# changelog

author: Xin Cheng <denisecheng@tencent.com> - 9.18.18-4
changelog:
  - fix CVE-2023-4408: Parsing large DNS messages may cause excessive CPU load
  - fix CVE-2023-5517: Querying RFC 1918 reverse zones may cause an assertion failure when "nxdomain-redirect" is enabled
  - fix CVE-2023-5679: Enabling both DNS64 and serve-stale may cause an assertion failure during recursive resolution
  - fix CVE-2023-6516: Specific recursive query patterns may lead to an out-of-memory condition
  - fix CVE-2023-50387: KeyTrap - Extreme CPU consumption in DNSSEC validator
  - fix CVE-2023-50868: Preparing an NSEC3 closest encloser proof can exhaust CPU resources


author: Ze Zhang <bbrucezhang@tencent.com> - 3.8.2-4.oc9.1
changelog:
  - Fix error with /usr/lib/rpm/find-lang.sh /builddir/build/BUILDROOT/bison-3.8.2-4.oc9.1.x86_64 not being executed


author: rockerzhu <rockerzhu@tencent.com> - 17.2.5-6
changelog:
  - Rebuilt for boost 1.82.0 and add common-options-objs as a dependency
    of common-msg-objs, rados_snap_set_diff_obj and krbd.
  - Build with bundled boost until boost compatible to fix "'const class boost::core::basic_string_view'
    has no member named 'to_string'".


author: cunshunxia <cunshunxia@tencent.com> - 20220826gitba0e0e4c6a17-4
changelog:
  - build aarch64 subpkg only on arm.

  -* Fri Mar 31 2023 OpenCloudOS Release Engineering <releng@opencloudos.tech> - 20220826gitba0e0e4c6a17-3
  -- Rebuilt for OpenCloudOS Stream 23


author: Zhao Zhen <jeremiazhao@tencent.com> - 4.12.1-1
changelog:
  - updated fence-agents 4.12.1
  - disabled ppc64le temlpy
  - bootstrap aws/gce/compute/kubevirt/aliyun agents
  - disabled azure temply
  - added ecloud agents


author: Doris Chao <doriscchao@tencent.com> - 102.15.1-1
changelog:
  - Update to 102.15.1
  - Update nss, nspr version
  - App pacth from mozilla to fix CVE-2023-23604
  - App pacth from mozilla to fix CVE-2022-46884


author: Doris Chao <doriscchao@tencent.com> - 115.5.0-1
changelog:
  - Update to 115.5.0 to fix CVEs,include CVE-2023-6204,CVE-2023-6205,
  - CVE-2023-6206,CVE-2023-6207,CVE-2023-6208,CVE-2023-6209,CVE-2023-6212


author: Doris Chao <doriscchao@tencent.com> - 115.6.0-1
changelog:
  - Update to 115.6.0 to fix CVEs,include CVE-2023-6856,CVE-2023-6857,
  - CVE-2023-6858,CVE-2023-6859,CVE-2023-6860,CVE-2023-6861,CVE-2023-6862,
  - CVE-2023-6863,CVE-2023-6864,CVE-2023-6865,CVE-2023-687


author: Doris Chao <doriscchao@tencent.com> - 115.7.0-1
changelog:
  - Update to 115.7.0 to fix CVEs,include CVE-2023-6135,CVE-2024-0741,
  - CVE-2024-0742,CVE-2024-0753,CVE-2024-0746,CVE-2024-0747,CVE-2024-0749,
  - CVE-2024-0750,CVE-2024-0751,CVE-2024-0755


author: Doris Chao <doriscchao@tencent.com> - 115.8.0-1
changelog:
  - Update to 115.8.0 to fix CVEs,include CVE-2024-1546,CVE-2024-1547,
  - CVE-2024-1548,CVE-2024-1549,CVE-2024-1550,CVE-2024-1551,CVE-2024-1552,
  - CVE-2024-1553


author: Doris Chao <doriscchao@tencent.com> - 115.9.1-1
changelog:
  - Update to 115.9.1 to fix CVEs,incldue CVE-2024-2612,CVE-2024-2614,
  - CVE-2024-2611,CVE-2024-2610,CVE-2024-2608,CVE-2024-2607,CVE-2024-2616,
  - CVE-2024-2605,CVE-2024-0743,CVE-2024-29944 
  - Build for expat 2.6.2 to fix CVE-2023-52425


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.11.2-1
changelog:
  - Upgrade to upstream version 2.11.2
  - Fix CVE-2023-40589,CVE-2023-40569,CVE-2023-40567,CVE-2023-40188
  - Fix CVE-2023-40186,CVE-2023-40181,CVE-2023-39356,CVE-2023-39354
  - Fix CVE-2023-39353,CVE-2023-39352,CVE-2023-39351,CVE-2023-39350
  - Fix CVE-2022-41877,CVE-2022-39347,CVE-2022-39320,CVE-2022-39319
  - Fix CVE-2022-39318,CVE-2022-39317,CVE-2022-39316
  - Remove dbus, glib and gstreamer requirements


author: kianli <kianli@tencent.com> - 9.0.1-1
changelog:
  - Upgrade to 9.0.1
  - Security fix for CVE-2023-38406
  - Security fix for CVE-2023-38407
  - Security fix for CVE-2023-38802
  - Security fix for CVE-2023-41359
  - Security fix for CVE-2023-41909
  - Security fix for CVE-2023-41360
  - Security fix for CVE-2023-41361
  - Security fix for CVE-2023-41358
  - Security fix for CVE-2023-46752
  - Security fix for CVE-2023-46753


author: rockerzhu <rockerzhu@tencent.com> - 12.1-5
changelog:
  - Add sub-package of headless, avoiding rpm-build to require all gdb, but to require gdb-headless
    and not to require source-highlight.


author: rockerzhu <rockerzhu@tencent.com> - 12.1-6
changelog:
  - Add sub-package of minimal to provides /usr/bin/gdb-add-index(needed by rpm-build) and
    gdb.minimal(needed by /usr/bin/gdb-add-index)
  - Rebuilt with boost 1.82.0.


author: TencentOS Team <tencent_os@tencent.com> - 41.3-6.tl4.1
changelog:
  - Rebrand for TencentOS
  - Force the login screen to use Xorg to fix mouse residue issues on
    some physical machines in gc tl3.4


author: Shuo Wang <abushwang@tencent.com> - 3.0.11-5
changelog:
  - Build with --no-warn-rwx-segment to fix build error in make apps
  - and we don't wind up with segment maps in the final bianries anyway


author: Shuo Wang <abushwang@tencent.com> - 9.0.0-2
changelog:
  - backport patch to fix CVE-2023-46045:
  - gvc: detect plugin installation failure and display an error


author: jiefu <jiefu@tencent.com> - 11.0.15-1
changelog:
  - Update to jdk-11.0.15
  - AppCDS: Store old classfiles in static CDS archive
  - G1: lightweight rs log
  - JDK-8265119: G1: update_remset_before_rebuild mixes liveness in words with liveness in bytes


author: Zhao Zhen <jeremiazhao@tencent.com> - 11.0.15-2
changelog:
  - add subpackage of konajdk for rpm-based OS
  - add alternatives supports for multiversion of jdk
  - add bootstrap supoort for OS
  - let 8/11/17 all-in-one spec files
  - remove epoch
  - add multi arch supports initially
  - add some capability compatibility with openjdk
  - add nss in depends avoiding some bugs
  - simplify macros and Scriptlets


author: seanwxiang <seanwxiang@tencent.com> - 8.0.9-1.1.322
changelog:
  - Update to jdk-8u322
  - Vectorize UTF-8 encode
  - Fix: FreeHeapPhysicalMemory period check use wrong time unit


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-11
changelog:
  - Add conflicts of redhat-rpm-macros < 204 as macros.kmp, kmodtool,
    and rpmsort were moved from the latter to the former.
  - Remove RHEL-specific kABI bits from find-requires.ksyms and macros.kmp.


author: Miro Hrončok <mhroncok@redhat.com> - 1.0-12
changelog:
  - Correct conflicts to redhat-rpm-macros < 205
  - Move Perl scripts back to kernel-rpm-macros to avoid Perl in the default buildroot


author: Jiaxin Yang <jiaxinyyang@tencent.com> - 1.13.1-1
changelog:
  - Fix bug with smaller width bigger size, resolve CVE-2023-44488
  - VP8: disallow thread count changes, resolve CVE-2023-5217


author: Xiaojie Chen <jackxjchen@tencent.com> - 38.2-5
changelog:
  - Modify anaconda iso configuration for opencloudos-stream
  - Modify live iso configuration for opencloudos-stream
  - Create /dev/urandom before packages installation


author: Ze Zhang <bbrucezhang@tencent.com> - 0.32.5-3.oc9.1
changelog:
  - Fix error with /usr/lib/rpm/find-lang.sh /builddir/build/BUILDROOT/neon-0.32.5-3.oc9.1.x86_64 not being executed


author: Zhao Zhen <jeremiazhao@tencent.com> 18.18.2-1
changelog:
  - updated to upstream 18.18.2
  - switched to using original source tarball
  - fixed CVE-2023-45143 CVE-2023-39332 CVE-2023-39331 CVE-2023-38552 CVE-2023-32559 
    CVE-2023-32006 CVE-2023-32002 CVE-2023-30590 CVE-2023-30588 CVE-2023-30581


author: Zhao Zhen <jeremiazhao@tencent.com> - 18.18.2-1
changelog:
  - updated to upstream 18.18.2
  - switched to using original source tarball
  - fixed CVE-2023-45143 CVE-2023-39332 CVE-2023-39331 CVE-2023-38552 CVE-2023-32559 
  -       CVE-2023-32006 CVE-2023-32002 CVE-2023-30590 CVE-2023-30588 CVE-2023-30581


author: Wang Guodong <gordonwwang@tencent.com> - 1.22.0-2
changelog:
  - Set the environment variable(SETUPTOOLS_USE_DISTUTILS) to solve 
    setuptools-bundled distutils' LooseVersion issue.


author: doriscchao <doriscchao@tencent.com> - 2.7.6-1
changelog:
  - initial build, base version 2.7.6, update to upstream git commit 20200514 with gnulib 
    version 20200513 through patch0001.


author: Xiaojie Chen <jackxjchen@tencent.com> - 3.02-1
changelog:
  - Upgrade to upstream version 3.02
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.36-1
changelog:
  - Upgrade to upstream version 2.36
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.143-1
changelog:
  - Upgrade to upstream version 2.143
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.206-1
changelog:
  - Upgrade to upstream version 2.206
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.16-1
changelog:
  - Upgrade to upstream version 1.16
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 6.04-1
changelog:
  - Upgrade to upstream version 6.04
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 3.19-1
changelog:
  - Upgrade to upstream version 3.19
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.22-1
changelog:
  - Upgrade to upstream version 2.22
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 7.70-1
changelog:
  - Upgrade to upstream version 7.70
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.75-1
changelog:
  - Upgrade to upstream version 1.75
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.54-1
changelog:
  - Upgrade to upstream version 2.54
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 3.81-1
changelog:
  - Upgrade to upstream version 3.81
  - Remove perl-libs which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 6.06-1
changelog:
  - Upgrade to upstream version 6.06
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 6.44-1
changelog:
  - Upgrade to upstream version 6.44
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15
  - Remove conditional macro because perl(Clone) is no longger an optional dependency


author: Xiaojie Chen <jackxjchen@tencent.com> - 0.088-1
changelog:
  - Upgrade to upstream version 0.088
  - Remove perl-libs which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 0.42-1
changelog:
  - Upgrade to upstream version 0.42
  - Remove perl-libs which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.083-1
changelog:
  - Upgrade to upstream version 2.074
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 4.10-1
changelog:
  - Upgrade to upstream version 4.10
  - Remove perl-libs which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 4.16-1
changelog:
  - Upgrade to upstream version 4.16
  - Remove perl-libs which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.9998.39-1
changelog:
  - Upgrade to upstream version 1.9998.39
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2:0.42.34-1
changelog:
  - Upgrade to upstream version 0.42.34
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 5.20230720-1
changelog:
  - Upgrade to upstream version 5.20230720
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.21-1
changelog:
  - Upgrade to upstream version 1.21
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.000038-1
changelog:
  - Upgrade to upstream version 1.000038
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.39-1
changelog:
  - Upgrade to upstream version 1.39
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.66-1
changelog:
  - Upgrade to upstream version 1.66
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 3.45-1
changelog:
  - Upgrade to upstream version 3.45
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.037-1
changelog:
  - Upgrade to upstream version 2.037
  - Remove perl-libs which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.204-1
changelog:
  - Upgrade to upstream version 1.204
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 0.017-1
changelog:
  - Upgrade to upstream version 0.017
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 0.002010-1
changelog:
  - Upgrade to upstream version 0.002010
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.302195-1
changelog:
  - Upgrade to upstream version 1.302195
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.35-1
changelog:
  - Upgrade to upstream version 1.35
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 5.19-1
changelog:
  - Upgrade to upstream version 5.19
  - Remove perl-libs which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.15-1
changelog:
  - Upgrade to upstream version 1.15
  - Add file perlcompat.attr which generates replacement for versioned


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.33-1
changelog:
  - Upgrade to upstream version 1.33
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 3.15-1
changelog:
  - Upgrade to upstream version 3.15
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 6.72-1
changelog:
  - Upgrade to upstream version 6.72
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15
  - Add buildrequires perl(Module::Load) and perl(HTTP::CookieJar::LWP)
  - Add requires perl(HTTP::CookieJar::LWP)


author: Xiaojie Chen <jackxjchen@tencent.com> - 0.241-1
changelog:
  - Upgrade to upstream version 0.241
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 5.01-1
changelog:
  - Upgrade to upstream version 5.01
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Wang Guodong <gordonwwang@tencent.com> - 15.4-1
changelog:
  - Upgrade to version 15.4
  - Use sysusers configuration to setup user & group
  - CVEs fixed: CVE-2023-39417 CVE-2023-39418


author: Miaojun Dong <zoedong@tencent.com> - 0.6.2-6
changelog:
  - Disable typeguard check, stack-data is not yet adapted to typeguard v3 and v4
  - Fix the color diffrencent and Update test_pygments_example with pygments-2.16


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.9.2-1
changelog:
  - Upgrade to upstream version 1.9.2 
  - Disable some tests until upstream adapts to changes in python 3.11


author: Xiaojie Chen <jackxjchen@tencent.com> - 7.0.14-1
changelog:
  - Upgrade to upstream version 7.0.14
  - Fix CVE-2023-41053 and CVE-2023-45145
  - Set jemalloc page size


author: Wang Guodong <gordonwwang@tencent.com> - 1.73.0-1
changelog:
  - Upgrade to 1.73.0
  - Add build target for x86_64-unknown-none, x86_64-unknown-uefi
  - Use emmalloc instead of CC0 dlmalloc when bundling wasi-libc


author: Xiaojie Chen <jackxjchen@tencent.com> - 6.5-1
changelog:
  - Upgrade to upstream version 6.5
  - Fix CVE-2023-46728, CVE-2023-46848 and CVE-2023-46847
  - Fix CVE-2023-46846, CVE-2023-5824 and CVE-2023-46724


author: Doris Chao <doriscchao@tencent.com> - 9.0.82-1
changelog:
  - Update to apache-tomcat-9.0.82 to fix the CVE-2023-45648,CVE-2023-42795,CVE-2023-41080 
    and CVE-2023-28709


author: Xin Cheng <denisecheng@tencent.com> - 1.17.1-4
changelog:
  - Fix CVE-2023-50387, DNSSEC verification complexity can be exploited to exhaust CPU resources and stall DNS resolvers.
  - Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust CPU.


author: Miaojun Dong <zoedong@tencent.com> - 0.13.0-1
changelog:
  - Bump version to 0.13.0
  - usbredirserver is deprecated in favor of usbredirect
  - usbredirect can be used as a client or server through different parameters


author: Miaojun Dong <zoedong@ttencent.com> - 1.4.2-1
changelog:
  - Upgrade version to 1.4.2
  - Rebuild for binutils-2.41-2 to fix BPF bytecode files strip failure
  - Remove Patch for i686 arch


