# changelog

author: Yi Lin <nilusyi@tencent.com> - 20240811-1
changelog:
  - bump to 20240811, fix CVE-2023-31315
  - qcom: update path for video firmware for vpu-1/2/3.0
  - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642
  - rtw89: 8852c: add fw format-1 v0.27.97.0
  - rtw89: 8852bt: add firmware 0.29.91.0
  - amdgpu: A lot of firmware updates
  - mediatek: Update mt8195 SOF firmware
  - xe: First GuC release v70.29.2 for BMG
  - xe: Add GuC v70.29.2 for LNL
  - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL
  - i915: Update MTL DMC v2.22, MTL GSC to v102.0.10.1878
  - xe: Add BMG HuC 8.2.10, GSC 104.0.0.1161 for LNL, LNL HuC 9.4.13
  - i915: update DG2 HuC to v7.10.16
  - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641
  - update firmware for MT7921/MT7922 WiFi device
  - update firmware for mediatek bluetooth chip (MT7921/MT7922)
  - iwlwifi: add gl FW for core89-58 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release
  - mediatek: Update mt8195 SOF firmware and sof-tplg
  - ASoC: tas2781: fix the license issue for tas781 firmware
  - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008
  - i915: Update Xe2LPD DMC to v2.21
  - qcom: move signed x1e80100 signed firmware to the SoC subdir
  - qcom: add video firmware file for vpu-3.0
  - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics
  - qcom: add gpu firmwares for x1e80100 chipset
  - add firmware for qat_402xx devices
  - Update AMD cpu microcode
  - intel: avs: Add numerous sound topology files
  - Add a copy of Apache-2.0
  - intel: avs: Update AudioDSP base firmware for APL-based platforms
  - Add ISH firmware file for Intel Lunar Lake platform
  - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics
  - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41
  - amdgpu: Update ISP FW for isp v4.1.1
  - mediatek: Update MT8173 VPU firmware to v1.2.0
  - qcom: Add AIC100 firmware files
  - amlogic: Update bluetooth firmware binary
  - Various Intel Bluetooth firmware updates
  - rtl_bt: Update RTL8822C BT UART/USB firmware
  - amdgpu: update DMCUB to v0.0.222.0 for DCN314
  - iwlwifi: add ty/So/Ma firmwares for core88-87 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release
  - add new cc33xx firmware for TI cc33xx WiFi chips
  - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops


author: Yi Lin <nilusyi@tencent.com> - 20240909-1
changelog:
  - bump to 20240909, fix CVE-2023-20584/31356/31346
  - i915: Update MTL DMC v2.23
  - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops2
  - amdgpu: Revert sienna cichlid dmcub firmware update
  - iwlwifi: add Bz FW for core89-58 release
  - rtl_nic: add firmware rtl8126a-3
  - linux-firmware: update firmware for MT7921 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351
  - qcom: vpu: restore compatibility with kernels before 6.6
  - amdgpu: DMCUB updates forvarious AMDGPU ASICs
  - rtw89: 8922a: add fw format-1 v0.35.41.0	Chin
  - linux-firmware: update firmware for MT7925 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7925)
  - rtl_bt: Add firmware and config files for RTL8922A
  - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part
  - rtl_bt: de-dupe identical config.bin files
  - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin
  - linux-firmware: Update AMD SEV firmware
  - linux-firmware: update firmware for MT7996
  - Revert "i915: Update MTL DMC v2.22"
  - ath12k: WCN7850 hw2.0: update board-2.bin
  - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ...
  - ath11k: WCN6855 hw2.0: update board-2.bin
  - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE...
  - ath11k: QCA2066 hw2.1: add board-2.bin
  - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1
  - qcom: vpu: add video firmware for sa8775p
  - amdgpu: DMCUB updates for various AMDGPU ASICs


author: cunshunxia <cunshunxia@tencent.com> - 1.4.0-4
changelog:
  - add scriptlets for rpm-ostree and user-nsswitch.
  - change default profile to minimal with specified password-auth


author: Xiaojie Chen <jackxjchen@tencent.com> - 5.2-3
changelog:
  - fix crash with unset arrays in arithmetic contexts
  - fix crash in readline when started with an invalid locale specification


author: Doris Chao <doriscchao@tencent.com> - 5.2.15-3
changelog:
  - [Type] other
  - [DESC] Define NON_INTERACTIVE_LOGIN_SHELLS config to run the
  - login shell startup files if argv[0][0] == '-'


author: Xin Cheng <denisecheng@tencent.com> - 9.18.18-4
changelog:
  - fix CVE-2023-4408: Parsing large DNS messages may cause excessive CPU load
  - fix CVE-2023-5517: Querying RFC 1918 reverse zones may cause an assertion failure when "nxdomain-redirect" is enabled
  - fix CVE-2023-5679: Enabling both DNS64 and serve-stale may cause an assertion failure during recursive resolution
  - fix CVE-2023-6516: Specific recursive query patterns may lead to an out-of-memory condition
  - fix CVE-2023-50387: KeyTrap - Extreme CPU consumption in DNSSEC validator
  - fix CVE-2023-50868: Preparing an NSEC3 closest encloser proof can exhaust CPU resources


author: Upgrade Robot <upbot@opencloudos.tech> - 9.18.21-1
changelog:
  - [Type] security
  - [DESC] Upgrade to version 9.18.21 and fix CVE-2024-0760,CVE-2024-1737,CVE-2024-1975,CVE-2024-4076


author: Jianping Liu <frankjpliu@tencent.com> - 6.6.33-7
changelog:
  - emm: update to v0.1.5
  - arm64: add unprivileged instruction support
  - arm64: fix the error for instruction :b9400000
  - arm64: Add new code for unaligned pcie access
  - arm64: remove the hardcode about PCI address checking
  - arm64: Add alignment faults handler for Advanced SIMD load/store single
  - arm64: Add a fixup handler for alignment faults in aarch64 code
  - arm64: update Work around Ampere Altra erratum #82288 PCIE_65
  - Merge Linux 6.6.33
  - [next-6.6] Intel: Backport Granite Rapids RAPL PMU support to kernel 6.6 Merge pull request !186
  - powercap: intel_rapl_tpmi: Enable PMU support
  - powercap: intel_rapl: Introduce APIs for PMU support
  - powercap: intel_rapl: Sort header files
  - [next-6.6] LoongArch:  Fix some irqchip/loongson-eiointc issues and kdump function for loongarch. Merge pull request !182
  - anolis: LoongArch: fix efi map page table error
  - Revert "LoongArch: kdump: Add memory reservation for old kernel"
  - Revert "LoongArch: Fix kdump failure on v40 interface specification"
  - Revert "LoongArch: kdump: Add high memory reservation"
  - irqchip/loongson-eiointc: fix gsi register error
  - irqchip: LoongArch: Fix secondary bridge routing errors
  - PCI/MSI: LoongArch: Limit min pci msi-x/msi vector number
  - [next-6.6]Intel: Backport QuickAssist Technology(QAT) live migration for in-tree driver Merge pull request !184
  - x86: configs: Enable QAT_VFIO_PCI as kernel module
  - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak
  - crypto: qat - specify firmware files for 402xx
  - crypto: qat - validate slices count returned by FW
  - crypto: qat - improve error logging to be consistent across features
  - crypto: qat - improve error message in adf_get_arbiter_mapping()
  - crypto: qat - implement dh fallback for primes > 4K
  - crypto: qat - Fix spelling mistake "Invalide" -> "Invalid"
  - crypto: qat - Avoid -Wflex-array-member-not-at-end warnings
  - vfio/qat: Add vfio_pci driver for Intel QAT SR-IOV VF devices
  - crypto: qat - implement interface for live migration
  - crypto: qat - add interface for live migration
  - crypto: qat - add bank save and restore flows
  - crypto: qat - expand CSR operations for QAT GEN4 devices
  - crypto: qat - rename get_sla_arr_of_type()
  - crypto: qat - relocate CSR access code
  - crypto: qat - move PFVF compat checker to a function
  - crypto: qat - relocate and rename 4xxx PF2VM definitions
  - crypto: qat - adf_get_etr_base() helper
  - iommu/vt-d: Set variable intel_dirty_ops to static
  - iommufd/selftest: Fix _test_mock_dirty_bitmaps()
  - iommufd/selftest: Fix page-size check in iommufd_test_dirty()
  - iommu/vt-d: Enhance capability check for nested parent domain allocation
  - iommufd/selftest: Test IOMMU_HWPT_GET_DIRTY_BITMAP_NO_CLEAR flag
  - iommufd/selftest: Test out_capabilities in IOMMU_GET_HW_INFO
  - iommufd/selftest: Test IOMMU_HWPT_GET_DIRTY_BITMAP
  - iommufd/selftest: Test IOMMU_HWPT_SET_DIRTY_TRACKING
  - iommufd/selftest: Test IOMMU_HWPT_ALLOC_DIRTY_TRACKING
  - iommufd/selftest: Expand mock_domain with dev_flags
  - iommu/vt-d: Access/Dirty bit support for SS domains
  - iommu/amd: Access/Dirty bit support in IOPTEs
  - iommu/amd: Add domain_alloc_user based domain allocation
  - iommufd: Add a flag to skip clearing of IOPTE dirty
  - iommufd: Add capabilities to IOMMU_GET_HW_INFO
  - iommufd: Add IOMMU_HWPT_GET_DIRTY_BITMAP
  - iommufd: Add IOMMU_HWPT_SET_DIRTY_TRACKING
  - iommufd: Add a flag to enforce dirty tracking on attach
  - iommufd: Correct IOMMU_HWPT_ALLOC_NEST_PARENT description
  - iommu: Add iommu_domain ops for dirty tracking
  - iommufd/iova_bitmap: Move symbols to IOMMUFD namespace
  - vfio: Move iova_bitmap into iommufd
  - vfio/iova_bitmap: Export more API symbols
  - iommufd/selftest: Rework TEST_LENGTH to test min_size explicitly
  - iommu/vt-d: Add domain_alloc_user op
  - iommufd/selftest: Add domain_alloc_user() support in iommu mock
  - iommufd/selftest: Iterate idev_ids in mock_domain's alloc_hwpt test
  - iommufd: Support allocating nested parent domain
  - iommufd: Flow user flags for domain allocation to domain_alloc_user()
  - iommufd: Use the domain_alloc_user() op for domain allocation
  - iommu: Add new iommu op to create domains owned by userspace
  - !183 [next-6.6] Intel IAA Compression Accelerator Crypto Driver (iaa_crypto) Merge pull request !183 from Xiaochen Shen/intel-iaa-crypto-driver-next-6.6
  - x86/config: Add kernel config for Intel IAA crypto driver
  - dmaengine: idxd: Avoid unnecessary destruction of file_ida
  - dmaengine: idxd: Check for driver name match before sva user feature
  - crypto: iaa - Use cpumask_weight() when rebalancing
  - crypto: iaa - Fix some errors in IAA documentation
  - crypto: iaa - Change iaa statistics to atomic64_t
  - crypto: iaa - Add global_stats file and remove individual stat files
  - crypto: iaa - Remove comp/decomp delay statistics
  - crypto: iaa - fix decomp_bytes_in stats
  - crypto: iaa - Fix nr_cpus < nr_iaa case
  - crypto: iaa - fix the missing CRYPTO_ALG_ASYNC in cra_flags
  - crypto: iaa - Fix comp/decomp delay statistics
  - crypto: iaa - Fix async_disable descriptor leak
  - crypto: iaa - Remove unnecessary debugfs_create_dir() error check in iaa_crypto_debugfs_init()
  - crypto: iaa - Remove header table code
  - dmaengine: idxd: constify the struct device_type usage
  - dmaengine: idxd: make dsa_bus_type const
  - dmaengine: idxd: Remove usage of the deprecated ida_simple_xx() API
  - crypto: iaa - Account for cpu-less numa nodes
  - crypto: iaa - remove unneeded semicolon
  - crypto: iaa - Remove unneeded newline in update_max_adecomp_delay_ns()
  - crypto: iaa - Change desc->priv to 0
  - dmaengine: idxd: Add support for device/wq defaults
  - crypto: iaa - Add IAA Compression Accelerator stats
  - crypto: iaa - Add irq support for the crypto async interface
  - crypto: iaa - Add support for deflate-iaa compression algorithm
  - crypto: iaa - Add compression mode management along with fixed mode
  - crypto: iaa - Add per-cpu workqueue table with rebalancing
  - crypto: iaa - Add Intel IAA Compression Accelerator crypto driver core
  - crypto: iaa - Add IAA Compression Accelerator Documentation
  - dmaengine: idxd: add callback support for iaa crypto
  - dmaengine: idxd: Add wq private data accessors
  - dmaengine: idxd: Export wq resource management functions
  - dmaengine: idxd: Export descriptor management functions
  - dmaengine: idxd: Rename drv_enable/disable_wq to idxd_drv_enable/disable_wq, and export
  - dmaengine: idxd: add external module driver support for dsa_bus_type
  - dmaengine: idxd: Fix incorrect descriptions for GRPCFG register
  - dmaengine: idxd: add wq driver name support for accel-config user tool
  - dmaengine: idxd: rate limit printk in misc interrupt thread
  - drm/phytium: Replace default efi fb0 with dc fb
  - [next-6.6] phytium-Bugfix-Xorg-startup-for-ps23xx Merge pull request !188
  - drm/ast: Fixed display error for ps23xx
  - drm/phytium: Bugfix Xorg startup for ps23xx
  - anolis: LoongArch: fix efi map page table error
  - Revert "LoongArch: kdump: Add memory reservation for old kernel"
  - Revert "LoongArch: Fix kdump failure on v40 interface specification"
  - Revert "LoongArch: kdump: Add high memory reservation"
  - LoongArch: fix HT RX INT TRANS register not initialized
  - irqchip/loongson-eiointc: fix gsi register error
  - irqchip: LoongArch: Fix secondary bridge routing errors
  - PCI/MSI: LoongArch: Limit min pci msi-x/msi vector number
  - cgroup: allow cgroup to split direct io and buffered io into different blkio cgroup
  - io/tqos: add sysctl_buffer_io_limit switch for buffer io limit.
  - io/tqos: merge buffer io limit series patch from brookxu, and rework some function.
  - Merge branch 'caelli/cgroupfs' into 'master' (merge request !102)
  - cgroupfs: optimize cpu usage
  - sli: open CONFIG_CGROUP_SLI
  - sli: backport sli function from tk3
  - mbuf: backport mbuf functions for memcontrol/cpuacct from tk3
  - btrfs: make sure that WRITTEN is set on all metadata blocks
  - nvme:driver core probes in serial
  - config: enable ce instruction set optimization for shangmi support
  - config: enable some configs for shangmi support
  - kconfig: add more module for arm64
  - Merge ock repo's next branch into tk5 repo's master branch
  - [next-6.6]Hisi:backport some bugfix from upstream about PCIe_PMU and hisi_hns3 perf Merge pull request !179
  - drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
  - drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
  - docs: perf: Update usage for target filter of hisi-pcie-pmu
  - drivers/perf: hisi_pcie: Merge find_related_event() and get_event_idx()
  - drivers/perf: hisi_pcie: Relax the check on related events
  - drivers/perf: hisi_pcie: Check the target filter properly
  - drivers/perf: hisi_pcie: Add more events for counting TLP bandwidth
  - drivers/perf: hisi_pcie: Fix incorrect counting under metric mode
  - drivers/perf: hisi_pcie: Introduce hisi_pcie_pmu_get_event_ctrl_val()
  - drivers/perf: hisi_pcie: Rename hisi_pcie_pmu_{config,clear}_filter()
  - !176 [next-6.6] net: stmmac: add 7A2000 chipset gnet support Merge pull request !176 from Ming Wang/master
  - net: stmmac: dwmac-loongson: Add loongson module author
  - net: stmmac: dwmac-loongson: Move disable_force flag to _gnet_date
  - net: stmmac: dwmac-loongson: Add Loongson GNET support
  - net: stmmac: dwmac-loongson: Fixed failure to set network speed to 1000.
  - net: stmmac: dwmac-loongson: Add loongson_dwmac_config_legacy
  - net: stmmac: dwmac-loongson: Add full PCI support
  - net: stmmac: dwmac-loongson: Add phy_interface for Loongson GMAC
  - net: stmmac: dwmac-loongson: Add phy mask for Loongson GMAC
  - net: stmmac: dwmac-loongson: Add ref and ptp clocks for Loongson
  - net: stmmac: dwmac-loongson: Split up the platform data initialization
  - net: stmmac: dwmac-loongson: Use PCI_DEVICE_DATA() macro for device identification
  - net: stmmac: dwmac-loongson: Drop useless platform data
  - net: stmmac: Export dwmac1000_dma_ops
  - net: stmmac: Add multi-channel support
  - net: stmmac: Move the atds flag to the stmmac_dma_cfg structure
  - net: stmmac: Move MAC caps init to phylink MAC caps getter
  - net: stmmac: Rename phylink_get_caps() callback to update_caps()
  - net: phylink: provide mac_get_caps() method
  - Merge branch 'dev/mengensun/netlat_v2' into 'master' (merge request !100)
  - netlat: fix warnning when del netns
  - netlat: not use ack_seq to keeping timestamp
  - netlat: add more queue latency check point
  - net/netlat: add a tcp latency watcher
  - netns/mbuf: add a per net namespace ring buffer
  - tqos: open CONFIG_RQM
  - tqos/mbuf: backport mbuf infrastructure from tk3
  - dist: using "tk_private=1" to judge private release
  - Merge branch 'frankjpliu/master' into 'master' (merge request !107)
  - Merge linux 6.6.32
  - Linux 6.6.32
  - block: add a partscan sysfs attribute for disks
  - block: add a disk_has_partscan helper
  - Docs/admin-guide/mm/damon/usage: fix wrong example of DAMOS filter matching sysfs file
  - docs: kernel_include.py: Cope with docutils 0.21
  - admin-guide/hw-vuln/core-scheduling: fix return type of PR_SCHED_CORE_GET
  - KEYS: trusted: Do not use WARN when encode fails
  - remoteproc: mediatek: Make sure IPI buffer fits in L2TCM
  - serial: kgdboc: Fix NMI-safety problems from keyboard reset code
  - usb: typec: tipd: fix event checking for tps6598x
  - usb: typec: ucsi: displayport: Fix potential deadlock
  - net: usb: ax88179_178a: fix link status when link is set to down/up
  - usb: dwc3: Wait unconditionally after issuing EndXfer command
  - binder: fix max_thread type inconsistency
  - drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
  - erofs: reliably distinguish block based and fscache mode
  - erofs: get rid of erofs_fs_context
  - bpf: Add missing BPF_LINK_TYPE invocations
  - kselftest: Add a ksft_perror() helper
  - mmc: core: Add HS400 tuning in HS400es initialization
  - KEYS: trusted: Fix memory leak in tpm2_key_encode()
  - Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
  - Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect()
  - ice: remove unnecessary duplicate checks for VF VSI ID
  - ice: pass VSI pointer into ice_vc_isvalid_q_id
  - net: ks8851: Fix another TX stall caused by wrong ISR flag handling
  - drm/amd/display: Fix division by zero in setup_dsc_config
  - smb: smb2pdu.h: Avoid -Wflex-array-member-not-at-end warnings
  - ksmbd: add continuous availability share parameter
  - cifs: Add tracing for the cifs_tcon struct refcounting
  - smb: client: instantiate when creating SFU files
  - smb: client: fix NULL ptr deref in cifs_mark_open_handles_for_deleted_file()
  - smb3: add trace event for mknod
  - smb311: additional compression flag defined in updated protocol spec
  - smb311: correct incorrect offset field in compression header
  - cifs: Move some extern decls from .c files to .h
  - ksmbd: fix potencial out-of-bounds when buffer offset is invalid
  - ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
  - ksmbd: Fix spelling mistake "connction" -> "connection"
  - ksmbd: fix possible null-deref in smb_lazy_parent_lease_break_close
  - cifs: remove redundant variable assignment
  - cifs: fixes for get_inode_info
  - cifs: defer close file handles having RH lease
  - ksmbd: add support for durable handles v1/v2
  - ksmbd: mark SMB2_SESSION_EXPIRED to session when destroying previous session
  - smb: common: simplify compression headers
  - smb: common: fix fields sizes in compression_pattern_payload_v1
  - smb: client: negotiate compression algorithms
  - smb3: add dynamic trace point for ioctls
  - smb: client: return reparse type in /proc/mounts
  - smb: client: set correct d_type for reparse DFS/DFSR and mount point
  - smb: client: parse uid, gid, mode and dev from WSL reparse points
  - smb: client: introduce SMB2_OP_QUERY_WSL_EA
  - smb: client: Fix a NULL vs IS_ERR() check in wsl_set_xattrs()
  - smb: client: add support for WSL reparse points
  - smb: client: reduce number of parameters in smb2_compound_op()
  - smb: client: fix potential broken compound request
  - smb: client: move most of reparse point handling code to common file
  - smb: client: introduce reparse mount option
  - smb: client: retry compound request without reusing lease
  - smb: client: do not defer close open handles to deleted files
  - smb: client: reuse file lease key in compound operations
  - smb: client: get rid of smb311_posix_query_path_info()
  - smb: client: parse owner/group when creating reparse points
  - smb3: update allocation size more accurately on write completion
  - smb: client: handle path separator of created SMB symlinks
  - cifs: update the same create_guid on replay
  - ksmbd: Add kernel-doc for ksmbd_extract_sharename() function
  - cifs: set replay flag for retries of write command
  - cifs: commands that are retried should have replay flag set
  - smb: client: delete "true", "false" defines
  - smb: Fix some kernel-doc comments
  - cifs: new mount option called retrans
  - smb: client: don't clobber ->i_rdev from cached reparse points
  - cifs: new nt status codes from MS-SMB2
  - cifs: pick channel for tcon and tdis
  - cifs: minor comment cleanup
  - cifs: remove redundant variable tcon_exist
  - ksmbd: vfs: fix all kernel-doc warnings
  - ksmbd: auth: fix most kernel-doc warnings
  - cifs: remove unneeded return statement
  - cifs: get rid of dup length check in parse_reparse_point()
  - cifs: Pass unbyteswapped eof value into SMB2_set_eof()
  - smb3: Improve exception handling in allocate_mr_list()
  - cifs: fix in logging in cifs_chan_update_iface
  - smb: client: handle special files and symlinks in SMB3 POSIX
  - smb: client: cleanup smb2_query_reparse_point()
  - smb: client: allow creating symlinks via reparse points
  - smb: client: optimise reparse point querying
  - smb: client: allow creating special files via reparse points
  - smb: client: extend smb2_compound_op() to accept more commands
  - smb: client: Fix minor whitespace errors and warnings
  - smb: client: introduce cifs_sfu_make_node()
  - cifs: fix use after free for iface while disabling secondary channels
  - Missing field not being returned in ioctl CIFS_IOC_GET_MNT_INFO
  - smb3: minor cleanup of session handling code
  - smb3: more minor cleanups for session handling routines
  - smb3: minor RDMA cleanup
  - cifs: print server capabilities in DebugData
  - smb: use crypto_shash_digest() in symlink_hash()
  - Add definition for new smb3.1.1 command type
  - SMB3: clarify some of the unused CreateOption flags
  - cifs: Add client version details to NTLM authenticate message
  - dist: remove usb-storage.ko and nouveau.ko when install private release
  - dist: revert "add a modules-private rpm subpackage"
  - Kconfig: add more modules
  - Merge branch 'kasong/tk5/dist-optimization' into 'master' (merge request !106)
  - dist: don't parse kernel version unless needed
  - dist: optimize version parsing
  - dist: stop using --show-toplevel for speed up


author: Jianping Liu <frankjpliu@tencent.com> - 6.6.34-9
changelog:
  - dist: do not run scripts fail in kernel.template.spec
  - drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()


author: Jianping Liu <frankjpliu@tencent.com> - 6.6.43-10
changelog:
  - !199 [next-6.6] LoongArch: Add writecombine support for DMW-based ioremap and fix kexec boot faild issue.
  - pci-driver: Do not disable PCIE ports and bridge on kexec reboot
  - LoongArch: enable CONFIG_CRYPTO_XTS by default
  - LoongArch: Add writecombine support for DMW-based ioremap()
  - Merge linux 6.6.43
  - Merge linux 6.6.42
  - !197 [next-6.6] AMD: Backport Turin patches from upstream Merge pull request !197 from kile2009/next-turin-6.6
  - perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
  - x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
  - x86/CPU/AMD: Do the common init on future Zens too
  - x86/CPU/AMD: Add more models to X86_FEATURE_ZEN5
  - x86/CPU/AMD: Add X86_FEATURE_ZEN5
  - x86/CPU/AMD: Drop now unused CPU erratum checking function
  - x86/CPU/AMD: Get rid of amd_erratum_1485[]
  - x86/CPU/AMD: Get rid of amd_erratum_400[]
  - x86/CPU/AMD: Get rid of amd_erratum_383[]
  - x86/CPU/AMD: Rename init_amd_zn() to init_amd_zen_common()
  - x86/CPU/AMD: Call the spectral chicken in the Zen2 init function
  - x86/CPU/AMD: Move the Zen3 BTC_NO detection to the Zen3 init function
  - Revert "vfio/type1: Unpin zero pages"
  - drivers/thirdparty: keep compile bnxt_re if not using thirdparty drivers
  - iommu/arm-smmu: Use the correct type in nvidia_smmu_context_fault()
  - thermal: intel: powerclamp: fix mismatch in get function for max_idle
  - Merge linux 6.6.41
  - drivers/thirdparty: add copy-drivers.sh to using thirdparty drivers
  - Merge linux 6.6.40
  - Merge linux 6.6.39
  - Merge linux 6.6.38
  - Merge linux 6.6.37
  - config: enable CONFIG_WIREGUARD
  - Merge linux 6.6.36
  - kabi: fix check-kabi file path when checking kABI
  - x86/tencentconfig: Enable CONFIG_UNWINDER_ORC in tencent.config
  - Merge linux 6.6.35
  - emm: don't set zram_memcg_nocharge as true until module load


author: Jianping Liu <frankjpliu@tencent.com> - 6.6.47-11
changelog:
  - config,oc: support WLAN and MTD and more SND drivers
  - Merge linux 6.6.47
  - Merge linux 6.6.46
  - Merge linux 6.6.45
  - Merge OCK next branch to TK5 master branch
  - x86/hpet: Read HPET directly if panic in progress
  - i2c/zhaoxin: I2C controller driver enhancement and optimization
  - x86/mce: Add NMIs setup in machine_check func
  - x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors
  - x86/mce: Set bios_cmci_threshold for CMCI threshold
  - perf/x86/zhaoxin/uncore: update KX-7000 support
  - iommu/dma: Fix not fully traversing iova reservations issue
  - x86/cpu: Remove pointless evaluation of x86_coreid_bits
  - i2c: smbus: Add support for Zhaoxin SMBUS controller
  - anolis: efi: cper: Add Zhaoxin/Centaur ZDI/ZPI error decode
  - ata: ahci: Add support for AHCI SGPIO Enclosure Management
  - Set ASYM_PACKING Flag on Zhaoxin KH-40000 platform
  - cpufreq: ACPI: add ITMT support when CPPC enabled
  - iommu/vt-d: Add support for detecting ACPI namespace device in RMRR
  - Add kh40000_iommu_dma_ops for KH-40000 platform
  - Add kh40000_direct_dma_ops for KH-40000 platform
  - Add early quirk to identify kh-40000
  - Merge OCK next branch to TK5 master branch
  - !201 [next-6.6] Intel: Backport some core PMU bugfixes to kernel 6.6
  - !200 [next-6.6] Intel: Backport SPR/EMR CXL and HBM perfmon support to kernel 6.6
  - USB:Fix kernel NULL pointer when unbind UHCI form vfio-pci
  - hwmon: Add support for Zhaoxin core temperature monitoring
  - anolis: Add support for Zhaoxin Serial ATA IDE.
  - rue/scx: Kill user tasks in SCHED_EXT when scheduler is gone
  - rue/scx: Add readonly sysctl knob kernel.cpu_qos for SCHED_BT compatibility
  - rue/scx: Add /proc/bt_stat to maintain SCHED_BT compatibility
  - rue/scx: Add cpu.offline to maintain SCHED_BT compatibility
  - rue/scx: Add cpu.scx to the cpu cgroup controller
  - rue/scx: Add /proc/scx_stat to do scx cputime accounting
  - rue/scx: Fix lockdep warn on printk with rq lock held
  - rue/scx: Reorder scx_fork_rwsem, cpu_hotplug_lock and scx_cgroup_rwsem
  - Revert "sched: adaptive default skew_tick value"
  - KVM: x86: Don't sync user-written TSC against startup values
  - KVM: s390: Don't re-setup dummy routing when KVM_CREATE_IRQCHIP
  - KVM: x86: Don't re-setup empty IRQ routing when KVM_CAP_SPLIT_IRQCHIP
  - KVM: Setup empty IRQ routing when creating a VM
  - kabi: Introduce CONFIG_KABI_RESERVE
  - null_blk: Fix return value of nullb_device_power_store()
  - null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
  - [PATCH] security: add security hook point
  - dist: provide mlnx-ofed-dist rpm
  - drivers,dist: add mlnx commercial quality drivers
  - submodule: update emm and thirdparty/release-drivers
  - net: csig toa patch toa patch from csig luckyqiu@tencent.com
  - Merge linux 6.6.44


author: Jianping Liu <frankjpliu@tencent.com> - 6.6.47-12
changelog:
  - crypto: ccp: fix the sev_do_cmd panic on non-Hygon platforms
  - emm: upadate to v0.1.7.3
  - emm: fix cgroup initilization check
  - tools headers UAPI: Sync kvm headers with the kernel sources
  - KVM: x86: Prevent excluding the BSP on setting max_vcpu_ids
  - KVM: x86: Limit check IDs for KVM_SET_BOOT_CPU_ID
  - KVM: Reject overly excessive IDs in KVM_CREATE_VCPU
  - KVM: x86: Make x2APIC ID 100% readonly
  - KVM: Introduce KVM_SET_USER_MEMORY_REGION2
  - config/x86: Add EROFS_FS and CACHEFILES for image-granularity acceleration
  - config,x86: open edr
  - riscv/purgatory: align riscv_kernel_entry
  - config,x86: disable CONFIG_IOMMU_DEBUGFS
  - hung_task,watchdog: set thresh time to 600 seconds
  - zhaoxin_rng: Remove redundant pr_err log after matching cpu_ids
  - config,x86: set CONFIG_HW_RANDOM_ZHAOXIN to m
  - emm: fix panic in kdump
  - config: trace: enable CONFIG_FUNCTION_GRAPH_RETVAL
  - rue/scx: Fix cgroupv2 cpu controller regression
  - watchdog: increase watchdog_thresh max value to 300 in debug kernel
  - dist: delete useless code in kernel.template.spec
  - i2c/zhaoxin: switch i2c registration to devm functions
  - lkp: intel: selftests/bpf: Add netlink helper library


author: Jianping Liu <frankjpliu@tencent.com> - 6.6.58-15
changelog:
  - integrity: add dynamic integrity measurement (DIM) support
  - Merge branch 'honglin/release' into 'release' (merge request !220)
  - rue/mm: fix suspicious RCU usage in mem_cgroup_account_oom_skip
  - rue/mm: fix some sparse warnings of incorrect type in argument
  - rue/mm: fix compile error of dereferencing pointer to incomplete type
  - rue/mm: fix some sparse warnings due to no previous prototype
  - rue/net: fix some sparse warnings in netclassid_cgroup.c
  - Merge linux 6.6.58
  - kunit/overflow: Fix UB in overflow_allocation_test
  - Merge branch 'frankjpliu/master-mr-ocknext' into 'release' (merge request !217)
  - Loongarch: Dynamically enable Write Combining
  - Loongarch: Driver for loongson SE SDF
  - pci/quirks: Enable MSI for LS7A2000 PCIe devices
  - !240 [next-6.6] LoongArch: Add AVEC irqchip support and add acpi mcfg quirk for 3C6000
  - acpi: mcfg quirk: Increased multi-chip support for the 3C6000
  - LoongArch: Add AVEC irqchip support
  - !239 [next-6.6] LoongArch: Change SHMLBA from SZ_64K to PAGE_SIZE
  - LoongArch: Change SHMLBA from SZ_64K to PAGE_SIZE
  - rue/io: fix child blkcg of hier buffered write can not exceed 2MB
  - crashkernel: auto adjust crashkernel min size to 800MB for KASAN
  - sli: fix crash when open the sli.monitor file in rw mode
  - Merge linux 6.6.57
  - Merge branch 'cunhuang/jitterentropy-failed' into 'master' (merge request !209)
  - crypto: jitter - set default OSR to 3
  - crypto: jitter - use permanent health test storage
  - crypto: jitter - reuse allocated entropy collector
  - crypto: jitter - Allow configuration of oversampling rate
  - crypto: jitter - Allow configuration of memory size
  - crypto: jitter - add RCT/APT support for different OSRs
  - watchdog: handle the ENODEV failure case of lockup_detector_delay_init() separately
  - Merge branch 'haisu/master-fix-rue-lore-issues' into 'master' (merge request !207)
  - rue/io: mem_cgroup_bind_blkio_write also require CONFIG_SWAP
  - rue/io: fix sparse error of restricted blk_opf_t degrades to integer
  - rue/io: fix compile errors of redefinition blkg_policy_data
  - config: iommu: default arm64 iommu Lazy mode
  - mpt3sas: add mpt3sas commercial-quality driver
  - Merge branch 'likexu/kvm/fixes' into 'master' (merge request !205)
  - KVM: x86: Add fastpath handling of HLT VM-Exits
  - KVM: x86: Reorganize code in x86.c to co-locate vCPU blocking/running helpers
  - KVM: x86: Exit to userspace if fastpath triggers one on instruction skip
  - KVM: x86: Dedup fastpath MSR post-handling logic
  - KVM: x86: Re-enter guest if WRMSR(X2APIC_ICR) fastpath is successful
  - KVM: x86: Re-split x2APIC ICR into ICR+ICR2 for AMD (x2AVIC)
  - KVM: nVMX: Assert that vcpu->mutex is held when accessing secondary VMCSes
  - KVM: nVMX: Explicitly invalidate posted_intr_nv if PI is disabled at VM-Enter
  - KVM: x86: Fold kvm_get_apic_interrupt() into kvm_cpu_get_interrupt()
  - KVM: nVMX: Detect nested posted interrupt NV at nested VM-Exit injection
  - KVM: nVMX: Suppress external interrupt VM-Exit injection if there's no IRQ
  - KVM: nVMX: Get to-be-acknowledge IRQ for nested VM-Exit at injection site
  - KVM: x86: Move "ack" phase of local APIC IRQ delivery to separate API
  - KVM: Fix coalesced_mmio_has_room() to avoid premature userspace exit
  - KVM: x86: Fully defer to vendor code to decide how to force immediate exit
  - KVM: VMX: Handle KVM-induced preemption timer exits in fastpath for L2
  - KVM: x86: Move handling of is_guest_mode() into fastpath exit handlers
  - KVM: VMX: Handle forced exit due to preemption timer in fastpath
  - KVM: VMX: Re-enter guest in fastpath for "spurious" preemption timer exits
  - KVM: x86: Plumb "force_immediate_exit" into kvm_entry() tracepoint
  - Merge branch 'haisu/master-cve-v9' into 'master' (merge request !204)
  - btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
  - btrfs: handle errors from btrfs_dec_ref() properly
  - binfmt_elf_fdpic: fix AUXV size calculation when ELF_HWCAP2 is defined
  - f2fs: fix null reference error when checking end of zone
  - nfs: pass explicit offset/count to trace events
  - Merge linux 6.6.56
  - Merge linux 6.6.55
  - Merge linux 6.6.54
  - Merge linux 6.6.53
  - Merge linux 6.6.52
  - Merge linux 6.6.51
  - Merge linux 6.6.50
  - Merge linux 6.6.49
  - Merge linux 6.6.48
  - Merge branch 'haisu/master-tryrue-20240905-merge-honglin' into 'master' (merge request !197)
  - rue/io: introduce wbt class for cgroup priority
  - rue/io: skip throttle REQ_META/REQ_PRIO IO
  - rue/io: buffered_write_bps hierarchy support
  - rue/io: support readwrite unified configuration
  - rue/io: Add iocost and iolatency entry for cgroup v1
  - rue/io: add io_cgv1_buff_wb to enable buffer IO counting in cgroup v1
  - rue/io: introduce per mem_cgroup sync interface
  - rue/io: add bufio isolation based for cgroup v1
  - rue/io: Add bps information to blkio.throttle.stat
  - rue/io: Add blkio.throttle.stat
  - rue/io: add buffer IO writeback throtl for cgroup v1
  - rue/io: add io_qos switch and throtl hierarchy
  - rue/io: Enable CONFIG_BLK_DEV_THROTTLING_CGROUP_V1 configuration
  - rue/io: Correct the alloc type to disk_stats
  - rue/io: add support for recursive diskstats
  - rue/io: blkcg export blkcg symbols to be used in bpf accounting
  - rue/mm: add sysctl_vm_use_priority_oom to enable priority oom for all cgroups
  - rue/mm: compatible with mglru for pagecache limit
  - rue/mm: fix file page_counter 'memcg->pagecache' error when THP enabled
  - rue/mm: introduce new feature to async clean dying memcgs
  - rue/mm: introduce memcg page cache hit & miss ratio tool
  - rue/mm: introduce memory allocation latency for per-cgroup tool
  - rue/mm: async free memory while process exiting
  - rue/mm: pagecache limit per cgroup support
  - rue/mm: add memory cgroup async page reclaim mechanism
  - rue/mm: introduce memcg priority oom
  - rue/mm: add priority reclaim support
  - pagecachelimit: set an initial value for may_deactivate in shrink page cache
  - rue/net: avoid wrong memory access to struct net_device
  - rue/net: avoid wrong memory access to struct cgroup_cls_state
  - rue/net: adapt to the new rue modular framework
  - rue/net: add dynamic bandwidth allocation between online cgroups
  - rue/net: add netdev-based rate limit for per cgroup
  - rue/net: add total bandwidth limit for multiprio preemption
  - rue/net: add support for cgroup whitelist ports
  - rue/net: add rx && tx rate limit for per cgroup
  - rue/net: init netcls traffic controller
  - rue: Revert "kallsyms: unexport kallsyms_lookup_name() and kallsyms_on_each_symbol()"
  - rue: Add support for rue modularization
  - rue: init rue module
  - rue: cgroup priority
  - blkcg/diskstats: Fix the extra cpu parameter
  - mm: set default watermark_boost_factor value to 0
  - Revert "io/tqos: merge buffer io limit series patch from brookxu, and rework some function."
  - Revert "io/tqos: add sysctl_buffer_io_limit switch for buffer io limit."
  - Revert "cgroup: allow cgroup to split direct io and buffered io into different blkio cgroup"
  - emm: update to v0.1.7.4
  - dist,spec: provide kernel-debug-debuginfo in debug version
  - dist,sepc: supprot kernel-debug in core and modules and devel rpm
  - Merge branch 'frankjpliu/master-mr-ocknext' into 'master' (merge request !202)
  - !234 [next-6.6] Intel: Backport to support Intel IFS(In Field Scan) SBAF on GNR for kernel 6.6
  - platform/x86/intel/ifs: Fix SBAF title underline length
  - trace: platform/x86/intel/ifs: Add SBAF trace support
  - platform/x86/intel/ifs: Add SBAF test support
  - platform/x86/intel/ifs: Add SBAF test image loading support
  - platform/x86/intel/ifs: Refactor MSR usage in IFS test code
  - selftests: ifs: verify IFS ARRAY BIST functionality
  - selftests: ifs: verify IFS scan test functionality
  - selftests: ifs: verify test image loading functionality
  - selftests: ifs: verify test interfaces are created by the driver
  - platform/x86/intel/ifs: Disable irq during one load stage
  - platform/x86/intel/ifs: trace: display batch num in hex
  - platform/x86/intel/ifs: Classify error scenarios correctly
  - platform/x86/intel/ifs: Remove unnecessary initialization of 'ret'
  - platform/x86/intel/ifs: Add an entry rendezvous for SAF
  - platform/x86/intel/ifs: Replace the exit rendezvous with an entry rendezvous for ARRAY_BIST
  - platform/x86/intel/ifs: Add current batch number to trace output
  - platform/x86/intel/ifs: Trace on all HT threads when executing a test
  - ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
  - hwmon/k10temp: Add support for Hygon family 18h model 10h
  - EDAC/amd64: Add support for Hygon family 18h model 10h
  - x86/amd_nb: Add support for Hygon family 18h model 10h
  - x86/cpu: Get LLC ID for Hygon family 18h model 10h
  - perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
  - EDAC/amd64: Add support for Hygon family 18h model 7h
  - x86/amd_nb: Add support for Hygon family 18h model 7h
  - crypto: ccp: add more checks for sev_dev_hooks_installed
  - config: set CONFIG_KASAN_STACK=y in debug.config
  - net/netlat: fix a deadlock when reset the /proc/net/twatcher/log
  - xfs: allow symlinks with short remote targets
  - Merge branch 'likexu/kvm/vpmu/fixes' into 'master' (merge request !200)
  - KVM: x86/pmu: Explicitly check NMI from guest to reducee false positives
  - KVM: x86: Get CPL directly when checking if loaded vCPU is in kernel mode
  - KVM: VMX: Disable LBR virtualization if the CPU doesn't support LBR callstacks
  - perf/x86/intel: Expose existence of callback support to KVM
  - KVM: VMX: Snapshot LBR capabilities during module initialization
  - KVM: x86/pmu: Explicitly check for RDPMC of unsupported Intel PMC types
  - KVM: x86/pmu: Treat "fixed" PMU type in RDPMC as index as a value, not flag
  - KVM: x86/pmu: Disallow "fast" RDPMC for architectural Intel PMUs
  - KVM: x86/pmu: Apply "fast" RDPMC only to Intel PMUs
  - KVM: x86/pmu: Prioritize VMX interception over #GP on RDPMC due to bad index
  - KVM: x86/pmu: Don't ignore bits 31:30 for RDPMC index on AMD
  - KVM: x86/pmu: Get eventsel for fixed counters from perf
  - KVM: x86/pmu: Setup fixed counters' eventsel during PMU initialization
  - KVM: x86/pmu: Remove KVM's enumeration of Intel's architectural encodings
  - KVM: x86/pmu: Allow programming events that match unsupported arch events
  - KVM: x86/pmu: Always treat Fixed counters as available when supported
  - KVM: x86/pmu: Track emulated counter events instead of previous counter
  - KVM: x86/pmu: Update sample period in pmc_write_counter()
  - KVM: x86/pmu: Remove manual clearing of fields in kvm_pmu_init()
  - KVM: x86/pmu: Stop calling kvm_pmu_reset() at RESET (it's redundant)
  - selftests/bpf: DENYLIST.aarch64: Skip fexit_sleep again
  - bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
  - closures: Change BUG_ON() to WARN_ON()
  - dist,Makefile: inherit the existing value of the DISABLED variable
  - config: configure panic_timeout=-1, restart immediately when panic occurs
  - config,debug: set CONFIG_LOCALVERSION="+debug" in debug*.config
  - dist,Makefile: generic-debug config only build kernel rpm
  - config: split debug.config to debug.config and debug-sched.config


author: Pengda Dou <doupengda@loongson.cn> - 0.19.1-6
changelog:
  - [Type] other
  - [DESC] add support for loongarch64
  - Fix cannot convert 'bfd*' to 'bfd_architecture'


author: jackeyji <jackeyji@tencent.com> - 1.37.5-1
changelog:
  - [Type] security
  - [DESC] upgrade to 1.37.5 to fix CVE-2024-9341 CVE-2024-9407 CVE-2024-9675 and CVE-2024-9676


author: wynnfeng <wynnfeng@tencent.com> - 2023.2.60-1
changelog:
  - Update to CKBI 2.60 from NSS 3.86
  -    Removing:
  -     # Certificate "Camerfirma Global Chambersign Root"
  -     # Certificate "Staat der Nederlanden EV Root CA"
  -    Adding:
  -     # Certificate "DigiCert TLS ECC P384 Root G5"
  -     # Certificate "DigiCert TLS RSA4096 Root G5"
  -     # Certificate "DigiCert SMIME ECC P384 Root G5"
  -     # Certificate "DigiCert SMIME RSA4096 Root G5"
  -     # Certificate "Certainly Root R1"
  -     # Certificate "Certainly Root E1"
  -     # Certificate "E-Tugra Global Root CA RSA v3"
  -     # Certificate "E-Tugra Global Root CA ECC v3"
  -     # Certificate "DIGITALSIGN GLOBAL ROOT RSA CA"
  -     # Certificate "DIGITALSIGN GLOBAL ROOT ECDSA CA"
  -     # Certificate "Global Chambersign Root"


author: Huang Yang <huangyang@loongson.cn> - 12.3.1.1-2
changelog:
  - [Type] other
  - [DESC] enable partial compilation options on loongarch architectures
  - Added longarch vector instruction header file


author: Huang Yang <huangyang@loongson.cn> - 12.3.1.2-3
changelog:
  - [Type] bugfix
  - [DESC] Fix GNOME desktop startup failure on loongarch architecture
  - Remove some duplicate configure options


author: Zhao Zhen <jeremiazhao@tencent.com> - 12.3.1.3-1
changelog:
  - [Type] other
  - [DESC] backport LoongArch patches
  -    Fixed duplicate link errors when building libgccjit.
  -    Changed the value of branch_cost: Optimized the generation of branch-related instructions.
  -    Fixed build and test errors caused by version differences.
  -    Optimized the generation of instructions for immediate loading.
  -    Optimized the implementation of stack-check.
  -    Optimized the generation of multiplication instructions.
  -    Added support for 3A6000.
  -    Modified the library installation path.
  -    Fixed GNOME desktop startup failure.
  -    Fixed dependencies on loongarch header files.
  -    Fixed the behavior of the macro instruction .align.
  -    Fixed the vec_initv32qiv16qi template to avoid ICE errors.
  -    Optimized the use of fcmp.caf.s instead of movgr2cf for copying from the zero register.
  -    Fixed the lsx_vreplgr2vr_<lsxfmt_f> instruction template error.
  -    Fixed backend subreg nesting errors.
  -    Fixed redundant barrier instructions before LL-SC.
  -    Optimized immediate loading.
  -    Fixed runtime errors when building gcc.
  -    Fixed incorrect use of frint and ftint instructions.
  -    Changed vector usage to standard template names.
  -    Allowed S9 as an alias for the r22 register.
  -    Changed the dynamic library installation path to lib64.
  -    Fixed memory reference errors with base address 0.
  -    Added a test suite for vector instructions.
  -    Added support for Ada, libffi, libvtv, libitm on LoongArch.
  -    Added support for prefetch instructions, commonly used floating-point instructions, and [f]copysign.
  -    Added support for mcmodel=medium and extreme.
  -    Added fmin/fmax RTL backend templates.
  -    Added the -mdirect-extern-access option.
  -    Added support for libsanitizer.
  -    Added the -mexplicit-relocs option as an optional target.
  -    Implemented __builtin_thread_pointer.
  -    Added support for xorsign.
  -    Added the alslsi3_extend template.
  -    Added a D language frontend.
  -    Added TLS relocation types.
  -    Added fmin/fmax RTL templates.
  -    Added a test suite for vector instructions.
  -    Defined ISA versions.


author: Miaojun Dong <zoedong@tencent.com> - 8.4.0-6
changelog:
  - Rebuilt for loongarch release
  - Add BR glibc-langpack-en for testing, since it was separated from
    glibc-common


author: Huang zien <ethanehuang@tencent.com> - 2.89-3
changelog:
  - [Type] security
  - [DESC] Dnsmasq 2.9 is vulnerable to Integer Overflow via forward_query(fix cve-2023-49441)


author: cunshunxia <cunshunxia@tencent.com> - 20240223-1
changelog:
  - Upgrade to version edk2-stable202402
  - Support Hygon CSV3 feature, support live migration for Hygon CSV1/2/3 guests, by hanliyang@hygon.cn


author: Zhao Zhen <jeremiazhao@tencent.com> - 4.12.1-1
changelog:
  - updated fence-agents 4.12.1
  - disabled ppc64le temlpy
  - bootstrap aws/gce/compute/kubevirt/aliyun agents
  - disabled azure temply
  - added ecloud agents


author: Doris Chao <doriscchao@tencent.com> - 115.11.0-1
changelog:
  - [Type] security
  - [DESC] Update to 115.11.0 to fix CVEs,incldue CVE-2024-4367,
  -  CVE-2024-4767,CVE-2024-4768,CVE-2024-4769,CVE-2024-4770,CVE-2024-4777


author: Doris Chao <doriscchao@tencent.com> - 115.13.0-1
changelog:
  - [Type] security
  - [DESC] Update to 115.13.0 to fix CVEs,incldue CVE-2024-5688,
  - CVE-2024-5690,CVE-2024-5691,CVE-2024-5693,CVE-2024-5696,CVE-2024-5700,
  - CVE-2024-5702,CVE-2024-6601,CVE-2024-6602,CVE-2024-6603,CVE-2024-6604


author: Doris Chao <doriscchao@tencent.com> - 115.15.0-1
changelog:
  - [Type] security
  - [DESC] Update to version 115.15.0 to fix CVEs, including CVE-2024-7519,
  - CVE-2024-7521, CVE-2024-7522, CVE-2024-7524, CVE-2024-7525, CVE-2024-7526,
  - CVE-2024-7527, CVE-2024-7529, and CVE-2024-7531, which are fixed in Firefox 
  - ESR 115.14,as well as CVE-2024-8381, CVE-2024-8382, CVE-2024-8383, and 
  - CVE-2024-8384, which are fixed in Firefox ESR 115.15.


author: Wenlong Zhang <zhangwenlong@loongson.cn> - 128.3.1-1
changelog:
  - [Type] security
  - [DESC] Update to version 128.3.1 to fix CVEs, including CVE-2024-9401,
  - CVE-2024-9392, CVE-2024-9393, CVE-2024-9394 and CVE-2024-9680.
  - update cbindgen-vendor.tar.xz to fix build error for cbindgen on loongarch64


author: Doris Chao <doriscchao@tencent.com> - 128.4.0-1
changelog:
  - [Type] security
  - [DESC] Update to version 128.4.0 to fix CVEs, including CVE-2024-10458, 
  - CVE-2024-10459, CVE-2024-10460, CVE-2024-10461, CVE-2024-10462, CVE-2024-10463, 
  - CVE-2024-10464, CVE-2024-10465, CVE-2024-10466 and CVE-2024-10467.


author: Doris Chao <doriscchao@tencent.com> - 128.5.1-1
changelog:
  - [Type] security
  - [DESC] Update to version 128.5.1 to fix CVEs, including CVE-2024-11691,
  - CVE-2024-11692, CVE-2024-11693, CVE-2024-11694, CVE-2024-11695, CVE-2024-11696,
  - CVE-2024-11697, CVE-2024-11698, and CVE-2024-11699.


author: Upgrade Robot <upbot@opencloudos.tech> - 4.12.2-1
changelog:
  - Upgrade to version 4.12.2 (Fix CVE-2024-2698, CVE-2024-3183)
  - Revert "Replace netifaces with ifaddr"


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.11.2-1
changelog:
  - Upgrade to upstream version 2.11.2
  - Fix CVE-2023-40589,CVE-2023-40569,CVE-2023-40567,CVE-2023-40188
  - Fix CVE-2023-40186,CVE-2023-40181,CVE-2023-39356,CVE-2023-39354
  - Fix CVE-2023-39353,CVE-2023-39352,CVE-2023-39351,CVE-2023-39350
  - Fix CVE-2022-41877,CVE-2022-39347,CVE-2022-39320,CVE-2022-39319
  - Fix CVE-2022-39318,CVE-2022-39317,CVE-2022-39316
  - Remove dbus, glib and gstreamer requirements


author: Fanjun Kong <fanjunkong@tencent.com> - 2.11.6-1
changelog:
  - Upgrade to upstream version 2.11.6
  - CVE-2024-32041 [Low[ OutOfBound Read in zgfx_decompress_segment
  - CVE-2024-32039 [Moderate] Integer overflow & OutOfBound Write in clear_decompress_residual_data
  - CVE-2024-32040 [Low] integer underflow in nsc_rle_decode
  - CVE-2024-32458 [Low] OutOfBound Read in planar_skip_plane_rle
  - CVE-2024-32459 [Low] OutOfBound Read in ncrush_decompress
  - CVE-2024-32460 [Low] OutOfBound Read in interleaved_decompress


author: kianli <kianli@tencent.com> - 9.0.1-1
changelog:
  - Upgrade to 9.0.1
  - Security fix for CVE-2023-38406
  - Security fix for CVE-2023-38407
  - Security fix for CVE-2023-38802
  - Security fix for CVE-2023-41359
  - Security fix for CVE-2023-41909
  - Security fix for CVE-2023-41360
  - Security fix for CVE-2023-41361
  - Security fix for CVE-2023-41358
  - Security fix for CVE-2023-46752
  - Security fix for CVE-2023-46753


author: Yi Lin <nilusyi@tencent.com> - 1.8.10-9
changelog:
  - [Type] other
  - [DESC] fix "no data for compatible" in fwupd tests: `fwupdtool get-devices --verbose`


author: rockerzhu <rockerzhu@tencent.com> - 12.1-6
changelog:
  - Add sub-package of minimal to provides /usr/bin/gdb-add-index(needed by rpm-build) and
    gdb.minimal(needed by /usr/bin/gdb-add-index)
  - Rebuilt with boost 1.82.0.


author: Shuo Wang <abushwang@tencent.com> - 10.02.1-5
changelog:
  - fix CVE-2024-29509 CVE-2024-29506 CVE-2024-29507
  - fix CVE-2024-29508 CVE-2024-29511
  - fix buffer overflows, partial SAFER bypass, pointer leak (Bug 707510)


author: Shuo Wang <abushwang@tencent.com> -10.02.1-8
changelog:
  - fix CVE-2024-46951, CVE-2024-46952, CVE-2024-46953
  - fix CVE-2024-46954, CVE-2024-46955, CVE-2024-46956
  - PS interpreter - check the type of the Pattern Implementation (Bug #707991)
  - Bug #708001 "Buffer overflow in PDF XRef stream"
  - Bug 707793: Check for overflow validating format string
  - Bug 707788: Fix decode_utf8 to forbid overlong encodings.
  - Bug #707990 "Out of bounds read when reading color in "Indexed" color space"
  - PostScript interpreter - fix buffer length check Bug 707895


author: Shuo Wang <abushwang@tencent.com> - 2.38-23
changelog:
  - backport patch to fix str{n}cmp-evex performance degradation
  - x86/string: Fixup alignment of main loop in str{n}cmp-evex [BZ #32212]


author: Shuo Wang <abushwang@tencent.com> - 2.38-24
changelog:
  - requires zh and en defaultly
  - fix update glibc fail from old version to 2.38-16 when 'weakdependency=False'


author: Shuo Wang <abushwang@tencent.com> - 3.0.11-5
changelog:
  - Build with --no-warn-rwx-segment to fix build error in make apps
  - and we don't wind up with segment maps in the final bianries anyway


author: Shuo Wang <abushwang@tencent.com> - 2.0.2-2
changelog:
  - apply 
    
       GO111MODULE=off \
    go build -buildmode pie -compiler gc -tags="rpm_crashtraceback ${BUILDTAGS:-}" -ldflags "${LDFLAGS:-}  -B 0x$(head -c20 /dev/urandom|od -An -tx1|tr -d ' \n') -compressdwarf=false -linkmode=external -extldflags '-Wl,-z,relro -Wl,--as-needed  -Wl,-z,now -specs=/usr/lib/rpm/OpenCloudOS/OpenCloudOS-hardened-ld  -Wl,--build-id=sha1 '" -a -v -x macro;


author: jackeyji <jackeyji@tencent.com> - 1.21.13-1
changelog:
  - [Type] security
  - [DESC] upgrade to 1.21.13 to fix CVE-2024-24790 CVE-2024-34156 CVE-2024-24789 CVE-2024-24791 CVE-2024-34158 CVE-2024-34155


author: Shuo Wang <abushwang@tencent.com> - 9.0.0-2
changelog:
  - backport patch to fix CVE-2023-46045:
  - gvc: detect plugin installation failure and display an error


author: wynnfeng <wynnfeng@tencent.com> - 2.4.57-8
changelog:
  - [type] security
  - [desc] fix CVE-2024-38473, 2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573


author: Doris Chao <doriscchao@tencent.com> - 7.0.3-4
changelog:
  - [Type] bugfix
  - [DESC] Change the way info files information is updated, no longer using
  - the fix-info-dir script,since bash no loonger provies the /usr/share/info/dir


author: Zhao Zhen <jeremiazhao@tencent.com> - 11.0.22-1
changelog:
  - updated to upstream 11.0.22
  - fixed CVE-2024-20918 CVE-2024-20952 CVE-2024-20926 CVE-2024-20919 CVE-2024-20921 
  -       CVE-2024-20945


author: Zhao Zhen <jeremiazhao@tencent.com> - 11.0.23-1
changelog:
  - updated to upstream 11.0.23
  - fixed CVE-2024-21094 CVE-2024-21085 CVE-2024-21011 CVE-2024-21068 CVE-2024-21012


author: Zhao Zhen <jeremiazhao@tencent.com> - 11.0.24-1
changelog:
  - Updated to upstream version 11.0.24
  - fixed CVE-2024-21147 CVE-2024-21145 CVE-2024-21140
  -       CVE-2024-21131 CVE-2024-21138


author: Zhao Zhen <jeremiazhao@tencent.com> - 11.0.25-1
changelog:
  - Updated to upstream version 11.0.25
  - fixed CVE-2024-21235 CVE-2024-21208 CVE-2024-21210 CVE-2024-21217


author: Zhao Zhen <jeremiazhao@tencent.com> - 17.0.10-1
changelog:
  - updated to upstream 17.0.10
  - fixed CVE-2024-20932 CVE-2024-20918 CVE-2024-20952 CVE-2024-20919 CVE-2024-20921
  -       CVE-2024-20945


author: Zhao Zhen <jeremiazhao@tencent.com> - 17.0.13-1
changelog:
  - Updated to upstream version 17.0.13
  - fixed CVE-2024-21235 CVE-2024-21208 CVE-2024-21210 CVE-2024-21217


author: Zhao Zhen <jeremiazhao@tencent.com> - 8.0.17-1
changelog:
  - updated to upstream 8.0.17
  - fixed CVE-2024-20918 CVE-2024-20952 CVE-2024-20926 CVE-2024-20919 CVE-2024-20921
  -       CVE-2024-20945


author: Zhao Zhen <jeremiazhao@tencent.com> - 8.0.19-1
changelog:
  - Updated to upstream version 8.0.19
  - fixed CVE-2024-21147 CVE-2024-21145 CVE-2024-21140 CVE-2024-21144
  -       CVE-2024-21131 CVE-2024-21138


author: Zhao Zhen <jeremiazhao@tencent.com> - 8.0.20-1
changelog:
  - Updated to upstream version 8.0.20
  - Fixed CVE-2024-21235 CVE-2024-21208 CVE-2024-21210 CVE-2024-21217
  - Because of jdk8281098-pr3836-pass_compiler_flags_to_adlc.patch has been
  - merged by upstream, so we delete it, see
  - https://github.com/openjdk/jdk8u/commit/4106121e0ae42d644e45c6eab9037874110ed670


author: Wang Guodong <gordonwwang@tencent.com> - 4.33-2
changelog:
  - Move event.h from libev-devel to a subpackage(libev-event-devel), so 
    libev-devel no longer conflicts with libevent-devel.


author: Xin Cheng <denisecheng@tencent.com> - 0.10.5-3
changelog:
  - Fix CVE-2023-48795: fix prefix truncation attack on Binary Packet Protocol (BPP)
  - Fix CVE-2023-6918: fix missing checks for return values for digests
  - Fix CVE-2023-6004: fix ProxyCommand/ProxyJump features allow injection


author: Jiaxin Yang <jiaxinyyang@tencent.com> - 1.13.1-1
changelog:
  - Fix bug with smaller width bigger size, resolve CVE-2023-44488
  - VP8: disallow thread count changes, resolve CVE-2023-5217


author: Liangliang Zhai <zhailiangliang@loongson.cn> - 2.7.2-6
changelog:
  - [Type] other
  - [DESC] To solve openwsman-winrs installation dependency on rubygem-openwsman,
           enable ruby for loongarch64 to compile and generate rubygem-openwsman


author: Miaojun Dong <zoedong@ttencent.com> - 1.4.2-1
changelog:
  - Upgrade version to 1.4.2
  - Rebuild for binutils-2.41-2 to fix BPF bytecode files strip failure
  - Remove Patch for i686 arch


author: Wang Guodong <gordonwwang@tencent.com> - 8.0.37-1
changelog:
  - Upgrade to 8.0.37
  - fix CVE-2024-20960, CVE-2024-20961, CVE-2024-20962, CVE-2024-20963, CVE-2024-20964, 
    CVE-2024-20965, CVE-2024-20966, CVE-2024-20967, CVE-2024-20969, CVE-2024-20970,
    CVE-2024-20971, CVE-2024-20972, CVE-2024-20973, CVE-2024-20974, CVE-2024-20975,
    CVE-2024-20976, CVE-2024-20977, CVE-2024-20978, CVE-2024-20981, CVE-2024-20982


author: Wang Guodong <gordonwwang@tencent.com> - 8.0.39-1
changelog:
  - Upgrade to 8.0.39
  - fix CVE-2024-20996, CVE-2024-21125, CVE-2024-21129, CVE-2024-21130, CVE-2024-21134,
    CVE-2024-21134, CVE-2024-21142, CVE-2024-21162, CVE-2024-21163, CVE-2024-21165, 
    CVE-2024-21171, CVE-2024-21173, CVE-2024-21177, CVE-2024-21179, CVE-2024-21185


author: Wang Guodong <gordonwwang@tencent.com> - 8.0.40-1
changelog:
  - Upgrade to 8.0.40
  - fix CVE-2024-21197, CVE-2024-21212, CVE-2024-21238, CVE-2024-21196, CVE-2024-21239,
    CVE-2024-21194, CVE-2024-21237, CVE-2024-21213, CVE-2024-21198, CVE-2024-21241,
    CVE-2024-21207, CVE-2024-21193, CVE-2024-21218, CVE-2024-21199, CVE-2024-21219,
    CVE-2024-21247, CVE-2024-21230, CVE-2024-21201, CVE-2024-21231, CVE-2024-21203,
    CVE-2024-21236


author: Doris Chao <doriscchao@tencent.com> - 8.0-1
changelog:
  - Update to nano-8.0 
    • CVE-2024-5742: Avoid privilege escalations via symlink attacks
    on emergency save file.
    • By default ^F is bound to starting a forward search, and ^B to
    starting a backward search, while M-F and M-B repeat the search
    in the corresponding direction.  (See the documentation if you
    want the old bindings back.)
    • Command-line option --modernbindings (-/) makes ^Q quit, ^X cut,
    ^C copy, ^V paste, ^Z undo, ^Y redo, ^O open a file, ^W write a
    file, ^R replace, ^G find again, ^D find again backwards, ^A set
    the mark, ^T jump to a line, ^P show the position, and ^E execute.
    • Above modern bindings are activated also when the name of nano's
    executable (or a symlink to it) starts with the letter "e".
    • To open a file at a certain line number, one can now use also
    `nano filename:number`, besides `nano +number filename`.
    • <Alt+Home> and <Alt+End> put the cursor on the first and last
    row in the viewport, while retaining the horizontal position.
    • When the three digits in an #RGB color code are all the same,
    the code is mapped to the xterm grey scale, giving access to
    fourteen levels of grey instead of just four.
    • For easier access, M-" is bound to placing/removing an anchor,
    and M-' to jumping to the next anchor.
    • Whenever an error occurs, the keystroke buffer is cleared, thus
    stopping the execution of a macro or a string bind.
    • The mousewheel scrolls the viewport instead of moving the cursor.


author: Pengda Dou <doupengda@loongson.cn> - 1.35.5-9
changelog:
  - [Type] other
  - [DESC] enable bootstrap will result in missing functionality provided by the packages


author: jackeyji <jackeyji@tencent.com> - 1.26.2-1
changelog:
  - [Type] security
  - [DESC] upgrade to 1.26.2 to fix CVE-2024-31079 CVE-2024-32760 CVE-2024-34161 and CVE-2024-35200


author: Rebuild Robot <rebot@opencloudos.org> - 2.2.0-6
changelog:
  - [Type] bugfix
  - [DESC] Rebuilt for rust-toolset
  - not use cargo_build, because RUSTFLAGS will be overwritten


author: Zhao Zhen <jeremiazhao@tencent.com> - 18.18.2-1
changelog:
  - updated to upstream 18.18.2
  - switched to using original source tarball
  - fixed CVE-2023-45143 CVE-2023-39332 CVE-2023-39331 CVE-2023-38552 CVE-2023-32559 
  -       CVE-2023-32006 CVE-2023-32002 CVE-2023-30590 CVE-2023-30588 CVE-2023-30581


author: Shuo Wang <abushwang@tencent.com> - 1.0-23
changelog:
  - \
  /usr/bin/python3 /usr/lib/rpm/OpenCloudOS/pyproject_save_files.py \
    --output-files "/builddir/build/BUILD/pyproject-files" \
    --output-modules "/builddir/build/BUILD/pyproject-modules" \
    --buildroot "/builddir/build/BUILDROOT/opencloudos-rpm-config-1.0-32.ocs23.noarch" \
    --sitelib "/usr/lib/python3.11/site-packages" \
    --sitearch "/usr/lib64/python3.11/site-packages" \
    --python-version "3.11" \
    --pyproject-record "/builddir/build/BUILD/pyproject-record" \
    --prefix "/usr" \
    
  : add support for nested directories and License-Files


author: Siyuan Lou <siyuanlou@tencent.com> - 1.0-27
changelog:
  - add more macros for golang. 
  - add rpm-go.lua, srpm-go.lua, and go-rpm-integration script to support go rpm packaging.


author: cunshunxia <cunshunxia@tencent.com> - 1.0-31
changelog:
  - requires go-rpm-macros in default build env which is the mix of go-rpm-macros and
  - go-srpm-macros before.


author: Yi Lin <nilusyi@tencent.com> - 23-24
changelog:
  - [TYPE] other
  - [DESC] add RELEASE field in os-release
  - [DESC] using epol-release repo as epol support


author: Xin Cheng <denisecheng@tencent.com> - 9.3p2-4
changelog:
  - CVE-2023-51385: forbid shell metasymbols in username/hostname
  - CVE-2023-51384: apply destination constraints to all p11 keys
  - CVE-2023-48795: fix Terrapin attack


author: doriscchao <doriscchao@tencent.com> - 2.7.6-1
changelog:
  - initial build, base version 2.7.6, update to upstream git commit 20200514 with gnulib 
    version 20200513 through patch0001.


author: Chunsheng Luo <luffyluo@tencent.com> - 6.2.2-5
changelog:
  - Fix CVE-2024-45769 pcp: pmcd heap corruption through metric pmstore operations
  - Fix CVE-2024-45770 pcp: pmpost symlink attack allows escalating pcp to root user


author: Xiaojie Chen <jackxjchen@tencent.com> - 3.02-1
changelog:
  - Upgrade to upstream version 3.02
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.36-1
changelog:
  - Upgrade to upstream version 2.36
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.143-1
changelog:
  - Upgrade to upstream version 2.143
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.206-1
changelog:
  - Upgrade to upstream version 2.206
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.16-1
changelog:
  - Upgrade to upstream version 1.16
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 6.04-1
changelog:
  - Upgrade to upstream version 6.04
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 3.19-1
changelog:
  - Upgrade to upstream version 3.19
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 7.70-1
changelog:
  - Upgrade to upstream version 7.70
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.22-1
changelog:
  - Upgrade to upstream version 2.22
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.75-1
changelog:
  - Upgrade to upstream version 1.75
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.54-1
changelog:
  - Upgrade to upstream version 2.54
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 3.81-1
changelog:
  - Upgrade to upstream version 3.81
  - Remove perl-libs which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 6.06-1
changelog:
  - Upgrade to upstream version 6.06
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 6.44-1
changelog:
  - Upgrade to upstream version 6.44
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15
  - Remove conditional macro because perl(Clone) is no longger an optional dependency


author: Xiaojie Chen <jackxjchen@tencent.com> - 0.088-1
changelog:
  - Upgrade to upstream version 0.088
  - Remove perl-libs which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 0.42-1
changelog:
  - Upgrade to upstream version 0.42
  - Remove perl-libs which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.083-1
changelog:
  - Upgrade to upstream version 2.074
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 4.10-1
changelog:
  - Upgrade to upstream version 4.10
  - Remove perl-libs which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 4.16-1
changelog:
  - Upgrade to upstream version 4.16
  - Remove perl-libs which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.9998.39-1
changelog:
  - Upgrade to upstream version 1.9998.39
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2:0.42.34-1
changelog:
  - Upgrade to upstream version 0.42.34
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 5.20230720-1
changelog:
  - Upgrade to upstream version 5.20230720
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.21-1
changelog:
  - Upgrade to upstream version 1.21
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.000038-1
changelog:
  - Upgrade to upstream version 1.000038
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.39-1
changelog:
  - Upgrade to upstream version 1.39
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.66-1
changelog:
  - Upgrade to upstream version 1.66
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 3.45-1
changelog:
  - Upgrade to upstream version 3.45
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.037-1
changelog:
  - Upgrade to upstream version 2.037
  - Remove perl-libs which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.204-1
changelog:
  - Upgrade to upstream version 1.204
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 0.017-1
changelog:
  - Upgrade to upstream version 0.017
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 0.002010-1
changelog:
  - Upgrade to upstream version 0.002010
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.302195-1
changelog:
  - Upgrade to upstream version 1.302195
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.35-1
changelog:
  - Upgrade to upstream version 1.35
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 5.19-1
changelog:
  - Upgrade to upstream version 5.19
  - Remove perl-libs which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.15-1
changelog:
  - Upgrade to upstream version 1.15
  - Add file perlcompat.attr which generates replacement for versioned


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.33-1
changelog:
  - Upgrade to upstream version 1.33
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 3.15-1
changelog:
  - Upgrade to upstream version 3.15
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 6.72-1
changelog:
  - Upgrade to upstream version 6.72
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15
  - Add buildrequires perl(Module::Load) and perl(HTTP::CookieJar::LWP)
  - Add requires perl(HTTP::CookieJar::LWP)


author: Xiaojie Chen <jackxjchen@tencent.com> - 0.241-1
changelog:
  - Upgrade to upstream version 0.241
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 5.01-1
changelog:
  - Upgrade to upstream version 5.01
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Shuo Wang <abushwang@tencent.com> - 23.08.0-3
changelog:
  - fix CVE-2024-6239 and backport its pre-patch
  - pdfinfo: Fix crash in broken documents when using -dests


author: Wang Guodong <gordonwwang@tencent.com> - 15.4-1
changelog:
  - Upgrade to version 15.4
  - Use sysusers configuration to setup user & group
  - CVEs fixed: CVE-2023-39417 CVE-2023-39418


author: Upgrade Robot <upbot@opencloudos.tech> - 15.9-1
changelog:
  - Upgrade to version 15.9
  - CVEs fixed: CVE-2024-10976, CVE-2024-10977, CVE-2024-10978, CVE-2024-10979


author: cunshunxia <cunshunxia@tencent.com> - 10.0.0-2
changelog:
  - remove runtime dependence pyOpenSSL which is only used when test.
  - remove six which is not needed anymore.


author: jackeyji <jackeyji@tencent.com> - 5.1.1-2
changelog:
  - [Type] other
  - [DESC] remove testcases because redis-server failed with port conflict when CI machine run with redis


author: Xin Cheng <denisecheng@tencent.com> - 1.17.1-4
changelog:
  - Fix CVE-2023-50387, DNSSEC verification complexity can be exploited to exhaust CPU resources and stall DNS resolvers.
  - Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust CPU.


author: Zien Huang <ethanehuang@tencent.com> - 1.17.1-7
changelog:
  - [Type] security
  - [DESC] DNS resolvers vulnerable to remote DoS attacks via response amplification (fix CVE-2024-33655)


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.9.2-1
changelog:
  - Upgrade to upstream version 1.9.2 
  - Disable some tests until upstream adapts to changes in python 3.11


author: Chunsheng Luo <luffyluo@tencent.com> - 8.2.2-13
changelog:
  - hw/net/net_tx_pkt: Fix overrun in update_sctp_checksum()(CVE-2024-3567)
  - qcow2: Don't open data_file with BDRV_O_NO_IO(CVE-2024-4467)
  - iotests/244: Don't store data-file with protocol in image(CVE-2024-4467)
  - iotests/270: Don't store data-file with json: prefix in image(CVE-2024-4467)
  - block: Parse filenames only when explicitly requested(CVE-2024-4467)
  - virtio-net: Ensure queue index fits with RSS(CVE-2024-6505)
  - virtio-snd: add max size bounds check in input cb(CVE-2024-7730)


author: Xiaojie Chen <jackxjchen@tencent.com> - 7.0.14-1
changelog:
  - Upgrade to upstream version 7.0.14
  - Fix CVE-2023-41053 and CVE-2023-45145
  - Set jemalloc page size


author: Wang Guodong <gordonwwang@tencent.com> - 1.70.0-3
changelog:
  - include -Cstrip=none in %build_rustflags for rust-1.77.0
  - sync rust-toolset macros to rust-packaging v25.2


author: Yi Lin <nilusyi@tencent.com> - 15.7-5
changelog:
  - fix CVE-2023-40546, CVE-2023-40551, CVE-2023-40550, 
    CVE-2023-40549, CVE-2023-40548, CVE-2023-40547


author: Miaojun Dong <zoedong@tencent.com> - 4.5.5-1
changelog:
  - Bump version to 4.5.5
  - Add build requirement python3-setuptools
  - Comment the line to generates i18n docs because it is broken


author: Xiaojie Chen <jackxjchen@tencent.com> - 6.5-1
changelog:
  - Upgrade to upstream version 6.5
  - Fix CVE-2023-46728, CVE-2023-46848 and CVE-2023-46847
  - Fix CVE-2023-46846, CVE-2023-5824 and CVE-2023-46724


author: Upgrade Robot <upbot@opencloudos.org> - 1.9.14p1-1
changelog:
  - Upgrade to version 1.9.14p1
  - not support log-server, disable configure options and remove openssl-devel


author: cunshunxia <cunshunxia@tencent.com> - 255-4
changelog:
  - fix unexpected `preset-all` when upgrade systemd.
  - create /var/log/journal at first boot to make log persistent.


author: cunshunxia <cunshunxia@tencent.com> - 255-13
changelog:
  - fix systemd-networkd-wait-online unexpected action caused by
  - ab3aed4a0349bbaa26f53340770c1b59b463e05d


author: Fanjun Kong <fanjunkong@tencent.com> - 1.13.1-3
changelog:
  - CVE-2023-5367
  - CVE-2023-5380
  - CVE-2023-6377
  - CVE-2023-6478
  - CVE-2023-6816
  - CVE-2024-0229
  - CVE-2024-21885
  - CVE-2024-21886


author: Liangliang Zhai <zhailiangliang@loongson.cn> - 1.13.1-4
changelog:
  - [Type] other
  - [DESC] fix patching failure:
    Source package has previously fixed the following CVE:
    CVE-2023-5367,CVE-2023-5380,CVE-2023-6478,CVE-2023-6816,CVE-2024-0229,CVE-2024-21885,CVE-2024-21886,CVE-2023-6377.


author: Doris Chao <doriscchao@tencent.com> - 3.4-1
changelog:
  - [Type] bugfix
  - [DESC] Update to version 3.4 to resolve crashes when copying in copy-mode
  - https://github.com/tmux/tmux/issues/3699


author: Doris Chao <doriscchao@tencent.com> - 9.0.82-1
changelog:
  - Update to apache-tomcat-9.0.82 to fix the CVE-2023-45648,CVE-2023-42795,CVE-2023-41080 
    and CVE-2023-28709


author: Doris Chao <doriscchao@tencent.com> - 9.0.86-1
changelog:
  - [Type] security
  - [DESC] Update to apache-tomcat-9.0.86 to fix CVEs,include CVE-2024-23672 and CVE-2024-24549


author: Miaojun Dong <zoedong@tencent.com> - 0.13.0-1
changelog:
  - Bump version to 0.13.0
  - usbredirserver is deprecated in favor of usbredirect
  - usbredirect can be used as a client or server through different parameters


author: Zhao Zhen <jeremiazhao@tencent.com> - 9.0.2092-1
changelog:
  - updated to upstream version 9.0.2092
  - fixed CVE-2023-4735 CVE-2023-4736 CVE-2023-4734 CVE-2023-4738 CVE-2023-4752 
    CVE-2023-4781 CVE-2023-4733 CVE-2023-4750 CVE-2023-5344 CVE-2023-5441 CVE-2023-5535


author: Yi Lin <nilusyi@tencent.com> - 9.0.2092-2
changelog:
  - fixed CVE-2023-48231 CVE-2023-48232 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 
    CVE-2023-48236 CVE-2023-48237 CVE-2023-48706 CVE-2024-22667


author: Fanjun Kong <fanjunkong@tencent.com> - 21.1.8-3
changelog:
  - Fix CVE:
  - CVE-2023-6478
  - CVE-2023-5367
  - CVE-2023-5380
  - CVE-2023-6816
  - CVE-2024-0229
  - CVE-2024-21885
  - CVE-2024-21886
  - CVE-2024-0408
  - CVE-2024-0409


author: Zhao Zhen <jeremiazhao@tencent.com> - 23.1.2-3
changelog:
  - fixed CVE-2023-5367.patch CVE-2024-21885.patch CVE-2024-21886.patch CVE-2024-0408.patch
  - CVE-2024-0409.patch CVE-2024-0229.patch CVE-2023-6816.patch CVE-2023-6377.patch
  - CVE-2024-31080.patch CVE-2024-31081.patch


