# changelog

author: dorsoli <dorsoli@tencent.com> - 1.16.0-1
changelog:
  - [Type] sync 
  - [DESC] update to Version 1.16.0 to fix CVE-2025-8283 which requires aardvark-dns version >= netavark version


author: Sinong Chen <costinchen@tencent.com> - 0.18.6-4
changelog:
  - [Type] security
  - [DESC] Escape control characters in report and log output (CVE-2025-54389), and
  - fix null pointer dereference after reading incorrectly encoded xattr attributes
  - from database (CVE-2025-54409)


author: Tracker Robot <trackbot@opencloudos.tech> - 1.7.5-3
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] f8e45525c7f945f8b53510d1ee1768c4381b2da7.patch: Merged r1920432 from trunk:
  - [Unknown] 191479a91b47cbe367113132355f514f72115c57.patch: On 1.7.x branch: Merge revision r1920350 from trunk:
  - [Bug Fix] 6a2993b9493bff7b6b20858730cba16a218e46b1.patch: Merge r1920680 from trunk:


author: Zidong Huang <zidonghuang@tencent.com> - 0.1.116-1
changelog:
  - Upgraded to babl-0.1.116 as required by gimp-3.0.6 to fix CVE-2025-10920, CVE-2025-10922, CVE-2025-10923, CVE-2025-10924, CVE-2025-10925, and CVE-2025-10934.


author: doupengda <doupengda@loongson.cn> - 0.29.1-6
changelog:
  - [Type] bugfix
  - [DESC] fix larchintrin.h not found error for loongarch64
  - Sourced from https://github.com/iovisor/bcc/pull/5078


author: Xin Cheng <denisecheng@tencent.com> - 9.18.18-4
changelog:
  - fix CVE-2023-4408: Parsing large DNS messages may cause excessive CPU load
  - fix CVE-2023-5517: Querying RFC 1918 reverse zones may cause an assertion failure when "nxdomain-redirect" is enabled
  - fix CVE-2023-5679: Enabling both DNS64 and serve-stale may cause an assertion failure during recursive resolution
  - fix CVE-2023-6516: Specific recursive query patterns may lead to an out-of-memory condition
  - fix CVE-2023-50387: KeyTrap - Extreme CPU consumption in DNSSEC validator
  - fix CVE-2023-50868: Preparing an NSEC3 closest encloser proof can exhaust CPU resources


author: Upgrade Robot <upbot@opencloudos.tech> - 9.18.21-1
changelog:
  - [Type] security
  - [DESC] Upgrade to version 9.18.21 and fix CVE-2024-0760,CVE-2024-1737,CVE-2024-1975,CVE-2024-4076


author: Pengda Dou <doupengda@loongson.cn> - 0.19.1-6
changelog:
  - [Type] other
  - [DESC] add support for loongarch64
  - Fix cannot convert 'bfd*' to 'bfd_architecture'


author: jackeyji <jackeyji@tencent.com> - 1.37.5-1
changelog:
  - [Type] security
  - [DESC] upgrade to 1.37.5 to fix CVE-2024-9341 CVE-2024-9407 CVE-2024-9675 and CVE-2024-9676


author: hudson zhu <hudsonzhu@tencent.com> - 1.41.4-4
changelog:
  - [Type] security
  - [DESC] Fix [CVE-2025-61724], [CVE-2025-58187], [CVE-2025-58183], [CVE-2025-58186], [CVE-2025-58189], [CVE-2025-61725], [CVE-2025-58185] and [CVE-2025-61723]


author: Chunsheng Luo <luffyluo@tencent.com> - 18.2.0-14.1
changelog:
  - Fix ceph-mgr Incompatible With Python Modules Based on PyO3
  - https://tracker.ceph.com/issues/63529


author: clarehkli <clarehkli@tencent.com> - 1.22.0-7
changelog:
  - rebuilt with golang 1.24.11-1 to fix CVE-2025-58183、CVE-2025-58189、
           CVE-2025-58185、CVE-2025-58186、CVE-2025-58187、CVE-2025-61724、
           and CVE-2025-61725


author: Huang zien <ethanehuang@tencent.com> - 2.89-3
changelog:
  - [Type] security
  - [DESC] Dnsmasq 2.9 is vulnerable to Integer Overflow via forward_query(fix cve-2023-49441)


author: Chunsheng Luo <luffyluo@tencent.com> - 20240223-22
changelog:
  - Un-verified kernel bypass Secure Boot mechanism in direct boot mode [CVE-2025-2296]
  - MdeModulePkg/Bus/Usb/UsbKbDxe: Uncleared password keystrokes in circular queue can
    lead to information disclosure or escalation of privilege [CVE-2024-38798]


author: Chunsheng Luo <luffyluo@tencent.com> - 20240223-22.2
changelog:
  - openssl: Fix heap buffer overflow in BIO_f_linebuffer [CVE-2025-68160]
  - openssl: Fix OCB AES-NI/HW stream path unauthenticated/unencrypted trailing bytes [CVE-2025-69418]
  - openssl: Check return code of UTF8_putc [CVE-2025-69419]
  - openssl: Verify ASN1 object's types before attempting to access them [CVE-2025-69420]
  - openssl: Check oct argument for NULL in PKCS12_item_decrypt_d2i_ex() [CVE-2025-69421]
  - openssl: Ensure ASN1 types are checked before use [CVE-2026-22795 CVE-2026-22796]


author: Doris Chao <doriscchao@tencent.com> - 2.4.2-7
changelog:
  - [Type] security
  - [DESC] Apply patch to fix a heap-based buffer overflow in fcgi (CVE-2025-23016),
  - which also affects Perl FCGI module indirectly (CVE-2025-40907).


author: Zhao Zhen <jeremiazhao@tencent.com> - 4.12.1-1
changelog:
  - updated fence-agents 4.12.1
  - disabled ppc64le temlpy
  - bootstrap aws/gce/compute/kubevirt/aliyun agents
  - disabled azure temply
  - added ecloud agents


author: Doris Chao <doriscchao@tencent.com> - 128.5.1-1
changelog:
  - [Type] security
  - [DESC] Update to version 128.5.1 to fix CVEs, including CVE-2024-11691,
  - CVE-2024-11692, CVE-2024-11693, CVE-2024-11694, CVE-2024-11695, CVE-2024-11696,
  - CVE-2024-11697, CVE-2024-11698, and CVE-2024-11699.


author: Doris Chao <doriscchao@tencent.com> - 128.6.0-1
changelog:
  - [Type] security
  - [DESC] Update to version 128.6.0 to fix CVEs,including 2024-50336,CVE-2025-0237,
  - CVE-2025-0238, CVE-2025-0239, CVE-2025-0240, CVE-2025-0241,CVE-2025-0242
  - and CVE-2025-0243.


author: Doris Chao <doriscchao@tencent.com> - 128.7.0-1
changelog:
  - [Type] security
  - [DESC] Update to version 128.7.0 to fix CVEs,including CVE-2025-1009,
  - CVE-2025-1010, CVE-2025-1011, CVE-2025-1012, CVE-2025-1013, CVE-2025-1014,
  - CVE-2025-1016, CVE-2025-1017, CVE-2024-11704.


author: Doris Chao <doriscchao@tencent.com> - 128.8.0-1
changelog:
  - [Type] security
  - [DESC] Update to version 128.8.0 to fix CVEs,including CVE-2024-43097,
  - CVE-2025-1930, CVE-2025-1931, CVE-2025-1932, CVE-2025-1933, CVE-2025-1934,
  - CVE-2025-1935, CVE-2025-1936, CVE-2025-1937, CVE-2025-1938.


author: Doris Chao <doriscchao@tencent.com> - 128.9.0-1
changelog:
  - [Type] security
  - [DESC] Update to version 128.9.0 to fix CVEs,including CVE-2025-3028,
  - CVE-2025-3029, CVE-2025-3030.


author: Doris Chao <doriscchao@tencent.com> - 128.10.0-1
changelog:
  - [Type] security
  - [DESC] Update to version 128.10.0 to fix CVEs, including CVE-2025-2817,
  - CVE-2025-4083, CVE-2025-4087, CVE-2025-4091, CVE-2025-4093.


author: Doris Chao <doriscchao@tencent.com> - 128.10.1-1
changelog:
  - [Type] security
  - [DESC] Update to version 128.10.1 to fix CVEs, including CVE-2025-4918
  - and CVE-2025-4919.
  - Limit parallelism and optimize flags on x86_64 to reduce memory usage.


author: Doris Chao <doriscchao@tencent.com> - 128.11.0-1
changelog:
  - [Type] security
  - [DESC] Update to version 128.11.1 to fix CVEs, including CVE-2025-5263, 
  - CVE-2025-5264, CVE-2025-5266, CVE-2025-5267, CVE-2025-5268, and CVE-2025-5269.


author: Doris Chao <doriscchao@tencent.com> - 128.11.0-1
changelog:
  - [Type] security
  - [DESC] Update to version 128.11.1 to fix CVEs, including CVE-2025-5263, 
  - CVE-2025-5264, CVE-2025-5266, CVE-2025-5267, CVE-2025-5268,CVE-2025-5269
  - and CVE-2025-5283.


author: Doris Chao <doriscchao@tencent.com> - 128.12.0-1
changelog:
  - [Type] security
  - [DESC] Update to version 128.12.0 to fix CVEs, including CVE-2025-6424, 
  - CVE-2025-6425, CVE-2025-6429 and CVE-2025-6430.


author: Doris Chao <doriscchao@tencent.com> - 128.13.0-1
changelog:
  - [Type] security
  - [DESC] Update to version 128.13.0 to fix CVEs, including CVE-2025-8027, 
  - CVE-2025-8028, CVE-2025-8029, CVE-2025-8030, CVE-2025-8031, CVE-2025-8032, 
  - CVE-2025-8033, CVE-2025-8034 and CVE-2025-8035.


author: Upgrade Robot <upbot@opencloudos.tech> - 128.14.0-1
changelog:
  - Upgrade to version 128.14.0
  - Update to version 128.14.0 to fix CVEs, including CVE-2025-9179, CVE-2025-9180, CVE-2025-9181 and CVE-2025-9185.


author: Wenlong Zhang <zhangwenlong@loongson.cn> - 128.3.1-1
changelog:
  - [Type] security
  - [DESC] Update to version 128.3.1 to fix CVEs, including CVE-2024-9401,
  - CVE-2024-9392, CVE-2024-9393, CVE-2024-9394 and CVE-2024-9680.
  - update cbindgen-vendor.tar.xz to fix build error for cbindgen on loongarch64


author: Doris Chao <doriscchao@tencent.com> - 128.4.0-1
changelog:
  - [Type] security
  - [DESC] Update to version 128.4.0 to fix CVEs, including CVE-2024-10458, 
  - CVE-2024-10459, CVE-2024-10460, CVE-2024-10461, CVE-2024-10462, CVE-2024-10463, 
  - CVE-2024-10464, CVE-2024-10465, CVE-2024-10466 and CVE-2024-10467.


author: Doris Chao <doriscchao@tencent.com> - 140.4.0-1
changelog:
  - [Type] security
  - Update to version 140.3.1esr
  - Rebuild against the new expat that fixes CVE-2025-59375.


author: Doris Chao <doriscchao@tencent.com> - 140.4.0-1
changelog:
  - [Type] security
  - Update to version 140.4.0esr
  - Rebuild against the new expat that fixes CVE-2025-59375.


author: Doris Chao <doriscchao@tencent.com> - 140.5.0-1
changelog:
  - [Type] security
  - [DESC] Update to version 140.5.0esr to fix CVEs,including CVE-2025-13012,CVE-2025-13013,
  - CVE-2025-13014,CVE-2025-13015,CVE-2025-13016,CVE-2025-13017,CVE-2025-13018,CVE-2025-13019
  - and CVE-2025-13020.


author: Doris Chao <doriscchao@tencent.com> - 140.6.0-1
changelog:
  - [Type] security
  - [DESC] Update to version 140.6.0esr to fix CVEs,including CVE-2025-14321, CVE-2025-14322, 
  - CVE-2025-14323, CVE-2025-14324, CVE-2025-14325, CVE-2025-14328, CVE-2025-14329, CVE-2025-14330,
  - CVE-2025-14331 and CVE-2025-14333.


author: Doris Chao <doriscchao@tencent.com> - 140.7.0-1
changelog:
  - [Type] security
  - [DESC] Update to version 140.7.0esr to fix CVEs,including CVE-2026-0877,CVE-2026-0878,
  - CVE-2026-0879,CVE-2026-0880,CVE-2026-0882,CVE-2025-14327,CVE-2026-0883,CVE-2026-0884,
  - CVE-2026-0885,CVE-2026-0886,CVE-2026-0887,CVE-2026-0890 and CVE-2026-0891.


author: Upgrade Robot <upbot@opencloudos.tech> - 4.12.2-1
changelog:
  - Upgrade to version 4.12.2 (Fix CVE-2024-2698, CVE-2024-3183)
  - Revert "Replace netifaces with ifaddr"


author: dorsoli <dorsoli@tencent.com> - 4.12.5-1
changelog:
  - [Type] security
  - [DESC] Apply patches to fix CVE-2025-7493, updating functionality to 4.12.5 level.


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.11.2-1
changelog:
  - Upgrade to upstream version 2.11.2
  - Fix CVE-2023-40589,CVE-2023-40569,CVE-2023-40567,CVE-2023-40188
  - Fix CVE-2023-40186,CVE-2023-40181,CVE-2023-39356,CVE-2023-39354
  - Fix CVE-2023-39353,CVE-2023-39352,CVE-2023-39351,CVE-2023-39350
  - Fix CVE-2022-41877,CVE-2022-39347,CVE-2022-39320,CVE-2022-39319
  - Fix CVE-2022-39318,CVE-2022-39317,CVE-2022-39316
  - Remove dbus, glib and gstreamer requirements


author: Fanjun Kong <fanjunkong@tencent.com> - 2.11.6-1
changelog:
  - Upgrade to upstream version 2.11.6
  - CVE-2024-32041 [Low[ OutOfBound Read in zgfx_decompress_segment
  - CVE-2024-32039 [Moderate] Integer overflow & OutOfBound Write in clear_decompress_residual_data
  - CVE-2024-32040 [Low] integer underflow in nsc_rle_decode
  - CVE-2024-32458 [Low] OutOfBound Read in planar_skip_plane_rle
  - CVE-2024-32459 [Low] OutOfBound Read in ncrush_decompress
  - CVE-2024-32460 [Low] OutOfBound Read in interleaved_decompress


author: kianli <kianli@tencent.com> - 9.0.1-1
changelog:
  - Upgrade to 9.0.1
  - Security fix for CVE-2023-38406
  - Security fix for CVE-2023-38407
  - Security fix for CVE-2023-38802
  - Security fix for CVE-2023-41359
  - Security fix for CVE-2023-41909
  - Security fix for CVE-2023-41360
  - Security fix for CVE-2023-41361
  - Security fix for CVE-2023-41358
  - Security fix for CVE-2023-46752
  - Security fix for CVE-2023-46753


author: xiaoyunzhao <xiaoyunzhao@tencent.com> - 10.0.3-2
changelog:
  - [Type] security
  - [Desc] Fix CVE-2025-61099 CVE-2025-61100  CVE-2025-61101 CVE-2025-61102 CVE-2025-61103 CVE-2025-61104 CVE-2025-61105 CVE-2025-61106 CVE-2025-61107


author: Chunsheng Luo <luffyluo@tencent.com> - 13.2-9
changelog:
  - elf: Return error on unsorted symbol table if not allowed [CVE-2025-11414]
  - PR 33452 SEGV in bfd_elf_gc_record_vtentry [CVE-2025-11412]
  - elf: Disallow the empty global symbol name [CVE-2025-11413]
  - x86: Keep _GLOBAL_OFFSET_TABLE_ for .eh_frame [CVE-2025-11494]


author: rockerzhu <rockerzhu@tencent.com> - 12.1-6
changelog:
  - Add sub-package of minimal to provides /usr/bin/gdb-add-index(needed by rpm-build) and
    gdb.minimal(needed by /usr/bin/gdb-add-index)
  - Rebuilt with boost 1.82.0.


author: Tracker Robot <trackbot@opencloudos.tech> - 2.42.10-7
changelog:
  - Apply patches from rpm-tracker
  - [Bug Fix] 818963f1c34a05f7a072e121182403853488c99f.patch: Fix a memory leak


author: Shuo Wang <abushwang@tencent.com> - 10.02.1-5
changelog:
  - fix CVE-2024-29509 CVE-2024-29506 CVE-2024-29507
  - fix CVE-2024-29508 CVE-2024-29511
  - fix buffer overflows, partial SAFER bypass, pointer leak (Bug 707510)


author: Shuo Wang <abushwang@tencent.com> - 10.02.1-8
changelog:
  - fix CVE-2024-46951, CVE-2024-46952, CVE-2024-46953
  - fix CVE-2024-46954, CVE-2024-46955, CVE-2024-46956
  - PS interpreter - check the type of the Pattern Implementation (Bug #707991)
  - Bug #708001 "Buffer overflow in PDF XRef stream"
  - Bug 707793: Check for overflow validating format string
  - Bug 707788: Fix decode_utf8 to forbid overlong encodings.
  - Bug #707990 "Out of bounds read when reading color in "Indexed" color space"
  - PostScript interpreter - fix buffer length check Bug 707895


author: Shuo Wang <abushwang@tencent.com> - 10.02.1-9
changelog:
  - fix CVE-2025-2783{0-6}
  - Bug 708241: Fix potential Buffer overflow with DollarBlend
  - Bug #708132 "Text buffer overflow with long characters"
  - Bug 708133: Avoid integer overflow leading to buffer overflow
  - Bug 708259: Check TTF name size before copying to buffer.
  - PDF interpreter - Guard against unsigned int overflow
  - Bug 708131: Fix confusion between bytes and shorts
  - Bug 708192: Fix potential print buffer overflow


author: Shuo Wang <abushwang@tencent.com> - 10.02.1-12
changelog:
  - fix CVE-2025-59798 CVE-2025-59799 CVE-2025-59800
  - pdfwrite - avoid buffer overrun
  - pdfwrite - bounds check some strings
  - PDF OCR 8 bit device - avoid overflow


author: Shuo Wang <abushwang@tencent.com> - 3.0.11-5
changelog:
  - Build with --no-warn-rwx-segment to fix build error in make apps
  - and we don't wind up with segment maps in the final bianries anyway


author: jackeyji <jackeyji@tencent.com> - 1.24.2-1
changelog:
  - [Type] security
  - [DESC] upgrade to 1.24.2 to fix CVE-2024-45341 CVE-2024-45336 and CVE-2025-22865


author: hudson zhu <hudsonzhu@tencent.com> - 1.24.4-4
changelog:
  - [Type] bugfix
  - [DESC] os/exec: fix incorrect expansion of "", "." and ".." in LookPath [CVE-2025-47906]


author: hudson zhu <hudsonzhu@tencent.com> - 1.24.4-7
changelog:
  - [Type] security
  - [DESC] Fix [CVE-2025-58187], [CVE-2025-58183], [CVE-2025-58186], [CVE-2025-58189], [CVE-2025-61725], [CVE-2025-58185] and [CVE-2025-61723]


author: zhaoxiaolin <zhaoxiaolin@loongson.cn> - 1.24.11-1
changelog:
  - [Type] sync
  - [DESC] upgrade to 1.24.11, and new feature support, fix potential bugs, optimize code, add instructions, etc. on loongarch64


author: hudson zhu <hudsonzhu@tencent.com> - 1.24.11-2
changelog:
  - [Type] security
  - [DESC] Fix [CVE-2025-68119], [CVE-2025-61731], [CVE-2025-61730], [CVE-2025-61728], [CVE-2025-61726]


author: jackeyji <jackeyji@tencent.com> - 1.21.13-1
changelog:
  - [Type] security
  - [DESC] upgrade to 1.21.13 to fix CVE-2024-24790 CVE-2024-34156 CVE-2024-24789 CVE-2024-24791 CVE-2024-34158 CVE-2024-34155


author: zhaoxiaolin <zhaoxiaolin@loongson.cn> - 1.24.0-1
changelog:
  - [Type] other
  - [DESC] upgrade to 1.24.0 for golang 1.22 is EOS, and add new feature support, optimize code, add instructions, etc. on loongarch64


author: Chunsheng Luo <luffyluo@tencent.com> - 10.2.6-7
changelog:
  - Fix CVE-2024-47875: dump dompurify to 2.5.0
  - Fix CVE-2025-30204 CVE-2024-51744: bump jwt to v4.5.2
  - Fix CVE-2024-6104: go-retryablehttp Redacted URL in logs/errors


author: Chunsheng Luo <luffyluo@tencent.com> - 10.2.6-8
changelog:
  - Fix Grafana Alerting: incorrect permission on POST external rule groups endpoint [CVE-2024-8118] 
  - Fix Grafana plugin SDK Information Leakage [CVE-2024-8986]
  - Fix Grafana Alerting VictorOps integration could be exposed to users with Viewer permission [CVE-2024-11741]
  - Fix Grafana Authorization bypass in data source proxy API [CVE-2025-3454]
  - Fix golang.org/x/net vulnerable to Cross-site Scripting [CVE-2025-22872]


author: Chunsheng Luo <luffyluo@tencent.com> - 10.2.6-9
changelog:
  - Fix Insecure Temporary File usage in github.com/golang/glog (CVE-2024-45339)
  - Fix net/http, x/net/http2: close connections when receiving too many headers (CVE-2023-45288)
  - Fix Non-linear parsing of case-insensitive content in golang.org/x/net/html (CVE-2024-45338)
  - Fix HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net (CVE-2025-22870)


author: Chunsheng Luo <luffyluo@tencent.com> - 10.2.6-11
changelog:
  - Fix angularjs CVEs: Disable angular_support by default
  - CVE-2023-26117, CVE-2022-25869, CVE-2024-8372, CVE-2024-8373, CVE-2025-0716


author: Chunsheng Luo <luffyluo@tencent.com> - 10.2.6-12
changelog:
  - Check SignedInUser OrgID in RevokeInvite (CVE-2024-10452)
  - Dashboards: Prevent title longer than 5 000 characters (CVE-2025-1088)
  - check user is admin when deleting from org (CVE-2025-3580)
  - declare dingding url as secret (CVE-2025-3415)


author: Chunsheng Luo <luffyluo@tencent.com> - 10.2.6-13
changelog:
  - bump brace expansion to v1.1.12 v2.0.2 (CVE-2025-5889)
  - bump axios to 1.8.2 (CVE-2025-27152)
  - bump prismjs to 1.30.0 (CVE-2024-53382)


author: Yu Zhang <yugozhang@tencent.com> - 10.2.6-15
changelog:
  - bump axios to 1.12.0 (CVE-2025-58754)
  - The golang version issue has been fixed. Recompile the net/http package in grafana (CVE-2025-4673)


author: Zhang Yu <yugozhang@tencent.com> - 10.2.6-18
changelog:
  - [type] security
  - [desc] rebuilt with golang 1.24.4-7 to fix CVE-2025-61723, CVE-2025-61725, CVE-2025-58189, CVE-2025-58183, CVE-2025-58187, CVE-2025-58186 and CVE-2025-61724


author: Zhang Yu <yugozhang@tencent.com> - 10.2.6-19
changelog:
  - [type] security
  - [desc] bump storybook to 7.6.21 (CVE-2025-68429), bump js-yaml to 4.1.1 (CVE-2025-64718), and add `fix-wire-go1.24-compatibility.patch` to resolve the incompatibility issue between Go 1.24.4 and Wire v0.5.0.


author: Zhang Yu <yugozhang@tencent.com> - 10.2.6-21
changelog:
  - [type] security
  - [desc] bump form-data：2.x.x to 2.5.4, 3.x.x to 3.0.4, 4.x.x to 4.0.4 (CVE-2025-7783).


author: Zhang Yu <yugozhang@tencent.com> - 10.2.6-23
changelog:
  - [type] security
  - [desc] bump lodash and lodash-es to 4.17.23 to fix CVE-2025-13465, and rebuild to fix CVE-2025-61728.


author: Feng Weiyao <wynnfeng@tencent.com> - 5.2.2-1
changelog:
  - upgrade to 5.2.2 and fix CVE-2023-39325 and CVE-2023-44487, CVE-2023-45288, CVE-2022-41717,CVE-2025-22870


author: Shuo Wang <abushwang@tencent.com> - 9.0.0-2
changelog:
  - backport patch to fix CVE-2023-46045:
  - gvc: detect plugin installation failure and display an error


author: Wang Guodong <gordonwwang@tencent.com> - 1.22.5-7
changelog:
  - fix CVE-2024-47542, CVE-2024-47600, CVE-2024-47538, CVE-2024-47541, CVE-2024-47607, 
    CVE-2024-47615, CVE-2024-47835


author: Wang Guodong <gordonwwang@tencent.com> - 1.22.5-10
changelog:
  - fix CVE-2024-47606, CVE-2024-47599, CVE-2024-47613, CVE-2024-47778, CVE-2024-47777, 
    CVE-2024-47776, CVE-2024-47775, CVE-2024-47774, CVE-2024-47601, CVE-2024-47602, 
    CVE-2024-47603, CVE-2024-47834, CVE-2024-47540
    CVE-2024-47598, CVE-2024-47597, CVE-2024-47596, CVE-2024-47546, CVE-2024-47545,
    CVE-2024-47544, CVE-2024-47543, CVE-2024-47539, CVE-2024-47537


author: wynnfeng <wynnfeng@tencent.com> - 2.4.57-8
changelog:
  - [type] security
  - [desc] fix CVE-2024-38473, 2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573


author: Rebuild Robot <rebot@opencloudos.org> - 2.4.64-1
changelog:
  - [Type] security
  - [DESC] upgrade to 2.4.64 and fix CVE-2025-53020, CVE-2024-43204, CVE-2024-47252, CVE-2024-42516, CVE-2025-23048, CVE-2025-49630, CVE-2025-49812


author: wynnfeng <wynnfeng@tencent.com> - 2.4.66-1
changelog:
  - [Type] security
  - [DESC] upgrade to 2.4.66 and fix CVE-2025-55753, CVE-2025-58098, CVE-2025-59775, CVE-2025-65082, CVE-2025-66200, CVE-2025-54090


author: Zhao Zhen <jeremiazhao@tencent.com> - 11.0.22-1
changelog:
  - updated to upstream 11.0.22
  - fixed CVE-2024-20918 CVE-2024-20952 CVE-2024-20926 CVE-2024-20919 CVE-2024-20921 
  -       CVE-2024-20945


author: Zhao Zhen <jeremiazhao@tencent.com> - 11.0.23-1
changelog:
  - updated to upstream 11.0.23
  - fixed CVE-2024-21094 CVE-2024-21085 CVE-2024-21011 CVE-2024-21068 CVE-2024-21012


author: Zhao Zhen <jeremiazhao@tencent.com> - 11.0.24-1
changelog:
  - Updated to upstream version 11.0.24
  - fixed CVE-2024-21147 CVE-2024-21145 CVE-2024-21140
  -       CVE-2024-21131 CVE-2024-21138


author: Zhao Zhen <jeremiazhao@tencent.com> - 11.0.25-1
changelog:
  - Updated to upstream version 11.0.25
  - fixed CVE-2024-21235 CVE-2024-21208 CVE-2024-21210 CVE-2024-21217


author: Zhao Zhen <jeremiazhao@tencent.com> - 11.0.28-1
changelog:
  - Updated to upstream version 11.0.28
  - Fixed CVE-2025-50059 CVE-2025-30749 CVE-2025-50106 CVE-2025-30761 CVE-2025-30754


author: Zhao Zhen <jeremiazhao@tencent.com> - 11.0.26-1
changelog:
  - upgrade to upstream version 11.0.26
  - fixed CVE-2024-21094 CVE-2024-21085 CVE-2024-21011 CVE-2024-21068 CVE-2024-21012
  - CVE-2024-21147 CVE-2024-21145 CVE-2024-21140 CVE-2024-21131 CVE-2024-21138
  - CVE-2024-21235 CVE-2024-21208 CVE-2024-21210 CVE-2024-21217 CVE-2025-21502


author: Zhao Zhen <jeremiazhao@tencent.com> - 17.0.10-1
changelog:
  - updated to upstream 17.0.10
  - fixed CVE-2024-20932 CVE-2024-20918 CVE-2024-20952 CVE-2024-20919 CVE-2024-20921
  -       CVE-2024-20945


author: Zhao Zhen <jeremiazhao@tencent.com> - 17.0.13-1
changelog:
  - Updated to upstream version 17.0.13
  - fixed CVE-2024-21235 CVE-2024-21208 CVE-2024-21210 CVE-2024-21217


author: Zhao Zhen <jeremiazhao@tencent.com> - 17.0.16-1
changelog:
  - Updated to upstream version 17.0.16
  - Fixed CVE-2025-50059 CVE-2025-30749 CVE-2025-50106 CVE-2025-30754


author: Zhao Zhen <jeremiazhao@tencent.com> - 8.0.17-1
changelog:
  - updated to upstream 8.0.17
  - fixed CVE-2024-20918 CVE-2024-20952 CVE-2024-20926 CVE-2024-20919 CVE-2024-20921
  -       CVE-2024-20945


author: Zhao Zhen <jeremiazhao@tencent.com> - 8.0.19-1
changelog:
  - Updated to upstream version 8.0.19
  - fixed CVE-2024-21147 CVE-2024-21145 CVE-2024-21140 CVE-2024-21144
  -       CVE-2024-21131 CVE-2024-21138


author: Zhao Zhen <jeremiazhao@tencent.com> - 8.0.20-1
changelog:
  - Updated to upstream version 8.0.20
  - Fixed CVE-2024-21235 CVE-2024-21208 CVE-2024-21210 CVE-2024-21217
  - Because of jdk8281098-pr3836-pass_compiler_flags_to_adlc.patch has been
  - merged by upstream, so we delete it, see
  - https://github.com/openjdk/jdk8u/commit/4106121e0ae42d644e45c6eab9037874110ed670


author: Zhao Zhen <jeremiazhao@tencent.com> - 8.0.23-1
changelog:
  - Updated to upstream version 8.0.23
  - Fixed CVE-2025-50059 CVE-2025-30749 CVE-2025-50106 CVE-2025-30761 CVE-2025-30754


author: Zhao Zhen <jeremiazhao@tencent.com> - 8.0.21-1
changelog:
  - [Type] need_sync
  - [DESC] fixed CVE-2025-21502 CVE-2024-21235 CVE-2024-21208 CVE-2024-21210 CVE-2024-21217
  - CVE-2024-21147 CVE-2024-21145 CVE-2024-21140 CVE-2024-21144 CVE-2024-21131 CVE-2024-21138
  - CVE-2024-21094 CVE-2024-21085 CVE-2024-21011 CVE-2024-21068


author: Tracker Robot <trackbot@opencloudos.tech> - 2.3.1-3
changelog:
  - Apply patches from rpm-tracker
  - [] e78513fe0ce5d83c226ea2c0bd222f375c2438e7.patch: vrrp: Handle empty ipset names with vrrp_ipsets keyword


author: Xin Cheng <denisecheng@tencent.com> - 2.74.3-8
changelog:
  - fix CVE-2025-32050, CVE-2025-32052, CVE-2025-32053, CVE-2025-32906, CVE-2025-32911, CVE-2025-32913, CVE-2025-32907, CVE-2025-46420, CVE-2025-46421


author: Xin Cheng <denisecheng@tencent.com> - 3.4.2-5
changelog:
  - fix CVE-2025-2784, CVE-2025-32050 CVE-2025-32052, CVE-2025-32053, CVE-2025-32908, CVE-2025-32911, CVE-2025-32912
  - CVE-2025-32913, CVE-2025-32914, CVE-2025-46420, CVE-2025-46421


author: Feng Weiyao <wynnfeng@tencent.com> - 1.2.20-7
changelog:
  - [Type] security
  - [Desc] fix CVE-2021-33645,CVE-2021-33646,CVE-2021-33643,CVE-2021-33644,CVE-2013-4420,CVE-2021-33640


author: hanliyang <hanliyang@hygon.cn> - 9.10.0-2
changelog:
  - [Type] other
  - [DESC] some functionalities change about Hygon confidential VMs
    - Fix logic error and memleak about Hygon Reuse ASID
    - Support provide blobs for secret injection for Hygon Confidential VMs


author: Jiaxin Yang <jiaxinyyang@tencent.com> - 1.13.1-1
changelog:
  - Fix bug with smaller width bigger size, resolve CVE-2023-44488
  - VP8: disallow thread count changes, resolve CVE-2023-5217


author: xiaoyunzhao <xiaoyunzhao@opencloudos.tech> - 2.1.148-1
changelog:
  - [Type] need_sync
  - [DESC] upgrade to 2.1.148: fix CVE-2024-55553 requires upgrading frr, 
           frr-10.2.1 requires libyang version higher than 2.1.128.


author: hudsonzhu <hudsonzhu@tencent.com> - 28.4.0-1
changelog:
  - [Type] bugfix
  - [DESC] Upgrade to version 28.4.0 for fixing the bug of duplicate PUT request during push


author: Zhao Zhen <jeremiazhao@tencent.com> - 128.8.0-1
changelog:
  - updated to upstream 128.8.0 and fixed CVE-2021-32810 CVE-2022-23639 CVE-2023-26964
  - CVE-2021-32715 CVE-2022-24713 CVE-2021-25900 CVE-2021-45710 CVE-2020-35875 CVE-2023-43669


author: Zhao Zhen <jeremiazhao@tencent.com> - 128.10.0-1
changelog:
  - updated to upstream 128.10.0
  - fixed CVE-2025-4091 CVE-2025-4087 CVE-2025-4093 CVE-2025-4083 CVE-2025-2817


author: Zhao Zhen <jeremiazhao@tencent.com> - 128.11.0-1
changelog:
  - updated to upstream 128.11.0
  - fiexed CVE-2025-5263 CVE-2025-5264 CVE-2025-5266 CVE-2025-5267 CVE-2025-5268


author: Zhao Zhen <jeremiazhao@tencent.com> - 128.13.0-1
changelog:
  - updated to upstream 128.13.0
  - fiexed CVE-2025-8034 CVE-2025-8030 CVE-2025-8031 CVE-2025-8035
  - CVE-2025-8032 CVE-2025-8027 CVE-2025-8033 CVE-2025-8029 CVE-2025-8028


author: Wang Guodong <gordonwwang@tencent.com> - 8.0.37-1
changelog:
  - Upgrade to 8.0.37
  - fix CVE-2024-20960, CVE-2024-20961, CVE-2024-20962, CVE-2024-20963, CVE-2024-20964, 
    CVE-2024-20965, CVE-2024-20966, CVE-2024-20967, CVE-2024-20969, CVE-2024-20970,
    CVE-2024-20971, CVE-2024-20972, CVE-2024-20973, CVE-2024-20974, CVE-2024-20975,
    CVE-2024-20976, CVE-2024-20977, CVE-2024-20978, CVE-2024-20981, CVE-2024-20982


author: Wang Guodong <gordonwwang@tencent.com> - 8.0.39-1
changelog:
  - Upgrade to 8.0.39
  - fix CVE-2024-20996, CVE-2024-21125, CVE-2024-21129, CVE-2024-21130, CVE-2024-21134,
    CVE-2024-21134, CVE-2024-21142, CVE-2024-21162, CVE-2024-21163, CVE-2024-21165, 
    CVE-2024-21171, CVE-2024-21173, CVE-2024-21177, CVE-2024-21179, CVE-2024-21185


author: Wang Guodong <gordonwwang@tencent.com> - 8.0.40-1
changelog:
  - Upgrade to 8.0.40
  - fix CVE-2024-21197, CVE-2024-21212, CVE-2024-21238, CVE-2024-21196, CVE-2024-21239,
    CVE-2024-21194, CVE-2024-21237, CVE-2024-21213, CVE-2024-21198, CVE-2024-21241,
    CVE-2024-21207, CVE-2024-21193, CVE-2024-21218, CVE-2024-21199, CVE-2024-21219,
    CVE-2024-21247, CVE-2024-21230, CVE-2024-21201, CVE-2024-21231, CVE-2024-21203,
    CVE-2024-21236


author: Wang Guodong <gordonwwang@tencent.com> - 8.0.41-1
changelog:
  - Upgrade to 8.0.41
  - fix CVE-2025-21503, CVE-2025-21501, CVE-2025-21497, CVE-2025-21491, CVE-2025-21490,
    CVE-2025-21531, CVE-2025-21529, CVE-2025-21523, CVE-2025-21522, CVE-2025-21519,
    CVE-2025-21518, CVE-2025-21500, CVE-2025-21505, CVE-2025-21555, CVE-2025-21559,
    CVE-2025-21543, CVE-2025-21540, CVE-2025-21546, CVE-2025-21520


author: Wang Guodong <gordonwwang@tencent.com> - 8.0.42-1
changelog:
  - Upgrade to 8.0.42
  - fix CVE-2025-30682, CVE-2025-21585, CVE-2025-21584, CVE-2025-21579, CVE-2025-21577,
    CVE-2025-30685, CVE-2025-21580, CVE-2025-30683, CVE-2025-21581, CVE-2025-30681,
    CVE-2025-21575, CVE-2025-21574, CVE-2025-30684, CVE-2025-30704, CVE-2025-30695,
    CVE-2025-30699, CVE-2025-30703, CVE-2025-30696, CVE-2025-30693, CVE-2025-30722,
    CVE-2025-30689, CVE-2025-30721, CVE-2025-30688, CVE-2025-30715, CVE-2025-30687,
    CVE-2025-21588, CVE-2025-30705


author: Wang Guodong <gordonwwang@tencent.com> - 8.0.43-1
changelog:
  - Upgrade to 8.0.43
  - fix CVE-2025-50087, CVE-2025-50092, CVE-2025-50101, CVE-2025-50083, CVE-2025-50104,
    CVE-2025-53023, CVE-2025-50077, CVE-2025-50078, CVE-2025-50086, CVE-2025-50085,
    CVE-2025-50084, CVE-2025-50094, CVE-2025-50082, CVE-2025-50093, CVE-2025-50091,
    CVE-2025-50098, CVE-2025-50097, CVE-2025-50080, CVE-2025-50102, CVE-2025-50096,
    CVE-2025-50100, CVE-2025-50099, CVE-2025-50079, CVE-2025-50068, CVE-2025-50081


author: Wang Guodong <gordonwwang@tencent.com> - 8.0.45-1
changelog:
  - Upgrade to 8.0.45
  - fix CVE-2026-21936, CVE-2026-21937, CVE-2026-21941, CVE-2026-21948, CVE-2026-21964, 
    CVE-2026-21968


author: Pengda Dou <doupengda@loongson.cn> - 1.35.5-9
changelog:
  - [Type] other
  - [DESC] enable bootstrap will result in missing functionality provided by the packages


author: ze-you-liu <zeyouliu@tencent.com> - 5.9.3-8
changelog:
  - [Type] security
  - [DESC] Fix CVE-2025-68615 vulnerability: snmptrapd: Fix out-of-bounds trapOid[] accesses


author: jackeyji <jackeyji@tencent.com> - 1.26.2-1
changelog:
  - [Type] security
  - [DESC] upgrade to 1.26.2 to fix CVE-2024-31079 CVE-2024-32760 CVE-2024-34161 and CVE-2024-35200


author: Rebuild Robot <rebot@opencloudos.org> - 2.2.0-6
changelog:
  - [Type] bugfix
  - [DESC] Rebuilt for rust-toolset
  - not use cargo_build, because RUSTFLAGS will be overwritten


author: Zhao Zhen <jeremiazhao@tencent.com> - 18.18.2-1
changelog:
  - updated to upstream 18.18.2
  - switched to using original source tarball
  - fixed CVE-2023-45143 CVE-2023-39332 CVE-2023-39331 CVE-2023-38552 CVE-2023-32559 
  -       CVE-2023-32006 CVE-2023-32002 CVE-2023-30590 CVE-2023-30588 CVE-2023-30581


author: Logan Li <loganlli@tencent.com> - 2.0.0-1
changelog:
  - Major version upgrade with Go rewrite
  - Add MCP (Model Context Protocol) support
  - Enhanced AI capabilities and user experience


author: Liangliang Zhai <zhailiangliang@loongson.cn> - 2.7.2-6
changelog:
  - [Type] other
  - [DESC] To solve openwsman-winrs installation dependency on rubygem-openwsman,
           enable ruby for loongarch64 to compile and generate rubygem-openwsman


author: doriscchao <doriscchao@tencent.com> - 2.7.6-1
changelog:
  - initial build, base version 2.7.6, update to upstream git commit 20200514 with gnulib 
    version 20200513 through patch0001.


author: Chunsheng Luo <luffyluo@tencent.com> - 6.2.2-5
changelog:
  - Fix CVE-2024-45769 pcp: pmcd heap corruption through metric pmstore operations
  - Fix CVE-2024-45770 pcp: pmpost symlink attack allows escalating pcp to root user


author: Xiaojie Chen <jackxjchen@tencent.com> - 3.02-1
changelog:
  - Upgrade to upstream version 3.02
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.36-1
changelog:
  - Upgrade to upstream version 2.36
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.143-1
changelog:
  - Upgrade to upstream version 2.143
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.206-1
changelog:
  - Upgrade to upstream version 2.206
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.16-1
changelog:
  - Upgrade to upstream version 1.16
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 6.04-1
changelog:
  - Upgrade to upstream version 6.04
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 3.19-1
changelog:
  - Upgrade to upstream version 3.19
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.22-1
changelog:
  - Upgrade to upstream version 2.22
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 7.70-1
changelog:
  - Upgrade to upstream version 7.70
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.75-1
changelog:
  - Upgrade to upstream version 1.75
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.54-1
changelog:
  - Upgrade to upstream version 2.54
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 3.81-1
changelog:
  - Upgrade to upstream version 3.81
  - Remove perl-libs which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 6.06-1
changelog:
  - Upgrade to upstream version 6.06
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 6.44-1
changelog:
  - Upgrade to upstream version 6.44
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15
  - Remove conditional macro because perl(Clone) is no longger an optional dependency


author: Xiaojie Chen <jackxjchen@tencent.com> - 0.088-1
changelog:
  - Upgrade to upstream version 0.088
  - Remove perl-libs which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 0.42-1
changelog:
  - Upgrade to upstream version 0.42
  - Remove perl-libs which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.083-1
changelog:
  - Upgrade to upstream version 2.074
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 4.10-1
changelog:
  - Upgrade to upstream version 4.10
  - Remove perl-libs which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 4.16-1
changelog:
  - Upgrade to upstream version 4.16
  - Remove perl-libs which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.9998.39-1
changelog:
  - Upgrade to upstream version 1.9998.39
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2:0.42.34-1
changelog:
  - Upgrade to upstream version 0.42.34
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 5.20230720-1
changelog:
  - Upgrade to upstream version 5.20230720
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.21-1
changelog:
  - Upgrade to upstream version 1.21
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.000038-1
changelog:
  - Upgrade to upstream version 1.000038
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.39-1
changelog:
  - Upgrade to upstream version 1.39
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.66-1
changelog:
  - Upgrade to upstream version 1.66
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 3.45-1
changelog:
  - Upgrade to upstream version 3.45
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.037-1
changelog:
  - Upgrade to upstream version 2.037
  - Remove perl-libs which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.204-1
changelog:
  - Upgrade to upstream version 1.204
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 0.017-1
changelog:
  - Upgrade to upstream version 0.017
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 0.002010-1
changelog:
  - Upgrade to upstream version 0.002010
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.302195-1
changelog:
  - Upgrade to upstream version 1.302195
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.35-1
changelog:
  - Upgrade to upstream version 1.35
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 5.19-1
changelog:
  - Upgrade to upstream version 5.19
  - Remove perl-libs which will be generated by perl-generators >= 1.15


author: cunshunxia <cunshunxia@tencent.com> - 1.30-5
changelog:
  - The build config of git has changed, so perl-Git pull perl-YAML
  - in the AppStream.
  - see https://gitee.com/OpenCloudOS/rpm_info/pulls/297.


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.15-1
changelog:
  - Upgrade to upstream version 1.15
  - Add file perlcompat.attr which generates replacement for versioned


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.33-1
changelog:
  - Upgrade to upstream version 1.33
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 3.15-1
changelog:
  - Upgrade to upstream version 3.15
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 6.72-1
changelog:
  - Upgrade to upstream version 6.72
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15
  - Add buildrequires perl(Module::Load) and perl(HTTP::CookieJar::LWP)
  - Add requires perl(HTTP::CookieJar::LWP)


author: Xiaojie Chen <jackxjchen@tencent.com> - 0.241-1
changelog:
  - Upgrade to upstream version 0.241
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 5.01-1
changelog:
  - Upgrade to upstream version 5.01
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Shuo Wang <abushwang@tencent.com> - 23.08.0-3
changelog:
  - fix CVE-2024-6239 and backport its pre-patch
  - pdfinfo: Fix crash in broken documents when using -dests


author: Shuo Wang <abushwang@tencent.com> - 23.08.0-8
changelog:
  - fix CVE-2025-32364 CVE-2025-32365
  - PSStack::roll: Protect against doing int = -INT_MIN
  - Move isOk check to inside JBIG2Bitmap::combine


author: Upgrade Robot <upbot@opencloudos.tech> - 15.9-1
changelog:
  - Upgrade to version 15.9
  - CVEs fixed: CVE-2024-10976, CVE-2024-10977, CVE-2024-10978, CVE-2024-10979


author: ze-you-liu <zeyouliu@tencent.com> - 3.9.5-5
changelog:
  - [Type] security
  - [DESC] Fix CVE-2025-69224, CVE-2025-69225, CVE-2025-69226, CVE-2025-69227, CVE-2025-69228 vulnerabilities


author: cunshunxia <cunshunxia@tencent.com> - 10.0.0-2
changelog:
  - remove runtime dependence pyOpenSSL which is only used when test.
  - remove six which is not needed anymore.


author: Jiaxin Yang <jiaxinyyang@tencent.com> - 4.9.3-8
changelog:
  - [Type] security
  - [DESC] Make Unicode recovery test work with libxml2 2.12 (GH-383)
  - [DESC] Rebuilt for libxml2


author: maxonxie <maxonxie@tencent.com> - 4.9.0-1
changelog:
  - Update to version 4.9.0
  - Fix CVE-2024-48945 (security vulnerability in c-ares)
  - Use bundled c-ares instead of system library for compatibility
  - Remove c-ares-devel build dependency
  - Fix SO file permission handling (_cares.abi3.so)
  - Update source URL to PyPI packages location


author: jackeyji <jackeyji@tencent.com> - 5.1.1-2
changelog:
  - [Type] other
  - [DESC] remove testcases because redis-server failed with port conflict when CI machine run with redis


author: cunshunxia <cunshunxia@tencent.com> - 0.41.2-4
changelog:
  - [Type] security
  - [DESC] Fix CVE-2026-24049 vulnerability: Fixed security issue around wheel unpack where a maliciously crafted wheel could cause the permissions of a file outside the unpack tree to be altered


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.9.2-1
changelog:
  - Upgrade to upstream version 1.9.2 
  - Disable some tests until upstream adapts to changes in python 3.11


author: Tracker Robot <trackbot@opencloudos.tech> - 1.1.2-5
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] c43b17f1bc2b5c393b85259d9bd16635ed3f32c6.patch: QATAPP-31145: Fix null pointer dereference
  - [Bug Fix] c116a7ef6c20f0871b9672d9ed930a252b40ba18.patch: QATAPP-31146: Fix potential double free
  - [Performance] 49bcf697305ee71f954e2f08883fa18bcc689f5e.patch: QATAPP-29019: Improve sw fallback performance


author: hanliyang <hanliyang@hygon.cn> - 8.2.2-23
changelog:
  - [Type] other
  - [DESC] Support 3 functionalities:
    - Support kernel boot verification for Hygon CSV3 VM
    - Support inject secret for Hygon CSV3 VM
    - Support auto load and inject secret for Hygon CSV/CSV2/CSV3 VM


author: hanliyang <hanliyang@hygon.cn> - 8.2.2-32
changelog:
  - [Type] other
  - [DESC] Add a CSV3 ioctl command to request Linux KVM update CSV3 VM's page attribute info


author: hanliyang <hanliyang@hygon.cn> - 8.2.2-33
changelog:
  - [Type] other
  - [DESC] sync header file from upstream and Enable the compilation of loongarch qemu on other architectures


author: Chunsheng Luo <luffyluo@tencent.com> - 8.2.2-34.1
changelog:
  - io: fix crash in VNC websock server when client quits early [CVE-2025-11234]
  - net: pad packets to minimum length in qemu_receive_packet() [CVE-2025-12464]


author: Xiaojie Chen <jackxjchen@tencent.com> - 7.0.14-1
changelog:
  - Upgrade to upstream version 7.0.14
  - Fix CVE-2023-41053 and CVE-2023-45145
  - Set jemalloc page size


author: Doris Chao <doriscchao@tencent.com> - 2024.4-1
changelog:
  - [Type] security
  - [DESC] Upgrade to version 2024.4 to fix CVE-2023-26964(h2). 
  - Backport https://github.com/coreos/rpm-ostree/security/advisories/GHSA-2m76-cwhg-7wv6, CVE-2024-2905.
  - Backport https://github.com/coreos/rpm-ostree/commit/fe586621e5014d14f92b913338171a02ed29e6cc


author: Tracker Robot <trackbot@opencloudos.tech> - 8.2312.0-4
changelog:
  - Apply patches from rpm-tracker
  - [Bug Fix] ec3ddc61c5fffd5d3762520338ea0e8d813c5b4b.patch: Merge pull request #5454 from apple-ouyang/patch-1
  - [Bug Fix] 8d7392d391837bde0b5783428eb2c1dfdf19c1bc.patch: Merge pull request #5458 from rsyslog/nonexistentfoo


author: Wang Guodong <gordonwwang@tencent.com> - 1.84.1-1
changelog:
  - Upgrade to 1.84.1
  - revert rustlibdir library
  - Fix errors for overlapping impls in incremental rebuilds


author: Xiaojie Chen <jackxjchen@tencent.com> - 6.5-1
changelog:
  - Upgrade to upstream version 6.5
  - Fix CVE-2023-46728, CVE-2023-46848 and CVE-2023-46847
  - Fix CVE-2023-46846, CVE-2023-5824 and CVE-2023-46724


author: denisecheng <denisecheng@tencent.com> - 4.9-8
changelog:
  - [Type] enhancement
  - [DESC] Add forward-compatibility RPM Provides for systemtap-sdt-dtrace and dtrace


author: Aurelianliu <aurelianliu@tencent.com> - 4.2.12-1
changelog:
  - hci offers more function, such as monitor system/functions
  - healthcheck offers more function, more plug-in units


author: Fanjun Kong <fanjunkong@tencent.com> - 1.13.1-3
changelog:
  - CVE-2023-5367
  - CVE-2023-5380
  - CVE-2023-6377
  - CVE-2023-6478
  - CVE-2023-6816
  - CVE-2024-0229
  - CVE-2024-21885
  - CVE-2024-21886


author: Liangliang Zhai <zhailiangliang@loongson.cn> - 1.13.1-4
changelog:
  - [Type] other
  - [DESC] fix patching failure:
    Source package has previously fixed the following CVE:
    CVE-2023-5367,CVE-2023-5380,CVE-2023-6478,CVE-2023-6816,CVE-2024-0229,CVE-2024-21885,CVE-2024-21886,CVE-2023-6377.


author: Xinlong Chen <xinlongchen@tencent.com> - 1.13.1-10
changelog:
  - [Type] security
  - [DESC] rebuild for some cves in xorg-x11-server:
  -        CVE-2022-49737 CVE-2025-49175 CVE-2025-49176
  -        CVE-2025-49178 CVE-2025-49179 CVE-2025-49180


author: Doris Chao <doriscchao@tencent.com> - 9.0.82-1
changelog:
  - Update to apache-tomcat-9.0.82 to fix the CVE-2023-45648,CVE-2023-42795,CVE-2023-41080 
    and CVE-2023-28709


author: Doris Chao <doriscchao@tencent.com> - 9.0.86-1
changelog:
  - [Type] security
  - [DESC] Update to apache-tomcat-9.0.86 to fix CVEs,include CVE-2024-23672 and CVE-2024-24549


author: Xin Cheng <denisecheng@tencent.com> - 1.17.1-4
changelog:
  - Fix CVE-2023-50387, DNSSEC verification complexity can be exploited to exhaust CPU resources and stall DNS resolvers.
  - Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust CPU.


author: Zien Huang <ethanehuang@tencent.com> - 1.17.1-7
changelog:
  - [Type] security
  - [DESC] DNS resolvers vulnerable to remote DoS attacks via response amplification (fix CVE-2024-33655)


author: Miaojun Dong <zoedong@tencent.com> - 0.13.0-1
changelog:
  - Bump version to 0.13.0
  - usbredirserver is deprecated in favor of usbredirect
  - usbredirect can be used as a client or server through different parameters


author: Binbin Zhou <zhoubinbin@loongson.cn> - 3.21.0-8
changelog:
  - [Type] bugfix
  - [DESC] Update loongarch64/Linux patch, more instructions need to be supported;
  	 Enable test for loongarch64


author: Zhao Zhen <jeremiazhao@tencent.com> - 2.50.2-1
changelog:
  - [Type] security
  - [DESC] fixed CVE-2025-43392 CVE-2025-43419 CVE-2025-43425 CVE-2025-43443
  -        CVE-2025-43427 CVE-2025-43429 CVE-2025-43430 CVE-2025-43431
  -        CVE-2025-43432 CVE-2025-43434 CVE-2025-43440


author: Miaojun Dong <zoedong@ttencent.com> - 1.4.2-1
changelog:
  - Upgrade version to 1.4.2
  - Rebuild for binutils-2.41-2 to fix BPF bytecode files strip failure
  - Remove Patch for i686 arch


author: Fanjun Kong <fanjunkong@tencent.com> - 21.1.8-3
changelog:
  - Fix CVE:
  - CVE-2023-6478
  - CVE-2023-5367
  - CVE-2023-5380
  - CVE-2023-6816
  - CVE-2024-0229
  - CVE-2024-21885
  - CVE-2024-21886
  - CVE-2024-0408
  - CVE-2024-0409


author: Xinlong Chen <xinlongchen@tencent.com> - 21.1.8-11
changelog:
  - [Type] security
  - [DESC] fix CVEs: CVE-2025-26594 CVE-2025-26595
  -        CVE-2025-26597 CVE-2025-26598 CVE-2025-26599
  -        CVE-2025-26600 CVE-2025-26601 CVE-2025-26596


author: Xinlong Chen <xinlongchen@tencent.com> - 21.1.8-14
changelog:
  - [Type] security
  - [DESC] fix CVEs: CVE-2022-49737 CVE-2025-49175 CVE-2025-49176
  -        CVE-2025-49178 CVE-2025-49179 CVE-2025-49180


author: Zhao Zhen <jeremiazhao@tencent.com> - 23.1.2-3
changelog:
  - fixed CVE-2023-5367.patch CVE-2024-21885.patch CVE-2024-21886.patch CVE-2024-0408.patch
  - CVE-2024-0409.patch CVE-2024-0229.patch CVE-2023-6816.patch CVE-2023-6377.patch
  - CVE-2024-31080.patch CVE-2024-31081.patch


author: Xinlong Chen <xinlongchen@tencent.com> - 23.1.2-8
changelog:
  - [Type] security
  - [DESC] fix CVEs: CVE-2025-49175 CVE-2025-49176 CVE-2025-49177
  -        CVE-2025-49178 CVE-2025-49179 CVE-2025-49180


