# changelog

changelog: - initial package
author:
  Alexander Khaustov <a.khaustov@southbridge.ru> - 1.0.southbrid                                                                              ge


author: daviddavid <daviddavid> 3.1-4.mga8
changelog:
  + Revision: 1456527
  - switch to python3 (mga#25632)
  - switch pidfile dir from /var/run to /run/denyhosts (mga#25632)


author: daviddavid <daviddavid> 3.1-8.mga8
changelog:
  + Revision: 1596588
  - add upstream patch to fix the AttributeError related to issue 54 (mga#26822)
  - change RuntimeDirectoryPreserve config from "restart" to "yes" (mga#26823)


author: Archana Ravindar <aravinda@redhat.com> - 1.21.3-3
changelog:
  - Add missing strict fips runtime detection patch
  - Temporarily disable FIPS tests on aarch64 due to builder kernel bugs
  - Related: RHEL-12624


author: Alejandro Sáez <asm@redhat.com> - 1.21.7-1
changelog:
  - Rebase to Go 1.21.7
  - Set GOTOOLCHAIN to local
  - Resolves: RHEL-24334
  - Resolves: RHEL-18364
  - Resolves: RHEL-18365


author: Alejandro Sáez <asm@redhat.com> - 1.22.3-1
changelog:
  - Rebase to 1.22.3
  - Removes re-enable-cgo.patch
  - Resolves: RHEL-35634
  - Resolves: RHEL-35883
  - Resolves: RHEL-10068
  - Resolves: RHEL-34924


changelog: - initial package
author:
  Sergey Bondarev <s.bondarev@southbridge.ru> - 1.0.southbrid                                                                              ge


author: Nginx Packaging <nginx-packaging@f5.com> - 1.26.1-2.el9.ngx
changelog:
  - Packages were updated to account for a change in CHANGES wording in
    1.26.1. No functional changes.


author: Nginx Packaging <nginx-packaging@f5.com> - 1.27.0-2.el9.ngx
changelog:
  - Packages were updated to account for a change in CHANGES wording in
    1.27.0. No functional changes.


author: Nginx Packaging <nginx-packaging@f5.com> - 1.30.1-1.el9.ngx
changelog:
  - 1.30.1-1
  - Security: Security: when using the "proxy_set_body" directive, an attacker
    might inject data in the proxied request to an HTTP/2 backend
    (CVE-2026-42926). Thanks to Mufeed VH of Winfunc Research.
  - Security: Security: a heap memory buffer overflow might occur in a worker
    process while handling a specially crafted request by
    ngx_http_rewrite_module, potentially resulting in arbitrary code execution
    (CVE-2026-42945). Thanks to Leo Lin.
  - Security: Security: a heap memory buffer overread might occur in a worker
    process while handling a specially crafted response by
    ngx_http_scgi_module or ngx_http_uwsgi_module, allowing an attacker to
    cause a disclosure of worker process memory or segmentation fault in a
    worker process (CVE-2026-42946). Thanks to Leo Lin.
  - Security: Security: a heap memory buffer overread might occur in a worker
    process while handling a specially sent response with decoding from UTF-8
    via the "charset_map" directive, allowing an attacker to cause a limited
    disclosure of worker proccess memory or segmentation fault in a worker
    process (CVE-2026-42934). Thanks to David Carlier.
  - Security: Security: when using HTTP/3, processing of connection migration
    might cause new QUIC streams to receive a new client address before
    validation, allowing an attacker to cause address spoofing
    (CVE-2026-40460). Thanks to Rodrigo Laneth.
  - Security: Security: use-after-free might occur during DNS server response
    processing if the "ssl_ocsp" directive was used, allowing an attacker to
    cause worker process memory corruption or segmentation fault in a worker
    process (CVE-2026-40701). Thanks to Leo Lin.
  - Bugfix: connections with HTTP/2 backends might not be cached when using
    the "proxy_set_body" or "proxy_pass_request_body" directives.
  - Bugfix: proxied HTTP/0.9, SCGI, or uWSGI responses might be transferred
    incorrectly if the first line was not fully read.


author: Nginx Packaging <nginx-packaging@f5.com> - 1.25.3+0.1.0-2.el9.ngx
changelog:
  - Updated grpc to 1.46.7.
  - Updated opentelemetry-cpp to 1.11.0.
  - Updated opentelemetry-proto to 1.0.0.
  - base version updated to 1.25.3-1


author: Zabbix Packager <info@zabbix.com> - 4.4.5-1
changelog:
  - update to 4.4.5
  - added zabbix-js package
  - moved /etc/zabbix/zabbix_agentd.d/userparameter_mysql.conf file to /usr/share/doc/zabbix-agent-<vers>/ (ZBX-14399)
  - using zabbix-agent2.service instead of zabbix-agent.service in agent2 preun
  - setting user for zabbix agent in /etc/sysconfig/zabbix-agent file on rhel <= 6


author: Zabbix Packager <info@zabbix.com> - 4.4.5-2
changelog:
  - added posttrans script that preserves /etc/zabbix/zabbix_agentd.d/userparameter_mysql.conf file
  - added config(noreplace) to /etc/sysconfig/zabbix-agent


author: Zabbix Packager <info@zabbix.com> - 4.4.6-1
changelog:
  - update to 4.4.6
  - using libssh instead of libssh2 on rhel/centos 8
  - fixed font configuration in pre/post scriptlets on rhel-8


author: Zabbix Packager <info@zabbix.com> - 4.4.9-1
changelog:
  - update to 4.4.9
  - changed mysql build dependency on rhel/centos-8 from mysql-devel to mariadb-connector-c-devel (ZBX-17738)
  - added patch that fixes (ZBX-17801)


