cpanel-csf (16.09-1+1.1.cpanel) stable; urgency=low

  * Assure PERL5LIB does not influence /usr/sbin/csf

 -- Todd Rinaldo <todd.rinaldo@webpros.com>  Fri, 27 Feb 2026 00:00:00 -0000

cpanel-csf (16.08-1) stable; urgency=low

  * Fix file conflict on upgrade in /etc/csf/messenger

 -- Andy Baugh <andy.baugh@webpros.com>  Wed, 25 Feb 2026 00:00:00 -0000

cpanel-csf (16.07-1) stable; urgency=low

  * Fix symlink for /etc/csf/messenger (round 2)

 -- Andy Baugh <andy.baugh@webpros.com>  Wed, 25 Feb 2026 00:00:00 -0000

cpanel-csf (16.06-1) stable; urgency=low

  * Ensure /etc/csf/messenger is a symlink on RPM based systems.

 -- Andy Baugh <andy.baugh@webpros.com>  Wed, 25 Feb 2026 00:00:00 -0000

cpanel-csf (16.05-1) stable; urgency=low

  * Fix issue with symlinks in /etc/ for non-config files not
  being overwritten on first time install on debian based systems.
  * Fix truncated CAPTCHA issues due to line length limit in
  Messenger.pm

 -- Andy Baugh <andy.baugh@webpros.com>  Tue, 24 Feb 2026 00:00:00 -0000

cpanel-csf (16.04-1) stable; urgency=low

  * Relocate non-configuration files from /etc/ to /usr/local/csf/ to comply
  with Ubuntu packaging policies while maintaining backward compatibility
  via symlinks

 -- Travis Holloway <travis.holloway@webpros.com>  Tue, 24 Feb 2026 00:00:00 -0000

cpanel-csf (16.03-1) stable; urgency=low

  * Fixed bug in parsing upper-case time-out duration values

 -- Tim Mullin <tim.mullin@webpros.com>  Tue, 24 Feb 2026 00:00:00 -0000

cpanel-csf (16.02-1) stable; urgency=low

  * Update regex to handle log changes to /var/log/secure on A10

 -- Travis Holloway <travis.holloway@webpros.com>  Mon, 23 Feb 2026 00:00:00 -0000

cpanel-csf (16.01-1) stable; urgency=low

  * Update link in x-arf template

 -- Travis Holloway <travis.holloway@webpros.com>  Fri, 20 Feb 2026 00:00:00 -0000

cpanel-csf (16.00-1) stable; urgency=low

  * Initial RPM packaging of CSF for cPanel OBS build system
  * Converted from install.sh to RPM spec file
  * Modernized entire codebase: switched to cPstrict, added function signatures,
  enforced perltidy standards, addressed perlcritic warnings
  * Removed support for non-cPanel platforms (DirectAdmin, Plesk, VestaCP, CWP,
  InterWorx, CyberPanel, Webmin)
  * Added comprehensive test suite with 100+ test files using Test2 framework
  * Fixed security vulnerabilities: XSS in web UI modules, proper HTML encoding
  throughout
  * Fixed numerous uninitialized variable warnings and potential runtime issues
  * Removed AUTO_UPDATES functionality (package-managed updates only)
  * Replaced custom implementations with cPanel libraries where available
  (Cpanel::Encoder::Tiny, Cpanel::JSON::XS)
  * Added CI/CD workflows for automated building and testing
  * Improved sandbox development environment for easier local testing
  * Refactored core modules for better testability and maintainability
  * Added POD documentation to all public module interfaces
  * Fixed IPv6 handling, timeout validation, and iptables guard conditions
  * Updated regex patterns to handle AlmaLinux 10 log format changes
  * Removed deprecated Perl 4 syntax and bareword filehandles throughout
  * Cleaned up code structure: moved modules to lib/, removed duplicate files

 -- Thomas "Andy" Baugh <andy.baugh@webpros.com>  Thu, 05 Feb 2026 00:00:00 -0000

