+pmg-api (8.1.0) bookworm; urgency=medium
+
+ * fix #5189: cluster: avoid sync errors for statistics and quarantine due to
+ existing data on fresh nodes, which can happen, for example, when
+ restoring a backup.
+
+ * pmgdb dump:
+ - print the type of an object to better differentiate, e.g., an domain
+ entry from a regex entry with the same value.
+ - better highlight active rules over inactive ones
+ - drop "found" prefixes for each rule and group as that conveyed little
+ information, still clutters the output.
+ - add `active` CLI options to control if only active rules should be
+ printed
+
+ * quarantine: sort the per-user want- and block-lists entries when saving
+ them to the DB
+
+ * postfix template: update to current default setting (name) for the SMTP
+ Smuggling vulnerability in postfix version 3.7.10 and newer.
+
+ * api: tracking center: drop timezone offset as new log-tracker does time
+ calculations directly in UTC
+
+ * fix #2971: DKIM: Add a setting to specify whether to use the from-header
+ for signing instead of the current default envelope-from-address.
+
+ * api: node status: return structured info about current kernel
+
+ * api: node status: return info about current boot mode
+
+ -- Proxmox Support Team <support@proxmox.com> Mon, 26 Feb 2024 20:26:57 +0100
+
+pmg-api (8.0.12) bookworm; urgency=medium
+
+ * fix #4818: utils: don't require minimum length for username
+
+ * fix #4811: rule db: test regex validity on submit
+
+ * system report: add content of /etc/pmg/dkim/domains
+
+ * rule cache: reorganize how we gather marks and spaminfo and unnecessary
+ copying of marks
+
+ * smtp-filter: log pre-fork worker settings on start-up
+
+ * config: rework heurisitic for calculating the maximzm smtp-filter process
+ workers to better reflect modern setups w.r.t. total system memory
+
+ * add objectgroup and rule attributes for 'and' and 'invert' logical
+ operators
+
+ * rule cache: implement 'and' and 'invert' for the 'when', 'from', 'to' and
+ what objects
+
+ * pmg-smtp-filter: rename proxtest.com to pmg.example in demo code paths to
+ avoid potential name squatting
+
+ * database: use foreign keys for rule and object group attributes
+
+ * fix #4392: keep empty user blocklist and wantlist in the database to
+ ensure they get synced correctly to other nodes
+
+ * templates: postfix: set same timeouts for before and after-queue (10
+ minutes)
+
+ * config: postfix: make smtp-filter-timeout configurable
+
+ * fix #2606: ruledb disclaimer: add ability to set position to start or end
+
+ * fix #2430: ruledb disclaimer: make adding the separator configurable
+
+ -- Proxmox Support Team <support@proxmox.com> Thu, 22 Feb 2024 17:26:12 +0100
+
+pmg-api (8.0.11) bookworm; urgency=medium
+
+ * fix invalid whitespaces in master.cf template introduced in 8.0.10
+
+ -- Proxmox Support Team <support@proxmox.com> Tue, 02 Jan 2024 12:53:36 +0100
+
+pmg-api (8.0.10) bookworm; urgency=medium
+
+ * address smtp-smuggling vulnerability (CVE-2023-51764) with the fix
+ recommended by postfix upstream by disallowing bare linefeeds, except from
+ internal sources, requires postfix version 3.7.9-0+deb12u1 to take effect
+
+ -- Proxmox Support Team <support@proxmox.com> Tue, 02 Jan 2024 11:51:22 +0100
+
+pmg-api (8.0.9) bookworm; urgency=medium
+
+ * implement "SMTP-smuggling" mitigation for external port - see
+ https://www.postfix.org/smtp-smuggling.html for details
+
+ -- Proxmox Support Team <support@proxmox.com> Fri, 22 Dec 2023 11:16:42 +0100
+
+pmg-api (8.0.8) bookworm; urgency=medium
+
+ * fix #4944: api/pbs remote: Add a port config
+
+ * user quarantine: use raw pmail for ticket assembly
+
+ * reduce the logging level of certain messages
+
+ * apt: use `apt changelog` for changelog fetching
+
+ * api/cli: acme: add eab parameters
+
+ * api: acme: deprecate tos endpoint in favor of new meta endpoint
+ * api: quarantine: include descriptions for KAM rules in the spaminfo
+
+ * pmg7to8: Add check for dkms modules
+
+ * pmg7to8: check for proper grub meta-package for bootmode
+
+ -- Proxmox Support Team <support@proxmox.com> Wed, 20 Dec 2023 10:58:29 +0100
+
+pmg-api (8.0.7) bookworm; urgency=medium
+
+ * handle pve-kernel -> proxmox-kernel rename
+
+ -- Proxmox Support Team <support@proxmox.com> Tue, 01 Aug 2023 11:53:07 +0200
+
+pmg-api (8.0.6) bookworm; urgency=medium
+
+ * cluster: fingerprint parsing: adapt to changed openssl output
+
+ -- Proxmox Support Team <support@proxmox.com> Tue, 25 Jul 2023 11:32:42 +0200
+
+pmg-api (8.0.5) bookworm; urgency=medium
+
+ * cluster config: restrict slurp scope to avoid issue parsing network
+ interfaces
+
+ * pmg7to8: notify about unmodified templates
+
+ * system report: skip irrelevant files in /etc/pmg/templates
+
+ -- Proxmox Support Team <support@proxmox.com> Tue, 11 Jul 2023 17:53:49 +0200
+
+pmg-api (8.0.4) bookworm; urgency=medium
+
+ * fix #4815: pmgsh: fix calling the api paths directly
+
+ * statistics: fix syntax of SQL query for virus info counter update
+
+ -- Proxmox Support Team <support@proxmox.com> Mon, 03 Jul 2023 12:42:23 +0200
+
+pmg-api (8.0.3) bookworm; urgency=medium
+
+ * pmgpolicy, pmg-smtp-filter: set sensible PATH to ensure that standard
+ system binaries can be executed even if just their base name is used.
+
+ -- Proxmox Support Team <support@proxmox.com> Wed, 28 Jun 2023 17:42:32 +0200
+
+pmg-api (8.0.2) bookworm; urgency=medium
+
+ * make section match more precise when hard-coding 'use_bayes' & 'use_awl'
+ properties
+
+ * tell the systemd debhelper to not stop the no-start services on upgrade,
+ avoiding noisy warnings for those with an associated timer and also that
+ any currently running operation of those services gets aborted
+
+ * enable TFA lockout, for the relatively low-entropy TOTP type after 8
+ consecutive tries, for all other types after 1000 consecutive tries, as
+ they have much higher entropy
+
+ * include tfa lock status in user list and add user tfa-unlock endpoint
+
+ -- Proxmox Support Team <support@proxmox.com> Wed, 28 Jun 2023 11:12:57 +0200
+
+pmg-api (8.0.1) bookworm; urgency=medium
+
+ * include version metadata again in statically generated pmgcfg module again
+
+ -- Proxmox Support Team <support@proxmox.com> Wed, 28 Jun 2023 08:04:50 +0200
+
+pmg-api (8.0.0) bookworm; urgency=medium
+
+ * d/postinst: remove re-generation of unique machine-ID for old ISOs
+
+ * cluster: adapt invocation of rsync for the version in Debian 12 Bookworm
+
+ * postgresql compat: cast results explicitly to integer to cope with
+ PostgreSQL 15 changes where UNIX epochs are returned as float
+
+ * auth: set PAM context to 'proxmox-mailgateway-auth' and set the rhost to
+ the IP address the users connects with, allowing one to limit PAM login to
+ certain networks.
+
+ -- Proxmox Support Team <support@proxmox.com> Tue, 27 Jun 2023 18:20:30 +0200
+
+pmg-api (8.0.0~1) bookworm; urgency=medium
+
+ * re-build for Proxmox Mail Gateway 8 based on Debian 12 Bookworm
+
+ * update postgresql dependency to 15
+
+ * postgresql.conf template: drop 'stats_temp_directory' config-setting as it
+ was deprecated by upstream PostgreSQL 14 and removed with 15.
+
+ * explicitly depend on rsyslog for the tracking center, as rsyslog doesn't
+ gets installed by default in Debian 12 Bookworm anymore
+
+ * config: disable awl and bayes by default
+
+ * config: disable advanced statistic filters by default
+
+ * debian/postinst: hard code old default values for 'advfilter',
+ 'use_bayes' & 'use_awl' during upgrade to 8.0.0
+
+ * grant 'root' and 'www-data' users respective permissions on public schema
+ for newly created databases
+
+ -- Proxmox Support Team <support@proxmox.com> Mon, 26 Jun 2023 17:43:06 +0200
+