# changelog

author: Fanjun Kong <fanjunkong@tencent.com> - 1.14.5-1
changelog:
  - Update to 1.14.5
  - Add additional image format dependencies 
  - Use SPDX license format
  - Remove .la files


author: Doris Chao <doriscchao@tencent.com> - 3.6.9-1
changelog:
  - [Type] security
  - [DESC] Update to 3.6.9 to fix CVE-2024-34509，CVE-2024-34508,CVE-2022-43272.
  - And also add patches:
    * 0001-Fixed-another-issue-with-invalid-mono-images.patch
      (CVE-2025-25472)
    * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
      (CVE-2025-25474)
    * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
      (CVE-2025-25475)
    * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
      (CVE-2024-52333)
    * 0001-Replaced-call-of-delete-by-delete.patch
    * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
      (CVE-2024-47796)


author: Jiaxin Yang <jiaxinyyang@tencent.com> - 6.0.133-1
changelog:
  - [Type] security
  - [DESC] Update to .NET SDK 6.0.133 and Runtime 6.0.33
  - [DESC] fix CVE-2024-38095


author: Jiaxin Yang <jiaxinyyang@tencent.com> - 6.0.135-1
changelog:
  - [Type] security
  - [DESC] Update to .NET SDK 6.0.135 and Runtime 6.0.35
  - [DESC] fix CVE-2024-43485,CVE-2024-43483,CVE-2024-43484


author: Jiaxin Yang <jiaxinyyang@tencent.com> - 7.0.119-1
changelog:
  - [Type] security
  - [DESC] Update to .NET SDK 7.0.119 and Runtime 7.0.19
  - [DESC] fix CVE-2024-21392, CVE-2024-30046, CVE-2024-30045


author: Zhao Zhen <jeremiazhao@tencent.com> - 2.99.18-1
changelog:
  - Upgraded to upstream 2.99.18
  - This is the last development version before 3.0 release
  - Switching building system from automake to meson
  - Fixed CVE-2023-44441 CVE-2023-44443 CVE-2023-44444


author: Shuo Wang <abushwang@tencent.com> - 1.12.1-4
changelog:
  - backport patch to fix CVE-2021-37501
  - Check for overflow when calculating on-disk attribute data size


author: Pengda Dou <doupengda@loongson.cn> - 1.8.7-3
changelog:
  - [Type] bugfix
  - [DESC] fix url error problem , remove Changlog and imsettings files that aren't there


author: rockerzhu <rockerzhu@tencent.com> - 1:6.0.1-2
changelog:
  - [Type] other
  - [Desc] Add INCUS_SOCKET env variable to fix incusd communication failure with systemd.


author: Miaojun Dong <zoedong@tencent.com> - 2.28.10-1
changelog:
  - Upgrade version to 2.28.10 (Fix CVE-2025-27809, CVE-2025-27810)
  - Update Source0 to use official release files


author: jackeyji <jackeyji@tencent.com> - 4.9.5-1
changelog:
  - [Type] other
  - [DESC] upgrade to 4.9.5 to fix CVE-2024-1753 CVE-2024-3727 CVE-2024-24786 and CVE-2024-28180


author: jackeyji <jackeyji@tencent.com> - 5.2.5-1
changelog:
  - [Type] security
  - [DESC] upgrade to 5.2.5 to fix CVE-2024-9341 CVE-2024-9407 CVE-2024-9675 and CVE-2024-9676


author: Wang Guodong <gordonwwang@tencent.com> - 16.1-1
changelog:
  - Upgrade to version 16.1
  - Remove /var/run/postgresql
  - Add versioned provide to the default version


author: Wang Guodong <gordonwwang@tencent.com> - 16.5-1
changelog:
  - Upgrade to version 16.5
  - CVEs fixed: CVE-2024-10976, CVE-2024-10977, CVE-2024-10978, CVE-2024-10979


author: Shuo Wang <abushwang@tencent.com> - 3.12.2-11
changelog:
  - fix CVE-2024-12254
  - gh-127655: Ensure _SelectorSocketTransport.writelines pauses the
  - protocol if needed (GH-127656) (#127664)


author: Shuo Wang <abushwang@tencent.com> - 3.12.2-13
changelog:
  - fix CVE-2025-1795
  - email/_header_value_parser: don't encode list separators (GH-100885) (GH-115592)
  - Fix for email.generator.Generator with whitespace between encoded words. (GH-92281) (#119246)
  - Fix regression introduced in gh-100884: AttributeError when re-fold a long address list.


author: Doris Chao <doriscchao@tencent.com> - 2.67.1-1
changelog:
  - [Type] security
  - [DESC] update to 2.67.1 to fix CVEs,including CVE-2024-1724,CVE-2024-29068 and
  - CVE-2024-29069.


author: Liangliang Zhai <zhailiangliang@loongson.cn> - 17.0.0-2
changelog:
  - [Type] other
  - [DESC] Fix build error: 'CapabilityLongConstantCompositeINTEL' was not declared in this scope


author: Doris Chao <doriscchao@tencent.com> - 7.0.7-1
changelog:
  - [Type] security
  - [DESC] Upgrade to Suricata 7.0.7 to resolve multiple CVEs, such as CVE-2024-47188,
  - CVE-2024-47187, CVE-2024-45795, CVE-2024-45796, and CVE-2024-47522.


author: Sinong Chen <costinchen@tencent.com> - 7.0.10-1
changelog:
  - [Type] security
  - [DESC] Upgrade to Suricata 7.0.10 to fix CVE-2025-29915, CVE-2025-29916,
  - CVE-2025-29917, CVE-2025-29918.


author: Jiaxin Yang <jiaxinyyang@tencent.com> - 115.14.0-1
changelog:
  - Update to 115.14.0-1.
  - Fix CVE-2024-7519, CVE-2024-7522, CVE-2024-7521, CVE-2024-7531, CVE-2024-7527
  - CVE-2024-7529, CVE-2024-7525, CVE-2024-7526


author: Jiaxin Yang <jiaxinyyang@tencent.com> - 128.4.0-1
changelog:
  - Update to 128.4.0.
  - Fix CVE-2024-10466, CVE-2024-10465, CVE-2024-10467, CVE-2024-10464, CVE-2024-10461
  - CVE-2024-10459, CVE-2024-10462, CVE-2024-10460, CVE-2024-10463, CVE-2024-10458


author: Jiaxin Yang <jiaxinyyang@tencent.com> - 128.5.0-1
changelog:
  - Update to 128.5.0.
  - Fix CVE-2024-11699, CVE-2024-11692, CVE-2024-11694, CVE-2024-11696, CVE-2024-11695
  - CVE-2024-11693, CVE-2024-11698, CVE-2024-11697, CVE-2024-11691, CVE-2024-11159


author: Jiaxin Yang <jiaxinyyang@tencent.com> - 128.7.0-1
changelog:
  - Update to 128.7.0.
  - Fix CVE-2025-1013, CVE-2025-1015, CVE-2025-1010, CVE-2025-1016, CVE-2025-1014,
  - CVE-2025-1012, CVE-2025-1009, CVE-2025-1011, CVE-2025-0510, CVE-2025-1017,
  - CVE-2025-0237, CVE-2025-0239, CVE-2025-0238, CVE-2025-0241, CVE-2025-0243,
  - CVE-2025-0240, CVE-2025-0242


author: Jiaxin Yang <jiaxinyyang@tencent.com> - 128.10.0-1
changelog:
  - Update to 128.10.0.
  - Fix CVE-2025-4091, CVE-2025-4087, CVE-2025-4093, CVE-2025-4083, CVE-2025-2817,
  - CVE-2025-27363, CVE-2025-3029, CVE-2025-3030, CVE-2025-3028, CVE-2025-1930,
  - CVE-2025-1935, CVE-2025-1936, CVE-2025-1934, CVE-2025-1938, CVE-2025-1931,
  - CVE-2025-1933, CVE-2025-1932, CVE-2025-1937, CVE-2025-3932, CVE-2025-3909,
  - CVE-2025-3877, CVE-2025-3875, CVE-2025-3523, CVE-2025-2830, CVE-2025-26695,
  - CVE-2025-26696


author: Shuo Wang <abushwang@tencent.com> - 0.9.7-4
changelog:
  - backport patch to fix CVE-2024-34402 CVE-2024-34403
  - Protect against integer overflow in ComposeQueryEngine and ComposeQueryMallocExMm


author: Shop You <shopyou@example.com> - 8.0.1-3
changelog:
  - [Type] security
  - [DESC] Resolves: CVE-2025-49112
  - Apply valkey-8.0.1-CVE-2025-49112.patch to fix networking.c buffer check


author: Doris Chao <doriscchao@tencent.com> - 0.5.3-2.git20230121
changelog:
  - [Type] security
  - [DESC] Add patch to fix CVEs,including CVE-2022-38223, CVE-2023-38253,
  - CVE-2023-38252 and CVE-2023-4255.


author: Jiaxin Yang <jiaxinyyang@tencent.com> - 6.0.36-1
changelog:
  - Update to 6.0.36
  - fix CVE-2024-42330, CVE-2024-36461, CVE-2024-36464, CVE-2024-42332, CVE-2024-36463,
  - CVE-2024-42333, CVE-2024-22120, CVE-2024-36460, CVE-2024-36467, CVE-2024-22117,
  - CVE-2024-42327, CVE-2024-22123, CVE-2024-22121, CVE-2024-22114, CVE-2024-36466,
  - CVE-2024-22122


author: Upgrade Robot <upbot@opencloudos.tech> - 0.2.44-1
changelog:
  - [Type] security
  - [DESC] Upgrade to version 0.2.44, fix CVEs: CVE-2025-2173, CVE-2025-2174, CVE-2025-2175, 
    CVE-2025-2176, CVE-2025-2177


