# changelog

author: Sergey Fokin <sfokin@cloudlinux.com> - 1:3.0.15-1.cloudlinux
changelog:
  - EA-13435: Update ea-modsec30 from v3.0.14 to v3.0.15
  - EA-13435: Switch pcre-devel to pcre2-devel; ModSecurity 3.0.15 requires PCRE2


author: Cory McIntire <cory.mcintire@webpros.com> - 0.0.9beta1-16
changelog:
  - EA-13435: Fix libxml2.so.16 runtime load failure introduced by ea-modsec30 3.0.15 (new SONAME)
  - EA-13435: Use ea-libxml2 on el7/el8 (BuildRequires, Requires, conditional LDFLAGS)
  - EA-13435: Add pcre2-devel and lua-devel BuildRequires for modsec 3.0.15 transitive deps
  - EA-13435: Use patchelf in install to embed ea-libxml2 path in mod_security3.so RPATH (APR libtool ignores LDFLAGS at link time)
  - EA-13435: Add undefine brp_remove_rpath to preserve embedded RPATH


author: Sergey Fokin <sfokin@cloudlinux.com> - 1:0.0.9beta1-16.cloudlinux
changelog:
  - EA-13435: Merge with cpanel 0.0.9beta1-16
  - EA-13435: Use ea-libxml2 on el7/el8, pcre2-devel, lua-devel for modsec 3.0.15
  - EA-13435: Add undefine brp_remove_rpath to preserve embedded RPATH
  - EA-13435: Exclude rhel >= 10 (ea-modsec30 not available)


author: Arseniy Zolotarev <azolotarev@cloudlinux.com> - 1:7.2.34-12.cloudlinux.3
changelog:
  - EA4D-746: Update php-fpm lve patch to extract doc_root from php_admin_values
    for CageFS per-domain isolation


author: Levon Matshkalyan <lmatshkalyan@cloudlinux.com> - 7.2.34-12.cloudlinux.6
changelog:
  - EA4D-789: Security fixes
  - CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)


author: Sergey Fokin <sfokin@cloudlinux.com> - 7.2.34-12.cloudlinux.9
changelog:
  - EA4D-797: revert to use system libxml2 lib for all platforms
  - EA4D-811: remove libphp7.so from _root_httpd_moddir to fix file conflicts


author: Levon Matshkalyan <lmatshkalyan@cloudlinux.com> - 1:7.2.34-12.cloudlinux.11
changelog:
  - ALTPHP-2422: Disable OPcache SCCP pass (bit 0x80) in default optimization_level
    to avoid runtime infinite loop caused by SCCP+DFA miscompilation
    (e.g. WordPress wp_replace_in_html_tags on CloudLinux 10 + cPanel)


author: Levon Matshkalyan <lmatshkalyan@cloudlinux.com> - 1:7.3.33-15.cloudlinux.6
changelog:
  - EA4D-789: Security fixes
  - CVE-2025-14178: fix integer overflow in array_merge (ext/standard/array.c)
  - CVE-2025-1736: fix for PHP SOAP extension


