# changelog

author: dorsoli <dorsoli@tencent.com> - 1.16.0-1
changelog:
  - [Type] sync 
  - [DESC] update to Version 1.16.0 to fix CVE-2025-8283 which requires aardvark-dns version >= netavark version


author: Sinong Chen <costinchen@tencent.com> - 0.18.6-4
changelog:
  - [Type] security
  - [DESC] Escape control characters in report and log output (CVE-2025-54389), and
  - fix null pointer dereference after reading incorrectly encoded xattr attributes
  - from database (CVE-2025-54409)


author: Yi Lin <nilusyi@tencent.com> - 20240811-1
changelog:
  - bump to 20240811, fix CVE-2023-31315
  - qcom: update path for video firmware for vpu-1/2/3.0
  - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642
  - rtw89: 8852c: add fw format-1 v0.27.97.0
  - rtw89: 8852bt: add firmware 0.29.91.0
  - amdgpu: A lot of firmware updates
  - mediatek: Update mt8195 SOF firmware
  - xe: First GuC release v70.29.2 for BMG
  - xe: Add GuC v70.29.2 for LNL
  - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL
  - i915: Update MTL DMC v2.22, MTL GSC to v102.0.10.1878
  - xe: Add BMG HuC 8.2.10, GSC 104.0.0.1161 for LNL, LNL HuC 9.4.13
  - i915: update DG2 HuC to v7.10.16
  - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641
  - update firmware for MT7921/MT7922 WiFi device
  - update firmware for mediatek bluetooth chip (MT7921/MT7922)
  - iwlwifi: add gl FW for core89-58 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release
  - mediatek: Update mt8195 SOF firmware and sof-tplg
  - ASoC: tas2781: fix the license issue for tas781 firmware
  - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008
  - i915: Update Xe2LPD DMC to v2.21
  - qcom: move signed x1e80100 signed firmware to the SoC subdir
  - qcom: add video firmware file for vpu-3.0
  - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics
  - qcom: add gpu firmwares for x1e80100 chipset
  - add firmware for qat_402xx devices
  - Update AMD cpu microcode
  - intel: avs: Add numerous sound topology files
  - Add a copy of Apache-2.0
  - intel: avs: Update AudioDSP base firmware for APL-based platforms
  - Add ISH firmware file for Intel Lunar Lake platform
  - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics
  - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41
  - amdgpu: Update ISP FW for isp v4.1.1
  - mediatek: Update MT8173 VPU firmware to v1.2.0
  - qcom: Add AIC100 firmware files
  - amlogic: Update bluetooth firmware binary
  - Various Intel Bluetooth firmware updates
  - rtl_bt: Update RTL8822C BT UART/USB firmware
  - amdgpu: update DMCUB to v0.0.222.0 for DCN314
  - iwlwifi: add ty/So/Ma firmwares for core88-87 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release
  - add new cc33xx firmware for TI cc33xx WiFi chips
  - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops


author: Yi Lin <nilusyi@tencent.com> - 20240909-1
changelog:
  - bump to 20240909, fix CVE-2023-20584/31356/31346
  - i915: Update MTL DMC v2.23
  - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops2
  - amdgpu: Revert sienna cichlid dmcub firmware update
  - iwlwifi: add Bz FW for core89-58 release
  - rtl_nic: add firmware rtl8126a-3
  - linux-firmware: update firmware for MT7921 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351
  - qcom: vpu: restore compatibility with kernels before 6.6
  - amdgpu: DMCUB updates forvarious AMDGPU ASICs
  - rtw89: 8922a: add fw format-1 v0.35.41.0	Chin
  - linux-firmware: update firmware for MT7925 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7925)
  - rtl_bt: Add firmware and config files for RTL8922A
  - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part
  - rtl_bt: de-dupe identical config.bin files
  - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin
  - linux-firmware: Update AMD SEV firmware
  - linux-firmware: update firmware for MT7996
  - Revert "i915: Update MTL DMC v2.22"
  - ath12k: WCN7850 hw2.0: update board-2.bin
  - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ...
  - ath11k: WCN6855 hw2.0: update board-2.bin
  - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE...
  - ath11k: QCA2066 hw2.1: add board-2.bin
  - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1
  - qcom: vpu: add video firmware for sa8775p
  - amdgpu: DMCUB updates for various AMDGPU ASICs


author: Tracker Robot <trackbot@opencloudos.tech> - 20250917-2
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] 3baa8edc3517e2295199266b2e363989b325bd58.patch: qcom: vpu: update video firmware binary for SM8550


author: Tracker Robot <trackbot@opencloudos.tech> - 1.7.5-3
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] f8e45525c7f945f8b53510d1ee1768c4381b2da7.patch: Merged r1920432 from trunk:
  - [Unknown] 191479a91b47cbe367113132355f514f72115c57.patch: On 1.7.x branch: Merge revision r1920350 from trunk:
  - [Bug Fix] 6a2993b9493bff7b6b20858730cba16a218e46b1.patch: Merge r1920680 from trunk:


author: Tracker Robot <trackbot@opencloudos.tech> - 1.4.3-6
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Feature Add/Remove] configure: drop user-nsswitch.conf support
  - [Bug Fix] profiles: merge groups records with [SUCCESS=merge]


author: Tracker Robot <trackbot@opencloudos.tech> - 1.4.3-7
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] ddad860e11087ab21d5533f31c2da89f8200dd58.patch: configure: fix typo


author: Xiaojie Chen <jackxjchen@tencent.com> - 5.2-3
changelog:
  - fix crash with unset arrays in arithmetic contexts
  - fix crash in readline when started with an invalid locale specification


author: Doris Chao <doriscchao@tencent.com> - 5.2.15-3
changelog:
  - [Type] other
  - [DESC] Define NON_INTERACTIVE_LOGIN_SHELLS config to run the
  - login shell startup files if argv[0][0] == '-'


author: doupengda <doupengda@loongson.cn> - 0.29.1-6
changelog:
  - [Type] bugfix
  - [DESC] fix larchintrin.h not found error for loongarch64
  - Sourced from https://github.com/iovisor/bcc/pull/5078


author: Xin Cheng <denisecheng@tencent.com> - 9.18.18-4
changelog:
  - fix CVE-2023-4408: Parsing large DNS messages may cause excessive CPU load
  - fix CVE-2023-5517: Querying RFC 1918 reverse zones may cause an assertion failure when "nxdomain-redirect" is enabled
  - fix CVE-2023-5679: Enabling both DNS64 and serve-stale may cause an assertion failure during recursive resolution
  - fix CVE-2023-6516: Specific recursive query patterns may lead to an out-of-memory condition
  - fix CVE-2023-50387: KeyTrap - Extreme CPU consumption in DNSSEC validator
  - fix CVE-2023-50868: Preparing an NSEC3 closest encloser proof can exhaust CPU resources


author: Upgrade Robot <upbot@opencloudos.tech> - 9.18.21-1
changelog:
  - [Type] security
  - [DESC] Upgrade to version 9.18.21 and fix CVE-2024-0760,CVE-2024-1737,CVE-2024-1975,CVE-2024-4076


author: Tracker Robot <trackbot@opencloudos.tech> - 2.41-13
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] baac6c221e9d69335bf41366a1c7d87d8ab2f893.patch: PR32560 stack-buffer-overflow at objdump disassemble_bytes


author: Zhao Zhen <jeremiazhao@tencent.com> - 2.41-21
changelog:
  - [TYPE] security
  - [DESC] fixed CVE-2025-11494 CVE-2025-11414 CVE-2025-11412
  - CVE-2025-11413 CVE-2025-11840


author: Zhao Zhen <jeremiazhao@tencent.com> - 1.80-1
changelog:
  - updated to upstream 1.80
  - fixed CVE-2023-33201 CVE-2024-34447 CVE-2024-30171
  - rewrite building script


author: Jianping Liu <frankjpliu@tencent.com> - 6.6.64-18
changelog:
  - Merge linux-6.6.64 into TK5 release branch
  - Linux 6.6.64
  - Merge OCK linux-6.6/devel branch into TK5 release branch
  - !285 [linux-6.6] LoongArch: Revert "drm/loongson: disable loongson drm driver by default for LS7A2000"
  - Revert "drm/loongson: disable loongson drm driver by default for LS7A2000"
  - !284 [linux-6.6/devel] drm: loongson: Always build Loongson DRM drivers Merge pull request !284 from Ming Wang/linux-6.6/devel
  - drm: loongson: Always build Loongson DRM drivers
  - !282 [devel-6.6] linkdata: ps3stor compilation optimization Merge pull request !282 from liujie_answer/linux-6.6/devel
  - scsi: linkdata ps3stor compilation optimization category: feature
  - !280 [linux6.6-devel] LoongArch: backport ptw&set_pte patches from upstream Merge pull request !280 from Ming Wang/backport
  - LoongArch: Set initial pte entry with PAGE_GLOBAL for kernel space
  - LoongArch: Improve hardware page table walker
  - LoongArch: Use accessors to page table entries instead of direct dereference
  - LoongArch: Remove superfluous flush_dcache_page() definition
  - !281 [linux-6.6/devel] LoongArch: drm/loongson: disable loongson drm driver by default for LS7A2000 Merge pull request !281 from Ming Wang/drm
  - drm/loongson: disable loongson drm driver by default for LS7A2000
  - !279 [linux-6.6/devel] Makefile: Use `filter` for dist Makefile inclusion condition Merge pull request !279 from Ming Wang/dist-style
  - Makefile: Use `filter` for dist Makefile inclusion condition
  - !278 [linux-6.6/devel] loongarch:  Enables the Advanced Extended Interrupt Controllers (AVEC) functionality in multi-node 3C6000 systems and fix irq issue.
  - irq-loongarch-avec.c: Enables the Advanced Extended Interrupt Controllers (AVEC) functionality in multi-node 3C6000 systems.
  - drivers/irqchip: Disable pci_irq_limit when using avec interrupt controller
  - !277 Intel pstate backport from6.11 Merge pull request !277 from jiayingbao/intel_pstate_backport_from6.11
  - !276 Tpmi based drivers backport from 6.11 Merge pull request !276 from jiayingbao/tpmi_based_drivers_backport_from6.11
  - !274 [devel-6.6] linkdata: add ps3stor driver support Merge pull request !274 from liujie_answer/linux-6.6/devel
  - scsi: add support for linkdata HBA/RAID Controller driver category: feature
  - !273 [linux-6.6/devel] perf/x86/zhaoxin/uncore: fix pci_driver conflict issue Merge pull request
  - perf/x86/zhaoxin/uncore: fix pci_driver conflict issue
  - Merge branch 'leonylgao/check_kconfig' into 'release' (merge request !265)
  - configs: check whether TencentOS Kennel configs is compliant
  - Merge branch 'leonylgao/check_kapi' into 'release' (merge request !264)
  - kapi: check whether TencentOS Kernel KAPI is compliant
  - tkernel: support check the compliance of KAPI
  - Merge branch 'alexyonghe/reparent_memcg' into 'release' (merge request !267)
  - mm: Reparent page cache to parent memory cgroup
  - Merge branch 'aurelianliu/origin/master_CVE-2024-49885' into 'release' (merge request !218)
  - mm, slub: avoid zeroing kmalloc redzone
  - Merge branch 'leonylgao/check_kabi' into 'release' (merge request !266)
  - kabi: use pr_xxx to print colors
  - Merge branch 'cunhuang/6.6-release/CONFIG_SCSI_HISI_SAS' into 'release' (merge request !259)
  - config: arm64: SCSI_HISI_SAS=m
  - Merge branch 'costinchen/dim' into 'release' (merge request !262)
  - dim: optimized dim logging for dynamic measurements
  - drivers,3snic: support incremental compilation
  - Merge branch 'katrinzhou/smc_module' into 'release' (merge request !261)
  - smc: Enable smc as module


author: Jianping Liu <frankjpliu@tencent.com> - 6.6.68-20
changelog:
  - emm: update emm to v0.1.7.5
  - Merge branch 'frankjpliu/release-mr-ock' into 'release' (merge request !282)
  - Merge OCK linux-6.6/devel branch into TK5 release branch
  - !299 Enhanced Hygon processor's processing capabilities for large memory copying
  - [6.6][feat]Hygon: Enhanced Hygon processor's processing capabilities for large memory copying.
  - !298 Fix some known issues related to the LoongArch architecture
  - net: stmmac: dwmac-loongson: Fix slow MAC DMA reset
  - LoongArch: eiointc: Fix external interrupt routing errors
  - i2c: ls2x: Fix incorrect frequency register configuration causing functional issues
  - loongarch: Modularize Loongson DRM driver (CONFIG_DRM_LOONGSON=m)
  - pci/quirks: ls7a2000: fix pm transition of devices under pcie port
  - !297 Add CPU hardware monitoring platform driver and ACPI firmware support for Loongson SE driver
  - LoongArch: Adjust calculation method for the number of CPU packages
  - drivers/char: add ACPI firmware support for Loongson SE driver
  - LoongArch: Add CPU HWMon platform driver
  - Merge branch 'frankjpliu/release-mr-stable' into 'release' (merge request !281)
  - Merge linux 6.6.68 into TK5 release branch
  - Linux 6.6.68
  - Merge linux 6.6.67 into TK5 release branch
  - Linux 6.6.67
  - Merge linux 6.6.66 into release branch
  - Linux 6.6.66
  - Merge linux 6.6.65 into release branch
  - Linux 6.6.65
  - Merge branch 'frankjpliu/release-mr-ock' into 'release' (merge request !280)
  - !296 Fixed multiple vfio devices not working properly
  - driver/iommu: Fixed multiple vfio devices not working properly
  - !295 Hygon: kernel startup hash verification and secret injection for CSV3
  - KVM: SVM: CSV: Support inject secret to Hygon CSV3 guest
  - KVM: SVM: CSV: Support issue non-4K aligned CSV3_CMD_LAUNCH_ENCRYPT_DATA and more than once
  - KVM: SVM: CSV: Provide KVM_CSV3_SET_GUEST_PRIVATE_MEMORY ioctl interface
  - KVM: SVM: CSV: Provide KVM_CAP_HYGON_COCO_EXT interface
  - crypto: ccp: Provide csv_get_extension_info() to present extensions of newer CSV firmware
  - KVM: SVM: CSV: Ensure all the GPRs and some non-GPRs are synced before LAUNCH_ENCRYPT_VMCB
  - crypto: ccp: Get api version again when update Hygon CSV firmware at runtime
  - KVM: SVM: CSV: Fix the vm_size even if CSV3 feature is unsupported on Hygon CPUs
  - !294 Hygon: Add remote authentication support for Hygon CSV3 virtual machines
  - virt/csv-guest: Provide interface for request of CSV3 attestation report
  - x86/csv: Add support for CSV3 ATTESTATION secure call
  - x86/csv: Define ATTESTATION secure call command
  - !293 Hygon: Fix regressions on CSV2 live migration, CSV3 boot, CSV3 live migration
  - KVM: SVM: CSV: Explicitly enable LBR Virtualization after succeed to RECEIVE_ENCRYPT_CONTEXT
  - KVM: SVM: CSV: Explicitly enable LBR Virtualization after succeed to LAUNCH_ENCRYPT_VMCB
  - KVM: SVM: CSV: Explicitly enable LBR Virtualization after succeed to RECEIVE_UPDATE_VMSA
  - !286 Intel RDT monitoring support on Sub-NUMA Cluster (SNC) enabled systems
  - x86/resctrl: Fix arch_mbm_* array overrun on SNC
  - x86/resctrl: Update documentation with Sub-NUMA cluster changes
  - x86/resctrl: Detect Sub-NUMA Cluster (SNC) mode
  - x86/resctrl: Enable shared RMID mode on Sub-NUMA Cluster (SNC) systems
  - x86/resctrl: Make __mon_event_count() handle sum domains
  - x86/resctrl: Fill out rmid_read structure for smp_call*() to read a counter
  - x86/resctrl: Handle removing directories in Sub-NUMA Cluster (SNC) mode
  - x86/resctrl: Create Sub-NUMA Cluster (SNC) monitor files
  - x86/resctrl: Allocate a new field in union mon_data_bits
  - x86/resctrl: Refactor mkdir_mondata_subdir() with a helper function
  - x86/resctrl: Initialize on-stack struct rmid_read instances
  - x86/resctrl: Add a new field to struct rmid_read for summation of domains
  - x86/resctrl: Prepare for new Sub-NUMA Cluster (SNC) monitor files
  - x86/resctrl: Block use of mba_MBps mount option on Sub-NUMA Cluster (SNC) systems
  - x86/resctrl: Introduce snc_nodes_per_l3_cache
  - x86/resctrl: Add node-scope to the options for feature scope
  - x86/resctrl: Split the rdt_domain and rdt_hw_domain structures
  - x86/resctrl: Prepare for different scope for control/monitor operations
  - x86/resctrl: Prepare to split rdt_domain structure
  - x86/resctrl: Prepare for new domain scope
  - x86/resctrl: Replace open coded cacheinfo searches
  - cacheinfo: Add function to get cacheinfo for a given CPU and cache level
  - cpu: Drop "extern" from function declarations in cpuhplock.h
  - cpu: Move CPU hotplug function declarations into their own header
  - x86/resctrl: Don't try to free nonexistent RMIDs
  - x86/resctrl: Add tracepoint for llc_occupancy tracking
  - x86/resctrl: Rename pseudo_lock_event.h to trace.h
  - x86/resctrl: Simplify call convention for MSR update functions
  - x86/resctrl: Pass domain to target CPU
  - x86/resctrl: Fix uninitialized memory read when last CPU of domain goes offline
  - Documentation/x86: Document that resctrl bandwidth control units are MiB
  - x86/resctrl: Remove lockdep annotation that triggers false positive
  - x86/resctrl: Separate arch and fs resctrl locks
  - x86/resctrl: Move domain helper migration into resctrl_offline_cpu()
  - x86/resctrl: Add CPU offline callback for resctrl work
  - x86/resctrl: Allow overflow/limbo handlers to be scheduled on any-but CPU
  - x86/resctrl: Add CPU online callback for resctrl work
  - x86/resctrl: Add helpers for system wide mon/alloc capable
  - x86/resctrl: Make rdt_enable_key the arch's decision to switch
  - x86/resctrl: Move alloc/mon static keys into helpers
  - x86/resctrl: Make resctrl_mounted checks explicit
  - x86/resctrl: Allow arch to allocate memory needed in resctrl_arch_rmid_read()
  - x86/resctrl: Allow resctrl_arch_rmid_read() to sleep
  - x86/resctrl: Queue mon_event_read() instead of sending an IPI
  - x86/resctrl: Add cpumask_any_housekeeping() for limbo/overflow
  - x86/resctrl: Move CLOSID/RMID matching and setting to use helpers
  - x86/resctrl: Allocate the cleanest CLOSID by searching closid_num_dirty_rmid
  - x86/resctrl: Use __set_bit()/__clear_bit() instead of open coding
  - x86/resctrl: Track the number of dirty RMID a CLOSID has
  - x86/resctrl: Allow RMID allocation to be scoped by CLOSID
  - x86/resctrl: Access per-rmid structures by index
  - x86/resctrl: Track the closid with the rmid
  - x86/resctrl: Move RMID allocation out of mkdir_rdt_prepare()
  - x86/resctrl: Create helper for RMID allocation and mondata dir creation
  - x86/resctrl: Free rmid_ptrs from resctrl_exit()
  - tick/nohz: Move tick_nohz_full_mask declaration outside the #ifdef
  - x86/resctrl: Remove redundant variable in mbm_config_write_domain()
  - x86/resctrl: Fix unused variable warning in cache_alloc_hsw_probe()
  - x86/resctrl: Display RMID of resource group
  - x86/resctrl: Add support for the files of MON groups only
  - x86/resctrl: Display CLOSID for resource group
  - x86/resctrl: Introduce "-o debug" mount option
  - x86/resctrl: Move default group file creation to mount
  - x86/resctrl: Unwind properly from rdt_enable_ctx()
  - x86/resctrl: Rename rftype flags for consistency
  - x86/resctrl: Simplify rftype flag definitions
  - x86/resctrl: Add multiple tasks to the resctrl group at once
  - x86/resctrl: Fix remaining kernel-doc warnings
  - !290 drivers: ethernet: Add motorcomm yt6801 support
  - drivers: ethernet: Add motorcomm yt6801 support
  - !291 Fix extioi restart issue in vm
  - arch/loongarch/kvm: Fix extioi restart issue
  - Merge branch 'korantli/release-cve' into 'release' (merge request !279)
  - drm/amd/display: Check denominator crb_pipes before used
  - Merge branch 'frankjpliu/release-cves' into 'release' (merge request !274)
  - net: napi: Prevent overflow of napi_defer_hard_irqs
  - x86/mm/ident_map: Use gbpages only where full GB page should be mapped.


author: Jianping Liu <frankjpliu@tencent.com> - 6.6.69-21
changelog:
  - Merge branch OCK linux-6.6/devel branch into TK5 release branch
  - !305 [linux-6.6/devel][bugfix]: LoongArch: set CONFIG_CMA_SIZE_MBYTES to 0
  - LoongArch: set CONFIG_CMA_SIZE_MBYTES to 0
  - !303 perf/x86/uncore: Add DF PMU support for Hygon family 18h model 4-7h and 10h
  - perf/x86/uncore: Add DF PMU support for Hygon family 18h model 4-7h and 10h
  - Merge branch 'paulning/tk5-mglru-pclimit' into 'release' (merge request !277)
  - rue/mm: support for sysctl pagecache_limit_ignore_slab when mglru enabled.
  - rue/mm: support for pagecache_limit_ignore_dirty when mglru enabled.
  - rue/mm: global pagecache limit support when mglru enabled.
  - rue/mm: check page_max in mem_cgroup_shrink_pagecache
  - rue/mm: pagecache limit feature for memcg when mglru enabled
  - Merge branch 'likexu/kvm/fixes' into 'release' (merge request !283)
  - tools headers: Sync x86 kvm and cpufeature headers with the kernel
  - KVM: SVM: Allow guest writes to set MSR_AMD64_DE_CFG bits
  - KVM: x86: Remove ordering check b/w MSR_PLATFORM_INFO and MISC_FEATURES_ENABLES
  - KVM: x86: Reject userspace attempts to access ARCH_CAPABILITIES w/o support
  - KVM: VMX: Remove restriction that PMU version > 0 for PERF_CAPABILITIES
  - KVM: x86: Reject userspace attempts to access PERF_CAPABILITIES w/o PDCM
  - KVM: x86: Quirk initialization of feature MSRs to KVM's max configuration
  - KVM: x86: Disallow changing MSR_PLATFORM_INFO after vCPU has run
  - KVM: x86: Co-locate initialization of feature MSRs in kvm_arch_vcpu_create()
  - KVM: x86: Suppress userspace access failures on unsupported, "emulated" MSRs
  - KVM: x86: Suppress failures on userspace access to advertised, unsupported MSRs
  - KVM: x86: Hoist x86.c's global msr_* variables up above kvm_do_msr_access()
  - KVM: x86: Funnel all fancy MSR return value handling into a common helper
  - KVM: x86: Refactor kvm_get_feature_msr() to avoid struct kvm_msr_entry
  - KVM: x86: Rename get_msr_feature() APIs to get_feature_msr()
  - KVM: x86: Refactor kvm_x86_ops.get_msr_feature() to avoid kvm_msr_entry
  - KVM: x86: Rename KVM_MSR_RET_INVALID to KVM_MSR_RET_UNSUPPORTED
  - KVM: x86: Move MSR_TYPE_{R,W,RW} values from VMX to x86, as enums
  - KVM: SVM: Disallow guest from changing userspace's MSR_AMD64_DE_CFG value
  - Merge branch 'katrinzhou/release-fix-errno' into 'release' (merge request !285)
  - KEYS: include header for EINVAL definition
  - rue/io: check blkcg exist before doing account cgroup IO
  - configs: update std-configs-list
  - config,loongarch: delete the duplicate configuration of CONFIG_DRM_LOONGSON
  - config: keep with wangxinban
  - Merge linux 6.6.69 into TK5 release branch
  - Linux 6.6.69
  - !300 net: yt6801: Fix NULL pointer dereference in fxgmac_map_tx_skb
  - net: yt6801: Fix NULL pointer dereference in fxgmac_map_tx_skb


author: Jianping Liu <frankjpliu@tencent.com> - 6.6.70-22
changelog:
  - Merge branch 'paulning/tk5-mglru-pclimit' into 'release' (merge request !297)
  - rue/mm: fix a line of code to comply with coding standards
  - Merge branch 'frankjpliu/release-mr-stable' into 'release' (merge request !295)
  - drivers,linkdata: fix tkci compile error after merge OCK linux-6.6/devel
  - Merge branch 'frankjpliu/release-mr-stable' into 'release' (merge request !294)
  - Merge branch OCK linux-6.6/devel branch into TK5 release branch
  - !301 linkdata: Add support for sxe/sxevf Controller driver in 6.6 kernel
  - fix compile error when using allyesconfig config
  - Add support for sxe/sxevf Controller driver in 6.6 kernel
  - Merge branch 'frankjpliu/release-mr-stable' into 'release' (merge request !292)
  - Merge linux 6.6.70 into TK5 release branch
  - Linux 6.6.70


author: Jianping Liu <frankjpliu@tencent.com> - 6.6.70-23
changelog:
  - emm: update emm to v0.1.7.6
  - Merge branch 'cunhuang/arm64-mlnx-BuildRequires' into 'release' (merge request !315)
  - dist: fix BuildRequires for mlnx commercial-grade driver
  - Merge branch 'cunhuang/pick-v6.6.71_kdump' into 'release' (merge request !314)
  - x86/hyperv: Fix hv tsc page based sched_clock for hibernation
  - Revert "x86, crash: wrap crash dumping code into crash related ifdefs"
  - Revert "x86/hyperv: Fix hv tsc page based sched_clock for hibernation"
  - dist: fix the method of arch judge
  - dist: compile mlnx commercial-grade driver only on x86 and arm64
  - Merge branch 'cunhuang/kabi-vermagic-match-release' into 'release' (merge request !300)
  - kabi: modules: vermagic check match to release number
  - Merge branch 'aurelianliu/release_1030' into 'release' (merge request !298)
  - ACPI: PRM: Remove unnecessary strict handler address checks
  - Merge OCK linux-6.6/devel branch into TK5 release branch
  - !306 Hygon: sync upstream bugfix patch for LRU and revert the workaround patch
  - Revert "mm/gup: don't check if a page is in lru before draining it"
  - mm: vmscan.c: fix OOM on swap stress test
  - mm/gup: clear the LRU flag of a page before adding to LRU batch
  - Revert "mm/page_alloc: don't use PCP list for THP-sized allocations when using PF_MEMALLOC_PIN"
  - dist: delete inner url for some reason
  - dist: change OC kernel URL discription


author: Jianping Liu <frankjpliu@tencent.com> - 6.6.80-26
changelog:
  - Merge linux-6.6.80 into TK5 release branch
  - Linux 6.6.80
  - Merge branch 'haisu/release-fix-cgroupfs' into 'release' (merge request !350)
  - rue/cgroupfs: use effective_cpus to replace cpus_allowed
  - rue/cgroupfs: show 2 cores when quota=1 and cpuset>1
  - rue/cgroupfs: align the CPU quota_aware and cpuset show
  - rue/cgroupfs: simplify the cgroupfs_cpu_dir_filter function
  - rue/cgroupfs: rename cpu_subdir_xxx to cfs_subdir_xxx
  - rue/cgroupfs: remove the unnecessary cgroupfs_dentry_simple_ops
  - rue/cgroupfs: cpu/online show the same result of cpuset instead of number
  - fs: cgroup: fix compile errors on allyesconfig
  - cgroupfs: get data from ancestor cgroup
  - cgroupfs: add role in cgroup
  - Merge branch 'linuszeng/local_counter' into 'release' (merge request !352)
  - mm/memcontrol: add fields to memory.stat of cgroupv2
  - Merge branch 'likexu/kvm/fixes' into 'release' (merge request !344)
  - KVM: x86: Drop the now unused KVM_X86_DISABLE_VALID_EXITS
  - KVM: x86: Reject disabling of MWAIT/HLT interception when not allowed
  - KVM: x86: Disallow KVM_CAP_X86_DISABLE_EXITS after vCPU creation
  - KVM: x86: Drop now-redundant MAXPHYADDR and GPA rsvd bits from vCPU creation
  - KVM: x86/pmu: Drop now-redundant refresh() during init()
  - KVM: x86: Move __kvm_is_valid_cr4() definition to x86.h
  - KVM: x86: Account for KVM-reserved CR4 bits when passing through CR4 on VMX
  - KVM: x86: Explicitly do runtime CPUID updates "after" initial setup
  - KVM: x86: Do all post-set CPUID processing during vCPU creation
  - KVM: x86: Limit use of F() and SF() to kvm_cpu_cap_{mask,init_kvm_defined}()
  - KVM: x86: Use feature_bit() to clear CONSTANT_TSC when emulating CPUID
  - KVM: nVMX: fix canonical check of vmcs12 HOST_RIP
  - KVM: x86: model canonical checks more precisely
  - KVM: x86: Add X86EMUL_F_MSR and X86EMUL_F_DT_LOAD to aid canonical checks
  - KVM: x86: Route non-canonical checks in emulator through emulate_ops
  - KVM: x86: drop x86.h include from cpuid.h
  - Merge branch 'frankjpliu/release-mr-ock' into 'release' (merge request !353)
  - Merge OCK linux-6.6/devel branch into TK5 release branch
  - !320 [linux-6.6/devel][[bugfix] LoongArch: Correct Cache Sharing, Update Flush Policy, HDA and Bluetooth Fixes
  - blutetooth/btusb: delay 1ms while suspending
  - LoongArch: Correct the cacheinfo sharing information
  - hda/pci: Add AZX_DCAPS_NO_TCSEL flag for Loongson HDA devices
  - LoongArch: Update the flush cache policy
  - !319 [linux-6.6/devel] LoongArch: Update Loongson-3 default config file
  - LoongArch: Update Loongson-3 default config file
  - !315 Backport upstream auto-tune per-CPU pageset size patchset
  - mm and cache_info: remove unnecessary CPU cache info update
  - mm, pcp: reduce detecting time of consecutive high order page freeing
  - mm, pcp: decrease PCP high if free pages < high watermark
  - mm: tune PCP high automatically
  - mm: add framework for PCP high auto-tuning
  - mm, page_alloc: scale the number of pages that are batch allocated
  - mm, pcp: reduce lock contention for draining high-order pages
  - cacheinfo: calculate size of per-CPU data cache slice
  - mm, pcp: avoid to drain PCP when process exit
  - tkernel: support kill protect feature
  - Merge branch 'costinchen/release' into 'release' (merge request !345)
  - dim: fix memory allocation size in store_task_pids()
  - integrity: Add a boot parameter to explicitly enable integrity subsystems
  - dist,copy-drivers: exit 1 if download driver fail
  - Merge linux 6.6.79 into TK5 release branch
  - Linux 6.6.79
  - Merge OCK linux-6.6/devel branch into TK5 release branch
  - !314 [linux-6.6/devel]  Some eevdf scheduling enhancements from upstream
  - sched/eevdf: O(1) fastpath for task selection
  - sched/eevdf: Sort the rbtree by virtual deadline
  - !313 Add support for Hygon model 8h processor Merge pull request !313 from fuhao/linux-6.6-hygon-model8h
  - EDAC/amd64: Add support for Hygon family 18h model 8h
  - x86/amd_nb: Add support for Hygon family 18h model 8h
  - !311 [linux-6.6/devel]montage: update Mont-TSSE driver update Montage Mont-TSSE driver from 1.0.0 to 1.1.2 in 6.6.
  - montage: update Mont-TSSE driver
  - dist: check mlnx driver sha256sum before copy it
  - Merge branch linux-6.6.78 into TK5 release branch
  - Linux 6.6.78
  - Merge linux 6.6.77 into TK5 release branch
  - Linux 6.6.77
  - !310 Some fixes and optimization for Hygon model 7h10h processors
  - perf/x86/amd/core: Fix performance monitor for Hygon family 18h processor
  - EDAC/amd64: Get instance_id for Hygon family 18h model 10h
  - EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
  - EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
  - EDAC/amd64: Adjust address translation for Hygon family 18h model 10h
  - x86/amd_nb: Add helper function to identify Hygon family 18h model 10h
  - iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
  - EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
  - !309 Some fixes and optimization for Hygon model 4h~6h processors
  - EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
  - EDAC/amd64: Fix the calculation of instance_id for Hygon family 18h model 6h
  - EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
  - EDAC/amd64: Fix the calculation of cs_id for Hygon family 18h model 4h
  - x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
  - KVM: x86/svm: Add set_guest_pat_wb parameter for non-passthrough application scenarios
  - pinctrl: Add device HID for Hygon GPIO controller
  - !307 [linux-6.6/devel] Intel: backport KVM Fix for Clearing SGX EDECCSSA to 6.6
  - KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
  - Merge branch 'alexyonghe/reparent_memcg' into 'release' (merge request !338)
  - selftests: cgroup: Add memory.reparent_file test case
  - mm: Drop memory cgroup css reference when reparent page cache
  - Merge branch 'haisu/rue-compile-loongarch-fix' into 'release' (merge request !335)
  - rue/io: enable CONFIG_BLK_DEV_THROTTLING_CGROUP_V1 in loongarch
  - Merge linux 6.6.76 into TK5 release branch
  - Linux 6.6.76
  - Merge linux 6.6.75 into TK5 release branch
  - Linux 6.6.75
  - Merge linux 6.6.74 into TK5 release branch
  - Linux 6.6.74
  - Merge linux 6.6.73 into TK5 release
  - Linux 6.6.73
  - Merge linux 6.6.72 into TK5 release
  - Linux 6.6.72
  - Merge linux 6.6.71 into TK5 release
  - Linux 6.6.71


author: Jianping Liu <frankjpliu@tencent.com> - 6.6.80-27
changelog:
  - Merge OCK linux-6.6/devel branch into TK5 release branch
  - !331 [linux-6.6/devel][bugfix]: LoongArch: config: enable pci host controller fdt driver
  - LoongArch: config: enable pci host controller fdt driver
  - dist: only generate kernel-source rpm when build x86_64
  - Merge branch 'honglin/release' into 'release' (merge request !369)
  - rue/net: fix the association between sock and cgroup
  - Merge branch 'aurelianliu/release_0305' into 'release' (merge request !359)
  - epoll: introduce min_wait_time
  - dist: do not build kernel-source rpm in debug version
  - Merge branch OCK linux-6.6/devel into TK5 release branch
  - !327 added source subpackage for dist/rpm scripts
  - added source subpackage for dist/rpm scripts
  - !330 [linux-6.6/devel][bugfix]: LoongArch: Disable CONFIG_RT_GROUP_SCHED to prevent cgroup2 issues
  - LoongArch: Disable CONFIG_RT_GROUP_SCHED to prevent cgroup2 issues
  - !326 Backport PRM update and bugfixes up to v6.14
  - ACPI: PRM: Add PRM handler direct call support
  - ACPI: PRM: Annotate struct prm_module_info with __counted_by
  - !325 [Intel-SIG] Backport SierreForest MAXPHYSADDR support
  - KVM: selftests: x86: Prioritize getting max_gfn from GuestPhysBits
  - KVM: x86: Advertise max mappable GPA in CPUID.0x80000008.GuestPhysBits
  - !323 [Intel-SIG] 6.6: x86/cpu: KVM: Advertise CPUIDs for new instructions in Clearwater Forest (CWF)
  - x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
  - dist: take turns to download mlnx packages from two URLs
  - emm: add empty emm kernel module
  - emm: Remove submodule emm
  - Merge branch 'cunhuang/hinic_update' into 'release' (merge request !364)
  - net/hinic: Fix several compilation warnings with aarch64-openEuler-linux toolchain
  - net/hinic: Update Huawei Intelligent Network Card Driver: hinic
  - Revert "net: hinic: Fix cleanup in create_rxqs/txqs()"
  - Merge branch 'haisu/release-cgroupfs-remove-burst' into 'release' (merge request !362)
  - rue/cgroupfs: support quota_aware to /proc/stat
  - rue/cgroupfs: remove the CPU burst field


author: Pengda Dou <doupengda@loongson.cn> - 0.19.1-6
changelog:
  - [Type] other
  - [DESC] add support for loongarch64
  - Fix cannot convert 'bfd*' to 'bfd_architecture'


author: rockerzhu <rockerzhu@tencent.com> - 3.7.1-10
changelog:
  - [Type] Security
  - [Desc] Fix CVE-2025-5914 and CVE-2025-5915 and and CVE-2025-5916 and CVE-2025-5917 and CVE-2025-5918.


author: jackeyji <jackeyji@tencent.com> - 1.37.5-1
changelog:
  - [Type] security
  - [DESC] upgrade to 1.37.5 to fix CVE-2024-9341 CVE-2024-9407 CVE-2024-9675 and CVE-2024-9676


author: wynnfeng <wynnfeng@tencent.com> - 2023.2.60-1
changelog:
  - Update to CKBI 2.60 from NSS 3.86
  -    Removing:
  -     # Certificate "Camerfirma Global Chambersign Root"
  -     # Certificate "Staat der Nederlanden EV Root CA"
  -    Adding:
  -     # Certificate "DigiCert TLS ECC P384 Root G5"
  -     # Certificate "DigiCert TLS RSA4096 Root G5"
  -     # Certificate "DigiCert SMIME ECC P384 Root G5"
  -     # Certificate "DigiCert SMIME RSA4096 Root G5"
  -     # Certificate "Certainly Root R1"
  -     # Certificate "Certainly Root E1"
  -     # Certificate "E-Tugra Global Root CA RSA v3"
  -     # Certificate "E-Tugra Global Root CA ECC v3"
  -     # Certificate "DIGITALSIGN GLOBAL ROOT RSA CA"
  -     # Certificate "DIGITALSIGN GLOBAL ROOT ECDSA CA"
  -     # Certificate "Global Chambersign Root"


author: Wang Guodong <gordonwwang@tencent.com> - 1.84.1-1
changelog:
  - Upgrade to 1.84.1
  - revert rustlibdir library
  - Fix errors for overlapping impls in incremental rebuilds


author: zhanglimin <zhanglimin@loongson.cn> - 17.0.6-9
changelog:
  - removed distro support patch via https://gitee.com/opencloudos-stream/gcc/pulls/19
  - gcc has been added x86_64-linux-gnu triple and its the primary triple,so 
  - x86_64-OpenCloudOS-linux is inactive


author: chenli <chenli@loongson.cn> - 17.0.6-11
changelog:
  - LoongArch Backport: Define psABI v2.30 relocs
  - LoongArch Backport: Fix xvshuf instructions lowering


author: Zhao Zhen <jeremiazhao@tencent.com> - 17.0.6-13
changelog:
  - From seperated components building to all-in-one llvm-projects building.
  - not included flang and polly.
  - added llvm-bolt and libcxx


author: Zhao Zhen <jeremiazhao@tencent.com> - 17.0.6-14
changelog:
  - fixed when executes "clang -rtlib=compiler-rt", clang will not
  - find the compiler-rt libraries.
  - fixed mlir-pdll-lsp-server error: debug-counter registered more
  - than once.


author: Chunsheng Luo <luffyluo@tencent.com> - 9.4-7
changelog:
  - Provide coreutils-single to more easily support smaller installations
  - Split out coreutils-common to provide common documentation


author: Zhao Zhen <jeremiazhao@tencent.com> - 12.3.1.3-1
changelog:
  - [Type] other
  - [DESC] backport LoongArch patches
  -    Fixed duplicate link errors when building libgccjit.
  -    Changed the value of branch_cost: Optimized the generation of branch-related instructions.
  -    Fixed build and test errors caused by version differences.
  -    Optimized the generation of instructions for immediate loading.
  -    Optimized the implementation of stack-check.
  -    Optimized the generation of multiplication instructions.
  -    Added support for 3A6000.
  -    Modified the library installation path.
  -    Fixed GNOME desktop startup failure.
  -    Fixed dependencies on loongarch header files.
  -    Fixed the behavior of the macro instruction .align.
  -    Fixed the vec_initv32qiv16qi template to avoid ICE errors.
  -    Optimized the use of fcmp.caf.s instead of movgr2cf for copying from the zero register.
  -    Fixed the lsx_vreplgr2vr_<lsxfmt_f> instruction template error.
  -    Fixed backend subreg nesting errors.
  -    Fixed redundant barrier instructions before LL-SC.
  -    Optimized immediate loading.
  -    Fixed runtime errors when building gcc.
  -    Fixed incorrect use of frint and ftint instructions.
  -    Changed vector usage to standard template names.
  -    Allowed S9 as an alias for the r22 register.
  -    Changed the dynamic library installation path to lib64.
  -    Fixed memory reference errors with base address 0.
  -    Added a test suite for vector instructions.
  -    Added support for Ada, libffi, libvtv, libitm on LoongArch.
  -    Added support for prefetch instructions, commonly used floating-point instructions, and [f]copysign.
  -    Added support for mcmodel=medium and extreme.
  -    Added fmin/fmax RTL backend templates.
  -    Added the -mdirect-extern-access option.
  -    Added support for libsanitizer.
  -    Added the -mexplicit-relocs option as an optional target.
  -    Implemented __builtin_thread_pointer.
  -    Added support for xorsign.
  -    Added the alslsi3_extend template.
  -    Added a D language frontend.
  -    Added TLS relocation types.
  -    Added fmin/fmax RTL templates.
  -    Added a test suite for vector instructions.
  -    Defined ISA versions.


author: Zhao Zhen <jeremiazhao@tencent.com> - 12.3.1.4-1
changelog:
  - [Type] other
  - [DESC] Improved KunPeng feature
  - Suppotred KunPeng 920 high performance processor & AI compliation optimization
  - Structure optimization 
  - Array Width comparison optimization
  - Instruction generation optimization
  - added another triple directory link in %files for fixing 12.3.1.3-3


author: Zhao Zhen <jeremiazhao@tencent.com> - 12.3.1.5-1
changelog:
  - [Type] bugfix
  - [DESC] improved feature for loongarch64 and kunpeng(aarch64).
  - [Loongarch64] 
  - Fix errors for sanitizer.
  - removed Fix-indentation-and-numbering-errors.patch as it has been
  - merged into 12.3.1.5.
  - [kunpeng]
  - updateAImodel-addHip12CoreAndDef-bugfixResetMachineOpt-bugfixFortran.
  - Add-insn-defs-and-correct-costs-for-cmlt-generation.
  - Non-loop-disambiguation-CHREC-multiplication.
  - SLP_transpose.
  - Struct-static-field-compression.


author: Zhao Zhen <jeremiazhao@tencent.com> - 12.3.1.5-3
changelog:
  - [Type] bugfix
  - [DESC] fixed GNU TRIPLE conflict with cross toolchains, issue link:
  - https://gitee.com/opencloudos-stream/gcc/issues/ICUFG9?from=project-issue
  - fixed some static link libraries conflict, issue link:
  - https://gitee.com/opencloudos-stream/gcc/issues/ICUFGB?from=project-issue


author: Shuo Wang <abushwang@tencent.com> - 2.4.6-8
changelog:
  - fix CVE-2025-58060 CVE-2025-58364
  - cupsd: Block authentication using alternate method
  - fix remote DoS via null dereference


author: Miaojun Dong <zoedong@tencent.com> - 8.4.0-6
changelog:
  - Rebuilt for loongarch release
  - Add BR glibc-langpack-en for testing, since it was separated from
    glibc-common


author: Tracker Robot <trackbot@opencloudos.tech> - 35-5
changelog:
  - Apply patches from rpm-tracker
  - [Bug Fix] 4fa73fd2dc8429ff0fbbda39bce8e8af92681b07.patch: launch/policy: prevent linking policies on invalid gids
  - [Bug Fix] fedceff76af876d3069d4df2eedd0a974d16c3ff.patch: launch/policy: deallocate unused records during import
  - [Bug Fix] 9c2d3e310bb40c6db2966570695e896b540e467e.patch: util/misc: dont overload rvalue of get_seals()
  - [Bug Fix] f805f4114f33ddb61382f7d6989cc3f94e0f7f1a.patch: bus/match: fix matching against arguments beyond the zeroth


author: Tracker Robot <trackbot@opencloudos.tech> - 35-6
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] c60831b409c9ae74f5e275f6def0d4eddcc0b5bc.patch: typo: UnkonwnProperty -> UnknownProperty
  - [Bug Fix] a03e5c702a2bcd048c5eff17b31b612863e1c9f0.patch: typo: memebr -> member
  - [Bug Fix] 56a4e39a045aa548918cccaf24487ccfd2a8e0d7.patch: util/audit: Correct usage of audit logging functions


author: Xin Cheng <denisecheng@tencent.com> - 4.4.3-8.P1
changelog:
  - fix CVE-2022-38177, CVE-2022-2795,CVE-2022-38178,CVE-2023-3341, CVE-2023-2828,CVE-2023-4408,CVE-2023-50387


author: Huang zien <ethanehuang@tencent.com> - 2.89-3
changelog:
  - [Type] security
  - [DESC] Dnsmasq 2.9 is vulnerable to Integer Overflow via forward_query(fix cve-2023-49441)


author: OpenCloudOS JAVA SIG <javasig@opencloudos.org> - 5.5.0-2
changelog:
  - [Type] other
  - [DESC] remove obsolete slf4j, maven, maven-resolver and maven-wagon to resolve an issue
           where dnf will install dogtag-jss when installing slf4j, maven, maven-resolver
           and maven-wagon


author: Tracker Robot <trackbot@opencloudos.tech> - 1.47.0-6
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] 3f148554686027f087e16dd45735d02e9bc803c1.patch: libext2fs: fix unix io manager invalidation
  - [Bug Fix] af9b01d23006a365488b1be31d01afa2cce977b0.patch: libext2fs: fix livelock in the unix io manager


author: Yi Lin <nilusyi@tencent.com> - 23-24
changelog:
  - [TYPE] other
  - [DESC] add RELEASE field in os-release
  - [DESC] using epol-release repo as epol support


author: Doris Chao <doriscchao@tencent.com> - 2.4.2-7
changelog:
  - [Type] security
  - [DESC] Apply patch to fix a heap-based buffer overflow in fcgi (CVE-2025-23016),
  - which also affects Perl FCGI module indirectly (CVE-2025-40907).


author: Zhao Zhen <jeremiazhao@tencent.com> - 4.12.1-1
changelog:
  - updated fence-agents 4.12.1
  - disabled ppc64le temlpy
  - bootstrap aws/gce/compute/kubevirt/aliyun agents
  - disabled azure temply
  - added ecloud agents


author: Doris Chao <doriscchao@tencent.com> - 128.9.0-1
changelog:
  - [Type] security
  - [DESC] Update to version 128.9.0 to fix CVEs,including CVE-2025-3028,
  - CVE-2025-3029, CVE-2025-3030.


author: Doris Chao <doriscchao@tencent.com> - 128.10.0-1
changelog:
  - [Type] security
  - [DESC] Update to version 128.10.0 to fix CVEs, including CVE-2025-2817,
  - CVE-2025-4083, CVE-2025-4087, CVE-2025-4091, CVE-2025-4093.


author: Doris Chao <doriscchao@tencent.com> - 128.10.1-1
changelog:
  - [Type] security
  - [DESC] Update to version 128.10.1 to fix CVEs, including CVE-2025-4918
  - and CVE-2025-4919.
  - Limit parallelism and optimize flags on x86_64 to reduce memory usage.


author: Doris Chao <doriscchao@tencent.com> - 128.11.0-1
changelog:
  - [Type] security
  - [DESC] Update to version 128.11.1 to fix CVEs, including CVE-2025-5263, 
  - CVE-2025-5264, CVE-2025-5266, CVE-2025-5267, CVE-2025-5268,CVE-2025-5269
  - and CVE-2025-5283.


author: Doris Chao <doriscchao@tencent.com> - 128.12.0-1
changelog:
  - [Type] security
  - [DESC] Update to version 128.12.0 to fix CVEs, including CVE-2025-6424, 
  - CVE-2025-6425, CVE-2025-6429 and CVE-2025-6430.


author: Doris Chao <doriscchao@tencent.com> - 128.13.0-1
changelog:
  - [Type] security
  - [DESC] Update to version 128.13.0 to fix CVEs, including CVE-2025-8027, 
  - CVE-2025-8028, CVE-2025-8029, CVE-2025-8030, CVE-2025-8031, CVE-2025-8032, 
  - CVE-2025-8033, CVE-2025-8034 and CVE-2025-8035.


author: Upgrade Robot <upbot@opencloudos.tech> - 128.14.0-1
changelog:
  - Upgrade to version 128.14.0
  - Update to version 128.14.0 to fix CVEs, including CVE-2025-9179, CVE-2025-9180, CVE-2025-9181 and CVE-2025-9185.


author: Doris Chao <doriscchao@tencent.com> - 140.4.0-1
changelog:
  - [Type] security
  - Update to version 140.3.1esr
  - Rebuild against the new expat that fixes CVE-2025-59375.


author: Tracker Robot <trackbot@opencloudos.tech> - 2.14.2-11
changelog:
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] ab765827101787d49c0a66b23addc1f68f99a455.patch: Set FcTypeVoid if no valid types to convert


author: Tracker Robot <trackbot@opencloudos.tech> - 2.14.2-12
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] 3a0ed05722feec5c478d076d87a64bf15f4bacdb.patch: Use proper postscriptname for named instance if any


author: Tracker Robot <trackbot@opencloudos.tech> - 2.14.2-13
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] aae5ff1f2e1be978272c41bf809d15b6e47b1e2c.patch: Remove redundant leaf assignment in fcfreetype.c


author: Tracker Robot <trackbot@opencloudos.tech> - 2.14.2-14
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] ec20037908963870e27572fadef766cc8a6d9818.patch: Unlock on allocation failure in FcCacheInsert


author: Tracker Robot <trackbot@opencloudos.tech> - 2.14.2-15
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] b892c2196d0d9e74df61620e79ad8e846b01637d.patch: Ensure config is locked during retry in FcConfigReference


author: Tracker Robot <trackbot@opencloudos.tech> - 2.14.2-16
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] ad58277b71415b714009bee33f04e8c18c7ab44d.patch: Fix FcSerialize null pointer usage
  - [Bug Fix] 9164a7bcbd3be022f074bb0530dd5c12e3c83b44.patch: Fix qsort nullpointer issue


author: Tracker Robot <trackbot@opencloudos.tech> - 2.14.2-17
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] 71a6a990aa8578ddd7140fe0b2c9f87508d2b59b.patch: Fix a memory leak in fc-list/fc-query/fc-scan


author: Tracker Robot <trackbot@opencloudos.tech> - 2.14.2-18
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] 084752e737a12c99800b2a35ea80eab11a12eabe.patch: Accept integer for pixelsize


author: Tracker Robot <trackbot@opencloudos.tech> - 2.14.2-19
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] 8f54cb21c366a97d9c30723bff27d15e70aa7729.patch: Deal with glob string properly


author: Tracker Robot <trackbot@opencloudos.tech> - 2.14.2-20
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] bba8646fdacc58d9d5ccb0e37527627b28a52e9b.patch: Fix heap buffer underflow in FcConfigXdgDataDirs
  - [Bug Fix] 4a579aca645fd70da6739c493fd13643aad33250.patch: Skip empty entries in XDG_DATA_DIRS parsing


author: Upgrade Robot <upbot@opencloudos.tech> - 4.12.2-1
changelog:
  - Upgrade to version 4.12.2 (Fix CVE-2024-2698, CVE-2024-3183)
  - Revert "Replace netifaces with ifaddr"


author: dorsoli <dorsoli@tencent.com> - 4.12.5-1
changelog:
  - [Type] security
  - [DESC] Apply patches to fix CVE-2025-7493, updating functionality to 4.12.5 level.


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.11.2-1
changelog:
  - Upgrade to upstream version 2.11.2
  - Fix CVE-2023-40589,CVE-2023-40569,CVE-2023-40567,CVE-2023-40188
  - Fix CVE-2023-40186,CVE-2023-40181,CVE-2023-39356,CVE-2023-39354
  - Fix CVE-2023-39353,CVE-2023-39352,CVE-2023-39351,CVE-2023-39350
  - Fix CVE-2022-41877,CVE-2022-39347,CVE-2022-39320,CVE-2022-39319
  - Fix CVE-2022-39318,CVE-2022-39317,CVE-2022-39316
  - Remove dbus, glib and gstreamer requirements


author: Fanjun Kong <fanjunkong@tencent.com> - 2.11.6-1
changelog:
  - Upgrade to upstream version 2.11.6
  - CVE-2024-32041 [Low[ OutOfBound Read in zgfx_decompress_segment
  - CVE-2024-32039 [Moderate] Integer overflow & OutOfBound Write in clear_decompress_residual_data
  - CVE-2024-32040 [Low] integer underflow in nsc_rle_decode
  - CVE-2024-32458 [Low] OutOfBound Read in planar_skip_plane_rle
  - CVE-2024-32459 [Low] OutOfBound Read in ncrush_decompress
  - CVE-2024-32460 [Low] OutOfBound Read in interleaved_decompress


author: Tracker Robot <trackbot@opencloudos.tech> - 2.13.1-16
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] d091bca546fa15928db36c8447e126ee43ddb5f4.patch: [cache] Fix error handling.


author: Tracker Robot <trackbot@opencloudos.tech> - 2.13.1-17
changelog:
  - [Type] other
  - [DESC] Apply patches from rpm-tracker
  - [Performance] 1452355de99d22b0cba6ccc17bf5cdf3682ef61e.patch: * src/truetype/ttobjs.c (tt_size_run_prep): Correct scaling of CVT values.


author: Tracker Robot <trackbot@opencloudos.tech> - 2.13.1-18
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] 139443663368617b30b70cf6912e9577ecbb845f.patch: Move generic destroy to later in the face and size destruction.


author: Tracker Robot <trackbot@opencloudos.tech> - 2.13.1-19
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] 26b545f36867508da2f2f318a93d78e673436598.patch: apinames: Fix out-of-scope reference of a static array.


author: Tracker Robot <trackbot@opencloudos.tech> - 2.13.1-20
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] 38272bf85341348eb0a5162ba4e1c95d370f9bce.patch: [ftstroke] Fix invalid pointer assignement to arc


author: Tracker Robot <trackbot@opencloudos.tech> - 2.13.1-22
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] aab40d5cc4876d4004170d46e2718f9cd81b78dd.patch: * src/bdf/bdflib.c (bdf_parse_glyphs_): Avoid possible leak.


author: Tracker Robot <trackbot@opencloudos.tech> - 2.13.1-23
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] e3a3b39dd0cf0a01ec8998cc760d01b9f0b1bac7.patch: * src/bdf/bdflib.c (bdf_parse_start_): Do not overwrite flags.
  - and ad7dce7751298e3d65752c5149f08892ff79bcb0.patch: * src/bdf/bdflib.c (bdf_parse_start_): Prevent another STARTPROPERTIES.


author: Tracker Robot <trackbot@opencloudos.tech> - 2.13.1-24
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] a059b237bb01eb3e4f9f8b1618dda8c117498bab.patch: * src/truetype/ttgxvar.c (tt_face_vary_cvt): Fix all shared values.


author: Tracker Robot <trackbot@opencloudos.tech> - 2.13.1-25
changelog:
  - [Type] other
  - [DESC] Apply patches from rpm-tracker
  - [Performance] d0c905c62aedaa1b4a29467a2b2a25e46204931a.patch: [sfnt/CPAL] Return early if user requested currently-set palette


author: kianli <kianli@tencent.com> - 9.0.1-1
changelog:
  - Upgrade to 9.0.1
  - Security fix for CVE-2023-38406
  - Security fix for CVE-2023-38407
  - Security fix for CVE-2023-38802
  - Security fix for CVE-2023-41359
  - Security fix for CVE-2023-41909
  - Security fix for CVE-2023-41360
  - Security fix for CVE-2023-41361
  - Security fix for CVE-2023-41358
  - Security fix for CVE-2023-46752
  - Security fix for CVE-2023-46753


author: xiaoyunzhao <xiaoyunzhao@tencent.com> - 10.0.3-2
changelog:
  - [Type] security
  - [Desc] Fix CVE-2025-61099 CVE-2025-61100  CVE-2025-61101 CVE-2025-61102 CVE-2025-61103 CVE-2025-61104 CVE-2025-61105 CVE-2025-61106 CVE-2025-61107


author: Yi Lin <nilusyi@tencent.com> - 1.8.10-9
changelog:
  - [Type] other
  - [DESC] fix "no data for compatible" in fwupd tests: `fwupdtool get-devices --verbose`


author: Chunsheng Luo <luffyluo@tencent.com> - 13.2-9
changelog:
  - elf: Return error on unsorted symbol table if not allowed [CVE-2025-11414]
  - PR 33452 SEGV in bfd_elf_gc_record_vtentry [CVE-2025-11412]
  - elf: Disallow the empty global symbol name [CVE-2025-11413]
  - x86: Keep _GLOBAL_OFFSET_TABLE_ for .eh_frame [CVE-2025-11494]


author: Tracker Robot <trackbot@opencloudos.tech> - 2.42.10-7
changelog:
  - Apply patches from rpm-tracker
  - [Bug Fix] 818963f1c34a05f7a072e121182403853488c99f.patch: Fix a memory leak


author: Shuo Wang <abushwang@tencent.com> - 10.02.1-5
changelog:
  - fix CVE-2024-29509 CVE-2024-29506 CVE-2024-29507
  - fix CVE-2024-29508 CVE-2024-29511
  - fix buffer overflows, partial SAFER bypass, pointer leak (Bug 707510)


author: Shuo Wang <abushwang@tencent.com> - 10.02.1-8
changelog:
  - fix CVE-2024-46951, CVE-2024-46952, CVE-2024-46953
  - fix CVE-2024-46954, CVE-2024-46955, CVE-2024-46956
  - PS interpreter - check the type of the Pattern Implementation (Bug #707991)
  - Bug #708001 "Buffer overflow in PDF XRef stream"
  - Bug 707793: Check for overflow validating format string
  - Bug 707788: Fix decode_utf8 to forbid overlong encodings.
  - Bug #707990 "Out of bounds read when reading color in "Indexed" color space"
  - PostScript interpreter - fix buffer length check Bug 707895


author: Shuo Wang <abushwang@tencent.com> - 10.02.1-9
changelog:
  - fix CVE-2025-2783{0-6}
  - Bug 708241: Fix potential Buffer overflow with DollarBlend
  - Bug #708132 "Text buffer overflow with long characters"
  - Bug 708133: Avoid integer overflow leading to buffer overflow
  - Bug 708259: Check TTF name size before copying to buffer.
  - PDF interpreter - Guard against unsigned int overflow
  - Bug 708131: Fix confusion between bytes and shorts
  - Bug 708192: Fix potential print buffer overflow


author: Shuo Wang <abushwang@tencent.com> - 10.02.1-12
changelog:
  - fix CVE-2025-59798 CVE-2025-59799 CVE-2025-59800
  - pdfwrite - avoid buffer overrun
  - pdfwrite - bounds check some strings
  - PDF OCR 8 bit device - avoid overflow


author: Tracker Robot <trackbot@opencloudos.tech> - 2.78.3-6
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] ef064d625b847e05a017fcc307e67c6f31880ce7.patch: gopenuriportal: Fix two memory leaks
  - [Bug Fix] 092fedd5f085a2f1966b5c34befe8b603c1a0f07.patch: gdbus: Fix leak of method invocation when registering an object with closures


author: Zhao Zhen <jeremiazhao@tencent.com> - 2.78.3-8
changelog:
  - [Type] bugfix
  - [DESC] fixed building error for gjs 1.83.2+
  - gcc occur uninitialized variable ‘_g_boolean_var_46’ in ‘constexpr’ function;
  - because meson 1.3+ makes compiler checks stricter


author: Shuo Wang <abushwang@tencent.com> - 2.78.3-10
changelog:
  - fix CVE-2025-3360 CVE-2025-4373 CVE-2025-6052 CVE-2025-7039
  - gdatetime: Fix integer overflow when parsing very long ISO8601 inputs
  - gstring: carefully handle gssize parameters
  - gstring: Fix overflow check when expanding the string
  - gfileutils: fix computation of temporary file name


author: Shuo Wang <abushwang@tencent.com> - 2.38-34
changelog:
  - backport patch to fix [BZ #25847]
  - nptl: PTHREAD_COND_INITIALIZER compatibility with pre-2.41 versions (bug 32786)
  - nptl: Use all of g1_start and g_signals
  - nptl: rename __condvar_quiesce_and_switch_g1
  - nptl: Fix indentation
  - nptl: Use a single loop in pthread_cond_wait instaed of a nested loop
  - nptl: Remove g_refs from condition variables
  - nptl: Remove unnecessary quadruple check in pthread_cond_wait
  - nptl: Remove unnecessary catch-all-wake in condvar group switch
  - nptl: Update comments and indentation for new condvar implementation
  - pthreads NPTL: lost wakeup fix 2


author: Shuo Wang <abushwang@tencent.com> - 2.38-36
changelog:
  - backport patch to fix
  - sysdeps: sem_open: Clear O_CREAT when semaphore file is expected to exist [BZ #30789]


author: Tracker Robot <trackbot@opencloudos.tech> - 2.38-38
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] c69b88fc71aa5657662c5c4f176a51034b029ac4.patch: x86-64: Add GLIBC_ABI_DT_X86_64_PLT [BZ #33212]
  - [Bug Fix] 1bdce2545588a837f4b6715a90f5a22f9fc99c46.patch: elf: Handle ld.so with LOAD segment gaps in _dl_find_object (bug 31943)


author: Tracker Robot <trackbot@opencloudos.tech> - 2.38-39
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] 4db5358c9c101c64128e43943f8e096964b3a921.patch: debug: Wire up tst-longjmp_chk3
  - [Bug Fix] 1fc2002d60025143599d0343af80dcfa4585f75a.patch: debug: Adapt fortify tests to libsupport
  - [Bug Fix] 4c69161b6343bd47d9c20b8fbdc9cb83627a0bae.patch: x86/cet: Update tst-cet-vfork-1
  - [Bug Fix] 89fd3b08eaace2636abfa7e3cc01a2700367cc24.patch: x86/cet: fix shadow stack test scripts
  - [Bug Fix] 2c763f814e581895539e7762461aef62cc9465fd.patch: x86/cet: Check CPU_FEATURE_ACTIVE in permissive mode
  - [Bug Fix] 78b4845046b3fbe3e4cd6b5e03656dd62342f349.patch: x86/cet: Add -fcf-protection=none before -fcf-protection=branch
  - [Bug Fix] f258b3fa5abb35c1a9252c1676d5c1980affc509.patch: x86/cet: Dont assume that SHSTK implies IBT
  - [Bug Fix] a4003d1500e4a640dd84d31904ed4bb0ce9d91c7.patch: x86/cet: Check CPU_FEATURE_ACTIVE when CET is disabled
  - [Bug Fix] 9397174e482f9266bc77dd057789f46ea0dd5eac.patch: x86/cet: Dont disable CET if not single threaded
  - [Unknown] 0d1abcab552707e8fc069dbc8658ae7ff7295022.patch: x86/cet: Dont set CET active by default
  - [Bug Fix] d2d1978e9a5663fbcfd7daa54bbfd2f1eb6cb45b.patch: Remove installed header rule on $(..)include/%.h
  - [Bug Fix] 9bb20abcaa75479c6d2c412075536dd57d7ef699.patch: x86-64: Save APX registers in ld.so trampoline


author: Shuo Wang <abushwang@tencent.com> - 3.0.11-5
changelog:
  - Build with --no-warn-rwx-segment to fix build error in make apps
  - and we don't wind up with segment maps in the final bianries anyway


author: Tracker Robot <trackbot@opencloudos.tech> - 3.8.2-7
changelog:
  - Apply patches from rpm-tracker
  - [Bug Fix] 0337521f88799f616faca089026c4c45a2ed3d76.patch: nettle: avoid potential memleak with GMP older than 6.2.0
  - [Bug Fix] b7cd1e93d900675a80fe0701475a3f947bc4039e.patch: lib: fix a potential segfault in _gnutls13_recv_finished
  - [Bug Fix] f979aa3d0fcf1c79accc038b6599382efc6e64da.patch: lib: fix a segfault in _gnutls13_recv_end_of_early_data
  - [Bug Fix] b5faada34e63ca14657e72bebfa4a71f52000116.patch: serv: fix memleak when a connected client disappears
  - [Bug Fix] d76f43f2518f9167f868ab09db7b885459cca0b2.patch: fips: Zeroize temporary values
  - [Performance] 0a97df525fa12ac19ca95462e5ebaecb66066721.patch: lib/accellerated: update asm and enable PAC/BTI
  - [Performance] beba3bd9e0e678c0b804d400af839a3538bf1e17.patch: gnutls_pkcs12_generate_mac2: factor out mac generation logic
  - [Performance] 2c87dc3ae4f9629830923560774fbf9f6b55e273.patch: _gnutls_x509_read_uint: accept values greater than 0x7FFFFFFF


author: Feng Weiyao <wynnfeng@tencent.com> - 3.8.2-11
changelog:
  - [type] bugfix
  - [desc] add patch to avoid memory leak
  add patch to avoid null pointer dereference
  add patch to fix KTLS


author: Shuo Wang <abushwang@tencent.com> - 2.0.2-2
changelog:
  - apply 
    
       GO111MODULE=off \
    go build -buildmode pie -compiler gc -tags="rpm_crashtraceback ${BUILDTAGS:-}" -ldflags "${LDFLAGS:-}  -B 0x$(head -c20 /dev/urandom|od -An -tx1|tr -d ' \n') -compressdwarf=false -linkmode=external -extldflags '-Wl,-z,relro -Wl,--as-needed  -Wl,-z,now -specs=/usr/lib/rpm/OpenCloudOS/OpenCloudOS-hardened-ld  -Wl,--build-id=sha1 '" -a -v -x macro;


author: zhaoxiaolin <zhaoxiaolin@loongson.cn> - 1.24.0-1
changelog:
  - [Type] other
  - [DESC] upgrade to 1.24.0 for golang 1.22 is EOS, and add new feature support, optimize code, add instructions, etc. on loongarch64


author: jackeyji <jackeyji@tencent.com> - 1.24.2-1
changelog:
  - [Type] security
  - [DESC] upgrade to 1.24.2 to fix CVE-2024-45341 CVE-2024-45336 and CVE-2025-22865


author: hudson zhu <hudsonzhu@tencent.com> - 1.24.4-4
changelog:
  - [Type] bugfix
  - [DESC] os/exec: fix incorrect expansion of "", "." and ".." in LookPath [CVE-2025-47906]


author: Chunsheng Luo <luffyluo@tencent.com> - 10.2.6-7
changelog:
  - Fix CVE-2024-47875: dump dompurify to 2.5.0
  - Fix CVE-2025-30204 CVE-2024-51744: bump jwt to v4.5.2
  - Fix CVE-2024-6104: go-retryablehttp Redacted URL in logs/errors


author: Chunsheng Luo <luffyluo@tencent.com> - 10.2.6-8
changelog:
  - Fix Grafana Alerting: incorrect permission on POST external rule groups endpoint [CVE-2024-8118] 
  - Fix Grafana plugin SDK Information Leakage [CVE-2024-8986]
  - Fix Grafana Alerting VictorOps integration could be exposed to users with Viewer permission [CVE-2024-11741]
  - Fix Grafana Authorization bypass in data source proxy API [CVE-2025-3454]
  - Fix golang.org/x/net vulnerable to Cross-site Scripting [CVE-2025-22872]


author: Chunsheng Luo <luffyluo@tencent.com> - 10.2.6-9
changelog:
  - Fix Insecure Temporary File usage in github.com/golang/glog (CVE-2024-45339)
  - Fix net/http, x/net/http2: close connections when receiving too many headers (CVE-2023-45288)
  - Fix Non-linear parsing of case-insensitive content in golang.org/x/net/html (CVE-2024-45338)
  - Fix HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net (CVE-2025-22870)


author: Chunsheng Luo <luffyluo@tencent.com> - 10.2.6-11
changelog:
  - Fix angularjs CVEs: Disable angular_support by default
  - CVE-2023-26117, CVE-2022-25869, CVE-2024-8372, CVE-2024-8373, CVE-2025-0716


author: Chunsheng Luo <luffyluo@tencent.com> - 10.2.6-12
changelog:
  - Check SignedInUser OrgID in RevokeInvite (CVE-2024-10452)
  - Dashboards: Prevent title longer than 5 000 characters (CVE-2025-1088)
  - check user is admin when deleting from org (CVE-2025-3580)
  - declare dingding url as secret (CVE-2025-3415)


author: Chunsheng Luo <luffyluo@tencent.com> - 10.2.6-13
changelog:
  - bump brace expansion to v1.1.12 v2.0.2 (CVE-2025-5889)
  - bump axios to 1.8.2 (CVE-2025-27152)
  - bump prismjs to 1.30.0 (CVE-2024-53382)


author: Yu Zhang <yugozhang@tencent.com> - 10.2.6-15
changelog:
  - bump axios to 1.12.0 (CVE-2025-58754)
  - The golang version issue has been fixed. Recompile the net/http package in grafana (CVE-2025-4673)


author: Feng Weiyao <wynnfeng@tencent.com> - 5.2.2-1
changelog:
  - upgrade to 5.2.2 and fix CVE-2023-39325 and CVE-2023-44487, CVE-2023-45288, CVE-2022-41717,CVE-2025-22870


author: Shuo Wang <abushwang@tencent.com> - 9.0.0-2
changelog:
  - backport patch to fix CVE-2023-46045:
  - gvc: detect plugin installation failure and display an error


author: Feng Weiyao <wynnfeng@tencent.com> - 2.12-13
changelog:
  - [Type] security
  - [DESC] - Resolves: CVE-2024-45781 CVE-2024-45783 CVE-2024-45778
  - Resolves: CVE-2024-45775 CVE-2024-45780 CVE-2024-45774 CVE-2025-0684
  - Resolves: CVE-2025-0690 CVE-2025-1118 CVE-2024-45782 CVE-2025-0685
  - Resolves: CVE-2025-0624 CVE-2024-45779 CVE-2024-45776 CVE-2025-0686
  - Resolves: CVE-2025-0622 CVE-2025-0677 CVE-2024-45777 CVE-2025-0678
  - Resolves: CVE-2025-0689 CVE-2025-1125


author: Wang Guodong <gordonwwang@tencent.com> - 1.22.5-7
changelog:
  - fix CVE-2024-47542, CVE-2024-47600, CVE-2024-47538, CVE-2024-47541, CVE-2024-47607, 
    CVE-2024-47615, CVE-2024-47835


author: Wang Guodong <gordonwwang@tencent.com> - 1.22.5-10
changelog:
  - fix CVE-2024-47606, CVE-2024-47599, CVE-2024-47613, CVE-2024-47778, CVE-2024-47777, 
    CVE-2024-47776, CVE-2024-47775, CVE-2024-47774, CVE-2024-47601, CVE-2024-47602, 
    CVE-2024-47603, CVE-2024-47834, CVE-2024-47540
    CVE-2024-47598, CVE-2024-47597, CVE-2024-47596, CVE-2024-47546, CVE-2024-47545,
    CVE-2024-47544, CVE-2024-47543, CVE-2024-47539, CVE-2024-47537


author: wynnfeng <wynnfeng@tencent.com> - 2.4.57-8
changelog:
  - [type] security
  - [desc] fix CVE-2024-38473, 2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573


author: Rebuild Robot <rebot@opencloudos.org> - 2.4.64-1
changelog:
  - [Type] security
  - [DESC] upgrade to 2.4.64 and fix CVE-2025-53020, CVE-2024-43204, CVE-2024-47252, CVE-2024-42516, CVE-2025-23048, CVE-2025-49630, CVE-2025-49812


author: Tracker Robot <trackbot@opencloudos.tech> - 0.372-6
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] 0714efb6ccc8ae20685f929f789b84e69821803d.patch: Fix configure to honor --prefix


author: Tracker Robot <trackbot@opencloudos.tech> - 0.372-8
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] 79aeddf7c582bc1bfc06dc59fe0f28d2641acce9.patch: Fix check-usb-ids


author: Doris Chao <doriscchao@tencent.com> - 7.0.3-4
changelog:
  - [Type] bugfix
  - [DESC] Change the way info files information is updated, no longer using
  - the fix-info-dir script,since bash no loonger provies the /usr/share/info/dir


author: Tracker Robot <trackbot@opencloudos.tech> - 6.6.0-2
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] 667817b4c34944175deaf6ca9aa3afdf5b668fc5.patch: tc: nat: Fix mask calculation
  - [Bug Fix] afbfd2f2b0a633d068990775f8e1b73b8ee83733.patch: tc: nat: ffs should operation on host byte ordered data
  - [Bug Fix] 99c119a0de0d76effe6926ce213d041cea54aa7a.patch: ss: Tone down cgroup path resolution


author: Tracker Robot <trackbot@opencloudos.tech> - 6.6.0-3
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] 866e1d107b7de68ca1fcd1d4d5ffecf9d96bff30.patch: nstat: NULL Dereference when no entries specified


author: Tracker Robot <trackbot@opencloudos.tech> - 6.6.0-4
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] 5734dc8aa7034bfffdb1332ca4ec67c10bf0edcb.patch: ip: ipmaddr.c: Fix possible integer underflow in read_igmp()
  - [Bug Fix] 0b09a1b053a2f4dbba6128b3fb703e008819c791.patch: misc: fix memory leak in ifstat.c
  - [Bug Fix] 27d11a81197c60a409dda84de01cf0aa841530f9.patch: misc: ss.c: fix logical error in main function
  - [Performance] d29538eb7ef553ff72dd766cebfe0eeaf5881538.patch: ip: ipstats: Iterate all xstats attributes
  - [Bug Fix] 84da3f37e24fd688704d90d8563912863276001b.patch: ip: check return value of iproute_flush_cache() in irpoute.c
  - [Bug Fix] ede5e0b67c13d6d8fb51891d7d4be330733862cd.patch: bond: fix stack smash in xstats


author: Zhao Zhen <jeremiazhao@tencent.com> - 11.0.22-1
changelog:
  - updated to upstream 11.0.22
  - fixed CVE-2024-20918 CVE-2024-20952 CVE-2024-20926 CVE-2024-20919 CVE-2024-20921 
  -       CVE-2024-20945


author: Zhao Zhen <jeremiazhao@tencent.com> - 11.0.23-1
changelog:
  - updated to upstream 11.0.23
  - fixed CVE-2024-21094 CVE-2024-21085 CVE-2024-21011 CVE-2024-21068 CVE-2024-21012


author: Zhao Zhen <jeremiazhao@tencent.com> - 11.0.24-1
changelog:
  - Updated to upstream version 11.0.24
  - fixed CVE-2024-21147 CVE-2024-21145 CVE-2024-21140
  -       CVE-2024-21131 CVE-2024-21138


author: Zhao Zhen <jeremiazhao@tencent.com> - 11.0.25-1
changelog:
  - Updated to upstream version 11.0.25
  - fixed CVE-2024-21235 CVE-2024-21208 CVE-2024-21210 CVE-2024-21217


author: Zhao Zhen <jeremiazhao@tencent.com> - 11.0.28-1
changelog:
  - Updated to upstream version 11.0.28
  - Fixed CVE-2025-50059 CVE-2025-30749 CVE-2025-50106 CVE-2025-30761 CVE-2025-30754


author: Zhao Zhen <jeremiazhao@tencent.com> - 11.0.26-1
changelog:
  - upgrade to upstream version 11.0.26
  - fixed CVE-2024-21094 CVE-2024-21085 CVE-2024-21011 CVE-2024-21068 CVE-2024-21012
  - CVE-2024-21147 CVE-2024-21145 CVE-2024-21140 CVE-2024-21131 CVE-2024-21138
  - CVE-2024-21235 CVE-2024-21208 CVE-2024-21210 CVE-2024-21217 CVE-2025-21502


author: Zhao Zhen <jeremiazhao@tencent.com> - 17.0.10-1
changelog:
  - updated to upstream 17.0.10
  - fixed CVE-2024-20932 CVE-2024-20918 CVE-2024-20952 CVE-2024-20919 CVE-2024-20921
  -       CVE-2024-20945


author: Zhao Zhen <jeremiazhao@tencent.com> - 17.0.13-1
changelog:
  - Updated to upstream version 17.0.13
  - fixed CVE-2024-21235 CVE-2024-21208 CVE-2024-21210 CVE-2024-21217


author: Zhao Zhen <jeremiazhao@tencent.com> - 17.0.16-1
changelog:
  - Updated to upstream version 17.0.16
  - Fixed CVE-2025-50059 CVE-2025-30749 CVE-2025-50106 CVE-2025-30754


author: Zhao Zhen <jeremiazhao@tencent.com> - 8.0.17-1
changelog:
  - updated to upstream 8.0.17
  - fixed CVE-2024-20918 CVE-2024-20952 CVE-2024-20926 CVE-2024-20919 CVE-2024-20921
  -       CVE-2024-20945


author: Zhao Zhen <jeremiazhao@tencent.com> - 8.0.19-1
changelog:
  - Updated to upstream version 8.0.19
  - fixed CVE-2024-21147 CVE-2024-21145 CVE-2024-21140 CVE-2024-21144
  -       CVE-2024-21131 CVE-2024-21138


author: Zhao Zhen <jeremiazhao@tencent.com> - 8.0.20-1
changelog:
  - Updated to upstream version 8.0.20
  - Fixed CVE-2024-21235 CVE-2024-21208 CVE-2024-21210 CVE-2024-21217
  - Because of jdk8281098-pr3836-pass_compiler_flags_to_adlc.patch has been
  - merged by upstream, so we delete it, see
  - https://github.com/openjdk/jdk8u/commit/4106121e0ae42d644e45c6eab9037874110ed670


author: Zhao Zhen <jeremiazhao@tencent.com> - 8.0.23-1
changelog:
  - Updated to upstream version 8.0.23
  - Fixed CVE-2025-50059 CVE-2025-30749 CVE-2025-50106 CVE-2025-30761 CVE-2025-30754


author: Zhao Zhen <jeremiazhao@tencent.com> - 8.0.21-1
changelog:
  - [Type] need_sync
  - [DESC] fixed CVE-2025-21502 CVE-2024-21235 CVE-2024-21208 CVE-2024-21210 CVE-2024-21217
  - CVE-2024-21147 CVE-2024-21145 CVE-2024-21140 CVE-2024-21144 CVE-2024-21131 CVE-2024-21138
  - CVE-2024-21094 CVE-2024-21085 CVE-2024-21011 CVE-2024-21068


author: Zhao Zhen <jeremiazhao@tencent.com> - 5.13.0-6
changelog:
  - rebuilding jna with new ant
  - will not provide .pom and .xml files
  - removed javadoc due jquery version in JDK between x86 and loongarch are not same.


author: Tracker Robot <trackbot@opencloudos.tech> - 2.3.1-3
changelog:
  - Apply patches from rpm-tracker
  - [] e78513fe0ce5d83c226ea2c0bd222f375c2438e7.patch: vrrp: Handle empty ipset names with vrrp_ipsets keyword


author: xiaoyunzhao<xiaoyunzhao@tencent.com> - 3.42.0-7
changelog:
  - [Type] other
  - [DESC] Apply patches from rpm-tracker
  - [Performance] https://github.com/sqlite/sqlite/commit/44980e816985953ed7125b657751a1d09560df02.patch: Use hashing to accelerate column matching on INSERT statements.


author: Tracker Robot <trackbot@opencloudos.tech> - 2.39.1-10
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] 2976b484fc874307939714b9ca51b19b4d698e8e.patch: sys-utils: hwclock-rtc: fix pointer usage


author: Wang Guodong <gordonwwang@tencent.com> - 4.33-2
changelog:
  - Move event.h from libev-devel to a subpackage(libev-event-devel), so 
    libev-devel no longer conflicts with libevent-devel.


author: Xin Cheng <denisecheng@tencent.com> - 2.74.3-8
changelog:
  - fix CVE-2025-32050, CVE-2025-32052, CVE-2025-32053, CVE-2025-32906, CVE-2025-32911, CVE-2025-32913, CVE-2025-32907, CVE-2025-46420, CVE-2025-46421


author: Xin Cheng <denisecheng@tencent.com> - 3.4.2-5
changelog:
  - fix CVE-2025-2784, CVE-2025-32050 CVE-2025-32052, CVE-2025-32053, CVE-2025-32908, CVE-2025-32911, CVE-2025-32912
  - CVE-2025-32913, CVE-2025-32914, CVE-2025-46420, CVE-2025-46421


author: Xin Cheng <denisecheng@tencent.com> - 0.10.5-3
changelog:
  - Fix CVE-2023-48795: fix prefix truncation attack on Binary Packet Protocol (BPP)
  - Fix CVE-2023-6918: fix missing checks for return values for digests
  - Fix CVE-2023-6004: fix ProxyCommand/ProxyJump features allow injection


author: Feng Weiyao <wynnfeng@tencent.com> - 1.2.20-7
changelog:
  - [Type] security
  - [Desc] fix CVE-2021-33645,CVE-2021-33646,CVE-2021-33643,CVE-2021-33644,CVE-2013-4420,CVE-2021-33640


author: hanliyang <hanliyang@hygon.cn> - 9.10.0-2
changelog:
  - [Type] other
  - [DESC] some functionalities change about Hygon confidential VMs
    - Fix logic error and memleak about Hygon Reuse ASID
    - Support provide blobs for secret injection for Hygon Confidential VMs


author: Jiaxin Yang <jiaxinyyang@tencent.com> - 1.13.1-1
changelog:
  - Fix bug with smaller width bigger size, resolve CVE-2023-44488
  - VP8: disallow thread count changes, resolve CVE-2023-5217


author: Liangliang Zhai <zhailiangliang@loongson.cn> - 2.7.2-6
changelog:
  - [Type] other
  - [DESC] To solve openwsman-winrs installation dependency on rubygem-openwsman,
           enable ruby for loongarch64 to compile and generate rubygem-openwsman


author: Tracker Robot <trackbot@opencloudos.tech> - 4.4.36-6
changelog:
  - Apply patches from rpm-tracker
  - [Performance] configure: Only test the makecontext signature we need


author: Tracker Robot <trackbot@opencloudos.tech> - 4.4.36-7
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] ac2fea3990a3b0d750d080b055dd21741c14b9c3.patch: crypt: Zeroize initialized and reserved data members after computation.
  - [Bug Fix] 59d79640160fd8e1f62ab799d971e236063bb979.patch: crypt: Initialize internal_rbytes array with 0-string.


author: Tracker Robot <trackbot@opencloudos.tech> - 4.4.36-8
changelog:
  - [Type] other
  - [DESC] Apply patches from rpm-tracker
  - [Performance] dbcfb0123374d83fbf44fcb80d9282969c702759.patch: yescrypt: Use AVX512VL XOP-like bit rotates for faster Salsa20


author: Miaojun Dong <zoedong@ttencent.com> - 1.4.2-1
changelog:
  - Upgrade version to 1.4.2
  - Rebuild for binutils-2.41-2 to fix BPF bytecode files strip failure
  - Remove Patch for i686 arch


author: Jiaxin Yang <jiaxinyyang@tencent.com> - 1:2.11.5-8
changelog:
  - [Type] security
  - [DESC] Fix CVE-2025-32414, CVE-2025-32415, CVE-2025-6021, CVE-2025-49794, CVE-2025-49795, CVE-2025-49796


author: xiaoyunzhao <xiaoyunzhao@opencloudos.tech> - 2.1.148-1
changelog:
  - [Type] need_sync
  - [DESC] upgrade to 2.1.148: fix CVE-2024-55553 requires upgrading frr, 
           frr-10.2.1 requires libyang version higher than 2.1.128.


author: Upgrade Robot <upbot@opencloudos.tech> - 4.99.4-1
changelog:
  - Upgrade to version 4.99.4
  - Fixes lsof got stuck when ulimit was set too high(https://github.com/lsof-org/lsof/issues/281)


author: OpenCloudOS JAVA SIG <javasig@opencloudos.org> - 3.9.9-1
changelog:
  - [Type] bugfix
  - [DESC] using upstream source code to build Maven and its runtime dependencies in one spec
  - Rewrite the mvn macro (more precisely, did not use the original macro, rewrote the script for editing pom)
  - Added bootstrap method
  - Added jar compatibility check for JDK 8
  - Fixed several CVEs


author: OpenCloudOS JAVA SIG <javasig@opencloudos.org> - 3.9.9-2
changelog:
  - [Type] other
  - [DESC] delete obselete for apache-commons-lang3, it will take an error that
  -        when installing apache-commons-lang3, dnf will detect maven.


author: Upgrade Robot <upbot@opencloudos.tech> - 20250512-1
changelog:
  - Upgrade to version 20250512 to fix CVEs: CVE-2025-20623 CVE-2025-20054 CVE-2025-20103 CVE-2024-45332 CVE-2024-43420 CVE-2025-24495 CVE-2025-20012 CVE-2024-28956


author: Tracker Robot <trackbot@opencloudos.tech> - 1.2.13-7
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] 7a7202de3568522dfc75a455927ccbd7faf63411.patch: Correct a variable type in deflate.c.


author: Tracker Robot <trackbot@opencloudos.tech> - 1.2.13-8
changelog:
  - [Type] security
  - [DESC] Apply patches from rpm-tracker
  - [CVE Fix] 14a5f8f266c16c87ab6c086fc52b770b27701e01.patch: Neutralize zip file traversal attacks in miniunz.


author: Tracker Robot <trackbot@opencloudos.tech> - 1.2.13-9
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] 431a9b65eacab7efabf2230ba97ff426c0e07f9d.patch: Add bounds checking to ERR_MSG() macro, used by zError().


author: hudsonzhu <hudsonzhu@tencent.com> - 28.4.0-1
changelog:
  - [Type] bugfix
  - [DESC] Upgrade to version 28.4.0 for fixing the bug of duplicate PUT request during push


author: Zhao Zhen <jeremiazhao@tencent.com> - 128.8.0-1
changelog:
  - updated to upstream 128.8.0 and fixed CVE-2021-32810 CVE-2022-23639 CVE-2023-26964
  - CVE-2021-32715 CVE-2022-24713 CVE-2021-25900 CVE-2021-45710 CVE-2020-35875 CVE-2023-43669


author: Zhao Zhen <jeremiazhao@tencent.com> - 128.10.0-1
changelog:
  - updated to upstream 128.10.0
  - fixed CVE-2025-4091 CVE-2025-4087 CVE-2025-4093 CVE-2025-4083 CVE-2025-2817


author: Zhao Zhen <jeremiazhao@tencent.com> - 128.11.0-1
changelog:
  - updated to upstream 128.11.0
  - fiexed CVE-2025-5263 CVE-2025-5264 CVE-2025-5266 CVE-2025-5267 CVE-2025-5268


author: Zhao Zhen <jeremiazhao@tencent.com> - 128.13.0-1
changelog:
  - updated to upstream 128.13.0
  - fiexed CVE-2025-8034 CVE-2025-8030 CVE-2025-8031 CVE-2025-8035
  - CVE-2025-8032 CVE-2025-8027 CVE-2025-8033 CVE-2025-8029 CVE-2025-8028


author: Wang Guodong <gordonwwang@tencent.com> - 8.0.39-1
changelog:
  - Upgrade to 8.0.39
  - fix CVE-2024-20996, CVE-2024-21125, CVE-2024-21129, CVE-2024-21130, CVE-2024-21134,
    CVE-2024-21134, CVE-2024-21142, CVE-2024-21162, CVE-2024-21163, CVE-2024-21165, 
    CVE-2024-21171, CVE-2024-21173, CVE-2024-21177, CVE-2024-21179, CVE-2024-21185


author: Wang Guodong <gordonwwang@tencent.com> - 8.0.40-1
changelog:
  - Upgrade to 8.0.40
  - fix CVE-2024-21197, CVE-2024-21212, CVE-2024-21238, CVE-2024-21196, CVE-2024-21239,
    CVE-2024-21194, CVE-2024-21237, CVE-2024-21213, CVE-2024-21198, CVE-2024-21241,
    CVE-2024-21207, CVE-2024-21193, CVE-2024-21218, CVE-2024-21199, CVE-2024-21219,
    CVE-2024-21247, CVE-2024-21230, CVE-2024-21201, CVE-2024-21231, CVE-2024-21203,
    CVE-2024-21236


author: Wang Guodong <gordonwwang@tencent.com> - 8.0.41-1
changelog:
  - Upgrade to 8.0.41
  - fix CVE-2025-21503, CVE-2025-21501, CVE-2025-21497, CVE-2025-21491, CVE-2025-21490,
    CVE-2025-21531, CVE-2025-21529, CVE-2025-21523, CVE-2025-21522, CVE-2025-21519,
    CVE-2025-21518, CVE-2025-21500, CVE-2025-21505, CVE-2025-21555, CVE-2025-21559,
    CVE-2025-21543, CVE-2025-21540, CVE-2025-21546, CVE-2025-21520


author: Wang Guodong <gordonwwang@tencent.com> - 8.0.42-1
changelog:
  - Upgrade to 8.0.42
  - fix CVE-2025-30682, CVE-2025-21585, CVE-2025-21584, CVE-2025-21579, CVE-2025-21577,
    CVE-2025-30685, CVE-2025-21580, CVE-2025-30683, CVE-2025-21581, CVE-2025-30681,
    CVE-2025-21575, CVE-2025-21574, CVE-2025-30684, CVE-2025-30704, CVE-2025-30695,
    CVE-2025-30699, CVE-2025-30703, CVE-2025-30696, CVE-2025-30693, CVE-2025-30722,
    CVE-2025-30689, CVE-2025-30721, CVE-2025-30688, CVE-2025-30715, CVE-2025-30687,
    CVE-2025-21588, CVE-2025-30705


author: Wang Guodong <gordonwwang@tencent.com> - 8.0.43-1
changelog:
  - Upgrade to 8.0.43
  - fix CVE-2025-50087, CVE-2025-50092, CVE-2025-50101, CVE-2025-50083, CVE-2025-50104,
    CVE-2025-53023, CVE-2025-50077, CVE-2025-50078, CVE-2025-50086, CVE-2025-50085,
    CVE-2025-50084, CVE-2025-50094, CVE-2025-50082, CVE-2025-50093, CVE-2025-50091,
    CVE-2025-50098, CVE-2025-50097, CVE-2025-50080, CVE-2025-50102, CVE-2025-50096,
    CVE-2025-50100, CVE-2025-50099, CVE-2025-50079, CVE-2025-50068, CVE-2025-50081


author: Doris Chao <doriscchao@tencent.com> - 8.0-1
changelog:
  - Update to nano-8.0 
    • CVE-2024-5742: Avoid privilege escalations via symlink attacks
    on emergency save file.
    • By default ^F is bound to starting a forward search, and ^B to
    starting a backward search, while M-F and M-B repeat the search
    in the corresponding direction.  (See the documentation if you
    want the old bindings back.)
    • Command-line option --modernbindings (-/) makes ^Q quit, ^X cut,
    ^C copy, ^V paste, ^Z undo, ^Y redo, ^O open a file, ^W write a
    file, ^R replace, ^G find again, ^D find again backwards, ^A set
    the mark, ^T jump to a line, ^P show the position, and ^E execute.
    • Above modern bindings are activated also when the name of nano's
    executable (or a symlink to it) starts with the letter "e".
    • To open a file at a certain line number, one can now use also
    `nano filename:number`, besides `nano +number filename`.
    • <Alt+Home> and <Alt+End> put the cursor on the first and last
    row in the viewport, while retaining the horizontal position.
    • When the three digits in an #RGB color code are all the same,
    the code is mapped to the xterm grey scale, giving access to
    fourteen levels of grey instead of just four.
    • For easier access, M-" is bound to placing/removing an anchor,
    and M-' to jumping to the next anchor.
    • Whenever an error occurs, the keystroke buffer is cleared, thus
    stopping the execution of a macro or a string bind.
    • The mousewheel scrolls the viewport instead of moving the cursor.


author: Pengda Dou <doupengda@loongson.cn> - 1.35.5-9
changelog:
  - [Type] other
  - [DESC] enable bootstrap will result in missing functionality provided by the packages


author: jackeyji <jackeyji@tencent.com> - 1.26.2-1
changelog:
  - [Type] security
  - [DESC] upgrade to 1.26.2 to fix CVE-2024-31079 CVE-2024-32760 CVE-2024-34161 and CVE-2024-35200


author: Rebuild Robot <rebot@opencloudos.org> - 2.2.0-6
changelog:
  - [Type] bugfix
  - [DESC] Rebuilt for rust-toolset
  - not use cargo_build, because RUSTFLAGS will be overwritten


author: Zhao Zhen <jeremiazhao@tencent.com> - 18.18.2-1
changelog:
  - updated to upstream 18.18.2
  - switched to using original source tarball
  - fixed CVE-2023-45143 CVE-2023-39332 CVE-2023-39331 CVE-2023-38552 CVE-2023-32559 
  -       CVE-2023-32006 CVE-2023-32002 CVE-2023-30590 CVE-2023-30588 CVE-2023-30581


author: Siyuan Lou <siyuanlou@tencent.com> - 1.0-27
changelog:
  - add more macros for golang. 
  - add rpm-go.lua, srpm-go.lua, and go-rpm-integration script to support go rpm packaging.


author: cunshunxia <cunshunxia@tencent.com> - 1.0-31
changelog:
  - requires go-rpm-macros in default build env which is the mix of go-rpm-macros and
  - go-srpm-macros before.


author: Xin Cheng <denisecheng@tencent.com> - 9.3p2-4
changelog:
  - CVE-2023-51385: forbid shell metasymbols in username/hostname
  - CVE-2023-51384: apply destination constraints to all p11 keys
  - CVE-2023-48795: fix Terrapin attack


author: Tracker Robot <trackbot@opencloudos.tech> - 3.0.12-16
changelog:
  - Apply patches from rpm-tracker
  - [Bug Fix] 95dfb4244a8b6f23768714619f4f4640d51dc3ff.patch: Add NULL check before accessing PKCS7 encrypted algorithm
  - [Bug Fix] a473d59db1ce6943c010c5ba842e7c17fbe81aab.patch: Fix unbounded memory growth when using no-cached-fetch
  - [Bug Fix] 17d12183797033f55aec03376ffd3969cd703c0e.patch: Fix dasync_rsa_decrypt to call EVP_PKEY_meth_get_decrypt
  - [Bug Fix] d44aa28b0db3ba355fe68c5971c90c9a1414788f.patch: Fix off by one issue in buf2hexstr_sep()
  - [Bug Fix] d9d260eb95ec129b93a55965b6f2f392df0ed0a9.patch: SSL_set1_groups_list(): Fix memory corruption with 40 groups and more
  - [Bug Fix] 112754183a720b4db0f2770a80a55805010b4e68.patch: KDF_CTX_new API has incorrect signature (const should not be there)
  - [Bug Fix] 3732a8963d7aacde04f138204e235478609cba8a.patch: Fix memory leaks on error cases during drbg initializations
  - [Bug Fix] 5781c0a181c97530e57708fa67bb5faa44368246.patch: Fix error reporting in EVP_PKEY_{sign,verify,verify_recover}


author: Tracker Robot <trackbot@opencloudos.tech> - 3.0.12-20
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] 410bf24daee01df8f71246ba32d8e2a2922a8f25.patch: Note finished state in cipher BIO EOF
  - [Bug Fix] bdd0c198871fe3e66b7fbcb643e8a3134e4683c3.patch: Handle 0 return values from DH key computations as errors
  - [Bug Fix] d596982c215dfc36f1756f2b556d0480ce8002df.patch: test/evp_test.c: Free fetched_digest on error to avoid memory leak
  - [Bug Fix] 431937cf1af31107e70c0af2aa805267950d7404.patch: crypto/property/property.c: Free impl->method to avoid memory leak
  - [Bug Fix] d9a7a8e200e80c875fd54c746e7a67b3f23ee03c.patch: Fix memory leaks after failure of PKCS7_add_signed_attribute()


author: Tracker Robot <trackbot@opencloudos.tech> - 3.0.12-21
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] 21db6904ea9e0353a60f54f3122dd16df9a65e1c.patch: Fix exit code for s_time when -new command line switch specified
  - [Bug Fix] 58a47259742da3044aa8b164efebac03cb5af3ef.patch: OSSL_HTTP_get(): Reset redirection_url in each iteration


author: Tracker Robot <trackbot@opencloudos.tech> - 3.0.12-22
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] 54d399a1281de2588b11ea6a7635f737553689f6.patch: Fix OSSL_STORE to consider cached info in the EOF check.
  - [Bug Fix] 22a4066c496f2a1cb7fd9bd698da730301d05cdc.patch: Better lookup for openssl executable


author: Tracker Robot <trackbot@opencloudos.tech> - 1.5.3-9
changelog:
  - Apply patches from rpm-tracker
  - [Bug Fix] 9e4e3e42554fc6344a0b20b42aafb48011e9b2c9.patch: pam_env: remove escaped newlines from econf lines
  - [Bug Fix] 0703453bec6ac54ad31d7245be4529796a3ef764.patch: pam_env: check VENDORDIR after config.h inclusion
  - [Bug Fix] 28894b319488e8302899ee569b6e0911905f374e.patch: pam_env: fix --enable-vendordir fallback logic
  - [Bug Fix] 49b0b16a3d9781c6d7294b3d04a4d6d57b388c1b.patch: pam_access: do not call pam_sm_authenticate
  - [Bug Fix] 66106ea2c9c20c1c5c05f919b363ae6ca3e7d5ca.patch: pam_localuser: do not call pam_sm_authenticate
  - [Bug Fix] 6bd4e4e54c2cdc38ce08436ac786330af72b6207.patch: pam_usertype: do not call pam_sm_authenticate
  - [Bug Fix] 8295f092f6138ced15decc05e094667b0a8488e3.patch: pam_lastlog: do not call pam_sm_authenticate
  - [Bug Fix] d3b8c0723d0d691585474b0e14982f62b115a672.patch: pam_unix: do not truncate user names
  - [Bug Fix] 76af6380776a81ffd6ff50de254fb448ec6bce79.patch: pam_timestamp: correct failure condition


author: doriscchao <doriscchao@tencent.com> - 2.7.6-1
changelog:
  - initial build, base version 2.7.6, update to upstream git commit 20200514 with gnulib 
    version 20200513 through patch0001.


author: Chunsheng Luo <luffyluo@tencent.com> - 6.2.2-5
changelog:
  - Fix CVE-2024-45769 pcp: pmcd heap corruption through metric pmstore operations
  - Fix CVE-2024-45770 pcp: pmpost symlink attack allows escalating pcp to root user


author: Xiaojie Chen <jackxjchen@tencent.com> - 3.02-1
changelog:
  - Upgrade to upstream version 3.02
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.36-1
changelog:
  - Upgrade to upstream version 2.36
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.143-1
changelog:
  - Upgrade to upstream version 2.143
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.206-1
changelog:
  - Upgrade to upstream version 2.206
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.16-1
changelog:
  - Upgrade to upstream version 1.16
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 6.04-1
changelog:
  - Upgrade to upstream version 6.04
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 3.19-1
changelog:
  - Upgrade to upstream version 3.19
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 7.70-1
changelog:
  - Upgrade to upstream version 7.70
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.22-1
changelog:
  - Upgrade to upstream version 2.22
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.75-1
changelog:
  - Upgrade to upstream version 1.75
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.54-1
changelog:
  - Upgrade to upstream version 2.54
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 3.81-1
changelog:
  - Upgrade to upstream version 3.81
  - Remove perl-libs which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 6.06-1
changelog:
  - Upgrade to upstream version 6.06
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 6.44-1
changelog:
  - Upgrade to upstream version 6.44
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15
  - Remove conditional macro because perl(Clone) is no longger an optional dependency


author: Xiaojie Chen <jackxjchen@tencent.com> - 0.088-1
changelog:
  - Upgrade to upstream version 0.088
  - Remove perl-libs which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 0.42-1
changelog:
  - Upgrade to upstream version 0.42
  - Remove perl-libs which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.083-1
changelog:
  - Upgrade to upstream version 2.074
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 4.10-1
changelog:
  - Upgrade to upstream version 4.10
  - Remove perl-libs which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 4.16-1
changelog:
  - Upgrade to upstream version 4.16
  - Remove perl-libs which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.9998.39-1
changelog:
  - Upgrade to upstream version 1.9998.39
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2:0.42.34-1
changelog:
  - Upgrade to upstream version 0.42.34
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 5.20230720-1
changelog:
  - Upgrade to upstream version 5.20230720
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.21-1
changelog:
  - Upgrade to upstream version 1.21
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.000038-1
changelog:
  - Upgrade to upstream version 1.000038
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.39-1
changelog:
  - Upgrade to upstream version 1.39
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.66-1
changelog:
  - Upgrade to upstream version 1.66
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 3.45-1
changelog:
  - Upgrade to upstream version 3.45
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.037-1
changelog:
  - Upgrade to upstream version 2.037
  - Remove perl-libs which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.204-1
changelog:
  - Upgrade to upstream version 1.204
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 0.017-1
changelog:
  - Upgrade to upstream version 0.017
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 0.002010-1
changelog:
  - Upgrade to upstream version 0.002010
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.302195-1
changelog:
  - Upgrade to upstream version 1.302195
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.35-1
changelog:
  - Upgrade to upstream version 1.35
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 5.19-1
changelog:
  - Upgrade to upstream version 5.19
  - Remove perl-libs which will be generated by perl-generators >= 1.15


author: cunshunxia <cunshunxia@tencent.com> - 1.30-5
changelog:
  - The build config of git has changed, so perl-Git pull perl-YAML
  - in the AppStream.
  - see https://gitee.com/OpenCloudOS/rpm_info/pulls/297.


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.15-1
changelog:
  - Upgrade to upstream version 1.15
  - Add file perlcompat.attr which generates replacement for versioned


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.33-1
changelog:
  - Upgrade to upstream version 1.33
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 3.15-1
changelog:
  - Upgrade to upstream version 3.15
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 6.72-1
changelog:
  - Upgrade to upstream version 6.72
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15
  - Add buildrequires perl(Module::Load) and perl(HTTP::CookieJar::LWP)
  - Add requires perl(HTTP::CookieJar::LWP)


author: Xiaojie Chen <jackxjchen@tencent.com> - 0.241-1
changelog:
  - Upgrade to upstream version 0.241
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 5.01-1
changelog:
  - Upgrade to upstream version 5.01
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Shuo Wang <abushwang@tencent.com> - 23.08.0-3
changelog:
  - fix CVE-2024-6239 and backport its pre-patch
  - pdfinfo: Fix crash in broken documents when using -dests


author: Shuo Wang <abushwang@tencent.com> - 23.08.0-8
changelog:
  - fix CVE-2025-32364 CVE-2025-32365
  - PSStack::roll: Protect against doing int = -INT_MIN
  - Move isOk check to inside JBIG2Bitmap::combine


author: Upgrade Robot <upbot@opencloudos.tech> - 15.9-1
changelog:
  - Upgrade to version 15.9
  - CVEs fixed: CVE-2024-10976, CVE-2024-10977, CVE-2024-10978, CVE-2024-10979


author: Shuo Wang <abushwang@tencent.com> - 3.11.6-16
changelog:
  - fix CVE-2025-1795
  - email/_header_value_parser: don't encode list separators (GH-100885) (GH-115593)
  - Fix UnicodeEncodeError in TokenList.fold() (GH-113730)
  - Fix for email.generator.Generator with whitespace between encoded words. (#92281)
  - Fix AttributeError in the email module (GH-119099)


author: cunshunxia <cunshunxia@tencent.com> - 3.11.6-17
changelog:
  - fix CVE-2025-4435
  - Also addresses CVEs 2024-12718, 2025-4138, 2025-4330, and 2025-4517
  - gh-135034: Normalize link targets in tarfile, add `os.path.realpath(strict='allow_missing')` (GH-135037)
  - fix CVE-2025-6069


author: Shuo Wang <abushwang@tencent.com> - 3.11.6-19
changelog:
  - fix CVE-2025-4516
  - gh-133767: Fix use-after-free in the unicode-escape decoder
  - with an error handler (GH-129648) (GH-133944) (GH-134341)


author: cunshunxia <cunshunxia@tencent.com> - 3.11.6-20
changelog:
  - fix CVE-2025-8194.
  - gh-130577: tarfile now validates archives to ensure member
  - offsets are non-negative (GH-137027)


author: Tracker Robot <trackbot@opencloudos.tech> - 3.11.6-22
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] 7cff053efeb8506495c5f77f40742341a1714d96.patch: [3.11] gh-80222: Fix email address header folding with long quoted-string (GH-122753) (#129009)
  - [Bug Fix] 3abcace681e58c4c84cec9e191345a6cc58f46d9.patch: [3.11] gh-119511: Fix a potential denial of service in imaplib (GH-119514) (#129357)
  - [Bug Fix] f1897d312e16bdf820ee47de053fdc24f621d0b1.patch: [3.11] GH-130396: Treat clang -Og as optimized for gdb tests (GH-130550) (GH-130573) (#130593)
  - [Bug Fix] 6b37486184590d19c6f24e620545ec8f8f65e4c7.patch: [3.11] gh-106883 Fix deadlock in threaded application (#117332)
  - [Bug Fix] 458871277323024d5d4db35ca7056cc51d5e4d8d.patch: [3.11] gh-127257: ssl: Raise OSError for ERR_LIB_SYS (GH-127361) (GH-127905) (GH-131970)
  - [Bug Fix] 0a66052d8dec1a143bc77015ce7522ea812817ed.patch: [3.11] gh-121284: Fix email address header folding with parsed encoded-word (GH-122754) (GH-131405)
  - [Bug Fix] f8b4421bc5569df25259895a58b69b4d87a47d20.patch: [3.11] gh-134062: Fix hash collisions in IPv4Network and IPv6Network (GH-134063) (GH-134479)
  - [Bug Fix] da3755557a2f6421e400f6903a47b9de291a9494.patch: [3.11] gh-128840: Limit the number of parts in IPv6 address parsing (GH-128841) (GH-134613)
  - [Bug Fix] 9df171dbbac669e0d43c978e10447f050b89eee6.patch: [3.11] gh-123409: fix IPv6Address.reverse_pointer for IPv4-mapped addresses (GH-123419) (GH-135087)
  - [Bug Fix] 2c6ca1a9adfeaabfdc17b9871b17bd2ca9b32bb3.patch: [3.11] gh-128840: Fix parsing long IPv6 addresses with embedded IPv4 address (GH-134836) (GH-135091)
  - [Bug Fix] 313544eb0381d868b4f8b351a0ca808c313af698.patch: [3.11] gh-127563: use dk_log2_index_bytes=3 in empty dicts (GH-127568) (GH-127813) (#135463)
  - [Bug Fix] d8f6297e6d678f635d78cc59776ab7b246bfb03c.patch: [3.11] gh-102555: Fix comment parsing in HTMLParser according to the HTML5 standard (GH-135664) (GH-136274)
  - [Bug Fix] 228509edab356b02743d9fa9de379854e9526e51.patch: [3.11] gh-135661: Fix parsing start and end tags in HTMLParser according to the HTML5 standard (GH-135930) (GH-136268) (#136291)
  - [Bug Fix] 3511c2e546aaacda5880eb89a94f4e8514b3ce76.patch: [3.11] gh-135661: Fix parsing attributes with whitespaces around the = separator in HTMLParser (GH-136908) (GH-136920)
  - [Bug Fix] 02feb83af27184fd15f6ee7f7996ab92ce229f82.patch: [3.11] gh-118350: Fix support of elements textarea and title in HTMLParser (GH-135310) (GH-137782)


author: Tracker Robot <trackbot@opencloudos.tech> - 3.11.6-23
changelog:
  - [Type] security
  - [DESC] Apply patches from rpm-tracker
  - [CVE Fix] 5f90abaa786f994db3907fc31e2ee00ea2cf0929.patch: [3.11] gh-122133: Authenticate socket connection for socket.socketpair() fallback (GH-122134) (#122426)
  - [CVE Fix] c5655aa6ad120d2ed7f255bebd6e8b71a9c07dde.patch: [3.11] gh-122133: Rework pure Python socketpair tests to avoid use of importlib.reload. (GH-122493) (GH-122506)
  - [CVE Fix] bc4a703a934a59657ecd018320ef990bc5542803.patch: [3.11] [CVE-2023-27043] gh-102988: Reject malformed addresses in email.parseaddr() (GH-111116) (#123767)


author: Shuo Wang <abushwang@tencent.com> - 3.11.6-24
changelog:
  - fix CVE-2025-8291
  - gh-139700: Check consistency of the zip64 end of
  - central directory record (GH-139702) (GH-139708) (GH-139713)


author: Tracker Robot <trackbot@opencloudos.tech> - 3.11.6-25
changelog:
  - [Type] security
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] 1459d1f1f1f00f36a25f616c0cea1b6d1609ff7d.patch: [3.11] gh-139400: Make sure that parent parsers outlive their subparsers in pyexpat (GH-139403) (#139612)
  - [Bug Fix] 22d5724fbbc0a3c55c51f63a14c10e0c618770d7.patch: [3.11] gh-135661: Fix CDATA section parsing in HTMLParser (GH-135665) (GH-137774) (GH-139659)
  - [CVE Fix] 1d29afb0d6218aa8fb5e1e4a6133a4778d89bb46.patch: [3.11] gh-139700: Check consistency of the zip64 end of central directory record (GH-139702) (GH-139708) (GH-139713)


author: cunshunxia <cunshunxia@tencent.com> - 10.0.0-2
changelog:
  - remove runtime dependence pyOpenSSL which is only used when test.
  - remove six which is not needed anymore.


author: Jiaxin Yang <jiaxinyyang@tencent.com> - 4.9.3-8
changelog:
  - [Type] security
  - [DESC] Make Unicode recovery test work with libxml2 2.12 (GH-383)
  - [DESC] Rebuilt for libxml2


author: jackeyji <jackeyji@tencent.com> - 5.1.1-2
changelog:
  - [Type] other
  - [DESC] remove testcases because redis-server failed with port conflict when CI machine run with redis


author: Xin Cheng <denisecheng@tencent.com> - 1.17.1-4
changelog:
  - Fix CVE-2023-50387, DNSSEC verification complexity can be exploited to exhaust CPU resources and stall DNS resolvers.
  - Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust CPU.


author: Zien Huang <ethanehuang@tencent.com> - 1.17.1-7
changelog:
  - [Type] security
  - [DESC] DNS resolvers vulnerable to remote DoS attacks via response amplification (fix CVE-2024-33655)


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.9.2-1
changelog:
  - Upgrade to upstream version 1.9.2 
  - Disable some tests until upstream adapts to changes in python 3.11


author: Tracker Robot <trackbot@opencloudos.tech> - 1.1.2-5
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] c43b17f1bc2b5c393b85259d9bd16635ed3f32c6.patch: QATAPP-31145: Fix null pointer dereference
  - [Bug Fix] c116a7ef6c20f0871b9672d9ed930a252b40ba18.patch: QATAPP-31146: Fix potential double free
  - [Performance] 49bcf697305ee71f954e2f08883fa18bcc689f5e.patch: QATAPP-29019: Improve sw fallback performance


author: hanliyang <hanliyang@hygon.cn> - 8.2.2-32
changelog:
  - [Type] other
  - [DESC] Add a CSV3 ioctl command to request Linux KVM update CSV3 VM's page attribute info


author: hanliyang <hanliyang@hygon.cn> - 8.2.2-33
changelog:
  - [Type] other
  - [DESC] sync header file from upstream and Enable the compilation of loongarch qemu on other architectures


author: Doris Chao <doriscchao@tencent.com> - 2024.4-1
changelog:
  - [Type] security
  - [DESC] Upgrade to version 2024.4 to fix CVE-2023-26964(h2). 
  - Backport https://github.com/coreos/rpm-ostree/security/advisories/GHSA-2m76-cwhg-7wv6, CVE-2024-2905.
  - Backport https://github.com/coreos/rpm-ostree/commit/fe586621e5014d14f92b913338171a02ed29e6cc


author: Tracker Robot <trackbot@opencloudos.tech> - 8.2312.0-4
changelog:
  - Apply patches from rpm-tracker
  - [Bug Fix] ec3ddc61c5fffd5d3762520338ea0e8d813c5b4b.patch: Merge pull request #5454 from apple-ouyang/patch-1
  - [Bug Fix] 8d7392d391837bde0b5783428eb2c1dfdf19c1bc.patch: Merge pull request #5458 from rsyslog/nonexistentfoo


author: Tracker Robot <trackbot@opencloudos.tech> - 8.2312.0-5
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] e06569ecea1b5c0cd1c35699f31ab3929d431d2a.patch: Fix a buffer overflow when the argument to replace is empty
  - [Bug Fix] 09a3448a3e6ac5aa7065fd56d229a66eacece4db.patch: covscan: remove defect type of RESOURCE_LEAK
  - [Bug Fix] 6b1b15842c7bb71948c37c362053bd1a1cec98d8.patch: core: fix potential misadressing in sigmask
  - [Bug Fix] 6c04651db771fc44f24d3bef499bdf6837633042.patch: rsyslog startup bugfix: cosmetic memory leak
  - [Bug Fix] ff6f4ceeed8ba715ea0e26d36e2afac2f6c07931.patch: gnutls TLS driver: fix small memory leak
  - [Bug Fix] 0ac9aafb72588ff6c5bc0923fee2dcc7076f4855.patch: omfwd: fix segfault in UDP freeaddrinfo
  - [Bug Fix] 3c00ecb73e72abaa436a06421980cb02de5d0515.patch: core: fix potential NULL ptr access on HUP in very early startup phase


author: Wang Guodong <gordonwwang@tencent.com> - 1.70.0-3
changelog:
  - include -Cstrip=none in %build_rustflags for rust-1.77.0
  - sync rust-toolset macros to rust-packaging v25.2


author: Yi Lin <nilusyi@tencent.com> - 15.7-5
changelog:
  - fix CVE-2023-40546, CVE-2023-40551, CVE-2023-40550,
    CVE-2023-40549, CVE-2023-40548, CVE-2023-40547


author: Miaojun Dong <zoedong@tencent.com> - 4.5.5-1
changelog:
  - Bump version to 4.5.5
  - Add build requirement python3-setuptools
  - Comment the line to generates i18n docs because it is broken


author: Xiaojie Chen <jackxjchen@tencent.com> - 6.5-1
changelog:
  - Upgrade to upstream version 6.5
  - Fix CVE-2023-46728, CVE-2023-46848 and CVE-2023-46847
  - Fix CVE-2023-46846, CVE-2023-5824 and CVE-2023-46724


author: Upgrade Robot <upbot@opencloudos.org> - 1.9.14p1-1
changelog:
  - Upgrade to version 1.9.14p1
  - not support log-server, disable configure options and remove openssl-devel


author: cunshunxia <cunshunxia@tencent.com> - 255-13
changelog:
  - fix systemd-networkd-wait-online unexpected action caused by
  - ab3aed4a0349bbaa26f53340770c1b59b463e05d


author: cunshunxia <cunshunxia@tencent.com> - 255-15
changelog:
  - fix missing arguments for PR_SET_MEMORY_MERGE call which will
  - cause systemd-run MemoryKSM=yes fail.


author: Fanjun Kong <fanjunkong@tencent.com> - 1.13.1-3
changelog:
  - CVE-2023-5367
  - CVE-2023-5380
  - CVE-2023-6377
  - CVE-2023-6478
  - CVE-2023-6816
  - CVE-2024-0229
  - CVE-2024-21885
  - CVE-2024-21886


author: Liangliang Zhai <zhailiangliang@loongson.cn> - 1.13.1-4
changelog:
  - [Type] other
  - [DESC] fix patching failure:
    Source package has previously fixed the following CVE:
    CVE-2023-5367,CVE-2023-5380,CVE-2023-6478,CVE-2023-6816,CVE-2024-0229,CVE-2024-21885,CVE-2024-21886,CVE-2023-6377.


author: Xinlong Chen <xinlongchen@tencent.com> - 1.13.1-10
changelog:
  - [Type] security
  - [DESC] rebuild for some cves in xorg-x11-server:
  -        CVE-2022-49737 CVE-2025-49175 CVE-2025-49176
  -        CVE-2025-49178 CVE-2025-49179 CVE-2025-49180


author: Doris Chao <doriscchao@tencent.com> - 3.4-1
changelog:
  - [Type] bugfix
  - [DESC] Update to version 3.4 to resolve crashes when copying in copy-mode
  - https://github.com/tmux/tmux/issues/3699


author: Doris Chao <doriscchao@tencent.com> - 9.0.104-1
changelog:
  - [Type] security
  - [DESC] Update to version 9.0.104 to fix CVE-2025-31650 and CVE-2025-31651.
  - Currently restrict Maven >= 3.9.9 requirement to .ocs23 platform only.


author: Doris Chao <doriscchao@tencent.com> - 9.0.106-1
changelog:
  - [Type] security
  - [DESC] Update to version 9.0.106 to fix CVE-2025-49125, CVE-2025-48988 
  - and CVE-2025-48976.


author: Doris Chao <doriscchao@tencent.com> - 9.0.107-1
changelog:
  - [Type] security
  - [DESC] Update to version 9.0.107 to fix CVE-2025-52434, CVE-2025-52520
  - and CVE-2025-53506.


author: Doris Chao <doriscchao@tencent.com> - 9.0.111-1
changelog:
  - [Type] security
  - [DESC] Update to version 9.0.111 to fix CVE-2025-55752, CVE-2025-55754
  - and CVE-2025-61795.


author: Tracker Robot <trackbot@opencloudos.tech> - 2023c-5
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] 0001-Add-missing-zdump.o-dependency.patch
  - [Bug Fix] 0002-Fix-bug-with-d-RELATIVE-t-ABSOLUTE.patch


author: Miaojun Dong <zoedong@tencent.com> - 0.13.0-1
changelog:
  - Bump version to 0.13.0
  - usbredirserver is deprecated in favor of usbredirect
  - usbredirect can be used as a client or server through different parameters


author: Binbin Zhou <zhoubinbin@loongson.cn> - 3.21.0-8
changelog:
  - [Type] bugfix
  - [DESC] Update loongarch64/Linux patch, more instructions need to be supported;
  	 Enable test for loongarch64


author: Xinlong Chen <xinlongchen@tencent.com> - 21.1.8-11
changelog:
  - [Type] security
  - [DESC] fix CVEs: CVE-2025-26594 CVE-2025-26595
  -        CVE-2025-26597 CVE-2025-26598 CVE-2025-26599
  -        CVE-2025-26600 CVE-2025-26601 CVE-2025-26596


author: Xinlong Chen <xinlongchen@tencent.com> - 21.1.8-14
changelog:
  - [Type] security
  - [DESC] fix CVEs: CVE-2022-49737 CVE-2025-49175 CVE-2025-49176
  -        CVE-2025-49178 CVE-2025-49179 CVE-2025-49180


author: Zhao Zhen <jeremiazhao@tencent.com> - 23.1.2-3
changelog:
  - fixed CVE-2023-5367.patch CVE-2024-21885.patch CVE-2024-21886.patch CVE-2024-0408.patch
  - CVE-2024-0409.patch CVE-2024-0229.patch CVE-2023-6816.patch CVE-2023-6377.patch
  - CVE-2024-31080.patch CVE-2024-31081.patch


author: Xinlong Chen <xinlongchen@tencent.com> - 23.1.2-8
changelog:
  - [Type] security
  - [DESC] fix CVEs: CVE-2025-49175 CVE-2025-49176 CVE-2025-49177
  -        CVE-2025-49178 CVE-2025-49179 CVE-2025-49180


author: Tracker Robot <trackbot@opencloudos.tech> - 5.4.7-7
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] 20ec36eafddd7b3a0e014e1f4ed1b87a9105a725.patch: liblzma: mt dec: Fix lack of parallelization in single-shot decoding


author: Tracker Robot <trackbot@opencloudos.tech> - 5.4.7-8
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] b593c1f95b63d5fad516685c2a22cb209b716269.patch: xz: Capsicum sandbox: Fix incorrect use of cap_rights_clear()


