# changelog

author: lvying<lvying6@huawei.com> - 1.0.0-1
changelog:
  - Type:feature
  - ID:NA
  - SUG:NA
  - DESC: Init A-Tune-BPF-Collection repo and add readahead_tune service


author: lvying<lvying6@huawei.com> - 1.0.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: use generated vmlinux.h instead of bpftool gen vmlinux.h in compile env


author: Yu Peng <yupeng@kylinos.cn> - 1:1.26.2-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: bond:avoid logging warning to set "ad_actor_system=00:00:00:00:00:00".


author: yaoxin <yao_xin001@hoperun.com> - 1.2.24-1
changelog:
  - Update to 1.2.24:
    * Fixed formatting of ipsec.conf snippet. This is a security
    issue with severity of "Important." (CVE-2024-9050)
    * Added support for "require-id-on-certificate" setting.
    * Updated Georgian, Slovenian and Ukrainian translations.


author: wanglu <wanglu210@huawei.com> - 33.19-33
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert "Set default entry to the BLS id instead of the entry index"


author: yueyuankun <yueyuankun@kylinos.cn> - 33.19-34
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Solve the problem that sometimes the circular loading progress bar does not rotate


author: sunhai <sunhai10@huawei.com> - 33.19-36
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:dracut handle compressed kernel modules
         network use separate main conext for NM-client in threads


author: sunhai <sunhai10@huaqei.com> - 33.19-40
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Don't set LC_ALL for live installations
         Do not crash on network --device link with wireless device
         Do not modify boot order on UEFI if asked


author: Linux_zhang <zhangruifang@h-partners.com> - 3.1.23-7
changelog:
  - Type：update
  - ID：NA
  - SUG:NA
  - DESC: Modify the license to SPDX format
          Delete MIT and Public Domain license because it no longer appears in the upstream source


author: Roberto Sassu <roberto.sassu@huawei.com> - 0.2.0
changelog:
  - Add quote protocol
  - Add parser for TPM 2.0 event log
  - Add evm_key and dummy verifiers
  - Add creation of certificate for TPM key
  - Add creation of symmetric key to be used with EVM
  - Add ima-sig and ima-cp verifiers


author: Shijie Luo<luoshijie1@huawei.com> - 2.4.48-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:fix error condition of while loop 
         in 0001-bypass-wrong-output-when-enabled-selinux.patch.


author: yixiangzhike <yixiangzhike007@163.com> - 5.0-22
changelog:
  - sync patches from bash community:
     fix default file descriptor for <> redirection when printing command
     update BASH_COMMAND for subshells
     fix potential file descriptor leak in here document pipes


author: fuanan <fuanan3@h-partners.com> - 5.0-23
changelog:
  - sync patches from bash community
    add backport-documentation-updates-fix-for-null-commands-with-red.patch
    add backport-fix-for-readline-redisplay-issue-in-C-locale-fix-for.patch


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 32:9.11.21-23
changelog:
  - Type:CVE
  - CVE:CVE-2026-1519
  - SUG:NA
  - DESC:fix CVE-2026-1519: excessive NSEC3 iterations CPU exhaustion


author: tangce1 <tangce1@h-partners.com> - 32:9.11.21-24
changelog:
  - Type:CVE
  - CVE:CVE-2026-3039,CVE-2026-3592,CVE-2026-5946
  - SUG:NA
  - DESC:fix CVE-2026-3039,CVE-2026-3592,CVE-2026-5946


author: panxiaohe <panxiaohe@huawei.com> - 3.6.4-2
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:use make macros to run check in parallel;
         fix a concurrent build issue in examples


author: wangxiao <wangxiao184@h-partners.com> - 1.2.0-27
changelog:
  - DESC: backport upstream patches
    blkparse skip check_cpu_map with pipe input
    blkparse fix incorrectly sized memset in check_cpu_map
    fix hang when BLKTRACESETUP fails and "-o -" is used


author: zhangyiru <zhangyiru3@huawei.com> - 1.73.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:increase used_block_count when use put_mem_block
    Disallow repeating a case-change group


author: zhangyiru <zhangyiru3@huawei.com> - 1.73.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Correct stack unwinding inside recursions when seeing (*SKIP).


author: huwentao <huwentao19@h-partners.com> - 4.19.90-2604.2.0.0368
changelog:
  - !21468  mm/huge_memory: fix folio isn't locked in softleaf_to_folio()
  - mm/huge_memory: fix folio isn't locked in softleaf_to_folio()


author: huwentao <huwentao19@h-partners.com> - 4.19.90-2604.3.0.0369
changelog:
  - !20911 [openEuler-1.0-LTS] Fix CVE-2025-39710
  - !20867 [openEuler-1.0-LTS] Fix CVE-2025-39738
  - !20549 [openEuler-1.0-LTS] Fix CVE-2022-50300
  - media: venus: Add a check for packet size after reading from shared memory
  - btrfs: do not allow relocation of partially dropped subvolumes
  - btrfs: fix extent map use-after-free when handling missing device in read_one_chunk


author: huwentao <huwentao19@h-partners.com> - 4.19.90-2605.1.0.0370
changelog:
  - !22146 v4  CVE-2026-31431
  - crypto: algif_aead - Fix minimum RX size check for decryption
  - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
  - crypto: authencesn - Fix src offset when decrypting in-place
  - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
  - crypto: authenc - use memcpy_sglist() instead of null skcipher
  - crypto: algif_aead - snapshot IV for async AEAD requests
  - crypto: algif_aead - Revert to operating out-of-place
  - crypto: algif_aead - use memcpy_sglist() instead of null skcipher
  - crypto: scatterwalk - Backport memcpy_sglist()
  - crypto: doc - fix kernel-doc notation in chacha.c and af_alg.c


author: huwentao <huwentao19@h-partners.com> - 4.19.90-2605.2.0.0371
changelog:
  - !22018  ext4: publish jinode after initialization
  - !22019  FIX CVE-2026-31449
  - !21123 [openEuler-1.0-LTS] Fix CVE-2025-68340
  - !22063  KVM: x86: Use scratch field in MMIO fragment to hold small write values
  - !22131 Fix CVE-2026-31678
  - openvswitch: defer tunnel netdev_put to RCU release
  - KVM: x86: Use scratch field in MMIO fragment to hold small write values
  - ext4: validate p_idx bounds in ext4_ext_correct_indexes
  - ext4: prevent partial update of the extents path
  - ext4: refactor ext4_ext_rm_idx() to index 'path'
  - ext4: publish jinode after initialization
  - team: Move team device type change at the end of team_port_add


author: huwentao <huwentao19@h-partners.com> - 4.19.90-2605.3.0.0372
changelog:
  - !22312  drm/ioc32: stop speculation on the drm_compat_ioctl path
  - !22338  rxrpc: proc: size address buffers for %pISpc output
  - !22043 Fix CVE-2026-31515
  - !22123  net: fix fanout UAF in packet_release() via NETDEV_UP race
  - !22047 Fix CVE-2026-31682
  - !22052 Fix CVE-2026-31674
  - !22072 CVE-2026-31673
  - rxrpc: proc: size address buffers for %pISpc output
  - drm/ioc32: stop speculation on the drm_compat_ioctl path
  - !22252 [openEuler-1.0-LTS] Fix CVE-2026-43284
  - xfrm: esp: avoid in-place decrypt on shared skb frags
  - net: fix fanout UAF in packet_release() via NETDEV_UP race
  - af_unix: read UNIX_DIAG_VFS data under unix_state_lock
  - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check()
  - bridge: br_nd_send: linearize skb before parsing ND options
  - af_key: validate families in pfkey_send_migrate()


author: huwentao <huwentao19@h-partners.com> - 4.19.90-2605.4.0.0373
changelog:
  - !22431  bugfix set of CVEs
  - !22556  CVE-2026-46333
  - ptrace: Fix kabi breakage in struct task_struct
  - ptrace: slightly saner 'get_dumpable()' logic
  - !22388  crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed
  - !22343 Fix CVE-2026-31699
  - !22407 Fix CVE-2026-31527
  - HID: multitouch: Check to ensure report responses match the request
  - HID: core: Mitigate potential OOB by removing bogus memset()
  - HID: core: Add printk_ratelimited variants to hid_warn() etc
  - driver/core: Fix kabi broken of platform_device/device/bus_type
  - driver core: platform: use generic driver_override infrastructure
  - driver core: generalize driver_override in struct device
  - crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed
  - crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed


author: huwentao <huwentao19@h-partners.com> - 4.19.90-2605.5.0.0374
changelog:
  - !22879 Fix CVE-2026-43503
  - !22870 Fix CVE-2026-46300
  - net: skbuff: preserve shared-frag marker during coalescing
  - net: skbuff: propagate shared-frag marker through frag-transfer helpers
  - !22774 Fix CVE-2026-43493
  - crypto: pcrypt - Fix handling of MAY_BACKLOG requests
  - !22681  mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate()
  - mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate()


author: huwentao <huwentao19@h-partners.com> - 4.19.90-2606.1.0.0375
changelog:
  - !23395 Fix CVE-2026-45840
  - !22954 Fix CVE-2026-43139
  - !22955 Fix CVE-2026-43190
  - !22951 Fix CVE-2026-43233
  - !23371  sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL
  - !23342  drm/nouveau: fix u32 overflow in pushbuf reloc bounds check
  - !23401  lib/crypto: chacha: Zeroize permuted_state before it leaves scope
  - !23367  crypto: authencesn - reject short ahash digests during instance creation
  - !23366  net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery
  - openvswitch: cap upcall PID array size and pre-size vport replies
  - lib/crypto: chacha: Zeroize permuted_state before it leaves scope
  - !23195  ceph: only d_add() negative dentries when they are unhashed
  - !22663 Fix CVE-2026-43038
  - !22668 Fix CVE-2026-43037
  - !23019 Fix CVE-2026-46023
  - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL
  - crypto: authencesn - reject short ahash digests during instance creation
  - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery
  - drm/nouveau: fix u32 overflow in pushbuf reloc bounds check
  - ceph: only d_add() negative dentries when they are unhashed
  - !23037  thermal: core: Fix thermal zone governor cleanup issues
  - !23150  smb: client: reject userspace cifs.spnego descriptions
  - smb: client: reject userspace cifs.spnego descriptions
  - !23038  CVE-2026-43427
  - !23036  mm: blk-cgroup: fix use-after-free in cgwb_release_workfn()
  - !23030 CVE-2026-31759
  - usb: class: cdc-wdm: fix reordering issue in read code path
  - usb: cdc-wdm: avoid setting WDM_READ for ZLP-s
  - thermal: core: Fix thermal zone governor cleanup issues
  - mm: blk-cgroup: fix use-after-free in cgwb_release_workfn()
  - usb: ulpi: fix memory leak on ulpi_register() error paths
  - usb: ulpi: Call of_node_put correctly
  - !22984  CVE-2026-43328
  - dm mirror: fix integer overflow in create_dirty_log()
  - !22994  Fix CVE-2026-43158
  - !22842  net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode
  - xfs: fix freemap adjustments when adding xattrs to leaf blocks
  - xfs: delete attr leaf freemap entries when empty
  - cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path
  - cpufreq: governor: Free dbs_data directly when gov->init() fails
  - xfrm6: fix uninitialized saddr in xfrm6_get_saddr()
  - netfilter: xt_tcpmss: check remaining length before reading optlen
  - netfilter: nf_conntrack_h323: fix OOB read in decode_choice()
  - net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode
  - ip6_tunnel: clear skb2->cb[] in ip4ip6_err()
  - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()


author: huwentao <huwentao19@h-partners.com> - 4.19.90-2606.3.0.0376
changelog:
  - !23663 Fix CVE-2026-46259
  - !23552  mm: slab: fix double destroy of kmem_cache
  - !23514  backport some zram bugfixes
  - procfs: fix missing RCU protection when reading real_parent in do_task_stat()
  - !23637  *** revert CVE-2026-31527 ***
  - Revert "driver core: generalize driver_override in struct device"
  - Revert "driver core: platform: use generic driver_override infrastructure"
  - Revert "driver/core: Fix kabi broken of platform_device/device/bus_type"
  - mm: slab: fix double destroy of kmem_cache
  - !23533  RDMA/rxe: Fix double free in rxe_srq_from_init
  - !23502  drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs()
  - !23494  ipmi: Add limits to event and receive message requests
  - !23523  ipv6: prevent possible UaF in addrconf_permanent_addr()
  - RDMA/rxe: Fix double free in rxe_srq_from_init
  - !23492  bonding: alb: fix UAF in rlb_arp_recv during bond up/down
  - !23429 Fix HWPSIRT-2026-70484
  - !23339 Fix CVE-2026-45843
  - !23407  net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs
  - ipv6: prevent possible UaF in addrconf_permanent_addr()
  - !23461  netfilter: x_tables: ensure names are nul-terminated
  - !23470  netfilter: nf_conntrack_helper: pass helper to expect cleanup
  - !23453  netfilter: nft_ct: fix use-after-free in timeout object destroy
  - !23404  net/sched: Enforce that teql can only be used as root qdisc
  - !23399  ipvs: fix ipv4 null-ptr-deref in route error path
  - mm/page_io: use pr_alert_ratelimited for swap read/write errors
  - drivers/block/zram/zram_drv.c: do not keep dangling zcomp pointer after zram reset
  - zram: do not lookup algorithm in backends table
  - zram: avoid race between zram_remove and disksize_store
  - zram: don't fail to remove zram during unloading module
  - zram: fix race between zram_reset_device() and disksize_store()
  - zsmalloc: account the number of compacted pages correctly
  - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs()
  - !22992 Fix CVE-2026-43194
  - !23297 Fix CVE-2026-43383
  - !23286  netfilter: nft_ct: drop pending enqueued packets on removal
  - !23307  netfilter: x_tables: guard option walkers against 1-byte tail reads
  - !23292  netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()
  - !23042 Fix CVE-2026-43499
  - ipmi: Add limits to event and receive message requests
  - bonding: alb: fix UAF in rlb_arp_recv during bond up/down
  - xfrm: esp: restore combined single-frag length gate
  - slip: bound decode() reads against the compressed packet length
  - netfilter: nf_conntrack_helper: pass helper to expect cleanup
  - !23393  CVE-2026-46043
  - netfilter: x_tables: ensure names are nul-terminated
  - netfilter: nft_ct: fix use-after-free in timeout object destroy
  - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs
  - net/sched: Enforce that teql can only be used as root qdisc
  - ipvs: fix ipv4 null-ptr-deref in route error path
  - RDMA/rxe: Reject unknown opcodes before ICRC processing
  - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv
  - netfilter: x_tables: guard option walkers against 1-byte tail reads
  - net/tcp-md5: Fix MAC comparison to be constant-time
  - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()
  - netfilter: nft_ct: drop pending enqueued packets on removal
  - rtmutex: Use waiter::task instead of current in remove_waiter()
  - net: consume xmit errors of GSO frames


author: huwentao <huwentao19@h-partners.com> - 4.19.90-2606.4.0.0377
changelog:
  - !23944  hugetlbfs: prevent filesystem stacking of hugetlbfs
  - hugetlbfs: prevent filesystem stacking of hugetlbfs
  - !23900  dm: fix a buffer overflow in ioctl processing
  - dm: fix a buffer overflow in ioctl processing


author: liuxu <liuxu156@huawei.com> - 1:1.31.1-21
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363


author: chenyanpanHW <chenyanpan@huawei.com> - 0.10.10-8
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-cachefilesd-fix-abort-in-decant_cull_table.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: yanglu <yanglu60@huawei.com> - 1.15.14-5
changelog:
  - Type:cves
  - ID:CVE-2018-19876 CVE-2019-6461 CVE-2019-6462
  - SUG:NA
  - DESC: fix CVE-2018-19876 CVE-2019-6461 CVE-2019-6462


author: chenyanpanHW <chenyanpan@huawei.com> - 1.4.33-3
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-T0ProcACK-fix-a-potential-problem.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-CmdGetSlotStatus-fix-potential-read-of-uninitialized.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0003-ReadUSB-fix-potential-read-of-uninitialized-buffer.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0004-IFDHSetProtocolParameters-handle-ATR_GetConvention-e.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0005-PPS_Match-fix-potential-read-of-uninitialized-buffer.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0006-dw2i-fix-potential-integer-overflow.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: Liquor <lirui130@huawei.com> - 11-5
changelog:
  - Delete remaining references to the removed http pin
    Install cryptsetup and tpm2_pcrlist in the initramfs
    Add device TCTI library to the initramfs


author: jiangchuangang<jiangchuangang@huawei.com> - 8.32-9
changelog:
  - sync patches from community
  - add backport-pr-fix-infinite-loop-when-double-spacing.patch
    backport-wc-ensure-we-update-file-offset.patch


author: jiangchuangang <jiangchuangang@huawei.com> - 8.32-10
changelog:
  - sync patches from community
  - add backport-who-fix-only-theoretical-overflow.patch
        backport-tac-handle-short-reads-on-input.patch
        backport-setenv-Don-t-crash-if-malloc-returns-NULL.patch
        backport-who-don-t-crash-if-clock-gyrates.patch
        backport-doc-od-strings-clarify-operation.patch


author: cenhuilin <cenhuilin@kylinos.cn> - 8.32-12
changelog:
  - sync patches from community
  - add backport-coverity-utimens.patch
        backport-fuse-portal.patch
        backport-expr-unmatched-par.patch


author: wangjiang <app@cameyan.com> - 8.32-14
changelog:
  - sync patches from community
  - add backport-numfmt-don-t-require-a-suffix-with-from-iec-i.patch
        backport-sort-fix-debug-buffer-overrun.patch
        backport-tac-avoid-out-of-bounds-access.patch
        backport-yes-avoid-failure-on-CHERI-protected-systems.patch


author: Funda Wang <fundawang@yeah.net> - 8.32-17
changelog:
  - fix upstream bug#72445: Fill the ISAAC buffer instead of storing at most
    BYTES_BOUND bytes into it.


author: fuanan <fuanan3@h-partners.com> - 2.13-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert fix CVE-2015-1197 because it causes AT testcases problems


author: chenziyang <chenziyang4@huawei.com> - 2.13-7
changelog:
  - Type:CVE
  - ID:CVE-2015-1197
  - SUG:NA
  - DESC:Fix CVE-2015-1197, delete revert-CVE-2015-1197.patch because new patch
         will fix the problem brought by old-CVE-2015-1197.patch, so we delete 
         revert-CVE-2015-1197.patch


author: wangxiao <wangxiao184@h-partners.com> - 7.2.8-6
changelog:
  - arm64: fix again segfault in arm64_is_kernel_exception_frame
    arm64: fix a potential segfault when unwind frame


author: yanglongkang <yanglongkang@huawei.com> - 2.3.3-4
changelog:
  - add buildrequire gcc
    add make check
    backport upstream patches to solve several problems -epoch2


author: chenyanpanHW <chenyanpan@huawei.com> - 2.3.3-5
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-cryptsetup-add-system-library-paths.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fix-compat-test.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0003-Check-segment-gaps-regardless-of-heap-space.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0004-Fix-posible-buffer-overflows-in-LUKS-conversion.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0005-Fix-a-memleak-in-blockwise-test.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0006-CVE-2021-4122.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: Funda Wang <fundawang@yeah.net> - 1:2.2.13-22
changelog:
  - fix CVE-2025-58060, CVE-2025-58364
  - move www files into main package due to requirement by web interface


author: gaihuiying <eaglegai@163.com> - 1:2.2.13-24
changelog:
  - fix CVE-2026-27447 CVE-2026-34978 CVE-2026-34979 CVE-2026-34980 CVE-2026-34990 CVE-2026-39314 CVE-2026-39316


author: xingwei <xingwei14@h-partners.com> - 7.71.1-41
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:altsvc: avoid integer overflow in expire calculation
         test391: verify --path-as-is with redirect
         urlapi: fix redirect to a new fragment or query (only)


author: xinghe <xinghe2@h-partners.com> - 7.71.1-42
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:curl_path: bring back support for SFTP path ending in /~
         curl_path: make SFTP handle a path like /~ properly


author: zhouyihang <zhouyihang3@h-partners.com> - 7.71.1-45
changelog:
  - Type:CVE
  - CVE:CVE-2025-14017 CVE-2025-14524 CVE-2025-15079 CVE-2025-15224
  - SUG:NA
  - DESC:fix CVE-2025-14017 CVE-2025-14524 CVE-2025-15079 CVE-2025-15224


author: zhouyihang <zhouyihang_z@163.com> - 7.71.1-46
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:formdata: validate callback is non-NULL before use
         tftp: correct the filename length check


author: zhouyihang <zhouyihang_z@163.com> - 7.71.1-47
changelog:
  - Type:CVE
  - CVE:CVE-2026-1965 CVE-2026-3783 CVE-2026-3784
  - SUG:NA
  - DESC:fix CVE-2026-1965 CVE-2026-3783 CVE-2026-3784


author: zhouyihang <zhouyihang_z@163.com> - 7.71.1-48
changelog:
  - Type:CVE
  - CVE:CVE-2026-4873 CVE-2026-5545 CVE-2026-5773 CVE-2026-6253 CVE-2026-6276 CVE-2026-6429 CVE-2026-7168
  - SUG:NA
  - DESC:fix CVE-2026-4873 CVE-2026-5545 CVE-2026-5773 CVE-2026-6253 CVE-2026-6276 CVE-2026-6429 CVE-2026-7168


author: wangkai <13474090681@163.com> - 1.11.23-54
changelog:
  - Add patches from fedora, improve C compatibility and fix build failures caused by higher gcc versions


author: hongjinghao <hongjinghao@huawei.com> - 1:1.12.16-23
changelog:
  - add backport-bus-dir-watch-Do-not-crash-with-128-dirs.patch	
  backport-Do-not-crash-when-reloading-configuration.patch


author: Roberto Sassu <roberto.sassu@huawei.com> - 0.3.94-1
changelog:
  - Add obj_label attribute in file list
  - Replace hard coded permission
  - Set user.digest_list xattr
  - Bug fixes


author: lingsheng <lingsheng1@h-partners.com> - 2.82-18
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Update DNS records after pruning DHCP leases
         Fix potential memory leak
         Fix possible SIGSEGV in bpf.c
         adapt bugfix allow binding mac with ipv6


author: luoguocui <luoguocui@h-partners.com> - 2.82-19
changelog:
  - Type:bugfix
  - CVE:
  - SUG:NA
  - DESC:Fix bad reply to DHCPCONFIRM messages (wrong message type)
         Fix reply confirm packet when binding-mac-with-ip6 on


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 2.82-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
    Fix bounds checking in check_ia
    Fix SEGV in Dbus code
    More fixes for DHCP ops in Dbus when DHCP not configured


author: zhaoyonghao10 <zhaoyonghao10@h-partners.com> - 2.82-21
changelog:
  - Type:CVE
  - CVE:CVE-2026-2291 CVE-2026-4890 CVE-2026-4891 CVE-2026-4892 CVE-2026-4893
  - SUG:NA
  - DESC:Fix buffer overflow in struct bigname (CVE-2026-2291)
         Fix NSEC bitmap parsing infinite loop (CVE-2026-4890)
         Verify rdlen field in RRSIG packets (CVE-2026-4891)
         Fix buffer overflow in helper with large CLIDs (CVE-2026-4892)
         Fix broken client subnet validation (CVE-2026-4893)


author: wangkai <13474090681@163.com> - 1:2.3.15-7
changelog:
  - Fix CVE-2025-59031, CVE-2025-59032, CVE-2026-27855, CVE-2026-27856,
    CVE-2026-27857, CVE-2026-27858, CVE-2026-27859, CVE-2026-0394


author: lifeifei<lifeifei@kylinos.cn> - 2.0.11-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix: if libvirt and ebtables are installed at the same time, ping the operation prompts "sendmsg: Operation not permitted".


author: xinghe <xinghe2@h-partners.com> - 2.0.11-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix ebtables-restore --noflush failed when ebtables is uninstall


author: taolinghongfei <taolinghongfei@h-partners.com> - 202002-34
changelog:
  - fix CVE-2026-22795,CVE-2026-22796
  - fix CVE-2025-69420
  - fix CVE-2025-69421
  - fix CVE-2025-68160
  - fix CVE-2025-69418
  - fix CVE-2025-69419


author: dillon chen <dillon.chen@gmail.com> - 2.4.5-5
changelog:
  - CVE-2020-18651,CVE-2020-18652
  - CVE-2021-36048,CVE-2021-39847,CVE-2021-42530,CVE-2021-36046,CVE-2021-36055
  - CVE-2021-40716,CVE-2018-12648,CVE-2021-36054,CVE-2021-36047,CVE-2021-36052
  - CVE-2021-36058,CVE-2021-36045,CVE-2021-42531,CVE-2021-36064,CVE-2021-42529
  - CVE-2021-42528,CVE-2021-36050,CVE-2021-40732
  - CVE-2021-36056,CVE-2021-42532,CVE-2021-36053,CVE-2021-36051


author: wangkai <13474090681@163.com> - 1:2.3.0-1
changelog:
  - Update to 2.3.0 for fix CVE-2022-48682
  - Add ncurses mode for interactive file deletion (plain mode still available via --plain or ./configure).
  - Add --minsize --maxsize --time --order=ctime --log --deferconfirmation --cache option.
  - Use configure script for installation (Autotools/Automake).
  - Rename cs command ("clear all selections") from cs to csel.
  - Rename igs command ("invert selections") from igs to isel.
  - Add "prune" command as synonym for DELETE key.
  - Clear selections after deleting files via prune/DELETE.
  - Fix dependency issues when fdupes is configured to not use ncurses.
  - Do not enter ncurses mode when --immediate option given.


author: liqiuyu <liqiuyu@kylinos.cn> - 0.4.0-10
changelog:
  - add bz1766993-fence_virtd-1-fix-segfault-no-domains.patch
  - add bz1766993-fence_virtd-2-return-mainloop-on-interrupt.patch


author: weidongkl <weidong@kylinsec.com.cn> - 4.2.4-30
changelog:
  - Type: CVE
  - CVE: CVE-2020-20450
  - SUG: NA
  - DESC: mxfenc: never set codec_ul UID to NULL to prevent null pointer dereference


author: openEuler Buildteam <buildteam@openeuler.org> - 2:4.7.0-4
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:Fix test failures ran as root and enable -xautofs and disable leaf opt


author: yangzhuangzhuang<yangzhuangzhuang1@huawei.com> - 2.6.4-3
changelog:
  - The autoreconf command is used during compilation.
    Therefore,the automake and autoconf compilation dependencies need to added.


author: wangkai <13474090681@163.com> - 2:2.11.8-1
changelog:
  - Update to 2.11.8
  - Fix CVE-2026-22852, CVE-2026-22856, CVE-2026-22859, CVE-2026-23530, CVE-2026-23531,
    CVE-2026-23532, CVE-2026-23534, CVE-2026-24491, CVE-2026-24675, CVE-2026-24676,
    CVE-2026-24679, CVE-2026-24681, CVE-2026-24682, CVE-2026-24683, CVE-2026-24684,
    CVE-2026-25997, CVE-2026-26271, CVE-2026-26986, CVE-2026-27015, CVE-2026-25941,
    CVE-2026-22855, CVE-2026-22857, CVE-2026-23533, CVE-2026-23732, CVE-2026-23883,
    CVE-2026-23884


author: wangkai <13474090681@163.com> - 2:2.11.8-3
changelog:
  - Fix CVE-2026-26955, CVE-2026-26965, CVE-2026-31806, CVE-2026-31883, CVE-2026-31885,
    CVE-2026-33984, CVE-2026-33983


author: wangkai <13474090681@163.com> - 2:2.11.8-5
changelog:
  - Fix CVE-2026-25942, CVE-2026-25952, CVE-2026-25953, CVE-2026-25954, CVE-2026-27951,
    CVE-2026-29774, CVE-2026-29775, CVE-2026-31884, CVE-2026-33985


author: openEuler Buildteam <buildteam@openeuler.org> - 2.9.9-0
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:update fuse2 from 2.9.7 to 2.9.9,
         update fuse3 from 3.2.3 to 3.9.0


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-79
changelog:
  - cfg: notify that it's unsupported, when stack_num > 1
  - fix errno == ETIMEFOUT
  - fix epoll and recv threads blocked on the same semaphore. data cannot be read in recv thread.
  - fix rpc pool leak, when thread exits
  - remove app_bind_numa check from exclude_cpus
  - openGauss: fix connection attempt failed
  - openGauss: fix gs_ctl switchover failed


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-80
changelog:
  - Connect: execute lwip connect if dst_ip and host_ip are in the same network.
  - kernerl bind: add ipv6 add check
  - openGauss unsupport_tcp_optname
  - fix a contention issue when rpc pools are added to rpc_pool_array


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-82
changelog:
  - DUMP: fix abnomal printing in the dump process.
  - SIGNAL: Adjust hijack sigal table to hijack SIGABRT SIGQUIT and delet SIGKILL
  - SIGNAL: Adjust sigaction function to keep lstack signal function executed successfully.


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-83
changelog:
  - SIGNAL: block SIGSEGV during exit process
  - Stack: unset stack_stop, while stacks exit by rpc message.
  - fix the memory leak when using strdup


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-84
changelog:
  - update gazelle max numa nodes 8
  - Protocal: fixing deathlock between protocol threads and app thread
  - Connect: fix benchmark_dws connect failed
  - RTC-mode: fix gazellectl can't print connenct info
  - add xdp tx checksum/tso offload


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-85
changelog:
  - sockio: fix rpc_send coredump after RPC_MSG_EXIT
  - sockio: fix tcp_write not remove EPOLLOUT
  - fix 20.03-LTS build failed
  - sk_wait: igonre mem_thread flush signal
  - sockio: fix sendmbox full return EWOULDBLOCK
  - sockio: fix callback_tcp_send output too many at once
  - mempool: increase MEM_THREAD_MANAGER_FREE_S to avoid poll
  - sockctl: fix rtw broadcast close and shutdown
  - poll: fix do_lwip_connected_callback not delete poll kernel fd
  - sk_event: fix rtw epoll wrong event notify and remove
  - sockio: fix rtw_stack_tcp_write wrong copied_total after append
  - epoll: fix do_lwip_connected_callback
  - sk_wait: fix lwip_wait_foreach_notify coredump at startup
  - socket: fix stack_udp_readmsg return len
  - sk_wait: fix sock_wait_common_free socket: simplify calling free_count in rtw_stack_tcp_write
  - mbox: fix mbox_ring_common_free coredump when rte_ring_create failed
  - sk_wait: fix lwip_tcp_allow_send coredump
  - mempool: stop using cache when too many threads
  - mempool: fix pthread_tryjoin_np coredump when mysqld shutdown
  - mempool: mem_get_rpc add reserve limit
  - mempool: fix mbox_ring free not call recv_finish_burst
  - mempool: modify mbuf num and rpc_msg num
  - socket: fix sk_wait cannot be interrupted by signals
  - socket: fix tcp closed
  - tcp: add GAZELLE_TCP_ASYNC_RECVD      fix mbuf OOM caused by untimely sockio_peek_recv_free
  - socket: fix stack_tcp_read do not recv_finish_burst
  - socket: fix connect blocking
  - mempool: fix copy_mbuf_private
  - dfx: support sk_wait stat
  - mempool: add mem_thread_cache_flush          fix PBUF_POOL_PREINIT
  - cfg: add mem_async_mode
  - cfg: add mem_cache_max and change default rpc_msg_max
  - socket: adapt to tcp and udp
  - socket: refactor tcp and udp
  - socket: adapt to sock_event
  - socket: refactor sock_event
  - cleancode: remove get_stack_tid DPDK_PKT_BURST_SIZE PACKET_READ_SIZE
  - cleancode: remove gazelle_light_ring
  - cleancode: add GAZELLE_SAME_NODE
  - RTC: fixing program stuck while gazelle exit in multi-threads envirement


author: Shujian Zhao <zhaoshujian@huawei.com> 10.3.0-3
changelog:
  - Type:Fix
  - ID:NA
  - SUG:NA
  - DESC:Change isl version from isl-0.21 to isl-0.16.1 to fix the deja test ice.


author: Shujian Zhao <zhaoshujian@huawei.com> 10.3.0-4
changelog:
  - Type:Fix
  - ID:NA
  - SUG:NA
  - DESC:Add missing file and start project build to fix the nag ICE issue.


author: hugel <gengqihu2@h-partners.com> - 9.52-23
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Sync some patches from community
         backport-Fix-memory-leak-in-pdfwrite-device.patch
         backport-Fix-memory-leak-on-error-in-bitmap_paint-and-its-cal.patch
         backport-Fix-memory-leaks-in-tiffsep.patch


author: yaoxin <yao_xin001@hoperun.com> - 5.2.2-1
changelog:
  - Update to 5.2.2
    * Fixes for CVE-2023-48161 (bsc#1217390), CVE-2022-28506 (bsc#1198880)
    * Address SF issue #151: A heap-buffer-overflow in gif2rgb.c:294:45
    * Address SF issue #166: a read zero page leads segment fault in
      getarg.c and memory leaks in gif2rgb.c and gifmalloc.c


author: fuanan <fuanan3@h-partners.com> - 2.27.0-19
changelog:
  - Type:CVE
  - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
  - SUG:NA
  - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465


author: fuanan <fuanan3@h-partners.com> - 2.27.0-25
changelog:
  - Type:CVE
  - ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
  - SUG:NA 
  - DESC:Fix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835


author: fuanan <fuanan3@h-partners.com> - 2.27.0-26
changelog:
  - Type:CVE
  - ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
  - SUG:NA
  - DESC:refix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835


author: fuanan <fuanan3@h-partners.com> - 2.27.0-27
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:modify patch
         backport-CVE-2025-27613-CVE-2025-46334-CVE-2025-46835.patch


author: panzhe <panzhe@kylinos.cn> - 2.28-120
changelog:
  - sync from glibc upstream for fix bugs
  - libio: Disable vtable validation for pre-2.1 interposed handles [BZ #25203]
  - x86: Assume --enable-cet if GCC defaults to CET [BZ #25225]
  - string: Define __CORRECT_ISO_CPP_STRING_H_PROTO for Clang [BZ #25232]


author: Qingqing Li <liqingqing3@huawei.com> - 2.28-124
changelog:
  - libio: Fix ungetwc operating on byte stream [BZ #33998] (CVE-2026-5928)
  - stdio-common: Fix buffer overflow in scanf %mc [BZ #34008] (CVE-2026-5450)


author: konglidong <konglidong@uniontech.com> - 0-30.20180720git
changelog:
  - update java source from 1.3 to 1.8
  - modify buildrequires from java-devel to java-1.8.0-openjdk-devel


author: Xu Raoqing <609179072@qq.com> - 3.6.14-22
changelog:
  - fix CVE-2026-42009
  - fix CVE-2026-42010
  - fix CVE-2026-42013
  - fix CVE-2026-42014
  - fix CVE-2026-5260
  - fix CVE-2026-42015
  - fix CVE-2026-3832


author: lvying <lvying6@huawei.com> - 2.7-3
changelog:
  - Type:enhancement
  - ID:NA
  - SUG: NA
  - DESC: peripheral package quality reinforcement: backport bugfix patches from community


author: gaihuiying <eaglegai@163.com> - 1.31.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix adjust to abseil-cpp 20210324,since it dont provides absl_dynamic_annotations library anymore


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.04-38
changelog:
  - Type:CVE
  - CVE:CVE-2024-1048
  - SUG:NA
  - DESC:grub-set-bootflag: Fix for CVE-2024-1048
         commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
         kern/acpi: Skip NULL entries in RSDT and XSDT
         util/grub-mount: Check file path sanity
         kern/acpi: Use xsdt_addr if present
         commands/acpi: Use xsdt_addrifpresent


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.04-40
changelog:
  - Type:CVE
  - CVE:CVE-2024-45781,CVE-2024-45782,CVE-2024-56737,CVE-2024-45780,CVE-2024-45783,CVE-2024-49504,CVE-2025-0624,CVE-20
  24-45774,CVE-2024-45775,CVE-2025-0622,CVE-2025-0622,CVE-2025-0622,CVE-2024-45776,CVE-2024-45777,CVE-2025-0690,CVE-20
  25-1118,CVE-2024-45778,CVE-2024-45779,CVE-2025-0677,CVE-2025-0684,CVE-2025-0685,CVE-2025-0686,CVE-2025-0689,CVE-2025
  -0678,CVE-2025-1125
  - SUG:NA
  - DESC:fix the vulnerabilities announced on February 18th, 2025


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1:2.04-42
changelog:
  - Type:CVE
  - CVE:CVE-2025-61661,CVE-2025-61662,CVE-2025-61663,CVE-2025-61664
  - SUG:NA
  - DESC:commands/usbtest: Ensure string length is sufficient in usb string processing
         commands/usbtest: Use correct string length field
         tests/lib/functional_test: Unregister commands on module unload
         normal/main: Unregister commands on module unload
         gettext/gettext: Unregister gettext command on module unload


author: yueyuankun <yueyuankun@kylinos.cn> - 1:2.04-43
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:protect grub2 packages
         protected: grub2-efi-aa64, grub2-efi-ia32, grub2-efi-x64, grub2-pc, grub2-tools-minimal


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.2.3-1
changelog:
  - Upgrade to 1.2.3
  - Update Version, Release, Source0, BuildRequires
  - Update stage 'build', 'install', 'check' and 'files'


author: lizhengde <lizhengde@xfusion.com> - 1.16.2-7
changelog:
  - Type:CVE
  - CVE:CVE-2026-53702
  - SUG:NA
  - DESC:Stack buffer overflow in GStreamer H.265 parser. Fix incorrect loop bound.


author: Funda Wang <fundawang@yeah.net> - 1.16.2-6
changelog:
  - fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
    CVE-2024-47607, CVE-2024-47615, CVE-2024-47835


author: yaoxin <yao_xin001@hoperun.com> - 1.16.2-7
changelog:
  - Fix cves:
    CVE-2024-47606,CVE-2024-47613,CVE-2024-47775,CVE-2024-47776
    CVE-2024-47777,CVE-2024-47778,CVE-2024-47774,CVE-2024-47540
    CVE-2024-47602,CVE-2024-47601,CVE-2024-47834,CVE-2024-47537
    CVE-2024-47597,CVE-2024-47543,CVE-2024-47596,CVE-2024-47539
    CVE-2024-47546


author: Funda Wang <fundawang@yeah.net> - 1.16.2-12
changelog:
  - fix CVE-2026-1940, CVE-2026-3083, CVE-2026-3085
  - fix GStreamer-SA-2026-0002: Out-of-bounds read in MP4 demuxer


author: Jia Chao <jiac13@chinaunicom.cn> - 3.3.4-4
changelog:
  - fix: use $HOME rather than /home/abuild, suit for all buildtools.
  - fix: yarn have ELF bin, not noarch at all.


author: xinghe <xinghe2@h-partners.com> - 2.2.16-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:server: 'source' interface ignored from 'default-server' directive


author: yaoxin <yaoxin30@h-parters.com> - 1.12.1-1
changelog:
  - Update to 1.12.1 and fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501


author: yanglu <yanglu72@h-partners.com> - 2.4.43-28
changelog:
  - Type:CVE
  - CVE:CVE-2025-49812,CVE-2025-23048,CVE-2024-47252,CVE-2024-43204,CVE-2024-42516
  - SUG:NA
  - DESC:fix CVE-2025-49812 CVE-2025-23048 CVE-2024-47252 CVE-2024-43204 CVE-2024-42516
         mod_lua: Fix memory handling in output filters.
         Fix a regression that caused stickysession keys
         avoid ap_set_content_type when processing a _Request_Header
         set_cookie_name: ensure correct format


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 2.4.43-31
changelog:
  - Type:CVE
  - CVE:CVE-2025-58098,CVE-2025-65082,CVE-2025-66200
  - SUG:NA
  - DESC:fix CVE-2025-58098,CVE-2025-65082,CVE-2025-66200


author: tangce <tangce1@h-partners.com> - 2.4.43-34
changelog:
  - Type:CVE
  - CVE:CVE-2026-24072,CVE-2026-29168,CVE-2026-29169,CVE-2026-33006,CVE-2026-34059
  - SUG:NA
  - DESC:fix CVE-2026-24072,CVE-2026-29168,CVE-2026-29169,CVE-2026-33006,CVE-2026-34059


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 2.4.43-35
changelog:
  - Type:CVE
  - CVE:CVE-2026-33007,CVE-2026-33523,CVE-2026-33857,CVE-2026-34032
  - SUG:NA
  - DESC:fix CVE-2026-33007,CVE-2026-33523,CVE-2026-33857,CVE-2026-34032


author: tangce <tangce1@h-partners.com> - 2.4.43-36
changelog:
  - Type:CVE
  - CVE:CVE-2026-29167,CVE-2026-42535,CVE-2026-44631
  - SUG:NA
  - DESC:fix CVE-2026-29167,CVE-2026-42535,CVE-2026-44631


author: tangce <tangce1@h-partners.com> - 2.4.43-37
changelog:
  - Type:CVE
  - CVE:CVE-2026-44186,CVE-2026-44185,CVE-2026-42536,CVE-2026-34356,CVE-2026-34355,CVE-2026-29170
  - SUG:NA
  - DESC:fix CVE-2026-44186,CVE-2026-44185,CVE-2026-42536,CVE-2026-34356,CVE-2026-34355,CVE-2026-29170


author: yangjiaqi <yangjiaqi16@huawei.com> - 2.0.18-15
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: keep the service status unchanged after iSulad service upgrade


author: gaoxingwang<gaoxingwang@huawei.com> - 10.04-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: ifup-eth: add a new PERSISTENT_DHCLIENT_IPV6 option for IPv6 dhclient daemon


author: zhangxingrong <zhangxingrong@uniontech.com> - 3.16-4
changelog:
  - iperf3 now builds correctly on architectures without native support for 64-bit atomic types, by linking with the libatomic library


author: wangkai <13474090681@163.com> - 3.17.1-1
changelog:
  - Update to 3.17.1
  - iperf3 no longer changes its current working directory in --daemon mode. This results in more 
    predictable behavior with relative paths, in particular finding key and credential files for authentication.
  - A new --json-stream option has been added to enable a streaming output format, consisting of 
    a series of JSON objects (for the start of the test, each measurement interval, and the end of the test) separated by newlines
  - UDP tests now work correctly between different endian hosts
  - The --fq-rate parameter now works for --reverse tests
  - The statistics reporting interval is now available in the --json start test object


author: xihaochen <xihaochen@huawei.com> - 1.8.18-17
changelog:
  - Type:requirement
  - ID:NA
  - SUG:NA
  - DESC:move exchange-bmc-os-info,bmc-snmp-proxy to separate subpackages from ipmitool


author: mengkanglai <mengkanglai2@huawei.com> - 1.8.18-18
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:lan channel fix set alert on off and lanplus realloc the msg if the payload_length gets update


author: yanglu <yanglu72@h-partners.com> - 5.5.0-19
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:lib:names:check calloc return value in db_names_alloc
         fix fd leak when playing with netns


author: jingxiaolu <lujingxiao@huawei.com> - 0.9.5-21
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:restart
  - DESC:add repo to local image when output transporter is docker://


author: wutao <wutao61@huawei.com> - 2.0.14-9
changelog:
  - fix folllowing CVE in this revision
    CVE-2018-18873
    CVE-2018-19541 
    CVE-2018-9055
    CVE-2018-9154 
    CVE-2018-19539 
    CVE-2018-20570
    CVE-2018-9252 
    CVE-2018-19540 
    CVE-2018-20622
    CVE-2018-19139


author: yangyingqing <yangyingqing@h-partners.com> - 1:11.0.27.6-0
changelog:
  - update to 11.0.27+6(GA)
  - delete 8347965-tz-Update-Timezone-Data-to-2025a.patch
  - add fix-potential-build-fail-in-jbolt.patch


author: yangyingqing <yangyingqing@h-partners.com> -1:11.0.28.6-0
changelog:
  - update to 11.0.28+6(GA)
  - delete 8352716-tz-Update-Timezone-Data-to-2025b.patch
  - modify delete_expired_certificates.patch
  - modify G1-interate-region-by-bitmap-rather-than-obj-size-in.patch


author: kuenking111 <wangkun49@huawei.com> - 1:17.0.13.11-4
changelog:
  - add Add-jbolt-feature.patch
  - add Enable-TLS-to-communciation-between-JBooster-Server-.patch
  - add SA-redact-support-password.patch
  - add Add-specialized-hashmap-version-of-the-long-type.patch
  - add Implement-JBooster-RPC-byte-alignment.patch
  - add Optimize-LazyAOT-klasses-sending-strategy.patch
  - add Add-KAE-zip-GzipKAEBenchmark-Benchmark.patch
  - add Add-Fix-clear-mark-for-NativeGotJump.patch
  - add 8323066-TestSkipRebuildRemsetPhase.java-fails-with-S.patch
  - modify downgrade-the-glibc-symver-of-memcpy.patch


author: kuenking111 <wangkun49@huawei.com> - 1:17.0.13.11-7
changelog:
  - modify Add-jbolt-feature.patch
  - modify Add-specialized-hashmap-version-of-the-long-type.patch
  - modify Enable-TLS-to-communciation-between-JBooster-Server-.patch


author: Benshuai5D <benshuai5d@huawei> - 1:17.0.14.7-0
changelog:
  - update to 17.0.14
  - modify 8264805-Backport-Ahead-of-Time-Compiler.patch
  - modify 8280872-Reorder-code-cache-segments-to-improv.patch
  - modify 8323066-TestSkipRebuildRemsetPhase.java-fails-with-S.patch
  - modify Backport-Important-Fixed-Issues.patch
  - modify add-version-txt.patch
  - modify jdk17-Add-KAE-provider.patch


author: yaoxin <1024769339@qq.com> - 1.8.0-4
changelog:
  - Fix CVE-2026-40612,CVE-2026-41256,CVE-2026-41257,CVE-2026-43894,
    CVE-2026-43895,CVE-2026-43896 and CVE-2026-44777


author: sunhai <sunhai10@huawei.com> - 0.15-7
changelog:
  - Handle yet another out of memory condition
  - Fix issue 854 Set error json_tokener_error_memory in
  - Issue 857 fix a few places where json_tokener should
  - Handle NULL gracefully in json_tokener_free
  - Issue 881 don t allow json_tokener_new_ex with a dep


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 2.0.20-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix issue about iomem file that contains too many contens.As a result,the kdump service failed


author: snoweay <snoweay@163.com> - 2.0.20-15
changelog:
  - Add support for quick kexec
    kexec: Add quick kexec support
    arm64: Quick kexec implementation for arm64


author: caixiaomeng<caixiaomeng2@huawei.com> -1:0.9.1-23
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ignore sssnic module when building hotpatch to fix sssnic wrongly dependency of sssnic


author: wangyuhang <wangyuhang27@huawei.com> - 1:2020.0.0-8
changelog:
  - solve the problem of dereference null return value when moving a job to the head of the linked list


author: zhangxiaoyu<zhangxiaoyu58@huawei.com> - 2.0.9-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix update cpu-rt period failed and fix layer size type as int64


author: jikai<jikai11@huawei.com> - 2.0.9-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix potential log error, empty pointer reference and overflow


author: yanzhihua <yanzhihua4@huawei.com> - 12.10.0-25
changelog:
  - Type:enhancement
  - Id:NA
  - SUG:NA
  - DESC:ldconfig_scriptlets does not exist so modify the use of ldconfig, and rename the patch


author: lingsheng <lingsheng1@h-partners.com> - 3.4.3-10
changelog:
  - Type:CVE
  - ID:CVE-2025-5914,CVE-2025-5916,CVE-2025-5917,CVE-2025-5918
  - SUG:NA
  - DESC:fix CVE-2025-5914 CVE-2025-5916 CVE-2025-5917 CVE-2025-5918


author: Lv Ying<lvying6@huawei.com> - 0.1.1-2
changelog:
  - support detecting and attaching of writable tracepoint program
    https://lore.kernel.org/bpf/20211004094857.30868-3-hotforest@gmail.com


author: zhangmingyi <zhangmingyi5@huawei.com> - 2:0.3-2
changelog:
  - backporting: 	backport-libbpf-Ensure-functions-with-always_inline-attribute-are-inline.patch
  		backport-libbpf-Fix-the-name-of-a-reused-map.patch
  		backport-libbpf-preserve-errno-across-pr_warn-pr_info-pr_debug.patch


author: zhangmingyi <zhangmingyi5@huawei.com> - 2:0.3-5
changelog:
  - backporting patches from upstream:
        backport-libbpf-Fix-crash-if-SEC-freplace-programs-don-t-have.patch
        backport-libbpf-Fix-the-case-of-running-as-non-root-with-capa.patch
        backport-libbpf-Fix-overrun-in-netlink-attribute-iteration.patch
        backport-libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
        backport-libbpf-Deal-with-section-with-no-data-gracefully.patch
        backport-libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch
        backport-sync-start-syncing-include-uapi-linux-fcntl.h-UAPI-h.patch
        backport-libbpf-Handle-size-overflow-for-ringbuf-mmap.patch
        backport-libbpf-Use-page-size-as-max_entries-when-probing-rin.patch


author: gaoyi <gaoyi15@huawei.com> - 0.1.8-15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:CVE for libcomps
         https://github.com/rpm-software-management/libcomps/commit/e3a5d056633677959ad924a51758876d415e7046


author: liujing <liujing144@huawei.com> - 1.0.0-30
changelog:
  - update patches from https://code.foxkit.us/adelie/aports-old/blob/50de7d785d5500a14ed00fa12e483e8ceaf4f06a/main/libdv


author: Wenlong Ding <wenlong.ding@turbolinux.com.cn> - 2.6.4-22
changelog:
  - Remove /usr/lib64/libglade-2.0.so.* from libglade2-devel package which already exists in libglade2 package.


author: wangkai <13474090681@163.com> - 2.5.18-5
changelog:
  - Fix CVE-2026-40334, CVE-2026-40334, CVE-2026-40338, CVE-2026-40339,
    CVE-2026-40340, CVE-2026-40341


author: wangxiao <wangxiao184@qq.com> - 1.15.6-5
changelog:
  - add fix patch for CVE-2026-50292
  - CVE-2026-50265 is an invalid CVE, so delete the related information.


author: zengwefeng <zwfeng@huawei.com> - 3.5.0-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add missing check for NULL return from allocate_rfd
         add include netlink private nl-auto-h header
         use proper int type for id attributes
         add RTNL_LINK_REASM_OVERLAPS stat
         check for null pointer in macvlan
         fix leaking in link msg parser
         fix NLE_NOMEM handling in parse multipath


author: xinghe <xinghe2@h-partners.com> - 2:1.6.37-2
changelog:
  - Type:cves
  - CVE:CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720
  - SUG:NA
  - DESC:fix CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720


author: Guoshuai Sun <sunguoshuai@huawei.com> - 1.2.57-12
changelog:
  - ID:CVE-2013-7353 CVE-2013-7354 CVE-2017-12652
  - SUG:restart
  - DESC:fix CVE-2013-7353 CVE-2013-7354 CVE-2017-12652
    And we have check CVE-2014-9495 CVE-2011-3045 CVE-2008-3964 CVE-2015-8126 CVE-2015-0973 alreadyi been fixed before.
    And CVE-2016-3751 CVE-2013-6954 didn'd involved.


author: yixiangzhike <yixiangzhike007@163.com> - 1.4.2-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:change the files order in patch file fix-doc-about-difok.patch


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 1.0.3-7
changelog:
  - Fix CVE-2019-12779 libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack.
    CVE Link: https://nvd.nist.gov/vuln/detail/CVE-2019-12779
    Community Patch Link:
    https://github.com/ClusterLabs/libqb/commit/e322e98dc264bc5911d6fe1d371e55ac9f95a71e
    https://github.com/ClusterLabs/libqb/commit/7cd7b06d52ac80c343f362c7e39ef75495439dfc
    https://github.com/ClusterLabs/libqb/commit/6a4067c1d1764d93d255eccecfd8bf9f43cb0b4d


author: baizhonggui <baizhonggui@huawei.com> - 1.0.5-2
changelog:
  - new add #include <stddef.h> in qblist.h to fix:
    issue# https://gitee.com/src-openeuler/corosync/issues/I39X3F?from=project-issue
    upstream link:https://github.com/ClusterLabs/libqb/pull/384


author: luhuaxin <luhuaxin@huawei.com> - 0.9.4-15
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC: move AUTHORS and COPYING files to license folder, fix requires


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 3.1-3
changelog:
  - fix heap-use-after-free in cil_yy_switch_to_buffer
  - fix heap-use-after-free in __class_reset_perm_values()
  - fix heap-buffer-overflow in cil_print_recursive_blockinherit


author: zhangpan <zhangpan103@h-partners.com> - 2.71.0-9
changelog:
  - Type:cves
  - ID:CVE-2025-4476 CVE-2025-4948 CVE-2025-4969
  - SUG:NA
  - DESC:fix CVE-2025-4476 CVE-2025-4948 CVE-2025-4969


author: nickyang <nickyang228@163.com> - 2.71.0-11
changelog:
  - Type:cves
  - ID:CVE-2026-1539 CVE-2026-1467 CVE-2026-1761 CVE-2026-0716
  - SUG:NA
  - DESC:fix CVE-2026-1539 CVE-2026-1467 CVE-2026-1761 CVE-2026-0716


author: nickyang <nickyang228@163.com> - 2.71.0-12
changelog:
  - Type:cves
  - ID:CVE-2026-1760 CVE-2026-1801 CVE-2026-2369
  - SUG:NA
  - DESC:fix CVE-2026-1760 CVE-2026-1801 CVE-2026-2369


author: gaihuiying <eaglegai@163.com> - 0.9.4-11
changelog:
  - Type:CVE
  - CVE:CVE-2025-4877 CVE-2025-4878 CVE-2025-5372
  - SUG:NA
  - DESC:fix CVE-2025-4877 CVE-2025-4878 CVE-2025-5372


author: zhangbinqin <zhangbinqin@h-partners.com> - 0.9.4-15
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:fix CVE-2026-0968 CVE-2026-0967 CVE-2026-0966 CVE-2026-0965 CVE-2026-0964 CVE-2025-14821


author: zhangbinqin <zhangbinqin@h-partners.com> - 1.9.0-10
changelog:
  - Type:CVE
  - CVE:CVE-2026-7598
  - SUG:NA
  - DESC:add username_len bounds checking to fix CVE-2026-7598


author: gaoyi<gaoyi15@huawei.com> - 2.1.14-2.h1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: backport patches from https://github.com/samba-team/samba
  - Package init


author: chenziyang <chenziyang4@huawei.com> - 2:1.3.1-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch to fix failed run-ptrace-mapper testcase


author: yaoxin <yao_xin001@hoperun.com> - 2.20.0-1
changelog:
  - Upgrade to 2.20.0 for fix CVE-2023-39929
  - Fix minor issue about printf data type and value range
  - av1: Revise offsets comments for av1 encode
  - jpeg: add support for crop and partial decode
  - Drop no longer applicable vaGetDriverNames check


author: jiangjiacheng <jiangjiacheng@huawei.com>
changelog:
  - util: keep track of full GSource object not source ID number
  - rpc: mark source returned by virEventGLibAddSocketWatch as unused
  - rpc: ensure temporary GSource is removed from client event loop (CVE-2024-4418)


author: ZixinLi <lizixin10@h-partners.com> - 6.2.0-26
changelog:
  - Fix CVE-2025-12748 CVE-2025-13193
  - conf: split out virDomainDefParseIDs (CVE-2025-12748)
  - conf: Add virDomainDefIDsParseString (CVE-2025-12748)
  - bhyve: Check ACLs before parsing the whole domain XML (CVE-2025-12748)
  - libxl: Check ACLs before parsing the whole domain XML (CVE-2025-12748)
  - lxc: Check ACLs before parsing the whole domain XML (CVE-2025-12748)
  - vz: Check ACLs before parsing the whole domain XML (CVE-2025-12748)
  - qemu: Check ACLs before parsing the whole domain XML (CVE-2025-12748)
  - qemu: snapshot: Set umask for 'qemu-img' when creating external inactive snapshots (CVE-2025-13193)


author: chengguipeng<chengguipeng1@huawei.com> - 0.8.4-4
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC:solve the issue which dispaly could not resolve keysym XF86FullScreen


author: Funda Wang <fundawang@yeah.net> - 2.9.10-47
changelog:
  - Type:CVE
  - CVE:CVE-2025-49794
  - CVE:CVE-2025-49796
  - SUG:NA
  - DESC: fix CVE-2025-49794, CVE-2025-49796


author: fuanan <fuanan3@h-partners.com> - 1.1.34-9
changelog:
  - fix xsltCleanupSourceDoc function:
    Clean up attributes in source doc
    Avoid null deref on documents without root


author: liyunfei <liyunfei33@huawei.com> - 17.0.6-11
changelog:
  - update to llvm-for-oe-17.0.6-2509.0.2
  - release-note https://gitee.com/openeuler/llvm-project/releases/tag/llvm-for-oE-17.0.6-2509.0.2
  - add fix for Propeller MachineBasicBlock hash set


author: bzhaoop<bzhaojyathousandy@gmail.com> - 3:10.3.35-1
changelog:
  - Bump version to 10.3.35 for resolving CVEs as below
  - CVE-2022-27379
  - CVE-2022-27386
  - CVE-2022-27447
  - CVE-2022-27448
  - CVE-2022-27449
  - CVE-2022-27445
  - CVE-2022-27456
  - CVE-2022-27458
  - CVE-2022-27452
  - CVE-2022-27376
  - CVE-2022-27378
  - CVE-2022-27377
  - CVE-2022-27381
  - CVE-2022-27383
  - CVE-2022-27380
  - CVE-2022-27384
  - CVE-2022-27387


author: yaoxin <yao_xin001@hoperun.com> - 1.27.4-1
changelog:
  - Update to 1.27.4 for fix CVE-2024-6381 and CVE-2024-6383
  - libbson Fixes:
    * Fix build with Visual Studio 2013.
    * Fix parsing of colon in timezone.
    * Error on failure to init subdocument in bson_iter_visit_all.
    * Fix string handling in bson_string_new and bson_string_append.
    * Fix iteration in bson_strfreev.
    * Use aligned alloc for bson_array_builder_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Fix conversion warning with GCC 12.
    * Fixes to some format strings in trace logs.
    * Allow mongoc_buffer_t to be larger than INT_MAX.
    * Add bson_array_builder_t.
  - libmongoc Fixes:
    * Fix possible crash reading malformed wire protocol message.
    * Upgraded bundled Zlib from 1.2.3 to 1.3.1
    * Close leftover connections to removed servers.
    * Fix possible crash when client is configured with empty password.
    * Fix possible hang if mongoc_gridfs_file_readv is called with a corrupt chunk with incomplete data.
    * Fix 32-bit compile with 64-bit time_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Disable shared libmongoc targets if ENABLE_SHARED=OFF
    * Fix documentation build with Python 3.9.
    * Fix data race in mongoc_cursor_get_host.
    * Add back support for BUILD_VERSION CMake option. BUILD_VERSION was unintentionally removed in 1.25.0.
    * Send recoveryToken in transactions when connected to a load balancer.


author: yanglu <yanglu72@h-partners.com> - 2:0.93-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Change UDP and ICMP sockets binding to accept a source IP from the -a CLI option


author: zhangxingrong <zhangxingrong@uniontech.com> - 5:2.2.12-3
changelog:
  - Fix smtp client to respect $use_envelope_from option.
  - Fix smtp client $envelope_from_address possible dangling pointer.


author: Funda Wang <fundawang@yeah.net> - 5:2.2.12-4
changelog:
  - fix CVE-2026-43859, CVE-2026-43860, CVE-2026-43861, CVE-2026-43862,
    CVE-2026-43863, CVE-2026-43864


author: yaoxin <1024769339@qq.com> - 8.0.41-1
changelog:
  - Update to 8.0.41 for fix CVEs(CVE-2025-21490,CVE-2025-21491,CVE-2025-21495,
    CVE-2025-21497,CVE-2025-21500,CVE-2025-21501,CVE-2025-21503,CVE-2025-21505,
    CVE-2025-21518,CVE-2025-21519,CVE-2025-21520,CVE-2025-21522,CVE-2025-21523,
    CVE-2025-21529,CVE-2025-21531,CVE-2025-21540,CVE-2025-21543,CVE-2025-21546,
    CVE-2025-21555,CVE-2025-21559)


author: yaoxin <1024769339@qq.com> - 8.0.42-1
changelog:
  - Update to 8.0.42 for fix CVEs(CVE-2025-21574,CVE-2025-21575,CVE-2025-21577,
    CVE-2025-21580,CVE-2025-21581,CVE-2025-21584,CVE-2025-21585,CVE-2025-30681,
    CVE-2025-30682,CVE-2025-30683,CVE-2025-30684,CVE-2025-30685,CVE-2025-30687,
    CVE-2025-30688,CVE-2025-30689,CVE-2025-30693,CVE-2025-30695,CVE-2025-30696,
    CVE-2025-30699,CVE-2025-30703,CVE-2025-30704,CVE-2025-30705,CVE-2025-30710,
    CVE-2025-30715,CVE-2025-30721,CVE-2025-30722


author: yaoxin <1024769339@qq.com> - 8.0.43-1
changelog:
  - Update to 8.4.6 for fix CVEs (CVE-2025-50068,CVE-2025-50077,CVE-2025-50078,
    CVE-2025-50079,CVE-2025-50080,CVE-2025-50081,CVE-2025-50082,CVE-2025-50083,
    CVE-2025-50084,CVE-2025-50085,CVE-2025-50086,CVE-2025-50087,CVE-2025-50091,
    CVE-2025-50092,CVE-2025-50093,CVE-2025-50094,CVE-2025-50096,CVE-2025-50097,
    CVE-2025-50098,CVE-2025-50099,CVE-2025-50100,CVE-2025-50101,CVE-2025-50102,
    CVE-2025-50104,CVE-2025-53023)


author: wangkai <13474090681@163.com> - 8.0.44-1
changelog:
  - Update to 8.0.44 for fix CVEs (CVE-2025-53069,CVE-2025-53062,CVE-2025-53054,
    CVE-2025-53053,CVE-2025-53045,CVE-2025-53044,CVE-2025-53042,CVE-2025-53040)


author: yaoxin <1024769339@qq.com> - 8.0.45-1
changelog:
  - Update to 8.0.45 for fix CVEs (CVE-2026-21936,CVE-2026-21937,
    CVE-2026-21941,CVE-2026-21948,CVE-2026-21964,CVE-2026-21968)


author: wangkai <13474090681@163.com> - 8.0.46-1
changelog:
  - Update to 8.0.46 for fix CVEs (CVE-2026-21998, CVE-2026-22001, CVE-2026-22002,
    CVE-2026-22004, CVE-2026-22005, CVE-2026-22009, CVE-2026-22015, CVE-2026-22017,
    CVE-2026-34267, CVE-2026-34270, CVE-2026-34271, CVE-2026-34276, CVE-2026-34278,
    CVE-2026-34293, CVE-2026-34303, CVE-2026-34304, CVE-2026-34308, CVE-2026-35236,
    CVE-2026-35237, CVE-2026-35238, CVE-2026-35239, CVE-2026-35240)


author: bzhaoop <bzhaojyathousandy@gmail.com> - 5.7.37-1
changelog:
  - Fix CVE issues for bump to the 5.7.37 version
  - CVE-2022-21245
  - CVE-2022-21270
  - CVE-2022-21303
  - CVE-2022-21304
  - CVE-2022-21344
  - CVE-2022-21367
  - CVE-2021-35624
  - CVE-2021-2356
  - CVE-2021-2011
  - CVE-2021-2010
  - CVE-2021-2007


author: yaoxin <yao_xin001@hoperun.com> - 8.0-1
changelog:
  - Update to 8.0
    * CVE-2024-5742: Avoid privilege escalations via symlink attacks
      on emergency save file (boo#1226099)
    * By default ^F is bound to starting a forward search, and ^B to
      starting a backward search, while M-F and M-B repeat the search
      in the corresponding direction. (See the documentation if you
      want the old bindings back.)
    * Command-line option --modernbindings (-/) makes ^Q quit, ^X cut,
      ^C copy, ^V paste, ^Z undo, ^Y redo, ^O open a file, ^W write a file,
      ^R replace, ^G find again, ^D find again backwards, ^A set the mark,
      ^T jump to a line, ^P show the position, and ^E execute.
    * For easier access, M-" is bound to placing/removing an anchor,
      and M-' to jumping to the next anchor.


author: yaoxin <yao_xin001@hoperun.com> - 2.15.05-1
changelog:
  - Update to 2.15.05
    * fix %ifid with $ and $$
    * Add --reproducible option to suppress NASM version numbers and timestamps in output files


author: xingwei <xingwei14@h-partners.com> - 1:5.9-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Sync upstream patches to fix Buffer overflow
         Disable T200snmpv2cwalkall_simple test to fix make check fail


author: huangyu <huangyu106@huawei.com> - 1:0.9.6-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:parser_json fix device parsing in netdev family
  src don't parse string as verdict in map


author: wangkai <13474090681@163.com> - 1:12.22.11-4
changelog:
  - Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
  - CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
  - CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
  - CVE-2023-32559,CVE-2022-35256


author: yixiangzhike <yixiangzhike007@163.com> - 0.9.11-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:Move temporary files from /var/run to /run to delete warning in installing


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 1:1.16.5-8
changelog:
  - remove f2py form python3-numpy package. It is in python3-numpy-f2py
         Do not pack open-source test case files


author: wangshuai <wangshuai321@huawei.com> - 1.1.6-0
changelog:
  - Add new test suite srpm and intel
  - Add virtual branch of test suite
  - Add support for Kylin and UOS
  - Bugfix


author: wangshuai <wangshuai321@huawei.com> - 1.1.6-3
changelog:
  - Update the pci.ids file
  - Remove unused variable in cdrom test suite
  - Update test_guide doc
  - Unify the location for downloading kernel source RPMs
  - Optimize kabiwhitelist and system test


author: xiaochn <xiaochuannan@inspur.com> - 1.1.7-1
changelog:
  - Add KylinSec 3.5.3 support
  - Fix the problem of disk size calculation
  - Fix bcm57414 nic test failed issue
  - Change the format of date
  - Fixed a bug where a non-existent logger level was used
  - Update README.md
  - Fix vgpu testing issue


author: Wenchao Hao <haowenchao@huawei.com> - 0.100-7
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-Fix-the-issue-of-ignoring-the-return-value.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-Fix-compiler-issue-when-not-in-security-mode.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0003-Fix-586-compile-issue-and-remove-Werror.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0004-Do-not-install-isnsd.socket-in-isnsd.service.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0005-libisns-remove-sighold-and-sigrelse.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0006-isnsadm-Fix-unparse-command-line-options-V-and-r.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0007-isnsd-socket-Make-sure-to-create-IPv6-socket-default.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: openEuler Buildteam <buildteam@openeuler.org> - 1.5.1-24
changelog:
  - Type:cves
  - ID:CVE-2016-10506 CVE-2016-7445
  - SUG:restart
  - DESC:fix CVE-2018-15173 and CVE-2016-7445


author: Funda Wang <fundawang@yeah.net> - 0.20.0-15
changelog:
  - fix CVE-2024-8443, CVE-2024-45615, CVE-2024-45616,
    CVE-2024-45617, CVE-2024-45618, CVE-2024-45619, CVE-2024-45620


author: xingwei <xingwei14@h-partners.com> - 2.0.0-26
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Introduce epoch command to slove package upgrade failure problem


author: zhangbinqin<zhangbinqin@h-partners.com> - 8.2p1-32
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix the missing member of the struct Authmethod method_gsskeyex


author: zhangbinqin<zhangbinqin@h-partners.com> - 8.2p1-35
changelog:
  - Type:CVE
  - CVE:CVE-2026-35414 CVE-2026-35385 CVE-2026-35386 CVE-2026-35387 CVE-2026-35388
  - SUG:NA
  - DESC:fix CVE-2026-35414 CVE-2026-35385 CVE-2026-35386 CVE-2026-35387 CVE-2026-35388


author: fly_fzc <2385803914@qq.com> - 1:1.1.1f-41
changelog:
  - fix CVE-2025-68160 CVE-2026-22796 CVE-2026-22795 CVE-2025-69418 CVE-2025-69421 CVE-2025-69419 CVE-2025-69420


author: wulei <wulei80@huawei.com> - 2020.4-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Do not run testcase test-libarchive-import, because selinux is off.


author: chenyanpanHW <chenyanpan@huawei.com> - 1.9.0-3
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0000-pcsc-lite-change-to-use-python3-for-pcsc-spy.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-Do-not-possibly-lock-a-reader-if-allocating-hCard-fa.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-Fix-a-hang-in-SCardTransmit.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0003-ATRDecodeAtr-always-initialize-the-return-values.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0004-EHUnregisterClientForEvent-correctly-handle-EHTryToU.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: shenyangyang<shenyangyang4@huawei.com> - 1:2.081-7
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:restart
  - DESC:add build requires of perl-devel and add Epoch for updating


author: wangxiao<wangxiao65@huawei.com> - 1.58-3.h1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:Handle unknown op in DBD SQLite VirtualTable PerlData
         added a boilerplace for test
         fixed for older DBI
  - Package init


author: shenyangyang <shenyangyang4@huawei.com> - 0.35-420
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:delete unneeded build requires of perl(Test::Portability::Files) 
         and perl(Test::Pod::Coverage)


author: Funda Wang <fundawang@yeah.net> - 8.0.30-7
changelog:
  - Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
    GHSA-4w77-75f9-2c8w
  - Fix OOB access in ldap_escape
    CVE-2024-8932
  - Fix Integer overflow in the dblib/firebird quoter causing OOB writes
    CVE-2024-11236
  - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
    CVE-2024-11234
  - Fix Single byte overread with convert.quoted-printable-decode filter
    CVE-2024-11233


author: Funda Wang <fundawang@yeah.net> - 8.0.30-11
changelog:
  - Fix Null byte termination in dns_get_record()
    GHSA-www2-q4fc-65wf
  - Fix Heap buffer overflow in array_merge()
    CVE-2025-14178
  - Fix Information Leak of Memory in getimagesize
    CVE-2025-14177


author: Funda Wang <fundawang@yeah.net> - 8.0.30-12
changelog:
  - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init()
    CVE-2026-7259
  - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map
    CVE-2026-6722
  - Fix Broken Apache map value NULL check
    CVE-2026-7262
  - Fix Signed integer overflow of char array offset
    CVE-2026-7568


author: Funda Wang <fundawang@yeah.net> - 8.0.30-13
changelog:
  - Fix XSS within status endpoint
    CVE-2026-6735
  - Fix SQL injection via NUL bytes in quoted strings
    CVE-2025-14179
  - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION
    CVE-2026-7261
  - Fix Consistently pass unsigned char to ctype.h functions
    CVE-2026-7258


author: duyiwei <duyiwei@kylinos.cn> - 1:0.10.1-10
changelog:
  - Type:bugfix
  - CVE:CVE-2024-9355、CVE-2019-9514、CVE-2024-24791、CVE-2022-32189、CVE-2022-41715、CVE-2022-2880、CVE-2022-1962、CVE-2023-45290、CVE-2024-24783、CVE-2024-24785
  - SUG:NA
  - DESC:  fix CVE in batches through rebuild


author: gaihuiying <eaglegai@163.com> - 2.4.8-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream
         Fixing up parsing in radiusclient.conf


author: zhengxiaoxiao <zhengxiaoxiao2@huawei.com> - 3.14.0-9
changelog:
  - Type:CVE
  - ID:CVE-2026-0994
  - SUG:NA
  - DESC:Fix Any recursion depth bypass in Python json_format.ParseDict


author: shenyangyang<shenyangyang4@huawei.com> - 1.11.5-8
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:optimize the method to provide default version of python-name


author: wangshuo <wangshuo@kylinos.cn> - 3.7.9-43
changelog:
  - Type:CVE
  - CVE:CVE-2024-9287
  - SUG:NA
  - DESC:fix CVE-2024-9287
  -      gh-124651: Quote template strings in `venv` activation scripts


author: Jiabo Feng <fengjiabo1@huawei.com>
changelog:
  - hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs(CVE-2024-3446)
  - hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs(CVE-2024-3446)
  - hw/display/virtio-gpu: Protect from DMA re-entrancy bugs(CVE-2024-3446)
  - hw/virtio: Introduce virtio_bh_new_guarded() helper
  - hw: replace most qemu_bh_new calls with qemu_bh_new_guarded
  - checkpatch: add qemu_bh_new/aio_bh_new checks
  - async: avoid use-after-free on re-entrancy guard
  - async: Add an optional reentrancy guard to the BH API
  - util/async: add a human-readable name to BHs for debugging
  - hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set
  - Include sysemu/sysemu.h a lot less


author: Jiabo Feng <fengjiabo1@huawei.com>
changelog:
  - tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fix CVE-2023-5088)
  - hw/ide: reset: cancel async DMA operation before resetting state (Fix CVE-2023-5088)


author: Jiabo Feng <fengjiabo1@huawei.com>
changelog:
  - block: Parse filenames only when explicitly requested (CVE-2024-4467)
  - block: introduce bdrv_open_file_child() helper
  - qcow2: Don't open data_file with BDRV_O_NO_IO (CVE-2024-4467)
  - qcow2: Do not reopen data_file in invalidate_cache


author: Jiabo Feng <fengjiabo1@huawei.com> - 10:4.1.0-86
changelog:
  - nbd/server: CVE-2024-7409: Close stray clients at server-stop
  - main-loop.h: introduce qemu_in_main_thread()
  - aio-wait.h: introduce AIO_WAIT_WHILE_UNLOCKED
  - nbd/server: CVE-2024-7409: Drop non-negotiating clients
  - nbd/server: CVE-2024-7409: Cap default max-connections to 100
  - nbd: Add max-connections to nbd-server-start
  - nbd/server: Plumb in new args to nbd_client_add()
  - nbd: Minor style and typo fixes


author: Jiabo Feng <fengjiabo1@huawei.com> - 10:4.1.0-88
changelog:
  - mac_dbdma: Remove leftover `dma_memory_unmap` calls(CVE-2024-8612)
  - softmmu: Support concurrent bounce buffers(CVE-2024-8612)
  - qdev-properties: add size32 property type
  - system/physmem: Per-AddressSpace bounce buffering
  - system/physmem: Propagate AddressSpace to MapClient helpers


author: Pengrui Zhang <zhangpengrui@huawei.com> - 10:4.1.0-92
changelog:
  - io: release active GSource in TLS channel finalizer
  - io: move websock resource release to close method
  - io: fix use after free in websocket handshake code(CVE-2025-11234)
  - sphinx: change default language to 'en'
  - curl: Check curl_multi_add_handle()'s return code
  - block/curl.c: Check error return from curl_easy_setopt()
  - block: Handle curl 7.55.0, 7.85.0 version changes
  - block/vpc: Make vpc_open() read the full dynamic header
  - net/eth: Use correct in6_address offset in _eth_get_rss_ex_dst_addr()
  - net/eth: Simplify _eth_get_rss_ex_dst_addr()
  - net/eth: Better describe _eth_get_rss_ex_dst_addr's offset argument
  - net/eth: Check size earlier in _eth_get_rss_ex_dst_addr()
  - net/eth: Check iovec has enough data earlier
  - net/eth: Read ip6_ext_hdr_routing buffer before accessing it
  - net/eth: Add an assert() and invert if() statement to simplify code
  - pc-bios/optionrom: compile with -Wno-array-bounds
  - amd_iommu: fix uninitialized error
  - tests/unit/test-block-iothread: fix maybe-uninitialized error on GCC 11
  - scripts: improve message when TAP based tests fail
  - make check-unit: use after free in test-opts-visitor
  - crypto: use a stronger private key for tests


author: xingwei <xingwei14@h-partners.com> - 2.18-5
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Add the socket option IPV6_MULTICAST_LOOP to prevent the interface from autocon
  figuring using RA messages sent by itself.


author: Shiju Jose<shiju.jose@huawei.com> - 0.6.7-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:
    1. Fix return value type issue of read/write function from unistd.h.
    2. Fix issue of signed and unsigned integer comparison.
    3. Remove redundant header file and do some cleaup.
    4. Add support for create/open the vendor error tables at rasdaemon startup.
    5. Make changes in the HiSilicon error handling code for the same.
    6. Add four modules supported by HiSilicon common section.


author: yanglongkang <yanglongkang@h-partners.com> - 0.6.7-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport libtraceevent patch to adapt to kernel ftrace ring buffer change


author: zhangnan <zhangnan134@huawei.com> - 0.6.7-13
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ras-events:quit loop in read_ras_event when kbuf data is broken


author: caixiaomeng <caixiaomeng2@huawei.com> - 0.6.7-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add-dynamic-switch-of-ras-events-support-and-disable-block-rq-complete


author: wangjiang <app@cameyan.com> - 0.6.7-16
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix ras-mc-ctl --summary failed
         Add some improvements and add new modules to HiSilicon common section


author: liyangyang <liyangyang20@huawei.com> - 35.0-1
changelog:
  - DESC: Currently 28.1 is not commercially available and need to be modified to 35.0 with more complete features


author: tangchengchang <tangchengchang@huawei.com> - 35.0-4
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: Rename the previous patch to facilitate subsequent management


author: shixuantong<shixuantong@huawei.com> - 3.7.6-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add python3-Cython and python3-devel to BuildRequires for check fail


author: wangkai <13474090681@163.com> - 7.2.7-1
changelog:
  - Update to 7.2.7
  - Fix CVE-2021-32626 CVE-2021-32627 CVE-2021-32762 CVE-2021-32675
    CVE-2021-41099 CVE-2021-32628 CVE-2021-32687 CVE-2022-24735
    CVE-2022-24736 CVE-2022-3647 CVE-2022-3734 CVE-2022-35977
    CVE-2023-25155 CVE-2024-46981


author: yaoxin <yaoxin30@huawei.com> - 5.0.14-1
changelog:
  - Upgrade redis5 to 5.0.14 for fix cves: CVE-2021-41099
    CVE-2021-32762 CVE-2021-32675 CVE-2021-32687 CVE-2021-32626
    CVE-2021-32627 CVE-2021-32628


author: gaihuiying <gaihuiying1@huawei.com> - 1.2.5-5
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:sync sp1 commits and rebuild 1.2.5-5:
         fix uninstall package warning info
         remove config rmtcall and disable rpcbind.service default


author: xujing<xujing125@huawei.com> - 4.15.1-55
changelog:
  - sync patches from upstream
    add backport-Fix-a-theoretical-use-of-uninitialized-struct-member.patch
        backport-Fix-spec-parser-leaks-from-trans-f-file.patch
        backport-Tip-toe-around-rpmfiFN-thin-ice-in-fsm.patch
        backport-Use-unsigned-integers-for-buildtime-too-for-Y2K38-sa.patch


author: xinghe <xingheyd@163.com> - 4.11.12-38
changelog:
  - Type:cves
  - CVE:CVE-2026-3238 CVE-2026-4480 CVE-2026-4408
  - SUG:NA
  - DESC:fix CVE-2026-3238 CVE-2026-4480 CVE-2026-4408


author: yanglu <yanglu72@h-partners.com> - 8.16.1-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Add require procmail, Fix send mail error which no procmail command


author: yanglu<yanglu72@h-partners.com> - 8.16.1-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix newaliases command error and postfix service start execption after sendmail install


author: lijian<lijian2@kylinos.cn> - 1:1.1.0-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:rebuild for golang cvefix: CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538


author: Jianmin <jianmin@iscas.ac.cn> - 1:1.1.0-13
changelog:
  - Type:bugfix
  - CVE:CVE-2023-39325 CVE-2023-44487 CVE-2025-27144
  - SUG:NA
  - DESC: fix CVE-2023-39325 CVE-2023-44487 CVE-2025-27144


author: wangkai <13474090681@163.com> - 14.4.2.0-29
changelog:
  - Fix CVE-2021-33844,CVE-2023-32627,CVE-2021-23159,CVE-2023-34432
  - CVE-2023-34318,CVE-2021-23172,CVE-2021-3643,CVE-2021-23210
  - CVE-2022-31650,CVE-2023-26590,CVE-2022-31651,CVE-2023-32627
  - CVE-2017-18189


author: chenyanpanHW <chenyanpan@huawei.com> - 4.4-4
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-Fix-typos-update-URLs-in-squashfs-tools-Makefile.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-Support-creating-sockets-in-unsquashfs.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0003-squashfs-tools-fix-build-failure-against-gcc-10.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0004-xattr-Initialize-header-to-avoid-valgrind-warning.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0005-CVE-2021-40153.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0006-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0007-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0008-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0009-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0010-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: xinghe <xinghe2@h-partners.com> - 7:4.9-25
changelog:
  - Type:cves
  - ID:CVE-2023-49288 CVE-2025-54574 CVE-2023-5824 CVE-2025-62168
  - SUG:NA
  - DESC:fix CVE-2023-49288 CVE-2025-54574 CVE-2023-5824 CVE-2025-62168


author: XuFei <xufei30@huawei.com> - 0.3.0-3
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC:modify docs,modify testcases and clear clippy warnings for updating rust 1.51.0


author: huanghaitao <huanghaitao8@huawei.com> - 1.4.0-3
changelog:
  - Add Requires: python2-gobject-base libnotify >= 0.7.7
  - fix command subunit-notify subunit2gtk --help error
  - fix command subunit-notify warning


author: yixiangzhike <yixiangzhike007@163.com> - 1.9.2-20
changelog:
  - apply 2 patches: backport-sudo_rfc1938_setup--fix-out-of-bounds-read-if-the-.patch, backport-sudo_auth_init--Fix-setting-FLAG_ONEANDONLY-if-onl.patch


author: chenyanpanHW <chenyanpan@huawei.com> - 2.1.0-32
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-Fix-issue-with-sysfs-name-comparisons.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-sysfsutils-2.1.0-get_link.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0003-sysfsutils-2.1.0-manpages.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0004-sysfsutils-aarch64.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0005-sysutils-modify-GPL-path-written-in-COPYING.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0006-fix-of-FUNC_TABLE_SIZE-mentioned-in-prev-commit.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0007-Fix-compiler-complain-about-multiple-defs-of-my_stdo.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0008-Use-stat-not-lstat-to-find-link-target.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0009-path_is_file-should-call-stat-not-lstat.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0010-lib-Fixed-a-memory-leak-in-lib-sysfs_driver.c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0011-lib-Fixed-memory-leaks-in-lib-sysfs_device.c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0012-lib-Fixed-memory-leaks-in-lib-sysfs_attr.c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: liyuanyuan <liyuanyuan@xfusion.com> - 1.5.11-17
changelog:
  - Set programe name for scp-dbus-service as well
  - Require proper version of GDK and GTK in scp-dbus-service as well


author: zhangyao <zhangyao108@huawei.com> - 243-82
changelog:
  - sync community patches
    add backport-pid1-set-SYSTEMD_NSS_DYNAMIC_BYPASS-1-env-var-for-db.patch
        backport-pid1-lookup-owning-PID-of-BusName-name-of-services-a.patch
        backport-pid1-watch-bus-name-always-when-we-have-it.patch


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-83
changelog:
  - Enhance the logging function of the systemctl command
    Add process-util-log-more-information-when-runnin.patch


author: xujing <xujing125@huawei.com> - 243-86
changelog:
  - print the real reason for link update
  - run link_update() with increased retry count in second invocation


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 1:8.6.10-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:The "no acceptable C compiler found" error message is displayed during compilation.Therefore,add buildrequires gcc.


author: gaihuiying <eaglegai@163.com> - 1:0.17-78
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix telnet crashes on stack overflow due to infinite recursion.


author: wangkai <wangkai385@huawei.com> - 0.14.0-4
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-44228 is fixed,the version needs to be rebuild.


author: yaoxin <yaoxin30@huawei.com> - 0.14.0-5
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-45105 is fixed,the version needs to be rebuild.


author: yaoxin <yaoxin30@huawei.com> - 0.14.0-6
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-44832 is fixed,the version needs to be rebuild.


author: openEuler Buildteam <buildteam@openeuler.org> - 0.5.9
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC:Solve the problem of service cannot restart when upgrading


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 0.6-2
changelog:
  - The"cc:No such file or directroy"error message is displayed during compilation.Therefore,add buildrequires gcc.
    The macro unitdir is used.Therefore,add buildrequires systemd


author: langfei <langfei@huawei.com> - 2022a-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Aysén Region moves from -04/-03 to -03; new zone;
  -	Improve recent commentary for Chilean decrees.


author: Liu Chao <liuchao173@huawei.com> - 2022a-22
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Moldova has used EU transition times since 2022
  	Most of BC moves from PDT to Pacific Time on 03-09
  	Delay America/Vancouver tm_isdst transition


author: gaihuiying <eaglegai@163.com> - 1.11.0-21
changelog:
  - Type:CVE
  - CVE:CVE-2025-11411
  - SUG:NA
  - DESC:Additional fix for CVE-2025-11411 to include YXDOMAIN and non-referral nodata answers in the mitigation


author: gaihuiying <eaglegai@163.com> - 1.11.0-22
changelog:
  - Type:cves
  - CVE:CVE-2026-33278,CVE-2026-41292,CVE-2026-42959,CVE-2026-42960
  - SUG:NA
  - DESC:fix CVE-2026-33278,CVE-2026-41292,CVE-2026-42959,CVE-2026-42960


author: gaihuiying <eaglegai@163.com> - 1.11.0-23
changelog:
  - Type:cves
  - CVE:CVE-2026-32792,CVE-2026-42923,CVE-2026-40622,CVE-2026-42534,CVE-2026-44390
  - SUG:NA
  - DESC:fix CVE-2026-32792,CVE-2026-42923,CVE-2026-40622,CVE-2026-42534,CVE-2026-44390


author: chenyanpanHW <chenyanpan@huawei.com> - 012-4
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-usbmisc-initialize-string-buffer-before-reading-from.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: cenhuilin <cenhuilin@kylinos.cn> - 2.35.2-24
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:lsblk: fix memory leak [coverity scan]
         lsblk: fix possible use-after-free


author: yixiangzhike <yixiangzhike007@163.com> - 2.35.2-26
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport community patches
          fix off-by-one in maximum last sector calculation


author: herengui <herengui@kylinsec.com.cn> - 7.4.3-5
changelog:
  - Fix CVE-2026-34475: Fix http/1.1 absolute form dissection edge case leading to cache poisoning or authentication bypass


author: Jiajun Chen <1250062498@qq.com> - 1.0-2
changelog:
  - bugfix: fix %ST, %GUE, %HYP formula
  - display: expand row size in TEXT mode
  - bugfix: exit vmtop when arguments are invalid
  - bugfix: check unsigned number flip before getting delta


author: nocjj <1250062498@qq.com>
changelog:
  - vcpustat: modify vcpu info acquirement from debugfs
  - display: expand %CPU display
  - display: add limit to usage display
  - vmtop: simplify print_domain_field


author: Jiajun Chen <1250062498@qq.com> -1.1-3
changelog:
  - vcpu_stat: add remaining kvm exits items to display
  - display: modify filter display to support more display fields items
  - vcp_stat: add Max Scheduling Delay time items to display
  - args: add -p option
  - key: add page up/down key response
  - vcpu_stat: get vcpu stat list once per display instead of per vcpu
  - proc: del /prc/pid/comm read
  - display: del screen clear after key response
  - codestyle: del unused var


author: yangzhuangzhuang<yangzhuangzhuang1@huawei.com> - 0.3.12-4
changelog:
  - The "no acceptable C compiler found" error message is displayed during compilation.Therefore,add buildrequires gcc.


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 1:3.6.14-12
changelog:
  - Delete /usr/share/man/man1/wireshark.* in wireshark package because wireshark-help package also contains this files


author: Zhiqiang Liu <liuzhiqiang26@huawei.com> - 5.6.0-3
changelog:
  - mkfs.xfs: fix ASSERT on to-small device with stripe geometry.
    Fix issue: https://gitee.com/src-openeuler/xfsprogs/issues/I4RZKQ


author: Funda Wang <fundawang@yeah.net> - 1.20.8-32
changelog:
  - fix CVE-2025-26594, CVE-2025-26595, CVE-2025-26596,
    CVE-2025-26597, CVE-2025-26598, CVE-2025-26599
    CVE-2025-26600, CVE-2025-26601


author: lingsheng <ultra_planet@qq.com> - 1.20.8-35
changelog:
  - fix CVE-2022-49737 CVE-2025-49175 CVE-2025-49176 CVE-2025-49178 CVE-2025-49179 CVE-2025-49180 CVE-2025-62229 CVE-2025-62230 CVE-2025-62231


author: lingsheng <ultra_planet@qq.com> - 1.20.8-38
changelog:
  - fix CVE-2026-50256 CVE-2026-50257 CVE-2026-50258 CVE-2026-50259 CVE-2026-50260 CVE-2026-50261 CVE-2026-50262 CVE-2026-50263 CVE-2026-50264


author: luhuaxin <luhuaxin@huawei.com> - 1.3-39
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC: move gxvattr to main package, move AUTHORS to license folder


author: kouwenqi <kouwenqi@kylinos.cn> - 5.2.5-4
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC:Add overflow check for Unpadded size in lzma_index_append


author: luckky <guodashun1@huawei.com> - 1.4.5-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:The libzsta.a library should be packaged to access advanced experimental features


author: yaoxin <1024769339@qq.com> - 0.2.35-10
changelog:
  - Fix CVE-2025-2175
  - Rename CVE-2025-2174_CVE-2025-2176_CVE-2025-2177.patch to
    CVE-2025-2174_CVE-2025-2175_CVE-2025-2176_CVE-2025-2177.patch


