# changelog

author: cunshunxia <cunshunxia@tencent.com> - 1.4.0-4
changelog:
  - add scriptlets for rpm-ostree and user-nsswitch.
  - change default profile to minimal with specified password-auth


author: Xiaojie Chen <jackxjchen@tencent.com> - 5.2-3
changelog:
  - fix crash with unset arrays in arithmetic contexts
  - fix crash in readline when started with an invalid locale specification


author: Kairui Song <kasong@tencent.com> - 6.6.6-2401.0.1
changelog:
  - kabi: freeze kabi for x86_64 and arm64
  - x86/mpparse, kexec: switch apic driver early when x2apic is pre-enabled
  - tracing: workaround UAF caused by memory ordering issue
  - mm/slub.c: sanitize freelist pointer assignment even more
  - mm/slub.c: fix a potential UAF
  - cgroup: use a standalone workqueue for killing css
  - mm/vmscan.c: add cond_resched function call into __shrink_page_cache
  - swap: expose required symbols for some 3rd part modules
  - swapfile: add a helper get_cached_swap_page_of_type
  - mm: memcg: introduce v2's interface to v1
  - psi: only show SOME PSI for non-IRQ in cgroup v1
  - psi: support cgroup v1 psi accounting
  - psi: expose cgroup v1 interface for psi
  - psi: link legacy root to psi_system
  - sched/psi: simplify cgroup psi retrieving
  - arm64: fake a reliable stacktrace for livepath
  - arm64: enable livepatch without stable stacktrace
  - arm64: basic infrastructure for livepatch
  - pagecachelimit: limit the pagecache ratio of totalram
  - blkcg: add buffer IO throttle for cgroup v1
  - cgroupfs: support stat based on cpuacct
  - cgroupfs: fix non inited i_ino when inode created
  - cgroupfs: add files inside sys
  - cgroupfs: support for proc and sys
  - cgroupfs: quota aware support
  - cgroupfs: refactor cgroup resource statistics for reuse
  - memcg: make meminfo optionally recursive and rework
  - memcg: add meminfo and vmstat show
  - cpuset: add switch support for cpuset.stat in container
  - cpuset: fix cpuset.stat process field value exception
  - cpuset: add switch for cpuinfo in container
  - cpuset: add loadavg calc for each container
  - cpuset: add cpuinfo and stat show
  - sysfs: add sysfs attribute to hide disk devices
  - blkcg/diskstats/dm: add support for blkcg diskstats
  - blkcg/diskstats/md: add support for blkcg diskstats
  - blkcg/diskstats: add per blkcg diskstats support
  - ext4: Add an error info during new_inode
  - ext4: fix soft lockup caused by sbi->s_es_lru
  - ceph: add mds request pid info into debugfs
  - ceph: Add new mount option req_resend
  - ceph: re-send osd requests if timeout
  - nvme: add the hotplug info output about drive letter and BDF
  - nbd: add the nbd_ignore_blksize_set support
  - xfs: add kmem_alloc_by_vmalloc and kmem_alloc_large_dump_stack sysctl
  - xfs: set xfs default error level to 5
  - ceph: add sysctl to ignore error epoch barrier
  - ext3: set nobarrier as default
  - block: check whether queue is NULL or not in stats functions
  - net: modify default value of host max_orphan
  - net: namespaceify sysctl_tcp_max_orphans
  - vm: isolate max_map_count by pid namespace
  - cpuacct: get the uptime of container
  - proc: add pid mapping between host and container
  - taskstats: expose taskstats to all netspace
  - tcp: make TCP_RTO_MIN/MAX be tunable
  - tcp: support self define parameter to tune rto of syn/synack packets
  - tcp: introduce sysctl tcp_inherit_buffsize
  - net: ipv6 neigh tunnel bypass
  - net: add sysctl to control page frag
  - net: add sriov debug info
  - net: increase tcp listen hash
  - tcp: add TCP_FULLNAT_REAL setsockopt options for fullnat real ip
  - net: reduce the confliction while multi threads connecting same host
  - bonding: add broadcast_arp param to send arp broadcast
  - netlink: don't modprobe proto audit & selinux
  - tcp: add proc parameter to change init cwnd
  - net: add tcp_no_delay_ack to enable absolute quick ack
  - tcp: add tcp_loss_init_cwnd sysctl to tunnel packet numbers in loss
  - network: default zero bond_devices to support
  - tcp: double the default value of thash_entries
  - tcp: backoff the commit allowing timestamps even if SYN packet has tsval=0
  - net: dev ipv4/v6 stat
  - net: add tcp drop stats
  - ipmi: set kipmid_max_busy_us default to 1
  - sched: adaptive default skew_tick value
  - ipc/msg: increase defaults for shmmall, shmmax, msgmax and msgmnb
  - mm: increase dirty-ratio from 20 to 40
  - tkernel: netfilter: conntrack: add netagent extention slot
  - tkernel: net: add toa support
  - tkernel: mounts: add shield mountpoint in container support
  - tkernel: netatop: add netatop module in kernel/tkernel/
  - tkernel: ttools: add ttools module to support ptrace protect
  - tkernel: initial support and nonpriv_bind
  - sysrq: add ALT+LEFTCTRL to trigger crash dump
  - kabi: add paddings and optimize (part 3)
  - kabi: add paddings (part 2)
  - kabi: add paddings (part 1)
  - kabi: add kabi.h
  - kabi: modules: better vermagic check on module load
  - config: update config for ocks-2401
  - dist: config: update config from ocks-2303
  - dist: config: add default config files
  - dist: fix script checker
  - dist: tools/vm -> tools/mm
  - dist: move libcpupower.so to kernel-libs
  - dist: initial support
  - Linux 6.6.6


author: Bob Relyea <rrelyea@redhat.com> - 2021.2.50-5
changelog:
  - integrate Adam William's /etc/ssl/certs with Debian-compatibility
  - back out blocklist change since p11-kit .24 is not yet available on rawhide


author: Bob Relyea <rrelyea@redhat.com> - 2021.2.52-2
changelog:
  - Update to CKBI 2.52 from NSS 3.72
  -    Adding:
  -     # Certificate "TunTrust Root CA"
  -     # Certificate "HARICA TLS RSA Root CA 2021"
  -     # Certificate "HARICA TLS ECC Root CA 2021"
  -     # Certificate "HARICA Client RSA Root CA 2021"
  -     # Certificate "HARICA Client ECC Root CA 2021"


author: Wang Guodong <gordonwwang@tencent.com> - 1.73.0-1
changelog:
  - Upgrade to 1.73.0
  - Add build target for x86_64-unknown-none, x86_64-unknown-uefi
  - Use emmalloc instead of CC0 dlmalloc when bundling wasi-libc


author: rockerzhu <rockerzhu@tencent.com> - 17.2.5-6
changelog:
  - Rebuilt for boost 1.82.0 and add common-options-objs as a dependency
    of common-msg-objs, rados_snap_set_diff_obj and krbd.
  - Build with bundled boost until boost compatible to fix "'const class boost::core::basic_string_view'
    has no member named 'to_string'".


author: Qian Liang <renaliang@tencent.com> - 12.3.1-1
changelog:
  - updated to tgcc-12.3.1
  - Security updates: fix CVE-2023-4039. merge from https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=75c37e031408262263442f5b4cdb83d3777b6422
  - fix ICE in ipa profile multiple target speculative.


author: kianli <kianli@tencent.com> - 4.18.8-1
changelog:
  - Upgrade to 4.18.8
  - Security fix for CVE-2023-3961
  - Security fix for CVE-2023-4091
  - Security fix for CVE-2023-4154
  - Security fix for CVE-2023-42669
  - Security fix for CVE-2023-42670


author: cunshunxia <cunshunxia@tencent.com> - 20220826gitba0e0e4c6a17-4
changelog:
  - build aarch64 subpkg only on arm.

  -* Fri Mar 31 2023 OpenCloudOS Release Engineering <releng@opencloudos.tech> - 20220826gitba0e0e4c6a17-3
  -- Rebuilt for OpenCloudOS Stream 23


author: Zhao Zhen <jeremiazhao@tencent.com> - 4.12.1-1
changelog:
  - updated fence-agents 4.12.1
  - disabled ppc64le temlpy
  - bootstrap aws/gce/compute/kubevirt/aliyun agents
  - disabled azure temply
  - added ecloud agents


author: Pavel Raiskup <praiskup@redhat.com> - 3.14-4
changelog:
  - /proc and /sys made %ghost to allow filesystem package updates in rootless
    container environments (rhbz#1548403)


author: rockerzhu <rockerzhu@tencent.com> - 102.13.0-2
changelog:
  - Update cbindgen to 0.24.5.
  - Recompile with llvm 16 and rust 1.70 to fix build error in cbindgen gkrust.
  - Update nss, nspr, and rust version.


author: Doris Chao <doriscchao@tencent.com> - 102.15.1-1
changelog:
  - Update to 102.15.1
  - Update nss, nspr version
  - App pacth from mozilla to fix CVE-2023-23604
  - App pacth from mozilla to fix CVE-2022-46884


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.11.2-1
changelog:
  - Upgrade to upstream version 2.11.2
  - Fix CVE-2023-40589,CVE-2023-40569,CVE-2023-40567,CVE-2023-40188
  - Fix CVE-2023-40186,CVE-2023-40181,CVE-2023-39356,CVE-2023-39354
  - Fix CVE-2023-39353,CVE-2023-39352,CVE-2023-39351,CVE-2023-39350
  - Fix CVE-2022-41877,CVE-2022-39347,CVE-2022-39320,CVE-2022-39319
  - Fix CVE-2022-39318,CVE-2022-39317,CVE-2022-39316
  - Remove dbus, glib and gstreamer requirements


author: kianli <kianli@tencent.com> - 9.0.1-1
changelog:
  - Upgrade to 9.0.1
  - Security fix for CVE-2023-38406
  - Security fix for CVE-2023-38407
  - Security fix for CVE-2023-38802
  - Security fix for CVE-2023-41359
  - Security fix for CVE-2023-41909
  - Security fix for CVE-2023-41360
  - Security fix for CVE-2023-41361
  - Security fix for CVE-2023-41358
  - Security fix for CVE-2023-46752
  - Security fix for CVE-2023-46753


author: rockerzhu <rockerzhu@tencent.com> - 12.1-5
changelog:
  - Add sub-package of headless, avoiding rpm-build to require all gdb, but to require gdb-headless
    and not to require source-highlight.


author: rockerzhu <rockerzhu@tencent.com> - 12.1-6
changelog:
  - Add sub-package of minimal to provides /usr/bin/gdb-add-index(needed by rpm-build) and
    gdb.minimal(needed by /usr/bin/gdb-add-index)
  - Rebuilt with boost 1.82.0.


author: TencentOS Team <tencent_os@tencent.com> - 41.3-6.tl4.1
changelog:
  - Rebrand for TencentOS
  - Force the login screen to use Xorg to fix mouse residue issues on
    some physical machines in gc tl3.4


author: Shuo Wang <abushwang@tencent.com> - 4.3.5-4
changelog:
  - fix ceilometer-upgrade stuck:
  - 1. backport python3 patch
  - 2. update gnocchi-api.service
  - 3. update Requires


author: Shuo Wang <abushwang@tencent.com> - 3.0.11-5
changelog:
  - Build with --no-warn-rwx-segment to fix build error in make apps
  - and we don't wind up with segment maps in the final bianries anyway


author: Shuo Wang <abushwang@tencent.com> - 2.0.2-2
changelog:
  - apply 
    
       GO111MODULE=off \
    go build -buildmode pie -compiler gc -tags="rpm_crashtraceback ${BUILDTAGS:-}" -ldflags "${LDFLAGS:-}  -B 0x$(head -c20 /dev/urandom|od -An -tx1|tr -d ' \n') -compressdwarf=false -linkmode=external -extldflags '-Wl,-z,relro -Wl,--as-needed  -Wl,-z,now -specs=/usr/lib/rpm/OpenCloudOS/OpenCloudOS-hardened-ld  -Wl,--build-id=sha1 '" -a -v -x macro;


author: jiefu <jiefu@tencent.com> - 11.0.15-1
changelog:
  - Update to jdk-11.0.15
  - AppCDS: Store old classfiles in static CDS archive
  - G1: lightweight rs log
  - JDK-8265119: G1: update_remset_before_rebuild mixes liveness in words with liveness in bytes


author: Zhao Zhen <jeremiazhao@tencent.com> - 11.0.15-2
changelog:
  - add subpackage of konajdk for rpm-based OS
  - add alternatives supports for multiversion of jdk
  - add bootstrap supoort for OS
  - let 8/11/17 all-in-one spec files
  - remove epoch
  - add multi arch supports initially
  - add some capability compatibility with openjdk
  - add nss in depends avoiding some bugs
  - simplify macros and Scriptlets


author: seanwxiang <seanwxiang@tencent.com> - 8.0.9-1.1.322
changelog:
  - Update to jdk-8u322
  - Vectorize UTF-8 encode
  - Fix: FreeHeapPhysicalMemory period check use wrong time unit


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-11
changelog:
  - Add conflicts of redhat-rpm-macros < 204 as macros.kmp, kmodtool,
    and rpmsort were moved from the latter to the former.
  - Remove RHEL-specific kABI bits from find-requires.ksyms and macros.kmp.


author: Miro Hrončok <mhroncok@redhat.com> - 1.0-12
changelog:
  - Correct conflicts to redhat-rpm-macros < 205
  - Move Perl scripts back to kernel-rpm-macros to avoid Perl in the default buildroot


author: Wang Guodong <gordonwwang@tencent.com> - 4.33-2
changelog:
  - Move event.h from libev-devel to a subpackage(libev-event-devel), so 
    libev-devel no longer conflicts with libevent-devel.


author: Jiaxin Yang <jiaxinyyang@tencent.com> - 1.13.1-1
changelog:
  - Fix bug with smaller width bigger size, resolve CVE-2023-44488
  - VP8: disallow thread count changes, resolve CVE-2023-5217


author: Xiaojie Chen <jackxjchen@tencent.com> - 38.2-5
changelog:
  - Modify anaconda iso configuration for opencloudos-stream
  - Modify live iso configuration for opencloudos-stream
  - Create /dev/urandom before packages installation


author: Ze Zhang <bbrucezhang@tencent.com> - 0.32.5-3.oc9.1
changelog:
  - Fix error with /usr/lib/rpm/find-lang.sh /builddir/build/BUILDROOT/neon-0.32.5-3.oc9.1.x86_64 not being executed


author: Zhao Zhen <jeremiazhao@tencent.com> 18.18.2-1
changelog:
  - updated to upstream 18.18.2
  - switched to using original source tarball
  - fixed CVE-2023-45143 CVE-2023-39332 CVE-2023-39331 CVE-2023-38552 CVE-2023-32559 
    CVE-2023-32006 CVE-2023-32002 CVE-2023-30590 CVE-2023-30588 CVE-2023-30581


author: Feng Weiyao <wynnfeng@tencent.com> - 3.0.9-1
changelog:
  - update to version 3.0.9
    Resolves: CVE-2023-0464            
    Resolves: CVE-2023-0465            
    Resolves: CVE-2023-0466            
    Resolves: CVE-2023-1255            
    Resolves: CVE-2023-2650


author: doriscchao <doriscchao@tencent.com> - 2.7.6-1
changelog:
  - initial build, base version 2.7.6, update to upstream git commit 20200514 with gnulib 
    version 20200513 through patch0001.


author: Xiaojie Chen <jackxjchen@tencent.com> - 3.02-1
changelog:
  - Upgrade to upstream version 3.02
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.36-1
changelog:
  - Upgrade to upstream version 2.36
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.143-1
changelog:
  - Upgrade to upstream version 2.143
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.206-1
changelog:
  - Upgrade to upstream version 2.206
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.16-1
changelog:
  - Upgrade to upstream version 1.16
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 6.04-1
changelog:
  - Upgrade to upstream version 6.04
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 3.19-1
changelog:
  - Upgrade to upstream version 3.19
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 7.70-1
changelog:
  - Upgrade to upstream version 7.70
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.22-1
changelog:
  - Upgrade to upstream version 2.22
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.75-1
changelog:
  - Upgrade to upstream version 1.75
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.54-1
changelog:
  - Upgrade to upstream version 2.54
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 3.81-1
changelog:
  - Upgrade to upstream version 3.81
  - Remove perl-libs which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 6.06-1
changelog:
  - Upgrade to upstream version 6.06
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 6.44-1
changelog:
  - Upgrade to upstream version 6.44
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15
  - Remove conditional macro because perl(Clone) is no longger an optional dependency


author: Xiaojie Chen <jackxjchen@tencent.com> - 0.088-1
changelog:
  - Upgrade to upstream version 0.088
  - Remove perl-libs which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 0.42-1
changelog:
  - Upgrade to upstream version 0.42
  - Remove perl-libs which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.083-1
changelog:
  - Upgrade to upstream version 2.074
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 4.10-1
changelog:
  - Upgrade to upstream version 4.10
  - Remove perl-libs which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 4.16-1
changelog:
  - Upgrade to upstream version 4.16
  - Remove perl-libs which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.9998.39-1
changelog:
  - Upgrade to upstream version 1.9998.39
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2:0.42.34-1
changelog:
  - Upgrade to upstream version 0.42.34
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 5.20230720-1
changelog:
  - Upgrade to upstream version 5.20230720
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.21-1
changelog:
  - Upgrade to upstream version 1.21
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.000038-1
changelog:
  - Upgrade to upstream version 1.000038
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.39-1
changelog:
  - Upgrade to upstream version 1.39
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.66-1
changelog:
  - Upgrade to upstream version 1.66
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 3.45-1
changelog:
  - Upgrade to upstream version 3.45
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 2.037-1
changelog:
  - Upgrade to upstream version 2.037
  - Remove perl-libs which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.204-1
changelog:
  - Upgrade to upstream version 1.204
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 0.017-1
changelog:
  - Upgrade to upstream version 0.017
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 0.002010-1
changelog:
  - Upgrade to upstream version 0.002010
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.302195-1
changelog:
  - Upgrade to upstream version 1.302195
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.35-1
changelog:
  - Upgrade to upstream version 1.35
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 5.19-1
changelog:
  - Upgrade to upstream version 5.19
  - Remove perl-libs which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.15-1
changelog:
  - Upgrade to upstream version 1.15
  - Add file perlcompat.attr which generates replacement for versioned


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.33-1
changelog:
  - Upgrade to upstream version 1.33
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 3.15-1
changelog:
  - Upgrade to upstream version 3.15
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 6.72-1
changelog:
  - Upgrade to upstream version 6.72
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15
  - Add buildrequires perl(Module::Load) and perl(HTTP::CookieJar::LWP)
  - Add requires perl(HTTP::CookieJar::LWP)


author: Xiaojie Chen <jackxjchen@tencent.com> - 0.241-1
changelog:
  - Upgrade to upstream version 0.241
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Xiaojie Chen <jackxjchen@tencent.com> - 5.01-1
changelog:
  - Upgrade to upstream version 5.01
  - Remove perl(MODULE_COMPAT) which will be generated by perl-generators >= 1.15


author: Wang Guodong <gordonwwang@tencent.com> - 15.4-1
changelog:
  - Upgrade to version 15.4
  - Use sysusers configuration to setup user & group
  - CVEs fixed: CVE-2023-39417 CVE-2023-39418


author: Zhao Zhen <jeremiazhao@tencent.com> - 3.11.4-1
changelog:
  - upgraded for upstream 3.11.4
  - fixed CVE-2023-24329, CVE-2022-45061, CVE-2022-42919, CVE-2021-28861, CVE-2020-10735, CVE-2015-20107
  - removed python-unversioned-command, it is now merged into python3 package, so python3 package contains
  - /usr/bin/python by default


author: Wang Guodong <gordonwwang@tencent.com> - 1.22.0-2
changelog:
  - Set the environment variable(SETUPTOOLS_USE_DISTUTILS) to solve 
    setuptools-bundled distutils' LooseVersion issue.


author: Miaojun Dong <zoedong@tencent.com> - 0.6.2-6
changelog:
  - Disable typeguard check, stack-data is not yet adapted to typeguard v3 and v4
  - Fix the color diffrencent and Update test_pygments_example with pygments-2.16


author: Xiaojie Chen <jackxjchen@tencent.com> - 1.9.2-1
changelog:
  - Upgrade to upstream version 1.9.2 
  - Disable some tests until upstream adapts to changes in python 3.11


author: Xiaojie Chen <jackxjchen@tencent.com> - 7.0.14-1
changelog:
  - Upgrade to upstream version 7.0.14
  - Fix CVE-2023-41053 and CVE-2023-45145
  - Set jemalloc page size


author: Shuo Wang <abushwang@tencent.com> - 1.1.4-3
changelog:
  - apply 
    
       GO111MODULE=off \
    go build -buildmode pie -compiler gc -tags="rpm_crashtraceback ${BUILDTAGS:-}" -ldflags "${LDFLAGS:-}  -B 0x$(head -c20 /dev/urandom|od -An -tx1|tr -d ' \n') -compressdwarf=false -linkmode=external -extldflags '-Wl,-z,relro -Wl,--as-needed  -Wl,-z,now -specs=/usr/lib/rpm/OpenCloudOS/OpenCloudOS-hardened-ld  -Wl,--build-id=sha1 '" -a -v -x macro and enable debuginfo;


author: Wang Guodong <gordonwwang@tencent.com> - 38.6-1
changelog:
  - upgrade to version 38.6 and update source files;
  - relabel some dirs such as /usr/lib/sysimages/rpm;
  - set selinux-policy config to enforcing mode by default.


author: TencentOS Team <tencent_os@tencent.com> - 38.28-1.1.tl4.1
changelog:
  - modify selinux policy config from enforcing to permissive only in tl3.4, 
    still enforcing in tl4


author: Miaojun Dong <zoedong@tencent.com> - 4.5.5-1
changelog:
  - Bump version to 4.5.5
  - Add build requirement python3-setuptools
  - Comment the line to generates i18n docs because it is broken


author: Xiaojie Chen <jackxjchen@tencent.com> - 6.5-1
changelog:
  - Upgrade to upstream version 6.5
  - Fix CVE-2023-46728, CVE-2023-46848 and CVE-2023-46847
  - Fix CVE-2023-46846, CVE-2023-5824 and CVE-2023-46724


author: Doris Chao <doriscchao@tencent.com> - 9.0.82-1
changelog:
  - Update to apache-tomcat-9.0.82 to fix the CVE-2023-45648,CVE-2023-42795,CVE-2023-41080 
    and CVE-2023-28709


author: Miaojun Dong <zoedong@tencent.com> - 0.13.0-1
changelog:
  - Bump version to 0.13.0
  - usbredirserver is deprecated in favor of usbredirect
  - usbredirect can be used as a client or server through different parameters


author: Zhao Zhen <jeremiazhao@tencent.com> - 9.0.2092-1
changelog:
  - updated to upstream version 9.0.2092
  - fixed CVE-2023-4735 CVE-2023-4736 CVE-2023-4734 CVE-2023-4738 CVE-2023-4752 
    CVE-2023-4781 CVE-2023-4733 CVE-2023-4750 CVE-2023-5344 CVE-2023-5441 CVE-2023-5535


