SECURITY: [Util] pman_run() leaks descriptors to child processes. PHP provides no native way to flag a FD as FD_CLOEXEC, which flags a descriptor to close on exec() syscall. Use FFI to mark descriptors as close-on-exec in sudo invocation. FIXED: [Composer] composer/composer #9986 package naming. [Let's Encrypt] DNS solver method attempted for server certificate. [Setup] hostname check incorrectly reports to use SSL for addon domains. CHANGED: [cpcmd] -l/--list-commands accepts optional filter spec as with misc:list-commands(). [ssh] root pubkey-only authentication controllable via sshd_root_pubkey_only setting. [Util] failed proc_open() on resource limit reports 254 exit code. [Web Apps] send no-cache headers during Update Assurance checks.