# changelog

author: lvying<lvying6@huawei.com> - 1.0.0-1
changelog:
  - Type:feature
  - ID:NA
  - SUG:NA
  - DESC: Init A-Tune-BPF-Collection repo and add readahead_tune service


author: lvying<lvying6@huawei.com> - 1.0.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: use generated vmlinux.h instead of bpftool gen vmlinux.h in compile env


author: yaoxin <yaoxin30@huawei.com> 2.4.3-5
changelog:
  - This package depends on log4j. After the log4j vulnerability CVE-2021-44228 is fixed, the version needs to be rebuild.


author: yaoxin <yaoxin30@huawei.com> 2.4.3-6
changelog:
  - This package depends on log4j. After the log4j vulnerability CVE-2021-45105 is fixed, the version needs to be rebuild.


author: houyingchao <houyingchao@huawei.com> 2.4.3-7
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-44832 is fixed,the version needs to be rebuild.


author: Yu Peng <yupeng@kylinos.cn> - 1:1.26.2-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: bond:avoid logging warning to set "ad_actor_system=00:00:00:00:00:00".


author: yaoxin <yao_xin001@hoperun.com> - 1.2.24-1
changelog:
  - Update to 1.2.24:
    * Fixed formatting of ipsec.conf snippet. This is a security
    issue with severity of "Important." (CVE-2024-9050)
    * Added support for "require-id-on-certificate" setting.
    * Updated Georgian, Slovenian and Ukrainian translations.


author: chengguipeng <chengguipeng1@huawei.com> - 1.1.12-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:solove the problem that no message is displayed when running a uninstalled command.


author: openEuler Buildteam <buildteam@openeuler.org> -20190730-2
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Increase the ability to provide adobe-mappings-cmap-deprecated


author: yixiangzhike <yixiangzhike007@163.com> - 0.16.2-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: backport upstream patches to strengthen malloc,calloc,realloc,strdup


author: wanglu <wanglu210@huawei.com> - 33.19-33
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert "Set default entry to the BLS id instead of the entry index"


author: yueyuankun <yueyuankun@kylinos.cn> - 33.19-34
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Solve the problem that sometimes the circular loading progress bar does not rotate


author: sunhai <sunhai10@huawei.com> - 33.19-36
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:dracut handle compressed kernel modules
         network use separate main conext for NM-client in threads


author: sunhai <sunhai10@huaqei.com> - 33.19-40
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Don't set LC_ALL for live installations
         Do not crash on network --device link with wireless device
         Do not modify boot order on UEFI if asked


author: Linux_zhang <zhangruifang@h-partners.com> - 3.1.23-7
changelog:
  - Type：update
  - ID：NA
  - SUG:NA
  - DESC: Modify the license to SPDX format
          Delete MIT and Public Domain license because it no longer appears in the upstream source


author: Roberto Sassu <roberto.sassu@huawei.com> - 0.2.0
changelog:
  - Add quote protocol
  - Add parser for TPM 2.0 event log
  - Add evm_key and dummy verifiers
  - Add creation of certificate for TPM key
  - Add creation of symmetric key to be used with EVM
  - Add ima-sig and ima-cp verifiers


author: Shijie Luo<luoshijie1@huawei.com> - 2.4.48-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:fix error condition of while loop 
         in 0001-bypass-wrong-output-when-enabled-selinux.patch.


author: shixuantong<shixuantong@huawei.com> - 0.3.6-25
changelog:
  - Type:cves
  - ID:CVE-2017-6828 CVE-2017-6829 CVE-2017-6831 CVE-2017-6838 CVE-2017-6839
  - SUG:NA
  - DESC:fix CVE-2017-6828 CVE-2017-6829 CVE-2017-6831 CVE-2017-6838 CVE-2017-6839


author: wangkai <wangkai385@huawei.com> - 0:4.3-23
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-44228 is fixed,the version needs to be rebuild.


author: yaoxin <yaoxin30@huawei.com> - 0:4.3-24
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-45105 is fixed,the version needs to be rebuild.


author: yixiangzhike <yixiangzhike007@163.com> - 5.0-22
changelog:
  - sync patches from bash community:
     fix default file descriptor for <> redirection when printing command
     update BASH_COMMAND for subshells
     fix potential file descriptor leak in here document pipes


author: yuejiayan<yuejiayan@huawei.com> - 1:2.8-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:completions/Makefile: Fix check-local in VPATH builds
         __load_completion: Avoid bad array subscript on "commands" ending wit…
         _xspecs: Declare as global on bash >= 4.2
         completions/Makefile.am: Use install-data-hook, not install-data-local
         man: Fix completion when failglob option is enabled (#225)
         _longopt: don't complete --no-* with file/dirname arg


author: yaoxin <yao_xin001@hoperun.com> - 1.17-1
changelog:
  - Update to 1.17 for fix CVE-2022-38398,CVE-2022-38648,CVE-2022-40146,CVE-2022-44729 and CVE-2022-44730


author: panxiaohe <panxiaohe@huawei.com> - 3.6.4-2
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:use make macros to run check in parallel;
         fix a concurrent build issue in examples


author: wangxiao <wangxiao184@h-partners.com> - 1.2.0-27
changelog:
  - DESC: backport upstream patches
    blkparse skip check_cpu_map with pipe input
    blkparse fix incorrectly sized memset in check_cpu_map
    fix hang when BLKTRACESETUP fails and "-o -" is used


author: zhangyiru <zhangyiru3@huawei.com> - 1.73.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:increase used_block_count when use put_mem_block
    Disallow repeating a case-change group


author: zhangyiru <zhangyiru3@huawei.com> - 1.73.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Correct stack unwinding inside recursions when seeing (*SKIP).


author: wangjie<wangjie294@huawei.com> -1.0.7-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Synchronize patches from community
         Verbose-CLI-start-pulling-Shared-Brotli.patch
         Ensure-decompression-consumes-all-input.patch
         fix-MSVC-configuration-and-c++-compilation-fails.patch
         fix-executable-mode-of-decode-js.patch
         Fix-include-for-EMCC-build.patch
         Add-an-option-to-avoid-building-shared-libraries.patch
         Disable-PIC-in-EMCC-mode.patch
         Add-missing-const-to-a-couple-of-kConstants.patch
         Move-TZCNT-and-BSR-intrinsics-and-add-MSVC-versions.patch


author: liuxu <liuxu156@huawei.com> - 1:1.31.1-21
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363


author: xinghe <xinghe2@h-partners.com> - 1.16.1-7
changelog:
  - Type:cves
  - CVE:CVE-2023-31130 CVE-2023-31124 CVE-2023-31147
  - SUG:NA
  - DESC:fix CVE-2023-31130 CVE-2023-31124 CVE-2023-31147


author: wangjiang <wangjiang37@h-partners.com> - 2023.2.60-3
changelog:
  - remove expired and sync new certificates
    Removing:
      Security Communication Root CA
      Trustis FPS Root CA
    Adding:
      Atos TrustedRoot Root CA ECC G2 2020
      Atos TrustedRoot Root CA ECC TLS 2021
      Atos TrustedRoot Root CA RSA G2 2020
      Atos TrustedRoot Root CA RSA TLS 2021
      CommScope Public Trust ECC Root-01
      CommScope Public Trust ECC Root-02
      CommScope Public Trust RSA Root-01
      CommScope Public Trust RSA Root-02
      D-Trust SBR Root CA 1 2022
      D-Trust SBR Root CA 2 2022
      LAWtrust Root CA2 (4096)
      Sectigo Public Email Protection Root E46
      Sectigo Public Email Protection Root R46
      Sectigo Public Server Authentication Root E46
      Sectigo Public Server Authentication Root R46
      SSL.com Client ECC Root CA 2022
      SSL.com Client RSA Root CA 2022
      SSL.com TLS ECC Root CA 2022
      SSL.com TLS RSA Root CA 2022
      Telekom Security SMIME ECC Root 2021
      Telekom Security SMIME RSA Root 2023
      Telekom Security TLS ECC Root 2020
      Telekom Security TLS RSA Root 2023
      TrustAsia Global Root CA G3
      TrustAsia Global Root CA G4


author: wangjiang <app@cameyan.com> - 2023.2.60-4
changelog:
  - remove expired and sync new certificates
    Removing:
      Certificate "Explicitly Distrust DigiNotar Root CA"
      Certificate "Baltimore CyberTrust Root"
    Adding:
      Certificate "FIRMAPROFESIONAL CA ROOT-A WEB"
      Certificate "TWCA CYBER Root CA"
      Certificate "TWCA Global Root CA G2"
      Certificate "SecureSign Root CA12"
      Certificate "SecureSign Root CA14"
      Certificate "SecureSign Root CA15"
      Certificate "D-TRUST BR Root CA 2 2023"
      Certificate "D-TRUST EV Root CA 2 2023"


author: chenyanpanHW <chenyanpan@huawei.com> - 0.10.10-8
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-cachefilesd-fix-abort-in-decant_cull_table.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: yanglu <yanglu60@huawei.com> - 1.15.14-5
changelog:
  - Type:cves
  - ID:CVE-2018-19876 CVE-2019-6461 CVE-2019-6462
  - SUG:NA
  - DESC: fix CVE-2018-19876 CVE-2019-6461 CVE-2019-6462


author: chenyanpanHW <chenyanpan@huawei.com> - 1.4.33-3
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-T0ProcACK-fix-a-potential-problem.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-CmdGetSlotStatus-fix-potential-read-of-uninitialized.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0003-ReadUSB-fix-potential-read-of-uninitialized-buffer.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0004-IFDHSetProtocolParameters-handle-ATR_GetConvention-e.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0005-PPS_Match-fix-potential-read-of-uninitialized-buffer.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0006-dw2i-fix-potential-integer-overflow.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: haowenchao <haowenchao@huawei.com> - 6.10-3
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0000-Add-missing-position-handling-to-mount-parameters-gi.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-CVE-2021-20208.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0003-cifs-utils-fix-probabilistic-compiling-error.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0004-mount.cifs-fix-max-buffer-size-when-parsing-snapshot.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0005-cifs.upcall-update-the-cap-bounding-set-only-when-CA.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0006-mount.cifs-update-the-cap-bounding-set-only-when-CAP.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0007-CVE-2022-27239.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0008-CVE-2022-29869.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0009-mount.cifs-fix-crash-when-mount-point-does-not-exist.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0010-cifs.upcall-fix-regression-in-kerberos-mount.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: Liquor <lirui130@huawei.com> - 11-5
changelog:
  - Delete remaining references to the removed http pin
    Install cryptsetup and tpm2_pcrlist in the initramfs
    Add device TCTI library to the initramfs


author: Dan Walsh <dwalsh@fedoraproject.org> - 2.73-1
changelog:
  - Define spc_t as a container_domain, so that container_runtime will transition
  to spc_t even when setup with nosuid.


author: zhongjiawei<zhongjiawei1@huawei.com> - 1.2.0-213
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:bump ttrpc to fix containerd-shim socket connect increase leak after restart docker


author: zhongjiawei<zhongjiawei1@huawei.com> - 1.2.0-217
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:disable Transparent HugePage for shim process if SHIM_DISABLE_THP is set


author: jiangchuangang<jiangchuangang@huawei.com> - 8.32-9
changelog:
  - sync patches from community
  - add backport-pr-fix-infinite-loop-when-double-spacing.patch
    backport-wc-ensure-we-update-file-offset.patch


author: jiangchuangang <jiangchuangang@huawei.com> - 8.32-10
changelog:
  - sync patches from community
  - add backport-who-fix-only-theoretical-overflow.patch
        backport-tac-handle-short-reads-on-input.patch
        backport-setenv-Don-t-crash-if-malloc-returns-NULL.patch
        backport-who-don-t-crash-if-clock-gyrates.patch
        backport-doc-od-strings-clarify-operation.patch


author: cenhuilin <cenhuilin@kylinos.cn> - 8.32-12
changelog:
  - sync patches from community
  - add backport-coverity-utimens.patch
        backport-fuse-portal.patch
        backport-expr-unmatched-par.patch


author: wangjiang <app@cameyan.com> - 8.32-14
changelog:
  - sync patches from community
  - add backport-numfmt-don-t-require-a-suffix-with-from-iec-i.patch
        backport-sort-fix-debug-buffer-overrun.patch
        backport-tac-avoid-out-of-bounds-access.patch
        backport-yes-avoid-failure-on-CHERI-protected-systems.patch


author: Funda Wang <fundawang@yeah.net> - 8.32-17
changelog:
  - fix upstream bug#72445: Fill the ISAAC buffer instead of storing at most
    BYTES_BOUND bytes into it.


author: fuanan <fuanan3@h-partners.com> - 2.13-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert fix CVE-2015-1197 because it causes AT testcases problems


author: chenziyang <chenziyang4@huawei.com> - 2.13-7
changelog:
  - Type:CVE
  - ID:CVE-2015-1197
  - SUG:NA
  - DESC:Fix CVE-2015-1197, delete revert-CVE-2015-1197.patch because new patch
         will fix the problem brought by old-CVE-2015-1197.patch, so we delete 
         revert-CVE-2015-1197.patch


author: wangxiao <wangxiao184@h-partners.com> - 7.2.8-6
changelog:
  - arm64: fix again segfault in arm64_is_kernel_exception_frame
    arm64: fix a potential segfault when unwind frame


author: Tomáš Mráz <tmraz@redhat.com> - 20180921-1.git391ed9f
changelog:
  - OpenSSH: Generate policy for sign algorithms
  - Enable >= 255 bits EC curves in FUTURE policy
  - OpenSSH: Add group1 key exchanges in LEGACY policy
  - NSS: Add SHA224 to hash lists
  - Print warning when update-crypto-policies --set FIPS is used
  - fips-mode-setup: Kernel boot options are now modified with grubby


author: Tomáš Mráz <tmraz@redhat.com> - 20180925-1.git71ca85f
changelog:
  - Use Recommends instead of Requires for grubby
  - Revert setting of HostKeyAlgorithms for ssh client for now


author: yanglongkang <yanglongkang@huawei.com> - 2.3.3-4
changelog:
  - add buildrequire gcc
    add make check
    backport upstream patches to solve several problems -epoch2


author: chenyanpanHW <chenyanpan@huawei.com> - 2.3.3-5
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-cryptsetup-add-system-library-paths.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fix-compat-test.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0003-Check-segment-gaps-regardless-of-heap-space.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0004-Fix-posible-buffer-overflows-in-LUKS-conversion.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0005-Fix-a-memleak-in-blockwise-test.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0006-CVE-2021-4122.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: zhouyihang <zhouyihang3@h-partners.com> - 7.71.1-34
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dynbuf: provide curlx_ names for reuse by the curl tool
         curl: use curlx_dynbuf for realloc when loading config files
         curl: make file2string use dynbuf
         paramhlp: fix CRLF-stripping files with "-d @file"
         libssh2: set length to 0 if strdup failed
         openldap: create ldap URLs correctly for IPv6 addresses
         multi: avoid memory-leak risk
         tool_cb_rea: limit rate unpause for -T . uploads
         tool_cfgable: free {proxy_}cipher13_list on exit


author: zhouyihang <zhouyihang3@h-partners.com> - 7.71.1-38
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:multi: check that the multi handle is valid in curl_multi_assign


author: xingwei <xingwei14@h-partners.com> - 7.71.1-41
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:altsvc: avoid integer overflow in expire calculation
         test391: verify --path-as-is with redirect
         urlapi: fix redirect to a new fragment or query (only)


author: senlin <xiasenlin1@huawei.com> - 1.0.0-19
changelog:
  - Type: Correction of bad behavior
  - ID: NA
  - SUG: NA
  - DESC: Specify the specific sudo commands for abuild users


author: hongjinghao <hongjinghao@huawei.com> - 1:1.12.16-23
changelog:
  - add backport-bus-dir-watch-Do-not-crash-with-128-dirs.patch	
  backport-Do-not-crash-when-reloading-configuration.patch


author: zhoushuiqing <zhoushuiqing2@huawei.com> - 3.6.2-5
changelog:
  - Type:CVE
  - CVE:CVE-2005-1849,CVE-2016-9840,CVE-2016-9841,CVE-2016-9843,CVE-2018-25032,CVE-2022-37434
  - SUG:NA
  - DESC:backport patchs fix zlib cves: CVE-2005-1849 CVE-2016-9840
         CVE-2016-9841 CVE-2016-9843 CVE-2018-25032 CVE-2022-37434
         backport-fix-CVE-2005-1849.patch
         backport-fix-CVE-2016-9840.patch
         backport-fix-CVE-2016-9841.patch
         backport-fix-CVE-2016-9843.patch
         backport-fix-CVE-2018-25032.patch
         backport-fix-CVE-2022-37434-1.patch
         backport-fix-CVE-2022-37434-2.patch


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.2-10
changelog:
  - Type:CVE
  - ID:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
  - SUG:restart
  - DESC:fix CVE-2022-2795,CVE-2022-38177 and CVE-2022-38178


author: Roberto Sassu <roberto.sassu@huawei.com> - 0.3.94-1
changelog:
  - Add obj_label attribute in file list
  - Replace hard coded permission
  - Set user.digest_list xattr
  - Bug fixes


author: gaihuiying <gaihuiying1@huawei.com> - 4.2.23-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:remove recommends rpm-plugins-systemd-inhibit
         backport community patches and fix CVE-2021-3445
         delete duplicate python3-libdnf dependency


author: renmingshuai <renmingshuai@huawei.com> - 2.82-14
changelog:
  - Type:bugfix
  - Id:
  - SUG:NA
  - DESC:Reduce code duplication, reuse existing functions
         Fix memory leak when using --dhcp-optsfile with DHCPv6 options


author: lingsheng <lingsheng1@h-partners.com> - 2.82-18
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Update DNS records after pruning DHCP leases
         Fix potential memory leak
         Fix possible SIGSEGV in bpf.c
         adapt bugfix allow binding mac with ipv6


author: zhangbowei<zhangbowei@kylinos.cn> - 1.0.0.rc3-219
changelog:
  - Type: bugfix
  - CVE:  NA
  - SUG:  NA
  - DESC: fix the bug when runc failed to update fat container memory value


author: lifeifei<lifeifei@kylinos.cn> - 2.0.11-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix: if libvirt and ebtables are installed at the same time, ping the operation prompts "sendmsg: Operation not permitted".


author: xinghe <xinghe2@h-partners.com> - 2.0.11-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix ebtables-restore --noflush failed when ebtables is uninstall


author: lvxiangcong<lvxiangcong@kylinos.cn> - 3.4.14-6
changelog:
  - Type:CVE
  - CVE:CVE-2022-3064
  - SUG:NA
  - DESC: backport fix CVE-2022-3064 for openEuler-20.03-LTS-SP4


author: lvxiangcong<lvxiangcong@kylinos.cn> - 3.4.14-7
changelog:
  - Type:CVE
  - CVE:CVE-2022-41723
  - SUG:NA
  - DESC: backport fix CVE-2022-41723 for openEuler-20.03-LTS-SP4


author: lvxiangcong<lvxiangcong@kylinos.cn> - 3.4.14-9
changelog:
  - Type:CVE
  - CVE:CVE-2023-32082 CVE-2021-28235
  - SUG:NA
  - DESC: backport fix CVE-2023-32082 and CVE-2021-28235


author: lvxiangcong <lvxiangcong@kylinos.cn> - 3.4.14-11
changelog:
  - Type:CVES
  - ID:CVE-2024-24791 CVE-2023-45288 CVE-2022-1962 CVE-2022-41725 CVE-2022-2880
       CVE-2024-24785 CVE-2023-45290 CVE-2022-32148 CVE-2023-29406 CVE-2023-39326
       CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 
  - SUG:NA
  - DESC:Batch fix cves through rebuild


author: dillon chen <dillon.chen@gmail.com> - 2.4.5-5
changelog:
  - CVE-2020-18651,CVE-2020-18652
  - CVE-2021-36048,CVE-2021-39847,CVE-2021-42530,CVE-2021-36046,CVE-2021-36055
  - CVE-2021-40716,CVE-2018-12648,CVE-2021-36054,CVE-2021-36047,CVE-2021-36052
  - CVE-2021-36058,CVE-2021-36045,CVE-2021-42531,CVE-2021-36064,CVE-2021-42529
  - CVE-2021-42528,CVE-2021-36050,CVE-2021-40732
  - CVE-2021-36056,CVE-2021-42532,CVE-2021-36053,CVE-2021-36051


author: wangkai <wangkai385@huawei.com> - 1.0.6-20
changelog:
  - Rebuild for fix log4j1.x cves

   * Thu Mar 5 2020 wangzhishun <wangzhishun1@huawei.com> - 1.0.6-19
   - Package init


author: wangkai <13474090681@163.com> - 1:2.3.0-1
changelog:
  - Update to 2.3.0 for fix CVE-2022-48682
  - Add ncurses mode for interactive file deletion (plain mode still available via --plain or ./configure).
  - Add --minsize --maxsize --time --order=ctime --log --deferconfirmation --cache option.
  - Use configure script for installation (Autotools/Automake).
  - Rename cs command ("clear all selections") from cs to csel.
  - Rename igs command ("invert selections") from igs to isel.
  - Add "prune" command as synonym for DELETE key.
  - Clear selections after deleting files via prune/DELETE.
  - Fix dependency issues when fdupes is configured to not use ncurses.
  - Do not enter ncurses mode when --immediate option given.


author: liqiuyu <liqiuyu@kylinos.cn> - 0.4.0-10
changelog:
  - add bz1766993-fence_virtd-1-fix-segfault-no-domains.patch
  - add bz1766993-fence_virtd-2-return-mainloop-on-interrupt.patch


author: happyworker <208suo@208suo.com> - 4.2.4-23
changelog:
  - Fix CVE-2020-22026/CVE-2020-22019/CVE-2020-22021/CVE-2020-22038/CVE-2020-22039/CVE-2020-22044/CVE-2020-22043


author: happyworker <208suo@208suo.com> - 4.2.4-24
changelog:
  - Fix CVE-2021-38090/CVE-2020-21697/CVE-2020-22042/CVE-2020-21688/CVE-2020-22037/CVE-2020-22051/CVE-2020-22020/CVE-2025-22921/CVE-2025-22919


author: openEuler Buildteam <buildteam@openeuler.org> - 2:4.7.0-4
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:Fix test failures ran as root and enable -xautofs and disable leaf opt


author: zhouyihang <zhouyihang3@h-partners.com> - 0.6.6-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:To reduce unnecessary loading of ebtables-related kernel modules
         fix(nm): release NM client after a timeout


author: yangzhuangzhuang<yangzhuangzhuang1@huawei.com> - 2.6.4-3
changelog:
  - The autoreconf command is used during compilation.
    Therefore,the automake and autoconf compilation dependencies need to added.


author: liyuxiang <liyuxiang@ncti-gba.cn> - 2:2.8.1-2
changelog:
  - Fix CVE-2022-39316
  - Fix CVE-2022-39318
  - Fix CVE-2022-39319
  - Fix CVE-2022-39347
  - Fix CVE-2022-41877


author: Funda Wang <fundawang@yeah.net> - 2:2.11.1-1
changelog:
  - 2.11.1
  - Fix CVE-2023-40567
  - Fix CVE-2023-40569
  - Fix CVE-2023-40188
  - Fix CVE-2023-40186
  - Fix CVE-2023-40181
  - Fix CVE-2023-39353
  - Fix CVE-2023-39352
  - Fix CVE-2023-39356
  - Fix CVE-2023-39350
  - Fix CVE-2023-39351
  - Fix CVE-2023-39354
  - Fix CVE-2023-40589


author: wangkai <13474090681@163.com> - 2:2.11.7-1
changelog:
  - Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
    CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
    CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660


author: openEuler Buildteam <buildteam@openeuler.org> - 2.9.9-0
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:update fuse2 from 2.9.7 to 2.9.9,
         update fuse3 from 3.2.3 to 3.9.0


author: yinbin <yinbin8@huawei.com> - 1.0.2-77
changelog:
  - openGauss: support kernel connnect
  - xdp: support stack bind numa
  - CFG: fix xdp iface check error
  - fix build error in 2003SP4
  - cfg: show dpdk args after dpdk_adjust_args
  - fix free null pointer when no matching device is found
  - update test/unitest/ltran/ltran_param_test.c.
  - Fix the wrong spelling description in the notes and logs
  - LWIP: adjust position of shutdown in callback of connect
  - fix socket of control thread is overwirtten due to another primary process start


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-79
changelog:
  - cfg: notify that it's unsupported, when stack_num > 1
  - fix errno == ETIMEFOUT
  - fix epoll and recv threads blocked on the same semaphore. data cannot be read in recv thread.
  - fix rpc pool leak, when thread exits
  - remove app_bind_numa check from exclude_cpus
  - openGauss: fix connection attempt failed
  - openGauss: fix gs_ctl switchover failed


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-80
changelog:
  - Connect: execute lwip connect if dst_ip and host_ip are in the same network.
  - kernerl bind: add ipv6 add check
  - openGauss unsupport_tcp_optname
  - fix a contention issue when rpc pools are added to rpc_pool_array


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-82
changelog:
  - DUMP: fix abnomal printing in the dump process.
  - SIGNAL: Adjust hijack sigal table to hijack SIGABRT SIGQUIT and delet SIGKILL
  - SIGNAL: Adjust sigaction function to keep lstack signal function executed successfully.


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-83
changelog:
  - SIGNAL: block SIGSEGV during exit process
  - Stack: unset stack_stop, while stacks exit by rpc message.
  - fix the memory leak when using strdup


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-84
changelog:
  - update gazelle max numa nodes 8
  - Protocal: fixing deathlock between protocol threads and app thread
  - Connect: fix benchmark_dws connect failed
  - RTC-mode: fix gazellectl can't print connenct info
  - add xdp tx checksum/tso offload


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-85
changelog:
  - sockio: fix rpc_send coredump after RPC_MSG_EXIT
  - sockio: fix tcp_write not remove EPOLLOUT
  - fix 20.03-LTS build failed
  - sk_wait: igonre mem_thread flush signal
  - sockio: fix sendmbox full return EWOULDBLOCK
  - sockio: fix callback_tcp_send output too many at once
  - mempool: increase MEM_THREAD_MANAGER_FREE_S to avoid poll
  - sockctl: fix rtw broadcast close and shutdown
  - poll: fix do_lwip_connected_callback not delete poll kernel fd
  - sk_event: fix rtw epoll wrong event notify and remove
  - sockio: fix rtw_stack_tcp_write wrong copied_total after append
  - epoll: fix do_lwip_connected_callback
  - sk_wait: fix lwip_wait_foreach_notify coredump at startup
  - socket: fix stack_udp_readmsg return len
  - sk_wait: fix sock_wait_common_free socket: simplify calling free_count in rtw_stack_tcp_write
  - mbox: fix mbox_ring_common_free coredump when rte_ring_create failed
  - sk_wait: fix lwip_tcp_allow_send coredump
  - mempool: stop using cache when too many threads
  - mempool: fix pthread_tryjoin_np coredump when mysqld shutdown
  - mempool: mem_get_rpc add reserve limit
  - mempool: fix mbox_ring free not call recv_finish_burst
  - mempool: modify mbuf num and rpc_msg num
  - socket: fix sk_wait cannot be interrupted by signals
  - socket: fix tcp closed
  - tcp: add GAZELLE_TCP_ASYNC_RECVD      fix mbuf OOM caused by untimely sockio_peek_recv_free
  - socket: fix stack_tcp_read do not recv_finish_burst
  - socket: fix connect blocking
  - mempool: fix copy_mbuf_private
  - dfx: support sk_wait stat
  - mempool: add mem_thread_cache_flush          fix PBUF_POOL_PREINIT
  - cfg: add mem_async_mode
  - cfg: add mem_cache_max and change default rpc_msg_max
  - socket: adapt to tcp and udp
  - socket: refactor tcp and udp
  - socket: adapt to sock_event
  - socket: refactor sock_event
  - cleancode: remove get_stack_tid DPDK_PKT_BURST_SIZE PACKET_READ_SIZE
  - cleancode: remove gazelle_light_ring
  - cleancode: add GAZELLE_SAME_NODE
  - RTC: fixing program stuck while gazelle exit in multi-threads envirement


author: Shujian Zhao <zhaoshujian@huawei.com> 10.3.0-3
changelog:
  - Type:Fix
  - ID:NA
  - SUG:NA
  - DESC:Change isl version from isl-0.21 to isl-0.16.1 to fix the deja test ice.


author: Shujian Zhao <zhaoshujian@huawei.com> 10.3.0-4
changelog:
  - Type:Fix
  - ID:NA
  - SUG:NA
  - DESC:Add missing file and start project build to fix the nag ICE issue.


author: hugel <gengqihu2@h-partners.com> - 9.52-23
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Sync some patches from community
         backport-Fix-memory-leak-in-pdfwrite-device.patch
         backport-Fix-memory-leak-on-error-in-bitmap_paint-and-its-cal.patch
         backport-Fix-memory-leaks-in-tiffsep.patch


author: yaoxin <yao_xin001@hoperun.com> - 5.2.2-1
changelog:
  - Update to 5.2.2
    * Fixes for CVE-2023-48161 (bsc#1217390), CVE-2022-28506 (bsc#1198880)
    * Address SF issue #151: A heap-buffer-overflow in gif2rgb.c:294:45
    * Address SF issue #166: a read zero page leads segment fault in
      getarg.c and memory leaks in gif2rgb.c and gifmalloc.c


author: fuanan <fuanan3@h-partners.com> - 2.27.0-19
changelog:
  - Type:CVE
  - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
  - SUG:NA
  - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465


author: fuanan <fuanan3@h-partners.com> - 2.27.0-25
changelog:
  - Type:CVE
  - ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
  - SUG:NA 
  - DESC:Fix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835


author: chengyechun <chengyechun1@huawei.com> - 2.28-99
changelog:
  - Type:CVE
  - ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
  - SUG:NA
  - DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602


author: chengyechun <chengyechun1@huaiwe.com> - 2.28-101
changelog:
  - Type:bugfix
  - ID:
  - SUG:NA
  - DESC:nscd: Use errval, not errno to guide cache update
         nsce :Skip unusable entries in first pass in prune_cache


author: Feifei Wang <wangfeifei@hygon.cn> - 2.28-102
changelog:
  - x86: Reversing calculation of __x86_shared_non_temporal_threshold
    x86: Optimizing memcpy for AMD Zen architecture
    x86: Add Hygon Dhyana support
    https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=d3c57027470b
    https://sourceware.org/git/?p=glibc.git;a=commit;h=59803e81f96b479c17f583b31eac44b57591a1bf
    https://sourceware.org/git/?p=glibc.git;a=commit;h=ade8b817fead73b302d08c88cd44ea2ea56793d4


author: wanglimin<wanglimin@xfusion.com> - 3.30.1-4
changelog:
  - fix msg error in zh_CN.po for page files of index, a11y-*,
  - about-*,accounts-*,backup-*,bluetooth-*,clock-*,color-*,
  - contacts-*,disk-*


author: wanglimin<wanglimin@xfusion.com> - 3.30.1-5
changelog:
  - fix msg error in zh_CN.po for page files of :
  - files-*,gnome-*,hardware-*,help-*,keyboard-*,look-*,mouse-*


author: wanglimin<wanglimin@xfusion.com> - 3.30.1-7
changelog:
  - fix msg error in zh_CN.po for page files of :
  - power-*,prefs-*,printing-*,privacy-*,screen-*,session-*,sharing-*
  - shell-*,sound-*,status-*,tips-*,user-*,video-*,wacom-*
  - append some missing msg


author: konglidong <konglidong@uniontech.com> - 0-30.20180720git
changelog:
  - update java source from 1.3 to 1.8
  - modify buildrequires from java-devel to java-1.8.0-openjdk-devel


author: wujichao <wujichao1@huawei.com> - 1.15.7-50
changelog:
  - Type:CVE
  - CVE:CVE-2024-45336
  - SUG:NA
  - DESC:remove 0001-drop-hard-code-cert.patch and modify CVE-2024-45336


author: lvying <lvying6@huawei.com> - 2.7-3
changelog:
  - Type:enhancement
  - ID:NA
  - SUG: NA
  - DESC: peripheral package quality reinforcement: backport bugfix patches from community


author: gaihuiying <eaglegai@163.com> - 1.31.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix adjust to abseil-cpp 20210324,since it dont provides absl_dynamic_annotations library anymore


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.04-32
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
         net/bootp: Fix unchecked return value
         fs/iso9660: Avoid reading past the entry boundary
         fs/iso9660: Incorrect check for entry boundary
         fs/iso9660: Prevent skipping CE or ST at start of continuation area
         fs/iso9660: Prevent read past the end of system use area
         fs/iso9660: Add check to prevent infinite loop
         gentpl.py: Remove .interp section from .img files
         kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
         font: Reject fonts with negative max_char_width or max_char_height
         font: Assign null_font to unknown_glyph
         font: Check return value of grub_malloc() in ascii_glyph_lookup()


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.04-36
changelog:
  - Type:CVE
  - CVE:CVE-2023-4692 CVE-2023-4693
  - SUG:NA
  - DESC:fs/ntfs: Make code more readable
         fs/ntfs: Fix an OOB read when parsing a volume label
         fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
         fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
         fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
         fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.04-38
changelog:
  - Type:CVE
  - CVE:CVE-2024-1048
  - SUG:NA
  - DESC:grub-set-bootflag: Fix for CVE-2024-1048
         commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
         kern/acpi: Skip NULL entries in RSDT and XSDT
         util/grub-mount: Check file path sanity
         kern/acpi: Use xsdt_addr if present
         commands/acpi: Use xsdt_addrifpresent


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.04-40
changelog:
  - Type:CVE
  - CVE:CVE-2024-45781,CVE-2024-45782,CVE-2024-56737,CVE-2024-45780,CVE-2024-45783,CVE-2024-49504,CVE-2025-0624,CVE-20
  24-45774,CVE-2024-45775,CVE-2025-0622,CVE-2025-0622,CVE-2025-0622,CVE-2024-45776,CVE-2024-45777,CVE-2025-0690,CVE-20
  25-1118,CVE-2024-45778,CVE-2024-45779,CVE-2025-0677,CVE-2025-0684,CVE-2025-0685,CVE-2025-0686,CVE-2025-0689,CVE-2025
  -0678,CVE-2025-1125
  - SUG:NA
  - DESC:fix the vulnerabilities announced on February 18th, 2025


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.2.3-1
changelog:
  - Upgrade to 1.2.3
  - Update Version, Release, Source0, BuildRequires
  - Update stage 'build', 'install', 'check' and 'files'


author: Funda Wang <fundawang@yeah.net> - 1.16.2-6
changelog:
  - fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
    CVE-2024-47607, CVE-2024-47615, CVE-2024-47835


author: yaoxin <yao_xin001@hoperun.com> - 1.16.2-7
changelog:
  - Fix cves:
    CVE-2024-47606,CVE-2024-47613,CVE-2024-47775,CVE-2024-47776
    CVE-2024-47777,CVE-2024-47778,CVE-2024-47774,CVE-2024-47540
    CVE-2024-47602,CVE-2024-47601,CVE-2024-47834,CVE-2024-47537
    CVE-2024-47597,CVE-2024-47543,CVE-2024-47596,CVE-2024-47539
    CVE-2024-47546


author: Jia Chao <jiac13@chinaunicom.cn> - 3.3.4-4
changelog:
  - fix: use $HOME rather than /home/abuild, suit for all buildtools.
  - fix: yarn have ELF bin, not noarch at all.


author: xinghe <xinghe2@h-partners.com> - 2.2.16-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:server: 'source' interface ignored from 'default-server' directive


author: yaoxin <yaoxin30@h-parters.com> - 1.12.1-1
changelog:
  - Update to 1.12.1 and fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-21
changelog:
  - Type:CVE
  - ID:CVE-2023-27522, CVE-2023-25690
  - SUG:restart
  - DESC:fix CVE-2023-27522, CVE-2023-25690


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-23
changelog:
  - Type:CVE
  - ID:CVE-2023-31122, CVE-2023-45802
  - SUG:restart
  - DESC:fix CVE-2023-31122 and CVE-2023-45802


author: chengyechun <chengyechun1@huaiwe.com> - 2.4.43-24
changelog:
  - Type:CVE
  - ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
  - SUG:NA
  - DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-25
changelog:
  - Type:CVE
  - ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
  - SUG:NA
  - DSEC:fix some CVEs


author: yangjiaqi <yangjiaqi16@huawei.com> - 2.0.18-15
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: keep the service status unchanged after iSulad service upgrade


author: gaoxingwang<gaoxingwang@huawei.com> - 10.04-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: ifup-eth: add a new PERSISTENT_DHCLIENT_IPV6 option for IPv6 dhclient daemon


author: zhangxingrong <zhangxingrong@uniontech.com> - 3.16-4
changelog:
  - iperf3 now builds correctly on architectures without native support for 64-bit atomic types, by linking with the libatomic library


author: wangkai <13474090681@163.com> - 3.17.1-1
changelog:
  - Update to 3.17.1
  - iperf3 no longer changes its current working directory in --daemon mode. This results in more 
    predictable behavior with relative paths, in particular finding key and credential files for authentication.
  - A new --json-stream option has been added to enable a streaming output format, consisting of 
    a series of JSON objects (for the start of the test, each measurement interval, and the end of the test) separated by newlines
  - UDP tests now work correctly between different endian hosts
  - The --fq-rate parameter now works for --reverse tests
  - The statistics reporting interval is now available in the --json start test object


author: xihaochen <xihaochen@huawei.com> - 1.8.18-17
changelog:
  - Type:requirement
  - ID:NA
  - SUG:NA
  - DESC:move exchange-bmc-os-info,bmc-snmp-proxy to separate subpackages from ipmitool


author: mengkanglai <mengkanglai2@huawei.com> - 1.8.18-18
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:lan channel fix set alert on off and lanplus realloc the msg if the payload_length gets update


author: yanglu <yanglu72@h-partners.com> - 5.5.0-19
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:lib:names:check calloc return value in db_names_alloc
         fix fd leak when playing with netns


author: yanglu <yanglu72@h-partners.com> - 20190709-9
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:fix ping6 binding to VRF and address
         Avoid binding to non-VRF
         Fix ARP protocol field for AX.25 and NETROM


author: jingxiaolu <lujingxiao@huawei.com> - 0.9.5-21
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:restart
  - DESC:add repo to local image when output transporter is docker://


author: wutao <wutao61@huawei.com> - 2.0.14-9
changelog:
  - fix folllowing CVE in this revision
    CVE-2018-18873
    CVE-2018-19541 
    CVE-2018-9055
    CVE-2018-9154 
    CVE-2018-19539 
    CVE-2018-20570
    CVE-2018-9252 
    CVE-2018-19540 
    CVE-2018-20622
    CVE-2018-19139


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.422-b05.6
changelog:
  - let support-KAE-zip.patch not install libz.so on loongarch64
  - update LoongArch64 port to 8u422
  - fix changelog date error


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.432.b06-1
changelog:
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
  - modified GCC-12-reports-some-compiler-warnings.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
  - add Backport-8057910-G1-BOT-verification-should-not-pass.patch
  - add Backport-8069330-and-adapt-G1GC-related-optimization.patch
  - add SA-redact-support-password.patch


author: kuenking111 <wangkun49@huawei.com> -1:1.8.0.432.b06-2
changelog:
  - modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
  - add 8253072-XERCES-version-is-displayed-incorrect.patch
  - add 8159461-8288556-getComponentType.patch
  - add 8136926-phi-NULL-assert-in-PhaseIdealLoop-try_move_s.patch
  - add 8269934-RunThese24H.java-failed-with-EXCEPTION_ACCES.patch


author: yangyingqing <yangyingqing@h-partners.com> - 1:11.0.27.6-0
changelog:
  - update to 11.0.27+6(GA)
  - delete 8347965-tz-Update-Timezone-Data-to-2025a.patch
  - add fix-potential-build-fail-in-jbolt.patch


author: kuenking111 <wangkun49@huawei.com> - 1:17.0.13.11-4
changelog:
  - add Add-jbolt-feature.patch
  - add Enable-TLS-to-communciation-between-JBooster-Server-.patch
  - add SA-redact-support-password.patch
  - add Add-specialized-hashmap-version-of-the-long-type.patch
  - add Implement-JBooster-RPC-byte-alignment.patch
  - add Optimize-LazyAOT-klasses-sending-strategy.patch
  - add Add-KAE-zip-GzipKAEBenchmark-Benchmark.patch
  - add Add-Fix-clear-mark-for-NativeGotJump.patch
  - add 8323066-TestSkipRebuildRemsetPhase.java-fails-with-S.patch
  - modify downgrade-the-glibc-symver-of-memcpy.patch


author: kuenking111 <wangkun49@huawei.com> - 1:17.0.13.11-7
changelog:
  - modify Add-jbolt-feature.patch
  - modify Add-specialized-hashmap-version-of-the-long-type.patch
  - modify Enable-TLS-to-communciation-between-JBooster-Server-.patch


author: Benshuai5D <benshuai5d@huawei> - 1:17.0.14.7-0
changelog:
  - update to 17.0.14
  - modify 8264805-Backport-Ahead-of-Time-Compiler.patch
  - modify 8280872-Reorder-code-cache-segments-to-improv.patch
  - modify 8323066-TestSkipRebuildRemsetPhase.java-fails-with-S.patch
  - modify Backport-Important-Fixed-Issues.patch
  - modify add-version-txt.patch
  - modify jdk17-Add-KAE-provider.patch


author: yaoxin <yao_xin001@hoperun.com> - 1.5.4-1
changelog:
  - Upgrade to 1.5.4 for fix cves: CVE-2022-40149,CVE-2022-40150,
    CVE-2022-45685,CVE-2022-45693 and CVE-2023-1436


author: yinsist <jianhui.oerv@isrc.iscas.ac.cn> - 1.6-4
changelog:
  - Valgrind does not support certain architectures like RISC-V, Before depending on Valgrind, first check if Valgrind supports the architecture


author: sunhai <sunhai10@huawei.com> - 0.15-7
changelog:
  - Handle yet another out of memory condition
  - Fix issue 854 Set error json_tokener_error_memory in
  - Issue 857 fix a few places where json_tokener should
  - Handle NULL gracefully in json_tokener_free
  - Issue 881 don t allow json_tokener_new_ex with a dep


author: Lichang Zhao<zhaolichang@huawei.com> - 1.11.1-13
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix the problem that sandbox stratovirt with network devices fails to start


author: chenyi <chenyi211@huawei.com> - 4.19.90-2505.3.0.0327
changelog:
  - !16177  Fix CVE-2022-49850
  - !16176  Fix CVE-2022-49842
  - !16187  ata: libata-transport: fix double ata_host_put() in ata_tport_add()
  - !16188  nvmet: avoid potential UAF in nvmet_req_complete()
  - !16238  dm ioctl: fix misbehavior if list_versions races with module loading
  - !16200  drm/amdkfd: Fix an illegal memory access
  - dm ioctl: fix misbehavior if list_versions races with module loading
  - !16175  Fix CVE-2022-49915
  - drm/amdkfd: Fix an illegal memory access
  - nvmet: avoid potential UAF in nvmet_req_complete()
  - ata: libata-transport: fix double ata_host_put() in ata_tport_add()
  - nilfs2: fix deadlock in nilfs_count_free_blocks()
  - ASoC: soc-utils: Remove __exit for snd_soc_util_exit()
  - ASoC: core: Fix use-after-free in snd_soc_exit()
  - mISDN: fix misuse of put_device() in mISDN_register_device()
  - mISDN: fix possible memory leak in mISDN_register_device()
  - !16139  Bluetooth: Fix use after free in hci_send_acl
  - !16140  NFC: NULL out the dev->rfkill to prevent UAF
  - !16145  CVE-2022-49755
  - usb: gadget: f_fs: Add unbind event before functionfs_unbind
  - usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait
  - usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait
  - NFC: NULL out the dev->rfkill to prevent UAF
  - Bluetooth: Fix use after free in hci_send_acl


author: chenyi <chenyi211@huawei.com> - 4.19.90-2505.4.0.0328
changelog:
  - !15445 Add IOAPIC support for Hygon family 18h model 10h
  - !15444 Add LS and IF mce types for Hygon family 18h model 7h
  - !16321  bpf: Fix WARN() in get_bpf_raw_tp_regs
  - !16293  mISDN: fix possible memory leak in mISDN_dsp_element_register()
  - !16203  ext4: fix off-by-one error in do_split
  - !16221  jbd2: remove wrong sb->s_sequence check
  - !16205  ext4: update s_journal_inum if it changes after journal replay
  - !16288  scsi: core: Clear driver private data when retrying request
  - bpf: Fix WARN() in get_bpf_raw_tp_regs
  - !15446 Add support for Hygon family 18h model 8h
  - !15356 Fix northbridge init warning in guest for Hygon family 18h model 4h
  - !16290  CVE-2024-57982
  - !16285  udf: Fix a slab-out-of-bounds write bug in udf_find_entry()
  - !16275  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
  - !16199 [openEuler-1.0-LTS] Enhanced Hygon processor's processing capabilities for large memory copying
  - mISDN: fix possible memory leak in mISDN_dsp_element_register()
  - net: fix kabi broken in struct netns_xfrm
  - xfrm: state: fix out-of-bounds read during lookup
  - net: xfrm: Localize sequence counter per network namespace
  - scsi: core: Clear driver private data when retrying request
  - udf: Fix a slab-out-of-bounds write bug in udf_find_entry()
  - x86: Enhanced copy capabilities for Hygon processor
  - kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
  - jbd2: remove wrong sb->s_sequence check
  - ext4: update s_journal_inum if it changes after journal replay
  - ext4: fix off-by-one error in do_split
  - EDAC/amd64: Add support for Hygon family 18h model 8h
  - x86/amd_nb: Add support for Hygon family 18h model 8h
  - iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
  - EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
  - x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h


author: chenyi <chenyi211@huawei.com> - 4.19.90-2505.5.0.0329
changelog:
  - !16353  CVE-2022-49769
  - !16417  dm-bufio: don't schedule in atomic context
  - !16409  HID: hyperv: fix possible memory leak in mousevsc_probe()
  - !16425  misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram()
  - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram()
  - dm-bufio: don't schedule in atomic context
  - HID: hyperv: fix possible memory leak in mousevsc_probe()
  - !16375  CVE-2025-37752
  - net_sched: sch_sfq: move the limit validation
  - net_sched: sch_sfq: use a temporary work area for validating configuration
  - gfs2: Check sb_bsize_shift after reading superblock
  - gfs2: add validation checks for size of superblock


author: chenyi <chenyi211@huawei.com> - 4.19.90-2506.1.0.0330
changelog:
  - !16548  mm/vmscan: don't try to reclaim hwpoison folio
  - !16511  media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer()
  - !16294  fs/jfs: Prevent integer overflow in AG size calculation
  - mm/vmscan: don't try to reclaim hwpoison folio
  - !16534  memcg: always call cond_resched() after fn()
  - memcg: always call cond_resched() after fn()
  - !16519  mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put()
  - mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put()
  - media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer()
  - fs/jfs: Prevent integer overflow in AG size calculation


author: chenyi <chenyi211@huawei.com> - 4.19.90-2506.2.0.0331
changelog:
  - !16577  capabilities: fix undefined behavior in bit shift for CAP_TO_MASK
  - !16306 [openEuler-1.0-LTS] scsi: libsas: Abort all in-flight requests when device is gone
  - !16583  module: ensure that kobject_put() is safe for module type kobjects
  - !16598  vgacon: Add check for vc_origin address range in vgacon_scroll()
  - !16616  pci:vga fix race condition in vga_arb_write
  - !16495  dm crypt: add cond_resched() to dmcrypt_write()
  - !16540  scsi: target: Fix WRITE_SAME No Data Buffer crash
  - pci:vga fix race condition in vga_arb_write
  - vgacon: Add check for vc_origin address range in vgacon_scroll()
  - module: ensure that kobject_put() is safe for module type kobjects
  - capabilities: fix undefined behavior in bit shift for CAP_TO_MASK
  - scsi: target: Fix WRITE_SAME No Data Buffer crash
  - scsi: libsas: Abort all in-flight requests when device is gone
  - dm crypt: add cond_resched() to dmcrypt_write()


author: chenyi <chenyi211@huawei.com> - 4.19.90-2506.3.0.0332
changelog:
  - !16650  mm/vmscan: fix hwpoisoned THP handling in shrink_page_list
  - mm/vmscan: fix hwpoisoned THP handling in shrink_page_list


author: chenyi <chenyi211@huawei.com> - 4.19.90-2506.4.0.0333
changelog:
  - !16754  video: fbdev: amba-clcd: Fix refcount leak bugs
  - !16704  ima: prevent concurrent list operations in ima_lsm_update_rules
  - video: fbdev: amba-clcd: Fix refcount leak bugs
  - !16554 [openEuler-1.0-LTS] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
  - PCI: Supplement ACS quirk for more Zhaoxin Root Ports
  - PCI: Add ACS quirk for more Zhaoxin Root Ports
  - ima: prevent concurrent list operations in ima_lsm_update_rules


author: chenyi <chenyi211@huawei.com> - 4.19.90-2507.1.0.0334
changelog:
  - !16854  ftrace: Fix UAF when lookup kallsym after ftrace disabled
  - !16802  tty: vt: initialize unicode screen buffer
  - !16856  ipvs: fix WARNING in ip_vs_app_net_cleanup()
  - ipvs: fix WARNING in ip_vs_app_net_cleanup()
  - ftrace: Fix UAF when lookup kallsym after ftrace disabled
  - !16846  Fix CVE-2025-38058
  - !16835  erspan: do not use skb_mac_header() in ndo_start_xmit()
  - __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock
  - do_umount(): add missing barrier before refcount checks in sync case
  - !16834  kcm: close race conditions on sk_receive_queue
  - !16833  qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info
  - !16832  net: usb: smsc95xx: Limit packet length to skb->len
  - !16831  CVE-2023-53125
  - erspan: do not use skb_mac_header() in ndo_start_xmit()
  - kcm: close race conditions on sk_receive_queue
  - qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info
  - net: usb: smsc95xx: Limit packet length to skb->len
  - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull
  - net: usb: smsc75xx: Limit packet length to skb->len
  - !16823  hidraw:·fix·memory·leak·in·hidraw_release
  - HID: hidraw: fix a problem of memory leak in hidraw_release()
  - HID: hidraw: fix memory leak in hidraw_release()
  - !16811  ARM: OMAP2+: display: Fix refcount leak bug
  - !16796  spmi: trace: fix stack-out-of-bound access in SPMI tracing functions
  - !16810  CVE-2022-50080
  - ARM: OMAP2+: display: Fix refcount leak bug
  - !16800  media: pvrusb2: fix memory leak in pvr_probe
  - tee: fix compiler warning in tee_shm_register()
  - tee: add overflow check in register_shm_helper()
  - tty: vt: initialize unicode screen buffer
  - media: pvrusb2: fix memory leak in pvr_probe
  - spmi: trace: fix stack-out-of-bound access in SPMI tracing functions


author: chenyi <chenyi211@huawei.com> - 4.19.90-2507.2.0.0335
changelog:
  - !17017  ipvlan: Fix out-of-bounds caused by unclear skb->cb in I2e mode
  - !17018 v2  bnxt_en: Fix out-of-bound memcpy() during ethtool -w
  - !16962  firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails
  - !16945  scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq
  - !17021  dm raid: fix address sanitizer warning in raid_status
  - dm raid: fix address sanitizer warning in raid_status
  - !17005  sch_htb: Fix CVE-2025-37932
  - bnxt_en: Fix out-of-bound memcpy() during ethtool -w
  - ipvlan: Fix out-of-bounds caused by unclear skb->cb in I2e mode
  - !16941 v2  dm: fix unconditional IO throttle caused by REQ_PREFLUSH
  - sch_htb: make htb_deactivate() idempotent
  - sch_htb: make htb_qlen_notify() idempotent
  - !16987  PCI/GPU: fix hard lockup in vga_arb_release
  - !16974  iavf: Fix reset error handling
  - !16975  RDMA/rxe: Fix error unwind in rxe_create_qp()
  - !16976  RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug
  - !16978  usbnet: Fix linkwatch use-after-free on disconnect
  - !16979  RDMA/hfi1: fix potential memory leak in setup_base_ctxt()
  - PCI/GPU: fix hard lockup in vga_arb_release
  - !16980  arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
  - !16923  PM: hibernate: defer device probing when resuming from hibernation
  - arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
  - RDMA/hfi1: fix potential memory leak in setup_base_ctxt()
  - usbnet: Fix linkwatch use-after-free on disconnect
  - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug
  - RDMA/rxe: Fix error unwind in rxe_create_qp()
  - iavf: Fix reset error handling
  - !16953  usb: host: ohci-ppc-of: Fix refcount leak bug
  - !16955  dm raid: fix address sanitizer warning in raid_resume
  - !16928  net: mdio: fix undefined behavior in bit shift for __mdiobus_register
  - !16929  tipc: fix the msg->req tlv len check in tipc_nl_compat_name_table_dump_header
  - !16960  wifi: cfg80211: fix memory leak in query_regdb_file()
  - !16961  CVE-2022-49871
  - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails
  - net: tun: call napi_schedule_prep() to ensure we own a napi
  - net: tun: Fix memory leaks of napi_get_frags
  - wifi: cfg80211: fix memory leak in query_regdb_file()
  - dm raid: fix address sanitizer warning in raid_resume
  - !16913  drm/amd/display: clear optc underflow before turn off odm clock
  - usb: host: ohci-ppc-of: Fix refcount leak bug
  - !16910  KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0
  - !16931  md: call __md_stop_writes in md_stop
  - !16930  md-raid10: fix KASAN warning
  - scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq
  - dm: fix unconditional IO throttle caused by REQ_PREFLUSH
  - !16506  ipvs: fix WARNING in __ip_vs_cleanup_batch()
  - !16505  net: sched: Fix use after free in red_enqueue()
  - !16917  nfs: handle failure of nfs_get_lock_context in unlock path
  - md: call __md_stop_writes in md_stop
  - md-raid10: fix KASAN warning
  - tipc: fix the msg->req tlv len check in tipc_nl_compat_name_table_dump_header
  - net: mdio: fix undefined behavior in bit shift for __mdiobus_register
  - !16920  net: atlantic: fix aq_vec index out of range error
  - !16921  net: tunnels: annotate lockless accesses to dev->needed_headroom
  - PM: hibernate: defer device probing when resuming from hibernation
  - !16907  crypto: algif_hash - fix double free in hash_accept
  - net: tunnels: annotate lockless accesses to dev->needed_headroom
  - !16890  sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed
  - !16889  scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
  - net: atlantic: fix aq_vec index out of range error
  - !16876  hulk-4.19-fix-CVE-2022-49989
  - nfs: handle failure of nfs_get_lock_context in unlock path
  - !16904  wifi: mac80211: Fix UAF in ieee80211_scan_rx()
  - !16888  drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers()
  - drm/amd/display: clear optc underflow before turn off odm clock
  - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0
  - !16824  cifs: fix small mempool leak in SMB2_negotiate()
  - !16825  smb: client: Fix use-after-free in cifs_fill_dirent
  - crypto: algif_hash - fix double free in hash_accept
  - !16900  regulator: of: Fix refcount leak bug in of_get_regulation_constraints()
  - wifi: mac80211: Fix UAF in ieee80211_scan_rx()
  - regulator: of: Fix refcount leak bug in of_get_regulation_constraints()
  - !16869  vt: Clear selection before changing the font
  - !16873  mtd: maps: Fix refcount leak in ap_flash_init
  - !16871  ALSA: bcd2000: Fix a UAF bug on the error path of probing
  - !16878  wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
  - !16867  drivers:md:fix a potential use-after-free bug
  - sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed
  - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
  - drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers()
  - wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
  - xen/privcmd: fix error exit of privcmd_ioctl_dm_op()
  - xen/privcmd: Corrected error handling path
  - mtd: maps: Fix refcount leak in ap_flash_init
  - ALSA: bcd2000: Fix a UAF bug on the error path of probing
  - vt: Clear selection before changing the font
  - drivers:md:fix a potential use-after-free bug
  - smb: client: Reset all search buffer pointers when releasing buffer
  - smb: client: Fix use-after-free in cifs_fill_dirent
  - cifs: fix small mempool leak in SMB2_negotiate()
  - ipvs: fix WARNING in __ip_vs_cleanup_batch()
  - net: sched: Fix use after free in red_enqueue()


author: chenyi <chenyi211@huawei.com> - 4.19.90-2507.3.0.0336
changelog:
  - !17108  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
  - !17113  Bluetooth: btrtl: Prevent potential NULL dereference
  - Bluetooth: btrtl: Prevent potential NULL dereference
  - arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
  - !17057  media: cxusb: no longer judge rbuf when the write fails
  - !17073  Revert "dm-bufio: don't schedule in atomic context"
  - Revert "dm-bufio: don't schedule in atomic context"
  - !17046 v2  net: Fix CVE-2025-38000
  - media: cxusb: no longer judge rbuf when the write fails
  - sch_cbq: make cbq_qlen_notify() idempotent
  - net/sched: Always pass notifications when child class becomes empty
  - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()
  - sch_qfq: make qfq_qlen_notify() idempotent
  - sch_hfsc: make hfsc_qlen_notify() idempotent
  - sch_drr: make drr_qlen_notify() idempotent


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 2.0.20-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix issue about iomem file that contains too many contens.As a result,the kdump service failed


author: snoweay <snoweay@163.com> - 2.0.20-15
changelog:
  - Add support for quick kexec
    kexec: Add quick kexec support
    arm64: Quick kexec implementation for arm64


author: caixiaomeng<caixiaomeng2@huawei.com> -1:0.9.1-23
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ignore sssnic module when building hotpatch to fix sssnic wrongly dependency of sssnic


author: wangyuhang <wangyuhang27@huawei.com> - 1:2020.0.0-8
changelog:
  - solve the problem of dereference null return value when moving a job to the head of the linked list


author: zhangxiaoyu<zhangxiaoyu58@huawei.com> - 2.0.9-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix update cpu-rt period failed and fix layer size type as int64


author: jikai<jikai11@huawei.com> - 2.0.9-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix potential log error, empty pointer reference and overflow


author: yanzhihua <yanzhihua4@huawei.com> - 12.10.0-25
changelog:
  - Type:enhancement
  - Id:NA
  - SUG:NA
  - DESC:ldconfig_scriptlets does not exist so modify the use of ldconfig, and rename the patch


author: lingsheng <lingsheng1@h-partners.com> - 3.4.3-10
changelog:
  - Type:CVE
  - ID:CVE-2025-5914,CVE-2025-5916,CVE-2025-5917,CVE-2025-5918
  - SUG:NA
  - DESC:fix CVE-2025-5914 CVE-2025-5916 CVE-2025-5917 CVE-2025-5918


author: Lv Ying<lvying6@huawei.com> - 0.1.1-2
changelog:
  - support detecting and attaching of writable tracepoint program
    https://lore.kernel.org/bpf/20211004094857.30868-3-hotforest@gmail.com


author: zhangmingyi <zhangmingyi5@huawei.com> - 2:0.3-2
changelog:
  - backporting: 	backport-libbpf-Ensure-functions-with-always_inline-attribute-are-inline.patch
  		backport-libbpf-Fix-the-name-of-a-reused-map.patch
  		backport-libbpf-preserve-errno-across-pr_warn-pr_info-pr_debug.patch


author: zhangmingyi <zhangmingyi5@huawei.com> - 2:0.3-5
changelog:
  - backporting patches from upstream:
        backport-libbpf-Fix-crash-if-SEC-freplace-programs-don-t-have.patch
        backport-libbpf-Fix-the-case-of-running-as-non-root-with-capa.patch
        backport-libbpf-Fix-overrun-in-netlink-attribute-iteration.patch
        backport-libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
        backport-libbpf-Deal-with-section-with-no-data-gracefully.patch
        backport-libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch
        backport-sync-start-syncing-include-uapi-linux-fcntl.h-UAPI-h.patch
        backport-libbpf-Handle-size-overflow-for-ringbuf-mmap.patch
        backport-libbpf-Use-page-size-as-max_entries-when-probing-rin.patch


author: gaoyi <gaoyi15@huawei.com> - 0.1.8-15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:CVE for libcomps
         https://github.com/rpm-software-management/libcomps/commit/e3a5d056633677959ad924a51758876d415e7046


author: liujing <liujing144@huawei.com> - 1.0.0-30
changelog:
  - update patches from https://code.foxkit.us/adelie/aports-old/blob/50de7d785d5500a14ed00fa12e483e8ceaf4f06a/main/libdv


author: Wenlong Ding <wenlong.ding@turbolinux.com.cn> - 2.6.4-22
changelog:
  - Remove /usr/lib64/libglade-2.0.so.* from libglade2-devel package which already exists in libglade2 package.


author: guojunding <guojunding@kylinos.cn> - 0.8.0.dev.2-103
changelog:
  - Fix null dereference in findLBEndpointSandbox

   * Thu Mar 18 2021 xiadanni<xiadanni1@huawei.com> 0.8.0.dev.2-102
   - Type:bugfix
   - Id:NA
   - SUG:NA
   - DESC:compile option compliance


author: zengwefeng <zwfeng@huawei.com> - 3.5.0-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add missing check for NULL return from allocate_rfd
         add include netlink private nl-auto-h header
         use proper int type for id attributes
         add RTNL_LINK_REASM_OVERLAPS stat
         check for null pointer in macvlan
         fix leaking in link msg parser
         fix NLE_NOMEM handling in parse multipath


author: Guoshuai Sun <sunguoshuai@huawei.com> - 1.2.57-12
changelog:
  - ID:CVE-2013-7353 CVE-2013-7354 CVE-2017-12652
  - SUG:restart
  - DESC:fix CVE-2013-7353 CVE-2013-7354 CVE-2017-12652
    And we have check CVE-2014-9495 CVE-2011-3045 CVE-2008-3964 CVE-2015-8126 CVE-2015-0973 alreadyi been fixed before.
    And CVE-2016-3751 CVE-2013-6954 didn'd involved.


author: yixiangzhike <yixiangzhike007@163.com> - 1.4.2-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:change the files order in patch file fix-doc-about-difok.patch


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 1.0.3-7
changelog:
  - Fix CVE-2019-12779 libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack.
    CVE Link: https://nvd.nist.gov/vuln/detail/CVE-2019-12779
    Community Patch Link:
    https://github.com/ClusterLabs/libqb/commit/e322e98dc264bc5911d6fe1d371e55ac9f95a71e
    https://github.com/ClusterLabs/libqb/commit/7cd7b06d52ac80c343f362c7e39ef75495439dfc
    https://github.com/ClusterLabs/libqb/commit/6a4067c1d1764d93d255eccecfd8bf9f43cb0b4d


author: baizhonggui <baizhonggui@huawei.com> - 1.0.5-2
changelog:
  - new add #include <stddef.h> in qblist.h to fix:
    issue# https://gitee.com/src-openeuler/corosync/issues/I39X3F?from=project-issue
    upstream link:https://github.com/ClusterLabs/libqb/pull/384


author: luhuaxin <luhuaxin@huawei.com> - 0.9.4-15
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC: move AUTHORS and COPYING files to license folder, fix requires


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 3.1-3
changelog:
  - fix heap-use-after-free in cil_yy_switch_to_buffer
  - fix heap-use-after-free in __class_reset_perm_values()
  - fix heap-buffer-overflow in cil_print_recursive_blockinherit


author: xinghe <xinghe2@h-partners.com> - 2.71.0-4
changelog:
  - Type:cves
  - ID:CVE-2024-52530 CVE-2024-52531 CVE-2024-52532
  - SUG:NA
  - DESC:fix CVE-2024-52530 CVE-2024-52531 CVE-2024-52532


author: zhangpan <zhangpan103@h-partners.com> - 2.71.0-5
changelog:
  - Type:cves
  - ID:CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784
  - SUG:NA
  - DESC:fix CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784


author: zhangpan <zhangpan103@h-partners.com> - 2.71.0-6
changelog:
  - Type:cves
  - ID:CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913
  - SUG:NA
  - DESC:fix CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913


author: zhangpan <zhangpan103@h-partners.com> - 2.71.0-9
changelog:
  - Type:cves
  - ID:CVE-2025-4476 CVE-2025-4948 CVE-2025-4969
  - SUG:NA
  - DESC:fix CVE-2025-4476 CVE-2025-4948 CVE-2025-4969


author: renmingshuai <renmingshuai@huawei.com> - 0.9.4-9
changelog:
  - Type:CVE
  - Id:CVE-2023-6004,CVE-2023-48795,CVE-2023-6918
  - SUG:NA
  - DESC:fix CVE-2023-6004,CVE-2023-48795 and CVE-2023-6918


author: gaoyi<gaoyi15@huawei.com> - 2.1.14-2.h1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: backport patches from https://github.com/samba-team/samba
  - Package init


author: shangyibin <shangyibin1@openeuler.org> - 1.4.2-4
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC:Adding help package to the installation dependency of the main package


author: shangyibin <shangyibin1@openeuler.org> - 1.4.2-5
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC:Change the dependecy on the help package from requires to recommends.


author: chenziyang <chenziyang4@huawei.com> - 2:1.3.1-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch to fix failed run-ptrace-mapper testcase


author: yaoxin <yao_xin001@hoperun.com> - 2.20.0-1
changelog:
  - Upgrade to 2.20.0 for fix CVE-2023-39929
  - Fix minor issue about printf data type and value range
  - av1: Revise offsets comments for av1 encode
  - jpeg: add support for crop and partial decode
  - Drop no longer applicable vaGetDriverNames check


author: jiangjiacheng <jiangjiacheng@huawei.com>
changelog:
  - util: keep track of full GSource object not source ID number
  - rpc: mark source returned by virEventGLibAddSocketWatch as unused
  - rpc: ensure temporary GSource is removed from client event loop (CVE-2024-4418)


author: chengguipeng<chengguipeng1@huawei.com> - 0.8.4-4
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC:solve the issue which dispaly could not resolve keysym XF86FullScreen


author: Funda Wang <fundawang@yeah.net> - 2.9.10-43
changelog:
  - Type:CVE
  - CVE:CVE-2024-56171
  - CVE:CVE-2025-24928
  - CVE:CVE-2025-27113
  - SUG:NA
  - DESC: fix CVE-2024-56171, CVE-2025-24928, CVE-2025-27113


author: Funda Wang <fundawang@yeah.net> - 2.9.10-47
changelog:
  - Type:CVE
  - CVE:CVE-2025-49794
  - CVE:CVE-2025-49796
  - SUG:NA
  - DESC: fix CVE-2025-49794, CVE-2025-49796


author: Bjorn <bjorn1@users.sourceforge.net> 7.5.1-1
changelog:
  * Fri Dec 28 2018 Bjorn <bjorn1@users.sourceforge.net> 7.5.0
  - simplified files section
  - using symbolic links for some man files


author: chenyanpanHW <chenyanpan@huawei.com> - 9-5
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-Relax-content-tests-in-test-suite.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-Force-creation-of-LUKS1-containers-in-test-suite.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0003-Define-log-callback-function-to-use-with-libcryptset.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: bzhaoop<bzhaojyathousandy@gmail.com> - 3:10.3.35-1
changelog:
  - Bump version to 10.3.35 for resolving CVEs as below
  - CVE-2022-27379
  - CVE-2022-27386
  - CVE-2022-27447
  - CVE-2022-27448
  - CVE-2022-27449
  - CVE-2022-27445
  - CVE-2022-27456
  - CVE-2022-27458
  - CVE-2022-27452
  - CVE-2022-27376
  - CVE-2022-27378
  - CVE-2022-27377
  - CVE-2022-27381
  - CVE-2022-27383
  - CVE-2022-27380
  - CVE-2022-27384
  - CVE-2022-27387


author: konglidong <konglidong@uniontech.com> - 1.0.22
changelog:
  - fix build error : Non-resolvable parent POM for org.apache.maven.plugins:maven-verifier-plugin:1.0


author: wangkai <13474090681@163.com> - 20240312-1
changelog:
  - Update to 20240312 for fix CVE-2023-38575, CVE-2023-39368,
    CVE-2023-22655, CVE-2023-43490, CVE-2023-28746


author: Funda Wang <fundawang@yeah.net> - 20240813-1
changelog:
  - update to 20240813 for fix CVE-2024-24853, CVE-2024-25939,
    CVE-2024-24980, CVE-2023-42667, CVE-2023-49141


author: Funda Wang <fundawang@yeah.net> - 20250211-1
changelog:
  - update to 2025021 for fix CVE-2024-28047, CVE-2024-31157, CVE-2024-39279,
    CVE-2024-28127, CVE-2024-29214, CVE-2024-24582, CVE-2023-34440, CVE-2024-37020,
    CVE-2024-39355, CVE-2023-43758, CVE-2024-36293, CVE-2024-31068


author: Funda Wang <fundawang@yeah.net> - 20250512-1
changelog:
  - update to 20250512 to fix CVE-2024-28956, CVE-2025-24495, CVE-2025-20012,
    CVE-2024-45332, CVE-2025-20623, CVE-2024-43420, CVE-2025-20054, CVE-2025-20103


author: yaoxin <yao_xin001@hoperun.com> - 1.27.4-1
changelog:
  - Update to 1.27.4 for fix CVE-2024-6381 and CVE-2024-6383
  - libbson Fixes:
    * Fix build with Visual Studio 2013.
    * Fix parsing of colon in timezone.
    * Error on failure to init subdocument in bson_iter_visit_all.
    * Fix string handling in bson_string_new and bson_string_append.
    * Fix iteration in bson_strfreev.
    * Use aligned alloc for bson_array_builder_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Fix conversion warning with GCC 12.
    * Fixes to some format strings in trace logs.
    * Allow mongoc_buffer_t to be larger than INT_MAX.
    * Add bson_array_builder_t.
  - libmongoc Fixes:
    * Fix possible crash reading malformed wire protocol message.
    * Upgraded bundled Zlib from 1.2.3 to 1.3.1
    * Close leftover connections to removed servers.
    * Fix possible crash when client is configured with empty password.
    * Fix possible hang if mongoc_gridfs_file_readv is called with a corrupt chunk with incomplete data.
    * Fix 32-bit compile with 64-bit time_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Disable shared libmongoc targets if ENABLE_SHARED=OFF
    * Fix documentation build with Python 3.9.
    * Fix data race in mongoc_cursor_get_host.
    * Add back support for BUILD_VERSION CMake option. BUILD_VERSION was unintentionally removed in 1.25.0.
    * Send recoveryToken in transactions when connected to a load balancer.


author: Yu Peng <yupeng@kylinos.cn> - 0.8.4-32
changelog:
  - multipathd: fix check_path errors with removed map.
                sync community patches:
  	      multipathd-fix-check_path-errors-with-removed-map.patch
  	      libmultipath-make-dm_get_map-status-return-codes-sym.patch


author: wangkai <13474090681@163.com> - 8.0.38-1
changelog:
  - Update to 8.0.38 for fix CVEs(CVE-2024-21125,CVE-2024-21142,CVE-2024-21179,
    CVE-2024-21171,CVE-2024-21130,CVE-2024-21162,CVE-2024-21177,CVE-2024-20996,
    CVE-2024-21134,CVE-2024-21165,CVE-2024-21173,CVE-2024-21129,CVE-2024-21127,
    CVE-2024-21163,CVE-2022-21423,CVE-2022-21451,CVE-2022-21444,CVE-2022-21417,
    CVE-2022-21427,CVE-2022-21414,CVE-2022-21435,CVE-2022-21413,CVE-2022-21462,
    CVE-2022-21412,CVE-2022-21437,CVE-2022-21438,CVE-2022-21418,CVE-2022-21459,
    CVE-2022-21478,CVE-2022-21479,CVE-2022-21440,CVE-2022-21425,CVE-2022-21457,
    CVE-2022-21454,CVE-2022-21483,CVE-2022-21482,CVE-2022-21484,CVE-2022-21485,
    CVE-2022-21486,CVE-2022-21489,CVE-2022-21490,CVE-2021-22570,CVE-2022-21556,
    CVE-2022-21455,CVE-2022-21517,CVE-2022-21530,CVE-2022-21527,CVE-2022-21547,
    CVE-2022-21515,CVE-2022-21534,CVE-2022-21529,CVE-2022-21509,CVE-2022-21539,
    CVE-2022-21538,CVE-2022-21537,CVE-2022-21531,CVE-2022-21525,CVE-2022-21528,
    CVE-2022-21526,CVE-2022-21569,CVE-2022-39408,CVE-2022-39410,CVE-2022-21604,
    CVE-2022-21637,CVE-2022-21617,CVE-2022-21594,CVE-2022-21608,CVE-2022-21640,
    CVE-2022-39400,CVE-2022-21633,CVE-2022-21632,CVE-2022-21599,CVE-2022-21625,
    CVE-2022-21611,CVE-2022-21635,CVE-2022-21638,CVE-2022-21641,CVE-2022-21592,
    CVE-2023-21878,CVE-2023-21877,CVE-2023-21876,CVE-2023-21875,CVE-2023-21879,
    CVE-2023-21880,CVE-2023-21887,CVE-2023-21883,CVE-2023-21881,CVE-2023-21882,
    CVE-2023-21869,CVE-2023-21863,CVE-2023-21868,CVE-2023-21874,CVE-2023-21866,
    CVE-2023-21870,CVE-2023-21864,CVE-2023-21873,CVE-2023-21867,CVE-2023-21872,
    CVE-2023-21865,CVE-2023-21871,CVE-2023-21836,CVE-2022-32221,CVE-2023-21920,
    CVE-2023-21953,CVE-2023-21976,CVE-2023-21911,CVE-2023-21940,CVE-2023-21977,
    CVE-2023-21917,CVE-2023-21962,CVE-2023-21972,CVE-2023-21919,CVE-2023-21947,
    CVE-2023-21980,CVE-2023-21913,CVE-2023-21966,CVE-2023-21929,CVE-2023-21955,
    CVE-2023-21982,CVE-2023-21935,CVE-2023-21933,CVE-2023-21945,CVE-2023-21912,
    CVE-2023-21963,CVE-2023-21946,CVE-2022-43551,CVE-2023-0215,CVE-2023-22007,
    CVE-2023-22056,CVE-2023-22048,CVE-2023-22033,CVE-2023-22054,CVE-2023-22005,
    CVE-2023-22057,CVE-2023-22008,CVE-2023-22053,CVE-2023-22038,CVE-2023-22046,
    CVE-2023-22058,CVE-2023-22103,CVE-2023-22111,CVE-2023-22092,CVE-2023-22112,
    CVE-2023-22065,CVE-2023-22110,CVE-2023-22097,CVE-2023-22114,CVE-2023-22104,
    CVE-2023-22028,CVE-2023-22115,CVE-2023-22070,CVE-2023-22059,CVE-2023-22032,
    CVE-2023-22015,CVE-2023-22026,CVE-2023-22113,CVE-2023-22066,CVE-2023-22078,
    CVE-2023-22064,CVE-2023-22084,CVE-2023-22079,CVE-2023-38545,CVE-2023-22068,
    CVE-2024-20964,CVE-2024-20971,CVE-2024-20976,CVE-2024-20973,CVE-2024-20978,
    CVE-2024-20981,CVE-2024-20962,CVE-2024-20977,CVE-2024-20963,CVE-2024-20965,
    CVE-2024-20972,CVE-2024-20961,CVE-2024-20982,CVE-2024-20970,CVE-2024-20983,
    CVE-2024-20967,CVE-2024-20984,CVE-2024-20974,CVE-2024-20966,CVE-2024-20960,
    CVE-2024-20968,CVE-2024-20985,CVE-2024-20969,CVE-2022-21605,CVE-2022-21607,
    CVE-2024-21049,CVE-2024-21050,CVE-2024-21000,CVE-2024-21069,CVE-2024-21009,
    CVE-2024-21061,CVE-2024-20993,CVE-2024-21087,CVE-2024-21047,CVE-2024-20998,
    CVE-2024-21052,CVE-2024-21056,CVE-2024-21053,CVE-2024-21055,CVE-2024-21015,
    CVE-2024-21013,CVE-2024-21051,CVE-2024-21060,CVE-2024-21008,CVE-2024-21102,
    CVE-2024-21054,CVE-2024-21062,CVE-2024-20994,CVE-2024-21057,CVE-2024-21096,
    CVE-2023-6129,CVE-2024-21160,CVE-2024-21135,CVE-2024-21157,CVE-2024-21166,
    CVE-2024-21137,CVE-2024-21159)


author: wangkai <13474090681@163.com> - 8.0.40-1
changelog:
  - Update to 8.0.40 for fix CVEs(CVE-2024-21218,CVE-2024-21196,CVE-2024-21207,
    CVE-2024-21198,CVE-2024-21203,CVE-2024-21213,CVE-2024-21239,CVE-2024-21199,
    CVE-2024-21197,CVE-2024-21247,CVE-2024-21193,CVE-2024-21212,CVE-2024-21241,
    CVE-2024-21230,CVE-2024-21236,CVE-2024-21194,CVE-2024-21238,CVE-2024-21237,
    CVE-2024-21201,CVE-2024-21231,CVE-2024-21219,CVE-2024-21185)


author: yaoxin <1024769339@qq.com> - 8.0.41-1
changelog:
  - Update to 8.0.41 for fix CVEs(CVE-2025-21490,CVE-2025-21491,CVE-2025-21495,
    CVE-2025-21497,CVE-2025-21500,CVE-2025-21501,CVE-2025-21503,CVE-2025-21505,
    CVE-2025-21518,CVE-2025-21519,CVE-2025-21520,CVE-2025-21522,CVE-2025-21523,
    CVE-2025-21529,CVE-2025-21531,CVE-2025-21540,CVE-2025-21543,CVE-2025-21546,
    CVE-2025-21555,CVE-2025-21559)


author: yaoxin <1024769339@qq.com> - 8.0.42-1
changelog:
  - Update to 8.0.42 for fix CVEs(CVE-2025-21574,CVE-2025-21575,CVE-2025-21577,
    CVE-2025-21580,CVE-2025-21581,CVE-2025-21584,CVE-2025-21585,CVE-2025-30681,
    CVE-2025-30682,CVE-2025-30683,CVE-2025-30684,CVE-2025-30685,CVE-2025-30687,
    CVE-2025-30688,CVE-2025-30689,CVE-2025-30693,CVE-2025-30695,CVE-2025-30696,
    CVE-2025-30699,CVE-2025-30703,CVE-2025-30704,CVE-2025-30705,CVE-2025-30710,
    CVE-2025-30715,CVE-2025-30721,CVE-2025-30722


author: bzhaoop <bzhaojyathousandy@gmail.com> - 5.7.37-1
changelog:
  - Fix CVE issues for bump to the 5.7.37 version
  - CVE-2022-21245
  - CVE-2022-21270
  - CVE-2022-21303
  - CVE-2022-21304
  - CVE-2022-21344
  - CVE-2022-21367
  - CVE-2021-35624
  - CVE-2021-2356
  - CVE-2021-2011
  - CVE-2021-2010
  - CVE-2021-2007


author: yaoxin <yao_xin001@hoperun.com> - 8.0-1
changelog:
  - Update to 8.0
    * CVE-2024-5742: Avoid privilege escalations via symlink attacks
      on emergency save file (boo#1226099)
    * By default ^F is bound to starting a forward search, and ^B to
      starting a backward search, while M-F and M-B repeat the search
      in the corresponding direction. (See the documentation if you
      want the old bindings back.)
    * Command-line option --modernbindings (-/) makes ^Q quit, ^X cut,
      ^C copy, ^V paste, ^Z undo, ^Y redo, ^O open a file, ^W write a file,
      ^R replace, ^G find again, ^D find again backwards, ^A set the mark,
      ^T jump to a line, ^P show the position, and ^E execute.
    * For easier access, M-" is bound to placing/removing an anchor,
      and M-' to jumping to the next anchor.


author: yaoxin <yao_xin001@hoperun.com> - 2.15.05-1
changelog:
  - Update to 2.15.05
    * fix %ifid with $ and $$
    * Add --reproducible option to suppress NASM version numbers and timestamps in output files


author: xingwei <xingwei14@h-partners.com> - 1:5.9-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Sync upstream patches to fix Buffer overflow
         Disable T200snmpv2cwalkall_simple test to fix make check fail


author: liwenchong <liwenchong@kylinos.cn> - 1:2.5.1-6
changelog:
  - set use-gss-proxy to true in nfs.conf to be consistent with the
    description of 0003-nfs-utils-set-use-gss-proxy-1-to-enable-gss-proxy-by.patch


author: huangyu <huangyu106@huawei.com> - 1:0.9.6-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:parser_json fix device parsing in netdev family
  src don't parse string as verdict in map


author: wangkai <13474090681@163.com> - 1:12.22.11-4
changelog:
  - Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
  - CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
  - CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
  - CVE-2023-32559,CVE-2022-35256


author: leiju <leiju4@huawei.com> - 0.1.3-2
changelog:
  - delete ExclusiveArch:i386 i486 i586 i686 pentium3 pentium4 athlon geode x86_64 armv3l armv4b armv4l armv4tl armv5tl armv5tel armv5tejl armv6l armv6hl armv7l armv7hl armv7hnl armv8l armv8hl armv8hnl armv8hcnl noarch


author: yixiangzhike <yixiangzhike007@163.com> - 0.9.11-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:Move temporary files from /var/run to /run to delete warning in installing


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p14-7
changelog:
  - Type:CVE
  - ID:CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26554
  - SUG:NA
  - DESC:make sure the buffer has enough room for the input extra characters


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p14-8
changelog:
  - Type:CVE
  - ID:CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26554,CVE-2023-26555
  - SUG:NA
  - DESC:change the patch of CVE-2023-26551 and fix CVE-2023-26555


author: xiaochn <xiaochuannan@inspur.com> - 1.1.5-3
changelog:
  - Resolve the issue of different kernel source download locations in kabi test case
  - Resolve the issue that kabiwhitelist still passes when the ko and rpm file does not exist
  - Add the way for manually adding kabiwhitelist file
  - For custom vendors, refer to the method of obtaining openEuler os information
  - Supports custom vendor


author: wangshuai <wangshuai321@huawei.com> - 1.1.6-0
changelog:
  - Add new test suite srpm and intel
  - Add virtual branch of test suite
  - Add support for Kylin and UOS
  - Bugfix


author: wangshuai <wangshuai321@huawei.com> - 1.1.6-3
changelog:
  - Update the pci.ids file
  - Remove unused variable in cdrom test suite
  - Update test_guide doc
  - Unify the location for downloading kernel source RPMs
  - Optimize kabiwhitelist and system test


author: xiaochn <xiaochuannan@inspur.com> - 1.1.7-1
changelog:
  - Add KylinSec 3.5.3 support
  - Fix the problem of disk size calculation
  - Fix bcm57414 nic test failed issue
  - Change the format of date
  - Fixed a bug where a non-existent logger level was used
  - Update README.md
  - Fix vgpu testing issue


author: Wenchao Hao <haowenchao@huawei.com> - 0.100-7
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-Fix-the-issue-of-ignoring-the-return-value.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-Fix-compiler-issue-when-not-in-security-mode.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0003-Fix-586-compile-issue-and-remove-Werror.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0004-Do-not-install-isnsd.socket-in-isnsd.service.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0005-libisns-remove-sighold-and-sigrelse.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0006-isnsadm-Fix-unparse-command-line-options-V-and-r.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0007-isnsd-socket-Make-sure-to-create-IPv6-socket-default.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: Noah <hedongbo@huawei.com> - 8u330.1
changelog:
  - change upstream to openeuler
  - rm 0004-Fix-Compilation-Flags.patch
  - rm 0005-fxpackager-extract-jre-accept-symlink.patch
  - rm 0003-fix-cast-between-incompatible-function-types.patch


author: openEuler Buildteam <buildteam@openeuler.org> - 1.5.1-24
changelog:
  - Type:cves
  - ID:CVE-2016-10506 CVE-2016-7445
  - SUG:restart
  - DESC:fix CVE-2018-15173 and CVE-2016-7445


author: Funda Wang <fundawang@yeah.net> - 0.20.0-15
changelog:
  - fix CVE-2024-8443, CVE-2024-45615, CVE-2024-45616,
    CVE-2024-45617, CVE-2024-45618, CVE-2024-45619, CVE-2024-45620


author: xingwei <xingwei14@h-partners.com> - 2.0.0-26
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Introduce epoch command to slove package upgrade failure problem


author: wulei <wulei80@huawei.com> - 2020.4-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Do not run testcase test-libarchive-import, because selinux is off.


author: yangmingtai <yangmingtai@huawei.com> - 10.35-4
changelog:
  - DESC:sync community patches
         backport-jit-fail-early-in-ffcps_-if-subject-shorter-than-off.patch
         backport-jit-fix-pcre2_jit_free_unused_memory-if-sljit-not-us.patch


author: chenyanpanHW <chenyanpan@huawei.com> - 1.9.0-3
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0000-pcsc-lite-change-to-use-python3-for-pcsc-spy.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-Do-not-possibly-lock-a-reader-if-allocating-hCard-fa.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-Fix-a-hang-in-SCardTransmit.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0003-ATRDecodeAtr-always-initialize-the-return-values.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0004-EHUnregisterClientForEvent-correctly-handle-EHTryToU.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: shenyangyang<shenyangyang4@huawei.com> - 1:2.081-7
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:restart
  - DESC:add build requires of perl-devel and add Epoch for updating


author: wangxiao<wangxiao65@huawei.com> - 1.58-3.h1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:Handle unknown op in DBD SQLite VirtualTable PerlData
         added a boilerplace for test
         fixed for older DBI
  - Package init


author: shenyangyang <shenyangyang4@huawei.com> - 2.066-2
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC:delete the /certs that used by test which contains the Unencrypted
         private key


author: shenyangyang <shenyangyang4@huawei.com> - 0.35-420
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:delete unneeded build requires of perl(Test::Portability::Files) 
         and perl(Test::Pod::Coverage)


author: shenyangyang <shenyangyang4@huawei.com> - 0.625-14
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:delete unneeded build requires of perl(IO::Scalar) and perl(Test::Pod::Coverage)


author: shenyangyang <shenyangyang4@huawei.com> - 2.29-398
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:delete unneeded build requires of perl(BSD::Resource) 
         perl(Import::Into) >= 1.002004 and perl(Sub::Identify)


author: Funda Wang <fundawang@yeah.net> - 8.0.30-7
changelog:
  - Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
    GHSA-4w77-75f9-2c8w
  - Fix OOB access in ldap_escape
    CVE-2024-8932
  - Fix Integer overflow in the dblib/firebird quoter causing OOB writes
    CVE-2024-11236
  - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
    CVE-2024-11234
  - Fix Single byte overread with convert.quoted-printable-decode filter
    CVE-2024-11233


author: duyiwei <duyiwei@kylinos.cn> - 1:0.10.1-10
changelog:
  - Type:bugfix
  - CVE:CVE-2024-9355、CVE-2019-9514、CVE-2024-24791、CVE-2022-32189、CVE-2022-41715、CVE-2022-2880、CVE-2022-1962、CVE-2023-45290、CVE-2024-24783、CVE-2024-24785
  - SUG:NA
  - DESC:  fix CVE in batches through rebuild


author: zhouwenpei <zhouwenpei1@h-partners.com> - 0.90.0-4
changelog:
  - fix CVE-2022-37050,CVE-2022-37051,CVE-2022-37052,CVE-2022-38349,CVE-2020-23804
  - fix install error


author: xiongyi <xiongyi@uniontech.com> - 0.90.0-6
changelog:
  - fix CVE-2020-36023
  - fix infinite looping in cvtGlyph with broken files
  - patch source:https://gitlab.freedesktop.org/poppler/poppler/-/issues/1013


author: openEuler Buildteam <buildteam@openeuler.org> - 0.4.9-4
changelog:
  -Type:enhancement
  -Id:NA
  -SUG:NA
  -DESC:Increase the ability of encoding files for use with libpoppler


author: gaihuiying <eaglegai@163.com> - 2.4.8-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream
         Fixing up parsing in radiusclient.conf


author: zhangliangpengkun<zhangliangpengkun@xfusion.com> - 0.12.13-20
changelog:
  - Added 'cheroot' server adapter to list of server names, so it can be selected from the command line and by name.


author: shenyangyang<shenyangyang4@huawei.com> - 1.11.5-8
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:optimize the method to provide default version of python-name


author: zhangliangpengkun<zhangliangpengkun@xfusion.com> - 4.1.0-6
changelog:
  - fix for python 3.7 deprecation warning about importing certain types from collections vs collections.abc


author: liubo <liubo1@xfusion.com> - 0.7.19-16
changelog:
  - PKG-INFO metadata generation seems to be broken (lists maintainer as author on PyPI - mutually exclusive?)


author: wangkai <13474090681@163.com> - 9.0.1-5
changelog:
  - correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)


author: xzf1244 <xzff@hust.edu.cn> - 1.25.9-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix field NRESERVED_PAT and function _idna_encode that will cause bugs


author: yaoxin <1024769339@qq.com> - 1.4.4-1
changelog:
  - Update to 1.4.4 for fix CVE-2019-16785,CVE-2019-16786,CVE-2019-16789 and CVE-2019-16792
  - Add patches for CVE-2024-49769: DoS due to resource exhaustion


author: GuoCe <guoce@kylinos.cn> - 3.7.9-37
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Modify the spec file to synchronize the version information of
         CHANGLOG and VERSION.


author: GuoCe <guoce@kylinos.cn> - 3.7.9-39
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: add loongarch64 support and disable valgrind-devel for loongarch64


author: wangshuo <wangshuo@kylinos.cn> - 3.7.9-40
changelog:
  - Type:CVE
  - CVE:CVE-2007-4559
  - SUG:NA
  - DESC:Patch9007-9008, fix CVE-2007-4559
  -      Patch9009, fix test_xml_etree error with expat versions that fix CVE-2023-52425


author: wangshuo <wangshuo@kylinos.cn> - 3.7.9-41
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patches
  -      gh-104049: do not expose on-disk location from SimpleHTTPRequestHandler
  -      gh-99889: Fix directory traversal security flaw in uu.decode()


author: wangshuo <wangshuo@kylinos.cn> - 3.7.9-43
changelog:
  - Type:CVE
  - CVE:CVE-2024-9287
  - SUG:NA
  - DESC:fix CVE-2024-9287
  -      gh-124651: Quote template strings in `venv` activation scripts


author: Jiabo Feng <fengjiabo1@huawei.com>
changelog:
  - accel/tcg: fix race in cpu_exec_step_atomic (bug 1863025)
  - pci: assert configuration access is within bounds
  - io: remove io watch if TLS channel is closed during handshake


author: Jiabo Feng <fengjiabo1@huawei.com>
changelog:
  - hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
  - hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  - net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
  - net: Provide MemReentrancyGuard * to qemu_new_nic()
  - memory: prevent dma-reentracy issues
  - softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR
  - Fixed the early version of CVE-2022-4144 patch is not fully adapted


author: Jiabo Feng <fengjiabo1@huawei.com>
changelog:
  - hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs(CVE-2024-3446)
  - hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs(CVE-2024-3446)
  - hw/display/virtio-gpu: Protect from DMA re-entrancy bugs(CVE-2024-3446)
  - hw/virtio: Introduce virtio_bh_new_guarded() helper
  - hw: replace most qemu_bh_new calls with qemu_bh_new_guarded
  - checkpatch: add qemu_bh_new/aio_bh_new checks
  - async: avoid use-after-free on re-entrancy guard
  - async: Add an optional reentrancy guard to the BH API
  - util/async: add a human-readable name to BHs for debugging
  - hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set
  - Include sysemu/sysemu.h a lot less


author: Jiabo Feng <fengjiabo1@huawei.com>
changelog:
  - tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fix CVE-2023-5088)
  - hw/ide: reset: cancel async DMA operation before resetting state (Fix CVE-2023-5088)


author: Jiabo Feng <fengjiabo1@huawei.com>
changelog:
  - block: Parse filenames only when explicitly requested (CVE-2024-4467)
  - block: introduce bdrv_open_file_child() helper
  - qcow2: Don't open data_file with BDRV_O_NO_IO (CVE-2024-4467)
  - qcow2: Do not reopen data_file in invalidate_cache


author: Jiabo Feng <fengjiabo1@huawei.com> - 10:4.1.0-86
changelog:
  - nbd/server: CVE-2024-7409: Close stray clients at server-stop
  - main-loop.h: introduce qemu_in_main_thread()
  - aio-wait.h: introduce AIO_WAIT_WHILE_UNLOCKED
  - nbd/server: CVE-2024-7409: Drop non-negotiating clients
  - nbd/server: CVE-2024-7409: Cap default max-connections to 100
  - nbd: Add max-connections to nbd-server-start
  - nbd/server: Plumb in new args to nbd_client_add()
  - nbd: Minor style and typo fixes


author: Jiabo Feng <fengjiabo1@huawei.com> - 10:4.1.0-88
changelog:
  - mac_dbdma: Remove leftover `dma_memory_unmap` calls(CVE-2024-8612)
  - softmmu: Support concurrent bounce buffers(CVE-2024-8612)
  - qdev-properties: add size32 property type
  - system/physmem: Per-AddressSpace bounce buffering
  - system/physmem: Propagate AddressSpace to MapClient helpers


author: openEuler Buildteam <buildteam@openeuler.org> - 5.11.1-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Delete the dependency include qt5-qt3d qt5-qtenginio-devel qt5-qtwebkit-devel


author: xingwei <xingwei14@h-partners.com> - 2.18-5
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Add the socket option IPV6_MULTICAST_LOOP to prevent the interface from autocon
  figuring using RA messages sent by itself.


author: Shiju Jose<shiju.jose@huawei.com> - 0.6.7-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:
    1. Fix return value type issue of read/write function from unistd.h.
    2. Fix issue of signed and unsigned integer comparison.
    3. Remove redundant header file and do some cleaup.
    4. Add support for create/open the vendor error tables at rasdaemon startup.
    5. Make changes in the HiSilicon error handling code for the same.
    6. Add four modules supported by HiSilicon common section.


author: yanglongkang <yanglongkang@h-partners.com> - 0.6.7-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport libtraceevent patch to adapt to kernel ftrace ring buffer change


author: zhangnan <zhangnan134@huawei.com> - 0.6.7-13
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ras-events:quit loop in read_ras_event when kbuf data is broken


author: caixiaomeng <caixiaomeng2@huawei.com> - 0.6.7-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add-dynamic-switch-of-ras-events-support-and-disable-block-rq-complete


author: wangjiang <app@cameyan.com> - 0.6.7-16
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix ras-mc-ctl --summary failed
         Add some improvements and add new modules to HiSilicon common section


author: liyangyang <liyangyang20@huawei.com> - 35.0-1
changelog:
  - DESC: Currently 28.1 is not commercially available and need to be modified to 35.0 with more complete features


author: tangchengchang <tangchengchang@huawei.com> - 35.0-4
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: Rename the previous patch to facilitate subsequent management


author: shixuantong<shixuantong@huawei.com> - 3.7.6-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add python3-Cython and python3-devel to BuildRequires for check fail


author: wangkai <13474090681@163.com> - 7.2.7-1
changelog:
  - Update to 7.2.7
  - Fix CVE-2021-32626 CVE-2021-32627 CVE-2021-32762 CVE-2021-32675
    CVE-2021-41099 CVE-2021-32628 CVE-2021-32687 CVE-2022-24735
    CVE-2022-24736 CVE-2022-3647 CVE-2022-3734 CVE-2022-35977
    CVE-2023-25155 CVE-2024-46981


author: yaoxin <yaoxin30@huawei.com> - 5.0.14-1
changelog:
  - Upgrade redis5 to 5.0.14 for fix cves: CVE-2021-41099
    CVE-2021-32762 CVE-2021-32675 CVE-2021-32687 CVE-2021-32626
    CVE-2021-32627 CVE-2021-32628


author: gaihuiying <gaihuiying1@huawei.com> - 1.2.5-5
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:sync sp1 commits and rebuild 1.2.5-5:
         fix uninstall package warning info
         remove config rmtcall and disable rpcbind.service default


author: xujing<xujing125@huawei.com> - 4.15.1-55
changelog:
  - sync patches from upstream
    add backport-Fix-a-theoretical-use-of-uninitialized-struct-member.patch
        backport-Fix-spec-parser-leaks-from-trans-f-file.patch
        backport-Tip-toe-around-rpmfiFN-thin-ice-in-fsm.patch
        backport-Use-unsigned-integers-for-buildtime-too-for-Y2K38-sa.patch


author: yixiangzhike <yixiangzhike007@163.com> - 2.15-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:avoid truncate trailer space and do not escape backslash when read filename


author: yixiangzhike <yixiangzhike007@163.com> - 2.15-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:revert "avoid truncate trailer space and do not escape backslash when read filename"


author: zouzhimin <zouzhimin@kylinos.cn> - 1:2.2.3.1-3
changelog:
  - Type:CVES
  - ID:CVE-2024-26141 CVE-2024-26146 CVE-2024-25126
  - SUG:NA
  - DESC:CVE-2024-26141 CVE-2024-26146 CVE-2024-25126


author: zouzhimin <zouzhimin@kylinos.cn> - 1:2.2.3.1-4
changelog:
  - Type:CVES
  - ID:CVE-2022-44570 CVE-2022-44571 CVE-2022-44572
  - SUG:NA
  - DESC:CVE-2022-44570 CVE-2022-44571 CVE-2022-44572


author: xinghe <xinghe2@h-partners.com> - 4.11.12-30
changelog:
  - Type:cves
  - CVE:CVE-2022-2127 CVE-2023-34966 CVE-2023-34967
  - SUG:NA
  - DESC:fix CVE-2022-2127 CVE-2023-34966 CVE-2023-34967


author: yanglu <yanglu72@h-partners.com> - 8.16.1-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Add require procmail, Fix send mail error which no procmail command


author: yanglu<yanglu72@h-partners.com> - 8.16.1-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix newaliases command error and postfix service start execption after sendmail install


author: lijian<lijian2@kylinos.cn> - 1:1.1.0-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:rebuild for golang cvefix: CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538


author: yangzhuangzhuang<yangzhuangzhuang1@huawei.com> - 1:6.6-5.h1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:os_linux.cpp/os_netbsd.cpp: fix crash on --scan if WITH_NVME_DEVICESC is not set and '-d <type>' is not specified
         ataprint.cpp: Fix detection of Device Statistics log with 256 sectors (#922)
         drivedb.h: - Western Digital Red: WD80EZZX - USB: WD
         update-smart-drivedb.in: Include configured PATH in help and error messages
         os_linux.cpp: Add missing braces to 3ware SELinux code
         drivedb.h: fix Innolite Satadom D150QV entry (#939)
         os_freebsd.cpp: on error was setting set_nvme_err() to 1
         os_linux.cpp: Fix device scan crash on missing /proc/devices
         smartd.cpp: Always ignore failure of ATA SMART ENABLE command if
         os_linux.cpp: Fix '-d megaraid' open crash on missing /proc/devices
         os_darwin.cpp, os_freebsd.cpp: fix return value in error paths
         ataprint.cpp: Fix Form Factor string with bits set in reserved area
  - Package init


author: openEuler Buildteam <buildteam@openeuler.org> - 1:6.6-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add the "-q never" option while executing smartd command in smartd.service


author: wangkai <13474090681@163.com> - 14.4.2.0-29
changelog:
  - Fix CVE-2021-33844,CVE-2023-32627,CVE-2021-23159,CVE-2023-34432
  - CVE-2023-34318,CVE-2021-23172,CVE-2021-3643,CVE-2021-23210
  - CVE-2022-31650,CVE-2023-26590,CVE-2022-31651,CVE-2023-32627
  - CVE-2017-18189


author: chenyanpanHW <chenyanpan@huawei.com> - 4.4-4
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-Fix-typos-update-URLs-in-squashfs-tools-Makefile.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-Support-creating-sockets-in-unsquashfs.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0003-squashfs-tools-fix-build-failure-against-gcc-10.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0004-xattr-Initialize-header-to-avoid-valgrind-warning.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0005-CVE-2021-40153.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0006-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0007-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0008-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0009-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0010-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: XuFei <xufei30@huawei.com> - 0.3.0-3
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC:modify docs,modify testcases and clear clippy warnings for updating rust 1.51.0


author: huanghaitao <huanghaitao8@huawei.com> - 1.4.0-3
changelog:
  - Add Requires: python2-gobject-base libnotify >= 0.7.7
  - fix command subunit-notify subunit2gtk --help error
  - fix command subunit-notify warning


author: openEuler Buildteam <buildteam@openeuler.org> - 1.4-23
changelog:
  - Modify spec error information

   Sat Sep 07 2019 openEuler Buildteam <buildteam@openeuler.org> - 1.4-22
  - Package init


author: chenyanpanHW <chenyanpan@huawei.com> - 2.1.0-32
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-Fix-issue-with-sysfs-name-comparisons.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-sysfsutils-2.1.0-get_link.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0003-sysfsutils-2.1.0-manpages.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0004-sysfsutils-aarch64.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0005-sysutils-modify-GPL-path-written-in-COPYING.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0006-fix-of-FUNC_TABLE_SIZE-mentioned-in-prev-commit.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0007-Fix-compiler-complain-about-multiple-defs-of-my_stdo.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0008-Use-stat-not-lstat-to-find-link-target.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0009-path_is_file-should-call-stat-not-lstat.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0010-lib-Fixed-a-memory-leak-in-lib-sysfs_driver.c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0011-lib-Fixed-memory-leaks-in-lib-sysfs_device.c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0012-lib-Fixed-memory-leaks-in-lib-sysfs_attr.c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: lingsheng <lingsheng1@h-partners.com> - 6.04-14
changelog:
  - update libpng 1.6.36 to fix CVE-2011-2501 CVE-2011-2690 CVE-2011-2691
  - CVE-2011-2692 CVE-2011-3045 CVE-2011-3048 CVE-2012-3425 CVE-2015-7981
  - CVE-2015-8126 CVE-2015-8472 CVE-2015-8540 CVE-2016-10087 CVE-2017-12652


author: liyuanyuan <liyuanyuan@xfusion.com> - 1.5.11-17
changelog:
  - Set programe name for scp-dbus-service as well
  - Require proper version of GDK and GTK in scp-dbus-service as well


author: huyubiao <huyubiao@huawei.com> - 243-75
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add backport-basic-fix-overflow-detection-in-sigbus_pop.patch
         backport-bus-use-bus_log_parse_error-to-print-message.patch
         backport-busctl-avoid-asserting-on-NULL-message.patch
         backport-sd-journal-check-sd-event-state-before-setting-up-po.patch


author: huyubiao <huyubiao@huawei.com> - 243-76
changelog:
  - DESC:add backport-utmp-remove-dev-from-line.patch
         backport-core-exec-do-not-crash-with-UtmpMode-user-without-Us.patch
         backport-resolved-limit-the-number-of-signature-validations-i.patch
         backport-resolved-reduce-the-maximum-nsec3-iterations-to-100.patch


author: huyubiao <huyubiao@huawei.com> - 243-79
changelog:
  - add backport-login-user-runtime-dir-properly-check-for-mount-poin.patch
        backport-user-util-validate-the-right-field.patch


author: zhangyao <zhangyao108@huawei.com> - 243-81
changelog:
  - remove redundant patch
    del 1610-add-new-rules-for-lower-priority-events-to-preempt.patch
        core-bugfix-call-malloc_trim-to-return-memory-to-OS-immediately.patch
        1612-serialize-pids-for-scope-when-not-started.patch
        systemd-core-Close-and-free-dbus-when-bus-authentica.patch
        1615-do-not-finish-job-during-daemon-reload-in-unit_notify.patch


author: zhangyao <zhangyao108@huawei.com> - 243-82
changelog:
  - sync community patches
    add backport-pid1-set-SYSTEMD_NSS_DYNAMIC_BYPASS-1-env-var-for-db.patch
        backport-pid1-lookup-owning-PID-of-BusName-name-of-services-a.patch
        backport-pid1-watch-bus-name-always-when-we-have-it.patch


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-83
changelog:
  - Enhance the logging function of the systemctl command
    Add process-util-log-more-information-when-runnin.patch


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 1:8.6.10-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:The "no acceptable C compiler found" error message is displayed during compilation.Therefore,add buildrequires gcc.


author: Guoshuai Sun <sunguoshuai@huawe.com> - 8:2018-24
changelog:
  - Drop texlive-venturisadf texlive-wsuipa texlive-vntex, because those packages
    use utopia license may not be free for anyone


author: openEuler Buildteam <buildteam@openeuler.org> - 0.5.9
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC:Solve the problem of service cannot restart when upgrading


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 0.6-2
changelog:
  - The"cc:No such file or directroy"error message is displayed during compilation.Therefore,add buildrequires gcc.
    The macro unitdir is used.Therefore,add buildrequires systemd


author: chenyaqiang <chengyaqiang@huawei.com> - 1:9.0.96-1
changelog:
  - Update to 9.0.96
  - Fix CVE-2021-43980 CVE-2022-25762 CVE-2023-44487 CVE-2023-46589
    CVE-2024-23672 CVE-2024-24549 CVE-2024-34750


author: wangkai <13474090681@163.com> - 1:9.0.100-1
changelog:
  - Update to 9.0.100 for fix CVE-2024-56337
  - Add a check to ensure that, if one or more web applications are potentially vulnerable to CVE-2024-56337,
    the JVM has been configured to protect against the vulnerability and to configure the JVM correctly if not.


author: chenyanpanHW <chenyanpan@huawei.com> - 1.8.0-2
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0000-Fix-tree-args-option-displayed-incomplete.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: Liu Chao <liuchao173@huawei.com> - 2.24.1-1
changelog:
  - Upgrade to 2.24.1:
    - fixed privileged execution of arbitrary scripts by active local user. (CVE-2024-52336)
    - added sanity checks for API methods parameters. (CVE-2024-52337)


author: langfei<langfei@huawei.com> - 2022a-16
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Fix Palestine predictions for 2072 through 2075; Ittoqqortoormiit (America/Scoresbysund) zone change.


author: liuchao <liuchao173@huawei.com> - 2022a-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Vostok switches to +05; Sync Casey data from timeanddata.com; Kazakhstan unifies on UTC+5


author: langfei <langfei@huawei.com> - 2022a-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Aysén Region moves from -04/-03 to -03; new zone;
  -	Improve recent commentary for Chilean decrees.


author: yangcheng <yangcheng87@huawei.com> - 20170801-12
changelog:
  - Fix the problem that the mkfontscale command and mkfontdir command were not found during installation


author: chenyanpanHW <chenyanpan@huawei.com> - 012-4
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-usbmisc-initialize-string-buffer-before-reading-from.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: zhangyao<zhangyao108@huawei.com> - 2.35.2-13
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         backport-column-segmentation-fault-on-invalid-unicode-input-passed-to-s-option.patch
         backport-su-offer-usernames-rather-than-files.patch
         backport-Fix-memory-leaks-in-the-chcpu.patch
         backport-logger-fix-prio-prefix-doesnot-use-priority-default.patch
         backport-mcookie-fix-infinite-loop-when-use-f.patch
         backport-logger-realloc-buffer-when-header-size-changed.patch
         backport-logger-fix-size-use-for-stdin.patch
         backport-vipw-flush-stdout-before-getting-answer.patch
         backport-chfn-Make-readline-prompt-for-each-field-on-a-separate-line.patch
         backport-chfn-flush-stdout-before-reading-stdin-and-fix-uninitialized-variable.patch
         backport-chsh-fflush-stdout-before-reading-from-stdin.patch
         backport-login-Restore-tty-size-after-calling-vhangup.patch
         backport-lsblk-fix-endless-loop-if-device-specified-more-than-once.patch
         backport-libblkid-avoid-buffer-overflow-in-ocfs-superblock-parsing.patch
         backport-libblkid-use-checksum-for-jmicron.patch
         backport-libblkid-cleanup-indentation.patch
         backport-libblkid-fix-jmicron-checksum-and-LE-to-CPU.patch
         backport-libblkid-nvidia_raid-verify-superblock-size.patch
         backport-libblkid-nvidia_raid-validate-checksum.patch


author: cenhuilin <cenhuilin@kylinos.cn> - 2.35.2-15
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         backport-uuidd-fix-open-lock-state-issue.patch


author: fuanan <fuanan3@h-partners.com> - 2.35.2-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         backport-include-c.h-add-helpers-for-unaligned-structure-acce.patch
         backport-libblkid-drbd-reduce-false-positive.patch


author: Yu Peng <yupeng@kylinos.cn> - 2.35.2-19
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
  	   backport-libfdisk-fix-fdisk_reread_changes-for-extended-partitions.patch


author: Jiajun Chen <1250062498@qq.com> - 1.0-2
changelog:
  - bugfix: fix %ST, %GUE, %HYP formula
  - display: expand row size in TEXT mode
  - bugfix: exit vmtop when arguments are invalid
  - bugfix: check unsigned number flip before getting delta


author: nocjj <1250062498@qq.com>
changelog:
  - vcpustat: modify vcpu info acquirement from debugfs
  - display: expand %CPU display
  - display: add limit to usage display
  - vmtop: simplify print_domain_field


author: Jiajun Chen <1250062498@qq.com> -1.1-3
changelog:
  - vcpu_stat: add remaining kvm exits items to display
  - display: modify filter display to support more display fields items
  - vcp_stat: add Max Scheduling Delay time items to display
  - args: add -p option
  - key: add page up/down key response
  - vcpu_stat: get vcpu stat list once per display instead of per vcpu
  - proc: del /prc/pid/comm read
  - display: del screen clear after key response
  - codestyle: del unused var


author: yangzhuangzhuang<yangzhuangzhuang1@huawei.com> - 0.3.12-4
changelog:
  - The "no acceptable C compiler found" error message is displayed during compilation.Therefore,add buildrequires gcc.


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 1:3.6.14-12
changelog:
  - Delete /usr/share/man/man1/wireshark.* in wireshark package because wireshark-help package also contains this files


author: Zhiqiang Liu <liuzhiqiang26@huawei.com> - 5.6.0-3
changelog:
  - mkfs.xfs: fix ASSERT on to-small device with stripe geometry.
    Fix issue: https://gitee.com/src-openeuler/xfsprogs/issues/I4RZKQ


author: yanglu <yanglu72@h-partners.com> -1.20.8-28
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix regression caused by the fix for CVE-2024-0229
         fix use after free related to CVE-2024-21886


author: shuaijiakun <shuaijiakun1288@phytium.com.cn> -1.20.8-29
changelog:
  - Type:feature
  - CVE:NA
  - SUG:NA
  - DESC:fix display error for ps23xx when using ast and pe2201 bmc card.


author: Funda Wang <fundawang@yeah.net> - 1.20.8-32
changelog:
  - fix CVE-2025-26594, CVE-2025-26595, CVE-2025-26596,
    CVE-2025-26597, CVE-2025-26598, CVE-2025-26599
    CVE-2025-26600, CVE-2025-26601


author: luhuaxin <luhuaxin@huawei.com> - 1.3-39
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC: move gxvattr to main package, move AUTHORS to license folder


author: kouwenqi <kouwenqi@kylinos.cn> - 5.2.5-4
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC:Add overflow check for Unpadded size in lzma_index_append


author: luckky <guodashun1@huawei.com> - 1.4.5-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:The libzsta.a library should be packaged to access advanced experimental features


