# changelog

author: lvying<lvying6@huawei.com> - 1.0.0-1
changelog:
  - Type:feature
  - ID:NA
  - SUG:NA
  - DESC: Init A-Tune-BPF-Collection repo and add readahead_tune service


author: lvying<lvying6@huawei.com> - 1.0.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: use generated vmlinux.h instead of bpftool gen vmlinux.h in compile env


author: yaoxin <yaoxin30@huawei.com> 2.4.3-5
changelog:
  - This package depends on log4j. After the log4j vulnerability CVE-2021-44228 is fixed, the version needs to be rebuild.


author: yaoxin <yaoxin30@huawei.com> 2.4.3-6
changelog:
  - This package depends on log4j. After the log4j vulnerability CVE-2021-45105 is fixed, the version needs to be rebuild.


author: houyingchao <houyingchao@huawei.com> 2.4.3-7
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-44832 is fixed,the version needs to be rebuild.


author: Yu Peng <yupeng@kylinos.cn> - 1:1.26.2-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: bond:avoid logging warning to set "ad_actor_system=00:00:00:00:00:00".


author: yaoxin <yao_xin001@hoperun.com> - 1.2.24-1
changelog:
  - Update to 1.2.24:
    * Fixed formatting of ipsec.conf snippet. This is a security
    issue with severity of "Important." (CVE-2024-9050)
    * Added support for "require-id-on-certificate" setting.
    * Updated Georgian, Slovenian and Ukrainian translations.


author: chengguipeng <chengguipeng1@huawei.com> - 1.1.12-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:solove the problem that no message is displayed when running a uninstalled command.


author: openEuler Buildteam <buildteam@openeuler.org> -20190730-2
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Increase the ability to provide adobe-mappings-cmap-deprecated


author: yixiangzhike <yixiangzhike007@163.com> - 0.16.2-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: backport upstream patches to strengthen malloc,calloc,realloc,strdup


author: wanglu <wanglu210@huawei.com> - 33.19-33
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert "Set default entry to the BLS id instead of the entry index"


author: yueyuankun <yueyuankun@kylinos.cn> - 33.19-34
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Solve the problem that sometimes the circular loading progress bar does not rotate


author: sunhai <sunhai10@huawei.com> - 33.19-36
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:dracut handle compressed kernel modules
         network use separate main conext for NM-client in threads


author: sunhai <sunhai10@huaqei.com> - 33.19-40
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Don't set LC_ALL for live installations
         Do not crash on network --device link with wireless device
         Do not modify boot order on UEFI if asked


author: Linux_zhang <zhangruifang@h-partners.com> - 3.1.23-7
changelog:
  - Type：update
  - ID：NA
  - SUG:NA
  - DESC: Modify the license to SPDX format
          Delete MIT and Public Domain license because it no longer appears in the upstream source


author: Roberto Sassu <roberto.sassu@huawei.com> - 0.2.0
changelog:
  - Add quote protocol
  - Add parser for TPM 2.0 event log
  - Add evm_key and dummy verifiers
  - Add creation of certificate for TPM key
  - Add creation of symmetric key to be used with EVM
  - Add ima-sig and ima-cp verifiers


author: Shijie Luo<luoshijie1@huawei.com> - 2.4.48-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:fix error condition of while loop 
         in 0001-bypass-wrong-output-when-enabled-selinux.patch.


author: shixuantong<shixuantong@huawei.com> - 0.3.6-25
changelog:
  - Type:cves
  - ID:CVE-2017-6828 CVE-2017-6829 CVE-2017-6831 CVE-2017-6838 CVE-2017-6839
  - SUG:NA
  - DESC:fix CVE-2017-6828 CVE-2017-6829 CVE-2017-6831 CVE-2017-6838 CVE-2017-6839


author: wangkai <wangkai385@huawei.com> - 0:4.3-23
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-44228 is fixed,the version needs to be rebuild.


author: yaoxin <yaoxin30@huawei.com> - 0:4.3-24
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-45105 is fixed,the version needs to be rebuild.


author: wangyuhang<wangyuhang27@huawei.com> - 5.0-19
changelog:
  - Type:bugfix
  - CVE:
  - SUG:NA
  - DESC:sync patches from bash community
         add backport-Bash-5.1-patch-12-fix-race-condition-with-child-proc.patch
         add backport-Bash-5.1-patch-16-fix-interpretation-of-multiple-ins.patch


author: yuejiayan<yuejiayan@huawei.com> - 1:2.8-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:completions/Makefile: Fix check-local in VPATH builds
         __load_completion: Avoid bad array subscript on "commands" ending wit…
         _xspecs: Declare as global on bash >= 4.2
         completions/Makefile.am: Use install-data-hook, not install-data-local
         man: Fix completion when failglob option is enabled (#225)
         _longopt: don't complete --no-* with file/dirname arg


author: yaoxin <yao_xin001@hoperun.com> - 1.17-1
changelog:
  - Update to 1.17 for fix CVE-2022-38398,CVE-2022-38648,CVE-2022-40146,CVE-2022-44729 and CVE-2022-44730


author: huangyu <huangyu106@huawei.com> - 32:9.11.21-14
changelog:
  - Type:CVE
  - ID:CVE-2022-2906 CVE-2022-38177 CVE-2022-38178 CVE-2022-2795 CVE-2022-2881
  - SUG:NA
  - DESC:FIX CVE-2022-2906CVE-2022-38177CVE-2022-38178CVE-2022-2795CVE-2022-2881


author: zhanghao <zhanghao383@huawei.com> - 32:9.11.21-15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix output expected information when install bing-sdborbind-sdb-chroot


author: panxiaohe <panxiaohe@huawei.com> - 3.6.4-2
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:use make macros to run check in parallel;
         fix a concurrent build issue in examples


author: wangxiao <wangxiao184@h-partners.com> - 1.2.0-27
changelog:
  - DESC: backport upstream patches
    blkparse skip check_cpu_map with pipe input
    blkparse fix incorrectly sized memset in check_cpu_map
    fix hang when BLKTRACESETUP fails and "-o -" is used


author: xihaochen <xihaochen@huawei.com> - 1.8.18-17
changelog:
  - Type:requirement
  - ID:NA
  - SUG:NA
  - DESC:move exchange-bmc-os-info,bmc-snmp-proxy to separate subpackages from ipmitool


author: mengkanglai <mengkanglai2@huawei.com> - 1.8.18-18
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:lan channel fix set alert on off and lanplus realloc the msg if the payload_length gets update


author: zhangyiru <zhangyiru3@huawei.com> - 1.73.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:increase used_block_count when use put_mem_block
    Disallow repeating a case-change group


author: zhangyiru <zhangyiru3@huawei.com> - 1.73.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Correct stack unwinding inside recursions when seeing (*SKIP).


author: chenyi <chenyi211@huawei.com> - 4.19.90-2503.1.0.0318
changelog:
  - !15314  drm/imx: Fix memory leak in imx_pd_connector_get_modes
  - !15313  video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe()
  - !15285  tcp: Defer ts_recent changes until req is owned
  - !15256  ata: sata_dwc_460ex: Fix crash due to OOB write
  - drm/imx: Fix memory leak in imx_pd_connector_get_modes
  - video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe()
  - tcp: Defer ts_recent changes until req is owned
  - !15262  blk-iolatency: Fix inflight count imbalances and IO hangs on offline
  - !15193  Roll back the setting of nfs superblock s_flags.
  - blk-iolatency: Fix inflight count imbalances and IO hangs on offline
  - ata: sata_dwc_460ex: Fix crash due to OOB write
  - Revert "nfs: ignore SB_RDONLY when mounting nfs"
  - Revert "nfs: pass flags to second superblock"
  - Revert "nfs: fix the loss of superblock's initialized flags"


author: chenyi <chenyi211@huawei.com> - 4.19.90-2503.3.0.0319
changelog:
  - !15415  tracing/histograms: Fix memory leak problem
  - !15415  tracing/histograms: Fix memory leak problem
  - tracing/histograms: Fix memory leak problem
  - !15398  RDMA/hfi1: Prevent use of lock before it is initialized
  - !15401  hfsplus: don't query the device logical block size multiple times
  - !15401  hfsplus: don't query the device logical block size multiple times
  - !15399  drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj
  - !15399  drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj
  - !15411 v2  Ignore SB_RDONLY when mounting and remounting nfs
  - !15411 v2  Ignore SB_RDONLY when mounting and remounting nfs
  - !15337  net: tipc: fix possible refcount leak in tipc_sk_create()
  - !15336  CVE-2025-21702
  - !15335  net: sched: Disallow replacing of child qdisc from one parent to another
  - !15335  net: sched: Disallow replacing of child qdisc from one parent to another
  - nfs: ignore SB_RDONLY when remounting nfs
  - nfs: clear SB_RDONLY before getting superblock
  - !15393  powerpc/fsl_rio: Fix refcount leak in fsl_rio_setup
  - !15392  ARM: hisi: Add missing of_node_put after of_find_compatible_node
  - !15392  ARM: hisi: Add missing of_node_put after of_find_compatible_node
  - !15275  scsi: libfc: Fix use after free in fc_exch_abts_resp()
  - !15297  af_packet: avoid erroring out after sock_init_data() in packet_create()
  - !15297  af_packet: avoid erroring out after sock_init_data() in packet_create()
  - hfsplus: don't query the device logical block size multiple times
  - drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj
  - RDMA/hfi1: Prevent use of lock before it is initialized
  - !15374  can: gs_usb: gs_usb_open/close(): fix memory leak
  - !15332  Fix CVE-2022-49253
  - !15381  iio: trigger: sysfs: fix use-after-free on remove
  - !15386  crypto: qat - add param check for DH
  - !15353  rtl818x: Prevent using not initialized queues
  - !15354  drm/amdkfd: Check for potential null return of kmalloc_array()
  - !15231  cifs: Prevent NULL pointer dereference caused by cifs_sb->rsize is 0
  - powerpc/fsl_rio: Fix refcount leak in fsl_rio_setup
  - ARM: hisi: Add missing of_node_put after of_find_compatible_node
  - !15240  smb: client: Fix netns refcount imbalance
  - crypto: qat - add param check for DH
  - iio: trigger: sysfs: fix use-after-free on remove
  - !15361  md/bitmap: don't set sb values if can't pass sanity check
  - !15361  md/bitmap: don't set sb values if can't pass sanity check
  - !15351  dm integrity: fix memory corruption when tag_size is less than digest size
  - !15350  video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow
  - can: gs_usb: gs_usb_open/close(): fix memory leak
  - !15075 v4  Fix CVE-2023-52572 in openEuler-1.0-LTS
  - !15287  bpf, arm64: Clear prog->jited_len along prog->jited
  - md/bitmap: don't set sb values if can't pass sanity check
  - !15324  Fix Fix CVE-2022-49351
  - !15329  Fix CVE-2022-49308
  - drm/amdkfd: Check for potential null return of kmalloc_array()
  - rtl818x: Prevent using not initialized queues
  - dm integrity: fix memory corruption when tag_size is less than digest size
  - video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow
  - !15282  fix CVE-2022-49404
  - !15282  fix CVE-2022-49404
  - !15273  ARM: davinci: da850-evm: Avoid NULL pointer dereference
  - !15273  ARM: davinci: da850-evm: Avoid NULL pointer dereference
  - !15303  md/raid1: fix memory leak in raid1_run() if no active rdev
  - !15304  md: bypass block throttle for superblock update
  - !15318  md/raid1: fix bitmap update when all write requests fail
  - !15318  md/raid1: fix bitmap update when all write requests fail
  - net: tipc: fix possible refcount leak in tipc_sk_create()
  - pfifo_tail_enqueue: Drop new packet when sch->limit == 0
  - net_sched: sch_fifo: implement lockless __fifo_dump()
  - net: sched: Disallow replacing of child qdisc from one parent to another
  - media: usb: go7007: s2250-board: fix leak in probe()
  - extcon: Modify extcon device to be created after driver data is set
  - extcon: Fix error handling in extcon_dev_register
  - net: altera: Fix refcount leak in altera_tse_mdio_create
  - md/raid1: fix bitmap update when all write requests fail
  - md: bypass block throttle for superblock update
  - md/raid1: fix memory leak in raid1_run() if no active rdev
  - af_packet: avoid erroring out after sock_init_data() in packet_create()
  - bpf, arm64: Clear prog->jited_len along prog->jited
  - RDMA/hfi1: Fix potential integer multiplication overflow errors
  - scsi: libfc: Fix use after free in fc_exch_abts_resp()
  - ARM: davinci: da850-evm: Avoid NULL pointer dereference
  - smb: client: Fix netns refcount imbalance causing leaks and use-after-free
  - smb: client: fix TCP timers deadlock after rmmod
  - cifs: Prevent NULL pointer dereference caused by cifs_sb->rsize is 0
  - cifs: Fix UAF in cifs_demultiplex_thread()


author: chenyi <chenyi211@huawei.com> - 4.19.90-2503.4.0.0320
changelog:
  - !15574  some CVE fixes
  - rtc: mt6397: check return value after calling platform_get_resource()
  - nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling
  - drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop()
  - !15503  ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl
  - !15500  Fix 4 CVEs in JFFS2
  - !15544  ext4: fix race condition between ext4_write and ext4_convert_inline_data
  - !15521  ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction
  - ext4: fix race condition between ext4_write and ext4_convert_inline_data
  - ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction
  - !15495  drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm runtime resume
  - !15372  xtensa: Fix refcount leak bug in time.c
  - !15494  mips: cpc: Fix refcount leak in mips_cpc_default_phys_base
  - ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl
  - !15448  vrf: use RCU protection in l3mdev_l3_out()
  - !15433  scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair()
  - !15432  CVE-2022-49087
  - !15486  mm: fix unexpected zeroed page mapping with zram swap
  - !15487  CVE-2022-49514
  - !15485  media: venus: hfi: avoid null dereference in deinit
  - !15484  drm/msm/mdp5: Return error code in mdp5_mixer_release when deadlock is detected
  - jffs2: fix memory leak in jffs2_do_fill_super
  - jffs2: fix memory leak in jffs2_do_mount_fs
  - jffs2: fix memory leak in jffs2_scan_medium
  - jffs2: fix use-after-free in jffs2_clear_xattr_subsystem
  - drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm runtime resume
  - mips: cpc: Fix refcount leak in mips_cpc_default_phys_base
  - !15371  pinctrl: ralink: Check for null return of devm_kcalloc
  - !15343  ipw2x00: Fix potential NULL dereference in libipw_xmit()
  - !15342  drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes
  - !15425  CVE-2022-49513
  - ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe
  - ASoC: mediatek: mt8173: fix device_node leak
  - mm: fix unexpected zeroed page mapping with zram swap
  - media: venus: hfi: avoid null dereference in deinit
  - drm/msm/mdp5: Return error code in mdp5_mixer_release when deadlock is detected
  - !15461  be2net: Fix buffer overflow in be_get_module_eeprom
  - !15443  i40e: Fix call trace in setup_tx_descriptors
  - !15442  nfc: nfcmrvl: Fix memory leak in nfcmrvl_play_deferred
  - !15458  sfc: fix kernel panic when creating VF
  - be2net: Fix buffer overflow in be_get_module_eeprom
  - sfc: fix kernel panic when creating VF
  - vrf: use RCU protection in l3mdev_l3_out()
  - i40e: Fix call trace in setup_tx_descriptors
  - nfc: nfcmrvl: Fix memory leak in nfcmrvl_play_deferred
  - scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair()
  - rxrpc: Restore removed timer deletion
  - rxrpc: fix a race in rxrpc_exit_net()
  - cpufreq: governor: Use kobject release() method to free dbs_data
  - cpufreq: Move to_gov_attr_set() to cpufreq.h
  - xtensa: Fix refcount leak bug in time.c
  - pinctrl: ralink: Check for null return of devm_kcalloc
  - ipw2x00: Fix potential NULL dereference in libipw_xmit()
  - drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes


author: chenyi <chenyi211@huawei.com> - 4.19.90-2503.5.0.0321
changelog:
  - !15605  mm/hugetlb: fix surplus pages in dissolve_free_huge_page()
  - !15600  vfio/platform: check the bounds of read/write syscalls
  - !15633  ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe
  - !15634  ALSA: oss: Fix PCM OSS buffer allocation overflow
  - ALSA: oss: Fix PCM OSS buffer allocation overflow
  - ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe
  - !15582  CVE-2022-49508
  - !15467  net: mdio: unexport __init-annotated mdio_bus_init()
  - !15465  CVE-2022-49490
  - !15604 v3  rtc: Fix race when disable/enable UIE in rtc_set_time()
  - !15583  block: fix error unwinding in blk_register_queue
  - mm/hugetlb: fix surplus pages in dissolve_free_huge_page()
  - rtc: Fix race when disable/enable UIE in rtc_set_time()
  - rtc: Cleanup for UIE timer/polling emulation support
  - vfio/platform: check the bounds of read/write syscalls
  - !15586  scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI
  - scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI
  - !15569  ubi: ubi_create_volume: Fix use-after-free when volume creation failed
  - !15579  block: Fix handling of offline queues in blk_mq_alloc_request_hctx()
  - !15578  scsi: target: tcmu: Fix possible page UAF
  - !15577  drm/plane: Move range check for format_count earlier
  - !15576  drm/amdgpu/cs: make commands with 0 chunks illegal behaviour.
  - block: fix error unwinding in blk_register_queue
  - HID: elan: Fix potential double free in elan_input_configured
  - HID: elan: Fix memleak in elan_input_configured
  - block: Fix handling of offline queues in blk_mq_alloc_request_hctx()
  - scsi: target: tcmu: Fix possible page UAF
  - drm/plane: Move range check for format_count earlier
  - drm/amdgpu/cs: make commands with 0 chunks illegal behaviour.
  - ubi: ubi_create_volume: Fix use-after-free when volume creation failed
  - net: mdio: unexport __init-annotated mdio_bus_init()
  - drm/msm/mdp5: Fix global state lock backoff
  - drm/msm/mdp5: Return error code in mdp5_pipe_release when deadlock is detected


author: chenyi <chenyi211@huawei.com> - 4.19.90-2504.1.0.0322
changelog:
  - !15491  dlm: fix plock invalid read
  - !15468  ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix
  - !15466  ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe
  - !15653  tty: goldfish: Fix free_irq() on remove
  - !15654  media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init
  - !15703  tracing: Make sure trace_printk() can output as soon as it can be used
  - !15702  trace_events_hist: add check for return value of 'create_hist_field'
  - !15708  f2fs: fix dereference of stale list iterator after loop body
  - f2fs: fix dereference of stale list iterator after loop body
  - tracing: Make sure trace_printk() can output as soon as it can be used
  - !15508  scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one()
  - !15509  ath9k_htc: fix uninit value bugs
  - !15506  phy: qcom-qmp: fix struct clk leak on probe errors
  - !15505  net: sfp: fix memory leak in sfp_probe()
  - trace_events_hist: add check for return value of 'create_hist_field'
  - !15647  nilfs2: do not force clear folio if buffer is referenced
  - !15628  ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe
  - !15629  ata: pata_octeon_cf: Fix refcount leak in octeon_cf_probe
  - !15674  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
  - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
  - !15661  ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111
  - !15662  media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED
  - !15663  ARM: versatile: Add missing of_node_put in dcscb_init
  - !15504  um: Fix out-of-bounds read in LDT setup
  - !15311  net: dsa: mv88e6xxx: Fix refcount leak in mv88e6xxx_mdios_register
  - ARM: versatile: Add missing of_node_put in dcscb_init
  - media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED
  - ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111
  - !15502  wifi: mac80211: fix use-after-free in chanctx code
  - !15316  ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock
  - !15322  can: m_can: m_can_tx_handler(): fix use after free of skb
  - !15497  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
  - !15655  cifs: Revert two patches to prevent statistics leakage on the lo device.
  - Revert "smb: client: fix TCP timers deadlock after rmmod"
  - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free"
  - media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init
  - tty: goldfish: Fix free_irq() on remove
  - nilfs2: do not force clear folio if buffer is referenced
  - ata: pata_octeon_cf: Fix refcount leak in octeon_cf_probe
  - ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe
  - ath9k_htc: fix uninit value bugs
  - scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one()
  - phy: qcom-qmp: fix struct clk leak on probe errors
  - net: sfp: fix memory leak in sfp_probe()
  - um: Fix out-of-bounds read in LDT setup
  - wifi: mac80211: fix use-after-free in chanctx code
  - cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
  - dlm: fix plock invalid read
  - ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix
  - ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe
  - can: m_can: m_can_tx_handler(): fix use after free of skb
  - ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock
  - net: dsa: mv88e6xxx: Fix refcount leak in mv88e6xxx_mdios_register


author: chenyi <chenyi211@huawei.com> - 4.19.90-2504.2.0.0323
changelog:
  - !15796  ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path()
  - !15805  dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init
  - !15806  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
  - !15377  virtio_console: eliminate anonymous module_init & module_exit
  - bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
  - dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init
  - ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path()
  - !15784  HID: betop: check shape of output reports
  - HID: betop: check shape of output reports
  - !15740  ftrace: Avoid potential division by zero in function_stat_show()
  - !15747  bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation
  - !15637  net_sched: sch_sfq: don't allow 1 packet limit
  - !15763  dmaengine: Fix double increment of client_count in dma_chan_get()
  - !15761  EDAC/highbank: Fix memory leak in highbank_mc_probe()
  - !15638  CVE-2022-49374
  - !15692  tty: fix deadlock caused by calling printk() under tty_port->lock
  - !15693  rxrpc: Fix listen() setting the bar too high for the prealloc rings
  - !15694  firmware: arm_scmi: Fix list protocols enumeration in the base protocol
  - !15691  media: uvcvideo: Fix double free in error path
  - !15732  drm/rockchip: vop: fix possible null-ptr-deref in vop_bind()
  - !15695  fs/dcache: fix bad unlock balance in shrink_dentry_list()
  - dmaengine: Fix double increment of client_count in dma_chan_get()
  - EDAC/highbank: Fix memory leak in highbank_mc_probe()
  - bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation
  - ftrace: Avoid potential division by zero in function_stat_show()
  - !15514  cpufreq: pmac32-cpufreq: Fix refcount leak bug
  - drm/rockchip: vop: fix possible null-ptr-deref in vop_bind()
  - !15677  regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt
  - !15678  drm: msm: fix possible memory leak in mdp5_crtc_cursor_set()
  - !15632  macsec: fix UAF bug for real_dev
  - !15687  drivers: usb: host: Fix deadlock in oxu_bus_suspend()
  - !15688  usb: usbip: fix a refcount leak in stub_probe()
  - !15713  CVE-2022-49370
  - !15712  drbd: Fix five use after free bugs in get_initial_state
  - !15619  partitions: mac: fix handling of bogus partition table
  - !15723  phy: qcom-qmp: fix reset-controller leak on probe errors
  - !15720  nfc: nci: add flush_workqueue to prevent uaf
  - phy: qcom-qmp: fix reset-controller leak on probe errors
  - nfc: nci: add flush_workqueue to prevent uaf
  - firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle
  - firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle
  - drbd: Fix five use after free bugs in get_initial_state
  - fs/dcache: fix bad unlock balance in shrink_dentry_list()
  - firmware: arm_scmi: Fix list protocols enumeration in the base protocol
  - rxrpc: Fix listen() setting the bar too high for the prealloc rings
  - tty: fix deadlock caused by calling printk() under tty_port->lock
  - media: uvcvideo: Fix double free in error path
  - usb: usbip: fix a refcount leak in stub_probe()
  - drivers: usb: host: Fix deadlock in oxu_bus_suspend()
  - drm: msm: fix possible memory leak in mdp5_crtc_cursor_set()
  - regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt
  - tipc: check attribute length for bearer name
  - tipc: add extack messages for bearer/media failure
  - net_sched: sch_sfq: don't allow 1 packet limit
  - macsec: fix UAF bug for real_dev
  - partitions: mac: fix handling of bogus partition table
  - cpufreq: pmac32-cpufreq: Fix refcount leak bug
  - virtio_console: eliminate anonymous module_init & module_exit


author: chenyi <chenyi211@huawei.com> - 4.19.90-2504.3.0.0324
changelog:
  - !15862  tty: goldfish: Use tty_port_destroy() to destroy port
  - tty: goldfish: Use tty_port_destroy() to destroy port
  - !15843  tty: synclink_gt: Fix null-pointer-dereference in slgt_clean()
  - !15825  Fix CVE-2023-52973 for openEuler-1.0-LTS
  - tty: synclink_gt: Fix null-pointer-dereference in slgt_clean()
  - !15664  CVE-2025-21858
  - !15815  dm raid: fix accesses beyond end of raid member array
  - !15368  nfsd: clear acl_access/acl_default after releasing them
  - !15253  NFSD: prevent underflow in nfssvc_decode_writeargs()
  - vc_screen: don't clobber return value in vcs_read
  - vc_screen: modify vcs_size() handling in vcs_read()
  - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
  - !15380  media: cx25821: Fix the warning when removing the module
  - !15649  media: uvcvideo: Remove dangling pointers
  - !15814  wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads
  - dm raid: fix accesses beyond end of raid member array
  - wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads
  - geneve: Suppress list corruption splat in geneve_destroy_tunnels().
  - geneve: Fix use-after-free in geneve_find_dev().
  - media: uvcvideo: Remove dangling pointers
  - media: cx25821: Fix the warning when removing the module
  - nfsd: clear acl_access/acl_default after releasing them
  - NFSD: prevent underflow in nfssvc_decode_writeargs()


author: chenyi <chenyi211@huawei.com> - 4.19.90-2504.4.0.0325
changelog:
  - !15624  proc: fix use-after-free in proc_get_inode()
  - !15900  Backport mainline patches to avoid crash caused by rsize being 0
  - !15820  io_uring: prevent opcode speculation
  - !15751  fix-CVE-2022-49538
  - !15914  block: fix resource leak in blk_register_queue() error path
  - !15930  loop: fix UAF in mutex_spin_on_owner()
  - loop: loop_set_status_from_info() check before assignment
  - Revert "loop: loop_set_status_from_info() check before assignment"
  - block: fix resource leak in blk_register_queue() error path
  - smb: client: Update IO sizes after reconnection
  - smb: client: Store original IO parameters and prevent zero IO sizes
  - smb:client: smb: client: Add reverse mapping from tcon to superblocks
  - Revert "cifs: Prevent NULL pointer dereference caused by cifs_sb->rsize is 0"
  - !15830  ASoC: rt5645: Fix errorenous cleanup order
  - ASoC: rt5645: Fix errorenous cleanup order
  - io_uring: prevent opcode speculation
  - ALSA: jack: Fix mutex call in snd_jack_report()
  - ALSA: jack: Access input_dev under mutex
  - proc: fix use-after-free in proc_get_inode()


author: chenyi <chenyi211@huawei.com> - 4.19.90-2505.1.0.0326
changelog:
  - !16154  driver: base: fix UAF when driver_attach failed
  - !16148 v2  ipv6: mcast: extend RCU protection in igmp6_send()
  - !16153  scsi: pm8001: Fix abort all task initialization
  - !16152  video: fbdev: cirrusfb: check pixclock to avoid divide by zero
  - !16107  qede: confirm skb is allocated before using
  - !16112  mpage: fix softlockup in mpage_readahead()
  - !16104  md/raid1,raid10: don't ignore IO flags
  - driver: base: fix UAF when driver_attach failed
  - !16151  can: peak_usb: fix use after free bugs
  - scsi: pm8001: Fix abort all task initialization
  - video: fbdev: cirrusfb: check pixclock to avoid divide by zero
  - !16131  net: mdio: validate parameter addr in mdiobus_get_phy()
  - can: peak_usb: fix use after free bugs
  - ipv6: mcast: extend RCU protection in igmp6_send()
  - !16142  CVE-2023-53023
  - !16077  CVE-2022-49626
  - !16078  CVE-2022-49429
  - net: nfc: Fix use-after-free in local_cleanup()
  - !16123  netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function.
  - !16122  ndisc: extend RCU protection in ndisc_send_skb()
  - !16111  arp: use RCU protection in arp_xmit()
  - !16110  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
  - !16109  net: Fix CVE-2025-21763
  - !16126  net: openvswitch: fix leak of nested actions
  - net: mdio: validate parameter addr in mdiobus_get_phy()
  - net: openvswitch: fix leak of nested actions
  - netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function.
  - ndisc: extend RCU protection in ndisc_send_skb()
  - mpage: fix softlockup in mpage_readahead()
  - arp: use RCU protection in arp_xmit()
  - openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
  - neighbour: use RCU protection in __neigh_notify()
  - neighbour: delete redundant judgment statements
  - qede: confirm skb is allocated before using
  - md/raid1,raid10: don't ignore IO flags
  - !16082  CVE-2021-47668
  - !16089  mm/khugepaged: fix ->anon_vma race
  - !16071  Backport SMC patchs
  - mm/khugepaged: fix ->anon_vma race
  - !16054  jfs: add check read-only before truncation in jfs_truncate_nolock()
  - can: dev: can_restart: fix use after free bug
  - can: dev: can_restart(): post buffer from the right context
  - RDMA/hfi1: Prevent panic when SDMA is disabled
  - sfc: fix use after free when disabling sriov
  - sfc: error code if SRIOV cannot be disabled
  - net/smc: fix restoring of fallback changes
  - net/smc: fix closing of fallback SMC sockets
  - net/smc: propagate file from SMC to TCP socket
  - !16067  net: fix geneve_opt length integer overflow
  - !16058  udp: Fix memory accounting leak.
  - !16029  CVE-2022-49647
  - !16064  ndisc: Fix CVE-2025-21764
  - net: fix geneve_opt length integer overflow
  - ndisc: use RCU protection in ndisc_alloc_skb()
  - net: add dev_net_rcu() helper
  - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
  - udp: Fix memory accounting leak.
  - !15781  drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes()
  - !15780  staging: rtl8712: fix uninit-value in r871xu_drv_init()
  - jfs: add check read-only before truncation in jfs_truncate_nolock()
  - !16032  net: atm: fix use after free in lec_send()
  - net: atm: fix use after free in lec_send()
  - cgroup: fix kabi for css_set
  - cgroup: Use separate src/dst nodes when preloading css_sets for migration
  - !15993  Fix CVE-2025-37785
  - !15984  vlan: enforce underlying device type
  - ext4: fix OOB read when checking dotdot dir
  - ext4: optimize __ext4_check_dir_entry()
  - !15978  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
  - vlan: enforce underlying device type
  - !15953  Fix CVE-2020-36789
  - !15957  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
  - tracing: Fix use-after-free in print_graph_function_flags during tracer switching
  - iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
  - can: dev: can_get_echo_skb(): prevent call to kfree_skb() in hard IRQ context
  - drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes()
  - staging: rtl8712: fix uninit-value in r871xu_drv_init()


author: chenyi <chenyi211@huawei.com> - 4.19.90-2505.3.0.0327
changelog:
  - !16177  Fix CVE-2022-49850
  - !16176  Fix CVE-2022-49842
  - !16187  ata: libata-transport: fix double ata_host_put() in ata_tport_add()
  - !16188  nvmet: avoid potential UAF in nvmet_req_complete()
  - !16238  dm ioctl: fix misbehavior if list_versions races with module loading
  - !16200  drm/amdkfd: Fix an illegal memory access
  - dm ioctl: fix misbehavior if list_versions races with module loading
  - !16175  Fix CVE-2022-49915
  - drm/amdkfd: Fix an illegal memory access
  - nvmet: avoid potential UAF in nvmet_req_complete()
  - ata: libata-transport: fix double ata_host_put() in ata_tport_add()
  - nilfs2: fix deadlock in nilfs_count_free_blocks()
  - ASoC: soc-utils: Remove __exit for snd_soc_util_exit()
  - ASoC: core: Fix use-after-free in snd_soc_exit()
  - mISDN: fix misuse of put_device() in mISDN_register_device()
  - mISDN: fix possible memory leak in mISDN_register_device()
  - !16139  Bluetooth: Fix use after free in hci_send_acl
  - !16140  NFC: NULL out the dev->rfkill to prevent UAF
  - !16145  CVE-2022-49755
  - usb: gadget: f_fs: Add unbind event before functionfs_unbind
  - usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait
  - usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait
  - NFC: NULL out the dev->rfkill to prevent UAF
  - Bluetooth: Fix use after free in hci_send_acl


author: wangjie<wangjie294@huawei.com> -1.0.7-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Synchronize patches from community
         Verbose-CLI-start-pulling-Shared-Brotli.patch
         Ensure-decompression-consumes-all-input.patch
         fix-MSVC-configuration-and-c++-compilation-fails.patch
         fix-executable-mode-of-decode-js.patch
         Fix-include-for-EMCC-build.patch
         Add-an-option-to-avoid-building-shared-libraries.patch
         Disable-PIC-in-EMCC-mode.patch
         Add-missing-const-to-a-couple-of-kConstants.patch
         Move-TZCNT-and-BSR-intrinsics-and-add-MSVC-versions.patch


author: liuxu <liuxu156@huawei.com> - 1:1.31.1-21
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363


author: xinghe <xinghe2@h-partners.com> - 1.16.1-7
changelog:
  - Type:cves
  - CVE:CVE-2023-31130 CVE-2023-31124 CVE-2023-31147
  - SUG:NA
  - DESC:fix CVE-2023-31130 CVE-2023-31124 CVE-2023-31147


author: wangjiang <wangjiang37@h-partners.com> - 2023.2.60-3
changelog:
  - remove expired and sync new certificates
    Removing:
      Security Communication Root CA
      Trustis FPS Root CA
    Adding:
      Atos TrustedRoot Root CA ECC G2 2020
      Atos TrustedRoot Root CA ECC TLS 2021
      Atos TrustedRoot Root CA RSA G2 2020
      Atos TrustedRoot Root CA RSA TLS 2021
      CommScope Public Trust ECC Root-01
      CommScope Public Trust ECC Root-02
      CommScope Public Trust RSA Root-01
      CommScope Public Trust RSA Root-02
      D-Trust SBR Root CA 1 2022
      D-Trust SBR Root CA 2 2022
      LAWtrust Root CA2 (4096)
      Sectigo Public Email Protection Root E46
      Sectigo Public Email Protection Root R46
      Sectigo Public Server Authentication Root E46
      Sectigo Public Server Authentication Root R46
      SSL.com Client ECC Root CA 2022
      SSL.com Client RSA Root CA 2022
      SSL.com TLS ECC Root CA 2022
      SSL.com TLS RSA Root CA 2022
      Telekom Security SMIME ECC Root 2021
      Telekom Security SMIME RSA Root 2023
      Telekom Security TLS ECC Root 2020
      Telekom Security TLS RSA Root 2023
      TrustAsia Global Root CA G3
      TrustAsia Global Root CA G4


author: chenyanpanHW <chenyanpan@huawei.com> - 0.10.10-8
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-cachefilesd-fix-abort-in-decant_cull_table.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: yanglu <yanglu60@huawei.com> - 1.15.14-5
changelog:
  - Type:cves
  - ID:CVE-2018-19876 CVE-2019-6461 CVE-2019-6462
  - SUG:NA
  - DESC: fix CVE-2018-19876 CVE-2019-6461 CVE-2019-6462


author: chenyanpanHW <chenyanpan@huawei.com> - 1.4.33-3
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-T0ProcACK-fix-a-potential-problem.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-CmdGetSlotStatus-fix-potential-read-of-uninitialized.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0003-ReadUSB-fix-potential-read-of-uninitialized-buffer.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0004-IFDHSetProtocolParameters-handle-ATR_GetConvention-e.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0005-PPS_Match-fix-potential-read-of-uninitialized-buffer.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0006-dw2i-fix-potential-integer-overflow.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: haowenchao <haowenchao@huawei.com> - 6.10-3
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0000-Add-missing-position-handling-to-mount-parameters-gi.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-CVE-2021-20208.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0003-cifs-utils-fix-probabilistic-compiling-error.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0004-mount.cifs-fix-max-buffer-size-when-parsing-snapshot.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0005-cifs.upcall-update-the-cap-bounding-set-only-when-CA.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0006-mount.cifs-update-the-cap-bounding-set-only-when-CAP.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0007-CVE-2022-27239.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0008-CVE-2022-29869.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0009-mount.cifs-fix-crash-when-mount-point-does-not-exist.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0010-cifs.upcall-fix-regression-in-kerberos-mount.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: Liquor <lirui130@huawei.com> - 11-5
changelog:
  - Delete remaining references to the removed http pin
    Install cryptsetup and tpm2_pcrlist in the initramfs
    Add device TCTI library to the initramfs


author: Dan Walsh <dwalsh@fedoraproject.org> - 2.73-1
changelog:
  - Define spc_t as a container_domain, so that container_runtime will transition
  to spc_t even when setup with nosuid.


author: zhongjiawei<zhongjiawei1@huawei.com> - 1.2.0-213
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:bump ttrpc to fix containerd-shim socket connect increase leak after restart docker


author: zhongjiawei<zhongjiawei1@huawei.com> - 1.2.0-217
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:disable Transparent HugePage for shim process if SHIM_DISABLE_THP is set


author: lijian<lijian2@kylinos.cn> - 1:1.1.0-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:rebuild for golang cvefix: CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538


author: jiangchuangang <jiangchuangang@huawei.com> - 8.32-6
changelog:
  - skip testcase for overlay filesystem because of no inotify_add_watch
    add test-skip-overlay-filesystem-because-of-no-inotify_add_watch.patch


author: jiangchuangang<jiangchuangang@huawei.com> - 8.32-9
changelog:
  - sync patches from community
  - add backport-pr-fix-infinite-loop-when-double-spacing.patch
    backport-wc-ensure-we-update-file-offset.patch


author: jiangchuangang <jiangchuangang@huawei.com> - 8.32-10
changelog:
  - sync patches from community
  - add backport-who-fix-only-theoretical-overflow.patch
        backport-tac-handle-short-reads-on-input.patch
        backport-setenv-Don-t-crash-if-malloc-returns-NULL.patch
        backport-who-don-t-crash-if-clock-gyrates.patch
        backport-doc-od-strings-clarify-operation.patch


author: cenhuilin <cenhuilin@kylinos.cn> - 8.32-12
changelog:
  - sync patches from community
  - add backport-coverity-utimens.patch
        backport-fuse-portal.patch
        backport-expr-unmatched-par.patch


author: wangjiang <app@cameyan.com> - 8.32-14
changelog:
  - sync patches from community
  - add backport-numfmt-don-t-require-a-suffix-with-from-iec-i.patch
        backport-sort-fix-debug-buffer-overrun.patch
        backport-tac-avoid-out-of-bounds-access.patch
        backport-yes-avoid-failure-on-CHERI-protected-systems.patch


author: fuanan <fuanan3@h-partners.com> - 2.13-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert fix CVE-2015-1197 because it causes AT testcases problems


author: chenziyang <chenziyang4@huawei.com> - 2.13-7
changelog:
  - Type:CVE
  - ID:CVE-2015-1197
  - SUG:NA
  - DESC:Fix CVE-2015-1197, delete revert-CVE-2015-1197.patch because new patch
         will fix the problem brought by old-CVE-2015-1197.patch, so we delete 
         revert-CVE-2015-1197.patch


author: wangxiao <wangxiao184@h-partners.com> - 7.2.8-6
changelog:
  - arm64: fix again segfault in arm64_is_kernel_exception_frame
    arm64: fix a potential segfault when unwind frame


author: Tomáš Mráz <tmraz@redhat.com> - 20180921-1.git391ed9f
changelog:
  - OpenSSH: Generate policy for sign algorithms
  - Enable >= 255 bits EC curves in FUTURE policy
  - OpenSSH: Add group1 key exchanges in LEGACY policy
  - NSS: Add SHA224 to hash lists
  - Print warning when update-crypto-policies --set FIPS is used
  - fips-mode-setup: Kernel boot options are now modified with grubby


author: Tomáš Mráz <tmraz@redhat.com> - 20180925-1.git71ca85f
changelog:
  - Use Recommends instead of Requires for grubby
  - Revert setting of HostKeyAlgorithms for ssh client for now


author: yanglongkang <yanglongkang@huawei.com> - 2.3.3-4
changelog:
  - add buildrequire gcc
    add make check
    backport upstream patches to solve several problems -epoch2


author: chenyanpanHW <chenyanpan@huawei.com> - 2.3.3-5
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-cryptsetup-add-system-library-paths.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fix-compat-test.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0003-Check-segment-gaps-regardless-of-heap-space.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0004-Fix-posible-buffer-overflows-in-LUKS-conversion.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0005-Fix-a-memleak-in-blockwise-test.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0006-CVE-2021-4122.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: xinghe <xinghe2@h-partners.com> - 4.11.12-30
changelog:
  - Type:cves
  - CVE:CVE-2022-2127 CVE-2023-34966 CVE-2023-34967
  - SUG:NA
  - DESC:fix CVE-2022-2127 CVE-2023-34966 CVE-2023-34967


author: zhouyihang <zhouyihang3@h-partners.com> - 7.71.1-34
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dynbuf: provide curlx_ names for reuse by the curl tool
         curl: use curlx_dynbuf for realloc when loading config files
         curl: make file2string use dynbuf
         paramhlp: fix CRLF-stripping files with "-d @file"
         libssh2: set length to 0 if strdup failed
         openldap: create ldap URLs correctly for IPv6 addresses
         multi: avoid memory-leak risk
         tool_cb_rea: limit rate unpause for -T . uploads
         tool_cfgable: free {proxy_}cipher13_list on exit


author: zhouyihang <zhouyihang3@h-partners.com> - 7.71.1-38
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:multi: check that the multi handle is valid in curl_multi_assign


author: xingwei <xingwei14@h-partners.com> - 7.71.1-41
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:altsvc: avoid integer overflow in expire calculation
         test391: verify --path-as-is with redirect
         urlapi: fix redirect to a new fragment or query (only)


author: senlin <xiasenlin1@huawei.com> - 1.0.0-19
changelog:
  - Type: Correction of bad behavior
  - ID: NA
  - SUG: NA
  - DESC: Specify the specific sudo commands for abuild users


author: hongjinghao <hongjinghao@huawei.com> - 1:1.12.16-23
changelog:
  - add backport-bus-dir-watch-Do-not-crash-with-128-dirs.patch	
  backport-Do-not-crash-when-reloading-configuration.patch


author: zhoushuiqing <zhoushuiqing2@huawei.com> - 3.6.2-5
changelog:
  - Type:CVE
  - CVE:CVE-2005-1849,CVE-2016-9840,CVE-2016-9841,CVE-2016-9843,CVE-2018-25032,CVE-2022-37434
  - SUG:NA
  - DESC:backport patchs fix zlib cves: CVE-2005-1849 CVE-2016-9840
         CVE-2016-9841 CVE-2016-9843 CVE-2018-25032 CVE-2022-37434
         backport-fix-CVE-2005-1849.patch
         backport-fix-CVE-2016-9840.patch
         backport-fix-CVE-2016-9841.patch
         backport-fix-CVE-2016-9843.patch
         backport-fix-CVE-2018-25032.patch
         backport-fix-CVE-2022-37434-1.patch
         backport-fix-CVE-2022-37434-2.patch


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.2-10
changelog:
  - Type:CVE
  - ID:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
  - SUG:restart
  - DESC:fix CVE-2022-2795,CVE-2022-38177 and CVE-2022-38178


author: Roberto Sassu <roberto.sassu@huawei.com> - 0.3.94-1
changelog:
  - Add obj_label attribute in file list
  - Replace hard coded permission
  - Set user.digest_list xattr
  - Bug fixes


author: gaihuiying <gaihuiying1@huawei.com> - 4.2.23-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:remove recommends rpm-plugins-systemd-inhibit
         backport community patches and fix CVE-2021-3445
         delete duplicate python3-libdnf dependency


author: renmingshuai <renmingshuai@huawei.com> - 2.82-14
changelog:
  - Type:bugfix
  - Id:
  - SUG:NA
  - DESC:Reduce code duplication, reuse existing functions
         Fix memory leak when using --dhcp-optsfile with DHCPv6 options


author: lingsheng <lingsheng1@h-partners.com> - 2.82-18
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Update DNS records after pruning DHCP leases
         Fix potential memory leak
         Fix possible SIGSEGV in bpf.c
         adapt bugfix allow binding mac with ipv6


author: zhangbowei<zhangbowei@kylinos.cn> - 1.0.0.rc3-219
changelog:
  - Type: bugfix
  - CVE:  NA
  - SUG:  NA
  - DESC: fix the bug when runc failed to update fat container memory value


author: lifeifei<lifeifei@kylinos.cn> - 2.0.11-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix: if libvirt and ebtables are installed at the same time, ping the operation prompts "sendmsg: Operation not permitted".


author: xinghe <xinghe2@h-partners.com> - 2.0.11-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix ebtables-restore --noflush failed when ebtables is uninstall


author: Jiabo Feng<fengjiabo1@huawei.com> - 202002-21
changelog:
  - update release. commit(2723c0159f0f84e2169b124dca9f4eb0dc6863f9) has been merged into commit(a8c3711f01ae9a152f0e8cede2547b4c54712400)


author: lvxiangcong<lvxiangcong@kylinos.cn> - 3.4.14-6
changelog:
  - Type:CVE
  - CVE:CVE-2022-3064
  - SUG:NA
  - DESC: backport fix CVE-2022-3064 for openEuler-20.03-LTS-SP4


author: lvxiangcong<lvxiangcong@kylinos.cn> - 3.4.14-7
changelog:
  - Type:CVE
  - CVE:CVE-2022-41723
  - SUG:NA
  - DESC: backport fix CVE-2022-41723 for openEuler-20.03-LTS-SP4


author: lvxiangcong<lvxiangcong@kylinos.cn> - 3.4.14-9
changelog:
  - Type:CVE
  - CVE:CVE-2023-32082 CVE-2021-28235
  - SUG:NA
  - DESC: backport fix CVE-2023-32082 and CVE-2021-28235


author: lvxiangcong <lvxiangcong@kylinos.cn> - 3.4.14-11
changelog:
  - Type:CVES
  - ID:CVE-2024-24791 CVE-2023-45288 CVE-2022-1962 CVE-2022-41725 CVE-2022-2880
       CVE-2024-24785 CVE-2023-45290 CVE-2022-32148 CVE-2023-29406 CVE-2023-39326
       CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 
  - SUG:NA
  - DESC:Batch fix cves through rebuild


author: dillon chen <dillon.chen@gmail.com> - 2.4.5-5
changelog:
  - CVE-2020-18651,CVE-2020-18652
  - CVE-2021-36048,CVE-2021-39847,CVE-2021-42530,CVE-2021-36046,CVE-2021-36055
  - CVE-2021-40716,CVE-2018-12648,CVE-2021-36054,CVE-2021-36047,CVE-2021-36052
  - CVE-2021-36058,CVE-2021-36045,CVE-2021-42531,CVE-2021-36064,CVE-2021-42529
  - CVE-2021-42528,CVE-2021-36050,CVE-2021-40732
  - CVE-2021-36056,CVE-2021-42532,CVE-2021-36053,CVE-2021-36051


author: wangkai <wangkai385@huawei.com> - 1.0.6-20
changelog:
  - Rebuild for fix log4j1.x cves

   * Thu Mar 5 2020 wangzhishun <wangzhishun1@huawei.com> - 1.0.6-19
   - Package init


author: wangkai <13474090681@163.com> - 1:2.3.0-1
changelog:
  - Update to 2.3.0 for fix CVE-2022-48682
  - Add ncurses mode for interactive file deletion (plain mode still available via --plain or ./configure).
  - Add --minsize --maxsize --time --order=ctime --log --deferconfirmation --cache option.
  - Use configure script for installation (Autotools/Automake).
  - Rename cs command ("clear all selections") from cs to csel.
  - Rename igs command ("invert selections") from igs to isel.
  - Add "prune" command as synonym for DELETE key.
  - Clear selections after deleting files via prune/DELETE.
  - Fix dependency issues when fdupes is configured to not use ncurses.
  - Do not enter ncurses mode when --immediate option given.


author: liqiuyu <liqiuyu@kylinos.cn> - 0.4.0-10
changelog:
  - add bz1766993-fence_virtd-1-fix-segfault-no-domains.patch
  - add bz1766993-fence_virtd-2-return-mainloop-on-interrupt.patch


author: openEuler Buildteam <buildteam@openeuler.org> - 2:4.7.0-4
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:Fix test failures ran as root and enable -xautofs and disable leaf opt


author: xu_ping <xuping33@huawei.com> - 3.0.3.32900-9
changelog:
  - Fix connect linking to web database by modifying the firebird.conf items to make client and server compatible


author: zhouyihang <zhouyihang3@h-partners.com> - 0.6.6-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:To reduce unnecessary loading of ebtables-related kernel modules
         fix(nm): release NM client after a timeout


author: yangzhuangzhuang<yangzhuangzhuang1@huawei.com> - 2.6.4-3
changelog:
  - The autoreconf command is used during compilation.
    Therefore,the automake and autoconf compilation dependencies need to added.


author: liyuxiang <liyuxiang@ncti-gba.cn> - 2:2.8.1-2
changelog:
  - Fix CVE-2022-39316
  - Fix CVE-2022-39318
  - Fix CVE-2022-39319
  - Fix CVE-2022-39347
  - Fix CVE-2022-41877


author: Funda Wang <fundawang@yeah.net> - 2:2.11.1-1
changelog:
  - 2.11.1
  - Fix CVE-2023-40567
  - Fix CVE-2023-40569
  - Fix CVE-2023-40188
  - Fix CVE-2023-40186
  - Fix CVE-2023-40181
  - Fix CVE-2023-39353
  - Fix CVE-2023-39352
  - Fix CVE-2023-39356
  - Fix CVE-2023-39350
  - Fix CVE-2023-39351
  - Fix CVE-2023-39354
  - Fix CVE-2023-40589


author: wangkai <13474090681@163.com> - 2:2.11.7-1
changelog:
  - Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
    CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
    CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660


author: openEuler Buildteam <buildteam@openeuler.org> - 2.9.9-0
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:update fuse2 from 2.9.7 to 2.9.9,
         update fuse3 from 3.2.3 to 3.9.0


author: yinbin <yinbin8@huawei.com> - 1.0.2-77
changelog:
  - openGauss: support kernel connnect
  - xdp: support stack bind numa
  - CFG: fix xdp iface check error
  - fix build error in 2003SP4
  - cfg: show dpdk args after dpdk_adjust_args
  - fix free null pointer when no matching device is found
  - update test/unitest/ltran/ltran_param_test.c.
  - Fix the wrong spelling description in the notes and logs
  - LWIP: adjust position of shutdown in callback of connect
  - fix socket of control thread is overwirtten due to another primary process start


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-79
changelog:
  - cfg: notify that it's unsupported, when stack_num > 1
  - fix errno == ETIMEFOUT
  - fix epoll and recv threads blocked on the same semaphore. data cannot be read in recv thread.
  - fix rpc pool leak, when thread exits
  - remove app_bind_numa check from exclude_cpus
  - openGauss: fix connection attempt failed
  - openGauss: fix gs_ctl switchover failed


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-80
changelog:
  - Connect: execute lwip connect if dst_ip and host_ip are in the same network.
  - kernerl bind: add ipv6 add check
  - openGauss unsupport_tcp_optname
  - fix a contention issue when rpc pools are added to rpc_pool_array


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-82
changelog:
  - DUMP: fix abnomal printing in the dump process.
  - SIGNAL: Adjust hijack sigal table to hijack SIGABRT SIGQUIT and delet SIGKILL
  - SIGNAL: Adjust sigaction function to keep lstack signal function executed successfully.


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-83
changelog:
  - SIGNAL: block SIGSEGV during exit process
  - Stack: unset stack_stop, while stacks exit by rpc message.
  - fix the memory leak when using strdup


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-84
changelog:
  - update gazelle max numa nodes 8
  - Protocal: fixing deathlock between protocol threads and app thread
  - Connect: fix benchmark_dws connect failed
  - RTC-mode: fix gazellectl can't print connenct info
  - add xdp tx checksum/tso offload


author: Shujian Zhao <zhaoshujian@huawei.com> 10.3.0-3
changelog:
  - Type:Fix
  - ID:NA
  - SUG:NA
  - DESC:Change isl version from isl-0.21 to isl-0.16.1 to fix the deja test ice.


author: Shujian Zhao <zhaoshujian@huawei.com> 10.3.0-4
changelog:
  - Type:Fix
  - ID:NA
  - SUG:NA
  - DESC:Add missing file and start project build to fix the nag ICE issue.


author: hugel <gengqihu2@h-partners.com> - 9.52-23
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Sync some patches from community
         backport-Fix-memory-leak-in-pdfwrite-device.patch
         backport-Fix-memory-leak-on-error-in-bitmap_paint-and-its-cal.patch
         backport-Fix-memory-leaks-in-tiffsep.patch


author: yaoxin <yao_xin001@hoperun.com> - 5.2.2-1
changelog:
  - Update to 5.2.2
    * Fixes for CVE-2023-48161 (bsc#1217390), CVE-2022-28506 (bsc#1198880)
    * Address SF issue #151: A heap-buffer-overflow in gif2rgb.c:294:45
    * Address SF issue #166: a read zero page leads segment fault in
      getarg.c and memory leaks in gif2rgb.c and gifmalloc.c


author: fuanan <fuanan3@h-partners.com> - 2.27.0-16
changelog:
  - Type:CVE
  - ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
  - SUG:NA
  - DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815


author: fuanan <fuanan3@h-partners.com> - 2.27.0-17
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:enable multithreading compilation and installation,
         move Git.3pm.gz to perl-Git,avoid installation conflicts,
         change BuildRequires from pcre-devel to pcre2-devel.


author: huyubiao <huyubiao@huawei.com> - 2.27.0-18
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
         Delete git-core-doc from git, git-core-doc is provided by git-help.


author: fuanan <fuanan3@h-partners.com> - 2.27.0-19
changelog:
  - Type:CVE
  - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
  - SUG:NA
  - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465


author: chengyechun <chengyechun1@huawei.com> - 2.28-99
changelog:
  - Type:CVE
  - ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
  - SUG:NA
  - DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602


author: chengyechun <chengyechun1@huaiwe.com> - 2.28-101
changelog:
  - Type:bugfix
  - ID:
  - SUG:NA
  - DESC:nscd: Use errval, not errno to guide cache update
         nsce :Skip unusable entries in first pass in prune_cache


author: Feifei Wang <wangfeifei@hygon.cn> - 2.28-102
changelog:
  - x86: Reversing calculation of __x86_shared_non_temporal_threshold
    x86: Optimizing memcpy for AMD Zen architecture
    x86: Add Hygon Dhyana support
    https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=d3c57027470b
    https://sourceware.org/git/?p=glibc.git;a=commit;h=59803e81f96b479c17f583b31eac44b57591a1bf
    https://sourceware.org/git/?p=glibc.git;a=commit;h=ade8b817fead73b302d08c88cd44ea2ea56793d4


author: wanglimin<wanglimin@xfusion.com> - 3.30.1-4
changelog:
  - fix msg error in zh_CN.po for page files of index, a11y-*,
  - about-*,accounts-*,backup-*,bluetooth-*,clock-*,color-*,
  - contacts-*,disk-*


author: wanglimin<wanglimin@xfusion.com> - 3.30.1-5
changelog:
  - fix msg error in zh_CN.po for page files of :
  - files-*,gnome-*,hardware-*,help-*,keyboard-*,look-*,mouse-*


author: wanglimin<wanglimin@xfusion.com> - 3.30.1-7
changelog:
  - fix msg error in zh_CN.po for page files of :
  - power-*,prefs-*,printing-*,privacy-*,screen-*,session-*,sharing-*
  - shell-*,sound-*,status-*,tips-*,user-*,video-*,wacom-*
  - append some missing msg


author: konglidong <konglidong@uniontech.com> - 0-30.20180720git
changelog:
  - update java source from 1.3 to 1.8
  - modify buildrequires from java-devel to java-1.8.0-openjdk-devel


author: wangshuo <wangshuo@kylinos.cn> - 1.15.7-42
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport the upstream patch, fix the overflow issue in runtime.netpollWaiters


author: wujichao <wujichao1@huawei.com> - 1.15.7-50
changelog:
  - Type:CVE
  - CVE:CVE-2024-45336
  - SUG:NA
  - DESC:remove 0001-drop-hard-code-cert.patch and modify CVE-2024-45336


author: lvying <lvying6@huawei.com> - 2.7-3
changelog:
  - Type:enhancement
  - ID:NA
  - SUG: NA
  - DESC: peripheral package quality reinforcement: backport bugfix patches from community


author: gaihuiying <eaglegai@163.com> - 1.31.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix adjust to abseil-cpp 20210324,since it dont provides absl_dynamic_annotations library anymore


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.04-32
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
         net/bootp: Fix unchecked return value
         fs/iso9660: Avoid reading past the entry boundary
         fs/iso9660: Incorrect check for entry boundary
         fs/iso9660: Prevent skipping CE or ST at start of continuation area
         fs/iso9660: Prevent read past the end of system use area
         fs/iso9660: Add check to prevent infinite loop
         gentpl.py: Remove .interp section from .img files
         kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
         font: Reject fonts with negative max_char_width or max_char_height
         font: Assign null_font to unknown_glyph
         font: Check return value of grub_malloc() in ascii_glyph_lookup()


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.04-36
changelog:
  - Type:CVE
  - CVE:CVE-2023-4692 CVE-2023-4693
  - SUG:NA
  - DESC:fs/ntfs: Make code more readable
         fs/ntfs: Fix an OOB read when parsing a volume label
         fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
         fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
         fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
         fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.04-38
changelog:
  - Type:CVE
  - CVE:CVE-2024-1048
  - SUG:NA
  - DESC:grub-set-bootflag: Fix for CVE-2024-1048
         commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
         kern/acpi: Skip NULL entries in RSDT and XSDT
         util/grub-mount: Check file path sanity
         kern/acpi: Use xsdt_addr if present
         commands/acpi: Use xsdt_addrifpresent


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.04-40
changelog:
  - Type:CVE
  - CVE:CVE-2024-45781,CVE-2024-45782,CVE-2024-56737,CVE-2024-45780,CVE-2024-45783,CVE-2024-49504,CVE-2025-0624,CVE-20
  24-45774,CVE-2024-45775,CVE-2025-0622,CVE-2025-0622,CVE-2025-0622,CVE-2024-45776,CVE-2024-45777,CVE-2025-0690,CVE-20
  25-1118,CVE-2024-45778,CVE-2024-45779,CVE-2025-0677,CVE-2025-0684,CVE-2025-0685,CVE-2025-0686,CVE-2025-0689,CVE-2025
  -0678,CVE-2025-1125
  - SUG:NA
  - DESC:fix the vulnerabilities announced on February 18th, 2025


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.2.3-1
changelog:
  - Upgrade to 1.2.3
  - Update Version, Release, Source0, BuildRequires
  - Update stage 'build', 'install', 'check' and 'files'


author: Funda Wang <fundawang@yeah.net> - 1.16.2-6
changelog:
  - fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
    CVE-2024-47607, CVE-2024-47615, CVE-2024-47835


author: yaoxin <yao_xin001@hoperun.com> - 1.16.2-7
changelog:
  - Fix cves:
    CVE-2024-47606,CVE-2024-47613,CVE-2024-47775,CVE-2024-47776
    CVE-2024-47777,CVE-2024-47778,CVE-2024-47774,CVE-2024-47540
    CVE-2024-47602,CVE-2024-47601,CVE-2024-47834,CVE-2024-47537
    CVE-2024-47597,CVE-2024-47543,CVE-2024-47596,CVE-2024-47539
    CVE-2024-47546


author: luhuaxin <luhuaxin@huawei.com> - 1.3-39
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC: move gxvattr to main package, move AUTHORS to license folder


author: Jia Chao <jiac13@chinaunicom.cn> - 3.3.4-4
changelog:
  - fix: use $HOME rather than /home/abuild, suit for all buildtools.
  - fix: yarn have ELF bin, not noarch at all.


author: xinghe <xinghe2@h-partners.com> - 2.2.16-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:server: 'source' interface ignored from 'default-server' directive


author: yaoxin <yaoxin30@h-parters.com> - 1.12.1-1
changelog:
  - Update to 1.12.1 and fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-21
changelog:
  - Type:CVE
  - ID:CVE-2023-27522, CVE-2023-25690
  - SUG:restart
  - DESC:fix CVE-2023-27522, CVE-2023-25690


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-23
changelog:
  - Type:CVE
  - ID:CVE-2023-31122, CVE-2023-45802
  - SUG:restart
  - DESC:fix CVE-2023-31122 and CVE-2023-45802


author: chengyechun <chengyechun1@huaiwe.com> - 2.4.43-24
changelog:
  - Type:CVE
  - ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
  - SUG:NA
  - DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-25
changelog:
  - Type:CVE
  - ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
  - SUG:NA
  - DSEC:fix some CVEs


author: yangjiaqi <yangjiaqi16@huawei.com> - 2.0.18-15
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: keep the service status unchanged after iSulad service upgrade


author: gaoxingwang<gaoxingwang@huawei.com> - 10.04-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: ifup-eth: add a new PERSISTENT_DHCLIENT_IPV6 option for IPv6 dhclient daemon


author: zhangxingrong <zhangxingrong@uniontech.com> - 3.16-4
changelog:
  - iperf3 now builds correctly on architectures without native support for 64-bit atomic types, by linking with the libatomic library


author: wangkai <13474090681@163.com> - 3.17.1-1
changelog:
  - Update to 3.17.1
  - iperf3 no longer changes its current working directory in --daemon mode. This results in more 
    predictable behavior with relative paths, in particular finding key and credential files for authentication.
  - A new --json-stream option has been added to enable a streaming output format, consisting of 
    a series of JSON objects (for the start of the test, each measurement interval, and the end of the test) separated by newlines
  - UDP tests now work correctly between different endian hosts
  - The --fq-rate parameter now works for --reverse tests
  - The statistics reporting interval is now available in the --json start test object


author: yanglu <yanglu72@h-partners.com> - 5.5.0-19
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:lib:names:check calloc return value in db_names_alloc
         fix fd leak when playing with netns


author: yanglu <yanglu72@h-partners.com> - 20190709-9
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:fix ping6 binding to VRF and address
         Avoid binding to non-VRF
         Fix ARP protocol field for AX.25 and NETROM


author: jingxiaolu <lujingxiao@huawei.com> - 0.9.5-21
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:restart
  - DESC:add repo to local image when output transporter is docker://


author: wutao <wutao61@huawei.com> - 2.0.14-9
changelog:
  - fix folllowing CVE in this revision
    CVE-2018-18873
    CVE-2018-19541 
    CVE-2018-9055
    CVE-2018-9154 
    CVE-2018-19539 
    CVE-2018-20570
    CVE-2018-9252 
    CVE-2018-19540 
    CVE-2018-20622
    CVE-2018-19139


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.422-b05.6
changelog:
  - let support-KAE-zip.patch not install libz.so on loongarch64
  - update LoongArch64 port to 8u422
  - fix changelog date error


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.432.b06-1
changelog:
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
  - modified GCC-12-reports-some-compiler-warnings.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
  - add Backport-8057910-G1-BOT-verification-should-not-pass.patch
  - add Backport-8069330-and-adapt-G1GC-related-optimization.patch
  - add SA-redact-support-password.patch


author: kuenking111 <wangkun49@huawei.com> -1:1.8.0.432.b06-2
changelog:
  - modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
  - add 8253072-XERCES-version-is-displayed-incorrect.patch
  - add 8159461-8288556-getComponentType.patch
  - add 8136926-phi-NULL-assert-in-PhaseIdealLoop-try_move_s.patch
  - add 8269934-RunThese24H.java-failed-with-EXCEPTION_ACCES.patch


author: kuenking111 <wangkun49@huawei.com> - 1:17.0.13.11-4
changelog:
  - add Add-jbolt-feature.patch
  - add Enable-TLS-to-communciation-between-JBooster-Server-.patch
  - add SA-redact-support-password.patch
  - add Add-specialized-hashmap-version-of-the-long-type.patch
  - add Implement-JBooster-RPC-byte-alignment.patch
  - add Optimize-LazyAOT-klasses-sending-strategy.patch
  - add Add-KAE-zip-GzipKAEBenchmark-Benchmark.patch
  - add Add-Fix-clear-mark-for-NativeGotJump.patch
  - add 8323066-TestSkipRebuildRemsetPhase.java-fails-with-S.patch
  - modify downgrade-the-glibc-symver-of-memcpy.patch


author: kuenking111 <wangkun49@huawei.com> - 1:17.0.13.11-7
changelog:
  - modify Add-jbolt-feature.patch
  - modify Add-specialized-hashmap-version-of-the-long-type.patch
  - modify Enable-TLS-to-communciation-between-JBooster-Server-.patch


author: Benshuai5D <benshuai5d@huawei> - 1:17.0.14.7-0
changelog:
  - update to 17.0.14
  - modify 8264805-Backport-Ahead-of-Time-Compiler.patch
  - modify 8280872-Reorder-code-cache-segments-to-improv.patch
  - modify 8323066-TestSkipRebuildRemsetPhase.java-fails-with-S.patch
  - modify Backport-Important-Fixed-Issues.patch
  - modify add-version-txt.patch
  - modify jdk17-Add-KAE-provider.patch


author: yaoxin <yao_xin001@hoperun.com> - 1.5.4-1
changelog:
  - Upgrade to 1.5.4 for fix cves: CVE-2022-40149,CVE-2022-40150,
    CVE-2022-45685,CVE-2022-45693 and CVE-2023-1436


author: sunhai <sunhai10@huawei.com> - 0.15-7
changelog:
  - Handle yet another out of memory condition
  - Fix issue 854 Set error json_tokener_error_memory in
  - Issue 857 fix a few places where json_tokener should
  - Handle NULL gracefully in json_tokener_free
  - Issue 881 don t allow json_tokener_new_ex with a dep


author: Lichang Zhao<zhaolichang@huawei.com> - 1.11.1-13
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix the problem that sandbox stratovirt with network devices fails to start


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 2.0.20-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix issue about iomem file that contains too many contens.As a result,the kdump service failed


author: snoweay <snoweay@163.com> - 2.0.20-15
changelog:
  - Add support for quick kexec
    kexec: Add quick kexec support
    arm64: Quick kexec implementation for arm64


author: Yu Peng <yupeng@kylinos.cn> - 0.8.4-32
changelog:
  - multipathd: fix check_path errors with removed map.
                sync community patches:
  	      multipathd-fix-check_path-errors-with-removed-map.patch
  	      libmultipath-make-dm_get_map-status-return-codes-sym.patch


author: caixiaomeng<caixiaomeng2@huawei.com> -1:0.9.1-23
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ignore sssnic module when building hotpatch to fix sssnic wrongly dependency of sssnic


author: wangyuhang <wangyuhang27@huawei.com> - 1:2020.0.0-8
changelog:
  - solve the problem of dereference null return value when moving a job to the head of the linked list


author: zhangxiaoyu<zhangxiaoyu58@huawei.com> - 2.0.9-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix update cpu-rt period failed and fix layer size type as int64


author: jikai<jikai11@huawei.com> - 2.0.9-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix potential log error, empty pointer reference and overflow


author: yanzhihua <yanzhihua4@huawei.com> - 12.10.0-25
changelog:
  - Type:enhancement
  - Id:NA
  - SUG:NA
  - DESC:ldconfig_scriptlets does not exist so modify the use of ldconfig, and rename the patch


author: zhangyao<zhangyao108@huawei.com> - 2.35.2-13
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         backport-column-segmentation-fault-on-invalid-unicode-input-passed-to-s-option.patch
         backport-su-offer-usernames-rather-than-files.patch
         backport-Fix-memory-leaks-in-the-chcpu.patch
         backport-logger-fix-prio-prefix-doesnot-use-priority-default.patch
         backport-mcookie-fix-infinite-loop-when-use-f.patch
         backport-logger-realloc-buffer-when-header-size-changed.patch
         backport-logger-fix-size-use-for-stdin.patch
         backport-vipw-flush-stdout-before-getting-answer.patch
         backport-chfn-Make-readline-prompt-for-each-field-on-a-separate-line.patch
         backport-chfn-flush-stdout-before-reading-stdin-and-fix-uninitialized-variable.patch
         backport-chsh-fflush-stdout-before-reading-from-stdin.patch
         backport-login-Restore-tty-size-after-calling-vhangup.patch
         backport-lsblk-fix-endless-loop-if-device-specified-more-than-once.patch
         backport-libblkid-avoid-buffer-overflow-in-ocfs-superblock-parsing.patch
         backport-libblkid-use-checksum-for-jmicron.patch
         backport-libblkid-cleanup-indentation.patch
         backport-libblkid-fix-jmicron-checksum-and-LE-to-CPU.patch
         backport-libblkid-nvidia_raid-verify-superblock-size.patch
         backport-libblkid-nvidia_raid-validate-checksum.patch


author: cenhuilin <cenhuilin@kylinos.cn> - 2.35.2-15
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         backport-uuidd-fix-open-lock-state-issue.patch


author: fuanan <fuanan3@h-partners.com> - 2.35.2-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         backport-include-c.h-add-helpers-for-unaligned-structure-acce.patch
         backport-libblkid-drbd-reduce-false-positive.patch


author: Yu Peng <yupeng@kylinos.cn> - 2.35.2-19
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
  	   backport-libfdisk-fix-fdisk_reread_changes-for-extended-partitions.patch


author: chenyanpanHW <chenyanpan@huawei.com> - 2.24-7
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-lvm-Add-missing-attribute-to-bd_lvm_pvdata_copy-in-L.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-module.c-Fix-error-message-when-loading-module-witho.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0003-exec-Fix-setting-locale-for-util-calls.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0004-lvm-Fix-checking-for-LVM-VDO-dependencies.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0005-lvm-dbus-Fix-memory-leak-in-bd_lvm_cache_attach.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0006-lvm-Fix-memory-leak-bd_lvm_cache_create_cached_lv.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0007-fs-Fix-return-values-in-bd_fs_ntfs_get_info.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0008-fs-Fix-return-values-in-bd_fs_xfs_get_info.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0009-dm-Fix-comparing-DM-RAID-member-devices-UUID.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0010-dm-Fix-memory-leak-in-the-DM-plugin-and-DM-logging-r.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0011-fs-Fix-memory-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0012-kbd-Fix-memory-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0013-lvm-dbus-Fix-memory-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0014-mdraid-Fix-memory-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0015-swap-Fix-memory-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0016-vdo-Do-not-use-g_memdup-in-bd_vdo_stats_copy.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: Lv Ying<lvying6@huawei.com> - 0.1.1-2
changelog:
  - support detecting and attaching of writable tracepoint program
    https://lore.kernel.org/bpf/20211004094857.30868-3-hotforest@gmail.com


author: zhangmingyi <zhangmingyi5@huawei.com> - 2:0.3-2
changelog:
  - backporting: 	backport-libbpf-Ensure-functions-with-always_inline-attribute-are-inline.patch
  		backport-libbpf-Fix-the-name-of-a-reused-map.patch
  		backport-libbpf-preserve-errno-across-pr_warn-pr_info-pr_debug.patch


author: zhangmingyi <zhangmingyi5@huawei.com> - 2:0.3-5
changelog:
  - backporting patches from upstream:
        backport-libbpf-Fix-crash-if-SEC-freplace-programs-don-t-have.patch
        backport-libbpf-Fix-the-case-of-running-as-non-root-with-capa.patch
        backport-libbpf-Fix-overrun-in-netlink-attribute-iteration.patch
        backport-libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
        backport-libbpf-Deal-with-section-with-no-data-gracefully.patch
        backport-libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch
        backport-sync-start-syncing-include-uapi-linux-fcntl.h-UAPI-h.patch
        backport-libbpf-Handle-size-overflow-for-ringbuf-mmap.patch
        backport-libbpf-Use-page-size-as-max_entries-when-probing-rin.patch


author: yaoxin <yao_xin001@hoperun.com> - 1.27.4-1
changelog:
  - Update to 1.27.4 for fix CVE-2024-6381 and CVE-2024-6383
  - libbson Fixes:
    * Fix build with Visual Studio 2013.
    * Fix parsing of colon in timezone.
    * Error on failure to init subdocument in bson_iter_visit_all.
    * Fix string handling in bson_string_new and bson_string_append.
    * Fix iteration in bson_strfreev.
    * Use aligned alloc for bson_array_builder_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Fix conversion warning with GCC 12.
    * Fixes to some format strings in trace logs.
    * Allow mongoc_buffer_t to be larger than INT_MAX.
    * Add bson_array_builder_t.
  - libmongoc Fixes:
    * Fix possible crash reading malformed wire protocol message.
    * Upgraded bundled Zlib from 1.2.3 to 1.3.1
    * Close leftover connections to removed servers.
    * Fix possible crash when client is configured with empty password.
    * Fix possible hang if mongoc_gridfs_file_readv is called with a corrupt chunk with incomplete data.
    * Fix 32-bit compile with 64-bit time_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Disable shared libmongoc targets if ENABLE_SHARED=OFF
    * Fix documentation build with Python 3.9.
    * Fix data race in mongoc_cursor_get_host.
    * Add back support for BUILD_VERSION CMake option. BUILD_VERSION was unintentionally removed in 1.25.0.
    * Send recoveryToken in transactions when connected to a load balancer.


author: gaoyi <gaoyi15@huawei.com> - 0.1.8-15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:CVE for libcomps
         https://github.com/rpm-software-management/libcomps/commit/e3a5d056633677959ad924a51758876d415e7046


author: liujing <liujing144@huawei.com> - 1.0.0-30
changelog:
  - update patches from https://code.foxkit.us/adelie/aports-old/blob/50de7d785d5500a14ed00fa12e483e8ceaf4f06a/main/libdv


author: Wenlong Ding <wenlong.ding@turbolinux.com.cn> - 2.6.4-22
changelog:
  - Remove /usr/lib64/libglade-2.0.so.* from libglade2-devel package which already exists in libglade2 package.


author: yanglu <yanglu72@h-partners.com> - 8.16.1-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Add require procmail, Fix send mail error which no procmail command


author: yanglu<yanglu72@h-partners.com> - 8.16.1-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix newaliases command error and postfix service start execption after sendmail install


author: guojunding <guojunding@kylinos.cn> - 0.8.0.dev.2-103
changelog:
  - Fix null dereference in findLBEndpointSandbox

   * Thu Mar 18 2021 xiadanni<xiadanni1@huawei.com> 0.8.0.dev.2-102
   - Type:bugfix
   - Id:NA
   - SUG:NA
   - DESC:compile option compliance


author: zengwefeng <zwfeng@huawei.com> - 3.5.0-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add missing check for NULL return from allocate_rfd
         add include netlink private nl-auto-h header
         use proper int type for id attributes
         add RTNL_LINK_REASM_OVERLAPS stat
         check for null pointer in macvlan
         fix leaking in link msg parser
         fix NLE_NOMEM handling in parse multipath


author: Guoshuai Sun <sunguoshuai@huawei.com> - 1.2.57-12
changelog:
  - ID:CVE-2013-7353 CVE-2013-7354 CVE-2017-12652
  - SUG:restart
  - DESC:fix CVE-2013-7353 CVE-2013-7354 CVE-2017-12652
    And we have check CVE-2014-9495 CVE-2011-3045 CVE-2008-3964 CVE-2015-8126 CVE-2015-0973 alreadyi been fixed before.
    And CVE-2016-3751 CVE-2013-6954 didn'd involved.


author: yixiangzhike <yixiangzhike007@163.com> - 1.4.2-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:change the files order in patch file fix-doc-about-difok.patch


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 1.0.3-7
changelog:
  - Fix CVE-2019-12779 libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack.
    CVE Link: https://nvd.nist.gov/vuln/detail/CVE-2019-12779
    Community Patch Link:
    https://github.com/ClusterLabs/libqb/commit/e322e98dc264bc5911d6fe1d371e55ac9f95a71e
    https://github.com/ClusterLabs/libqb/commit/7cd7b06d52ac80c343f362c7e39ef75495439dfc
    https://github.com/ClusterLabs/libqb/commit/6a4067c1d1764d93d255eccecfd8bf9f43cb0b4d


author: baizhonggui <baizhonggui@huawei.com> - 1.0.5-2
changelog:
  - new add #include <stddef.h> in qblist.h to fix:
    issue# https://gitee.com/src-openeuler/corosync/issues/I39X3F?from=project-issue
    upstream link:https://github.com/ClusterLabs/libqb/pull/384


author: luhuaxin <luhuaxin@huawei.com> - 0.9.4-15
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC: move AUTHORS and COPYING files to license folder, fix requires


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 3.1-3
changelog:
  - fix heap-use-after-free in cil_yy_switch_to_buffer
  - fix heap-use-after-free in __class_reset_perm_values()
  - fix heap-buffer-overflow in cil_print_recursive_blockinherit


author: xinghe <xinghe2@h-partners.com> - 2.71.0-4
changelog:
  - Type:cves
  - ID:CVE-2024-52530 CVE-2024-52531 CVE-2024-52532
  - SUG:NA
  - DESC:fix CVE-2024-52530 CVE-2024-52531 CVE-2024-52532


author: zhangpan <zhangpan103@h-partners.com> - 2.71.0-5
changelog:
  - Type:cves
  - ID:CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784
  - SUG:NA
  - DESC:fix CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784


author: zhangpan <zhangpan103@h-partners.com> - 2.71.0-6
changelog:
  - Type:cves
  - ID:CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913
  - SUG:NA
  - DESC:fix CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913


author: gaihuiying <eaglegai@163.com> - 0.9.4-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:backport upstream patches:
         add errno while reset with strtoul call
         fix error returned in ssh_userauth_try_publicke
         client do not close the socket if it was set via opt
         fix openForward to not set sourcehost to NULL
         fix the length calculation of packet in sftp_write


author: renmingshuai <renmingshuai@huawei.com> - 0.9.4-9
changelog:
  - Type:CVE
  - Id:CVE-2023-6004,CVE-2023-48795,CVE-2023-6918
  - SUG:NA
  - DESC:fix CVE-2023-6004,CVE-2023-48795 and CVE-2023-6918


author: gaoyi<gaoyi15@huawei.com> - 2.1.14-2.h1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: backport patches from https://github.com/samba-team/samba
  - Package init


author: shangyibin <shangyibin1@openeuler.org> - 1.4.2-4
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC:Adding help package to the installation dependency of the main package


author: shangyibin <shangyibin1@openeuler.org> - 1.4.2-5
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC:Change the dependecy on the help package from requires to recommends.


author: chenziyang <chenziyang4@huawei.com> - 2:1.3.1-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch to fix failed run-ptrace-mapper testcase


author: yaoxin <yao_xin001@hoperun.com> - 2.20.0-1
changelog:
  - Upgrade to 2.20.0 for fix CVE-2023-39929
  - Fix minor issue about printf data type and value range
  - av1: Revise offsets comments for av1 encode
  - jpeg: add support for crop and partial decode
  - Drop no longer applicable vaGetDriverNames check


author: jiangjiacheng <jiangjiacheng@huawei.com>
changelog:
  - util: keep track of full GSource object not source ID number
  - rpc: mark source returned by virEventGLibAddSocketWatch as unused
  - rpc: ensure temporary GSource is removed from client event loop (CVE-2024-4418)


author: chengguipeng<chengguipeng1@huawei.com> - 0.8.4-4
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC:solve the issue which dispaly could not resolve keysym XF86FullScreen


author: Funda Wang <fundawang@yeah.net> - 2.9.10-43
changelog:
  - Type:CVE
  - CVE:CVE-2024-56171
  - CVE:CVE-2025-24928
  - CVE:CVE-2025-27113
  - SUG:NA
  - DESC: fix CVE-2024-56171, CVE-2025-24928, CVE-2025-27113


author: Bjorn <bjorn1@users.sourceforge.net> 7.5.1-1
changelog:
  * Fri Dec 28 2018 Bjorn <bjorn1@users.sourceforge.net> 7.5.0
  - simplified files section
  - using symbolic links for some man files


author: chenyanpanHW <chenyanpan@huawei.com> - 9-5
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-Relax-content-tests-in-test-suite.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-Force-creation-of-LUKS1-containers-in-test-suite.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0003-Define-log-callback-function-to-use-with-libcryptset.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: hankangkang <hankangkang5@huawei.com> - 2.2.0-62
changelog:
  - When the GAZELLE_TCP_REUSE_IPPORT is on, min_cnts_lpcb is NULL
  - Turn on the LWIP_SO-LINGER switch


author: bzhaoop<bzhaojyathousandy@gmail.com> - 3:10.3.35-1
changelog:
  - Bump version to 10.3.35 for resolving CVEs as below
  - CVE-2022-27379
  - CVE-2022-27386
  - CVE-2022-27447
  - CVE-2022-27448
  - CVE-2022-27449
  - CVE-2022-27445
  - CVE-2022-27456
  - CVE-2022-27458
  - CVE-2022-27452
  - CVE-2022-27376
  - CVE-2022-27378
  - CVE-2022-27377
  - CVE-2022-27381
  - CVE-2022-27383
  - CVE-2022-27380
  - CVE-2022-27384
  - CVE-2022-27387


author: konglidong <konglidong@uniontech.com> - 1.0.22
changelog:
  - fix build error : Non-resolvable parent POM for org.apache.maven.plugins:maven-verifier-plugin:1.0


author: wangkai <13474090681@163.com> - 20240312-1
changelog:
  - Update to 20240312 for fix CVE-2023-38575, CVE-2023-39368,
    CVE-2023-22655, CVE-2023-43490, CVE-2023-28746


author: Funda Wang <fundawang@yeah.net> - 20240813-1
changelog:
  - update to 20240813 for fix CVE-2024-24853, CVE-2024-25939,
    CVE-2024-24980, CVE-2023-42667, CVE-2023-49141


author: Funda Wang <fundawang@yeah.net> - 20250211-1
changelog:
  - update to 2025021 for fix CVE-2024-28047, CVE-2024-31157, CVE-2024-39279,
    CVE-2024-28127, CVE-2024-29214, CVE-2024-24582, CVE-2023-34440, CVE-2024-37020,
    CVE-2024-39355, CVE-2023-43758, CVE-2024-36293, CVE-2024-31068


author: Funda Wang <fundawang@yeah.net> - 20250512-1
changelog:
  - update to 20250512 to fix CVE-2024-28956, CVE-2025-24495, CVE-2025-20012,
    CVE-2024-45332, CVE-2025-20623, CVE-2024-43420, CVE-2025-20054, CVE-2025-20103


author: wangkai <13474090681@163.com> - 8.0.38-1
changelog:
  - Update to 8.0.38 for fix CVEs(CVE-2024-21125,CVE-2024-21142,CVE-2024-21179,
    CVE-2024-21171,CVE-2024-21130,CVE-2024-21162,CVE-2024-21177,CVE-2024-20996,
    CVE-2024-21134,CVE-2024-21165,CVE-2024-21173,CVE-2024-21129,CVE-2024-21127,
    CVE-2024-21163,CVE-2022-21423,CVE-2022-21451,CVE-2022-21444,CVE-2022-21417,
    CVE-2022-21427,CVE-2022-21414,CVE-2022-21435,CVE-2022-21413,CVE-2022-21462,
    CVE-2022-21412,CVE-2022-21437,CVE-2022-21438,CVE-2022-21418,CVE-2022-21459,
    CVE-2022-21478,CVE-2022-21479,CVE-2022-21440,CVE-2022-21425,CVE-2022-21457,
    CVE-2022-21454,CVE-2022-21483,CVE-2022-21482,CVE-2022-21484,CVE-2022-21485,
    CVE-2022-21486,CVE-2022-21489,CVE-2022-21490,CVE-2021-22570,CVE-2022-21556,
    CVE-2022-21455,CVE-2022-21517,CVE-2022-21530,CVE-2022-21527,CVE-2022-21547,
    CVE-2022-21515,CVE-2022-21534,CVE-2022-21529,CVE-2022-21509,CVE-2022-21539,
    CVE-2022-21538,CVE-2022-21537,CVE-2022-21531,CVE-2022-21525,CVE-2022-21528,
    CVE-2022-21526,CVE-2022-21569,CVE-2022-39408,CVE-2022-39410,CVE-2022-21604,
    CVE-2022-21637,CVE-2022-21617,CVE-2022-21594,CVE-2022-21608,CVE-2022-21640,
    CVE-2022-39400,CVE-2022-21633,CVE-2022-21632,CVE-2022-21599,CVE-2022-21625,
    CVE-2022-21611,CVE-2022-21635,CVE-2022-21638,CVE-2022-21641,CVE-2022-21592,
    CVE-2023-21878,CVE-2023-21877,CVE-2023-21876,CVE-2023-21875,CVE-2023-21879,
    CVE-2023-21880,CVE-2023-21887,CVE-2023-21883,CVE-2023-21881,CVE-2023-21882,
    CVE-2023-21869,CVE-2023-21863,CVE-2023-21868,CVE-2023-21874,CVE-2023-21866,
    CVE-2023-21870,CVE-2023-21864,CVE-2023-21873,CVE-2023-21867,CVE-2023-21872,
    CVE-2023-21865,CVE-2023-21871,CVE-2023-21836,CVE-2022-32221,CVE-2023-21920,
    CVE-2023-21953,CVE-2023-21976,CVE-2023-21911,CVE-2023-21940,CVE-2023-21977,
    CVE-2023-21917,CVE-2023-21962,CVE-2023-21972,CVE-2023-21919,CVE-2023-21947,
    CVE-2023-21980,CVE-2023-21913,CVE-2023-21966,CVE-2023-21929,CVE-2023-21955,
    CVE-2023-21982,CVE-2023-21935,CVE-2023-21933,CVE-2023-21945,CVE-2023-21912,
    CVE-2023-21963,CVE-2023-21946,CVE-2022-43551,CVE-2023-0215,CVE-2023-22007,
    CVE-2023-22056,CVE-2023-22048,CVE-2023-22033,CVE-2023-22054,CVE-2023-22005,
    CVE-2023-22057,CVE-2023-22008,CVE-2023-22053,CVE-2023-22038,CVE-2023-22046,
    CVE-2023-22058,CVE-2023-22103,CVE-2023-22111,CVE-2023-22092,CVE-2023-22112,
    CVE-2023-22065,CVE-2023-22110,CVE-2023-22097,CVE-2023-22114,CVE-2023-22104,
    CVE-2023-22028,CVE-2023-22115,CVE-2023-22070,CVE-2023-22059,CVE-2023-22032,
    CVE-2023-22015,CVE-2023-22026,CVE-2023-22113,CVE-2023-22066,CVE-2023-22078,
    CVE-2023-22064,CVE-2023-22084,CVE-2023-22079,CVE-2023-38545,CVE-2023-22068,
    CVE-2024-20964,CVE-2024-20971,CVE-2024-20976,CVE-2024-20973,CVE-2024-20978,
    CVE-2024-20981,CVE-2024-20962,CVE-2024-20977,CVE-2024-20963,CVE-2024-20965,
    CVE-2024-20972,CVE-2024-20961,CVE-2024-20982,CVE-2024-20970,CVE-2024-20983,
    CVE-2024-20967,CVE-2024-20984,CVE-2024-20974,CVE-2024-20966,CVE-2024-20960,
    CVE-2024-20968,CVE-2024-20985,CVE-2024-20969,CVE-2022-21605,CVE-2022-21607,
    CVE-2024-21049,CVE-2024-21050,CVE-2024-21000,CVE-2024-21069,CVE-2024-21009,
    CVE-2024-21061,CVE-2024-20993,CVE-2024-21087,CVE-2024-21047,CVE-2024-20998,
    CVE-2024-21052,CVE-2024-21056,CVE-2024-21053,CVE-2024-21055,CVE-2024-21015,
    CVE-2024-21013,CVE-2024-21051,CVE-2024-21060,CVE-2024-21008,CVE-2024-21102,
    CVE-2024-21054,CVE-2024-21062,CVE-2024-20994,CVE-2024-21057,CVE-2024-21096,
    CVE-2023-6129,CVE-2024-21160,CVE-2024-21135,CVE-2024-21157,CVE-2024-21166,
    CVE-2024-21137,CVE-2024-21159)


author: wangkai <13474090681@163.com> - 8.0.40-1
changelog:
  - Update to 8.0.40 for fix CVEs(CVE-2024-21218,CVE-2024-21196,CVE-2024-21207,
    CVE-2024-21198,CVE-2024-21203,CVE-2024-21213,CVE-2024-21239,CVE-2024-21199,
    CVE-2024-21197,CVE-2024-21247,CVE-2024-21193,CVE-2024-21212,CVE-2024-21241,
    CVE-2024-21230,CVE-2024-21236,CVE-2024-21194,CVE-2024-21238,CVE-2024-21237,
    CVE-2024-21201,CVE-2024-21231,CVE-2024-21219,CVE-2024-21185)


author: yaoxin <1024769339@qq.com> - 8.0.41-1
changelog:
  - Update to 8.0.41 for fix CVEs(CVE-2025-21490,CVE-2025-21491,CVE-2025-21495,
    CVE-2025-21497,CVE-2025-21500,CVE-2025-21501,CVE-2025-21503,CVE-2025-21505,
    CVE-2025-21518,CVE-2025-21519,CVE-2025-21520,CVE-2025-21522,CVE-2025-21523,
    CVE-2025-21529,CVE-2025-21531,CVE-2025-21540,CVE-2025-21543,CVE-2025-21546,
    CVE-2025-21555,CVE-2025-21559)


author: yaoxin <1024769339@qq.com> - 8.0.42-1
changelog:
  - Update to 8.0.42 for fix CVEs(CVE-2025-21574,CVE-2025-21575,CVE-2025-21577,
    CVE-2025-21580,CVE-2025-21581,CVE-2025-21584,CVE-2025-21585,CVE-2025-30681,
    CVE-2025-30682,CVE-2025-30683,CVE-2025-30684,CVE-2025-30685,CVE-2025-30687,
    CVE-2025-30688,CVE-2025-30689,CVE-2025-30693,CVE-2025-30695,CVE-2025-30696,
    CVE-2025-30699,CVE-2025-30703,CVE-2025-30704,CVE-2025-30705,CVE-2025-30710,
    CVE-2025-30715,CVE-2025-30721,CVE-2025-30722


author: bzhaoop <bzhaojyathousandy@gmail.com> - 5.7.37-1
changelog:
  - Fix CVE issues for bump to the 5.7.37 version
  - CVE-2022-21245
  - CVE-2022-21270
  - CVE-2022-21303
  - CVE-2022-21304
  - CVE-2022-21344
  - CVE-2022-21367
  - CVE-2021-35624
  - CVE-2021-2356
  - CVE-2021-2011
  - CVE-2021-2010
  - CVE-2021-2007


author: yaoxin <yao_xin001@hoperun.com> - 8.0-1
changelog:
  - Update to 8.0
    * CVE-2024-5742: Avoid privilege escalations via symlink attacks
      on emergency save file (boo#1226099)
    * By default ^F is bound to starting a forward search, and ^B to
      starting a backward search, while M-F and M-B repeat the search
      in the corresponding direction. (See the documentation if you
      want the old bindings back.)
    * Command-line option --modernbindings (-/) makes ^Q quit, ^X cut,
      ^C copy, ^V paste, ^Z undo, ^Y redo, ^O open a file, ^W write a file,
      ^R replace, ^G find again, ^D find again backwards, ^A set the mark,
      ^T jump to a line, ^P show the position, and ^E execute.
    * For easier access, M-" is bound to placing/removing an anchor,
      and M-' to jumping to the next anchor.


author: yaoxin <yao_xin001@hoperun.com> - 2.15.05-1
changelog:
  - Update to 2.15.05
    * fix %ifid with $ and $$
    * Add --reproducible option to suppress NASM version numbers and timestamps in output files


author: xingwei <xingwei14@h-partners.com> - 1:5.9-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Sync upstream patches to fix Buffer overflow
         Disable T200snmpv2cwalkall_simple test to fix make check fail


author: liwenchong <liwenchong@kylinos.cn> - 1:2.5.1-6
changelog:
  - set use-gss-proxy to true in nfs.conf to be consistent with the
    description of 0003-nfs-utils-set-use-gss-proxy-1-to-enable-gss-proxy-by.patch


author: huangyu <huangyu106@huawei.com> - 1:0.9.6-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:parser_json fix device parsing in netdev family
  src don't parse string as verdict in map


author: wangkai <13474090681@163.com> - 1:12.22.11-4
changelog:
  - Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
  - CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
  - CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
  - CVE-2023-32559,CVE-2022-35256


author: leiju <leiju4@huawei.com> - 0.1.3-2
changelog:
  - delete ExclusiveArch:i386 i486 i586 i686 pentium3 pentium4 athlon geode x86_64 armv3l armv4b armv4l armv4tl armv5tl armv5tel armv5tejl armv6l armv6hl armv7l armv7hl armv7hnl armv8l armv8hl armv8hnl armv8hcnl noarch


author: yixiangzhike <yixiangzhike007@163.com> - 0.9.11-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:Move temporary files from /var/run to /run to delete warning in installing


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p14-7
changelog:
  - Type:CVE
  - ID:CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26554
  - SUG:NA
  - DESC:make sure the buffer has enough room for the input extra characters


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p14-8
changelog:
  - Type:CVE
  - ID:CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26554,CVE-2023-26555
  - SUG:NA
  - DESC:change the patch of CVE-2023-26551 and fix CVE-2023-26555


author: cuixucui <cuixucui@h-partner.com> - 1.1.5-1
changelog:
  - Add virtual cases
  - Resolve IB startup IB_Read_BW service failure issue
  - Delete redundant references
  - Resolve incorrect type in vgpu result data
  - Resolve the issue of getting the kernel source rpm


author: cuixucui <cuixucui@h-partner.com> - 1.1.5-1
changelog:
  - Resolve kdump\watchdog\cpufreq\kabiwhitelist\network test failure issue 
  - Add fio test cases:read,write,randread,randwrite
  - Solve the nvme line break issue in the command line interface
  - Fix compilation errors in the make command
  - Add Vulkan testcase for nvida GPU
  - Resolve the issue of oech server startup failure on version 24.03


author: xiaochn <xiaochuannan@inspur.com> - 1.1.5-3
changelog:
  - Resolve the issue of different kernel source download locations in kabi test case
  - Resolve the issue that kabiwhitelist still passes when the ko and rpm file does not exist
  - Add the way for manually adding kabiwhitelist file
  - For custom vendors, refer to the method of obtaining openEuler os information
  - Supports custom vendor


author: wangshuai <wangshuai321@huawei.com> - 1.1.6-0
changelog:
  - Add new test suite srpm and intel
  - Add virtual branch of test suite
  - Add support for Kylin and UOS
  - Bugfix


author: wangshuai <wangshuai321@huawei.com> - 1.1.6-3
changelog:
  - Update the pci.ids file
  - Remove unused variable in cdrom test suite
  - Update test_guide doc
  - Unify the location for downloading kernel source RPMs
  - Optimize kabiwhitelist and system test


author: Wenchao Hao <haowenchao@huawei.com> - 0.100-7
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-Fix-the-issue-of-ignoring-the-return-value.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-Fix-compiler-issue-when-not-in-security-mode.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0003-Fix-586-compile-issue-and-remove-Werror.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0004-Do-not-install-isnsd.socket-in-isnsd.service.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0005-libisns-remove-sighold-and-sigrelse.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0006-isnsadm-Fix-unparse-command-line-options-V-and-r.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0007-isnsd-socket-Make-sure-to-create-IPv6-socket-default.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: Noah <hedongbo@huawei.com> - 8u330.1
changelog:
  - change upstream to openeuler
  - rm 0004-Fix-Compilation-Flags.patch
  - rm 0005-fxpackager-extract-jre-accept-symlink.patch
  - rm 0003-fix-cast-between-incompatible-function-types.patch


author: openEuler Buildteam <buildteam@openeuler.org> - 1.5.1-24
changelog:
  - Type:cves
  - ID:CVE-2016-10506 CVE-2016-7445
  - SUG:restart
  - DESC:fix CVE-2018-15173 and CVE-2016-7445


author: Funda Wang <fundawang@yeah.net> - 0.20.0-15
changelog:
  - fix CVE-2024-8443, CVE-2024-45615, CVE-2024-45616,
    CVE-2024-45617, CVE-2024-45618, CVE-2024-45619, CVE-2024-45620


author: xingwei <xingwei14@h-partners.com> - 2.0.0-26
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Introduce epoch command to slove package upgrade failure problem


author: wulei <wulei80@huawei.com> - 2020.4-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Do not run testcase test-libarchive-import, because selinux is off.


author: yangmingtai <yangmingtai@huawei.com> - 10.35-4
changelog:
  - DESC:sync community patches
         backport-jit-fail-early-in-ffcps_-if-subject-shorter-than-off.patch
         backport-jit-fix-pcre2_jit_free_unused_memory-if-sljit-not-us.patch


author: chenyanpanHW <chenyanpan@huawei.com> - 1.9.0-3
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0000-pcsc-lite-change-to-use-python3-for-pcsc-spy.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-Do-not-possibly-lock-a-reader-if-allocating-hCard-fa.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-Fix-a-hang-in-SCardTransmit.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0003-ATRDecodeAtr-always-initialize-the-return-values.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0004-EHUnregisterClientForEvent-correctly-handle-EHTryToU.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: shenyangyang<shenyangyang4@huawei.com> - 1:2.081-7
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:restart
  - DESC:add build requires of perl-devel and add Epoch for updating


author: wangxiao<wangxiao65@huawei.com> - 1.58-3.h1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:Handle unknown op in DBD SQLite VirtualTable PerlData
         added a boilerplace for test
         fixed for older DBI
  - Package init


author: shenyangyang <shenyangyang4@huawei.com> - 2.066-2
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC:delete the /certs that used by test which contains the Unencrypted
         private key


author: shenyangyang <shenyangyang4@huawei.com> - 0.35-420
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:delete unneeded build requires of perl(Test::Portability::Files) 
         and perl(Test::Pod::Coverage)


author: shenyangyang <shenyangyang4@huawei.com> - 0.625-14
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:delete unneeded build requires of perl(IO::Scalar) and perl(Test::Pod::Coverage)


author: shenyangyang <shenyangyang4@huawei.com> - 2.29-398
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:delete unneeded build requires of perl(BSD::Resource) 
         perl(Import::Into) >= 1.002004 and perl(Sub::Identify)


author: Funda Wang <fundawang@yeah.net> - 8.0.30-7
changelog:
  - Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
    GHSA-4w77-75f9-2c8w
  - Fix OOB access in ldap_escape
    CVE-2024-8932
  - Fix Integer overflow in the dblib/firebird quoter causing OOB writes
    CVE-2024-11236
  - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
    CVE-2024-11234
  - Fix Single byte overread with convert.quoted-printable-decode filter
    CVE-2024-11233


author: duyiwei <duyiwei@kylinos.cn> - 1:0.10.1-10
changelog:
  - Type:bugfix
  - CVE:CVE-2024-9355、CVE-2019-9514、CVE-2024-24791、CVE-2022-32189、CVE-2022-41715、CVE-2022-2880、CVE-2022-1962、CVE-2023-45290、CVE-2024-24783、CVE-2024-24785
  - SUG:NA
  - DESC:  fix CVE in batches through rebuild


author: zhouwenpei <zhouwenpei1@h-partners.com> - 0.90.0-4
changelog:
  - fix CVE-2022-37050,CVE-2022-37051,CVE-2022-37052,CVE-2022-38349,CVE-2020-23804
  - fix install error


author: xiongyi <xiongyi@uniontech.com> - 0.90.0-6
changelog:
  - fix CVE-2020-36023
  - fix infinite looping in cvtGlyph with broken files
  - patch source:https://gitlab.freedesktop.org/poppler/poppler/-/issues/1013


author: openEuler Buildteam <buildteam@openeuler.org> - 0.4.9-4
changelog:
  -Type:enhancement
  -Id:NA
  -SUG:NA
  -DESC:Increase the ability of encoding files for use with libpoppler


author: gaihuiying <eaglegai@163.com> - 2.4.8-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream
         Fixing up parsing in radiusclient.conf


author: chengzeruizhi <chengzeruizhi@huawei.com> - 3.14.0-7
changelog:
  - Type:enhancement
  - ID:NA                  
  - SUG:NA                                                             
  - DESC: add compile option for coverage


author: shenyangyang<shenyangyang4@huawei.com> - 1.11.5-8
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:optimize the method to provide default version of python-name


author: zhangliangpengkun<zhangliangpengkun@xfusion.com> - 0.12.13-20
changelog:
  - Added 'cheroot' server adapter to list of server names, so it can be selected from the command line and by name.


author: zhangliangpengkun<zhangliangpengkun@xfusion.com> - 4.1.0-6
changelog:
  - fix for python 3.7 deprecation warning about importing certain types from collections vs collections.abc


author: liubo <liubo1@xfusion.com> - 0.7.19-16
changelog:
  - PKG-INFO metadata generation seems to be broken (lists maintainer as author on PyPI - mutually exclusive?)


author: xujing<xujing125@huawei.com> - 4.15.1-55
changelog:
  - sync patches from upstream
    add backport-Fix-a-theoretical-use-of-uninitialized-struct-member.patch
        backport-Fix-spec-parser-leaks-from-trans-f-file.patch
        backport-Tip-toe-around-rpmfiFN-thin-ice-in-fsm.patch
        backport-Use-unsigned-integers-for-buildtime-too-for-Y2K38-sa.patch


author: huanghaitao <huanghaitao8@huawei.com> - 1.4.0-3
changelog:
  - Add Requires: python2-gobject-base libnotify >= 0.7.7
  - fix command subunit-notify subunit2gtk --help error
  - fix command subunit-notify warning


author: xzf1244 <xzff@hust.edu.cn> - 1.25.9-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix field NRESERVED_PAT and function _idna_encode that will cause bugs


author: yaoxin <1024769339@qq.com> - 1.4.4-1
changelog:
  - Update to 1.4.4 for fix CVE-2019-16785,CVE-2019-16786,CVE-2019-16789 and CVE-2019-16792
  - Add patches for CVE-2024-49769: DoS due to resource exhaustion


author: GuoCe <guoce@kylinos.cn> - 3.7.9-37
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Modify the spec file to synchronize the version information of
         CHANGLOG and VERSION.


author: GuoCe <guoce@kylinos.cn> - 3.7.9-39
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: add loongarch64 support and disable valgrind-devel for loongarch64


author: wangshuo <wangshuo@kylinos.cn> - 3.7.9-40
changelog:
  - Type:CVE
  - CVE:CVE-2007-4559
  - SUG:NA
  - DESC:Patch9007-9008, fix CVE-2007-4559
  -      Patch9009, fix test_xml_etree error with expat versions that fix CVE-2023-52425


author: wangshuo <wangshuo@kylinos.cn> - 3.7.9-41
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patches
  -      gh-104049: do not expose on-disk location from SimpleHTTPRequestHandler
  -      gh-99889: Fix directory traversal security flaw in uu.decode()


author: wangshuo <wangshuo@kylinos.cn> - 3.7.9-43
changelog:
  - Type:CVE
  - CVE:CVE-2024-9287
  - SUG:NA
  - DESC:fix CVE-2024-9287
  -      gh-124651: Quote template strings in `venv` activation scripts


author: wangkai <13474090681@163.com> - 9.0.1-5
changelog:
  - correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)


author: liyangyang <liyangyang20@huawei.com> - 35.0-1
changelog:
  - DESC: Currently 28.1 is not commercially available and need to be modified to 35.0 with more complete features


author: tangchengchang <tangchengchang@huawei.com> - 35.0-4
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: Rename the previous patch to facilitate subsequent management


author: yangzhuangzhuang<yangzhuangzhuang1@huawei.com> - 0.3.12-4
changelog:
  - The "no acceptable C compiler found" error message is displayed during compilation.Therefore,add buildrequires gcc.


author: Jiabo Feng <fengjiabo1@huawei.com>
changelog:
  - accel/tcg: fix race in cpu_exec_step_atomic (bug 1863025)
  - pci: assert configuration access is within bounds
  - io: remove io watch if TLS channel is closed during handshake


author: Jiabo Feng <fengjiabo1@huawei.com>
changelog:
  - hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
  - hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  - net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
  - net: Provide MemReentrancyGuard * to qemu_new_nic()
  - memory: prevent dma-reentracy issues
  - softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR
  - Fixed the early version of CVE-2022-4144 patch is not fully adapted


author: Jiabo Feng <fengjiabo1@huawei.com>
changelog:
  - hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs(CVE-2024-3446)
  - hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs(CVE-2024-3446)
  - hw/display/virtio-gpu: Protect from DMA re-entrancy bugs(CVE-2024-3446)
  - hw/virtio: Introduce virtio_bh_new_guarded() helper
  - hw: replace most qemu_bh_new calls with qemu_bh_new_guarded
  - checkpatch: add qemu_bh_new/aio_bh_new checks
  - async: avoid use-after-free on re-entrancy guard
  - async: Add an optional reentrancy guard to the BH API
  - util/async: add a human-readable name to BHs for debugging
  - hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set
  - Include sysemu/sysemu.h a lot less


author: Jiabo Feng <fengjiabo1@huawei.com>
changelog:
  - tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fix CVE-2023-5088)
  - hw/ide: reset: cancel async DMA operation before resetting state (Fix CVE-2023-5088)


author: Jiabo Feng <fengjiabo1@huawei.com>
changelog:
  - block: Parse filenames only when explicitly requested (CVE-2024-4467)
  - block: introduce bdrv_open_file_child() helper
  - qcow2: Don't open data_file with BDRV_O_NO_IO (CVE-2024-4467)
  - qcow2: Do not reopen data_file in invalidate_cache


author: Jiabo Feng <fengjiabo1@huawei.com> - 10:4.1.0-86
changelog:
  - nbd/server: CVE-2024-7409: Close stray clients at server-stop
  - main-loop.h: introduce qemu_in_main_thread()
  - aio-wait.h: introduce AIO_WAIT_WHILE_UNLOCKED
  - nbd/server: CVE-2024-7409: Drop non-negotiating clients
  - nbd/server: CVE-2024-7409: Cap default max-connections to 100
  - nbd: Add max-connections to nbd-server-start
  - nbd/server: Plumb in new args to nbd_client_add()
  - nbd: Minor style and typo fixes


author: Jiabo Feng <fengjiabo1@huawei.com> - 10:4.1.0-88
changelog:
  - mac_dbdma: Remove leftover `dma_memory_unmap` calls(CVE-2024-8612)
  - softmmu: Support concurrent bounce buffers(CVE-2024-8612)
  - qdev-properties: add size32 property type
  - system/physmem: Per-AddressSpace bounce buffering
  - system/physmem: Propagate AddressSpace to MapClient helpers


author: openEuler Buildteam <buildteam@openeuler.org> - 5.11.1-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Delete the dependency include qt5-qt3d qt5-qtenginio-devel qt5-qtwebkit-devel


author: xingwei <xingwei14@h-partners.com> - 2.18-5
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Add the socket option IPV6_MULTICAST_LOOP to prevent the interface from autocon
  figuring using RA messages sent by itself.


author: Shiju Jose<shiju.jose@huawei.com> - 0.6.7-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:
    1. Fix return value type issue of read/write function from unistd.h.
    2. Fix issue of signed and unsigned integer comparison.
    3. Remove redundant header file and do some cleaup.
    4. Add support for create/open the vendor error tables at rasdaemon startup.
    5. Make changes in the HiSilicon error handling code for the same.
    6. Add four modules supported by HiSilicon common section.


author: yanglongkang <yanglongkang@h-partners.com> - 0.6.7-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport libtraceevent patch to adapt to kernel ftrace ring buffer change


author: zhangnan <zhangnan134@huawei.com> - 0.6.7-13
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ras-events:quit loop in read_ras_event when kbuf data is broken


author: caixiaomeng <caixiaomeng2@huawei.com> - 0.6.7-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add-dynamic-switch-of-ras-events-support-and-disable-block-rq-complete


author: wangjiang <app@cameyan.com> - 0.6.7-16
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix ras-mc-ctl --summary failed
         Add some improvements and add new modules to HiSilicon common section


author: shixuantong<shixuantong@huawei.com> - 3.7.6-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add python3-Cython and python3-devel to BuildRequires for check fail


author: wangkai <13474090681@163.com> - 7.2.7-1
changelog:
  - Update to 7.2.7
  - Fix CVE-2021-32626 CVE-2021-32627 CVE-2021-32762 CVE-2021-32675
    CVE-2021-41099 CVE-2021-32628 CVE-2021-32687 CVE-2022-24735
    CVE-2022-24736 CVE-2022-3647 CVE-2022-3734 CVE-2022-35977
    CVE-2023-25155 CVE-2024-46981


author: yaoxin <yaoxin30@huawei.com> - 5.0.14-1
changelog:
  - Upgrade redis5 to 5.0.14 for fix cves: CVE-2021-41099
    CVE-2021-32762 CVE-2021-32675 CVE-2021-32687 CVE-2021-32626
    CVE-2021-32627 CVE-2021-32628


author: gaihuiying <gaihuiying1@huawei.com> - 1.2.5-5
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:sync sp1 commits and rebuild 1.2.5-5:
         fix uninstall package warning info
         remove config rmtcall and disable rpcbind.service default


author: yixiangzhike <yixiangzhike007@163.com> - 2.15-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:avoid truncate trailer space and do not escape backslash when read filename


author: yixiangzhike <yixiangzhike007@163.com> - 2.15-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:revert "avoid truncate trailer space and do not escape backslash when read filename"


author: zouzhimin <zouzhimin@kylinos.cn> - 1:2.2.3.1-3
changelog:
  - Type:CVES
  - ID:CVE-2024-26141 CVE-2024-26146 CVE-2024-25126
  - SUG:NA
  - DESC:CVE-2024-26141 CVE-2024-26146 CVE-2024-25126


author: zouzhimin <zouzhimin@kylinos.cn> - 1:2.2.3.1-4
changelog:
  - Type:CVES
  - ID:CVE-2022-44570 CVE-2022-44571 CVE-2022-44572
  - SUG:NA
  - DESC:CVE-2022-44570 CVE-2022-44571 CVE-2022-44572


author: yangzhuangzhuang<yangzhuangzhuang1@huawei.com> - 1:6.6-5.h1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:os_linux.cpp/os_netbsd.cpp: fix crash on --scan if WITH_NVME_DEVICESC is not set and '-d <type>' is not specified
         ataprint.cpp: Fix detection of Device Statistics log with 256 sectors (#922)
         drivedb.h: - Western Digital Red: WD80EZZX - USB: WD
         update-smart-drivedb.in: Include configured PATH in help and error messages
         os_linux.cpp: Add missing braces to 3ware SELinux code
         drivedb.h: fix Innolite Satadom D150QV entry (#939)
         os_freebsd.cpp: on error was setting set_nvme_err() to 1
         os_linux.cpp: Fix device scan crash on missing /proc/devices
         smartd.cpp: Always ignore failure of ATA SMART ENABLE command if
         os_linux.cpp: Fix '-d megaraid' open crash on missing /proc/devices
         os_darwin.cpp, os_freebsd.cpp: fix return value in error paths
         ataprint.cpp: Fix Form Factor string with bits set in reserved area
  - Package init


author: openEuler Buildteam <buildteam@openeuler.org> - 1:6.6-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add the "-q never" option while executing smartd command in smartd.service


author: wangkai <13474090681@163.com> - 14.4.2.0-29
changelog:
  - Fix CVE-2021-33844,CVE-2023-32627,CVE-2021-23159,CVE-2023-34432
  - CVE-2023-34318,CVE-2021-23172,CVE-2021-3643,CVE-2021-23210
  - CVE-2022-31650,CVE-2023-26590,CVE-2022-31651,CVE-2023-32627
  - CVE-2017-18189


author: chenyanpanHW <chenyanpan@huawei.com> - 4.4-4
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-Fix-typos-update-URLs-in-squashfs-tools-Makefile.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-Support-creating-sockets-in-unsquashfs.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0003-squashfs-tools-fix-build-failure-against-gcc-10.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0004-xattr-Initialize-header-to-avoid-valgrind-warning.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0005-CVE-2021-40153.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0006-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0007-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0008-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0009-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0010-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: XuFei <xufei30@huawei.com> - 0.3.0-3
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC:modify docs,modify testcases and clear clippy warnings for updating rust 1.51.0


author: openEuler Buildteam <buildteam@openeuler.org> - 1.4-23
changelog:
  - Modify spec error information

   Sat Sep 07 2019 openEuler Buildteam <buildteam@openeuler.org> - 1.4-22
  - Package init


author: chenyanpanHW <chenyanpan@huawei.com> - 2.1.0-32
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-Fix-issue-with-sysfs-name-comparisons.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-sysfsutils-2.1.0-get_link.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0003-sysfsutils-2.1.0-manpages.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0004-sysfsutils-aarch64.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0005-sysutils-modify-GPL-path-written-in-COPYING.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0006-fix-of-FUNC_TABLE_SIZE-mentioned-in-prev-commit.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0007-Fix-compiler-complain-about-multiple-defs-of-my_stdo.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0008-Use-stat-not-lstat-to-find-link-target.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0009-path_is_file-should-call-stat-not-lstat.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0010-lib-Fixed-a-memory-leak-in-lib-sysfs_driver.c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0011-lib-Fixed-memory-leaks-in-lib-sysfs_device.c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0012-lib-Fixed-memory-leaks-in-lib-sysfs_attr.c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: lingsheng <lingsheng1@h-partners.com> - 6.04-14
changelog:
  - update libpng 1.6.36 to fix CVE-2011-2501 CVE-2011-2690 CVE-2011-2691
  - CVE-2011-2692 CVE-2011-3045 CVE-2011-3048 CVE-2012-3425 CVE-2015-7981
  - CVE-2015-8126 CVE-2015-8472 CVE-2015-8540 CVE-2016-10087 CVE-2017-12652


author: liyuanyuan <liyuanyuan@xfusion.com> - 1.5.11-17
changelog:
  - Set programe name for scp-dbus-service as well
  - Require proper version of GDK and GTK in scp-dbus-service as well


author: huyubiao <huyubiao@huawei.com> - 243-75
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add backport-basic-fix-overflow-detection-in-sigbus_pop.patch
         backport-bus-use-bus_log_parse_error-to-print-message.patch
         backport-busctl-avoid-asserting-on-NULL-message.patch
         backport-sd-journal-check-sd-event-state-before-setting-up-po.patch


author: huyubiao <huyubiao@huawei.com> - 243-76
changelog:
  - DESC:add backport-utmp-remove-dev-from-line.patch
         backport-core-exec-do-not-crash-with-UtmpMode-user-without-Us.patch
         backport-resolved-limit-the-number-of-signature-validations-i.patch
         backport-resolved-reduce-the-maximum-nsec3-iterations-to-100.patch


author: huyubiao <huyubiao@huawei.com> - 243-79
changelog:
  - add backport-login-user-runtime-dir-properly-check-for-mount-poin.patch
        backport-user-util-validate-the-right-field.patch


author: zhangyao <zhangyao108@huawei.com> - 243-81
changelog:
  - remove redundant patch
    del 1610-add-new-rules-for-lower-priority-events-to-preempt.patch
        core-bugfix-call-malloc_trim-to-return-memory-to-OS-immediately.patch
        1612-serialize-pids-for-scope-when-not-started.patch
        systemd-core-Close-and-free-dbus-when-bus-authentica.patch
        1615-do-not-finish-job-during-daemon-reload-in-unit_notify.patch


author: zhangyao <zhangyao108@huawei.com> - 243-82
changelog:
  - sync community patches
    add backport-pid1-set-SYSTEMD_NSS_DYNAMIC_BYPASS-1-env-var-for-db.patch
        backport-pid1-lookup-owning-PID-of-BusName-name-of-services-a.patch
        backport-pid1-watch-bus-name-always-when-we-have-it.patch


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-83
changelog:
  - Enhance the logging function of the systemctl command
    Add process-util-log-more-information-when-runnin.patch


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 1:8.6.10-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:The "no acceptable C compiler found" error message is displayed during compilation.Therefore,add buildrequires gcc.


author: Guoshuai Sun <sunguoshuai@huawe.com> - 8:2018-24
changelog:
  - Drop texlive-venturisadf texlive-wsuipa texlive-vntex, because those packages
    use utopia license may not be free for anyone


author: openEuler Buildteam <buildteam@openeuler.org> - 0.5.9
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC:Solve the problem of service cannot restart when upgrading


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 0.6-2
changelog:
  - The"cc:No such file or directroy"error message is displayed during compilation.Therefore,add buildrequires gcc.
    The macro unitdir is used.Therefore,add buildrequires systemd


author: chenyaqiang <chengyaqiang@huawei.com> - 1:9.0.96-1
changelog:
  - Update to 9.0.96
  - Fix CVE-2021-43980 CVE-2022-25762 CVE-2023-44487 CVE-2023-46589
    CVE-2024-23672 CVE-2024-24549 CVE-2024-34750


author: wangkai <13474090681@163.com> - 1:9.0.100-1
changelog:
  - Update to 9.0.100 for fix CVE-2024-56337
  - Add a check to ensure that, if one or more web applications are potentially vulnerable to CVE-2024-56337,
    the JVM has been configured to protect against the vulnerability and to configure the JVM correctly if not.


author: chenyanpanHW <chenyanpan@huawei.com> - 1.8.0-2
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0000-Fix-tree-args-option-displayed-incomplete.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: Liu Chao <liuchao173@huawei.com> - 2.24.1-1
changelog:
  - Upgrade to 2.24.1:
    - fixed privileged execution of arbitrary scripts by active local user. (CVE-2024-52336)
    - added sanity checks for API methods parameters. (CVE-2024-52337)


author: langfei<langfei@huawei.com> - 2022a-16
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Fix Palestine predictions for 2072 through 2075; Ittoqqortoormiit (America/Scoresbysund) zone change.


author: liuchao <liuchao173@huawei.com> - 2022a-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Vostok switches to +05; Sync Casey data from timeanddata.com; Kazakhstan unifies on UTC+5


author: langfei <langfei@huawei.com> - 2022a-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Aysén Region moves from -04/-03 to -03; new zone;
  -	Improve recent commentary for Chilean decrees.


author: yangcheng <yangcheng87@huawei.com> - 20170801-12
changelog:
  - Fix the problem that the mkfontscale command and mkfontdir command were not found during installation


author: chenyanpanHW <chenyanpan@huawei.com> - 012-4
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-usbmisc-initialize-string-buffer-before-reading-from.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: Jiajun Chen <1250062498@qq.com> - 1.0-2
changelog:
  - bugfix: fix %ST, %GUE, %HYP formula
  - display: expand row size in TEXT mode
  - bugfix: exit vmtop when arguments are invalid
  - bugfix: check unsigned number flip before getting delta


author: nocjj <1250062498@qq.com>
changelog:
  - vcpustat: modify vcpu info acquirement from debugfs
  - display: expand %CPU display
  - display: add limit to usage display
  - vmtop: simplify print_domain_field


author: Jiajun Chen <1250062498@qq.com> -1.1-3
changelog:
  - vcpu_stat: add remaining kvm exits items to display
  - display: modify filter display to support more display fields items
  - vcp_stat: add Max Scheduling Delay time items to display
  - args: add -p option
  - key: add page up/down key response
  - vcpu_stat: get vcpu stat list once per display instead of per vcpu
  - proc: del /prc/pid/comm read
  - display: del screen clear after key response
  - codestyle: del unused var


author: Zhiqiang Liu <liuzhiqiang26@huawei.com> - 5.6.0-3
changelog:
  - mkfs.xfs: fix ASSERT on to-small device with stripe geometry.
    Fix issue: https://gitee.com/src-openeuler/xfsprogs/issues/I4RZKQ


author: yanglu <yanglu72@h-partners.com> -1.20.8-28
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix regression caused by the fix for CVE-2024-0229
         fix use after free related to CVE-2024-21886


author: shuaijiakun <shuaijiakun1288@phytium.com.cn> -1.20.8-29
changelog:
  - Type:feature
  - CVE:NA
  - SUG:NA
  - DESC:fix display error for ps23xx when using ast and pe2201 bmc card.


author: Funda Wang <fundawang@yeah.net> - 1.20.8-32
changelog:
  - fix CVE-2025-26594, CVE-2025-26595, CVE-2025-26596,
    CVE-2025-26597, CVE-2025-26598, CVE-2025-26599
    CVE-2025-26600, CVE-2025-26601


author: kouwenqi <kouwenqi@kylinos.cn> - 5.2.5-4
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC:Add overflow check for Unpadded size in lzma_index_append


author: luckky <guodashun1@huawei.com> - 1.4.5-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:The libzsta.a library should be packaged to access advanced experimental features


