# changelog

author: dorsoli <dorsoli@tencent.com> - 1.16.0-1
changelog:
  - [Type] sync 
  - [DESC] update to Version 1.16.0 to fix CVE-2025-8283 which requires aardvark-dns version >= netavark version


author: Sinong Chen <costinchen@tencent.com> - 0.18.6-4
changelog:
  - [Type] security
  - [DESC] Escape control characters in report and log output (CVE-2025-54389), and
  - fix null pointer dereference after reading incorrectly encoded xattr attributes
  - from database (CVE-2025-54409)


author: Tracker Robot <trackbot@opencloudos.tech> - 1.7.5-3
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] f8e45525c7f945f8b53510d1ee1768c4381b2da7.patch: Merged r1920432 from trunk:
  - [Unknown] 191479a91b47cbe367113132355f514f72115c57.patch: On 1.7.x branch: Merge revision r1920350 from trunk:
  - [Bug Fix] 6a2993b9493bff7b6b20858730cba16a218e46b1.patch: Merge r1920680 from trunk:


author: doupengda <doupengda@loongson.cn> - 0.29.1-6
changelog:
  - [Type] bugfix
  - [DESC] fix larchintrin.h not found error for loongarch64
  - Sourced from https://github.com/iovisor/bcc/pull/5078


author: Xin Cheng <denisecheng@tencent.com> - 9.18.18-4
changelog:
  - fix CVE-2023-4408: Parsing large DNS messages may cause excessive CPU load
  - fix CVE-2023-5517: Querying RFC 1918 reverse zones may cause an assertion failure when "nxdomain-redirect" is enabled
  - fix CVE-2023-5679: Enabling both DNS64 and serve-stale may cause an assertion failure during recursive resolution
  - fix CVE-2023-6516: Specific recursive query patterns may lead to an out-of-memory condition
  - fix CVE-2023-50387: KeyTrap - Extreme CPU consumption in DNSSEC validator
  - fix CVE-2023-50868: Preparing an NSEC3 closest encloser proof can exhaust CPU resources


author: Upgrade Robot <upbot@opencloudos.tech> - 9.18.21-1
changelog:
  - [Type] security
  - [DESC] Upgrade to version 9.18.21 and fix CVE-2024-0760,CVE-2024-1737,CVE-2024-1975,CVE-2024-4076


author: Zhao Zhen <jeremiazhao@tencent.com> - 1.80-1
changelog:
  - updated to upstream 1.80
  - fixed CVE-2023-33201 CVE-2024-34447 CVE-2024-30171
  - rewrite building script


author: Pengda Dou <doupengda@loongson.cn> - 0.19.1-6
changelog:
  - [Type] other
  - [DESC] add support for loongarch64
  - Fix cannot convert 'bfd*' to 'bfd_architecture'


author: jackeyji <jackeyji@tencent.com> - 1.37.5-1
changelog:
  - [Type] security
  - [DESC] upgrade to 1.37.5 to fix CVE-2024-9341 CVE-2024-9407 CVE-2024-9675 and CVE-2024-9676


author: rockerzhu <rockerzhu@tencent.com> - 17.2.5-6
changelog:
  - Rebuilt for boost 1.82.0 and add common-options-objs as a dependency
    of common-msg-objs, rados_snap_set_diff_obj and krbd.
  - Build with bundled boost until boost compatible to fix "'const class boost::core::basic_string_view'
    has no member named 'to_string'".


author: zhanglimin <zhanglimin@loongson.cn> - 17.0.6-9
changelog:
  - removed distro support patch via https://gitee.com/opencloudos-stream/gcc/pulls/19
  - gcc has been added x86_64-linux-gnu triple and its the primary triple,so 
  - x86_64-OpenCloudOS-linux is inactive


author: Shuo Wang <abushwang@tencent.com> - 2.4.6-8
changelog:
  - fix CVE-2025-58060 CVE-2025-58364
  - cupsd: Block authentication using alternate method
  - fix remote DoS via null dereference


author: Xin Cheng <denisecheng@tencent.com> - 4.4.3-8.P1
changelog:
  - fix CVE-2022-38177, CVE-2022-2795,CVE-2022-38178,CVE-2023-3341, CVE-2023-2828,CVE-2023-4408,CVE-2023-50387


author: Huang zien <ethanehuang@tencent.com> - 2.89-3
changelog:
  - [Type] security
  - [DESC] Dnsmasq 2.9 is vulnerable to Integer Overflow via forward_query(fix cve-2023-49441)


author: cunshunxia <cunshunxia@tencent.com> - 20220826gitba0e0e4c6a17-4
changelog:
  - build aarch64 subpkg only on arm.

  -* Fri Mar 31 2023 OpenCloudOS Release Engineering <releng@opencloudos.tech> - 20220826gitba0e0e4c6a17-3
  -- Rebuilt for OpenCloudOS Stream 23


author: Chunsheng Luo <luffyluo@tencent.com> - 20230524gitba91d0292e-4
changelog:
  - fix CVE-2023-45229 CVE-2023-45230 CVE-2023-45231 CVE-2023-45232 CVE-2023-45233 CVE-2023-45234 CVE-2023-45235


author: cunshunxia <cunshunxia@tencent.com> - 20240223-1
changelog:
  - Upgrade to version edk2-stable202402
  - Support Hygon CSV3 feature, support live migration for Hygon CSV1/2/3 guests, by hanliyang@hygon.cn


author: Doris Chao <doriscchao@tencent.com> - 2.4.2-7
changelog:
  - [Type] security
  - [DESC] Apply patch to fix a heap-based buffer overflow in fcgi (CVE-2025-23016),
  - which also affects Perl FCGI module indirectly (CVE-2025-40907).


author: Zhao Zhen <jeremiazhao@tencent.com> - 4.12.1-1
changelog:
  - updated fence-agents 4.12.1
  - disabled ppc64le temlpy
  - bootstrap aws/gce/compute/kubevirt/aliyun agents
  - disabled azure temply
  - added ecloud agents


author: rockerzhu <rockerzhu@tencent.com> - 102.13.0-2
changelog:
  - Update cbindgen to 0.24.5.
  - Recompile with llvm 16 and rust 1.70 to fix build error in cbindgen gkrust.
  - Update nss, nspr, and rust version.


author: Doris Chao <doriscchao@tencent.com> - 102.15.1-1
changelog:
  - Update to 102.15.1
  - Update nss, nspr version
  - App pacth from mozilla to fix CVE-2023-23604
  - App pacth from mozilla to fix CVE-2022-46884


author: Doris Chao <doriscchao@tencent.com> - 115.5.0-1
changelog:
  - Update to 115.5.0 to fix CVEs,include CVE-2023-6204,CVE-2023-6205,
  - CVE-2023-6206,CVE-2023-6207,CVE-2023-6208,CVE-2023-6209,CVE-2023-6212


author: Doris Chao <doriscchao@tencent.com> - 115.6.0-1
changelog:
  - Update to 115.6.0 to fix CVEs,include CVE-2023-6856,CVE-2023-6857,
  - CVE-2023-6858,CVE-2023-6859,CVE-2023-6860,CVE-2023-6861,CVE-2023-6862,
  - CVE-2023-6863,CVE-2023-6864,CVE-2023-6865,CVE-2023-687


author: Doris Chao <doriscchao@tencent.com> - 115.7.0-1
changelog:
  - Update to 115.7.0 to fix CVEs,include CVE-2023-6135,CVE-2024-0741,
  - CVE-2024-0742,CVE-2024-0753,CVE-2024-0746,CVE-2024-0747,CVE-2024-0749,
  - CVE-2024-0750,CVE-2024-0751,CVE-2024-0755


author: Doris Chao <doriscchao@tencent.com> - 115.8.0-1
changelog:
  - Update to 115.8.0 to fix CVEs,include CVE-2024-1546,CVE-2024-1547,
  - CVE-2024-1548,CVE-2024-1549,CVE-2024-1550,CVE-2024-1551,CVE-2024-1552,
  - CVE-2024-1553


author: Doris Chao <doriscchao@tencent.com> - 115.9.1-1
changelog:
  - Update to 115.9.1 to fix CVEs,incldue CVE-2024-2612,CVE-2024-2614,
  - CVE-2024-2611,CVE-2024-2610,CVE-2024-2608,CVE-2024-2607,CVE-2024-2616,
  - CVE-2024-2605,CVE-2024-0743,CVE-2024-29944 
  - Build for expat 2.6.2 to fix CVE-2023-52425


author: Doris Chao <doriscchao@tencent.com> - 115.10.0-1
changelog:
  - [Type] security
  - [Desc] Update to 115.10.0 to fix CVEs,incldue CVE-2024-2609,
  - CVE-2024-3302,CVE-2024-3852,CVE-2024-3854,CVE-2024-3857,CVE-2024-3859,
  - CVE-2024-3861,CVE-2024-3863,CVE-2024-3864


author: Doris Chao <doriscchao@tencent.com> - 115.11.0-1
changelog:
  - [Type] security
  - [DESC] Update to 115.11.0 to fix CVEs,incldue CVE-2024-4367,
  -  CVE-2024-4767,CVE-2024-4768,CVE-2024-4769,CVE-2024-4770,CVE-2024-4777


author: Doris Chao <doriscchao@tencent.com> - 115.13.0-1
changelog:
  - [Type] security
  - [DESC] Update to 115.13.0 to fix CVEs,incldue CVE-2024-5688,
  - CVE-2024-5690,CVE-2024-5691,CVE-2024-5693,CVE-2024-5696,CVE-2024-5700
  - CVE-2024-5702,CVE-2024-6601,CVE-2024-6602,CVE-2024-6603,CVE-2024-6604


author: Doris Chao <doriscchao@tencent.com> - 115.13.0-1
changelog:
  - [Type] security
  - [DESC] Update to 115.13.0 to fix CVEs,incldue CVE-2024-5688,
  - CVE-2024-5690,CVE-2024-5691,CVE-2024-5693,CVE-2024-5696,CVE-2024-5700,
  - CVE-2024-5702,CVE-2024-6601,CVE-2024-6602,CVE-2024-6603,CVE-2024-6604


author: Doris Chao <doriscchao@tencent.com> - 115.15.0-1
changelog:
  - [Type] security
  - [DESC] Update to version 115.15.0 to fix CVEs, including CVE-2024-7519,
  - CVE-2024-7521, CVE-2024-7522, CVE-2024-7524, CVE-2024-7525, CVE-2024-7526,
  - CVE-2024-7527, CVE-2024-7529, and CVE-2024-7531, which are fixed in Firefox 
  - ESR 115.14,as well as CVE-2024-8381, CVE-2024-8382, CVE-2024-8383, and 
  - CVE-2024-8384, which are fixed in Firefox ESR 115.15.


author: Wenlong Zhang <zhangwenlong@loongson.cn> - 128.3.1-1
changelog:
  - [Type] security
  - [DESC] Update to version 128.3.1 to fix CVEs, including CVE-2024-9401,
  - CVE-2024-9392, CVE-2024-9393, CVE-2024-9394 and CVE-2024-9680.
  - update cbindgen-vendor.tar.xz to fix build error for cbindgen on loongarch64


author: Doris Chao <doriscchao@tencent.com> - 128.4.0-1
changelog:
  - [Type] security
  - [DESC] Update to version 128.4.0 to fix CVEs, including CVE-2024-10458, 
  - CVE-2024-10459, CVE-2024-10460, CVE-2024-10461, CVE-2024-10462, CVE-2024-10463, 
  - CVE-2024-10464, CVE-2024-10465, CVE-2024-10466 and CVE-2024-10467.


author: Doris Chao <doriscchao@tencent.com> - 128.5.1-1
changelog:
  - [Type] security
  - [DESC] Update to version 128.5.1 to fix CVEs, including CVE-2024-11691,
  - CVE-2024-11692, CVE-2024-11693, CVE-2024-11694, CVE-2024-11695, CVE-2024-11696,
  - CVE-2024-11697, CVE-2024-11698, and CVE-2024-11699.


author: Doris Chao <doriscchao@tencent.com> - 128.6.0-1
changelog:
  - [Type] security
  - [DESC] Update to version 128.6.0 to fix CVEs,including 2024-50336,CVE-2025-0237,
  - CVE-2025-0238, CVE-2025-0239, CVE-2025-0240, CVE-2025-0241,CVE-2025-0242
  - and CVE-2025-0243.


author: Doris Chao <doriscchao@tencent.com> - 128.7.0-1
changelog:
  - [Type] security
  - [DESC] Update to version 128.7.0 to fix CVEs,including CVE-2025-1009,
  - CVE-2025-1010, CVE-2025-1011, CVE-2025-1012, CVE-2025-1013, CVE-2025-1014,
  - CVE-2025-1016, CVE-2025-1017, CVE-2024-11704.


author: Doris Chao <doriscchao@tencent.com> - 128.8.0-1
changelog:
  - [Type] security
  - [DESC] Update to version 128.8.0 to fix CVEs,including CVE-2024-43097,
  - CVE-2025-1930, CVE-2025-1931, CVE-2025-1932, CVE-2025-1933, CVE-2025-1934,
  - CVE-2025-1935, CVE-2025-1936, CVE-2025-1937, CVE-2025-1938.


author: Doris Chao <doriscchao@tencent.com> - 128.9.0-1
changelog:
  - [Type] security
  - [DESC] Update to version 128.9.0 to fix CVEs,including CVE-2025-3028,
  - CVE-2025-3029, CVE-2025-3030.


author: Doris Chao <doriscchao@tencent.com> - 128.10.0-1
changelog:
  - [Type] security
  - [DESC] Update to version 128.10.0 to fix CVEs, including CVE-2025-2817,
  - CVE-2025-4083, CVE-2025-4087, CVE-2025-4091, CVE-2025-4093.


author: Doris Chao <doriscchao@tencent.com> - 128.10.1-1
changelog:
  - [Type] security
  - [DESC] Update to version 128.10.1 to fix CVEs, including CVE-2025-4918
  - and CVE-2025-4919.
  - Limit parallelism and optimize flags on x86_64 to reduce memory usage.


author: Doris Chao <doriscchao@tencent.com> - 128.11.0-1
changelog:
  - [Type] security
  - [DESC] Update to version 128.11.1 to fix CVEs, including CVE-2025-5263, 
  - CVE-2025-5264, CVE-2025-5266, CVE-2025-5267, CVE-2025-5268, and CVE-2025-5269.


author: Doris Chao <doriscchao@tencent.com> - 128.11.0-1
changelog:
  - [Type] security
  - [DESC] Update to version 128.11.1 to fix CVEs, including CVE-2025-5263, 
  - CVE-2025-5264, CVE-2025-5266, CVE-2025-5267, CVE-2025-5268,CVE-2025-5269
  - and CVE-2025-5283.


author: Doris Chao <doriscchao@tencent.com> - 128.12.0-1
changelog:
  - [Type] security
  - [DESC] Update to version 128.12.0 to fix CVEs, including CVE-2025-6424, 
  - CVE-2025-6425, CVE-2025-6429 and CVE-2025-6430.


author: Doris Chao <doriscchao@tencent.com> - 128.13.0-1
changelog:
  - [Type] security
  - [DESC] Update to version 128.13.0 to fix CVEs, including CVE-2025-8027, 
  - CVE-2025-8028, CVE-2025-8029, CVE-2025-8030, CVE-2025-8031, CVE-2025-8032, 
  - CVE-2025-8033, CVE-2025-8034 and CVE-2025-8035.


author: Upgrade Robot <upbot@opencloudos.tech> - 128.14.0-1
changelog:
  - Upgrade to version 128.14.0
  - Update to version 128.14.0 to fix CVEs, including CVE-2025-9179, CVE-2025-9180, CVE-2025-9181 and CVE-2025-9185.


author: Doris Chao <doriscchao@tencent.com> - 128.6.0-1
changelog:
  - [Type] security
  - [DESC]  Update to version 128.6.0 to fix CVEs,including CVE-2025-0237,
  - CVE-2025-0238, CVE-2025-0239, CVE-2025-0240, CVE-2025-0241,CVE-2025-0242
  - and CVE-2025-0243.


author: Doris Chao <doriscchao@tencent.com> - 128.6.0-1
changelog:
  - [Type] security
  - [DESC]  Update to version 128.6.0 to fix CVEs,including 2024-50336,CVE-2025-0237,
  - CVE-2025-0238, CVE-2025-0239, CVE-2025-0240, CVE-2025-0241,CVE-2025-0242
  - and CVE-2025-0243.


author: Doris Chao <doriscchao@tencent.com> - 128.7.0-1
changelog:
  - [Type] security
  - [DESC]  Update to version 128.7.0 to fix CVEs,including CVE-2025-1009,
  - CVE-2025-1010, CVE-2025-1011, CVE-2025-1012, CVE-2025-1013, CVE-2025-1014,
  - CVE-2025-1016, CVE-2025-1017, CVE-2024-11704.


author: Tracker Robot <trackbot@opencloudos.tech> - 2.14.2-7
changelog:
  - Apply patches from rpm-tracker
  - [Bug Fix] c22908828fb2dbfdf38733d119adc1cf5fe00173.patch: Clean up .uuid files with fc-cache -f too


author: Tracker Robot <trackbot@opencloudos.tech> - 2.14.2-8
changelog:
  - Apply patches from rpm-tracker
  - [Bug Fix] 42b12fc7c0855cddecdf6f4a0a26b897d53432a5.patch: More information when no writable cache directories


author: Tracker Robot <trackbot@opencloudos.tech> - 2.14.2-9
changelog:
  - Apply patches from rpm-tracker
  - [Bug Fix] b269e6853be6278cc9fe06b1c1d92f7d31504c01.patch: Fix invalid escape character \s


author: Tracker Robot <trackbot@opencloudos.tech> - 2.14.2-10
changelog:
  - Apply patches from rpm-tracker
  - [Bug Fix] eaa335e7c4686c622f31e691f8a41fdf30ea42b3.patch: Fix a memory leak in _get_real_paths_from_prefix


author: Tracker Robot <trackbot@opencloudos.tech> - 2.14.2-11
changelog:
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] ab765827101787d49c0a66b23addc1f68f99a455.patch: Set FcTypeVoid if no valid types to convert


author: Tracker Robot <trackbot@opencloudos.tech> - 2.14.2-12
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] 3a0ed05722feec5c478d076d87a64bf15f4bacdb.patch: Use proper postscriptname for named instance if any


author: Tracker Robot <trackbot@opencloudos.tech> - 2.14.2-13
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] aae5ff1f2e1be978272c41bf809d15b6e47b1e2c.patch: Remove redundant leaf assignment in fcfreetype.c


author: Tracker Robot <trackbot@opencloudos.tech> - 2.14.2-14
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] ec20037908963870e27572fadef766cc8a6d9818.patch: Unlock on allocation failure in FcCacheInsert


author: Tracker Robot <trackbot@opencloudos.tech> - 2.14.2-15
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] b892c2196d0d9e74df61620e79ad8e846b01637d.patch: Ensure config is locked during retry in FcConfigReference


author: Tracker Robot <trackbot@opencloudos.tech> - 2.14.2-16
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] ad58277b71415b714009bee33f04e8c18c7ab44d.patch: Fix FcSerialize null pointer usage
  - [Bug Fix] 9164a7bcbd3be022f074bb0530dd5c12e3c83b44.patch: Fix qsort nullpointer issue


author: Tracker Robot <trackbot@opencloudos.tech> - 2.14.2-17
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] 71a6a990aa8578ddd7140fe0b2c9f87508d2b59b.patch: Fix a memory leak in fc-list/fc-query/fc-scan


author: Tracker Robot <trackbot@opencloudos.tech> - 2.14.2-18
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] 084752e737a12c99800b2a35ea80eab11a12eabe.patch: Accept integer for pixelsize


author: Tracker Robot <trackbot@opencloudos.tech> - 2.14.2-19
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] 8f54cb21c366a97d9c30723bff27d15e70aa7729.patch: Deal with glob string properly


author: Tracker Robot <trackbot@opencloudos.tech> - 2.14.2-20
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] bba8646fdacc58d9d5ccb0e37527627b28a52e9b.patch: Fix heap buffer underflow in FcConfigXdgDataDirs
  - [Bug Fix] 4a579aca645fd70da6739c493fd13643aad33250.patch: Skip empty entries in XDG_DATA_DIRS parsing


author: Upgrade Robot <upbot@opencloudos.tech> - 4.12.2-1
changelog:
  - Upgrade to version 4.12.2 (Fix CVE-2024-2698, CVE-2024-3183)
  - Revert "Replace netifaces with ifaddr"


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.11.2-1
changelog:
  - Upgrade to upstream version 2.11.2
  - Fix CVE-2023-40589,CVE-2023-40569,CVE-2023-40567,CVE-2023-40188
  - Fix CVE-2023-40186,CVE-2023-40181,CVE-2023-39356,CVE-2023-39354
  - Fix CVE-2023-39353,CVE-2023-39352,CVE-2023-39351,CVE-2023-39350
  - Fix CVE-2022-41877,CVE-2022-39347,CVE-2022-39320,CVE-2022-39319
  - Fix CVE-2022-39318,CVE-2022-39317,CVE-2022-39316
  - Remove dbus, glib and gstreamer requirements


author: Fanjun Kong <fanjunkong@tencent.com> - 2.11.6-1
changelog:
  - Upgrade to upstream version 2.11.6
  - CVE-2024-32041 [Low[ OutOfBound Read in zgfx_decompress_segment
  - CVE-2024-32039 [Moderate] Integer overflow & OutOfBound Write in clear_decompress_residual_data
  - CVE-2024-32040 [Low] integer underflow in nsc_rle_decode
  - CVE-2024-32458 [Low] OutOfBound Read in planar_skip_plane_rle
  - CVE-2024-32459 [Low] OutOfBound Read in ncrush_decompress
  - CVE-2024-32460 [Low] OutOfBound Read in interleaved_decompress


author: kianli <kianli@tencent.com> - 9.0.1-1
changelog:
  - Upgrade to 9.0.1
  - Security fix for CVE-2023-38406
  - Security fix for CVE-2023-38407
  - Security fix for CVE-2023-38802
  - Security fix for CVE-2023-41359
  - Security fix for CVE-2023-41909
  - Security fix for CVE-2023-41360
  - Security fix for CVE-2023-41361
  - Security fix for CVE-2023-41358
  - Security fix for CVE-2023-46752
  - Security fix for CVE-2023-46753


author: Qian Liang <renaliang@tencent.com> - 12.3.1-1
changelog:
  - updated to tgcc-12.3.1
  - Security updates: fix CVE-2023-4039. merge from https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=75c37e031408262263442f5b4cdb83d3777b6422
  - fix ICE in ipa profile multiple target speculative.


author: Zhao Zhen <jeremiazhao@tencent.com> - 12.3.1.1-1
changelog:
  - Added libsanitizer for loongarch
  - Added Ada libffi libvtv libitm for loongarch
  - Optimized multiplication and immediate instruction generation for loongarch
  - Added vector instruction test set for loongarch
  - Fixed link error when building libgccjit for loongarch
  - Added supports of [f]copysign for loongarch
  - Added supports of mcmodel=medium and extreme for loongarch
  - Added fmin/fmax RTL backend template for loongarch
  - fixed some building error for loongarch


author: Huang Yang <huangyang@loongson.cn> - 12.3.1.1-2
changelog:
  - [Type] other
  - [DESC] enable partial compilation options on loongarch architectures
  - Added longarch vector instruction header file


author: Huang Yang <huangyang@loongson.cn> - 12.3.1.2-3
changelog:
  - [Type] bugfix
  - [DESC] Fix GNOME desktop startup failure on loongarch architecture
  - Remove some duplicate configure options


author: Zhao Zhen <jeremiazhao@tencent.com> - 12.3.1.3-1
changelog:
  - [Type] other
  - [DESC] backport LoongArch patches
  -    Fixed duplicate link errors when building libgccjit.
  -    Changed the value of branch_cost: Optimized the generation of branch-related instructions.
  -    Fixed build and test errors caused by version differences.
  -    Optimized the generation of instructions for immediate loading.
  -    Optimized the implementation of stack-check.
  -    Optimized the generation of multiplication instructions.
  -    Added support for 3A6000.
  -    Modified the library installation path.
  -    Fixed GNOME desktop startup failure.
  -    Fixed dependencies on loongarch header files.
  -    Fixed the behavior of the macro instruction .align.
  -    Fixed the vec_initv32qiv16qi template to avoid ICE errors.
  -    Optimized the use of fcmp.caf.s instead of movgr2cf for copying from the zero register.
  -    Fixed the lsx_vreplgr2vr_<lsxfmt_f> instruction template error.
  -    Fixed backend subreg nesting errors.
  -    Fixed redundant barrier instructions before LL-SC.
  -    Optimized immediate loading.
  -    Fixed runtime errors when building gcc.
  -    Fixed incorrect use of frint and ftint instructions.
  -    Changed vector usage to standard template names.
  -    Allowed S9 as an alias for the r22 register.
  -    Changed the dynamic library installation path to lib64.
  -    Fixed memory reference errors with base address 0.
  -    Added a test suite for vector instructions.
  -    Added support for Ada, libffi, libvtv, libitm on LoongArch.
  -    Added support for prefetch instructions, commonly used floating-point instructions, and [f]copysign.
  -    Added support for mcmodel=medium and extreme.
  -    Added fmin/fmax RTL backend templates.
  -    Added the -mdirect-extern-access option.
  -    Added support for libsanitizer.
  -    Added the -mexplicit-relocs option as an optional target.
  -    Implemented __builtin_thread_pointer.
  -    Added support for xorsign.
  -    Added the alslsi3_extend template.
  -    Added a D language frontend.
  -    Added TLS relocation types.
  -    Added fmin/fmax RTL templates.
  -    Added a test suite for vector instructions.
  -    Defined ISA versions.


author: Zhao Zhen <jeremiazhao@tencent.com> - 12.3.1.4-1
changelog:
  - [Type] other
  - [DESC] Improved KunPeng feature
  - Suppotred KunPeng 920 high performance processor & AI compliation optimization
  - Structure optimization 
  - Array Width comparison optimization
  - Instruction generation optimization
  - added another triple directory link in %files for fixing 12.3.1.3-3


author: Zhao Zhen <jeremiazhao@tencent.com> - 12.3.1.5-1
changelog:
  - [Type] bugfix
  - [DESC] improved feature for loongarch64 and kunpeng(aarch64).
  - [Loongarch64] 
  - Fix errors for sanitizer.
  - removed Fix-indentation-and-numbering-errors.patch as it has been
  - merged into 12.3.1.5.
  - [kunpeng]
  - updateAImodel-addHip12CoreAndDef-bugfixResetMachineOpt-bugfixFortran.
  - Add-insn-defs-and-correct-costs-for-cmlt-generation.
  - Non-loop-disambiguation-CHREC-multiplication.
  - SLP_transpose.
  - Struct-static-field-compression.


author: Zhao Zhen <jeremiazhao@tencent.com> - 12.3.1.5-3
changelog:
  - [Type] bugfix
  - [DESC] fixed GNU TRIPLE conflict with cross toolchains, issue link:
  - https://gitee.com/opencloudos-stream/gcc/issues/ICUFG9?from=project-issue
  - fixed some static link libraries conflict, issue link:
  - https://gitee.com/opencloudos-stream/gcc/issues/ICUFGB?from=project-issue


author: Yi Lin <nilusyi@tencent.com> - 12.1-1
changelog:
  - package init.
  - remove condition compile: buildisa, scl, testsuite
  - remove subpkg: gdb-headless, gdb-minimal
  - remove pdf generate. remove its requirement
  - remove condition compile --with-fprofile --without-python --with asan


author: rockerzhu <rockerzhu@tencent.com> - 12.1-5
changelog:
  - Add sub-package of headless, avoiding rpm-build to require all gdb, but to require gdb-headless
    and not to require source-highlight.


author: rockerzhu <rockerzhu@tencent.com> - 12.1-6
changelog:
  - Add sub-package of minimal to provides /usr/bin/gdb-add-index(needed by rpm-build) and
    gdb.minimal(needed by /usr/bin/gdb-add-index)
  - Rebuilt with boost 1.82.0.


author: Tracker Robot <trackbot@opencloudos.tech> - 2.42.10-7
changelog:
  - Apply patches from rpm-tracker
  - [Bug Fix] 818963f1c34a05f7a072e121182403853488c99f.patch: Fix a memory leak


author: Shuo Wang <abushwang@tencent.com> - 10.02.1-5
changelog:
  - fix CVE-2024-29509 CVE-2024-29506 CVE-2024-29507
  - fix CVE-2024-29508 CVE-2024-29511
  - fix buffer overflows, partial SAFER bypass, pointer leak (Bug 707510)


author: Shuo Wang <abushwang@tencent.com> - 10.02.1-8
changelog:
  - fix CVE-2024-46951, CVE-2024-46952, CVE-2024-46953
  - fix CVE-2024-46954, CVE-2024-46955, CVE-2024-46956
  - PS interpreter - check the type of the Pattern Implementation (Bug #707991)
  - Bug #708001 "Buffer overflow in PDF XRef stream"
  - Bug 707793: Check for overflow validating format string
  - Bug 707788: Fix decode_utf8 to forbid overlong encodings.
  - Bug #707990 "Out of bounds read when reading color in "Indexed" color space"
  - PostScript interpreter - fix buffer length check Bug 707895


author: Shuo Wang <abushwang@tencent.com> - 10.02.1-9
changelog:
  - fix CVE-2025-2783{0-6}
  - Bug 708241: Fix potential Buffer overflow with DollarBlend
  - Bug #708132 "Text buffer overflow with long characters"
  - Bug 708133: Avoid integer overflow leading to buffer overflow
  - Bug 708259: Check TTF name size before copying to buffer.
  - PDF interpreter - Guard against unsigned int overflow
  - Bug 708131: Fix confusion between bytes and shorts
  - Bug 708192: Fix potential print buffer overflow


author: Shuo Wang <abushwang@tencent.com> - 10.02.1-12
changelog:
  - fix CVE-2025-59798 CVE-2025-59799 CVE-2025-59800
  - pdfwrite - avoid buffer overrun
  - pdfwrite - bounds check some strings
  - PDF OCR 8 bit device - avoid overflow


author: Shuo Wang <abushwang@tencent.com> - 3.0.11-5
changelog:
  - Build with --no-warn-rwx-segment to fix build error in make apps
  - and we don't wind up with segment maps in the final bianries anyway


author: jackeyji <jackeyji@tencent.com> - 1.21.13-1
changelog:
  - [Type] security
  - [DESC] upgrade to 1.21.13 to fix CVE-2024-24790 CVE-2024-34156 CVE-2024-24789 CVE-2024-24791 CVE-2024-34158 CVE-2024-34155


author: zhaoxiaolin <zhaoxiaolin@loongson.cn> - 1.24.0-1
changelog:
  - [Type] other
  - [DESC] upgrade to 1.24.0 for golang 1.22 is EOS, and add new feature support, optimize code, add instructions, etc. on loongarch64


author: jackeyji <jackeyji@tencent.com> - 1.24.2-1
changelog:
  - [Type] security
  - [DESC] upgrade to 1.24.2 to fix CVE-2024-45341 CVE-2024-45336 and CVE-2025-22865


author: hudson zhu <hudsonzhu@tencent.com> - 1.24.4-4
changelog:
  - [Type] bugfix
  - [DESC] os/exec: fix incorrect expansion of "", "." and ".." in LookPath [CVE-2025-47906]


author: Chunsheng Luo <luffyluo@tencent.com> - 10.2.6-7
changelog:
  - Fix CVE-2024-47875: dump dompurify to 2.5.0
  - Fix CVE-2025-30204 CVE-2024-51744: bump jwt to v4.5.2
  - Fix CVE-2024-6104: go-retryablehttp Redacted URL in logs/errors


author: Chunsheng Luo <luffyluo@tencent.com> - 10.2.6-8
changelog:
  - Fix Grafana Alerting: incorrect permission on POST external rule groups endpoint [CVE-2024-8118] 
  - Fix Grafana plugin SDK Information Leakage [CVE-2024-8986]
  - Fix Grafana Alerting VictorOps integration could be exposed to users with Viewer permission [CVE-2024-11741]
  - Fix Grafana Authorization bypass in data source proxy API [CVE-2025-3454]
  - Fix golang.org/x/net vulnerable to Cross-site Scripting [CVE-2025-22872]


author: Chunsheng Luo <luffyluo@tencent.com> - 10.2.6-9
changelog:
  - Fix Insecure Temporary File usage in github.com/golang/glog (CVE-2024-45339)
  - Fix net/http, x/net/http2: close connections when receiving too many headers (CVE-2023-45288)
  - Fix Non-linear parsing of case-insensitive content in golang.org/x/net/html (CVE-2024-45338)
  - Fix HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net (CVE-2025-22870)


author: Chunsheng Luo <luffyluo@tencent.com> - 10.2.6-11
changelog:
  - Fix angularjs CVEs: Disable angular_support by default
  - CVE-2023-26117, CVE-2022-25869, CVE-2024-8372, CVE-2024-8373, CVE-2025-0716


author: Chunsheng Luo <luffyluo@tencent.com> - 10.2.6-12
changelog:
  - Check SignedInUser OrgID in RevokeInvite (CVE-2024-10452)
  - Dashboards: Prevent title longer than 5 000 characters (CVE-2025-1088)
  - check user is admin when deleting from org (CVE-2025-3580)
  - declare dingding url as secret (CVE-2025-3415)


author: Chunsheng Luo <luffyluo@tencent.com> - 10.2.6-13
changelog:
  - bump brace expansion to v1.1.12 v2.0.2 (CVE-2025-5889)
  - bump axios to 1.8.2 (CVE-2025-27152)
  - bump prismjs to 1.30.0 (CVE-2024-53382)


author: Yu Zhang <yugozhang@tencent.com> - 10.2.6-15
changelog:
  - bump axios to 1.12.0 (CVE-2025-58754)
  - The golang version issue has been fixed. Recompile the net/http package in grafana (CVE-2025-4673)


author: Feng Weiyao <wynnfeng@tencent.com> - 5.2.2-1
changelog:
  - upgrade to 5.2.2 and fix CVE-2023-39325 and CVE-2023-44487, CVE-2023-45288, CVE-2022-41717,CVE-2025-22870


author: Shuo Wang <abushwang@tencent.com> - 9.0.0-2
changelog:
  - backport patch to fix CVE-2023-46045:
  - gvc: detect plugin installation failure and display an error


author: Feng Weiyao <wynnfeng@tencent.com> - 2.12-13
changelog:
  - [Type] security
  - [DESC] - Resolves: CVE-2024-45781 CVE-2024-45783 CVE-2024-45778
  - Resolves: CVE-2024-45775 CVE-2024-45780 CVE-2024-45774 CVE-2025-0684
  - Resolves: CVE-2025-0690 CVE-2025-1118 CVE-2024-45782 CVE-2025-0685
  - Resolves: CVE-2025-0624 CVE-2024-45779 CVE-2024-45776 CVE-2025-0686
  - Resolves: CVE-2025-0622 CVE-2025-0677 CVE-2024-45777 CVE-2025-0678
  - Resolves: CVE-2025-0689 CVE-2025-1125


author: Wang Guodong <gordonwwang@tencent.com> - 1.22.5-7
changelog:
  - fix CVE-2024-47542, CVE-2024-47600, CVE-2024-47538, CVE-2024-47541, CVE-2024-47607, 
    CVE-2024-47615, CVE-2024-47835


author: Wang Guodong <gordonwwang@tencent.com> - 1.22.5-10
changelog:
  - fix CVE-2024-47606, CVE-2024-47599, CVE-2024-47613, CVE-2024-47778, CVE-2024-47777, 
    CVE-2024-47776, CVE-2024-47775, CVE-2024-47774, CVE-2024-47601, CVE-2024-47602, 
    CVE-2024-47603, CVE-2024-47834, CVE-2024-47540
    CVE-2024-47598, CVE-2024-47597, CVE-2024-47596, CVE-2024-47546, CVE-2024-47545,
    CVE-2024-47544, CVE-2024-47543, CVE-2024-47539, CVE-2024-47537


author: wynnfeng <wynnfeng@tencent.com> - 2.4.57-8
changelog:
  - [type] security
  - [desc] fix CVE-2024-38473, 2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573


author: Rebuild Robot <rebot@opencloudos.org> - 2.4.64-1
changelog:
  - [Type] security
  - [DESC] upgrade to 2.4.64 and fix CVE-2025-53020, CVE-2024-43204, CVE-2024-47252, CVE-2024-42516, CVE-2025-23048, CVE-2025-49630, CVE-2025-49812


author: jiefu <jiefu@tencent.com> - 11.0.15-1
changelog:
  - Update to jdk-11.0.15
  - AppCDS: Store old classfiles in static CDS archive
  - G1: lightweight rs log
  - JDK-8265119: G1: update_remset_before_rebuild mixes liveness in words with liveness in bytes


author: Zhao Zhen <jeremiazhao@tencent.com> - 11.0.15-2
changelog:
  - add subpackage of konajdk for rpm-based OS
  - add alternatives supports for multiversion of jdk
  - add bootstrap supoort for OS
  - let 8/11/17 all-in-one spec files
  - remove epoch
  - add multi arch supports initially
  - add some capability compatibility with openjdk
  - add nss in depends avoiding some bugs
  - simplify macros and Scriptlets


author: Zhao Zhen <jeremiazhao@tencent.com> - 11.0.22-1
changelog:
  - updated to upstream 11.0.22
  - fixed CVE-2024-20918 CVE-2024-20952 CVE-2024-20926 CVE-2024-20919 CVE-2024-20921 
  -       CVE-2024-20945


author: Zhao Zhen <jeremiazhao@tencent.com> - 11.0.23-1
changelog:
  - updated to upstream 11.0.23
  - fixed CVE-2024-21094 CVE-2024-21085 CVE-2024-21011 CVE-2024-21068 CVE-2024-21012


author: Zhao Zhen <jeremiazhao@tencent.com> - 11.0.24-1
changelog:
  - Updated to upstream version 11.0.24
  - fixed CVE-2024-21147 CVE-2024-21145 CVE-2024-21140
  -       CVE-2024-21131 CVE-2024-21138


author: Zhao Zhen <jeremiazhao@tencent.com> - 11.0.25-1
changelog:
  - Updated to upstream version 11.0.25
  - fixed CVE-2024-21235 CVE-2024-21208 CVE-2024-21210 CVE-2024-21217


author: Zhao Zhen <jeremiazhao@tencent.com> - 11.0.28-1
changelog:
  - Updated to upstream version 11.0.28
  - Fixed CVE-2025-50059 CVE-2025-30749 CVE-2025-50106 CVE-2025-30761 CVE-2025-30754


author: Zhao Zhen <jeremiazhao@tencent.com> - 11.0.26-1
changelog:
  - upgrade to upstream version 11.0.26
  - fixed CVE-2024-21094 CVE-2024-21085 CVE-2024-21011 CVE-2024-21068 CVE-2024-21012
  - CVE-2024-21147 CVE-2024-21145 CVE-2024-21140 CVE-2024-21131 CVE-2024-21138
  - CVE-2024-21235 CVE-2024-21208 CVE-2024-21210 CVE-2024-21217 CVE-2025-21502


author: Zhao Zhen <jeremiazhao@tencent.com> - 17.0.10-1
changelog:
  - updated to upstream 17.0.10
  - fixed CVE-2024-20932 CVE-2024-20918 CVE-2024-20952 CVE-2024-20919 CVE-2024-20921
  -       CVE-2024-20945


author: Zhao Zhen <jeremiazhao@tencent.com> - 17.0.13-1
changelog:
  - Updated to upstream version 17.0.13
  - fixed CVE-2024-21235 CVE-2024-21208 CVE-2024-21210 CVE-2024-21217


author: Zhao Zhen <jeremiazhao@tencent.com> - 17.0.16-1
changelog:
  - Updated to upstream version 17.0.16
  - Fixed CVE-2025-50059 CVE-2025-30749 CVE-2025-50106 CVE-2025-30754


author: tobytbzhang <tobytbzhang@tencent.com> - 8.0.8-1.1.312
changelog:
  - Update to jdk-8u312
  - Vectorize UTF-8 decode
  - Support asynchronous GC logging
  - JDK-8175318: Performance issue regarding local JNI references
  - JDK-8183369: RFC unconformity of HttpURLConnection with proxy
  - Revert CMSParallelFullGC
  - Revert ArrayAllocationWarningSize


author: seanwxiang <seanwxiang@tencent.com> - 8.0.9-1.1.322
changelog:
  - Update to jdk-8u322
  - Vectorize UTF-8 encode
  - Fix: FreeHeapPhysicalMemory period check use wrong time unit


author: Zhao Zhen <jeremiazhao@tencent.com> - 8.0.17-1
changelog:
  - updated to upstream 8.0.17
  - fixed CVE-2024-20918 CVE-2024-20952 CVE-2024-20926 CVE-2024-20919 CVE-2024-20921
  -       CVE-2024-20945


author: Zhao Zhen <jeremiazhao@tencent.com> - 8.0.19-1
changelog:
  - Updated to upstream version 8.0.19
  - fixed CVE-2024-21147 CVE-2024-21145 CVE-2024-21140 CVE-2024-21144
  -       CVE-2024-21131 CVE-2024-21138


author: Zhao Zhen <jeremiazhao@tencent.com> - 8.0.20-1
changelog:
  - Updated to upstream version 8.0.20
  - Fixed CVE-2024-21235 CVE-2024-21208 CVE-2024-21210 CVE-2024-21217
  - Because of jdk8281098-pr3836-pass_compiler_flags_to_adlc.patch has been
  - merged by upstream, so we delete it, see
  - https://github.com/openjdk/jdk8u/commit/4106121e0ae42d644e45c6eab9037874110ed670


author: Zhao Zhen <jeremiazhao@tencent.com> - 8.0.23-1
changelog:
  - Updated to upstream version 8.0.23
  - Fixed CVE-2025-50059 CVE-2025-30749 CVE-2025-50106 CVE-2025-30761 CVE-2025-30754


author: Zhao Zhen <jeremiazhao@tencent.com> - 8.0.21-1
changelog:
  - [Type] need_sync
  - [DESC] fixed CVE-2025-21502 CVE-2024-21235 CVE-2024-21208 CVE-2024-21210 CVE-2024-21217
  - CVE-2024-21147 CVE-2024-21145 CVE-2024-21140 CVE-2024-21144 CVE-2024-21131 CVE-2024-21138
  - CVE-2024-21094 CVE-2024-21085 CVE-2024-21011 CVE-2024-21068


author: Zhao Zhen <jeremiazhao@tencent.com> - 5.13.0-6
changelog:
  - rebuilding jna with new ant
  - will not provide .pom and .xml files
  - removed javadoc due jquery version in JDK between x86 and loongarch are not same.


author: OpenCloudOS JAVA SIG <javasig@opencloudos.org> - 5.5.0-2
changelog:
  - [Type] other
  - [DESC] remove obsolete slf4j, maven, maven-resolver and maven-wagon to resolve an issue
           where dnf will install dogtag-jss when installing slf4j, maven, maven-resolver
           and maven-wagon


author: Tracker Robot <trackbot@opencloudos.tech> - 2.3.1-3
changelog:
  - Apply patches from rpm-tracker
  - [] e78513fe0ce5d83c226ea2c0bd222f375c2438e7.patch: vrrp: Handle empty ipset names with vrrp_ipsets keyword


author: Jianping Liu <frankjpliu@tencent.com> - 6.6.30-4
changelog:
  - 3snic：change sssnic kernel driver name Merge pull request !159 from cleanerleon/next
  - change kernel driver name to sssnic
  - Hygon: CSV3 patch series part 1 (Secure memory management and initialization) Merge pull request !157 from hanliyang/next_CSV3-host-cma-smr-smcr
  - crypto: ccp: Add SET_SMR/SET_SMCR commands for CSV3
  - x86/mm: Manage CSV3 guest's private memory by CMA
  - crypto: ccp: Define CSV3 key management command id
  - KVM: SEV: Pin SEV guest memory out of CMA area
  - Hygon：Fixed bugs related to THP allocation and memory page migration Merge pull request !154 from hanliyang/next_mm-fix
  - mm/gup: don't check if a page is in lru before draining it
  - mm/page_alloc: don't use PCP list for THP-sized allocations when using PF_MEMALLOC_PIN
  - Hygon: Support reuse ASID feature for Hygon CSV Merge pull request !156 from hanliyang/next_CSV-reuse-ASID
  - KVM: SVM: Add support for different CSV guests to reuse the same ASID
  - Hygon: Support passthru DCU to virtual machine Merge pull request !151 from hanliyang/next_hydcu
  - drm/hygon: Add support to passthrough Hygon DCU to virtual machine
  - Hygon: Some enhancement and bugfixes for HYGON SME/CSV/CSV2 Merge pull request !150 from hanliyang/next_SME_CSV1_CSV2_robust
  - KVM: SVM: Unmap ghcb pages if they're still mapped when destroy guest
  - anolis: x86/setup: Preserve _ENC flag when initrd is being relocated
  - anolis: mm/early_ioremap.c: Always build early_memremap_prot() in x86
  - KVM: x86: Fix KVM_GET_MSRS stack info leak
  - KVM: SEV: Do not intercept accesses to MSR_IA32_XSS for SEV-ES guests
  - x86/head/64: Flush caches for .bss..decrypted section after CR3 switches to early_top_pgt
  - KVM: x86: Calls is_64_bit_hypercall() instead of is_64_bit_mode() in complete_hypercall_exit()
  - x86/csv2: Keep in atomic context when holding ghcb page if the #VC comes from userspace
  - KVM: SVM: Fix the available ASID range for CSV2 guest
  - mm/unevictable: avoid root memcg calling mem_cgroup_scan_tasks to  trigger BUG_ON
  - config: add SIMPLEFB and SIMPLEDRM


author: Jianping Liu <frankjpliu@tencent.com> - 6.6.30-5
changelog:
  - emm: update emm to v0.1.4
  - config: enable CONFIG_SQUASHFS_ZSTD
  - KVM: x86: Use actual kvm_cpuid.base for clearing KVM_FEATURE_PV_UNHALT
  - KVM: x86: Introduce __kvm_get_hypervisor_cpuid() helper
  - ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
  - ksmbd: fix potencial out-of-bounds when buffer offset is invalid
  - KVM: x86: Virtualize HWCR.TscFreqSel[bit 24]
  - KVM: x86: Allow HWCR.McStatusWrEn to be cleared once set
  - cpustat: make get_iowait_time external


author: Jianping Liu <frankjpliu@tencent.com> - 6.6.31-6
changelog:
  - Hygon: CSV3 patch series part 4 (Enable the concurrent memory allocation of CMA for Hygon CSV3) Merge pull request !173
  - x86/mm: CSV allows CMA allocation concurrently
  - mm/cma: add API to enable concurrent allocation from the CMA
  - LoongArch: fix KASLR can not be disabled by nokaslr when boot from old BPI Merge pull request !153
  - LoongArch: fix KASLR can not be disabled by nokaslr when boot from old BPI
  - irqchip/loongson-pch-pic: Update interrupt registration policy
  - Hygon: CSV3 patch series part 3 (Support live migration for Hygon CSV3 guest, and manage shared page by rbtree) Merge pull request !171
  - x86/mm: Merge contiguous pages into a large range when notifying pages enc status changes
  - KVM: SVM: CSV: Manage CSV3 guest's shared pages by rbtree
  - KVM: SVM: CSV: Add ioctl API to unpin shared pages of CSV3 guest
  - KVM: SVM: CSV: Add KVM_CSV3_RECEIVE_ENCRYPT_CONTEXT command
  - KVM: SVM: CSV: Add KVM_CSV3_RECEIVE_ENCRYPT_DATA command
  - KVM: SVM: CSV: Add KVM_CSV3_SEND_ENCRYPT_CONTEXT command
  - KVM: SVM: CSV: Add KVM_CSV3_SEND_ENCRYPT_DATA command
  - crypto: ccp: Define CSV3 migration command id
  - Hygon:Support TKM function Merge pull request !164 from xisme/tkm
  - crypto: ccp: Eliminate dependence of the kvm module on the ccp module
  - Allow VM without a configured vid to use TKM
  - support tkm key isolation
  - Support tkm virtualization
  - Support psp virtualization
  - newfeature: crypto: ccp: Add psp mutex enable ioctl support
  - newfeature: crypto: ccp: concurrent psp access support between user and kernel space
  - Hygon: CSV3 patch series part 2 (launch and running support on both KVM and guest sides) Merge pull request !162
  - x86/mm: Print CSV3 info into kernel log
  - x86: Add support for changing the memory attribute for CSV3 guest
  - x86: Update memory shared/private attribute in early boot for CSV3 guest
  - x86/kernel: Set bss decrypted memory as shared in CSV3 guest
  - x86/kernel: Add CSV3 early update(enc/dec)/reset memory helpers
  - x86/boot/compressed/64: Add CSV3 update page attr(private/shared)
  - x86/boot/compressed/64: Init CSV3 secure call pages
  - x86/boot/compressed/64: Add CSV3 guest detection
  - KVM: SVM: CSV: Manage CSV3 guest's nested page table
  - KVM: SVM: CSV: Add KVM_CSV3_LAUNCH_ENCRYPT_VMCB command
  - KVM: SVM: CSV: Add KVM_CSV3_LAUNCH_ENCRYPT_DATA command
  - KVM: SVM: CSV: Add KVM_CSV3_INIT command
  - KVM: Define CSV3 key management command id
  - Hygon:Support TPM/TCM/TDM/TPCM function Merge pull request !160
  - newfeature: linux: tcm: add Hygon TCM2 driver
  - newfeature: linux: tpm: add Hygon TPM2 driver
  - newfeature:crypto: tdm: Support dynamic protection for SCT and IDT by HYGON TDM
  - newfeature: crypto: tdm: Add Hygon TDM driver
  - Merge linux 6.6.31


author: Jianping Liu <frankjpliu@tencent.com> - 6.6.33-7
changelog:
  - emm: update to v0.1.5
  - arm64: add unprivileged instruction support
  - arm64: fix the error for instruction :b9400000
  - arm64: Add new code for unaligned pcie access
  - arm64: remove the hardcode about PCI address checking
  - arm64: Add alignment faults handler for Advanced SIMD load/store single
  - arm64: Add a fixup handler for alignment faults in aarch64 code
  - arm64: update Work around Ampere Altra erratum #82288 PCIE_65
  - Merge Linux 6.6.33
  - [next-6.6] Intel: Backport Granite Rapids RAPL PMU support to kernel 6.6 Merge pull request !186
  - powercap: intel_rapl_tpmi: Enable PMU support
  - powercap: intel_rapl: Introduce APIs for PMU support
  - powercap: intel_rapl: Sort header files
  - [next-6.6] LoongArch:  Fix some irqchip/loongson-eiointc issues and kdump function for loongarch. Merge pull request !182
  - anolis: LoongArch: fix efi map page table error
  - Revert "LoongArch: kdump: Add memory reservation for old kernel"
  - Revert "LoongArch: Fix kdump failure on v40 interface specification"
  - Revert "LoongArch: kdump: Add high memory reservation"
  - irqchip/loongson-eiointc: fix gsi register error
  - irqchip: LoongArch: Fix secondary bridge routing errors
  - PCI/MSI: LoongArch: Limit min pci msi-x/msi vector number
  - [next-6.6]Intel: Backport QuickAssist Technology(QAT) live migration for in-tree driver Merge pull request !184
  - x86: configs: Enable QAT_VFIO_PCI as kernel module
  - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak
  - crypto: qat - specify firmware files for 402xx
  - crypto: qat - validate slices count returned by FW
  - crypto: qat - improve error logging to be consistent across features
  - crypto: qat - improve error message in adf_get_arbiter_mapping()
  - crypto: qat - implement dh fallback for primes > 4K
  - crypto: qat - Fix spelling mistake "Invalide" -> "Invalid"
  - crypto: qat - Avoid -Wflex-array-member-not-at-end warnings
  - vfio/qat: Add vfio_pci driver for Intel QAT SR-IOV VF devices
  - crypto: qat - implement interface for live migration
  - crypto: qat - add interface for live migration
  - crypto: qat - add bank save and restore flows
  - crypto: qat - expand CSR operations for QAT GEN4 devices
  - crypto: qat - rename get_sla_arr_of_type()
  - crypto: qat - relocate CSR access code
  - crypto: qat - move PFVF compat checker to a function
  - crypto: qat - relocate and rename 4xxx PF2VM definitions
  - crypto: qat - adf_get_etr_base() helper
  - iommu/vt-d: Set variable intel_dirty_ops to static
  - iommufd/selftest: Fix _test_mock_dirty_bitmaps()
  - iommufd/selftest: Fix page-size check in iommufd_test_dirty()
  - iommu/vt-d: Enhance capability check for nested parent domain allocation
  - iommufd/selftest: Test IOMMU_HWPT_GET_DIRTY_BITMAP_NO_CLEAR flag
  - iommufd/selftest: Test out_capabilities in IOMMU_GET_HW_INFO
  - iommufd/selftest: Test IOMMU_HWPT_GET_DIRTY_BITMAP
  - iommufd/selftest: Test IOMMU_HWPT_SET_DIRTY_TRACKING
  - iommufd/selftest: Test IOMMU_HWPT_ALLOC_DIRTY_TRACKING
  - iommufd/selftest: Expand mock_domain with dev_flags
  - iommu/vt-d: Access/Dirty bit support for SS domains
  - iommu/amd: Access/Dirty bit support in IOPTEs
  - iommu/amd: Add domain_alloc_user based domain allocation
  - iommufd: Add a flag to skip clearing of IOPTE dirty
  - iommufd: Add capabilities to IOMMU_GET_HW_INFO
  - iommufd: Add IOMMU_HWPT_GET_DIRTY_BITMAP
  - iommufd: Add IOMMU_HWPT_SET_DIRTY_TRACKING
  - iommufd: Add a flag to enforce dirty tracking on attach
  - iommufd: Correct IOMMU_HWPT_ALLOC_NEST_PARENT description
  - iommu: Add iommu_domain ops for dirty tracking
  - iommufd/iova_bitmap: Move symbols to IOMMUFD namespace
  - vfio: Move iova_bitmap into iommufd
  - vfio/iova_bitmap: Export more API symbols
  - iommufd/selftest: Rework TEST_LENGTH to test min_size explicitly
  - iommu/vt-d: Add domain_alloc_user op
  - iommufd/selftest: Add domain_alloc_user() support in iommu mock
  - iommufd/selftest: Iterate idev_ids in mock_domain's alloc_hwpt test
  - iommufd: Support allocating nested parent domain
  - iommufd: Flow user flags for domain allocation to domain_alloc_user()
  - iommufd: Use the domain_alloc_user() op for domain allocation
  - iommu: Add new iommu op to create domains owned by userspace
  - !183 [next-6.6] Intel IAA Compression Accelerator Crypto Driver (iaa_crypto) Merge pull request !183 from Xiaochen Shen/intel-iaa-crypto-driver-next-6.6
  - x86/config: Add kernel config for Intel IAA crypto driver
  - dmaengine: idxd: Avoid unnecessary destruction of file_ida
  - dmaengine: idxd: Check for driver name match before sva user feature
  - crypto: iaa - Use cpumask_weight() when rebalancing
  - crypto: iaa - Fix some errors in IAA documentation
  - crypto: iaa - Change iaa statistics to atomic64_t
  - crypto: iaa - Add global_stats file and remove individual stat files
  - crypto: iaa - Remove comp/decomp delay statistics
  - crypto: iaa - fix decomp_bytes_in stats
  - crypto: iaa - Fix nr_cpus < nr_iaa case
  - crypto: iaa - fix the missing CRYPTO_ALG_ASYNC in cra_flags
  - crypto: iaa - Fix comp/decomp delay statistics
  - crypto: iaa - Fix async_disable descriptor leak
  - crypto: iaa - Remove unnecessary debugfs_create_dir() error check in iaa_crypto_debugfs_init()
  - crypto: iaa - Remove header table code
  - dmaengine: idxd: constify the struct device_type usage
  - dmaengine: idxd: make dsa_bus_type const
  - dmaengine: idxd: Remove usage of the deprecated ida_simple_xx() API
  - crypto: iaa - Account for cpu-less numa nodes
  - crypto: iaa - remove unneeded semicolon
  - crypto: iaa - Remove unneeded newline in update_max_adecomp_delay_ns()
  - crypto: iaa - Change desc->priv to 0
  - dmaengine: idxd: Add support for device/wq defaults
  - crypto: iaa - Add IAA Compression Accelerator stats
  - crypto: iaa - Add irq support for the crypto async interface
  - crypto: iaa - Add support for deflate-iaa compression algorithm
  - crypto: iaa - Add compression mode management along with fixed mode
  - crypto: iaa - Add per-cpu workqueue table with rebalancing
  - crypto: iaa - Add Intel IAA Compression Accelerator crypto driver core
  - crypto: iaa - Add IAA Compression Accelerator Documentation
  - dmaengine: idxd: add callback support for iaa crypto
  - dmaengine: idxd: Add wq private data accessors
  - dmaengine: idxd: Export wq resource management functions
  - dmaengine: idxd: Export descriptor management functions
  - dmaengine: idxd: Rename drv_enable/disable_wq to idxd_drv_enable/disable_wq, and export
  - dmaengine: idxd: add external module driver support for dsa_bus_type
  - dmaengine: idxd: Fix incorrect descriptions for GRPCFG register
  - dmaengine: idxd: add wq driver name support for accel-config user tool
  - dmaengine: idxd: rate limit printk in misc interrupt thread
  - drm/phytium: Replace default efi fb0 with dc fb
  - [next-6.6] phytium-Bugfix-Xorg-startup-for-ps23xx Merge pull request !188
  - drm/ast: Fixed display error for ps23xx
  - drm/phytium: Bugfix Xorg startup for ps23xx
  - anolis: LoongArch: fix efi map page table error
  - Revert "LoongArch: kdump: Add memory reservation for old kernel"
  - Revert "LoongArch: Fix kdump failure on v40 interface specification"
  - Revert "LoongArch: kdump: Add high memory reservation"
  - LoongArch: fix HT RX INT TRANS register not initialized
  - irqchip/loongson-eiointc: fix gsi register error
  - irqchip: LoongArch: Fix secondary bridge routing errors
  - PCI/MSI: LoongArch: Limit min pci msi-x/msi vector number
  - cgroup: allow cgroup to split direct io and buffered io into different blkio cgroup
  - io/tqos: add sysctl_buffer_io_limit switch for buffer io limit.
  - io/tqos: merge buffer io limit series patch from brookxu, and rework some function.
  - Merge branch 'caelli/cgroupfs' into 'master' (merge request !102)
  - cgroupfs: optimize cpu usage
  - sli: open CONFIG_CGROUP_SLI
  - sli: backport sli function from tk3
  - mbuf: backport mbuf functions for memcontrol/cpuacct from tk3
  - btrfs: make sure that WRITTEN is set on all metadata blocks
  - nvme:driver core probes in serial
  - config: enable ce instruction set optimization for shangmi support
  - config: enable some configs for shangmi support
  - kconfig: add more module for arm64
  - Merge ock repo's next branch into tk5 repo's master branch
  - [next-6.6]Hisi:backport some bugfix from upstream about PCIe_PMU and hisi_hns3 perf Merge pull request !179
  - drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
  - drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
  - docs: perf: Update usage for target filter of hisi-pcie-pmu
  - drivers/perf: hisi_pcie: Merge find_related_event() and get_event_idx()
  - drivers/perf: hisi_pcie: Relax the check on related events
  - drivers/perf: hisi_pcie: Check the target filter properly
  - drivers/perf: hisi_pcie: Add more events for counting TLP bandwidth
  - drivers/perf: hisi_pcie: Fix incorrect counting under metric mode
  - drivers/perf: hisi_pcie: Introduce hisi_pcie_pmu_get_event_ctrl_val()
  - drivers/perf: hisi_pcie: Rename hisi_pcie_pmu_{config,clear}_filter()
  - !176 [next-6.6] net: stmmac: add 7A2000 chipset gnet support Merge pull request !176 from Ming Wang/master
  - net: stmmac: dwmac-loongson: Add loongson module author
  - net: stmmac: dwmac-loongson: Move disable_force flag to _gnet_date
  - net: stmmac: dwmac-loongson: Add Loongson GNET support
  - net: stmmac: dwmac-loongson: Fixed failure to set network speed to 1000.
  - net: stmmac: dwmac-loongson: Add loongson_dwmac_config_legacy
  - net: stmmac: dwmac-loongson: Add full PCI support
  - net: stmmac: dwmac-loongson: Add phy_interface for Loongson GMAC
  - net: stmmac: dwmac-loongson: Add phy mask for Loongson GMAC
  - net: stmmac: dwmac-loongson: Add ref and ptp clocks for Loongson
  - net: stmmac: dwmac-loongson: Split up the platform data initialization
  - net: stmmac: dwmac-loongson: Use PCI_DEVICE_DATA() macro for device identification
  - net: stmmac: dwmac-loongson: Drop useless platform data
  - net: stmmac: Export dwmac1000_dma_ops
  - net: stmmac: Add multi-channel support
  - net: stmmac: Move the atds flag to the stmmac_dma_cfg structure
  - net: stmmac: Move MAC caps init to phylink MAC caps getter
  - net: stmmac: Rename phylink_get_caps() callback to update_caps()
  - net: phylink: provide mac_get_caps() method
  - Merge branch 'dev/mengensun/netlat_v2' into 'master' (merge request !100)
  - netlat: fix warnning when del netns
  - netlat: not use ack_seq to keeping timestamp
  - netlat: add more queue latency check point
  - net/netlat: add a tcp latency watcher
  - netns/mbuf: add a per net namespace ring buffer
  - tqos: open CONFIG_RQM
  - tqos/mbuf: backport mbuf infrastructure from tk3
  - dist: using "tk_private=1" to judge private release
  - Merge branch 'frankjpliu/master' into 'master' (merge request !107)
  - Merge linux 6.6.32
  - Linux 6.6.32
  - block: add a partscan sysfs attribute for disks
  - block: add a disk_has_partscan helper
  - Docs/admin-guide/mm/damon/usage: fix wrong example of DAMOS filter matching sysfs file
  - docs: kernel_include.py: Cope with docutils 0.21
  - admin-guide/hw-vuln/core-scheduling: fix return type of PR_SCHED_CORE_GET
  - KEYS: trusted: Do not use WARN when encode fails
  - remoteproc: mediatek: Make sure IPI buffer fits in L2TCM
  - serial: kgdboc: Fix NMI-safety problems from keyboard reset code
  - usb: typec: tipd: fix event checking for tps6598x
  - usb: typec: ucsi: displayport: Fix potential deadlock
  - net: usb: ax88179_178a: fix link status when link is set to down/up
  - usb: dwc3: Wait unconditionally after issuing EndXfer command
  - binder: fix max_thread type inconsistency
  - drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
  - erofs: reliably distinguish block based and fscache mode
  - erofs: get rid of erofs_fs_context
  - bpf: Add missing BPF_LINK_TYPE invocations
  - kselftest: Add a ksft_perror() helper
  - mmc: core: Add HS400 tuning in HS400es initialization
  - KEYS: trusted: Fix memory leak in tpm2_key_encode()
  - Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
  - Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect()
  - ice: remove unnecessary duplicate checks for VF VSI ID
  - ice: pass VSI pointer into ice_vc_isvalid_q_id
  - net: ks8851: Fix another TX stall caused by wrong ISR flag handling
  - drm/amd/display: Fix division by zero in setup_dsc_config
  - smb: smb2pdu.h: Avoid -Wflex-array-member-not-at-end warnings
  - ksmbd: add continuous availability share parameter
  - cifs: Add tracing for the cifs_tcon struct refcounting
  - smb: client: instantiate when creating SFU files
  - smb: client: fix NULL ptr deref in cifs_mark_open_handles_for_deleted_file()
  - smb3: add trace event for mknod
  - smb311: additional compression flag defined in updated protocol spec
  - smb311: correct incorrect offset field in compression header
  - cifs: Move some extern decls from .c files to .h
  - ksmbd: fix potencial out-of-bounds when buffer offset is invalid
  - ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
  - ksmbd: Fix spelling mistake "connction" -> "connection"
  - ksmbd: fix possible null-deref in smb_lazy_parent_lease_break_close
  - cifs: remove redundant variable assignment
  - cifs: fixes for get_inode_info
  - cifs: defer close file handles having RH lease
  - ksmbd: add support for durable handles v1/v2
  - ksmbd: mark SMB2_SESSION_EXPIRED to session when destroying previous session
  - smb: common: simplify compression headers
  - smb: common: fix fields sizes in compression_pattern_payload_v1
  - smb: client: negotiate compression algorithms
  - smb3: add dynamic trace point for ioctls
  - smb: client: return reparse type in /proc/mounts
  - smb: client: set correct d_type for reparse DFS/DFSR and mount point
  - smb: client: parse uid, gid, mode and dev from WSL reparse points
  - smb: client: introduce SMB2_OP_QUERY_WSL_EA
  - smb: client: Fix a NULL vs IS_ERR() check in wsl_set_xattrs()
  - smb: client: add support for WSL reparse points
  - smb: client: reduce number of parameters in smb2_compound_op()
  - smb: client: fix potential broken compound request
  - smb: client: move most of reparse point handling code to common file
  - smb: client: introduce reparse mount option
  - smb: client: retry compound request without reusing lease
  - smb: client: do not defer close open handles to deleted files
  - smb: client: reuse file lease key in compound operations
  - smb: client: get rid of smb311_posix_query_path_info()
  - smb: client: parse owner/group when creating reparse points
  - smb3: update allocation size more accurately on write completion
  - smb: client: handle path separator of created SMB symlinks
  - cifs: update the same create_guid on replay
  - ksmbd: Add kernel-doc for ksmbd_extract_sharename() function
  - cifs: set replay flag for retries of write command
  - cifs: commands that are retried should have replay flag set
  - smb: client: delete "true", "false" defines
  - smb: Fix some kernel-doc comments
  - cifs: new mount option called retrans
  - smb: client: don't clobber ->i_rdev from cached reparse points
  - cifs: new nt status codes from MS-SMB2
  - cifs: pick channel for tcon and tdis
  - cifs: minor comment cleanup
  - cifs: remove redundant variable tcon_exist
  - ksmbd: vfs: fix all kernel-doc warnings
  - ksmbd: auth: fix most kernel-doc warnings
  - cifs: remove unneeded return statement
  - cifs: get rid of dup length check in parse_reparse_point()
  - cifs: Pass unbyteswapped eof value into SMB2_set_eof()
  - smb3: Improve exception handling in allocate_mr_list()
  - cifs: fix in logging in cifs_chan_update_iface
  - smb: client: handle special files and symlinks in SMB3 POSIX
  - smb: client: cleanup smb2_query_reparse_point()
  - smb: client: allow creating symlinks via reparse points
  - smb: client: optimise reparse point querying
  - smb: client: allow creating special files via reparse points
  - smb: client: extend smb2_compound_op() to accept more commands
  - smb: client: Fix minor whitespace errors and warnings
  - smb: client: introduce cifs_sfu_make_node()
  - cifs: fix use after free for iface while disabling secondary channels
  - Missing field not being returned in ioctl CIFS_IOC_GET_MNT_INFO
  - smb3: minor cleanup of session handling code
  - smb3: more minor cleanups for session handling routines
  - smb3: minor RDMA cleanup
  - cifs: print server capabilities in DebugData
  - smb: use crypto_shash_digest() in symlink_hash()
  - Add definition for new smb3.1.1 command type
  - SMB3: clarify some of the unused CreateOption flags
  - cifs: Add client version details to NTLM authenticate message
  - dist: remove usb-storage.ko and nouveau.ko when install private release
  - dist: revert "add a modules-private rpm subpackage"
  - Kconfig: add more modules
  - Merge branch 'kasong/tk5/dist-optimization' into 'master' (merge request !106)
  - dist: don't parse kernel version unless needed
  - dist: optimize version parsing
  - dist: stop using --show-toplevel for speed up


author: Jianping Liu <frankjpliu@tencent.com> - 6.6.34-9
changelog:
  - dist: do not run scripts fail in kernel.template.spec
  - drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()


author: Jianping Liu <frankjpliu@tencent.com> - 6.6.43-10
changelog:
  - !199 [next-6.6] LoongArch: Add writecombine support for DMW-based ioremap and fix kexec boot faild issue.
  - pci-driver: Do not disable PCIE ports and bridge on kexec reboot
  - LoongArch: enable CONFIG_CRYPTO_XTS by default
  - LoongArch: Add writecombine support for DMW-based ioremap()
  - Merge linux 6.6.43
  - Merge linux 6.6.42
  - !197 [next-6.6] AMD: Backport Turin patches from upstream Merge pull request !197 from kile2009/next-turin-6.6
  - perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
  - x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
  - x86/CPU/AMD: Do the common init on future Zens too
  - x86/CPU/AMD: Add more models to X86_FEATURE_ZEN5
  - x86/CPU/AMD: Add X86_FEATURE_ZEN5
  - x86/CPU/AMD: Drop now unused CPU erratum checking function
  - x86/CPU/AMD: Get rid of amd_erratum_1485[]
  - x86/CPU/AMD: Get rid of amd_erratum_400[]
  - x86/CPU/AMD: Get rid of amd_erratum_383[]
  - x86/CPU/AMD: Rename init_amd_zn() to init_amd_zen_common()
  - x86/CPU/AMD: Call the spectral chicken in the Zen2 init function
  - x86/CPU/AMD: Move the Zen3 BTC_NO detection to the Zen3 init function
  - Revert "vfio/type1: Unpin zero pages"
  - drivers/thirdparty: keep compile bnxt_re if not using thirdparty drivers
  - iommu/arm-smmu: Use the correct type in nvidia_smmu_context_fault()
  - thermal: intel: powerclamp: fix mismatch in get function for max_idle
  - Merge linux 6.6.41
  - drivers/thirdparty: add copy-drivers.sh to using thirdparty drivers
  - Merge linux 6.6.40
  - Merge linux 6.6.39
  - Merge linux 6.6.38
  - Merge linux 6.6.37
  - config: enable CONFIG_WIREGUARD
  - Merge linux 6.6.36
  - kabi: fix check-kabi file path when checking kABI
  - x86/tencentconfig: Enable CONFIG_UNWINDER_ORC in tencent.config
  - Merge linux 6.6.35
  - emm: don't set zram_memcg_nocharge as true until module load


author: Jianping Liu <frankjpliu@tencent.com> - 6.6.47-11
changelog:
  - config,oc: support WLAN and MTD and more SND drivers
  - Merge linux 6.6.47
  - Merge linux 6.6.46
  - Merge linux 6.6.45
  - Merge OCK next branch to TK5 master branch
  - x86/hpet: Read HPET directly if panic in progress
  - i2c/zhaoxin: I2C controller driver enhancement and optimization
  - x86/mce: Add NMIs setup in machine_check func
  - x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors
  - x86/mce: Set bios_cmci_threshold for CMCI threshold
  - perf/x86/zhaoxin/uncore: update KX-7000 support
  - iommu/dma: Fix not fully traversing iova reservations issue
  - x86/cpu: Remove pointless evaluation of x86_coreid_bits
  - i2c: smbus: Add support for Zhaoxin SMBUS controller
  - anolis: efi: cper: Add Zhaoxin/Centaur ZDI/ZPI error decode
  - ata: ahci: Add support for AHCI SGPIO Enclosure Management
  - Set ASYM_PACKING Flag on Zhaoxin KH-40000 platform
  - cpufreq: ACPI: add ITMT support when CPPC enabled
  - iommu/vt-d: Add support for detecting ACPI namespace device in RMRR
  - Add kh40000_iommu_dma_ops for KH-40000 platform
  - Add kh40000_direct_dma_ops for KH-40000 platform
  - Add early quirk to identify kh-40000
  - Merge OCK next branch to TK5 master branch
  - !201 [next-6.6] Intel: Backport some core PMU bugfixes to kernel 6.6
  - !200 [next-6.6] Intel: Backport SPR/EMR CXL and HBM perfmon support to kernel 6.6
  - USB:Fix kernel NULL pointer when unbind UHCI form vfio-pci
  - hwmon: Add support for Zhaoxin core temperature monitoring
  - anolis: Add support for Zhaoxin Serial ATA IDE.
  - rue/scx: Kill user tasks in SCHED_EXT when scheduler is gone
  - rue/scx: Add readonly sysctl knob kernel.cpu_qos for SCHED_BT compatibility
  - rue/scx: Add /proc/bt_stat to maintain SCHED_BT compatibility
  - rue/scx: Add cpu.offline to maintain SCHED_BT compatibility
  - rue/scx: Add cpu.scx to the cpu cgroup controller
  - rue/scx: Add /proc/scx_stat to do scx cputime accounting
  - rue/scx: Fix lockdep warn on printk with rq lock held
  - rue/scx: Reorder scx_fork_rwsem, cpu_hotplug_lock and scx_cgroup_rwsem
  - Revert "sched: adaptive default skew_tick value"
  - KVM: x86: Don't sync user-written TSC against startup values
  - KVM: s390: Don't re-setup dummy routing when KVM_CREATE_IRQCHIP
  - KVM: x86: Don't re-setup empty IRQ routing when KVM_CAP_SPLIT_IRQCHIP
  - KVM: Setup empty IRQ routing when creating a VM
  - kabi: Introduce CONFIG_KABI_RESERVE
  - null_blk: Fix return value of nullb_device_power_store()
  - null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
  - [PATCH] security: add security hook point
  - dist: provide mlnx-ofed-dist rpm
  - drivers,dist: add mlnx commercial quality drivers
  - submodule: update emm and thirdparty/release-drivers
  - net: csig toa patch toa patch from csig luckyqiu@tencent.com
  - Merge linux 6.6.44


author: Jianping Liu <frankjpliu@tencent.com> - 6.6.47-12
changelog:
  - crypto: ccp: fix the sev_do_cmd panic on non-Hygon platforms
  - emm: upadate to v0.1.7.3
  - emm: fix cgroup initilization check
  - tools headers UAPI: Sync kvm headers with the kernel sources
  - KVM: x86: Prevent excluding the BSP on setting max_vcpu_ids
  - KVM: x86: Limit check IDs for KVM_SET_BOOT_CPU_ID
  - KVM: Reject overly excessive IDs in KVM_CREATE_VCPU
  - KVM: x86: Make x2APIC ID 100% readonly
  - KVM: Introduce KVM_SET_USER_MEMORY_REGION2
  - config/x86: Add EROFS_FS and CACHEFILES for image-granularity acceleration
  - config,x86: open edr
  - riscv/purgatory: align riscv_kernel_entry
  - config,x86: disable CONFIG_IOMMU_DEBUGFS
  - hung_task,watchdog: set thresh time to 600 seconds
  - zhaoxin_rng: Remove redundant pr_err log after matching cpu_ids
  - config,x86: set CONFIG_HW_RANDOM_ZHAOXIN to m
  - emm: fix panic in kdump
  - config: trace: enable CONFIG_FUNCTION_GRAPH_RETVAL
  - rue/scx: Fix cgroupv2 cpu controller regression
  - watchdog: increase watchdog_thresh max value to 300 in debug kernel
  - dist: delete useless code in kernel.template.spec
  - i2c/zhaoxin: switch i2c registration to devm functions
  - lkp: intel: selftests/bpf: Add netlink helper library


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-11
changelog:
  - Add conflicts of redhat-rpm-macros < 204 as macros.kmp, kmodtool,
    and rpmsort were moved from the latter to the former.
  - Remove RHEL-specific kABI bits from find-requires.ksyms and macros.kmp.


author: Miro Hrončok <mhroncok@redhat.com> - 1.0-12
changelog:
  - Correct conflicts to redhat-rpm-macros < 205
  - Move Perl scripts back to kernel-rpm-macros to avoid Perl in the default buildroot


author: Xin Cheng <denisecheng@tencent.com> - 2.74.3-8
changelog:
  - fix CVE-2025-32050, CVE-2025-32052, CVE-2025-32053, CVE-2025-32906, CVE-2025-32911, CVE-2025-32913, CVE-2025-32907, CVE-2025-46420, CVE-2025-46421


author: Xin Cheng <denisecheng@tencent.com> - 3.4.2-5
changelog:
  - fix CVE-2025-2784, CVE-2025-32050 CVE-2025-32052, CVE-2025-32053, CVE-2025-32908, CVE-2025-32911, CVE-2025-32912
  - CVE-2025-32913, CVE-2025-32914, CVE-2025-46420, CVE-2025-46421


author: Feng Weiyao <wynnfeng@tencent.com> - 1.2.20-7
changelog:
  - [Type] security
  - [Desc] fix CVE-2021-33645,CVE-2021-33646,CVE-2021-33643,CVE-2021-33644,CVE-2013-4420,CVE-2021-33640


author: hanliyang <hanliyang@hygon.cn> - 9.10.0-2
changelog:
  - [Type] other
  - [DESC] some functionalities change about Hygon confidential VMs
    - Fix logic error and memleak about Hygon Reuse ASID
    - Support provide blobs for secret injection for Hygon Confidential VMs


author: Jiaxin Yang <jiaxinyyang@tencent.com> - 1.13.1-1
changelog:
  - Fix bug with smaller width bigger size, resolve CVE-2023-44488
  - VP8: disallow thread count changes, resolve CVE-2023-5217


author: xiaoyunzhao <xiaoyunzhao@opencloudos.tech> - 2.1.148-1
changelog:
  - [Type] need_sync
  - [DESC] upgrade to 2.1.148: fix CVE-2024-55553 requires upgrading frr, 
           frr-10.2.1 requires libyang version higher than 2.1.128.


author: chenli <chenli@loongson.cn> - 17.0.6-11
changelog:
  - LoongArch Backport: Define psABI v2.30 relocs
  - LoongArch Backport: Fix xvshuf instructions lowering


author: Xiaojie Chen <jackxjchen@tencent.com> - 38.2-5
changelog:
  - Modify anaconda iso configuration for opencloudos-stream
  - Modify live iso configuration for opencloudos-stream
  - Create /dev/urandom before packages installation


author: OpenCloudOS JAVA SIG <javasig@opencloudos.org> - 3.9.9-1
changelog:
  - [Type] bugfix
  - [DESC] using upstream source code to build Maven and its runtime dependencies in one spec
  - Rewrite the mvn macro (more precisely, did not use the original macro, rewrote the script for editing pom)
  - Added bootstrap method
  - Added jar compatibility check for JDK 8
  - Fixed several CVEs


author: OpenCloudOS JAVA SIG <javasig@opencloudos.org> - 3.9.9-2
changelog:
  - [Type] other
  - [DESC] delete obselete for apache-commons-lang3, it will take an error that
  -        when installing apache-commons-lang3, dnf will detect maven.


author: hudsonzhu <hudsonzhu@tencent.com> - 28.4.0-1
changelog:
  - [Type] bugfix
  - [DESC] Upgrade to version 28.4.0 for fixing the bug of duplicate PUT request during push


author: Zhao Zhen <jeremiazhao@tencent.com> - 128.8.0-1
changelog:
  - updated to upstream 128.8.0 and fixed CVE-2021-32810 CVE-2022-23639 CVE-2023-26964
  - CVE-2021-32715 CVE-2022-24713 CVE-2021-25900 CVE-2021-45710 CVE-2020-35875 CVE-2023-43669


author: Zhao Zhen <jeremiazhao@tencent.com> - 128.10.0-1
changelog:
  - updated to upstream 128.10.0
  - fixed CVE-2025-4091 CVE-2025-4087 CVE-2025-4093 CVE-2025-4083 CVE-2025-2817


author: Zhao Zhen <jeremiazhao@tencent.com> - 128.11.0-1
changelog:
  - updated to upstream 128.11.0
  - fiexed CVE-2025-5263 CVE-2025-5264 CVE-2025-5266 CVE-2025-5267 CVE-2025-5268


author: Zhao Zhen <jeremiazhao@tencent.com> - 128.13.0-1
changelog:
  - updated to upstream 128.13.0
  - fiexed CVE-2025-8034 CVE-2025-8030 CVE-2025-8031 CVE-2025-8035
  - CVE-2025-8032 CVE-2025-8027 CVE-2025-8033 CVE-2025-8029 CVE-2025-8028


author: Wang Guodong <gordonwwang@tencent.com> - 8.0.37-1
changelog:
  - Upgrade to 8.0.37
  - fix CVE-2024-20960, CVE-2024-20961, CVE-2024-20962, CVE-2024-20963, CVE-2024-20964, 
    CVE-2024-20965, CVE-2024-20966, CVE-2024-20967, CVE-2024-20969, CVE-2024-20970,
    CVE-2024-20971, CVE-2024-20972, CVE-2024-20973, CVE-2024-20974, CVE-2024-20975,
    CVE-2024-20976, CVE-2024-20977, CVE-2024-20978, CVE-2024-20981, CVE-2024-20982


author: Wang Guodong <gordonwwang@tencent.com> - 8.0.39-1
changelog:
  - Upgrade to 8.0.39
  - fix CVE-2024-20996, CVE-2024-21125, CVE-2024-21129, CVE-2024-21130, CVE-2024-21134,
    CVE-2024-21142, CVE-2024-21142, CVE-2024-21162, CVE-2024-21163, CVE-2024-21165, 
    CVE-2024-21171, CVE-2024-21173, CVE-2024-21177, CVE-2024-21179, CVE-2024-21185


author: Wang Guodong <gordonwwang@tencent.com> - 8.0.39-1
changelog:
  - Upgrade to 8.0.39
  - fix CVE-2024-20996, CVE-2024-21125, CVE-2024-21129, CVE-2024-21130, CVE-2024-21134,
    CVE-2024-21134, CVE-2024-21142, CVE-2024-21162, CVE-2024-21163, CVE-2024-21165, 
    CVE-2024-21171, CVE-2024-21173, CVE-2024-21177, CVE-2024-21179, CVE-2024-21185


author: Wang Guodong <gordonwwang@tencent.com> - 8.0.40-1
changelog:
  - Upgrade to 8.0.40
  - fix CVE-2024-21197, CVE-2024-21212, CVE-2024-21238, CVE-2024-21196, CVE-2024-21239,
    CVE-2024-21194, CVE-2024-21237, CVE-2024-21213, CVE-2024-21198, CVE-2024-21241,
    CVE-2024-21207, CVE-2024-21193, CVE-2024-21218, CVE-2024-21199, CVE-2024-21219,
    CVE-2024-21247, CVE-2024-21230, CVE-2024-21201, CVE-2024-21231, CVE-2024-21203,
    CVE-2024-21236


author: Wang Guodong <gordonwwang@tencent.com> - 8.0.41-1
changelog:
  - Upgrade to 8.0.41
  - fix CVE-2025-21503, CVE-2025-21501, CVE-2025-21497, CVE-2025-21491, CVE-2025-21490,
    CVE-2025-21531, CVE-2025-21529, CVE-2025-21523, CVE-2025-21522, CVE-2025-21519,
    CVE-2025-21518, CVE-2025-21500, CVE-2025-21505, CVE-2025-21555, CVE-2025-21559,
    CVE-2025-21543, CVE-2025-21540, CVE-2025-21546, CVE-2025-21520


author: Wang Guodong <gordonwwang@tencent.com> - 8.0.42-1
changelog:
  - Upgrade to 8.0.42
  - fix CVE-2025-30682, CVE-2025-21585, CVE-2025-21584, CVE-2025-21579, CVE-2025-21577,
    CVE-2025-30685, CVE-2025-21580, CVE-2025-30683, CVE-2025-21581, CVE-2025-30681,
    CVE-2025-21575, CVE-2025-21574, CVE-2025-30684, CVE-2025-30704, CVE-2025-30695,
    CVE-2025-30699, CVE-2025-30703, CVE-2025-30696, CVE-2025-30693, CVE-2025-30722,
    CVE-2025-30689, CVE-2025-30721, CVE-2025-30688, CVE-2025-30715, CVE-2025-30687,
    CVE-2025-21588, CVE-2025-30705


author: Wang Guodong <gordonwwang@tencent.com> - 8.0.43-1
changelog:
  - Upgrade to 8.0.43
  - fix CVE-2025-50087, CVE-2025-50092, CVE-2025-50101, CVE-2025-50083, CVE-2025-50104,
    CVE-2025-53023, CVE-2025-50077, CVE-2025-50078, CVE-2025-50086, CVE-2025-50085,
    CVE-2025-50084, CVE-2025-50094, CVE-2025-50082, CVE-2025-50093, CVE-2025-50091,
    CVE-2025-50098, CVE-2025-50097, CVE-2025-50080, CVE-2025-50102, CVE-2025-50096,
    CVE-2025-50100, CVE-2025-50099, CVE-2025-50079, CVE-2025-50068, CVE-2025-50081


author: Pengda Dou <doupengda@loongson.cn> - 1.35.5-9
changelog:
  - [Type] other
  - [DESC] enable bootstrap will result in missing functionality provided by the packages


author: jackeyji <jackeyji@tencent.com> - 1.26.2-1
changelog:
  - [Type] security
  - [DESC] upgrade to 1.26.2 to fix CVE-2024-31079 CVE-2024-32760 CVE-2024-34161 and CVE-2024-35200


author: Rebuild Robot <rebot@opencloudos.org> - 2.2.0-6
changelog:
  - [Type] bugfix
  - [DESC] Rebuilt for rust-toolset
  - not use cargo_build, because RUSTFLAGS will be overwritten


author: Zhao Zhen <jeremiazhao@tencent.com> 18.18.2-1
changelog:
  - updated to upstream 18.18.2
  - switched to using original source tarball
  - fixed CVE-2023-45143 CVE-2023-39332 CVE-2023-39331 CVE-2023-38552 CVE-2023-32559 
    CVE-2023-32006 CVE-2023-32002 CVE-2023-30590 CVE-2023-30588 CVE-2023-30581


author: Zhao Zhen <jeremiazhao@tencent.com> - 18.18.2-1
changelog:
  - updated to upstream 18.18.2
  - switched to using original source tarball
  - fixed CVE-2023-45143 CVE-2023-39332 CVE-2023-39331 CVE-2023-38552 CVE-2023-32559 
  -       CVE-2023-32006 CVE-2023-32002 CVE-2023-30590 CVE-2023-30588 CVE-2023-30581


author: Wang Guodong <gordonwwang@tencent.com> - 1.22.0-2
changelog:
  - Set the environment variable(SETUPTOOLS_USE_DISTUTILS) to solve 
    setuptools-bundled distutils' LooseVersion issue.


author: Shuo Wang <abushwang@tencent.com> - 1.0-23
changelog:
  - \
  /usr/bin/python3 /usr/lib/rpm/OpenCloudOS/pyproject_save_files.py \
    --output-files "/builddir/build/BUILD/pyproject-files" \
    --output-modules "/builddir/build/BUILD/pyproject-modules" \
    --buildroot "/builddir/build/BUILDROOT/opencloudos-rpm-config-1.0-23.ocs23.noarch" \
    --sitelib "/usr/lib/python3.11/site-packages" \
    --sitearch "/usr/lib64/python3.11/site-packages" \
    --python-version "3.11" \
    --pyproject-record "/builddir/build/BUILD/pyproject-record" \
    --prefix "/usr" \
    
  : add support for nested directories and License-Files


author: Shuo Wang <abushwang@tencent.com> - 1.0-23
changelog:
  - \
  /usr/bin/python3 /usr/lib/rpm/OpenCloudOS/pyproject_save_files.py \
    --output-files "/builddir/build/BUILD/pyproject-files" \
    --output-modules "/builddir/build/BUILD/pyproject-modules" \
    --buildroot "/builddir/build/BUILDROOT/opencloudos-rpm-config-1.0-24.ocs23.noarch" \
    --sitelib "/usr/lib/python3.11/site-packages" \
    --sitearch "/usr/lib64/python3.11/site-packages" \
    --python-version "3.11" \
    --pyproject-record "/builddir/build/BUILD/pyproject-record" \
    --prefix "/usr" \
    
  : add support for nested directories and License-Files


author: Shuo Wang <abushwang@tencent.com> - 1.0-23
changelog:
  - \
  /usr/bin/python3 /usr/lib/rpm/OpenCloudOS/pyproject_save_files.py \
    --output-files "/builddir/build/BUILD/pyproject-files" \
    --output-modules "/builddir/build/BUILD/pyproject-modules" \
    --buildroot "/builddir/build/BUILDROOT/opencloudos-rpm-config-1.0-25.ocs23.noarch" \
    --sitelib "/usr/lib/python3.11/site-packages" \
    --sitearch "/usr/lib64/python3.11/site-packages" \
    --python-version "3.11" \
    --pyproject-record "/builddir/build/BUILD/pyproject-record" \
    --prefix "/usr" \
    
  : add support for nested directories and License-Files


author: Shuo Wang <abushwang@tencent.com> - 1.0-23
changelog:
  - \
  /usr/bin/python3 /usr/lib/rpm/OpenCloudOS/pyproject_save_files.py \
    --output-files "/builddir/build/BUILD/pyproject-files" \
    --output-modules "/builddir/build/BUILD/pyproject-modules" \
    --buildroot "/builddir/build/BUILDROOT/opencloudos-rpm-config-1.0-26.ocs23.noarch" \
    --sitelib "/usr/lib/python3.11/site-packages" \
    --sitearch "/usr/lib64/python3.11/site-packages" \
    --python-version "3.11" \
    --pyproject-record "/builddir/build/BUILD/pyproject-record" \
    --prefix "/usr" \
    
  : add support for nested directories and License-Files


author: Shuo Wang <abushwang@tencent.com> - 1.0-23
changelog:
  - \
  /usr/bin/python3 /usr/lib/rpm/OpenCloudOS/pyproject_save_files.py \
    --output-files "/builddir/build/BUILD/pyproject-files" \
    --output-modules "/builddir/build/BUILD/pyproject-modules" \
    --buildroot "/builddir/build/BUILDROOT/opencloudos-rpm-config-1.0-27.ocs23.noarch" \
    --sitelib "/usr/lib/python3.11/site-packages" \
    --sitearch "/usr/lib64/python3.11/site-packages" \
    --python-version "3.11" \
    --pyproject-record "/builddir/build/BUILD/pyproject-record" \
    --prefix "/usr" \
    
  : add support for nested directories and License-Files


author: Siyuan Lou <siyuanlou@tencent.com> - 1.0-27
changelog:
  - add more macros for golang. 
  - add rpm-go.lua, srpm-go.lua, and go-rpm-integration script to support go rpm packaging.


author: Shuo Wang <abushwang@tencent.com> - 1.0-23
changelog:
  - \
  /usr/bin/python3 /usr/lib/rpm/OpenCloudOS/pyproject_save_files.py \
    --output-files "/builddir/build/BUILD/pyproject-files" \
    --output-modules "/builddir/build/BUILD/pyproject-modules" \
    --buildroot "/builddir/build/BUILDROOT/opencloudos-rpm-config-1.0-28.ocs23.noarch" \
    --sitelib "/usr/lib/python3.11/site-packages" \
    --sitearch "/usr/lib64/python3.11/site-packages" \
    --python-version "3.11" \
    --pyproject-record "/builddir/build/BUILD/pyproject-record" \
    --prefix "/usr" \
    
  : add support for nested directories and License-Files


author: Shuo Wang <abushwang@tencent.com> - 1.0-23
changelog:
  - \
  /usr/bin/python3 /usr/lib/rpm/OpenCloudOS/pyproject_save_files.py \
    --output-files "/builddir/build/BUILD/pyproject-files" \
    --output-modules "/builddir/build/BUILD/pyproject-modules" \
    --buildroot "/builddir/build/BUILDROOT/opencloudos-rpm-config-1.0-29.ocs23.noarch" \
    --sitelib "/usr/lib/python3.11/site-packages" \
    --sitearch "/usr/lib64/python3.11/site-packages" \
    --python-version "3.11" \
    --pyproject-record "/builddir/build/BUILD/pyproject-record" \
    --prefix "/usr" \
    
  : add support for nested directories and License-Files


author: Shuo Wang <abushwang@tencent.com> - 1.0-23
changelog:
  - \
  /usr/bin/python3 /usr/lib/rpm/OpenCloudOS/pyproject_save_files.py \
    --output-files "/builddir/build/BUILD/pyproject-files" \
    --output-modules "/builddir/build/BUILD/pyproject-modules" \
    --buildroot "/builddir/build/BUILDROOT/opencloudos-rpm-config-1.0-31.ocs23.noarch" \
    --sitelib "/usr/lib/python3.11/site-packages" \
    --sitearch "/usr/lib64/python3.11/site-packages" \
    --python-version "3.11" \
    --pyproject-record "/builddir/build/BUILD/pyproject-record" \
    --prefix "/usr" \
    
  : add support for nested directories and License-Files


author: cunshunxia <cunshunxia@tencent.com> - 1.0-31
changelog:
  - requires go-rpm-macros in default build env which is the mix of go-rpm-macros and
  - go-srpm-macros before.


author: Shuo Wang <abushwang@tencent.com> - 1.0-23
changelog:
  - \
  /usr/bin/python3 /usr/lib/rpm/OpenCloudOS/pyproject_save_files.py \
    --output-files "/builddir/build/BUILD/pyproject-files" \
    --output-modules "/builddir/build/BUILD/pyproject-modules" \
    --buildroot "/builddir/build/BUILDROOT/opencloudos-rpm-config-1.0-32.ocs23.noarch" \
    --sitelib "/usr/lib/python3.11/site-packages" \
    --sitearch "/usr/lib64/python3.11/site-packages" \
    --python-version "3.11" \
    --pyproject-record "/builddir/build/BUILD/pyproject-record" \
    --prefix "/usr" \
    
  : add support for nested directories and License-Files


author: Xin Cheng <denisecheng@tencent.com> - 9.3p2-4
changelog:
  - CVE-2023-51385: forbid shell metasymbols in username/hostname
  - CVE-2023-51384: apply destination constraints to all p11 keys
  - CVE-2023-48795: fix Terrapin attack


author: Liangliang Zhai <zhailiangliang@loongson.cn> - 2.7.2-6
changelog:
  - [Type] other
  - [DESC] To solve openwsman-winrs installation dependency on rubygem-openwsman,
           enable ruby for loongarch64 to compile and generate rubygem-openwsman


author: doriscchao <doriscchao@tencent.com> - 2.7.6-1
changelog:
  - initial build, base version 2.7.6, update to upstream git commit 20200514 with gnulib 
    version 20200513 through patch0001.


author: Chunsheng Luo <luffyluo@tencent.com> - 6.2.2-5
changelog:
  - Fix CVE-2024-45769 pcp: pmcd heap corruption through metric pmstore operations
  - Fix CVE-2024-45770 pcp: pmpost symlink attack allows escalating pcp to root user


author: Xiaojie Chen <jackxjchen@tencent.com> - 3.02-1
changelog:
  - Upgrade to upstream version 3.02
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.36-1
changelog:
  - Upgrade to upstream version 2.36
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.143-1
changelog:
  - Upgrade to upstream version 2.143
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.206-1
changelog:
  - Upgrade to upstream version 2.206
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.16-1
changelog:
  - Upgrade to upstream version 1.16
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 6.04-1
changelog:
  - Upgrade to upstream version 6.04
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 3.19-1
changelog:
  - Upgrade to upstream version 3.19
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.22-1
changelog:
  - Upgrade to upstream version 2.22
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 7.70-1
changelog:
  - Upgrade to upstream version 7.70
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.75-1
changelog:
  - Upgrade to upstream version 1.75
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.54-1
changelog:
  - Upgrade to upstream version 2.54
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 3.81-1
changelog:
  - Upgrade to upstream version 3.81
  - Remove perl-libs which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 6.06-1
changelog:
  - Upgrade to upstream version 6.06
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 6.44-1
changelog:
  - Upgrade to upstream version 6.44
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15
  - Remove conditional macro because perl(Clone) is no longger an optional dependency


author: Xiaojie Chen <jackxjchen@tencent.com> - 0.088-1
changelog:
  - Upgrade to upstream version 0.088
  - Remove perl-libs which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 0.42-1
changelog:
  - Upgrade to upstream version 0.42
  - Remove perl-libs which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.083-1
changelog:
  - Upgrade to upstream version 2.074
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 4.10-1
changelog:
  - Upgrade to upstream version 4.10
  - Remove perl-libs which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 4.16-1
changelog:
  - Upgrade to upstream version 4.16
  - Remove perl-libs which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.9998.39-1
changelog:
  - Upgrade to upstream version 1.9998.39
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2:0.42.34-1
changelog:
  - Upgrade to upstream version 0.42.34
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 5.20230720-1
changelog:
  - Upgrade to upstream version 5.20230720
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.21-1
changelog:
  - Upgrade to upstream version 1.21
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.000038-1
changelog:
  - Upgrade to upstream version 1.000038
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.39-1
changelog:
  - Upgrade to upstream version 1.39
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.66-1
changelog:
  - Upgrade to upstream version 1.66
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 3.45-1
changelog:
  - Upgrade to upstream version 3.45
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.037-1
changelog:
  - Upgrade to upstream version 2.037
  - Remove perl-libs which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.204-1
changelog:
  - Upgrade to upstream version 1.204
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 0.017-1
changelog:
  - Upgrade to upstream version 0.017
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 0.002010-1
changelog:
  - Upgrade to upstream version 0.002010
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.302195-1
changelog:
  - Upgrade to upstream version 1.302195
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.35-1
changelog:
  - Upgrade to upstream version 1.35
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 5.19-1
changelog:
  - Upgrade to upstream version 5.19
  - Remove perl-libs which will be generated by perl-generators >= 1.15


author: cunshunxia <cunshunxia@tencent.com> - 1.30-5
changelog:
  - The build config of git has changed, so perl-Git pull perl-YAML
  - in the AppStream.
  - see https://gitee.com/OpenCloudOS/rpm_info/pulls/297.


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.15-1
changelog:
  - Upgrade to upstream version 1.15
  - Add file perlcompat.attr which generates replacement for versioned


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.33-1
changelog:
  - Upgrade to upstream version 1.33
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 3.15-1
changelog:
  - Upgrade to upstream version 3.15
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 6.72-1
changelog:
  - Upgrade to upstream version 6.72
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15
  - Add buildrequires perl(Module::Load) and perl(HTTP::CookieJar::LWP)
  - Add requires perl(HTTP::CookieJar::LWP)


author: Xiaojie Chen <jackxjchen@tencent.com> - 0.241-1
changelog:
  - Upgrade to upstream version 0.241
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 5.01-1
changelog:
  - Upgrade to upstream version 5.01
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Shuo Wang <abushwang@tencent.com> - 23.08.0-3
changelog:
  - fix CVE-2024-6239 and backport its pre-patch
  - pdfinfo: Fix crash in broken documents when using -dests


author: Shuo Wang <abushwang@tencent.com> - 23.08.0-8
changelog:
  - fix CVE-2025-32364 CVE-2025-32365
  - PSStack::roll: Protect against doing int = -INT_MIN
  - Move isOk check to inside JBIG2Bitmap::combine


author: Upgrade Robot <upbot@opencloudos.tech> - 15.9-1
changelog:
  - Upgrade to version 15.9
  - CVEs fixed: CVE-2024-10976, CVE-2024-10977, CVE-2024-10978, CVE-2024-10979


author: Wang Guodong <gordonwwang@tencent.com> - 15.4-1
changelog:
  - Upgrade to version 15.4
  - Use sysusers configuration to setup user & group
  - CVEs fixed: CVE-2023-39417 CVE-2023-39418


author: cunshunxia <cunshunxia@tencent.com> - 10.0.0-2
changelog:
  - remove runtime dependence pyOpenSSL which is only used when test.
  - remove six which is not needed anymore.


author: Jiaxin Yang <jiaxinyyang@tencent.com> - 4.9.3-8
changelog:
  - [Type] security
  - [DESC] Make Unicode recovery test work with libxml2 2.12 (GH-383)
  - [DESC] Rebuilt for libxml2


author: jackeyji <jackeyji@tencent.com> - 5.1.1-2
changelog:
  - [Type] other
  - [DESC] remove testcases because redis-server failed with port conflict when CI machine run with redis


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.9.2-1
changelog:
  - Upgrade to upstream version 1.9.2 
  - Disable some tests until upstream adapts to changes in python 3.11


author: Zhao Zhen <jeremiazhao@tencent.com> - 3.11.4-1
changelog:
  - upgraded for upstream 3.11.4
  - fixed CVE-2023-24329, CVE-2022-45061, CVE-2022-42919, CVE-2021-28861, CVE-2020-10735, CVE-2015-20107
  - removed python-unversioned-command, it is now merged into python3 package, so python3 package contains
  - /usr/bin/python by default


author: cunshunxia <cunshunxia@tencent.com> - 3.11.6-15
changelog:
  - fix CVE-2025-0938.
  - gh-105704: Disallow square brackets (`[` and `]`) in
   domain names for parsed URLs (GH-129418) (#129528)


author: Shuo Wang <abushwang@tencent.com> - 3.11.6-16
changelog:
  - fix CVE-2025-1795
  - email/_header_value_parser: don't encode list separators (GH-100885) (GH-115593)
  - Fix UnicodeEncodeError in TokenList.fold() (GH-113730)
  - Fix for email.generator.Generator with whitespace between encoded words. (#92281)
  - Fix AttributeError in the email module (GH-119099)


author: cunshunxia <cunshunxia@tencent.com> - 3.11.6-17
changelog:
  - fix CVE-2025-4435
  - Also addresses CVEs 2024-12718, 2025-4138, 2025-4330, and 2025-4517
  - gh-135034: Normalize link targets in tarfile, add `os.path.realpath(strict='allow_missing')` (GH-135037)
  - fix CVE-2025-6069


author: Shuo Wang <abushwang@tencent.com> - 3.11.6-19
changelog:
  - fix CVE-2025-4516
  - gh-133767: Fix use-after-free in the unicode-escape decoder
  - with an error handler (GH-129648) (GH-133944) (GH-134341)


author: cunshunxia <cunshunxia@tencent.com> - 3.11.6-20
changelog:
  - fix CVE-2025-8194.
  - gh-130577: tarfile now validates archives to ensure member
  - offsets are non-negative (GH-137027)


author: Tracker Robot <trackbot@opencloudos.tech> - 3.11.6-22
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] 7cff053efeb8506495c5f77f40742341a1714d96.patch: [3.11] gh-80222: Fix email address header folding with long quoted-string (GH-122753) (#129009)
  - [Bug Fix] 3abcace681e58c4c84cec9e191345a6cc58f46d9.patch: [3.11] gh-119511: Fix a potential denial of service in imaplib (GH-119514) (#129357)
  - [Bug Fix] f1897d312e16bdf820ee47de053fdc24f621d0b1.patch: [3.11] GH-130396: Treat clang -Og as optimized for gdb tests (GH-130550) (GH-130573) (#130593)
  - [Bug Fix] 6b37486184590d19c6f24e620545ec8f8f65e4c7.patch: [3.11] gh-106883 Fix deadlock in threaded application (#117332)
  - [Bug Fix] 458871277323024d5d4db35ca7056cc51d5e4d8d.patch: [3.11] gh-127257: ssl: Raise OSError for ERR_LIB_SYS (GH-127361) (GH-127905) (GH-131970)
  - [Bug Fix] 0a66052d8dec1a143bc77015ce7522ea812817ed.patch: [3.11] gh-121284: Fix email address header folding with parsed encoded-word (GH-122754) (GH-131405)
  - [Bug Fix] f8b4421bc5569df25259895a58b69b4d87a47d20.patch: [3.11] gh-134062: Fix hash collisions in IPv4Network and IPv6Network (GH-134063) (GH-134479)
  - [Bug Fix] da3755557a2f6421e400f6903a47b9de291a9494.patch: [3.11] gh-128840: Limit the number of parts in IPv6 address parsing (GH-128841) (GH-134613)
  - [Bug Fix] 9df171dbbac669e0d43c978e10447f050b89eee6.patch: [3.11] gh-123409: fix IPv6Address.reverse_pointer for IPv4-mapped addresses (GH-123419) (GH-135087)
  - [Bug Fix] 2c6ca1a9adfeaabfdc17b9871b17bd2ca9b32bb3.patch: [3.11] gh-128840: Fix parsing long IPv6 addresses with embedded IPv4 address (GH-134836) (GH-135091)
  - [Bug Fix] 313544eb0381d868b4f8b351a0ca808c313af698.patch: [3.11] gh-127563: use dk_log2_index_bytes=3 in empty dicts (GH-127568) (GH-127813) (#135463)
  - [Bug Fix] d8f6297e6d678f635d78cc59776ab7b246bfb03c.patch: [3.11] gh-102555: Fix comment parsing in HTMLParser according to the HTML5 standard (GH-135664) (GH-136274)
  - [Bug Fix] 228509edab356b02743d9fa9de379854e9526e51.patch: [3.11] gh-135661: Fix parsing start and end tags in HTMLParser according to the HTML5 standard (GH-135930) (GH-136268) (#136291)
  - [Bug Fix] 3511c2e546aaacda5880eb89a94f4e8514b3ce76.patch: [3.11] gh-135661: Fix parsing attributes with whitespaces around the = separator in HTMLParser (GH-136908) (GH-136920)
  - [Bug Fix] 02feb83af27184fd15f6ee7f7996ab92ce229f82.patch: [3.11] gh-118350: Fix support of elements textarea and title in HTMLParser (GH-135310) (GH-137782)


author: Tracker Robot <trackbot@opencloudos.tech> - 3.11.6-23
changelog:
  - [Type] security
  - [DESC] Apply patches from rpm-tracker
  - [CVE Fix] 5f90abaa786f994db3907fc31e2ee00ea2cf0929.patch: [3.11] gh-122133: Authenticate socket connection for socket.socketpair() fallback (GH-122134) (#122426)
  - [CVE Fix] c5655aa6ad120d2ed7f255bebd6e8b71a9c07dde.patch: [3.11] gh-122133: Rework pure Python socketpair tests to avoid use of importlib.reload. (GH-122493) (GH-122506)
  - [CVE Fix] bc4a703a934a59657ecd018320ef990bc5542803.patch: [3.11] [CVE-2023-27043] gh-102988: Reject malformed addresses in email.parseaddr() (GH-111116) (#123767)


author: Tracker Robot <trackbot@opencloudos.tech> - 1.1.2-5
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] c43b17f1bc2b5c393b85259d9bd16635ed3f32c6.patch: QATAPP-31145: Fix null pointer dereference
  - [Bug Fix] c116a7ef6c20f0871b9672d9ed930a252b40ba18.patch: QATAPP-31146: Fix potential double free
  - [Performance] 49bcf697305ee71f954e2f08883fa18bcc689f5e.patch: QATAPP-29019: Improve sw fallback performance


author: Upgrade Robot <upbot@opencloudos.org> - 8.2.2-1
changelog:
  - Upgrade to version 8.2.2
  - fix vnc module display problem, see
  - https://gitlab.com/qemu-project/qemu/-/issues/2051


author: Song Gao <gaosong@loongson.cn> - 8.2.2-7
changelog:
  - Patch0056: 0055-hw-loongarch-virt-Align-high-memory-base-address-wit.patch
  - Patch0057: 0056-target-loongarch-Add-timer-information-dump-support.patch
  - Patch0058: 0057-target-loongarch-meson-move-gdbstub.c-to-loongarch.s.patch
  - Patch0059: 0058-target-loongarch-move-translate-modules-to-tcg.patch
  - Patch0060: 0059-linux-headers-Update-to-Linux-v6.7-rc5.patch
  - Patch0061: 0060-linux-headers-Synchronize-linux-headers-from-linux-v.patch
  - Patch0062: 0061-target-loongarch-Define-some-kvm_arch-interfaces.patch
  - Patch0063: 0062-target-loongarch-Supplement-vcpu-env-initial-when-vc.patch
  - Patch0064: 0063-target-loongarch-Implement-kvm-get-set-registers.patch
  - Patch0065: 0064-target-loongarch-Implement-kvm_arch_init-function.patch
  - Patch0066: 0065-target-loongarch-Implement-kvm_arch_init_vcpu.patch
  - Patch0067: 0066-target-loongarch-Implement-kvm_arch_handle_exit.patch
  - Patch0068: 0067-target-loongarch-Restrict-TCG-specific-code.patch
  - Patch0069: 0068-target-loongarch-Implement-set-vcpu-intr-for-kvm.patch
  - Patch0070: 0069-target-loongarch-Add-loongarch-kvm-into-meson-build.patch
  - Patch0071: 0070-hw-intc-loongarch_ipi-Use-MemTxAttrs-interface-for-i.patch
  - Patch0072: 0071-hw-loongarch-virt-Set-iocsr-address-space-per-board-.patch
  - Patch0073: 0072-hw-intc-loongarch_extioi-Add-dynamic-cpu-number-supp.patch
  - Patch0074: 0073-hw-intc-loongarch_extioi-Add-vmstate-post_load-suppo.patch
  - Patch0075: 0074-configure-Add-linux-header-compile-support-for-Loong.patch
  - Patch0076: 0075-target-loongarch-Set-cpuid-CSR-register-only-once-wi.patch
  - Patch0077: 0076-target-loongarch-kvm-Enable-LSX-LASX-extension.patch
  - Patch0078: 0077-target-loongarch-Fix-qtest-test-hmp-error-when-KVM-o.patch
  - Patch0079: 0078-loongarch-Change-the-UEFI-loading-mode-to-loongarch.patch
  - Patch0080: 0079-target-loongarch-Fix-tlb-huge-page-loading-issue.patch
  - Patch0081: 0080-target-loongarch-Fix-qemu-loongarch64-hang-when-exec.patch
  - Patch0082: 0081-target-loongarch-kvm-Add-software-breakpoint-support.patch
  - Patch0083: 0082-hw-intc-loongarch_extioi-Add-virt-extension-support.patch
  - Patch0084: 0083-target-loongarch-kvm-sync-kernel-header-files.patch
  - Patch0085: 0084-hw-intc-loongarch_extioi-Add-virt-extension-support-.patch
  - Patch0087: 0085-target-loongarch-kvm-Add-pmu-support.patch
  - Patch0087: 0086-target-loongarch-Fix-qemu-system-loongarch64-assert-.patch
  - Patch0088: 0087-target-loongarch-kvm-Fix-VM-recovery-from-disk-failu.patch
  - Patch0089: 0088-target-loongarch-kvm-fpu-save-the-vreg-registers-hig.patch
    (Add LoongArch features and bugfixes)


author: Chunsheng Luo <luffyluo@tencent.com> - 8.2.2-12
changelog:
  - nbd/server: CVE-2024-7409: Avoid use-after-free when closing server
  - nbd/server: CVE-2024-7409: Close stray clients at server-stop
  - nbd/server: CVE-2024-7409: Drop non-negotiating clients
  - nbd/server: CVE-2024-7409: Cap default max-connections to 100
  - nbd/server: Plumb in new args to nbd_client_add()
  - hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set(CVE-2024-3447)
  - hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs(CVE-2024-3446)
  - hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs(CVE-2024-3446)
  - hw/display/virtio-gpu: Protect from DMA re-entrancy bugs(CVE-2024-3446)
  - hw/virtio: Introduce virtio_bh_new_guarded() helper


author: Chunsheng Luo <luffyluo@tencent.com> - 8.2.2-13
changelog:
  - hw/net/net_tx_pkt: Fix overrun in update_sctp_checksum()(CVE-2024-3567)
  - qcow2: Don't open data_file with BDRV_O_NO_IO(CVE-2024-4467)
  - iotests/244: Don't store data-file with protocol in image(CVE-2024-4467)
  - iotests/270: Don't store data-file with json: prefix in image(CVE-2024-4467)
  - block: Parse filenames only when explicitly requested(CVE-2024-4467)
  - virtio-net: Ensure queue index fits with RSS(CVE-2024-6505)
  - virtio-snd: add max size bounds check in input cb(CVE-2024-7730)


author: hanliyang <hanliyang@hygon.cn> - 8.2.2-23
changelog:
  - [Type] other
  - [DESC] Support 3 functionalities:
    - Support kernel boot verification for Hygon CSV3 VM
    - Support inject secret for Hygon CSV3 VM
    - Support auto load and inject secret for Hygon CSV/CSV2/CSV3 VM


author: hanliyang <hanliyang@hygon.cn> - 8.2.2-32
changelog:
  - [Type] other
  - [DESC] Add a CSV3 ioctl command to request Linux KVM update CSV3 VM's page attribute info


author: hanliyang <hanliyang@hygon.cn> - 8.2.2-33
changelog:
  - [Type] other
  - [DESC] sync header file from upstream and Enable the compilation of loongarch qemu on other architectures


author: Xiaojie Chen <jackxjchen@tencent.com> - 7.0.14-1
changelog:
  - Upgrade to upstream version 7.0.14
  - Fix CVE-2023-41053 and CVE-2023-45145
  - Set jemalloc page size


author: Doris Chao <doriscchao@tencent.com> - 2024.4-1
changelog:
  - [Type] security
  - [DESC] Upgrade to version 2024.4 to fix CVE-2023-26964(h2). 
  - Backport https://github.com/coreos/rpm-ostree/security/advisories/GHSA-2m76-cwhg-7wv6, CVE-2024-2905.
  - Backport https://github.com/coreos/rpm-ostree/commit/fe586621e5014d14f92b913338171a02ed29e6cc


author: Tracker Robot <trackbot@opencloudos.tech> - 8.2312.0-4
changelog:
  - Apply patches from rpm-tracker
  - [Bug Fix] ec3ddc61c5fffd5d3762520338ea0e8d813c5b4b.patch: Merge pull request #5454 from apple-ouyang/patch-1
  - [Bug Fix] 8d7392d391837bde0b5783428eb2c1dfdf19c1bc.patch: Merge pull request #5458 from rsyslog/nonexistentfoo


author: Tracker Robot <trackbot@opencloudos.tech> - 8.2312.0-5
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] e06569ecea1b5c0cd1c35699f31ab3929d431d2a.patch: Fix a buffer overflow when the argument to replace is empty
  - [Bug Fix] 09a3448a3e6ac5aa7065fd56d229a66eacece4db.patch: covscan: remove defect type of RESOURCE_LEAK
  - [Bug Fix] 6b1b15842c7bb71948c37c362053bd1a1cec98d8.patch: core: fix potential misadressing in sigmask
  - [Bug Fix] 6c04651db771fc44f24d3bef499bdf6837633042.patch: rsyslog startup bugfix: cosmetic memory leak
  - [Bug Fix] ff6f4ceeed8ba715ea0e26d36e2afac2f6c07931.patch: gnutls TLS driver: fix small memory leak
  - [Bug Fix] 0ac9aafb72588ff6c5bc0923fee2dcc7076f4855.patch: omfwd: fix segfault in UDP freeaddrinfo
  - [Bug Fix] 3c00ecb73e72abaa436a06421980cb02de5d0515.patch: core: fix potential NULL ptr access on HUP in very early startup phase


author: Wang Guodong <gordonwwang@tencent.com> - 1.73.0-1
changelog:
  - Upgrade to 1.73.0
  - Add build target for x86_64-unknown-none, x86_64-unknown-uefi
  - Use emmalloc instead of CC0 dlmalloc when bundling wasi-libc


author: Wang Guodong <gordonwwang@tencent.com> - 1.84.1-1
changelog:
  - Upgrade to 1.84.1
  - revert rustlibdir library
  - Fix errors for overlapping impls in incremental rebuilds


author: Wang Guodong <gordonwwang@tencent.com> - 1.70.0-3
changelog:
  - include -Cstrip=none in %build_rustflags for rust-1.77.0
  - sync rust-toolset macros to rust-packaging v25.2


author: xiaoyunzhao<xiaoyunzhao@tencent.com> - 3.42.0-7
changelog:
  - [Type] other
  - [DESC] Apply patches from rpm-tracker
  - [Performance] https://github.com/sqlite/sqlite/commit/44980e816985953ed7125b657751a1d09560df02.patch: Use hashing to accelerate column matching on INSERT statements.


author: Xiaojie Chen <jackxjchen@tencent.com> - 6.5-1
changelog:
  - Upgrade to upstream version 6.5
  - Fix CVE-2023-46728, CVE-2023-46848 and CVE-2023-46847
  - Fix CVE-2023-46846, CVE-2023-5824 and CVE-2023-46724


author: Doris Chao <doriscchao@tencent.com> - 7.0.3-4
changelog:
  - [Type] bugfix
  - [DESC] Change the way info files information is updated, no longer using
  - the fix-info-dir script,since bash no loonger provies the /usr/share/info/dir


author: Fanjun Kong <fanjunkong@tencent.com> - 1.13.1-3
changelog:
  - CVE-2023-5367
  - CVE-2023-5380
  - CVE-2023-6377
  - CVE-2023-6478
  - CVE-2023-6816
  - CVE-2024-0229
  - CVE-2024-21885
  - CVE-2024-21886


author: Liangliang Zhai <zhailiangliang@loongson.cn> - 1.13.1-4
changelog:
  - [Type] other
  - [DESC] fix patching failure:
    Source package has previously fixed the following CVE:
    CVE-2023-5367,CVE-2023-5380,CVE-2023-6478,CVE-2023-6816,CVE-2024-0229,CVE-2024-21885,CVE-2024-21886,CVE-2023-6377.


author: Xinlong Chen <xinlongchen@tencent.com> - 1.13.1-10
changelog:
  - [Type] security
  - [DESC] rebuild for some cves in xorg-x11-server:
  -        CVE-2022-49737 CVE-2025-49175 CVE-2025-49176
  -        CVE-2025-49178 CVE-2025-49179 CVE-2025-49180


author: Doris Chao <doriscchao@tencent.com> - 9.0.86-1
changelog:
  - [Type] security
  - [DESC] Update to apache-tomcat-9.0.86 to fix CVEs,include CVE-2024-23672 and CVE-2024-24549


author: Doris Chao <doriscchao@tencent.com> - 9.0.104-1
changelog:
  - [Type] security
  - [DESC] Update to version 9.0.104 to fix CVE-2025-31650 and CVE-2025-31651.
  - Currently restrict Maven >= 3.9.9 requirement to .ocs23 platform only.


author: Doris Chao <doriscchao@tencent.com> - 9.0.106-1
changelog:
  - [Type] security
  - [DESC] Update to version 9.0.106 to fix CVE-2025-49125, CVE-2025-48988 
  - and CVE-2025-48976.


author: Doris Chao <doriscchao@tencent.com> - 9.0.107-1
changelog:
  - [Type] security
  - [DESC] Update to version 9.0.107 to fix CVE-2025-52434, CVE-2025-52520
  - and CVE-2025-53506.


author: Doris Chao <doriscchao@tencent.com> - 9.0.82-1
changelog:
  - Update to apache-tomcat-9.0.82 to fix the CVE-2023-45648,CVE-2023-42795,CVE-2023-41080 
    and CVE-2023-28709


author: Xin Cheng <denisecheng@tencent.com> - 1.17.1-4
changelog:
  - Fix CVE-2023-50387, DNSSEC verification complexity can be exploited to exhaust CPU resources and stall DNS resolvers.
  - Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust CPU.


author: Zien Huang <ethanehuang@tencent.com> - 1.17.1-7
changelog:
  - [Type] security
  - [DESC] DNS resolvers vulnerable to remote DoS attacks via response amplification (fix CVE-2024-33655)


author: Miaojun Dong <zoedong@tencent.com> - 0.13.0-1
changelog:
  - Bump version to 0.13.0
  - usbredirserver is deprecated in favor of usbredirect
  - usbredirect can be used as a client or server through different parameters


author: Binbin Zhou <zhoubinbin@loongson.cn> - 3.21.0-8
changelog:
  - [Type] bugfix
  - [DESC] Update loongarch64/Linux patch, more instructions need to be supported;
  	 Enable test for loongarch64


author: Zhao Zhen <jeremiazhao@tencent.com> - 9.0.2092-1
changelog:
  - updated to upstream version 9.0.2092
  - fixed CVE-2023-4735 CVE-2023-4736 CVE-2023-4734 CVE-2023-4738 CVE-2023-4752 
    CVE-2023-4781 CVE-2023-4733 CVE-2023-4750 CVE-2023-5344 CVE-2023-5441 CVE-2023-5535


author: Yi Lin <nilusyi@tencent.com> - 9.0.2092-2
changelog:
  - fixed CVE-2023-48231 CVE-2023-48232 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 
    CVE-2023-48236 CVE-2023-48237 CVE-2023-48706 CVE-2024-22667


author: Miaojun Dong <zoedong@ttencent.com> - 1.4.2-1
changelog:
  - Upgrade version to 1.4.2
  - Rebuild for binutils-2.41-2 to fix BPF bytecode files strip failure
  - Remove Patch for i686 arch


author: Fanjun Kong <fanjunkong@tencent.com> - 21.1.8-3
changelog:
  - Fix CVE:
  - CVE-2023-6478
  - CVE-2023-5367
  - CVE-2023-5380
  - CVE-2023-6816
  - CVE-2024-0229
  - CVE-2024-21885
  - CVE-2024-21886
  - CVE-2024-0408
  - CVE-2024-0409


author: Xinlong Chen <xinlongchen@tencent.com> - 21.1.8-11
changelog:
  - [Type] security
  - [DESC] fix CVEs: CVE-2025-26594 CVE-2025-26595
  -        CVE-2025-26597 CVE-2025-26598 CVE-2025-26599
  -        CVE-2025-26600 CVE-2025-26601 CVE-2025-26596


author: Xinlong Chen <xinlongchen@tencent.com> - 21.1.8-14
changelog:
  - [Type] security
  - [DESC] fix CVEs: CVE-2022-49737 CVE-2025-49175 CVE-2025-49176
  -        CVE-2025-49178 CVE-2025-49179 CVE-2025-49180


author: Zhao Zhen <jeremiazhao@tencent.com> - 23.1.2-3
changelog:
  - fixed CVE-2023-5367.patch CVE-2024-21885.patch CVE-2024-21886.patch CVE-2024-0408.patch
  - CVE-2024-0409.patch CVE-2024-0229.patch CVE-2023-6816.patch CVE-2023-6377.patch
  - CVE-2024-31080.patch CVE-2024-31081.patch


author: Xinlong Chen <xinlongchen@tencent.com> - 23.1.2-8
changelog:
  - [Type] security
  - [DESC] fix CVEs: CVE-2025-49175 CVE-2025-49176 CVE-2025-49177
  -        CVE-2025-49178 CVE-2025-49179 CVE-2025-49180


