# changelog

author: happy_orange <songnannan@linux.alibaba.com> - 5.36.1-13
changelog:
  - rollback to 5.36.1-11 because the CVE-2023-31484 and CVE-2023-31486 has been fixed in perl-CPAN and perl-HTTP-Tiny package.


author: Zhao Hang <wb-zh951434@alibaba-inc.com> - 8.3.15-1
changelog:
  - Update to 8.3.15-1 from 8.2.27-1
  - Migrated to SPDX license
  - Remove patches which already exist in code
  - enable command history in phpdbg, add internal UTC if tzdata is missing and backport Argon2 password hashing in OpenSSL ext
    [Patches cherry-pick from c10s. Original changelog:
    - rebase to 8.3.7
      backport Argon2 password hashing in OpenSSL ext
    - update to 8.3.0RC3 https://fedoraproject.org/wiki/Changes/php83
      add internal UTC if tzdata is missing
      bump to final API/ABI
      switch to nikic/php-parser version 5
      openssl: always warn about missing curve_name
    - rebase to 8.3.12
      enable command history in phpdbg
  ]


author: Chang Gao <gc-taifu@linux.alibaba.com> - 0.43.4-1
changelog:
  - update to 0.43.4
  - Add patch to prevent double inclusion of header file
  - Add patch to enable PAC and BTI feature
    [Patches cherry-pick from c10s. Original changelog:
    - Update to 0.43.4 (0.43.4-1) ]


author: happy_orange <songnannan@linux.alibaba.com> - 4.2.8-1
changelog:
  - update to 4.2.8
  - Fix CPPFLAGS use for x86 and arm
  - Fix rpminspect failures for aarch64
  - Add pmix_test and pmix_regex in test
  - Enable IPv6 support and tests examples support, and disable wrapper rpath
  - Use SPDX license identifier
    [Patches cherry-picked from c10s. Original changelog:
    - Fix CPPFLAGS use for aarch64.(4.2.8-8)]


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 23.05.0-4
changelog:
  - to #IBHHXM
  - add patch for CVE-2024-56378
  - Project: TC2024080204
  - Signed-off-by: mgb01105731 mgb01105731@alibaba-inc.com


author: Zhao Hang <wb-zh951434@alibaba-inc.com> - 24.02.0-1
changelog:
  - Update to 24.02.0-1 from 23.05.0-4
  - Migrated to SPDX license
  - Remove patch which already exist in code
  - Backport fix for issues found by Coverity
    [Patches cherry-pick from c10s. Original changelog:
     - Backport fix for issues found by Coverity]


author: happy_orange <songnannan@linux.alibaba.com> - 2:3.8.5-1
changelog:
  - update to 3.8.5
  - Explicitly set default_database_type if lmdb map is used
  - Converted license tag to SPDX
  - Use systemd-sysusers, original patch by Jonathan Wright <jonathan@almalinux.org>
  - Dropped mail group configuration / creation, it is provided by setup
    [Patches cherry-pick from c10s. Original changelog:
    - Dropped mail group configuration / creation, it is provided by setup.(3.8.5-7)]


author: Funda Wang <fundawang@yeah.net> - 15.4-1
changelog:
  - New version 15.4
  - Add requirement on system-rpm-config for /usr/bin/pg_config,
    as it produces flags linked to /usr/lib/rpm/anolis/anolis-annobin-cc1 &
    /usr/lib/rpm/anolis/anolis-hardened-cc1


author: Chang Gao <gc-taifu@linux.alibaba.com> - 3.9.5-1
changelog:
  - Update to 3.9.5
  - Add patch to work around race with udev setting softdog label
  - Add patch to avoids delays in add_lockspace that are
    used to detect machines using the same host_id
    [Patches cherry-picked from c10s. Original changelog:
    - new nodelay flag for add_lockspace (3.9.5-2)]


author: Bo Ren <rb01097748@alibaba-inc.com> - 1.11.3
changelog:
  - Update to 1.11.3 from 1.10.1
  - Use pyproject macros instead of the deprecated py3 macros
  - Add BuildRequires for build issue
  - Remove deleted doc file


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 1.17.1-3
changelog:
  - to #IBGLMU
  - add patch to fix CVE-2024-33655
  - Project: TC2024080204
  - Signed-off-by: mgb01105731 mgb01105731@alibaba-inc.com


author: Guanjun <guanjun@linux.alibaba.com> - 1.2.0-3
changelog:
  - Override the pkg-config settings and forcibly utilize OpenSSL 3.x versions during the compilation process


author: Ziyang Zhang <ZiyangZhang@linux.alibaba.com> - 0.17.1-1
changelog:
  - Update to 0.17.1 and remove patches included in this release
  - Remove Redhat specific patch since we don't need it


author: Xiaoping Liu <lxp01404969@alibaba-inc.com> - 3.3.7-1
changelog:
  - update to 3.3.7 from 3.3.6
  - Migrated to SPDX license
  - Fix CVE-2024-41946 CVE-2024-43398 CVE-2024-41123
  - add BuildRequires systemtap-sdt-devel to Fix _systemtap_datadir


author: Chang Gao <gc-taifu@linux.alibaba.com> - 7.4-1
changelog:
  - Update to 7.4
  - Update drivedb.h and add patch to fix some bug
    [Patches cherry-picked from c10s. Original changelog:
    - fix static analysis findings (7.4-5)]


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 1.8.0.2-1
changelog:
  - to #IBHDBL
  - update to 1.8.0.2 for CVE-2024-54661
  - Project: TC2024080204
  - Signed-off-by: mgb01105731 mgb01105731@alibaba-inc.com


author: Chang Gao <gc-taifu@linux.alibaba.com> - 2024.4-1
changelog:
  - Update to 2024.4-1
  - Add patches to handle build issue when using gcc12
    [Patches cherry-picked from c10s. Original changelog:
    - Update to 1.4.304.0 SDK (2024.4-1)]


author: Chang Gao <gc-taifu@linux.alibaba.com> - 3.0.5-1
changelog:
  - Update to 3.0.5
  - Add patch to extend maximum DNS name to 255 from 63 by default
    [Patches cherry-picked from c10s. Original changelog:
    - Extend maximum DNS name to 256 (3.0.5-9)]


author: happy_orange <songnannan@linux.alibaba.com> - 0.9.0-1
changelog:
  - update to 0.9.0
  - split swtpm-selinux package from swtpm
  - remove patches that have been merged upstream
    [Patches cherry-pick from c10s. Original changelog:
    - Add extra SELinux policies.(0.9.0-5)]


author: Weisson <Weisson@linux.alibaba.com> - 12.7.6-1
changelog:
  - Update to 12.7.6 from 12.7.3
  - Remove patches that exist in the new version
  - Build position independent executables


author: Weisson <Weisson@linux.alibaba.com> - 5.2-1
changelog:
  - Update to 5.2 from 4.8
  - add jupyter kernel and examples in jupyter package from 4.9 (
    https://inbox.sourceware.org/systemtap/ZEw5pdqi7y%2FjYqeA@elastic.org/T/#u)
  - Emit forward decls within tracepoint_derived_probe_group() too
    [Patches cherry-picked from c10s. Original changelog:
     - Emit forward decls within tracepoint_derived_probe_group() too (5.2-1)]


author: Weisson <Weisson@linux.alibaba.com> - 2:1.35-1
changelog:
  - Update to 1.35 from 1.34
  - Remove patches that exist in the new version
  - Fix spurious diagnostic during extraction of . with  --keep-newer-files
  - Add exclude17 and exclude18 tests which were forgotten by
  - Revert "Fix savannah bug #63567"
   [Patches cherry-picked from c10s. Original changelog:
     - Revert "Fix savannah bug #63567" (1.35-5)]


author: Weisson <Weisson@linux.alibaba.com> - 6.24.10-1
changelog:
  - Update to 6.24.10 from 6.24.07
  - Downstream: implement variable tcsh_posix_status
  - Inform about no support for 'limit memoryuse' in manpage
    [Patches cherry-picked from c10s. Original changelog:
     - Inform about no support for 'limit memoryuse' in manpage(6.24.10-5)]


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 5.3.4-1
changelog:
  - Update to 5.3.4 from 5.3.2
  - Remove patch as the new version of tarball already includes changes
  - Add patches to Don't assume neon available on arm64/aarch64
    [Patches cherry-pick from c10s. Original changelog:
    - Update to 5.3.4(5.3.4-1)]


author: Funda Wang <fundawang@yeah.net> - 10:20220321-14
changelog:
  - apply upstream fix for CVE-2023-32700
  - patch texmfcnf.lua
  - fix mptopdf.pl and thumbpdf.pl to have proper interpreter lines
  - fix issue with latex.ltx


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 2022.04-5
changelog:
  - to #IB7HCR
  - add patch to fix CVE-2022-2347
  - Project: TC2024080204
  - Signed-off-by: mgb01105731 mgb01105731@alibaba-inc.com


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 1.17.0-1
changelog:
  - Update to 1.17.0 from 1.15.0
  - Add patch to fix undeclared INFINITY error in ucs_time_units_to_sec()
  - Update loongarch64 patches for new version (<zhangwenlong@loongson.cn>)


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 1:3.24.0-1
changelog:
  - Update to 3.24.0 from 3.21.0
  - Remove patch as the new version of tarball already includes changes


author: Chang Gao <gc-taifu@linux.alibaba.com> - 1.24.5-1
changelog:
  - Fix CVE-2024-38428
  - Remove patch which already exist in upstream
  - Add patches to fix some bugs
    [Patches cherry-picked from c10s. Original changelog:
    - Revert back to using GnuTLS as the TLS backend
    - Use bundled implementation of MD4 for NTLM (1.24.5-5)]


author: Ziyang Zhang <ZiyangZhang@linux.alibaba.com> - 5.10.0-1
changelog:
  - Rollback to 5.10.0
  - Add patches cherry-picked from upstream 5.10 to 5.18
  - Add Anolis customized atomic write support patches


author: Chang Gao <gc-taifu@linux.alibaba.com> - 1.2.39-1
changelog:
  - Update to 1.2.39
  - Add patch to include openssl engines conditional
  - Remove gcrypt and gnutls subpacks
    [Patches cherry-picked from c10s. Original changelog:
    - Fix openssl engine dependency 
    - Stop building gcrypt and gnutls implementations (1.2.39-1)]


author: wenyuzifang <lzx02244079@alibaba-inc.com> - 23.2.5-3
changelog:
  - fix CVE-2024-9632
  - fix CVE-2025-26601
  - fix CVE-2025-26596
  - fix CVE-2025-26594
  - fix CVE-2025-26597
  - fix CVE-2025-26598
  - fix CVE-2025-26600
  - fix CVE-2025-26595
  - fix CVE-2025-26599


