12.0-1
changelog:
  - DEF-25494: Increase RAW_POST_DATA to 1024 for blocked events
  - DEF-25573: Watch for alt-php8[12] package changes on CL systems
  - DEF-25865: Send suspicious data for malware scanner during PHP script execution
  - DEF-26017: Release PD configuration sripts as part of i360-php package
  - DEF-26039: i360-storage-new should use imunify360-venv python
  - DEF-26121: Fitler temporary wp event logging on the stream hook stage instead of logging stage
  - DEF-26268: Cache configuration files for 1 minute
  - DEF-26363: Trigger cagefs remount only after configuration files are installed when enabled
  - DEF-26397: Reset dbgcounters on a new request
  - DEF-26497: Develop a script for module.ini gradual rollout for PD


author: Arsenii Pastushenko <apastushenko@cloudlinux.com> 7.12.0-2
changelog:
  - DEF-26902: add release rendering in spec files
  - DEF-26676 Use Correlation UI for i360-php-logger configuration file management
  - DEF-26496: Fix: not closing malware directory FD before reopening
  - DEF-25494: Increase RAW_POST_DATA to 1024 for blocked events
  - DEF-25573: Watch for alt-php8[12] package changes on CL systems
  - DEF-25865: Send suspicious data for malware scanner during PHP script execution
  - DEF-26017: Release PD configuration sripts as part of i360-php package
  - DEF-26039: i360-storage-new should use imunify360-venv python
  - DEF-26121: Fitler temporary wp event logging on the stream hook stage instead of logging stage
  - DEF-26268: Cache configuration files for 1 minute
  - DEF-26363: Trigger cagefs remount only after configuration files are installed when enabled
  - DEF-26397: Reset dbgcounters on a new request
  - DEF-26497: Develop a script for module.ini gradual rollout for PD


author: Arsenii Pastushenko <apastushenko@cloudlinux.com> 7.12.1-1
changelog:
  - DEF-27174: mark scan hashes log_only when malware is not found
  - DEF-27027: watch php82 package changes
  - DEF-26886: add php8.3 support


author: Arsenii Pastushenko <apastushenko@cloudlinux.com> 7.9.0-1
changelog:
  - DEF-24556: send queue data only once
  - DEF-24884: refactor code in counters
  - DEF-24881: reformat the code of i360.so
  - DEF-24945: Add human-readable macros for constants and bit operations
  - DEF-25032: add script filename and current script filename to segfault reporting, compile segfault handling for php versions higher than 8
  - DEF-25431: replace I360_PD_DATABASE_WRITE_LOG with I360_PD_DATABASE_WRITE_LOG_BIT in i360_pd_database_func_foreach


author: Arsenii Pastushenko <apastushenko@cloudlinux.com> 7.12.1-1
changelog:
  - DEF-27174: mark scan hashes log_only when malware is not found
  - DEF-27027: watch php82 package changes


author: Nurzhan Bazhirov <nbazhirov@cloudlinux.com> 8.1.1-1
changelog:
  - DEF-27665: install i360.so ad hoc when a new version of php is installed on cloudways, remove .cpanel.multiphp dir


author: Arsenii Pastushenko <apastushenko@cloudlinux.com> 8.1.2-1
changelog:
  - DEF-27197: set jit_compatible_mode to null when not specified explicitly 
  - DEF-28212: do not fail when i360-merged config is absent
  - DEF-28237: validate license against alternative pubkey
  - DEF-28279: do not block recognized malware when DISABLED


author: Arsenii Pastushenko <apastushenko@cloudlinux.com> 8.1.5-1
changelog:
  - DEF-28711: properly initialize connection tracker changes
  - DEF-28286: add functionality to block exit/die
  - DEF-28558: fix incorrect pd_duration in mode: DISABLED


author: Arsenii Pastushenko <apastushenko@cloudlinux.com> 8.2.0-1
changelog:
  - DEF-29395: Don't block function if mode is DISABLED
  - DEF-29391: use apm info to detect cloudways
  - DEF-28063: Add ability to block URL list in header function within autorules


author: Arsenii Pastushenko <apastushenko@cloudlinux.com> 8.2.3-1
changelog:
  - DEF-29953: Identify the chain of includes where the event happened
  - DEF-29449: Unify code working with PD modes
  - DEF-29744: Properly handle PHP opcache optimization when enabled
  - DEF-30198: Do not log events generated by whitelisted scripts
  - DEF-30442: (debian) stop php-daemon on i360 uninstall
  - DEF-30469: Update opcache mask to avoid rare segfaults for php7.2


author: Arsenii Pastushenko <apastushenko@cloudlinux.com> 8.3.0-1
changelog:
  - DEF-30822: enable segfault reporing by default
  - DEF-30987: move 'extension=i360.ini' line from php.ini to php.d/i360.ini
  - DEF-30982: fix i360.ini paths on debian/ubuntu
  - DEF-31181: Add php8.4 support. Enhance php8.3 support on Ubuntu24. Release PD for ea-php8.X for rhel >= 7.


author: Arsenii Pastushenko <apastushenko@cloudlinux.com> 8.3.2-1
changelog:
  - DEF-31786: fix errors in i360-pkg-watcher reported by sentry
  - DEF-31793: use noop mode in i360-pkg-watcher


author: Arsenii Pastushenko <apastushenko@cloudlinux.com> 8.4.0-1
changelog:
  - DEF-29731: use imunify-common module for api operations
  - DEF-31896: add script uri, script filename and servername to segfault messages, refactor failure messaging
  - DEF-32116: report i360 events only, increase backtrace depth
  - DEF-31544: add memory limit checks, log to php-daemon when php memory is exhausted
  - DEF-32250: do not create extra files in dangerlist directory
  - DEF-32181: fix monitoring stats memory leak


author: Nurzhan Bazhirov <nbazhirov@cloudlinux.com> 8.4.1-1
changelog:
  - DEF-32609: update go version to 1.24.1
  - DEF-32882: monitor i360.so segfaults only in ossec trigger
  - DEF-32882: use '*' as a dummy if function name is unavailable in backtrace
  - DEF-32882: check e->name before using it in hash_queue_calc to avoid segfault
  - DEF-32959: cover missing PHP versions for certain platforms
  - DEF-33406: do not execute external commands without timeout
  - DEF-33406: use systemd watchdog to track php-daemon health


author: Nurzhan Bazhirov <nbazhirov@cloudlinux.com> 8.4.3-1
changelog:
  - DEF-32880: use ef1 hashes when jit_compatible_mode is on
  - DEF-34035: clear outdated events on php-daemon startup


author: Nurzhan Bazhirov <nbazhirov@cloudlinux.com> 8.4.4-1
changelog:
  - DEF-34424: add i360.so to php.ini for alt-phps to enable i360 on cagefs
  - DEF-34708: use all imunify360-agent's sentry tags


author: Siarhei Pol <spol@cloudlinux.com> 8.4.5-1
changelog:
  - DEF-35040: reduce rules compilation in i360-storage-new.py on cloudways
  - DEF-34985: replace int with size_t in arguments of i360_add_func_param_value_add_new
  - DEF-34749: rate limit monStats aggregator errors
  - DEF-34748: rate limit perfStats aggregator errors


author: Nurzhan Bazhirov <nbazhirov@cloudlinux.com> 8.5.0-1
changelog:
  - DEF-35813: Release rules.yaml as part of Proactive Defence package
  - DEF-36251: Do not tamper with OPcache optimization level
  - DEF-35677: Optimize installation/removal of i360 in install-clean.sh
  - DEF-35314: Fix APPLICATION_ID functionality for per-application configuration and whitelist loading


author: Arsenii Pastushenko <apastushenko@cloudlinux.com> 8.5.1-2
changelog:
  - DEF-29731: rely on gw directory instead of custom flag at install time
  - DEF-29731: reenable file gateway Correlation API communication when present
  - DEF-35942: enable i360.so in php.d/i360.ini if 'cagefs_disabled=on' is set in cagefs.ini
  - DEF-36588: Removed some manual rules to replace with php_immunity
  - DEF-35459: Switch EF1 hash processing to Block mode


author: Nurzhan Bazhirov <nbazhirov@cloudlinux.com> 8.5.2-1
changelog:
  - DEF-37610: collect dbgcounters without rule counters when debug stats are activated
  - DEF-37501: use non-privileged config in logger and daemon
  - DEF-37610: fixed STAT_WHOLE_BLAMER and STAT_WHOLE_RINIT counters
  - DEF-38065: enable iter_proc_self_environ call when environ is NULL on all phps
  - DEF-37465: add alt-php85 support


author: Pavel Zaikin <pzaikin@cloudlinux.com> - 3.2.8-1
changelog:
  - DEF-25281 move incidentSubmitPeriod to comand line args
  - DEF-24793: Do not error on empty report
  - DEF-24792: Ignore corrupted fields when parsing meminfo


author: Amit Levy <alevy@cloudlinux.com> - 3.4.0-1
changelog:
  - DEF-31058: fix(ci) unit tests UNSTABLE should be FAILED
  - DEF-31058: add support for cgroups v2
  - DEF-31058: run golangci-lint


author: Amit Levy <alevy@cloudlinux.com> - 3.4.2-1
changelog:
  - DEF-32102: ignore cgroup.controller file not found errors
  - DEF-32094: ignore cgroup not exist errors


author: Amit Levy <alevy@cloudlinux.com> - 3.5.0-1
changelog:
  - DEF-29735: add filebased gateway for correlation server
  - DEF-32809: fix memory data is shown in bytes should by megabytes
  - DEF-32871: fix main slices like Imunify.slice are not reported
  - DEF-32241: add logs for easier debugging rpm tests


author: Amit Levy <alevy@cloudlinux.com> - 3.5.1-1
changelog:
  - DEF-32816: fix cpu stats not collected if controllers is off
  - DEF-32479: fix ual not synced with systemd


author: Amit Levy <alevy@cloudlinux.com> - 3.5.4-1
changelog:
  - DEF-33715: fix file not found for v1
  - DEF-33922: fix cleaup nested dirs
  - DEF-33922: fix no space when creating metric files
  - DEF-33881: ignore "unknown" parsing errors


author: Aidyn Torgayev <atorgayev@cloudlinux.com> - 3.6.4-1
changelog:
  - DEF-35241: do not send error if ipv6 is disabled
   * Thu Jul 10 2025 Aidyn Torgayev <atorgayev@cloudlinux.com> - 3.6.3-1
  - DEF-35000: add profiling tools


author: Igor Savenko <bliss@cloudlinux.com> 1.20.121-1
changelog:
  - DEF-23128: Excessive request to endpoint may cause very long captcha processing
  - DEF-22929: Update jQuery in captcha page


author: Igor Savenko <bliss@cloudlinux.com> 1.20.122-1
changelog:
  - DEF-23288: Splashscreen is shown to requests coming to ports 2082/2083 unless a valid cookie is found


author: Igor Savenko <bliss@cloudlinux.com> 1.21.0-1
changelog:
  - DEF-24020: Release unified webshield
  - DEF-24036: The way the splashsreen is shown can go wrong when CDNs are involved


author: Igor Savenko <bliss@cloudlinux.com> 1.22.0-1
changelog:
  - DEF-24256: Loading site assets with HTTP/2 request can fail in chrome-based environment
  - DEF-24228: Fixed the ways a port is added to the splashscreen redirection url


author: Igor Savenko <bliss@cloudlinux.com> 1.23.1-1
changelog:
  - DEF-25483: Make sure that whitelisted source IP addresses don't trigger splashscreen for cpanel port protecton


author: Igor Savenko <bliss@cloudlinux.com> 1.22.2-2
changelog:
  - DEF-24916: Added connection upgrade headers
  - DEF-23650: Research the percentage of requests stayed without response due to the webshield timeout
  - DEF-24180: Switch webshield to alt-python311


author: Igor Savenko <bliss@cloudlinux.com> 1.24.3-1
changelog:
  - DEF-27455: In non-legacy mode for splashscreen IPs when splash is disabled module returns empty splashscreen


author: Igor Savenko <bliss@cloudlinux.com> 1.25.3-2
changelog:
  - DEF-28032: wafd has memory leakage
  - DEF-28060: splashscreen coookie is not checked at the wafd side


author: Igor Savenko <bliss@cloudlinux.com> 1.25.4-1
changelog:
  - DEF-28072: Move XFF processing logic to nginx module side
  - DEF-28056:Add caching for site additional assets for small time (10s) to wafd


author: Vadim Kuznetsov <vkuznetsov@cloudlinux.com> 1.27.0-2
changelog:
  - DEF-28643: wafd logging refactoring
  - DEF-28642: implement log rotation for wafd
  - DEF-28640: splash fix format string
  - DEF-28725: Remove cache headers duplicates
  - DEF-28806: Make every splashscreen redirect unique to prevent caching
  - DEF-28640: Make wafd log splashscreen shows
  - DEF-28802: Enable Splashscreen for CloudFlare by default
  - DEF-28761: Make sure wafd is working if webshield is stopped/disabled


author: Igor Savenko <bliss@cloudlinux.com> 1.27.0-4
changelog:
  - DEF-28863: make sure wafd runs all the time
  - DEF-29158: Wafd should log cases where splashscreen is expected to be shown, but wasn't shown due to present cookie.


author: Igor Savenko <bliss@cloudlinux.com> 1.28.3-1
changelog:
  - DEF-30303: Fix subdomain cookie issue, which causes splashscreen loop
  - DEF-29913: Do not send notifications to UAL daemon if it's disabled in config
  - DEF-29694: Fix wafd logrotate postrotate script


author: Igor Savenko <bliss@cloudlinux.com> 1.30.0-1
changelog:
  - DEF-29528: Send CAPTCHA messages to correlation server
  - DEF-29527: Implement Captcha DoS detection in wafd


author: Igor Savenko <bliss@cloudlinux.com> 1.30.1-1
changelog:
  - DEF-29913: Do not send notifications to UAL daemon if it's disabled in config
  - DEF-29905: Reduce wafd memory footprint in idle mode
  - DEF-30087 Prevent closing listening sockets on config reload
  - DEF-30085: wafd should read token each time when it changed on the disk


author: Igor Savenko <bliss@cloudlinux.com> 1.30.2-1
changelog:
  - DEF-30303: Fixed old splashscreen cookie TTL discrepancies, enabled cookie domains
  - DEF-29827: Fixed accumulation issue, disabled random query parameter by default
  - DEF-30366: Fix unit-tests for UAL functionality
  - DEF-30435 Check enabled state on package update


author: Igor Savenko <bliss@cloudlinux.com> 1.30.2-2
changelog:
  - DEF-30440: imunify360-wafd binary still active after uninstall
  - DEF-30303: Changed name of cookie


author: Igor Savenko <bliss@cloudlinux.com> 1.30.3-1
changelog:
  - DEF-30553: Make sure 'cf-edge-cache: no-cache' header unconditionally added to the splashscreen page


author: Igor Savenko <bliss@cloudlinux.com> 1.30.4-1
changelog:
  - DEF-30678: Wafd buffer is exceeded when new splash is used with long initial URL
  - Revert "DEF-30087 Prevent closing listening sockets on config reload"


author: Vadim Kuznetsov <vkuznetsov@cloudlinux.com> 1.31.3-1
changelog:
  - DEF-32093 [BACKPORT] Added throttling for sentry events
  - DEF-32043 [BACKPORT] Improvement in unit test TestExpectedErrorInQuery
  - DEF-32043 [BACKPORT] Do not send netlink-related errors to Sentry
  - DEF-31543: [BACKPORT] notify user about UAL connection loss only once


author: Igor Savenko <bliss@cloudlinux.com> 1.31.4-1
changelog:
  - DEF-32418: [BACKPORT] Splashscreen variant 'B' 'connection.rtt' prevents valid UserAgents from passing splashscreen


author: Vadim Kuznetsov <vkuznetsov@cloudlinux.com> 1.32.0-1
changelog:
  - DEF-31708 Set-Cookie header fixed in Apache module @BS-NOBUILD
  - DEF-31679 Run switch max webserver command when max webserver environment detected


author: Miroslav Kovac <mkovac@cloudlinux.com> 1.32.2-2
changelog:
  - Merge "DEF-32371: let server header to be passed from downstream"
  - DEF-32371: let server header to be passed from downstream


author: Miroslav Kovac <mkovac@cloudlinux.com> 1.33.0-1
changelog:
  - DEF-33776 Custom logs rotation
  - DEF-33912: update coraza dependency
  - DEF-33572: implement wildcard domain whitelist matching
  - DEF-33695: Update coraza according to upstream
  - DEF-32893: implement appSpecific rules config loading
  - DEF-32895: implement handling of app specific rulsets during request processing
  - DEF-33666: Remove 'none' UAL verdict from wafd


author: Vadim Kuznetsov <vkuznetsov@cloudlinux.com> 1.34.0-1
changelog:
  - DEF-33694 Whitelisted domains feature fixed for Coraza mode
  - DEF-32911: Version bump
  - DEF-33097 Disabling webshield in Coraza mode implementation


author: Igor Savenko <bliss@cloudlinux.com> 1.34.0-3
changelog:
  - DEF-34313: webshield-watchdog incorrectly reloads wafd every time it runs in CW environment
  - DEF-34341: Wafd reloading after UAL state in config added
  - DEF-34331: Systemd dependency for ossec-hids service has been added


author: Igor Savenko <bliss@cloudlinux.com> 1.34.4-2
changelog:
  - DEF-35148: ipset_worker is not returning into pool
  - DEF-35178: Wafd is constantly reloading (CloudWays)


author: Ruslan Shmelev <rshmelev@cloudlinux.com> 1.35.0-2
changelog:
  - DEF-34816: Whitelist all by using * in domains_whitelist conf file
  - DEF-34743: Fix unbounded memory growth in wafd with coraza
  - DEF-33874: Implementation of coraza persistance storage


author: Igor Savenko <bliss@cloudlinux.com> 1.35.2-1
changelog:
  - DEF-35295: Missing distinction between expiration of collection variable and of collection itself
  - DEF-35398: webshield 421 Misdirected Request issue with SNI enabled in apache


author: Miroslav Kovac <mkovac@cloudlinux.com> 1.36.0-1
changelog:
  - DEF-35453: support version specific rules
  - DEF-34255 make a CorazaRulesChecker initialized flag reloadable
  - DEF-34255 do not fail wafd if coraza failed to load config/rules
  - DEF-33864 SCRIPT_FILENAME & SCRIPT_USERNAME variables implementation


author: Vadim Kuznetsov <vkuznetsov@cloudlinux.com> 1.36.1-2
changelog:
  - DEF-35591: read state file before ensuring consistent state
  - DEF-35104: investigation - redirect support, coraza module reference update.


author: Igor Savenko <bliss@cloudlinux.com> 1.36.2-1
changelog:
  - DEF-35740: Imunify360-webshield crashes with core dumps
  - DEF-35866: Added syncing with mutexes to ensureConsistentState
  - DEF-35589: Make sure webshieldctl in configure stage respects current WEBSHIELD_ENABLE state


author: Igor Savenko <bliss@cloudlinux.com> 1.37.0-2
changelog:
  - DEF-36343: Webshieldctl has unnecessary '$' symbol in setting defaults
  - DEF-35128: Implement Coraza Logging
  - DEF-35728: Implement disabling rules per domain for coraza
  - DEF-35740: Imunify360-webshield crashes with core dumps
  - DEF-35867: remove skip on test_modsec_rule_disabled_for_domain for coraza
  - DEF-35870: wafd passing wrong format of http version
  - DEF-35898: [sentry] data not convertible to netlink
  - DEF-35961: [sentry] failed to convert request
  - DEF-36145: wildcard whitelisting is not working correctly
  - DEF-36270: In apache 'module' mode webshield port is not mapped back in splashscreen body
  - DEF-35866: Added syncing with mutexes to ensureConsistentState
  - DEF-35589: Make sure webshieldctl in configure stage respects current WEBSHIELD_ENABLE state


author: Vadim Kuznetsov <vkuznetsov@cloudlinux.com> 1.37.1-1
changelog:
  - DEF-36663 webshieldctl: is-active action fixed
  - DEF-36363: Custom rules has been placed before coraza ruleset in modsecurity.conf


author: Miroslav Kovac <mkovac@cloudlinux.com> 1.37.3-1
changelog:
  - DEF-36837: process status code if received
  - DEF-36298: ids: add headless browser support to the performance framework


author: Miroslav Kovac <mkovac@cloudlinux.com> 1.38.1-1
changelog:
  - DEF-37554: Change the way we handling transaction closure
  - DEF-35400: Attempt to fix build for debian-based systems


author: Vadim Kuznetsov <vimusov@gmail.com> 1.38.2-1
changelog:
  - DEF-38032 wafcl module: do not disrupt request if module connection to wafd failed or module failed to parse protobuf response


author: Miroslav Kovac <mkovac@cloudlinux.com> 1.38.1-1
changelog:
  - DEF-37554: Change the way we handling transaction closure
  - DEF-37563: change log to debug
  - DEF-37554: Per-client individual graphs added
  - DEF-37554: A secondary client sending chunks has been added
  - DEF-37703: create option to have pure Apache webserver in perf framework
  - DEF-34947 Version bump
  - DEF-37554: Performance Framework update for chunked uploads
  - DEF-36358: WAFD must not apply rules for imunify360-related requests
  - Support to alternative ports is added to Performance Framework
  - DEF-35400: update coraza version to commit hash from main branch
  - DEF-35400: Attempt to fix build for debian-based systems


author: Ruslan Shmelev <rshmelev@cloudlinux.com> 1.38.4-1
changelog:
  - DEF-38080: disable pool usages in wafcl moduel
  - DEF-38078 Allow request on errors during communication with wafd
  - DEF-38032 Fix chunked POST request body
  - DEF-37554: Change the way we handling transaction closure


author: Ruslan Shmelev <rshmelev@cloudlinux.com> - 1.0-0
changelog:
  - modify cron to update from the stable repository
  - bump version numbers to 1.0-0
  - bump component versions to the stable ones


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 5.0.1-5
changelog:
  - Actually, specify pagesizes according to arches, closes #1545539
  - Remove patch disabling thp as this is now handled by configure, see
    upstream issue 526


author: Paul Howarth <paul@city-fan.org> - 1.10.0-1
changelog:
  - Update to 1.10.0
    - Adds agent forwarding support
    - Adds OpenSSH Agent support on Windows
    - Adds ECDSA key support using the Mbed TLS backend
    - Adds ECDSA cert authentication
    - Adds diffie-hellman-group14-sha256, diffie-hellman-group16-sha512,
      diffie-hellman-group18-sha512 key exchanges
    - Adds support for PKIX key reading when using ed25519 with OpenSSL
    - Adds support for EWOULDBLOCK on VMS systems
    - Adds support for building with OpenSSL 3
    - Adds support for using FIPS mode in OpenSSL
    - Adds debug symbols when building with MSVC
    - Adds support for building on the 3DS
    - Adds unicode build support on Windows
    - Restores os400 building
    - Increases min, max and opt Diffie Hellman group values
    - Improves portability of the make file
    - Improves timeout behaviour with 2FA keyboard auth
    - Various improvements to the Wincng backend
    - Fixes reading partial packet replies when using an agent
    - Fixes Diffie Hellman key exchange on Windows 1903+ builds
    - Fixes building tests with older versions of OpenSSL
    - Fixes possible multiple definition warnings
    - Fixes potential cast issues _libssh2_ecdsa_key_get_curve_type()
    - Fixes potential use after free if libssh2_init() is called twice
    - Improved linking when using Mbed TLS
    - Fixes call to libssh2_crypto_exit() if crypto hasn't been initialized
    - Fixes crash when loading public keys with no id
    - Fixes possible out of bounds read when exchanging keys
    - Fixes possible out of bounds read when reading packets
    - Fixes possible out of bounds read when opening an X11 connection
    - Fixes possible out of bounds read when ecdh host keys
    - Fixes possible hang when trying to read a disconnected socket
    - Fixes a crash when using the delayed compression option
    - Fixes read error with large known host entries
    - Fixes various warnings
    - Fixes various small memory leaks
    - Improved error handling, various detailed errors will now be reported
    - Builds are now using OSS-Fuzz
    - Builds now use autoreconf instead of a custom build script
    - cmake now respects install directory
    - Improved CI backend
    - Updated HACKING-CRYPTO documentation
    - Use markdown file extensions
    - Improved unit tests


author: Sergey Fokin <sfokin@cloudlinux.com> - 1.10.0-1.cloudlinux
changelog:
  - re-enable sha1 rsa-sha keys out of the box
    See: https://github.com/libssh2/libssh2/issues/630
  - disable tests


author: Frantisek Sumsal <frantisek@sumsal.cz> - 1.2.0-7
changelog:
  - Initial EPEL 9 build for BZ#2029481
  - Temporarily skip building docs due to work around BZ#2031879


author: Andreas Schneider <asn@redhat.com> - 2.1.0-0.21beta3
changelog:
  - Rebase onto https://github.com/LuaJIT/LuaJIT/tree/v2.1
  - Dropped support for ppc64le
  - Dropped support for s390x


