# changelog

author: Nurzhan Bazhirov <nbazhirov@cloudlinux.com> 6.4.8-1
changelog:
  - DEF-29380: replace None value in get_cp_name return value with 'generic'
  - DEF-28575: use wafd's iplist service for whitelisted ips
  - DEF-28697: use local version identifier instead of hyphen in setup.py
  - DEF-29884: add support for dovecot-2.3.21
  - DEF-29917: validate license against alternative public key when present


author: Nurzhan Bazhirov <nbazhirov@cloudlinux.com> 6.4.9-1
changelog:
  - DEF-29976: add support for Ubuntu 24
  - DEF-28659: remove centos6/cl6 support
  - DEF-24286: do not log to syslog syscall.EPIPE errors on closed connections


author: Nurzhan Bazhirov <nbazhirov@cloudlinux.com> 6.4.10-1
changelog:
  - DEF-32268: wrap logging init in try except block
  - DEF-30929: use /usr/lib/security location instead of /lib/security only on ubuntu24 and debian12


author: Nurzhan Bazhirov <nbazhirov@cloudlinux.com> 6.4.12-1
changelog:
  - DEF-35434: add dovecot-native support for dovecot-2.4
  - DEF-37172: add dovecot-pam support for dovecot-2.4


author: Nurzhan Bazhirov <nbazhirov@cloudlinux.com> 6.4.13-1
changelog:
  - DEF-36381: build imunify360-pam for Debian 13
  - DEF-37452: add dovecot-native support for dovecot-2.4.2
  - DEF-37502: fix domainowner regex in dovecot-pam mode for dovecot versions higher than 2.4


author: Nurzhan Bazhirov <nbazhirov@cloudlinux.com> 6.4.14-1
changelog:
  - DEF-37513: remove symlink if dovecot version is not supported
  - DEF-38098: free post_set settings in native dovecot-2.4


author: Nurzhan Bazhirov <nbazhirov@cloudlinux.com> 6.5.1-1
changelog:
  - DEF-40424: Add Ubuntu 26.04 build support
  - DEF-40669: Add dovecot 2.4.3 support
  - DEF-40167: Fix pure-FTPd restart loop bug


author: Nurzhan Bazhirov <nbazhirov@cloudlinux.com> 6.5.2-1
changelog:
  - DEF-40872: clean up LevelDB and runtime data on purge/uninstall
  - DEF-42570: Bugfixes and security hardening


author: Nurzhan Bazhirov <nbazhirov@cloudlinux.com> 6.5.3-1
changelog:
  - DEF-44592: logrotate - prevent same-day rotation collisions under global dateext
  - DEF-44472: support dovecot 2.4.4


author: Nurzhan Bazhirov <nbazhirov@cloudlinux.com> 8.4.3-1
changelog:
  - DEF-32880: use ef1 hashes when jit_compatible_mode is on
  - DEF-34035: clear outdated events on php-daemon startup


author: Nurzhan Bazhirov <nbazhirov@cloudlinux.com> 8.4.4-1
changelog:
  - DEF-34424: add i360.so to php.ini for alt-phps to enable i360 on cagefs
  - DEF-34708: use all imunify360-agent's sentry tags


author: Siarhei Pol <spol@cloudlinux.com> 8.4.5-1
changelog:
  - DEF-35040: reduce rules compilation in i360-storage-new.py on cloudways
  - DEF-34985: replace int with size_t in arguments of i360_add_func_param_value_add_new
  - DEF-34749: rate limit monStats aggregator errors
  - DEF-34748: rate limit perfStats aggregator errors


author: Nurzhan Bazhirov <nbazhirov@cloudlinux.com> 8.5.0-1
changelog:
  - DEF-35813: Release rules.yaml as part of Proactive Defence package
  - DEF-36251: Do not tamper with OPcache optimization level
  - DEF-35677: Optimize installation/removal of i360 in install-clean.sh
  - DEF-35314: Fix APPLICATION_ID functionality for per-application configuration and whitelist loading


author: Arsenii Pastushenko <apastushenko@cloudlinux.com> 8.5.1-3
changelog:
  - DEF-29731: rely on gw directory instead of custom flag at install time
  - DEF-29731: reenable file gateway Correlation API communication when present
  - DEF-35942: enable i360.so in php.d/i360.ini if 'cagefs_disabled=on' is set in cagefs.ini
  - DEF-36588: Removed some manual rules to replace with php_immunity
  - DEF-35459: Switch EF1 hash processing to Block mode


author: Nurzhan Bazhirov <nbazhirov@cloudlinux.com> 8.5.2-1
changelog:
  - DEF-37610: collect dbgcounters without rule counters when debug stats are activated
  - DEF-37501: use non-privileged config in logger and daemon
  - DEF-37610: fixed STAT_WHOLE_BLAMER and STAT_WHOLE_RINIT counters
  - DEF-38065: enable iter_proc_self_environ call when environ is NULL on all phps
  - DEF-37465: add alt-php85 support


author: Arsenii Pastushenko <apastushenko@cloudlinux.com> 8.5.3-3
changelog:
  - DEF-39595: add /opt/imunify360/lib and /opt/imunify360/proactive to cagefs.mp
  - DEF-39147: handle CSI volumes correctly
  - DEF-37920: jit_compatible_mode is enabled by default if not exist in configs or it equals null
  - DEF-38490: call php_settings -u on new alt-php package installations only
  - DEF-38822: fix dangling pointers in log_result_i360
  - DEF-38394: add support for ea-phps on el10, add ea-php85 support
  - DEF-39894: replace php_settings with php_handler --reread to update php configs on plesk
  - DEF-39894: reorganize scriptlet calls


author: Siarhei Pol <spol@cloudlinux.com> 8.5.4-1
changelog:
  - DEF-39893: reorganize rules/ directory (default/current) and add rule 131316 to current rules
  - DEF-40403: fix native_da.hook failing to install i360.so for custombuild PHP 8.5
  - DEF-38287: remove imunify360-merged.config from CageFS visibility


author: Siarhei Pol <spol@cloudlinux.com> 8.5.5-4
changelog:
  - DEF-40874: clean up signatures and rules on package purge
  - DEF-39897: build imunify360-php-i360 for Ubuntu 26.04
  - DEF-39514: remove jit_compatible_mode config migration from installation scripts
  - DEF-38676: add support zlib in 131315 and 131316 rules


author: Siarhei Pol <spol@cloudlinux.com> 8.6.0-1
changelog:
  - DEF-42478: restart PHP-FPM in Plesk postinst to clear stale lib mmaps
  - DEF-43918: Cap Sentry event spam from RocksDB ENOMEM in events.db, harden against disk corruption failures
  - DEF-44070: tolerate monit race during Cloudways FPM restart
  - DEF-43230: various i360.so optimizations on hotpath
  - DEF-42416: server-side peer auth for proactive socket (exe whitelist + i360.so mapping)
  - DEF-42564: various security hardening and bug fixes
  - DEF-36447: Use ZendObserver API for EF hashes generation


