# changelog

author: Xin Cheng <denisecheng@tencent.com> - 9.18.18-4
changelog:
  - fix CVE-2023-4408: Parsing large DNS messages may cause excessive CPU load
  - fix CVE-2023-5517: Querying RFC 1918 reverse zones may cause an assertion failure when "nxdomain-redirect" is enabled
  - fix CVE-2023-5679: Enabling both DNS64 and serve-stale may cause an assertion failure during recursive resolution
  - fix CVE-2023-6516: Specific recursive query patterns may lead to an out-of-memory condition
  - fix CVE-2023-50387: KeyTrap - Extreme CPU consumption in DNSSEC validator
  - fix CVE-2023-50868: Preparing an NSEC3 closest encloser proof can exhaust CPU resources


author: Pengda Dou <doupengda@loongson.cn> - 0.19.1-6
changelog:
  - [Type] other
  - [DESC] add support for loongarch64
  - Fix cannot convert 'bfd*' to 'bfd_architecture'


author: Chunsheng Luo <luffyluo@tencent.com> - 20230524gitba91d0292e-4
changelog:
  - fix CVE-2023-45229 CVE-2023-45230 CVE-2023-45231 CVE-2023-45232 CVE-2023-45233 CVE-2023-45234 CVE-2023-45235


author: cunshunxia <cunshunxia@tencent.com> - 20240223-1
changelog:
  - Upgrade to version edk2-stable202402
  - Support Hygon CSV3 feature, support live migration for Hygon CSV1/2/3 guests, by hanliyang@hygon.cn


author: Zhao Zhen <jeremiazhao@tencent.com> - 4.12.1-1
changelog:
  - updated fence-agents 4.12.1
  - disabled ppc64le temlpy
  - bootstrap aws/gce/compute/kubevirt/aliyun agents
  - disabled azure temply
  - added ecloud agents


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.11.2-1
changelog:
  - Upgrade to upstream version 2.11.2
  - Fix CVE-2023-40589,CVE-2023-40569,CVE-2023-40567,CVE-2023-40188
  - Fix CVE-2023-40186,CVE-2023-40181,CVE-2023-39356,CVE-2023-39354
  - Fix CVE-2023-39353,CVE-2023-39352,CVE-2023-39351,CVE-2023-39350
  - Fix CVE-2022-41877,CVE-2022-39347,CVE-2022-39320,CVE-2022-39319
  - Fix CVE-2022-39318,CVE-2022-39317,CVE-2022-39316
  - Remove dbus, glib and gstreamer requirements


author: Fanjun Kong <fanjunkong@tencent.com> - 2.11.6-1
changelog:
  - Upgrade to upstream version 2.11.6
  - CVE-2024-32041 [Low[ OutOfBound Read in zgfx_decompress_segment
  - CVE-2024-32039 [Moderate] Integer overflow & OutOfBound Write in clear_decompress_residual_data
  - CVE-2024-32040 [Low] integer underflow in nsc_rle_decode
  - CVE-2024-32458 [Low] OutOfBound Read in planar_skip_plane_rle
  - CVE-2024-32459 [Low] OutOfBound Read in ncrush_decompress
  - CVE-2024-32460 [Low] OutOfBound Read in interleaved_decompress


author: kianli <kianli@tencent.com> - 9.0.1-1
changelog:
  - Upgrade to 9.0.1
  - Security fix for CVE-2023-38406
  - Security fix for CVE-2023-38407
  - Security fix for CVE-2023-38802
  - Security fix for CVE-2023-41359
  - Security fix for CVE-2023-41909
  - Security fix for CVE-2023-41360
  - Security fix for CVE-2023-41361
  - Security fix for CVE-2023-41358
  - Security fix for CVE-2023-46752
  - Security fix for CVE-2023-46753


author: Qian Liang <renaliang@tencent.com> - 12.3.1-1
changelog:
  - updated to tgcc-12.3.1
  - Security updates: fix CVE-2023-4039. merge from https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=75c37e031408262263442f5b4cdb83d3777b6422
  - fix ICE in ipa profile multiple target speculative.


author: Zhao Zhen <jeremiazhao@tencent.com> - 12.3.1.1-1
changelog:
  - Added libsanitizer for loongarch
  - Added Ada libffi libvtv libitm for loongarch
  - Optimized multiplication and immediate instruction generation for loongarch
  - Added vector instruction test set for loongarch
  - Fixed link error when building libgccjit for loongarch
  - Added supports of [f]copysign for loongarch
  - Added supports of mcmodel=medium and extreme for loongarch
  - Added fmin/fmax RTL backend template for loongarch
  - fixed some building error for loongarch


author: Huang Yang <huangyang@loongson.cn> - 12.3.1.1-2
changelog:
  - [Type] other
  - [DESC] enable partial compilation options on loongarch architectures
  - Added longarch vector instruction header file


author: Huang Yang <huangyang@loongson.cn> - 12.3.1.2-3
changelog:
  - [Type] bugfix
  - [DESC] Fix GNOME desktop startup failure on loongarch architecture
  - Remove some duplicate configure options


author: rockerzhu <rockerzhu@tencent.com> - 12.1-5
changelog:
  - Add sub-package of headless, avoiding rpm-build to require all gdb, but to require gdb-headless
    and not to require source-highlight.


author: rockerzhu <rockerzhu@tencent.com> - 12.1-6
changelog:
  - Add sub-package of minimal to provides /usr/bin/gdb-add-index(needed by rpm-build) and
    gdb.minimal(needed by /usr/bin/gdb-add-index)
  - Rebuilt with boost 1.82.0.


author: Shuo Wang <abushwang@tencent.com> - 10.02.1-5
changelog:
  - fix CVE-2024-29509 CVE-2024-29506 CVE-2024-29507
  - fix CVE-2024-29508 CVE-2024-29511
  - fix buffer overflows, partial SAFER bypass, pointer leak (Bug 707510)


author: Shuo Wang <abushwang@tencent.com> - 4.3.5-4
changelog:
  - fix ceilometer-upgrade stuck:
  - 1. backport python3 patch
  - 2. update gnocchi-api.service
  - 3. update Requires


author: Shuo Wang <abushwang@tencent.com> - 3.0.11-5
changelog:
  - Build with --no-warn-rwx-segment to fix build error in make apps
  - and we don't wind up with segment maps in the final bianries anyway


author: Shuo Wang <abushwang@tencent.com> - 9.0.0-2
changelog:
  - backport patch to fix CVE-2023-46045:
  - gvc: detect plugin installation failure and display an error


author: wynnfeng <wynnfeng@tencent.com> - 2.4.57-8
changelog:
  - [type] security
  - [desc] fix CVE-2024-38473, 2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573


author: Miro Hrončok <mhroncok@redhat.com> - 1.0-12
changelog:
  - Correct conflicts to redhat-rpm-macros < 205
  - Move Perl scripts back to kernel-rpm-macros to avoid Perl in the default buildroot


author: Jiaxin Yang <jiaxinyyang@tencent.com> - 1.13.1-1
changelog:
  - Fix bug with smaller width bigger size, resolve CVE-2023-44488
  - VP8: disallow thread count changes, resolve CVE-2023-5217


author: Xiaojie Chen <jackxjchen@tencent.com> - 38.2-5
changelog:
  - Modify anaconda iso configuration for opencloudos-stream
  - Modify live iso configuration for opencloudos-stream
  - Create /dev/urandom before packages installation


author: Wang Guodong <gordonwwang@tencent.com> - 8.0.37-1
changelog:
  - Upgrade to 8.0.37
  - fix CVE-2024-20960, CVE-2024-20961, CVE-2024-20962, CVE-2024-20963, CVE-2024-20964, 
    CVE-2024-20965, CVE-2024-20966, CVE-2024-20967, CVE-2024-20969, CVE-2024-20970,
    CVE-2024-20971, CVE-2024-20972, CVE-2024-20973, CVE-2024-20974, CVE-2024-20975,
    CVE-2024-20976, CVE-2024-20977, CVE-2024-20978, CVE-2024-20981, CVE-2024-20982


author: Zhao Zhen <jeremiazhao@tencent.com> - 18.18.2-1
changelog:
  - updated to upstream 18.18.2
  - switched to using original source tarball
  - fixed CVE-2023-45143 CVE-2023-39332 CVE-2023-39331 CVE-2023-38552 CVE-2023-32559 
  -       CVE-2023-32006 CVE-2023-32002 CVE-2023-30590 CVE-2023-30588 CVE-2023-30581


author: Wang Guodong <gordonwwang@tencent.com> - 1.22.0-2
changelog:
  - Set the environment variable(SETUPTOOLS_USE_DISTUTILS) to solve 
    setuptools-bundled distutils' LooseVersion issue.


author: Shuo Wang <abushwang@tencent.com> - 1.0-23
changelog:
  - \
  /usr/bin/python3 /usr/lib/rpm/OpenCloudOS/pyproject_save_files.py \
    --output-files "/builddir/build/BUILD/pyproject-files" \
    --output-modules "/builddir/build/BUILD/pyproject-modules" \
    --buildroot "/builddir/build/BUILDROOT/opencloudos-rpm-config-1.0-27.ocs23.noarch" \
    --sitelib "/usr/lib/python3.11/site-packages" \
    --sitearch "/usr/lib64/python3.11/site-packages" \
    --python-version "3.11" \
    --pyproject-record "/builddir/build/BUILD/pyproject-record" \
    --prefix "/usr" \
    
  : add support for nested directories and License-Files


author: Siyuan Lou <siyuanlou@tencent.com> - 1.0-27
changelog:
  - add more macros for golang. 
  - add rpm-go.lua, srpm-go.lua, and go-rpm-integration script to support go rpm packaging.


author: Liangliang Zhai <zhailiangliang@loongson.cn> - 2.7.2-6
changelog:
  - [Type] other
  - [DESC] To solve openwsman-winrs installation dependency on rubygem-openwsman,
           enable ruby for loongarch64 to compile and generate rubygem-openwsman


author: doriscchao <doriscchao@tencent.com> - 2.7.6-1
changelog:
  - initial build, base version 2.7.6, update to upstream git commit 20200514 with gnulib 
    version 20200513 through patch0001.


author: Xiaojie Chen <jackxjchen@tencent.com> - 3.02-1
changelog:
  - Upgrade to upstream version 3.02
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.36-1
changelog:
  - Upgrade to upstream version 2.36
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.143-1
changelog:
  - Upgrade to upstream version 2.143
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.206-1
changelog:
  - Upgrade to upstream version 2.206
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.16-1
changelog:
  - Upgrade to upstream version 1.16
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 6.04-1
changelog:
  - Upgrade to upstream version 6.04
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 3.19-1
changelog:
  - Upgrade to upstream version 3.19
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.22-1
changelog:
  - Upgrade to upstream version 2.22
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 7.70-1
changelog:
  - Upgrade to upstream version 7.70
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.75-1
changelog:
  - Upgrade to upstream version 1.75
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.54-1
changelog:
  - Upgrade to upstream version 2.54
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 3.81-1
changelog:
  - Upgrade to upstream version 3.81
  - Remove perl-libs which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 6.06-1
changelog:
  - Upgrade to upstream version 6.06
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 6.44-1
changelog:
  - Upgrade to upstream version 6.44
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15
  - Remove conditional macro because perl(Clone) is no longger an optional dependency


author: Xiaojie Chen <jackxjchen@tencent.com> - 0.088-1
changelog:
  - Upgrade to upstream version 0.088
  - Remove perl-libs which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 0.42-1
changelog:
  - Upgrade to upstream version 0.42
  - Remove perl-libs which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.083-1
changelog:
  - Upgrade to upstream version 2.074
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 4.10-1
changelog:
  - Upgrade to upstream version 4.10
  - Remove perl-libs which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 4.16-1
changelog:
  - Upgrade to upstream version 4.16
  - Remove perl-libs which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.9998.39-1
changelog:
  - Upgrade to upstream version 1.9998.39
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2:0.42.34-1
changelog:
  - Upgrade to upstream version 0.42.34
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 5.20230720-1
changelog:
  - Upgrade to upstream version 5.20230720
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.21-1
changelog:
  - Upgrade to upstream version 1.21
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.000038-1
changelog:
  - Upgrade to upstream version 1.000038
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.39-1
changelog:
  - Upgrade to upstream version 1.39
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.66-1
changelog:
  - Upgrade to upstream version 1.66
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 3.45-1
changelog:
  - Upgrade to upstream version 3.45
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.037-1
changelog:
  - Upgrade to upstream version 2.037
  - Remove perl-libs which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.204-1
changelog:
  - Upgrade to upstream version 1.204
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 0.017-1
changelog:
  - Upgrade to upstream version 0.017
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 0.002010-1
changelog:
  - Upgrade to upstream version 0.002010
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.302195-1
changelog:
  - Upgrade to upstream version 1.302195
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.35-1
changelog:
  - Upgrade to upstream version 1.35
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 5.19-1
changelog:
  - Upgrade to upstream version 5.19
  - Remove perl-libs which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.15-1
changelog:
  - Upgrade to upstream version 1.15
  - Add file perlcompat.attr which generates replacement for versioned


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.33-1
changelog:
  - Upgrade to upstream version 1.33
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 3.15-1
changelog:
  - Upgrade to upstream version 3.15
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 6.72-1
changelog:
  - Upgrade to upstream version 6.72
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15
  - Add buildrequires perl(Module::Load) and perl(HTTP::CookieJar::LWP)
  - Add requires perl(HTTP::CookieJar::LWP)


author: Xiaojie Chen <jackxjchen@tencent.com> - 0.241-1
changelog:
  - Upgrade to upstream version 0.241
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 5.01-1
changelog:
  - Upgrade to upstream version 5.01
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Shuo Wang <abushwang@tencent.com> - 23.08.0-3
changelog:
  - fix CVE-2024-6239 and backport its pre-patch
  - pdfinfo: Fix crash in broken documents when using -dests


author: Wang Guodong <gordonwwang@tencent.com> - 15.4-1
changelog:
  - Upgrade to version 15.4
  - Use sysusers configuration to setup user & group
  - CVEs fixed: CVE-2023-39417 CVE-2023-39418


author: cunshunxia <cunshunxia@tencent.com> - 10.0.0-2
changelog:
  - remove runtime dependence pyOpenSSL which is only used when test.
  - remove six which is not needed anymore.


author: Miaojun Dong <zoedong@tencent.com> - 0.6.2-6
changelog:
  - Disable typeguard check, stack-data is not yet adapted to typeguard v3 and v4
  - Fix the color diffrencent and Update test_pygments_example with pygments-2.16


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.9.2-1
changelog:
  - Upgrade to upstream version 1.9.2 
  - Disable some tests until upstream adapts to changes in python 3.11


author: Upgrade Robot <upbot@opencloudos.org> - 8.2.2-1
changelog:
  - Upgrade to version 8.2.2
  - fix vnc module display problem, see
  - https://gitlab.com/qemu-project/qemu/-/issues/2051


author: Song Gao <gaosong@loongson.cn> - 8.2.2-7
changelog:
  - Patch0056: 0055-hw-loongarch-virt-Align-high-memory-base-address-wit.patch
  - Patch0057: 0056-target-loongarch-Add-timer-information-dump-support.patch
  - Patch0058: 0057-target-loongarch-meson-move-gdbstub.c-to-loongarch.s.patch
  - Patch0059: 0058-target-loongarch-move-translate-modules-to-tcg.patch
  - Patch0060: 0059-linux-headers-Update-to-Linux-v6.7-rc5.patch
  - Patch0061: 0060-linux-headers-Synchronize-linux-headers-from-linux-v.patch
  - Patch0062: 0061-target-loongarch-Define-some-kvm_arch-interfaces.patch
  - Patch0063: 0062-target-loongarch-Supplement-vcpu-env-initial-when-vc.patch
  - Patch0064: 0063-target-loongarch-Implement-kvm-get-set-registers.patch
  - Patch0065: 0064-target-loongarch-Implement-kvm_arch_init-function.patch
  - Patch0066: 0065-target-loongarch-Implement-kvm_arch_init_vcpu.patch
  - Patch0067: 0066-target-loongarch-Implement-kvm_arch_handle_exit.patch
  - Patch0068: 0067-target-loongarch-Restrict-TCG-specific-code.patch
  - Patch0069: 0068-target-loongarch-Implement-set-vcpu-intr-for-kvm.patch
  - Patch0070: 0069-target-loongarch-Add-loongarch-kvm-into-meson-build.patch
  - Patch0071: 0070-hw-intc-loongarch_ipi-Use-MemTxAttrs-interface-for-i.patch
  - Patch0072: 0071-hw-loongarch-virt-Set-iocsr-address-space-per-board-.patch
  - Patch0073: 0072-hw-intc-loongarch_extioi-Add-dynamic-cpu-number-supp.patch
  - Patch0074: 0073-hw-intc-loongarch_extioi-Add-vmstate-post_load-suppo.patch
  - Patch0075: 0074-configure-Add-linux-header-compile-support-for-Loong.patch
  - Patch0076: 0075-target-loongarch-Set-cpuid-CSR-register-only-once-wi.patch
  - Patch0077: 0076-target-loongarch-kvm-Enable-LSX-LASX-extension.patch
  - Patch0078: 0077-target-loongarch-Fix-qtest-test-hmp-error-when-KVM-o.patch
  - Patch0079: 0078-loongarch-Change-the-UEFI-loading-mode-to-loongarch.patch
  - Patch0080: 0079-target-loongarch-Fix-tlb-huge-page-loading-issue.patch
  - Patch0081: 0080-target-loongarch-Fix-qemu-loongarch64-hang-when-exec.patch
  - Patch0082: 0081-target-loongarch-kvm-Add-software-breakpoint-support.patch
  - Patch0083: 0082-hw-intc-loongarch_extioi-Add-virt-extension-support.patch
  - Patch0084: 0083-target-loongarch-kvm-sync-kernel-header-files.patch
  - Patch0085: 0084-hw-intc-loongarch_extioi-Add-virt-extension-support-.patch
  - Patch0087: 0085-target-loongarch-kvm-Add-pmu-support.patch
  - Patch0087: 0086-target-loongarch-Fix-qemu-system-loongarch64-assert-.patch
  - Patch0088: 0087-target-loongarch-kvm-Fix-VM-recovery-from-disk-failu.patch
  - Patch0089: 0088-target-loongarch-kvm-fpu-save-the-vreg-registers-hig.patch
    (Add LoongArch features and bugfixes)


author: Xiaojie Chen <jackxjchen@tencent.com> - 7.0.14-1
changelog:
  - Upgrade to upstream version 7.0.14
  - Fix CVE-2023-41053 and CVE-2023-45145
  - Set jemalloc page size


author: Wang Guodong <gordonwwang@tencent.com> - 1.73.0-1
changelog:
  - Upgrade to 1.73.0
  - Add build target for x86_64-unknown-none, x86_64-unknown-uefi
  - Use emmalloc instead of CC0 dlmalloc when bundling wasi-libc


author: Wang Guodong <gordonwwang@tencent.com> - 1.70.0-3
changelog:
  - include -Cstrip=none in %build_rustflags for rust-1.77.0
  - sync rust-toolset macros to rust-packaging v25.2


author: Xiaojie Chen <jackxjchen@tencent.com> - 6.5-1
changelog:
  - Upgrade to upstream version 6.5
  - Fix CVE-2023-46728, CVE-2023-46848 and CVE-2023-46847
  - Fix CVE-2023-46846, CVE-2023-5824 and CVE-2023-46724


author: Doris Chao <doriscchao@tencent.com> - 7.0.3-4
changelog:
  - [Type] bugfix
  - [DESC] Change the way info files information is updated, no longer using
  - the fix-info-dir script,since bash no loonger provies the /usr/share/info/dir


author: Fanjun Kong <fanjunkong@tencent.com> - 1.13.1-3
changelog:
  - CVE-2023-5367
  - CVE-2023-5380
  - CVE-2023-6377
  - CVE-2023-6478
  - CVE-2023-6816
  - CVE-2024-0229
  - CVE-2024-21885
  - CVE-2024-21886


author: Liangliang Zhai <zhailiangliang@loongson.cn> - 1.13.1-4
changelog:
  - [Type] other
  - [DESC] fix patching failure:
    Source package has previously fixed the following CVE:
    CVE-2023-5367,CVE-2023-5380,CVE-2023-6478,CVE-2023-6816,CVE-2024-0229,CVE-2024-21885,CVE-2024-21886,CVE-2023-6377.


author: Doris Chao <doriscchao@tencent.com> - 9.0.82-1
changelog:
  - Update to apache-tomcat-9.0.82 to fix the CVE-2023-45648,CVE-2023-42795,CVE-2023-41080 
    and CVE-2023-28709


author: Doris Chao <doriscchao@tencent.com> - 9.0.86-1
changelog:
  - [Type] security
  - [DESC] Update to apache-tomcat-9.0.86 to fix CVEs,include CVE-2024-23672 and CVE-2024-24549


author: Xin Cheng <denisecheng@tencent.com> - 1.17.1-4
changelog:
  - Fix CVE-2023-50387, DNSSEC verification complexity can be exploited to exhaust CPU resources and stall DNS resolvers.
  - Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust CPU.


author: Miaojun Dong <zoedong@tencent.com> - 0.13.0-1
changelog:
  - Bump version to 0.13.0
  - usbredirserver is deprecated in favor of usbredirect
  - usbredirect can be used as a client or server through different parameters


author: Miaojun Dong <zoedong@ttencent.com> - 1.4.2-1
changelog:
  - Upgrade version to 1.4.2
  - Rebuild for binutils-2.41-2 to fix BPF bytecode files strip failure
  - Remove Patch for i686 arch


author: Fanjun Kong <fanjunkong@tencent.com> - 21.1.8-3
changelog:
  - Fix CVE:
  - CVE-2023-6478
  - CVE-2023-5367
  - CVE-2023-5380
  - CVE-2023-6816
  - CVE-2024-0229
  - CVE-2024-21885
  - CVE-2024-21886
  - CVE-2024-0408
  - CVE-2024-0409


author: Zhao Zhen <jeremiazhao@tencent.com> - 23.1.2-3
changelog:
  - fixed CVE-2023-5367.patch CVE-2024-21885.patch CVE-2024-21886.patch CVE-2024-0408.patch
  - CVE-2024-0409.patch CVE-2024-0229.patch CVE-2023-6816.patch CVE-2023-6377.patch
  - CVE-2024-31080.patch CVE-2024-31081.patch


