# changelog

author: wangkai <13474090681@163.com> - 1.4.3.36-1
changelog:
  - Update to 1.4.3.36
  - Fix dsidm user/posixgroup get_dn fails with search_ext()
  - Fix unable to add objectclass/attribute without x-origin
  - Fix execute dsconf to open pdb


author: Chenxi Mao <chenxi.mao@suse.com> - 1:1.32.12-14
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission


author: gaoxingwang<gaoxingwang1@huawei.com> - 1:1.32.12-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:merge ovs into main package

   Mon Jun 5 2023 gaoxingwang<gaoxingwang1@huawei.com> - 1:1.32.12-16
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml


author: gaoxingwang<gaoxingwang1@huawei.com> - 1:1.32.12-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:revert support for Aliyun in nm-cloud-setup for hard-coded ip


author: yaoxin <yao_xin001@hoperun.com> - 1.2.24-1
changelog:
  - Update to 1.2.24:
    * Fixed formatting of ipsec.conf snippet. This is a security
    issue with severity of "Important." (CVE-2024-9050)
    * Added support for "require-id-on-certificate" setting.
    * Updated Georgian, Slovenian and Ukrainian translations.


author: chenyanpanHW <chenyanpan@huawei.com> - 2.14.19-25
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ORBit2-2.14.3-multilib.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ORBit2-2.14.3-ref-leaks.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ORBit2-make-j-safety.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ORBit2-allow-deprecated.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0005-Fix-link_protocol_is_local_ipv46-for-ipv4-on-some-ip.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0014-Commit-patch-from-bug-662623-to-fix-connection-failu.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0016-bug-732274-fix-parallel-build-failure.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: chengguipeng <chengguipeng1@huawei.com> - 1.1.12-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:solove the problem that no message is displayed when running a uninstalled command.


author: sunhai <sunhai10@huawei.com> - 36.16.5-23
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: revert "Set default entry to the BLS id instead of the entry index"


author: lin zhang <lin.zhang@turbolinux.com.cn> - 0.15.2-2
changelog:
  - fix build error
  - File listed twice libappstream-compose.so.0.15.2
  - uppackaged /usr/share/gtk-doc/html/appstream-compose


author: shenyangyang<shenyangyang4@huawei.com> - 1.7.0-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Rebuild for openEuler-rpm-config moving /usr/lib/rpm/openEuler/xxxx
         to /usr/lib/xxxx


author: yanglongkang<yanglongkang@h-partners.com> - 3.2.2-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Adding Patching Operations
         provides relibility and self-heading capabilities for service


author: Linux_zhang <zhangruifang@h-partners.com> - 3.2.2-5
changelog:
  - Type：update
  - ID：NA
  - SUG:NA
  - DESC: Modify the license to SPDX format
          Delete MIT and Public Domain license because it no longer appears in the upstream source


author: baizhonggui <baizhonggui@huawei.com> - 0.2.92-3
changelog:
  - Fix building error: File must begin with "/": /usr/lib/systemd/system/attest_ra_server.service
  - Add systemd in BuildRequires


author: shixuantong<shixuantong@huawei.com> - 0.3.6-25
changelog:
  - Type:cves
  - ID:CVE-2017-6828 CVE-2017-6829 CVE-2017-6831 CVE-2017-6838 CVE-2017-6839
  - SUG:NA
  - DESC:fix CVE-2017-6828 CVE-2017-6829 CVE-2017-6831 CVE-2017-6838 CVE-2017-6839


author: wangkerong <wangkerong@huawei.com> - 1.13.0-3
changelog:
  - Fix OOM during fuzz test
  - We don't run some testcase,because the patch of fuzz test will lead to the failure of testcase


author: liyancheng <412998149@qq.com> - 0.19-1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:Support parsing multiple events and process repeat function


author: wangyuhang <wangyuhang27@huawei.com> -5.1.8-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: add backport-Bash-5.1-patch-10-fix-for-wait-n-being-interrupted-b.patch
      backport-Bash-5.1-patch-11-save-and-restore-alias-parsing-whe.patch
      backport-Bash-5.1-patch-12-fix-race-condition-with-child-proc.patch
      backport-Bash-5.1-patch-15-fix-readline-display-of-some-chara.patch
      backport-Bash-5.1-patch-16-fix-interpretation-of-multiple-ins.patch


author: wangyuhang <wangyuhang27@huawei.com> -5.1.8-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: backport-Bash-5.1-patch-13-fix-tilde-expansion-after-unquoted.patch
          backport-Bash-5.1-patch-14-fix-off-by-one-error-when-reading-.patch
          backport-changes-to-documentation-to-reduce-gender-specific-l.patch
          backport-fixes-for-array-subscripts-and-values-containing-0x0.patch
          change PATCHLEVEL from 9 to 8, keep it consistent with the actual version of bash


author: wangyuhang <wangyuhang27@huawei.com> -5.1.8-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: add backport-fix-for-nofork-comsub-command-printing-fix-for-crash.patch
          backport-fix-small-memleak-in-globbing.patch
          backport-fix-for-leak-when-completing-command-word-with-glob-.patch
          del doesn't exist PATH dirs in bashrc


author: wangyuhang <wangyuhang27@huawei.com> -5.1.8-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: add backport-fix-for-E-transformation-fixes-for-failures-in-arith.patch
          backport-changes-for-quoting-special-and-multibyte-characters.patch
          backport-fixes-for-LINENO-in-multi-line-simple-commands-print.patch
          backport-changes-to-SIGINT-handler-while-waiting-for-a-child-.patch
          backport-renamed-several-functions-beginning-with-legal_-chan.patch


author: wangyuhang <wangyuhang27@huawei.com> -5.1.8-13
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix the issue of compilation failure when the openEuler macro is not defined


author: Zhao Mengmeng <zhaomengmeng@kylinos.cn> - 5.1.8-16
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Fix a performance regression while using large number of environment variables


author: zhanghao<zhanghao383@huawei.com> - 32:9.16.23-14
changelog:
  - Type:CVE
  - CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
  - SUG:NA
  - DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094


author: zhanghao<zhanghao383@huawei.com> - 32:9.16.23-15
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix output expected information when install bing-sdborbind-sdb-chroot


author: zhanghao <zhanghao383@huawei.com> - 32:9.16.23-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Don't perform arithmetic on NULL pointers
  Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
  Fix a use-after-free bug in dns_zonemgr_releasezone()
  Fix dns_fwdtable_addfwd() error path cleanup bug
  Detach the views in zone_shutdown(), not in zone_free()
  Detach the zone views outside of the zone lock
  delay trust anchor management until zones are loaded
  In hmac_createctx free ctx on isc_hmac_init failure
  Fix dns_kasp_attach / dns_kasp_detach usage
  Fix backport error in 84929d1c
  Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
  Searching catzs->zones requires a read lock
  Fix view's zones reverting bug during reconfiguration


author: chengyechun <chengyechun1@huawei.com> - 32:9.16.23-21
changelog:
  - Type:CVE
  - CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
  - SUG:NA
  - DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream


author: chengyechun <chengyechun1@huawei.com> - 32:9.16.23-23
changelog:
  - Type:CVE
  - CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
  - SUG:NA
  - DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737


author: yeqinglong <yeqinglong@kylinsec.com.cn> - 2.37-24
changelog:
  - DESC:Add sw_64 support
  - DESC:Add LoongArch support
  - DESC:Fix LoongArch PLT entry generate bug
  - DESC:Add .equ support for LoongArch and fix some bugs


author: liuxu <liuxu156@huawei.com> - 1:1.34.1-21
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363


author: yanglu <yanglu72@h-partners.com> - 1.18.1-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:delete a static library file
         add BuildRequires make to fix build problem


author: hehuazhen <hehuazhen@huawei.com> - 1.18.1-6
changelog:
  - Type:CVE
  - CVE:CVE-2023-32067 CVE-2023-31130
  - SUG:restart
  - DESC:fix CVE-2023-32067 CVE-2023-31130


author: sunhai<sunhai10@huawei.com> - 1.17.4-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:cairo_truetype_reverse_cmap detected memory leaks
         fix read memory access
         fix call get_unaligned_be32 heap buffer overflow
         fix heap buffer overflow in cairo_cff_parse_charstring


author: wangjie<wangjie294@huawei.com> - 4.0.2-2
changelog:
  - DESC:remove capstone-4.0.1.tar.gz and 0001-Fix-include-path-in-pkg-config-for-Makefile-too-1339.patch after upgrade 4.0.2


author: chenyanpanHW <chenyanpan@huawei.com> - 1.4.33-3
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-Fix-SafeNet-eToken-5110-SC-issue.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-Fix-SafeNet-eToken-5110-SC-issue-firmware-0.13.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: chenyanpanHW <chenyanpan@huawei.com> - 6.12-3
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-CVE-2022-27239.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-CVE-2022-29869.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0003-setcifsacl-fix-comparison-of-actions-reported-by-cov.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0004-cifs-utils-work-around-missing-krb5_free_string-in-H.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: jiangchuangang<jiangchuangang@huawei.com> - 9.0-8
changelog:
  - sync patches from community
  - add backport-comm-fix-NUL-output-delimiter-with-total.patch
    backport-stty-validate-ispeed-and-ospeed-arguments.patch
    backport-fts-fix-race-mishandling-of-fstatat-failure.patch
    backport-stty-fix-off-by-onecolumn-wrapping-on-output.patch
    backport-copy-copy_file_range-handle-ENOENT-for-CIFS.patch
    backport-tail-fix-support-for-F-with-non-seekable-files.patch


author: jiangchuangang<jiangchuangang@huawei.com> - 9.0-10
changelog:
  - sync patches from community
  - add backport-pr-fix-infinite-loop-when-double-spacing.patch
    backport-wc-ensure-we-update-file-offset.patch


author: fuanan <fuanan3@h-partners.com> - 9.0-11
changelog:
  - sync patches from community
  - add backport-who-fix-only-theoretical-overflow.patch
        backport-tac-handle-short-reads-on-input.patch
        backport-setenv-Don-t-crash-if-malloc-returns-NULL.patch
        backport-who-don-t-crash-if-clock-gyrates.patch
        backport-doc-od-strings-clarify-operation.patch
        backport-wc-port-to-kernels-that-disable-XSAVE-YMM.patch


author: jiangchuangang <jiangchuangang@huawei.com> - 9.0-12
changelog:
  - skip testcase for overlay filesystem because of no inotify_add_watch
    add test-skip-overlay-filesystem-because-of-no-inotify_add_watch.patch


author: huyubiao <huyubiao@huawei.com> - 9.0-16
changelog:
  - sync patches from community
  - add backport-pinky-fix-string-size-calculation.patch
        backport-cksum-consistently-validate-length-attributes.patch
        backport-timeout-fix-race-where-we-might-kill-arbitrary-proce.patch
        backport-timeout-fix-narrow-race-in-failing-to-kill-processes.patch
        backport-maint-basenc-consistently-check-buffer-bounds-when-e.patch
        backport-coreutils-df-direct.patch
        backport-df-fix-memory-leak.patch
        backport-ls-avoid-triggering-automounts.patch
        backport-pr-don-t-use-uninitialized-var.patch
        backport-stat-only-automount-with-cached-never.patch
        backport-touch-fix-aliasing-bug.patch
        backport-putenv-Don-t-crash-upon-out-of-memory.patch
        backport-head-off_t-not-uintmax_t-for-file-offset.patch
        backport-shuf-avoid-integer-overflow-on-huge-inputs.patch
        backport-shuf-fix-randomness-bug.patch


author: fuanan <fuanan3@h-partners.com> - 2.13-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert fix CVE-2015-1197 because it causes AT testcases problems


author: chenziyang <chenziyang4@huawei.com> - 2.13-10
changelog:
  - Type:CVE
  - ID:CVE-2015-1197
  - SUG:NA
  - DESC:backport CVE-2015-1197, delete revert-CVE-2015-1197.patch and backport the following 2 bugfix patches


author: wangbin <wangbin224@huawei.com> - 7.3.0-5
changelog:
  - Handle task_struct cpu member changes for kernels >= 5.16-rc1
    and delete use_system_readline_v3.patch


author: chenhaixiang <chenhaixiang3@huawei.com> - 8.0.2-2
changelog:
  - arm64: Fix again segfault in arm64_is_kernel_exception_frame()
    when corrupt stack pointer address is given


author: Hewenliang <hewenliang4@huawei.com> - 3.16.1-7
changelog:
  - fix the null pointer of get_tty_driver.
  - criu files Dont cache fd ids for device files.
  - pre dump call vmsplice with SPLICE_F_GIFT.


author: chenyanpanHW <chenyanpan@huawei.com> - 2.3.3-5
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-cryptsetup-add-system-library-paths.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fix-compat-test.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0003-add-test-case-for-sm4.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0004-Fix-CVE-2021-4122-LUKS2-reencryption-crash-recovery-.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0005-Fix-OpenSSL-2-crypto-backend-PBKDF2-possible-iterati.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0006-fix-potential-null-pointer-dereference.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0007-Update-file-cryptsetup-ssh.c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: zhouyihang <zhouyihang3@h-partners.com> - 7.79.1-26
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:tool_progress: avoid division by zero in parallel progress
         digest: pass over leading spaces in qop values
         Curl_close: call Curl_resolver_cancel to avoid memory-leak
         easy: fix the altsvc init for curl_easy_duphandle
         libssh: if sftp_init fails, don't get the sftp error code
         url: move back the IDN conversion of proxy names
         ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
         http: fix the ::1 comparison for IPv6 localhost for cookies
         multi: free up more data earleier in DONE
         curl_path: bring back support for SFTP path ending in /~
         transfer: refuse POSTFIELDS + RESUME_FROM combo
         tool_operate: refuse (--data or --form) and --continue-at
         http: free the url before storing a new copy
         url: fix null dispname for --connect-to option
         vtls: avoid memory leak if sha256 call fails
         urlapi: make sure zoneid is also duplicated in curl_url_dup


author: zhouyihang <zhouyihang3@h-partners.com> - 7.79.1-27
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:transfer: also stop the sending on closed connection
         openssl: avoid BN_num_bits() NULL pointer derefs


author: zhouyihang <zhouyihang3@h-partners.com> - 7.79.1-29
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:paramhlp: fix CRLF-stripping files with "-d @file"
         libssh2: set length to 0 if strdup failed
         openldap: create ldap URLs correctly for IPv6 addresses
         multi: avoid memory-leak risk
         tool_cb_rea: limit rate unpause for -T . uploads
         tool_cfgable: free {proxy_}cipher13_list on exit


author: huyubiao<huyubiao@huawei.com> - 29-10
changelog:
  - fix enable-dbus-broker-to-reexecute.patch and backport-launch-config-use-AT_RANDOM-for-XML-hash-salt.patch


author: hongjinghao <hongjinghao@huawei.com> - 1:1.12.20-11
changelog:
  - add backport-bus-dir-watch-Do-not-crash-with-128-dirs.patch	
  backport-Do-not-crash-when-reloading-configuration.patch


author: liuyumeng <liuyumeng5@huawei.com> - 0.40.0-2
changelog:
  - add patch:dconf read random contents of memory causing discrepancy,initialize memory to eliminate discrepancy


author: zhoushuiqing <zhoushuiqing2@huawei.com> - 3.6.3-2
changelog:
  - Type:CVE
  - CVE:CVE-2005-1849,CVE-2016-9840,CVE-2016-9841,CVE-2016-9843,CVE-2018-25032,CVE-2022-37434
  - SUG:NA
  - DESC:backport patchs fix zlib cves: CVE-2005-1849 CVE-2016-9840
         CVE-2016-9841 CVE-2016-9843 CVE-2018-25032 CVE-2022-37434
         backport-fix-CVE-2005-1849.patch
         backport-fix-CVE-2016-9840.patch
         backport-fix-CVE-2016-9841.patch
         backport-fix-CVE-2016-9843.patch
         backport-fix-CVE-2018-25032.patch
         backport-fix-CVE-2022-37434-1.patch
         backport-fix-CVE-2022-37434-2.patch


author: chenjiayi<chenjiayi22@huawei.com> - 0.5.1-5
changelog:
  - complement dependency from devmaster to sysmaster and avoid
    exit with failure in post and postun process


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.3-4
changelog:
  - Type:bugfix
  - ID:
  - SUG:restart
  - DESC:delete report url added by other upstream patch to keep pace with DHCP


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.3-5
changelog:
  - Type:CVE
  - ID:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
  - SUG:restart
  - DESC:fix CVE-2022-2795,CVE-2022-38177 and CVE-2022-38178


author: Wenlong Ding <wenlong.ding@turbolinux.com.cn> - 0.6.0-5
changelog:
  - Port to gupnp-1.2
  - Don't remove a queue more than once
  - Remove any pending task processing handlers when destroying a queue


author: renmingshuai <renmingshuai@huawei.com> - 2.86-3
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Fix parsing of IPv6 addresses with peer from netlink
         Fix bad interaction between --address=/#/<ip> and
              --server=/some.domain/#
         Fix --address=/#/...... which was lost in 2.86


author: renmingshuai <renmingshuai@huawei.com> - 2.86-7
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Fix memory leak when using --dhcp-optsfile with DHCPv6 options


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 7.4.2-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:delete buildrequires perl,
         because the compilation dependency has been added to the basic project


author: chenyi <chenyi211@huawei.com> - 21.11-69
changelog:
  Sync some patches from upstream about bugfix, modifies
   are as follow:
   - net/hns3: check Rx DMA address alignmnent


author: hankangknag <hankangknag5@huawei.com> - 21.11-70
changelog:
  Sync some patches from upstream about bugfix, modifies are as follow:
  - net/af_xdp: parse UMEM map info from mempool
  - bpf: disable on 32-bit x86
  - net/af_xdp: remove unused local statistic
  - net/af_xdp: fix stats reset
  - net/af_xdp: count mbuf allocation failures
  - net/af_xdp: fix port ID in Rx mbuf
  - net/af_xdp: support AF_XDP device plugin pinned maps
  - net/af_xdp: fix multi-interface support for k8s
  - net/af_xdp: fix leak on XSK configuration failure
  - net/af_xdp: fix memzone leak on config failure
  - net/af_xdp: avoid error log for virtual interfaces
  - net/af_xdp: fix Rx and Tx queue state
  - net/af_xdp: fix missing UMEM feature
  - rework atomic intrinsics fetch operations
  - build: clarify configuration without IOVA field in mbuf
  - net/af_xdp: fix socket handler validation
  - net/af_xdp: support CNI Integration
  - net/af_xdp: parse NUMA node ID from sysfs
  - drivers: mark SW PMDs to support disabling IOVA as PA
  - net/af_xdp: make compatible with libbpf 0.8.0
  - net/af_xdp: add log on XDP program removal failures
  - net/af_xdp: avoid version-based check for program load
  - net/af_xdp: avoid version-based check for shared UMEM
  - net/af_xdp: make clear which libxdp version is required
  - net/af_xdp: move XDP library presence flag setting
  - net/af_xdp: allow using copy mode in XSK
  - net/af_xdp: fix shared UMEM fill queue reserve
  - net/af_xdp: fix custom program loading with multiple queues
  - net/af_xdp: reserve fill queue before socket create
  - net/af_xdp: ensure socket is deleted on Rx queue setup error
  - net/af_xdp: make compatible with libbpf >= 0.7.0
  - net/af_xdp: add missing trailing newline in logs
  - net/af_xdp: allow probing when multiprocess is disabled
  - ethdev: introduce generic dummy packet burst function
  - net/af_xdp: re-enable secondary process support
  - net/af_xdp: make UMEM configure more readable
  - net/af_xdp: use libxdp if available
  - net/af_xdp: fix build with -Wunused-function


author: chenyi <chenyi211@huawei.com> - 21.11-78
changelog:
  Sync some patches from upstream about bugfix, modifies are as follow:
  - bus/pci: fix UIO resource mapping in secondary process


author: huyubiao<huyubiao@huawei.com> - 055-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add backport-fix-fs-lib-remove-quoting-form-the-first-argument-of.patch
         backport-fix-dracut.sh-exit-if-resolving-executable-dependenc.patch
         backport-fix-dracut-install-protect-against-broken-links-poin.patch


author: xinghe <xinghe2@h-partners.com> - 2.0.11-10
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix: if libvirt and ebtables are installed at the same time, ping the operation prompts "sendmsg: Operation not permitted".


author: yanglu <yanglu72@h-partners.com> - 2.0.11-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:rebuild package to ensure that the upgrade between branches is normal


author: xinghe <xinghe2@h-partners.com> - 2.0.11-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix ebtables-restore --noflush failed when ebtables is uninstall


author: wangkai <wangkai385@h-partners.com> - 1:4.11-6
changelog:
  - Fix objectweb.asm version limit 
  - Add security compile options pie, relro and -fstack-protector-strong
  - Add glassfish-jsp and glassfish-servlet-api and glassfish-el-api version limit


author: yexiao<yexiao7@huawei.com> - 202011-14
changelog:
  - fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727


author: yexiao<yexiao7@huawei.com> - 202011-16
changelog:
  - fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 18-4
changelog:
  - Fix segfault when passed --index is greater than current boot order size
    Add missing short option handling for --index (-I)


author: zhangxingrong <zhangxingrong@uniontech.com> - 18-5
changelog:
  - Fix the incorrect long parameter in help messages
  - efibootmgr: delete_bootnext is just a boolean, not an entry id


author: panxiaohe <panxh.life@foxmail.com> - 0.185-10
changelog:
  - Get instance correctly for eu-ar -N option
  - Use make macros
  - Use upstream patch for no stdin flag


author: fuanan <fuanan3@h-partners.com> - 0.185-11
changelog:
  - Fix "/usr/lib64/libdebuginfod.so.1" not found when uninstall elfutils-debuginfod-client-devel
  - Fix Obsoletes in spec


author: hubin <hubin73@huawei.com> - 0.185-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:change permission to 750 and move debug tools into extra package


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.38.3-1
changelog:
  - Upgrade to 3.38.3
  - Update Version, Release, Source0, BuildRequires
  - Temporaryly disable libportal, because there isn't in cunrrent community


author: xiaojiantao <xiaojiantao1@h-partners.com> - 2:5.15-3
changelog:
  - Type:requirement
  - Id:NA
  - SUG:NA
  - DESC:add support to set or get rx buf len and tx push by ethtool


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.38.2-1
changelog:
  - Upgrade to 3.38.2
  - Delete 0001-Resolves-deb-762530-rhbz-1061177-add-man-pages.patch that
    existed in 3.38.2 version
  - Use meson rebuild, change 'SYNCTEX_CFLAGS' to 'CFLAGS'


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.38.4-1
changelog:
  - Upgrade to 3.38.4
  - Update Version, Release, Source, BuildRequires, Requires, Obsoletes
  - Update stage 'install', use sed delete one line that will cause fault


author: dillon chen <dillon.chen@gmail.com> - 2.5.2-4
changelog:
  - CVE-2021-36045, CVE-2021-36046, CVE-2021-36047, CVE-2021-36048,
  - CVE-2021-36050, CVE-2021-36051, CVE-2021-36052, CVE-2021-36053,
  - CVE-2021-36054, CVE-2021-36055, CVE-2021-36056, CVE-2021-36058,
  - CVE-2021-36064, CVE-2021-39847, CVE-2021-40716, CVE-2021-40732,
  - CVE-2021-42528, CVE-2021-42529, CVE-2021-42530, CVE-2021-42531,
  - CVE-2021-42532


author: wangkerong <wangkerong@huawei.com> - 0.26-26
changelog:
  - Type:cves
  - ID:CVE-2021-29464 CVE-2021-29463 CVE-2021-29473
  - SUG:NA
  - DESC:fix CVE-2021-29464,CVE-2021-29463,CVE-2021-29473


author: wangyue <wangyue92@huawei.com> - 1.14.0-1
changelog:
  - Update to 1.14.0 to fix CVE-2020-6106 and CVE-2020-6104 and CVE-2020-6107 and CVE-2020-6108 and CVE-2020-6105


author: wangkai <13474090681@163.com> - 1:2.3.0-1
changelog:
  - Update to 2.3.0 for fix CVE-2022-48682
  - Add ncurses mode for interactive file deletion (plain mode still available via --plain or ./configure).
  - Add --minsize --maxsize --time --order=ctime --log --deferconfirmation --cache option.
  - Use configure script for installation (Autotools/Automake).
  - Rename cs command ("clear all selections") from cs to csel.
  - Rename igs command ("invert selections") from igs to isel.
  - Add "prune" command as synonym for DELETE key.
  - Clear selections after deleting files via prune/DELETE.
  - Fix dependency issues when fdupes is configured to not use ncurses.
  - Do not enter ncurses mode when --immediate option given.


author: wangkai <13474090681@163.com> - 102.13.0-1
changelog:
  - Update to 102.13.0
  - Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
  - Remove unused patch


author: wangkai <13474090681@163.com> - 102.14.0-1
changelog:
  - Update to 102.14.0
  - Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056


author: lvfei <lvfei@kylinos.cn> - 102.15.0-1
changelog:
  - Update to 102.15.0
  - Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584


author: yangzhuangzhuang<yangzhuangzhuang1@huawei.com> - 2.6.4-3
changelog:
  - The autoreconf command is used during compilation.
    Therefore,the automake and autoconf compilation dependencies need to added.


author: baizhonggui <baizhonggui@huawei.com> - 1.6.2-5
changelog:
  - Fix building error: configure: error: no acceptable C compiler found in $PATH
  - Add gcc in BuildRequires


author: liyuxiang <liyuxiang@ncti-gba.cn> - 2:2.8.1-2
changelog:
  - Fix CVE-2022-39316
  - Fix CVE-2022-39318
  - Fix CVE-2022-39319
  - Fix CVE-2022-39347
  - Fix CVE-2022-41877


author: Funda Wang <fundawang@yeah.net> - 2:2.11.1-1
changelog:
  - 2.11.1
  - Fix CVE-2023-40567
  - Fix CVE-2023-40569
  - Fix CVE-2023-40188
  - Fix CVE-2023-40186
  - Fix CVE-2023-40181
  - Fix CVE-2023-39353
  - Fix CVE-2023-39352
  - Fix CVE-2023-39356
  - Fix CVE-2023-39350
  - Fix CVE-2023-39351
  - Fix CVE-2023-39354
  - Fix CVE-2023-40589


author: wangkai <13474090681@163.com> - 2:2.11.7-1
changelog:
  - Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
    CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
    CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660


author: Zhen Chen <chenzhen126@huawei.com> - 1.0.1-2
changelog:
  - fix ksliprobe get invalid args occasionally at startup
  - fix error print when starting gala-gopher
  - add system_uuid field to distinguish client when post to pyroscope server
  - repair stackprobe caused cpu rush
  - add support to pyroscope
  - bugfix: add check if thread is 0
  - fix stackprobe memory allocation and deallocation errors.
  - normalize time format in flamegraph svg filename


author: Tangxin Xie <xietangxin@huawei.com> - 1.0.2-2
changelog:
  - bugfix add check whether cadvisor is installed
    bugfix fix system_proc collect data err
    change return type of uprobe from void to int
    Fix for popen cannot get stderr
    fix modify unit of some metrics to second
    refactor modify jvmprobe to support pod
    stackprobe fix inaccurate call stack count add samp
    add python3-libconf and python3-request deps


author: Tangxin Xie <xietangxin@huawei.com> - 1.0.2-3
changelog:
  - fix httpprobe find libssl path
    Fix segmentation fault of gala-gopher cmd
    fix prepare_dependence
    bugfix:The log time is not the local time
    fix: fix fd leakage problem
    cadvisor_probe:convert container_id type to bytes
    adapt block_rq_issue tracepoint args in kernel-5.10
    modify desc from chinese to english
    bugfix: fix gala-gopher -h print err
    fix: change license software name
    fix: fix install error
    bugfix: zombie task.
    fix:add default data of event conf
    fix access violation


author: Liping Hu <huliping10@huawei.com> - 2.0.1-2
changelog:
  - fix delete unnecessary judgments
    fix buffer overflow caused by strcpy()
    cadvisor_probe: fix int to str warnings
    fix compile warnings when disable KAFKA_CHANNEL
    fix segmentation fault when setting out_channel of metrics to logs
    fix writing metadata to log file properly
    bugfix: probe_define access out of bounds
    refactor(cadvisor): remove the dependency on the python-libconf
    avoid use ato*


author: yinbin6 <jiangheng14@huawei.com> - 1.0.2-67
changelog:
  - bugfix: fix gazelle init failed while setup by non-root user
  - rpc: fix rpc_sync_call spinlock block when msg be recalled
  - rtw: fix send length exceeding send_ring_size
  - fix stack null when register interrupt


author: hantwofish <yinbin8@huawei.com> - 1.0.2-73
changelog:
  - xdp: support XDP_STATISTICS by posix_api->getsockopt_fn
  - add SO_NUMA_ID(optname) for adapting opneGauss
  - remove the unused return variable.
  - Fix annotation errors
  - bugfix: start fail when executing the popen command for the second time in openGauss


author: yinbin <jiangheng14@huawei.com> - 1.0.2-74
changelog:
  - LOG: Optimize some log displays
  - remove: code about nobolck mode for mysql
  - interrupt: fix timeout events cannot be counted


author: Xiong Zhou <xiongzhou4@huawei.com> - 10.3.1-49
changelog:
  - Type:Revert & sync
  - ID:NA
  - SUG:NA
  - DESC: Revert ICP and IPA prefetch related patches.
  	Sync patch from openeuler/gcc.


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.38.2-1
changelog:
  - Upgrade to 3.38.2
  - Update Version, Release, Source0, BuildRequires
  - Use meson rebuild and install
  - Delete patches, delete pam.d related and other two files which not in 3.38.2
  - Add new file session.conf. modify /etc/gdm/custom.conf


author: zhangxianting <zhangxianting@uniontech.com> - 9.55.0-10
changelog:
  - Type:CVE
  - ID:NA
  - SUG:NA
  - DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511


author: fuanan <fuanan3@h-partners.com> - 2.33.0-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch


author: fuanan <fuanan3@h-partners.com> - 2.33.0-10
changelog:
  - Type:CVE
  - ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
  - SUG:NA
  - DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815


author: fuanan <fuanan3@h-partners.com> - 2.33.0-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:enable multithreading compilation and installation,
         move Git.3pm.gz to perl-Git,avoid installation conflicts,
         change BuildRequires from pcre-devel to pcre2-devel.


author: huyubiao <huyubiao@huawei.com> - 2.33.0-13
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
         Delete git-core-doc from git, git-core-doc is provided by git-help.


author: fuanan <fuanan3@h-partners.com> - 2.33.0-14
changelog:
  - Type:CVE
  - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
  - SUG:NA
  - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465


author: shixuantong <shixuantong1@huawei.com> - 2.34-157
changelog:
  - Type:bugfix
  - ID:
  - SUG:NA
  - DESC:enable shared library use huge page for aarch64 architecture
         revert "elf/ld.so: use special mmap for hugepage to get symbols"
         hugepageedit: static-link build
         elf: the hugepage feature of dynamic library keep compatible with llvm lld
         elf: add some debug info for dynamic library hugepage feature


author: chengyechun <chengyechun1@huawei.com> - 2.34-160
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:resolv: Track single-request fallback via _res._flags
         resolv: Allow short error responses to match any query


author: lihaoxiang <lihaoxiang9@huawei.com> - 10.0-7
changelog:
  - fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.38.2-1
changelog:
  - Upgrade to 3.38.2
  - Delete 0001-Fix-compiler-errors.patch which existed in version 3.38.2
  - Add sub package gnome-calculator-devel


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.38.0-1
changelog:
  - Upgrade to 3.38.0
  - Delete 0001-timer-Set-width-chars-2-property-on-the-spinbuttons.patch
    whose target file that to be patched doesn't exist in version 3.38.0


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.38.6-1
changelog:
  - Upgrade to 3.38.6
  - Update Version, Release, BuildRequires, stage 'files'
  - Delete 4 patches, modify the left 6 patches


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.38.5-1
changelog:
  - Upgrade to 3.38.5
  - Update Version, Release, Source0, BuildRequires, Requires, stage 'build', 'install', 'files'
  - Use meson rebuild, delete setup-shell.desktop, which doesn't existed in this version
  - Delete honor-firstboot-disabled.patch which existed in this version


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.36.0-1
changelog:
  - Upgrade to 3.36.0
  - Update Version, Release, Source0, stage 'build' and 'files'
  - Delete old patch that existed in new version, add new patch


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.38.0-1
changelog:
  - Upgrade to 3.38.0
  - Update Version, Release, Source0, Obsoletes
  - Modify patches, update stage 'files'


author: wangxiao<wangxia65@huawei.com> -3.30.1-6
changelog:
  - move the libcroco sources directly under src/st
    remove the libcroco dependency from the meson.build files


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.38.4-1
changelog:
  - Upgrade to 3.38.4
  - Update Version, Release, Source0, BuildRequires, Requires
  - Delete patches which existed in current version, modify one patch
  - Update stage 'build', 'check', 'files'


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.38.4-2
changelog:
  - Delete requires gdm-libs which gdm contains it
  - Use pipewire replace pipewire-gstreamer which pipewire contains it
  - Add xdg-desktop-portal-gtk for launching flatpak apps etc


author: chenyanpanHW <chenyanpan@huawei.com> - 3.38.4-3
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/gnome-shell-favourite-apps-firefox.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.38.2-1
changelog:
  - Upgrade to 3.38.2
  - Delete all two patches that existed in this version
  - Add 0001-Revert-packagekit-Avoid-600000-allocations-when-comp.patch
  - Temporarily disabled snap and rpm_ostree option


author: zhangyiru <zhangyiru3@huawei.com> - 2.8.1-3
changelog:
  - enable make check && skip four arm testcases.
    the reason is that arm do not have fully functional heap checker and
    the calling of unw_step in arm stacktrace_unittest is incorrect, but the function is not affected


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-44
changelog:
  - Type:CVE
  - CVE:CVE-2024-1048
  - SUG:NA
  - DESC:grub-set-bootflag: Fix for CVE-2024-1048
         commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
         kern/acpi: Skip NULL entries in RSDT and XSDT
         util/grub-mount: Check file path sanity


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-46
changelog:
  - Type:CVE
  - CVE:CVE-2021-46848
  - SUG:NA
  - DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-47
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix log printing in tpcm_kunpeng moddule
         osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
         osdep: Introduce include/grub/osdep/major.h and use it
         disk/mdraid1x_linux: Prevent infinite recursion
         disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 8.40-27
changelog:
  - Remove unnecessary buildrequires:gdb

  - Thu Jan 1 2021 yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 8.40-26
  - Fix the following problem:The grub.cfg file is modified.As a result,the system fails to start.


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.2.3-1
changelog:
  - Upgrade to 1.2.3
  - Update Version, Release, Source0, BuildRequires
  - Update stage 'build', 'install', 'check' and 'files'


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.18.4-1
changelog:
  - Upgrade to 1.18.4
  - Delete Adapt-to-backwards-incompatible-change-in-GUN.patch whose target
    patch file doesn't exist in this version 1.18.4
  - Add gstreamer-inspect-rpm-format.patch
  - Use meson rebuild


author: yangchenguang <yangchenguang@kylinsec.com.cn> - 3.24.30-8
changelog:
  - Fix the problem that the prompt information of network icon volume icon is not displayed
  - update xscreen size when x11 screen size change
  - always send the monitors changed signal when screen size change
  - Add function definition of gtk_image_set_from_pixbuf_with_scale


author: chenyanpanHW <chenyanpan@huawei.com> - 2.0.14-17
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/guile-multilib.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/guile-i18ntest.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/guile-threadstest.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/guile-2.0.14-gc_pkgconfig_private.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.2.4-1
changelog:
  - Upgrade to 1.2.4
  - Update Version, Release, Source0, BuildRequires
  - Delete sed operation which existed in this version
  - Add patch for fix CVE-2021-33516
  - Update stage 'prep', 'build', 'install', 'check', 'files'


author: Lv Ying<lvying6@huawei.com> - 1.11-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix build failure in OBS env because of automake version dependcy


author: Jia Chao <jiac13@chinaunicom.cn> - 3.3.4-4
changelog:
  - fix: use $HOME rather than /home/abuild, suit for all buildtools.
  - fix: yarn have ELF bin, not noarch at all.


author: xiaochn <xiaochuannan@inspur.com> - 3.3.6-4
changelog:
  - Remove settings.xml and use ${HOME}/.m2/repository as maven repo
  - Remove npm repo in spec file and use unified configuration of the build environment


author: xinghe <xinghe2@h-partners.com> - 2.6.6-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:connection: Clear flags when a conn is removed
         connection: Preserve flags when a conn is removed
         stream: do not try to free a failed stream-conn
         http_ana/txn: don't re-initialize txn and req var
         mworker: prevent incorrect values in uptime
         protocol: fix minor memory leak in protocol_bind_all()
         stream: Perform errors handling in right order in stream_new()


author: xinghe <xinghe2@h-partners.com> - 2.6.6-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:backport to fix potential coredump:
         errors: handle malloc failure in usermsgs_put
         ssl_sock: add check for ha_meth
         thread: add a check for pthread_creat


author: xinghe <xinghe2@h-partners.com> - 2.6.6-10
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:server: add missing free for server->rdr_pfx
         server: do not leak default-server in defaults


author: xinghe <xinghe2@h-partners.com> - 2.6.6-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:server: 'source' interface ignored from 'default-server' directive


author: xinghe <xinghe2@h-partners.com> - 2.6.6-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:haproxy: only tid 0 must not sleep if got signal
         fix timehopping in freq_ctr_total


author: yaoxin <yao_xin001@hoperun.com> - 1.14.5-1
changelog:
  - Update to 1.14.5:
    * Added signed Windows msi binary and signed Apple dmg binary files.
    * Moved examples to the HDF5Examples folder in the source tree.
    * Added support for using zlib-ng package as the zlib library
    * Disable CMake UNITY_BUILD for hdf5
    * Removed "function/code stack" debugging configuration option
    * Added configure options for enabling/disabling non-standard programming language features
    * Added the CMake variable HDF5_ENABLE_ROS3_VFD to the HDF5 CMake config
      file hdf5-config.cmake. This allows it to easily detect if the library
      has been built with or without read-only S3 functionality.
    * Fixed many CVE:
      CVE-2024-29157,CVE-2024-29158,CVE-2024-29159,CVE-2024-29160,CVE-2024-29161,CVE-2024-29162
      CVE-2024-29163,CVE-2024-29164,CVE-2024-29165,CVE-2024-29166,CVE-2024-32605,CVE-2024-32606
      CVE-2024-32607,CVE-2024-32608,CVE-2024-32609,CVE-2024-32610,CVE-2024-32611,CVE-2024-32612
      CVE-2024-32613,CVE-2024-32614,CVE-2024-32615,CVE-2024-32616,CVE-2024-32617,CVE-2024-32618
      CVE-2024-32619,CVE-2024-32620,CVE-2024-32621,CVE-2024-32622,CVE-2024-32623,CVE-2024-32624
      CVE-2024-33873,CVE-2024-33874,CVE-2024-33875,CVE-2024-33876,CVE-2024-33877,CVE-2018-13871
      CVE-2018-13875,CVE-2018-14034


author: chenyanpanHW <chenyanpan@huawei.com> - 9.58-2
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-hdparm-fallocate-close-fd.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-hdparam-Remove-security_password-printing.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0003-hdparm-fix-fd-leak-in-sysfs_write_attr.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: baizhonggui <baizhonggui@huawei.com> - 540.1.linux3-18
changelog:
  - Fix building error: make[1]: cc: No such file or directory
  - Add gcc in BuildRequires 
  - Add hfsplus-tools-sysctl.patch


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-15
changelog:
  - Type:CVE
  - ID:CVE-2023-27522, CVE-2023-25690
  - SUG:restart
  - DESC:fix CVE-2023-27522, CVE-2023-25690


author: chengyechun <chengyehcun1@huawei.com> - 2.4.51-16
changelog:
  - Type:bugfix
  - ID:
  - SUG:restart
  - DESC:Report an error if the AJP backend sends an invalid number of headers
         handled a negative value when parsing the config
         avoid delimiting the query with a backreference
         fix missing APLOGNO


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-17
changelog:
  - Type:bugfix
  - ID:
  - SUG:restart
  - DESC:Fix double encoding of the uri-path of the request
         Do not match the extention against possible query string
         Do not double encode slashes
         Check before forwarding that a nocanon path has not been rewriteen


author: panchenbo <panchenbo@kylinsec.com.cn> - 2.4.51-18
changelog:
  - Type:bugfix
  - ID:
  - SUG:NA
  - DESC:add sw_64 support,optimize sw build patch,add loongarch64 support


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-21
changelog:
  - Type:CVE
  - ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
  - SUG:NA
  - DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-22
changelog:
  - Type:CVE
  - ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
  - SUG:NA
  - DSEC:fix some CVEs


author: zhongtao <zhongtao17@huawei.com> - 2.1.5-7
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: bugfix of background execution exec error command and setting negative cpu-rt issue


author: zhongtao <zhongtao17@huawei.com> - 2.1.5-8
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: remove extra %s in CreateContainerLogSymlink and allow env variable has an empty value


author: wujichao <wujichao1@huawei.com> - 2.1.5-12
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: combine ten similar submissions into one(0125-fix-clang-build-error.patch) and Upgrade from upstream


author: yangchenguang <yangchenguang@kylinsec.com.cn> - 72.1-7
changelog:
  - icu already supports loongarch64 architecture
  - Remove loongarch64 patch and modify sw_64 support patch to use all arch


author: chenyanpanHW <chenyanpan@huawei.com> - 10.06-2
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-run-ifdown-on-all-interfaces.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-initscripts-add-udev-wait-dependency-for-network.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-mod-network-function-when-NM-unmanage-devices.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-initscripts-set-PERSISTENT_DHCLIENT-default-to-yes.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-network-need-chkconfig-on.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-restart-network-warning.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/new-network-fork-to-start-dhcp.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/exec-udevadm-settle-when-network-start.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/remove-rename_device_lock-when-process-does-not-exis.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: gaoxingwang <gaoxingwang1@huawei.com> - 10.12-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:remove redundant provide for service cmd and delete unnecessary obseletes to fix upgrade problem


author: chenyanpanHW <chenyanpan@huawei.com> - 1.8.18-17
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-CVE-2011-4339-OpenIPMI.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-openssl.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0003-ipmitool-1.8.11-set-kg-key.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0004-slowswid.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0005-zero-initialize-the-recv-structure-on-the-stack.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ID-477-fru-Fix-decoding-of-non-text-data-in-get_fru_.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ID-480-ipmitool-coredumps-in-EVP_CIPHER_CTX_init.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ID-480-Call-EVP_CIPHER_CTX_free-instead-of-EVP_CIPHE.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ID-472-Fix-The-Most-recent-Addition-Erase-date.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ID-508-Fix-segfaults-in-dcmi-command-handlers.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ID-508-Refix-6d9c540-Forgotten-changes.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/Re-apply-commit-58d510f90feb.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/fru-internaluse-Fix-segmentation-fault-9.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/Replace-user_id-masks-with-a-macro-8.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/plugins-open-Fix-for-interrupted-select.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/plugins-open-Properly-enable-event-receiver-35.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/lanplus-Cleanup.-Refix-6dec83ff-fix-be2c0c4b.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/lanplus-Fix-segfault-for-truncated-dcmi-response.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/helper-add-free_n-method-to-handle-clearing-pointers.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/sol-Make-interface-timeout-obey-the-N-option.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/hpm-Fix-resource-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/fru-fixup-array-bounds-checking.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/fru-swap-free-calls-for-free_n.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/Refactor-free_n-function.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/open-checking-received-msg-id-against-expectation.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ipmitool-CVE-2020-5208-Fix-buffer-overflow-vulnerabilities.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ipmitool-CVE-2020-5208-Fix-buffer-overflow-in-ipmi_spd_print_fru.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ipmitool-CVE-2020-5208-Fix-buffer-overflow-in-ipmi_get_session_info.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ipmitool-CVE-2020-5208-Fix-buffer-overflow.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ipmitool-CVE-2020-5208-Fix-buffer-overflows-in-get_lan_param_select.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ipmitool-CVE-2020-5208-Fix-id_string-buffer-overflows.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/fix-variable-definition-error-with-gcc-10.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-lanplus-Realloc-the-msg-if-the-payload_length-gets-u.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-lan-channel-Fix-set-alert-on-off.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: gaihuiying <gaihuiying1@huawei.com> - 1.8.18-18
changelog:
  - Type:requirement
  - ID:NA
  - SUG:NA
  - DESC:separate exchange-bmc-os-info,bmc-snmp-proxy from ipmitool


author: mengkanglai <mengkanglai2@huawei.com> - 1.8.18-20
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:lan channel fix set alert on off and lanplus realloc the msg if the payload_length gets update


author: gaoxingwang <gaoxingwang1@huawei.com> - 1:5.15.0-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add epoch version in changelog to fix check_spec_file ci failure


author: gaoxingwang <gaoxingwang1@huawei.com> - 1:5.15.0-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ipnetns: fix fd leak with 'ip netns set'
         iproute2: optimize code and fix some mem-leak risk
         iproute_lwtunnel: fix array boundary check
         iproute_lwtunnel: fix possible use of NULL when malloc()
         m_action: fix warning of overwrite of const string
         netem: fix NULL deref on allocation failure
         nstat: fix potential NULL deref
         rdma/utils: fix some analyzer warnings
         rt_names: check for malloc() failure
         tc/prio: handle possible truncated kernel response
         tc_exec: don't dereference NULL on calloc failure
         tc_util fix unitialized warning
         iptunnel: detect protocol mismatch on tunnel change
         ipmaddr: fix dereference of NULL on malloc() failure


author: mufengyan <mufengyan@hisilicon.com> - 1:5.15.0-15
changelog:
  - Type:feature
  - ID:NA
  - SUG:NA
  - DESC:This patch adds ARPHRD_UB for iproute2 and support name
         parse for it and deletes the display of vf address
         information in the pf


author: liubo <liubo335@huawei.com> - 1:5.15.0-17
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:libnetlink: Fix memory leak in __rtnl_talk_iov()
         tc: ct: Fix invalid pointer dereference
         tc_util: Change datatype for maj to avoid overflow issue
         tc_util: Fix no error return when large parent id used
         xfrm: prepare state offload logic to set mode


author: liubo <liubo335@huawei.com> - 1:5.15.0-18
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:f_flower: Treat port 0 as valid
         ip: error out if iplink does not consume all options
         iplink_bridge: fix incorrect root id dump
         ss: change aafilter port from int to long (inode support)
         ss: Fix socket type check in packet_show_line()
         ss: print unix socket "ports" as unsigned int (inode)
         Add utility to convert an unsigned int to string
         Add get_long utility and adapt get_integer accordingly
         utils: fix get_integer() logic


author: liweigang <liweiganga@uniontech.com> - 1:5.15.0-19
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: lnstat: Fix deref of null in print_json() function
          iproute2: prevent memory leak
          libnetlink: validate nlmsg header length first
          tc: remove tcindex classifier
          ip: fix memory leak in 'ip maddr show'
          ila: fix potential snprintf buffer overflow
          bridge: fix potential snprintf overflow
          mnl_utils: sanitize incoming netlink payload size in callbacks


author: caokeming <caokeming@huawei.com> - 1:5.15.0-20
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ctrl: Fix fd leak in ctrl_list()
         ctrl: Fix fd leak in ctrl_listen()
         devlink: use snprintf instead of sprintf


author: zhanghao <zhanghao383@huawei.com> - 1.8.7-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:extensions among Fix for use with ebtables restore
  extensions libebt redirect Fix xlate return code
  extensions libipt ttl Sanitize xlate callback
  iptables restore  Free handle with test also
  nft Plug memleak in nft rule zero counters
  iptables Plug memleaks in print firewall
  ebtables translate Print flush command after parsing is finished


author: yanglu <yanglu72@h-partners.com> - 1.8.7-15
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:libxtables：Fix memleak in xtopt_parse_hostmask
         nft：Avoid memleak in error path of nft_cmd_new
         exit if called by setuid executeable
         fix for non verbose check command
         use fully random so that nft can understand
         Use xtables_malloc in mnl_err_list_node_add
         nft: Special casing for among match in compare_matches
         extensions: libipt_icmp: Fix confusion between 255/255 and any
         Revert libiptc: fix wrong maptype of base chain counters on restore
         extensions: Fix checking of conntrack --ctproto 0
         libxtables: xtoptions: Fix for non-CIDR-compatible hostmasks
         libxtables: xtoptions: Prevent XTOPT_PUT with XTTYPE_HOSTMASK
         libiptc: Fix for another segfault due to chain index NULL pointer
         libiptc: Fix for segfault when renaming a chain


author: yanglu <yanglu72@h-partners.com> - 1.8.7-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:libxtables:Fix memleak of matches' udata
         Fix parsing of empty string arg in '-c' option


author: qinyu <qinyu32@huawei.com> - 3:1.8.0-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC: procinterrupts: Fix IRQ name parsing on certain arm64 SoC


author: langfei <langfei@huawei.com> - 3:1.8.0-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC: filter console only output when using journal mode;
  -	Slience ... rebalancing messages for unmigratable IRQs;
  -	Avoid repeated affinity checks when no change is necessary;
  -	activate_mapping:set errsave before first jump to the error label.


author: langfei <langfei@huawei.com> - 3:1.8.0-13
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC: Fix socket API being blocked for 10s;
  -	Flush file brfore closing;
  -	Check fflush() return value.


author: daisicheng <daisicheng@huawei.com> - 0.9.6-13
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:fix the problem that the /var/lib/isula-build/storage/overlay is still existed when killing daemon


author: jingxiaolu <lujingxiao@huawei.com> - 0.9.6-15
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:add read lock in load/import/pull to fix GC preempts to exit subprocess


author: daisicheng <daisicheng@huawei.com> - 0.9.6-21
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix the problem that isula-build service did not stop after it removed


author: kuenking111 <wangkun49@huawei.com> -1:1.8.0.422-b05.4
changelog:
  - Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
  - Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.422-b05.6
changelog:
  - let support-KAE-zip.patch not install libz.so on loongarch64
  - update LoongArch64 port to 8u422
  - fix changelog date error


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.432-b05.rolling
changelog:
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
  - modified GCC-12-reports-some-compiler-warnings.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch


author: songliyang <songliyang@kylinos.cn> - 1:17.0.12.7-1
changelog:
  - update Loongarch support patch to fix the error while applying in prep stage
  - delete redundant symbols while viewing spec file with vim that make it strange on highlight


author: kuenking111 <wangkun49@huawei.com> - 1:17.0.12.7-2
changelog:
  - add Huawei-Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch
  - add Backport-7036144-GZIPInputStream-readTrailer-uses-faulty-avai.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> - 1:17.0.12.7-5
changelog:
  - Add Backport-of-JDK-8305680.patch
  - Add Backport-of-JDK-8305937.patch
  - Add 8338785-The-java.awt.datatransfer.SystemFlavorMap-FL.patch
  - Add 8337982-Remove-dead-undef-assrt0n.patch
  - Add 8337274-Remove-repeated-the-in-StyleSheet.create-Sma.patch
  - Add 8335610-DiagnosticFramework-CmdLine-is_executable-co.patch
  - Add Backport-of-8333088-ubsan-shenandoahAdaptiveHeuristi.patch
  - Add Backport-of-8339351-Remove-duplicate-line-in-FileMap.patch
  - Add Backport-of-8330191-Fix-typo-in-precompiled.hpp.patch
  - Add Backport-of-8337712-Wrong-javadoc-in-java.util.Date-.patch


author: Benshuai5D <zhangyunbo7@huawei.com> - 1:17.0.13.11-0
changelog:
  - modify 8264805-Backport-Ahead-of-Time-Compiler.patch
  - modify 8264806-Backport-Graal-Compiler.patch
  - modify Add-JBooster-Lazy-AOT-module.patch
  - modify Apply-TBI-to-ZGC-of-JDK17.patch
  - modify Backport-Important-Fixed-Issues.patch
  - modify KAE-zip-Features.patch
  - modify add-version-txt.patch
  - add Huawei-Fix-JBooster-file-issue-caused-by-os-write-change.patch
  - update to 17.0.13+11(ga)


author: fengtao <fengtao40@huawei.com> - 0.15-5
changelog:
  - we got upgrade error when upgrade json-c from very low version,
    for example json-c-0.11-5. because old version has a softlink:
    /usr/include/json-c  --> /usr/include/json
    and now, softlink has been removed. so, we fix this in pretrans


author: mengkanglai <mengkanglai2@huawei.com> - 0.16-2
changelog:
  - add backport-Add-test-to-check-for-the-memory-leak-mentioned-in-issue-781.patch
  - add backport-Fix-memory-leak-with-emtpy-strings-in-json_object_set_string.patch
  - add backport-json_object_from_fd_ex-fail-if-file-is-too-large.patch


author: sunhai <sunhai10@huawei.com> - 0.16-4
changelog:
  - backport patch to Fix build with clang-15+
  - backport patch to Fix json_tokener_parse_ex: handle out of memory errors


author: Li Nan <linan122@huawei.com> - 5.10.0-228.0.0.130
changelog:
  - !11504 sdma-dae support debugfs and fast mode
  - !10195  xfs: Fix agf_longest update error
  - !11505  Misc minor bugfix for HNS RoCE
  - RDMA/hns: Fix endian issues
  - RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
  - RDMA/hns: Fix "Should it be static?" warnings
  - RDMA/hns: Fix dereference of noderef expression
  - RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
  - drivers:misc:sdma-dae: add fast mode
  - !11479 【OLK 5.10】some bugfixes for hns3 driver
  - driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
  - driver:misc:sdma-dae: add debugfs of sdma-dae
  - !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
  - !11478  coresight: etm4x: Fix CPU idle PM support for ETE
  - net: hns3: fix concurrent setting vlan filter issue
  - net: hns3: fix snprintf() is printing too much problem
  - net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
  - net: hns3: fix spelling mistake "reg_um" -> "reg_num"
  - net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
  - net: hns3:support enable or disable pfc strom prevent
  - !11491  Fix CVE-2022-48887
  - net: hns3: fix wrong use of semaphore up
  - !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
  - !11462  mptcp: pm: avoid possible UaF when selecting endp
  - !11470 OLK-5.10 Rever gpiolib bugfix
  - drm/vmwgfx: Remove rcu locks from user resources
  - drm/vmwgfx: Remove vmw_user_bo_noref_release
  - drm/vmwgfx: Introduce ttm reference object find function
  - RDMA/hns: Fix missing unlock of scc_mutex in error path
  - !11487  bna: ensure the copied buf is NUL terminated
  - bna: ensure the copied buf is NUL terminated
  - coresight: etm4x: Fix access to resource selector registers
  - coresight: etm4x: Safe access for TRCQCLTR
  - coresight: etm4x: Do not save/restore Data trace control registers
  - coresight: etm4x: Do not hardcode IOMEM access for register restore
  - coresight: etm4x: add CPU hotplug support for probing
  - !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
  - gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
  - Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
  - !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
  - !11466 OLK-5.10 Rever spi bugfix
  - net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
  - net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
  - net: hns3: don't auto enable misc vector
  - spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
  - spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
  - Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
  - Revert "spi: Add verification for the max_frequency provided by the firmware"
  - !11104  soc: qcom: pdr: protect locator_addr with the main mutex
  - !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
  - !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
  - net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
  - mptcp: pm: avoid possible UaF when selecting endp
  - !11282  CVE-2024-44935
  - !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
  - !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
  - !11437 sdma-dae:fix code review problems
  - nfs: fix memory leak in error path of nfs4_do_reclaim
  - ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
  - !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
  - zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
  - !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
  - !11015  nvme-pci: add missing condition check for existence of mapped data
  - !11432 v2  mm/block: add bdi sysfs knobs
  - !11316  block: fix pin count management when merging same-page segments
  - drm/amd/display: Fix null pointer deref in dcn20_resource.c
  - drivers:misc:sdma-dae: fix icsl code check problems
  - coresight: etm4x: Fix unbalanced pm_runtime_enable()
  - cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
  - mm: fix arithmetic for bdi min_ratio
  - mm: fix arithmetic for max_prop_frac when setting max_ratio
  - mm: document /sys/class/bdi/<bdi>/min_ratio_fine knob
  - mm: add /sys/class/bdi/<bdi>/min_ratio_fine knob
  - mm: add bdi_set_min_ratio_no_scale() function
  - mm: document /sys/class/bdi/<bdi>/max_ratio_fine knob
  - mm: add /sys/class/bdi/<bdi>/max_ratio_fine knob
  - mm: add bdi_set_max_ratio_no_scale() function
  - mm: document /sys/class/bdi/<bdi>/min_bytes knob
  - mm: add /sys/class/bdi/<bdi>/min_bytes knob
  - mm: add bdi_set_min_bytes() function
  - mm: split off __bdi_set_min_ratio() function
  - mm: add bdi_get_min_bytes() function
  - mm: document /sys/class/bdi/<bdi>/max_bytes knob
  - mm: add knob /sys/class/bdi/<bdi>/max_bytes
  - mm: add bdi_set_max_bytes() function
  - mm: split off __bdi_set_max_ratio() function
  - mm: add bdi_get_max_bytes() function
  - mm: use part per 1000000 for bdi ratios
  - mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
  - mm: document /sys/class/bdi/<bdi>/strict_limit knob
  - mm: add knob /sys/class/bdi/<bdi>/strict_limit
  - mm: add bdi_set_strict_limit() function
  - !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
  - !11207  kprobe support %pd/%pD type
  - !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
  - !11391  fix CVE-2023-45896
  - !11405  dma: fix call order in dmam_free_coherent
  - !11237  CVE-2024-43907
  - !11409  btrfs: do not start relocation until in progress drops are done
  - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
  - !10904 Incorporate some bonding patches as follows(OLK_5.10):
  - !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
  - !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
  - md/raid5: avoid BUG_ON() while continue reshape after reassembling
  - btrfs: do not start relocation until in progress drops are done
  - !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
  - !11403  btrfs: do not WARN_ON() if we have PageError set
  - dma: fix call order in dmam_free_coherent
  - !11394  dmaengine: idxd: Prevent use after free on completion memory
  - btrfs: do not WARN_ON() if we have PageError set
  - fuse: Initialize beyond-EOF page contents before setting uptodate
  - dmaengine: idxd: Prevent use after free on completion memory
  - fs/ntfs3: Add more attributes checks in mi_enum_attr()
  - hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
  - nfsd: map the EBADMSG to nfserr_io to avoid warning
  - block: fix pin count management when merging same-page segments
  - sctp: Fix null-ptr-deref in reuseport_add_sock().
  - sctp: move hlist_node and hashent out of sctp_ep_common
  - perf parse-event bugfix merge
  - perf test: Add parse-events test for aliases with hyphens
  - perf test: Add pmu-events test for aliases with hyphens
  - perf parse-events: Support event alias in form foo-bar-baz
  - drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
  - RDMA/hns: Fix concurrency issue between bond work and bond event
  - RDMA/hns: Fix UAF in clear bond printing
  - RDMA/hns: Encapsulate upper event and lowerstate event handlers
  - RDMA/hns: Register notifier block of bonding events in bond_grp
  - selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
  - Documentation: tracing: add new type '%pd' and '%pD' for kprobe
  - tracing/probes: support '%pD' type for print struct file's name
  - tracing/probes: support '%pd' type for print struct dentry's name
  - soc: qcom: pdr: protect locator_addr with the main mutex
  - nvme-pci: add missing condition check for existence of mapped data
  - xfs: Fix agf_longest update error
  - Fix x86 provides error symbol


author: Li Nan <linan122@huawei.com> - 5.10.0-229.0.0.131
changelog:
  - !11565 ip_notify:Clean up redundant import files
  - network_mgmt: Clean up redundant import files for ip_notify.c.
  - !11521  ipv6: prevent UAF in ip6_send_skb()
  - !11517  ipv6: fix possible UAF in ip6_finish_output2()
  - !11514  fix CVE-2024-44988
  - !11526 IP notify code optimization
  - !11552  mm/hugetlb: fix pgtable lock on pmd sharing
  - network_mgmt: Add ip_notify timer print.
  - !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
  - !11553  mm: fix failure to unmap pte on highmem systems
  - !11488  wifi: nl80211: don't free NULL coalescing rule
  - mm: fix failure to unmap pte on highmem systems
  - mm/hugetlb: fix pgtable lock on pmd sharing
  - ata: libata: Fix memory leak for error path in ata_host_alloc()
  - !11456 Backport 5.10.216 LTS patches from upstream
  - !11484  drm/qxl: Add check for drm_cvt_mode
  - !11457  usb: gadget: core: Check for unset descriptor
  - !11475  Fix CVE-2023-52916
  - !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
  - ipv6: prevent UAF in ip6_send_skb()
  - ipv6: fix possible UAF in ip6_finish_output2()
  - net: dsa: mv88e6xxx: Fix out-of-bound access
  - net: dsa: mv88e6xxx: replace ATU violation prints with trace points
  - net: dsa: mv88e6xxx: read FID when handling ATU violations
  - x86/mtrr: Check if fixed MTRRs exist before saving them
  - !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
  - mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
  - wifi: nl80211: don't free NULL coalescing rule
  - drm/qxl: Add check for drm_cvt_mode
  - media: aspeed: Fix memory overwrite if timing is 1600x900
  - media: aspeed: Fix no complete irq for non-64-aligned width
  - usb: gadget: core: Check for unset descriptor
  - udp: preserve the connected status if only UDP cmsg
  - dma: xilinx_dpdma: Fix locking
  - idma64: Don't try to serve interrupts when device is powered off
  - dmaengine: owl: fix register access functions
  - mtd: diskonchip: work around ubsan link failure
  - stackdepot: respect __GFP_NOLOCKDEP allocation flag
  - net: b44: set pause params only when interface is up
  - ethernet: Add helper for assigning packet type when dest address does not match device address
  - drm/amdgpu: Fix leak when GPU memory allocation fails
  - drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
  - arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
  - Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
  - Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
  - PM / devfreq: Fix buffer overflow in trans_stat_show
  - tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
  - tracing: Show size of requested perf buffer
  - Revert "crypto: api - Disallow identical driver names"
  - net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
  - iavf: Fix TC config comparison with existing adapter TC config
  - i40e: Report MFS in decimal base instead of hex
  - netfilter: nf_tables: honor table dormant flag from netdev release event path
  - mlxsw: spectrum_acl_tcam: Rate limit error message
  - mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
  - ipvs: Fix checksumming on GSO of SCTP packets
  - net: usb: ax88179_178a: stop lying about skb->truesize
  - NFC: trf7970a: disable all regulators on removal
  - mlxsw: core: Unregister EMAD trap using FORWARD action
  - vxlan: drop packets from invalid src-address
  - wifi: iwlwifi: mvm: remove old PASN station when adding a new one
  - ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
  - arm64: dts: mediatek: mt2712: fix validation errors
  - arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
  - arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
  - arm64: dts: mediatek: mt7622: fix IR nodename
  - arm64: dts: mediatek: mt7622: fix clock controllers
  - arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
  - arm64: dts: mediatek: mt7622: add support for coherent DMA
  - arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
  - arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
  - arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
  - nilfs2: fix OOB in nilfs_set_de_type
  - nouveau: fix instmem race condition around ptr stores
  - mei: me: disable RPL-S on SPS and IGN firmwares
  - usb: Disable USB3 LPM at shutdown
  - usb: dwc2: host: Fix dereference issue in DDMA completion flow.
  - Revert "usb: cdc-wdm: close race between read and workqueue"
  - USB: serial: option: add Telit FN920C04 rmnet compositions
  - USB: serial: option: add Rolling RW101-GL and RW135-GL support
  - USB: serial: option: support Quectel EM060K sub-models
  - USB: serial: option: add Lonsung U8300/U9300 product
  - USB: serial: option: add support for Fibocom FM650/FG650
  - USB: serial: option: add Fibocom FM135-GL variants
  - comedi: vmk80xx: fix incomplete endpoint checking
  - thunderbolt: Fix wake configurations after device unplug
  - thunderbolt: Avoid notify PM core about runtime PM resume
  - clk: Get runtime PM before walking tree during disable_unused
  - clk: Initialize struct clk_core kref earlier
  - clk: Print an info line before disabling unused clocks
  - clk: remove extra empty line
  - clk: Mark 'all_lists' as const
  - clk: Remove prepare_lock hold assertion in __clk_release()
  - drm/panel: visionox-rm69299: don't unregister DSI device
  - RDMA/mlx5: Fix port number for counter query in multi-port configuration
  - RDMA/cm: Print the old state when cm_destroy_id gets timeout
  - RDMA/rxe: Fix the problem "mutex_destroy missing"
  - selftests/ftrace: Limit length in subsystem-enable tests
  - btrfs: record delayed inode root in transaction
  - irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
  - x86/apic: Force native_apic_mem_read() to use the MOV instruction
  - selftests: timers: Fix abs() warning in posix_timers test
  - x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
  - btrfs: qgroup: correctly model root qgroup rsv in convert
  - mailbox: imx: fix suspend failue
  - iommu/vt-d: Allocate local memory for page request queue
  - net: ena: Wrong missing IO completions check order
  - net: ena: Fix potential sign extension issue
  - ipv4/route: avoid unused-but-set-variable warning
  - ipv6: fib: hide unused 'pn' variable
  - octeontx2-af: Fix NIX SQ mode and BP config
  - u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
  - net: openvswitch: fix unwanted error log on timeout policy probing
  - nouveau: fix function cast warning
  - media: cec: core: remove length check of Timer Status


author: Li Nan <linan122@huawei.com> - 5.10.0-230.0.0.132
changelog:
  - !11771  tools: move alignment-related macros to new <linux/align.h>
  - !11729  scsi: qedi: Fix crash while reading debugfs attribute
  - tools: move alignment-related macros to new <linux/align.h>
  - !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
  - !11707  btrfs: fix qgroup reserve leaks in cow_file_range
  - !11723 v2  Squashfs: sanity check symbolic link size
  - !11708  CVE-2024-46751
  - !11728  lib: objagg: Fix general protection fault
  - !11727  jfs: fix null ptr deref in dtInsertEntry
  - !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
  - !11690  sch/netem: fix use after free in netem_dequeue
  - !11693  Fix CVE-2024-39501
  - !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
  - !11701  userfaultfd: fix checks for huge PMDs
  - !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
  - scsi: qedi: Fix crash while reading debugfs attribute
  - lib: objagg: Fix general protection fault
  - jfs: fix null ptr deref in dtInsertEntry
  - drm/vmwgfx: Fix a deadlock in dma buf fence polling
  - Squashfs: sanity check symbolic link size
  - btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
  - btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
  - btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
  - btrfs: fix qgroup reserve leaks in cow_file_range
  - btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
  - userfaultfd: fix checks for huge PMDs
  - x86/mm: Fix pti_clone_pgtable() alignment assumption
  - driver core: Fix uevent_show() vs driver detach race
  - selftests: forwarding: devlink_lib: Wait for udev events after reloading
  - drivers: core: synchronize really_probe() and dev_uevent()
  - !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
  - !8831 Add support for Hygon model 7h processors
  - !11665  drm/amd/pm: fix the Out-of-bounds read warning
  - sch/netem: fix use after free in netem_dequeue
  - !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
  - !11649  fix CVE-2024-46714
  - drm/amd/pm: fix the Out-of-bounds read warning
  - !11632  fix CVE-2024-46723
  - !11555 v2  Fix CVE-2024-45025
  - !11588  drm/amd/display: Skip finding free audio for unknown engine_id
  - !11586  jfs: don't walk off the end of ealist
  - !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
  - !11637  netfilter: tproxy: bail out if IP has been disabled on the device
  - !11562  Backport bugfix from mainline
  - drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
  - HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
  - netfilter: tproxy: bail out if IP has been disabled on the device
  - !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
  - !11612  Input: uinput - reject requests with unreasonable number of slots
  - drm/amdgpu: fix ucode out-of-bounds read
  - !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
  - drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
  - drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
  - drivers/perf: hisi_pcie: Record hardware counts correctly
  - docs: fix 'make htmldocs' warning in perf
  - docs: perf: Fix build warning of hisi-pcie-pmu.rst
  - docs: perf: Update usage for target filter of hisi-pcie-pmu
  - drivers/perf: hisi: Add TLP filter support
  - Documentation: perf: Indent filter options list of hisi-pcie-pmu
  - docs: perf: Fix PMU instance name of hisi-pcie-pmu
  - docs: perf: Add description for HiSilicon PCIe PMU driver
  - smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
  - !11606  Fix iBMA bug and change version
  - mmc: mmc_test: Fix NULL dereference on allocation failure
  - Input: uinput - reject requests with unreasonable number of slots
  - !11592  CVE-2024-36915
  - !10933  drm/amd/display: Check index msg_id before read or write
  - !10936  ata: libata-core: Fix null pointer dereference on error
  - !11604 hns3 udma: add resource allocation and change name of struct
  - BMA: Fix edma driver initialization problem and change the version number.
  - !11593  gtp: pull network headers in gtp_dev_xmit()
  - hns3 udma: add prefix hns3 for udma.
  - !11583  nfs: always check dreq->error after a commit
  - !11584  vfs: Don't evict inode under the inode lru traversing context
  - !11577  tcp: fix one compile error in __inet_hash_connect()
  - !11578  net: fix one compile error in net_rship_refresh_timeout()
  - gtp: pull network headers in gtp_dev_xmit()
  - nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
  - net: add copy_safe_from_sockptr() helper
  - drm/amd/display: Skip finding free audio for unknown engine_id
  - !11574  nilfs2: add missing check for inode numbers on directory entries
  - jfs: don't walk off the end of ealist
  - vfs: Don't evict inode under the inode lru traversing context
  - nfs: always check dreq->error after a commit
  - kobject_uevent: Fix OOB access within zap_modalias_env()
  - net: fix one compile error in net_rship_refresh_timeout()
  - tcp: fix one compile error in __inet_hash_connect()
  - nilfs2: add missing check for inode numbers on directory entries
  - !11570  NFSD: Fix ia_size underflow
  - NFSD: Fix ia_size underflow
  - mm/compaction: correctly return failure with bogus compound_order in strict mode
  - mm/hugetlb: fix nodes huge page allocation when there are surplus pages
  - mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
  - bootmem: use kmemleak_free_part_phys in free_bootmem_page
  - bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
  - mm: migrate: fix THP's mapcount on isolation
  - mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
  - fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
  - s390/cio: rename bitmap_size() -> idset_bitmap_size()
  - bitmap: introduce generic optimized bitmap_size()
  - fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
  - enable CONFIG_BPF_LSM option by default to use safegurad
  - ata: libata-core: Fix null pointer dereference on error
  - drm/amd/display: Check index msg_id before read or write
  - perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
  - EDAC/amd64: Add support for Hygon family 18h model 7h
  - x86/amd_nb: Add support for Hygon family 18h model 7h
  - Fix error kernel provides


author: Li Nan <linan122@huawei.com> - 5.10.0-231.0.0.133
changelog:
  - !11964  drm/amd/pm: Fix negative array index read
  - !12073  kprobes: Fix deadlock issue with kmemleak
  - !12062  CVE-2024-46857
  - kprobes: Fix deadlock issue with kmemleak
  - !12050  um: line: always fill *error_out in setup_one_line()
  - !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
  - !12020  drm/amd/display: Check gpio_id before used as array index
  - !12024  ASoC: meson: axg-card: fix 'use-after-free'
  - !12034  ksmbd: discard write access to the directory open
  - !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
  - !11942  sbitmap: backport bugfix patches
  - net/mlx5: Fix bridge mode operations when there are no VFs
  - net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
  - !11998  drm/amd/display: Add array index check for hdcp ddc access
  - !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
  - um: line: always fill *error_out in setup_one_line()
  - !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
  - !12015  perf/x86/intel: Limit the period on Haswell
  - drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
  - !12028  Fix CVE-2024-44958 for olk-5.10
  - !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
  - !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
  - ksmbd: discard write access to the directory open
  - serial: sc16is7xx: fix invalid FIFO access with special register set
  - sched/smt: Fix unbalance sched_smt_present dec/inc
  - sched/smt: Introduce sched_smt_present_inc/dec() helper
  - sched: Revert fix unbalance sched_smt_present dec/inc
  - ASoC: meson: axg-card: fix 'use-after-free'
  - drm/amd/display: Check gpio_id before used as array index
  - !11999  nvmet-tcp: fix kernel crash if commands allocation fails
  - perf/x86/intel: Limit the period on Haswell
  - !12006 v3  add steal_task for cgroup
  - rtmutex: Drop rt_mutex::wait_lock before scheduling
  - sched/core: Add mutex lock to protect steal_task
  - sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
  - sched/fair: Set the maximum number of steal attempts
  - sched/fair: Count the number of tasks marked as steal_task on cfs_rq
  - sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
  - sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
  - sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
  - Revert "sched: add mutex lock to protect qos_level"
  - !11907  ksmbd: unset the binding mark of a reused connection
  - drm/amd/display: Assign linear_pitch_alignment even for VM
  - nvmet-tcp: fix kernel crash if commands allocation fails
  - drm/amd/display: Add array index check for hdcp ddc access
  - !11976  CVE-2024-46814
  - !11941  usb: typec: ucsi: Fix null pointer dereference in trace
  - !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
  - !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
  - drm/amd/display: Check msg_id before processing transcation
  - drm/amd/pm: Fix negative array index read
  - Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
  - !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
  - !11916  ethtool: check device is present when getting link settings
  - !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
  - !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
  - !11928  Some bug fix patches for OLK-5.10 hns RoCE
  - btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
  - blk-mq: Fix potential io hung for shared sbitmap per tagset
  - blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
  - sbitmap: fix lockup while swapping
  - sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
  - sbitmap: fix possible io hung due to lost wakeup
  - block: Fix lockdep warning in blk_mq_mark_tag_wait
  - blk-mq: fix potential io hang by wrong 'wake_batch'
  - sbitmap: correct wake_batch recalculation to avoid potential IO hung
  - blk-mq: Fix wrong wakeup batch configuration which will cause hang
  - blk-mq: fix tag_get wait task can't be awakened
  - usb: typec: ucsi: Fix null pointer dereference in trace
  - of/irq: Prevent device address out-of-bounds read in interrupt map walk
  - KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
  - RDMA/hns: Fix restricted __le16 degrades to integer issue
  - RDMA/hns: Optimize hem allocation performance
  - btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
  - !11925  nilfs2: protect references to superblock parameters exposed in sysfs
  - !11914  sched: fix a deadlock in task_net_group()
  - !11843  CVE-2024-46771
  - RDMA/hns: Fix ah error counter in sw stat not increasing
  - Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
  - RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
  - RDMA/hns: Use one CQ bank per context for HIP09
  - RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
  - nilfs2: protect references to superblock parameters exposed in sysfs
  - !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
  - hwmon: (lm95234) Fix underflows seen when writing limit attributes
  - ethtool: check device is present when getting link settings
  - !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
  - !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
  - !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
  - !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
  - !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
  - sched: fix a deadlock in task_net_group()
  - !11867  pktgen: use cpus_read_lock() in pg_net_init()
  - !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
  - ksmbd: unset the binding mark of a reused connection
  - !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
  - !11903  scsi: aacraid: Fix double-free on probe failure
  - !11875  btrfs: handle errors from btrfs_dec_ref() properly
  - scsi: aacraid: Fix double-free on probe failure
  - !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
  - usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
  - bcache: fix variable length array abuse in btree_iter
  - scsi: bfa: Ensure the copied buf is NUL terminated
  - enic: Validate length of nl attributes in enic_set_vf_port
  - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
  - ALSA: usb-audio: Stop parsing channels bits when all channels are found.
  - !11881  PCI: Add missing bridge lock to pci_bus_lock()
  - !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
  - !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
  - !11866 v2  drm/amd/display: Ensure index calculation will not overflow
  - !11791  nilfs2: fix missing cleanup on rollforward recovery error
  - hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
  - pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
  - !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
  - usb: dwc3: st: fix probed platform device ref count on probe error path
  - PCI: Add missing bridge lock to pci_bus_lock()
  - btrfs: handle errors from btrfs_dec_ref() properly
  - !11767 [sync] PR-11733:  Input: MT - limit max slots
  - !11847  bpf: verifier: prevent userspace memory access
  - !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
  - !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
  - NFSD: Reset cb_seq_status after NFS4ERR_DELAY
  - pktgen: use cpus_read_lock() in pg_net_init()
  - drm/amd/display: Ensure index calculation will not overflow
  - VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
  - !11494  ext4: Fix race in buffer_head read fault injection
  - !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
  - !11673  netem: fix return value if duplicate enqueue fails
  - !11810  apparmor: fix possible NULL pointer dereference
  - !11805  drm/amdgpu: Fix out-of-bounds write warning
  - !11678  udf: Avoid excessive partition lengths
  - !11680  binder: fix UAF caused by offsets overwrite
  - !11784  perf/x86: Serialize set_attr_rdpmc()
  - !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
  - bpf: verifier: prevent userspace memory access
  - can: bcm: Clear bo->bcm_proc_read after remove_proc_entry().
  - can: bcm: Remove proc entry when dev is unregistered.
  - drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
  - !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
  - !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
  - !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
  - uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
  - selinux,smack: don't bypass permissions check in inode_setsecctx hook
  - apparmor: fix possible NULL pointer dereference
  - drm/amdgpu: Fix out-of-bounds write warning
  - modify for ICSL.
  - can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
  - nilfs2: fix missing cleanup on rollforward recovery error
  - perf/x86: Serialize set_attr_rdpmc()
  - !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
  - !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
  - !11752  driver: iio: add missing checks on iio_info's callback access
  - !11773  A group of optimization and bug fix for numa-affinity
  - mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
  - mm: numa-affinity: adapt for task_numa_placement
  - mm: numa-affinity: adapt for should_numa_migrate_memory
  - mm: numa-affinity: add helper numa_affinity_sampling_enabled()
  - mm: thp: support to control numa migration
  - Input: MT - limit max slots
  - driver: iio: add missing checks on iio_info's callback access
  - ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
  - powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
  - hwmon: (adc128d818) Fix underflows seen when writing limit attributes
  - media: xc2028: avoid use-after-free in load_firmware_cb()
  - binder: fix UAF caused by offsets overwrite
  - udf: Avoid excessive partition lengths
  - wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
  - netem: fix return value if duplicate enqueue fails
  - ext4: Fix race in buffer_head read fault injection


author: Li Nan <linan122@huawei.com> - 5.10.0-232.0.0.134
changelog:
  - !12102  Fix CVE-2024-46826
  - !12219 v7  xfs: some fix for forcealign
  - !12121  CVE-2024-43855
  - !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
  - xfs: correct the truncate blocksize of forcealign
  - xfs: refactor the truncating order
  - iomap: pass blocksize to iomap_truncate_page()
  - math64: add rem_u64() to just return the remainder
  - xfs: only bunmap align in datafork for forcealign
  - xfs: forcealign not compatible with reflink and realtime device
  - xfs: simplify extent allocation alignment
  - xfs: don't attempting non-aligned fallbacks alloc for forcealign
  - xfs: Don't revert allocated offset for forcealign
  - xfs: align args->minlen for forced allocation alignment
  - xfs: always tail align maxlen allocations
  - xfs: only allow minlen allocations when near ENOSPC
  - !12136 Backport some SAS patches to OLK-5.10
  - !12215  net/hinic3: fix version showed in ethtool
  - !12166  crypto: stm32/cryp - call finalize with bh disabled
  - !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
  - net/hinic3: fix version showed in ethtool
  - !12142  nfc: pn533: Add poll mod list filling check
  - !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
  - !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
  - atm: idt77252: prevent use after free in dequeue_rx()
  - !12172  fou: remove warn in gue_gro_receive on unsupported protocol
  - !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
  - ima: Avoid blocking in RCU read-side critical section
  - Revert "ima: Avoid blocking in RCU read-side critical section"
  - !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
  - !12133  ALSA: line6: Fix racy access to midibuf
  - fou: remove warn in gue_gro_receive on unsupported protocol
  - xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
  - crypto: stm32/cryp - call finalize with bh disabled
  - bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
  - !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
  - !12126  ice: Add netif_device_attach/detach into PF reset flow
  - !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
  - !12135 Backport 5.10.217 LTS patches from upstream
  - regulator: core: fix debugfs creation regression
  - hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
  - mei: me: add lunar lake point M DID
  - ASoC: tegra: Fix DSPK 16-bit playback
  - net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
  - iio: accel: mxc4005: Interrupt handling fixes
  - iio:imu: adis16475: Fix sync mode setting
  - ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
  - usb: dwc3: core: Prevent phy suspend during init
  - usb: xhci-plat: Don't include xhci.h
  - usb: gadget: f_fs: Fix a race condition when processing setup packets.
  - usb: gadget: composite: fix OS descriptors w_value logic
  - usb: ohci: Prevent missed ohci interrupts
  - usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
  - usb: typec: ucsi: Fix connector check on init
  - usb: typec: ucsi: Check for notifications after init
  - arm64: dts: qcom: Fix 'interrupt-map' parent address cells
  - btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
  - net: bridge: fix corrupted ethernet header on multicast-to-unicast
  - kcov: Remove kcov include from sched.h and move it to its users.
  - hwmon: (corsair-cpro) Protect ccp->wait_input_report with a spinlock
  - hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
  - hwmon: (corsair-cpro) Use a separate buffer for sending commands
  - net:usb:qmi_wwan: support Rolling modules
  - drm/nouveau/dp: Don't probe eDP ports twice harder
  - fs/9p: drop inodes immediately on non-.L too
  - clk: Don't hold prepare_lock when calling kref_put()
  - gpio: crystalcove: Use -ENOTSUPP consistently
  - gpio: wcove: Use -ENOTSUPP consistently
  - 9p: explicitly deny setlease attempts
  - fs/9p: translate O_TRUNC into OTRUNC
  - selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
  - MIPS: scall: Save thread_info.syscall unconditionally on entry
  - gpu: host1x: Do not setup DMA for virtual devices
  - scsi: target: Fix SELinux error when systemd-modules loads the target module
  - btrfs: always clear PERTRANS metadata during commit
  - btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
  - tools/power turbostat: Fix Bzy_MHz documentation typo
  - tools/power turbostat: Fix added raw MSR output
  - ata: sata_gemini: Check clk_enable() result
  - net: bcmgenet: Reset RBUF on first open
  - ALSA: line6: Zero-initialize message buffers
  - btrfs: return accurate error code on open failure in open_fs_devices()
  - net: mark racy access on sk->sk_rcvbuf
  - wifi: cfg80211: fix rdev_dump_mpp() arguments order
  - wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
  - gfs2: Fix invalid metadata access in punch_hole
  - scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
  - net: gro: add flush check in udp_gro_receive_segment
  - net: bridge: fix multicast-to-unicast with fraglist GSO
  - net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
  - cxgb4: Properly lock TX queue for the selftest.
  - ASoC: meson: cards: select SND_DYNAMIC_MINORS
  - ASoC: Fix 7/8 spaces indentation in Kconfig
  - net: qede: use return from qede_parse_actions()
  - net: qede: use return from qede_parse_flow_attr() for flow_spec
  - net: qede: use return from qede_parse_flow_attr() for flower
  - net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
  - s390/vdso: Add CFI for RA register to asm macro vdso_func
  - net l2tp: drop flow hash on forward
  - s390/mm: Fix clearing storage keys for huge pages
  - s390/mm: Fix storage key clearing for guest huge pages
  - wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
  - nfc: pn533: Add poll mod list filling check
  - arm64/mpam: Be compatible with MPAM architecture v1.x
  - scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
  - scsi: libsas: Fix the failure of adding phy with zero-address to port
  - scsi: libsas: Set port when ex_phy is added or deleted
  - scsi: libsas: Move sas_add_parent_port() to sas_expander.c
  - scsi: libsas: Add helper for port add ex_phy
  - ALSA: line6: Fix racy access to midibuf
  - sched: sch_cake: fix bulk flow accounting logic for host fairness
  - ice: Add netif_device_attach/detach into PF reset flow
  - bpf: Remove tst_run from lwt_seg6local_prog_ops.
  - !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
  - !12043  s390/sclp: Prevent release of buffer in I/O
  - md: ensure child flush IO does not affect origin bio->bi_status
  - md: Remove flush handling
  - !8834 Add support for Hygon model 10h processors
  - !12105  sched/fair: Fix the condition in overload_clear
  - !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
  - !12003  perf cpumap: Wrapper for CPU map indices
  - !12096  CVE-2024-46858
  - !12095  net: dpaa: Pad packets to ETH_ZLEN
  - !12094  netfilter: nft_socket: fix sk refcount leaks
  - !12089  USB: usbtmc: prevent kernel-usb-infoleak
  - sched/fair: Fix the condition in overload_clear
  - sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
  - ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
  - ELF: fix kernel.randomize_va_space double read
  - mptcp: pm: Fix uaf in __timer_delete_sync
  - mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
  - mptcp: export lookup_anno_list_by_saddr
  - net: dpaa: Pad packets to ETH_ZLEN
  - netfilter: nft_socket: fix sk refcount leaks
  - !12088  tracing: Have tracing_max_latency inc the trace array ref count
  - USB: usbtmc: prevent kernel-usb-infoleak
  - tracing: Have tracing_max_latency inc the trace array ref count
  - !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
  - !12084  drm/i915/gt: Cleanup partial engine discovery failures
  - !12048  Add generic xdp xsk multi-buffer recv for ipvlan
  - !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
  - !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
  - drm/i915/gt: Cleanup partial engine discovery failures
  - !11558  mm/ksm: fix possible UAF of stable_node
  - !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
  - btrfs: clean up our handling of refs == 0 in snapshot delete
  - drm/amdgpu: the warning dereferencing obj for nbio_v7_4
  - xsk: Add generic xdp multi-buffer recv support
  - ipvlan: support use xdp native mode
  - s390/dasd: fix error recovery leading to data corruption on ESE devices
  - s390/sclp: Prevent release of buffer in I/O
  - perf cpumap: Wrapper for CPU map indices
  - UNIC: The ublhdr structure and UBL_HLEN macro are modified
  - UNIC: Invoke the hns3_unic_set_default_cc in advance
  - acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
  - ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
  - hwmon/k10temp: Add support for Hygon family 18h model 10h
  - x86/amd_nb: Add support for Hygon family 18h model 10h
  - x86/amd_nb: Add support for Hygon family 18h model 10h
  - x86/cpu: Get LLC ID for Hygon family 18h model 10h
  - x86/amd_nb: Get DF ID for Hygon family 18h model 7h
  - mm/ksm: fix possible UAF of stable_node


author: Li Nan <linan122@huawei.com> - 5.10.0-233.0.0.135
changelog:
  - !12315 perf pmu: resolve CPU map for "cpu" PMUs
  - perf arm: Workaround ARM PMUs cpu maps having offline cpus
  - perf pmu: Add CPU map for "cpu" PMUs
  - !12072 sdma-dae: fix possible mremap error
  - perf cpumap: Add intersect function
  - perf cpumap: Add is_subset function
  - Revert "perf cpumap: Add is_subset function"
  - Revert "perf cpumap: Add intersect function"
  - Revert "perf pmu: Add CPU map for "cpu" PMUs"
  - Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
  - !12298  CVE-2024-46822
  - drivers:misc:sdma-dae: add vma_ops to avoid mremap error
  - arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
  - arm64: acpi: Move get_cpu_for_acpi_id() to a header
  - !12261  drm/lima: fix a memleak in lima_heap_alloc
  - !12262  media: go7007: fix a memleak in go7007_load_encoder
  - !12257  octeontx2-af: Use separate handlers for interrupts
  - !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
  - drm/amd/display: Avoid overflow from uint32_t to uint8_t
  - !12244 v2  net/mlx5e: Fix netif state handling
  - !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
  - media: go7007: fix a memleak in go7007_load_encoder
  - drm/lima: fix a memleak in lima_heap_alloc
  - octeontx2-af: Use separate handlers for interrupts
  - !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
  - !12164 Backport 5.10.218 LTS patches from upstream
  - greybus: Fix use-after-free bug in gb_interface_release due to race condition.
  - !12155  bonding: Fix CVE-2024-44990
  - !12153  bonding: fix xfrm real_dev null pointer dereference
  - !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
  - !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
  - xfs: atomic write file dio convert to mark IOCB_ATOMIC
  - !12115  md/raid1: don't free conf on raid0_run failure
  - !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
  - !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
  - netfilter: nf_tables: use timestamp to check for set element timeout
  - net/mlx5e: Fix netif state handling
  - !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
  - !12182  netns: Make get_net_ns() handle zero refcount net
  - !12179  net/sched: Fix CVE-2024-36244
  - !12176  ipv6: sr: fix invalid unregister error path
  - !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
  - !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
  - !12213  scsi: qla2xxx: During vport delete send async logout explicitly
  - !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
  - !12227  nbd: Fix signal handling
  - ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
  - dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
  - drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
  - !12208  Some bugfixs for ubi/fs
  - nbd: Fix signal handling
  - nbd: Improve the documentation of the locking assumptions
  - !11910  ext4: dax: Fix inconsistent isize during writing
  - !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
  - !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
  - scsi: qla2xxx: During vport delete send async logout explicitly
  - platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
  - locks: fix TOCTOU race when granting write lease
  - ubi: block: fix null-pointer-dereference in ubiblock_create()
  - ubi: block: Remove in vain semicolon
  - net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
  - ipv4: Fix uninit-value access in __ip_make_skb()
  - mlxsw: spectrum_acl_erp: Fix object nesting warning
  - netns: Make get_net_ns() handle zero refcount net
  - net/sched: taprio: extend minimum interval restriction to entire cycle too
  - net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
  - ipv6: sr: fix invalid unregister error path
  - docs: kernel_include.py: Cope with docutils 0.21
  - serial: kgdboc: Fix NMI-safety problems from keyboard reset code
  - usb: typec: ucsi: displayport: Fix potential deadlock
  - drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
  - KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
  - netlink: annotate lockless accesses to nlk->max_recvmsg_len
  - net: bcmgenet: synchronize UMAC_CMD access
  - net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
  - Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
  - pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
  - perf arm: Workaround ARM PMUs cpu maps having offline cpus
  - perf pmu: Add CPU map for "cpu" PMUs
  - bonding: fix null pointer deref in bond_ipsec_offload_ok
  - bonding: fix bond_ipsec_offload_ok return type
  - bonding: fix xfrm real_dev null pointer dereference
  - perf cpumap: Add intersect function
  - perf cpumap: Add is_subset function
  - md/raid1: don't free conf on raid0_run failure
  - blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
  - ext4: dax: keep orphan list before truncate overflow allocated blocks
  - ext4: dax: fix overflowing extents beyond inode size when partially writing
  - gpio: prevent potential speculation leaks in gpio_device_get_desc()


author: Li Nan <linan122@huawei.com> - 5.10.0-234.0.0.136
changelog:
  - !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
  - !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
  - !12248  nilfs2: fix state management in error path of log writing function
  - !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
  - !12640  sock_map: Add a cond_resched() in sock_hash_free()
  - !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
  - !12639  net: do not delay dst_entries_add() in dst_release()
  - !12621  apparmor: fix policy_unpack_test on big endian systems
  - ocfs2: remove unreasonable unlock in ocfs2_read_blocks
  - drm/amd/display: Fix index out of bounds in degamma hardware format translation
  - !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
  - !12611  drm/amd/display: Check null pointer before dereferencing se
  - !12596  scsi: fnic: Move flush_work initialization out of if block
  - !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
  - !12615  writeback: Fix inode->i_io_list not be protected by inode->i_lock error
  - !12620  PCI: mt7621: Add sentinel to quirks table
  - RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
  - tcp: check skb is non-NULL in tcp_rto_delta_us()
  - sock_map: Add a cond_resched() in sock_hash_free()
  - net: do not delay dst_entries_add() in dst_release()
  - !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
  - apparmor: fix policy_unpack_test on big endian systems
  - !12571 v2  Randomized Kmalloc 5.10 Backport V2
  - PCI: mt7621: Add sentinel to quirks table
  - !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
  - !12605  fix CVE-2024-46802
  - !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
  - init: Initialize noop_backing_dev_info early
  - writeback: Fix inode->i_io_list not be protected by inode->i_lock error
  - !8925  ext4: avoid deadlock in fs reclaim with page writeback
  - drm/amd/display: Check null pointer before dereferencing se
  - !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
  - !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
  - !12460  NFSD: Limit the number of concurrent async COPY operations
  - !12560  fix CVE-2024-49900
  - !12569  fix CVE-2024-47667
  - drm/amd/display: fix mixed declarations warning
  - drm/amd/display: added NULL check at start of dc_validate_stream
  - !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
  - !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
  - !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
  - scsi: fnic: Move flush_work initialization out of if block
  - drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
  - !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
  - Randomized slab caches for kmalloc()
  - mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
  - !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
  - !12424  jfs: check if leafidx greater than num leaves per dmap tree
  - !12425  jfs: Fix uaf in dbFreeBits
  - !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
  - !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
  - !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
  - PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
  - PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
  - !12542  media: pci: cx23885: check cx23885_vdev_init() return
  - jfs: Fix uninit-value access of new_ea in ea_buffer
  - NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
  - !12369  x86/ioapic: Handle allocation failures gracefully
  - media: pci: cx23885: check cx23885_vdev_init() return
  - kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
  - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
  - !12511  jfs: Fix array-index-out-of-bounds in diFree
  - !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
  - !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
  - !12252  KVM: x86: Acquire kvm->srcu when handling KVM_SET_VCPU_EVENTS
  - !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
  - !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
  - !12382  fix CVE-2024-46675
  - !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
  - !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
  - !12467  fix CVE-2024-42301
  - !12310  fix CVE-2024-40965
  - !12484  CVE-2024-38667
  - !12480  CVE-2024-36286
  - !12454  soundwire: cadence: fix invalid PDI offset
  - jfs: Fix array-index-out-of-bounds in diFree
  - devres: Fix memory leakage caused by driver API devm_free_percpu()
  - exfat: fix potential deadlock on __exfat_get_dentry_set
  - ocfs2: cancel dqi_sync_work before freeing oinfo
  - !12411  CVE-2024-43894
  - riscv: prevent pt_regs corruption for secondary idle threads
  - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
  - !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
  - !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
  - parport: Proper fix for array out-of-bounds access
  - dev/parport: fix the array out-of-bounds risk
  - drm/amd/display: Initialize get_bytes_per_element's default to 1
  - NFSD: Limit the number of concurrent async COPY operations
  - drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
  - soundwire: cadence: fix invalid PDI offset
  - drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
  - iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
  - nilfs2: fix potential oob read in nilfs_btree_check_delete()
  - drm/amd/display: Fix index out of bounds in DCN30 color transformation
  - !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
  - !12395  tracing/timerlat: Fix a race during cpuhp processing
  - !12406  fix CVE-2024-43841
  - jfs: Fix uaf in dbFreeBits
  - jfs: check if leafidx greater than num leaves per dmap tree
  - btrfs: wait for fixup workers before stopping cleaner kthread during umount
  - btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
  - drm/client: fix null pointer dereference in drm_client_modeset_probe
  - wifi: virt_wifi: don't use strlen() in const context
  - wifi: virt_wifi: avoid reporting connection success with wrong SSID
  - drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
  - tracing/timerlat: Fix a race during cpuhp processing
  - mm/swapfile: skip HugeTLB pages for unuse_vma
  - spi: nxp-fspi: fix the KASAN report out-of-bounds bug
  - drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
  - usb: dwc3: core: Prevent USB core invalid event buffer address access
  - usb: dwc3: core: Skip setting event buffers for host only controllers
  - !12349  neighbour: fix data-races around n->output
  - !12294  nfsd: return -EINVAL when namelen is 0
  - x86/ioapic: Handle allocation failures gracefully
  - hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
  - !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
  - !12344  of: module: prevent NULL pointer dereference in vsnprintf()
  - !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
  - !12334  drm/nouveau: prime: fix refcount underflow
  - i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
  - neighbour: fix data-races around n->output
  - !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
  - !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
  - !12332 hns3 udma: delete irrl and trrl table
  - of: module: prevent NULL pointer dereference in vsnprintf()
  - nvmet: fix a possible leak when destroy a ctrl during qp establishment
  - hns3 udma: delete irrl and trrl table.
  - ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
  - drm/nouveau: prime: fix refcount underflow
  - mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
  - nfsd: call cache_put if xdr_reserve_space returns NULL
  - i2c: lpi2c: Avoid calling clk_get_rate during transfer
  - i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
  - i2c: imx-lpi2c: use bulk clk API
  - clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
  - clk: Add a devm variant of clk_rate_exclusive_get()
  - soc: qcom: cmd-db: Map shared memory as WC, not WB
  - nfsd: return -EINVAL when namelen is 0
  - blk-mq: fix blk_mq_hw_ctx active request accounting
  - drm/amdgpu: fix mc_data out-of-bounds read warning
  - KVM: x86: Acquire kvm->srcu when handling KVM_SET_VCPU_EVENTS
  - nilfs2: fix state management in error path of log writing function
  - mptcp: pm: only decrement add_addr_accepted for MPJ req
  - ext4: avoid deadlock in fs reclaim with page writeback


author: Li Nan <linan122@huawei.com> - 5.10.0-235.0.0.137
changelog:
  - !13009  CVE-2024-49950
  - !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
  - !13003  CVE-2024-50064
  - !13051  ext4: fix CVE-2024-47701
  - !12680  smb: client: fix UAF in async decryption
  - !13039  static_call: Handle module init failure correctly in static_call_del_module()
  - !13017  f2fs: fix to wait dio completion
  - !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
  - !13015  drm/amd/display: Check stream before comparing them
  - !13019  l2tp: prevent possible tunnel refcount underflow
  - !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
  - ext4: avoid OOB when system.data xattr changes underneath the filesystem
  - ext4: explicitly exit when ext4_find_inline_entry returns an error
  - ext4: return error on ext4_find_inline_entry
  - ext4: ext4_search_dir should return a proper error
  - !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
  - !12992  igb: Do not bring the device up after non-fatal error
  - !12994  drm/amd/display: Check BIOS images before it is used
  - !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
  - !12901  ext4: fix double brelse() the buffer of the extents path
  - !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
  - !12958  ext4: update orig_path in ext4_find_extent()
  - static_call: Handle module init failure correctly in static_call_del_module()
  - !12449  scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run
  - efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
  - wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
  - l2tp: prevent possible tunnel refcount underflow
  - f2fs: fix to wait dio completion
  - !12884  CVE-2024-50016
  - !12844  ACPI: sysfs: validate return type of _STR method
  - f2fs: fix to check atomic_file in f2fs ioctl interfaces
  - drm/amd/display: Check stream before comparing them
  - !12998  f2fs: get rid of online repaire on corrupted directory
  - !12911  fsnotify: fix CVE-2024-47660
  - !12908  io_uring: fix CVE-2024-50060
  - !12879  drm/stm: Avoid use-after-free issues with crtc and plane
  - !12915  CVE-2022-48961
  - Bluetooth: L2CAP: Fix uaf in l2cap_connect
  - Bluetooth: Return whether a connection is outbound
  - !12944  fix CVE-2024-47723
  - !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
  - !12954  memcg_write_event_control(): fix a user-triggerable oops
  - !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
  - !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
  - !12870  Fix CVE-2024-47703
  - !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
  - zram: don't free statically defined names
  - zram: free secondary algorithms names
  - [Backport]scsi: libsas: Fix disk not being scanned in after being removed
  - [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
  - f2fs: get rid of online repaire on corrupted directory
  - [Backport]scsi: libsas: Introduce struct smp_disc_resp
  - !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
  - !12686  security/keys: fix slab-out-of-bounds in key_task_permission
  - drm/amd/display: Check BIOS images before it is used
  - igb: Do not bring the device up after non-fatal error
  - !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
  - !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
  - !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
  - !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in dcn30_init_hw
  - !12875  tipc: guard against string buffer overrun
  - ext4: update orig_path in ext4_find_extent()
  - memcg_write_event_control(): fix a user-triggerable oops
  - !12781  uprobes: fix kernel info leak via "[uprobes
  - drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
  - !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
  - jfs: Fix sanity check in dbMount
  - jfs: fix out-of-bounds in dbNextAG() and diAlloc()
  - !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
  - !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
  - gpiolib: fix memory leak in gpiochip_setup_dev()
  - tcp: fix mptcp DSS corruption due to large pmtu xmit
  - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
  - gso: fix udp gso fraglist segmentation after pull from frag_list
  - !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
  - !12790  slip: make slhc_remember() more robust against malicious packets
  - !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
  - !12737  r8169: add tally counter fields added with RTL8125
  - !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
  - !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
  - !12778  riscv: Sync efi page table's kernel mappings before switching
  - !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
  - ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
  - net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
  - net: mdio: use device_set_node() to setup both fwnode and of
  - fsnotify: clear PARENT_WATCHED flags lazily
  - fsnotify: remove unused declaration
  - fsnotify: Fix comment typo
  - io_uring: check if we need to reschedule during overflow flush
  - io_uring: always lock __io_cqring_overflow_flush
  - ext4: fix double brelse() the buffer of the extents path
  - ext4: aovid use-after-free in ext4_ext_insert_extent()
  - ext4: avoid use-after-free in ext4_ext_show_leaf()
  - drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in dcn30_init_hw
  - drm/amd/display: Avoid overflow assignment in link_dp_cts
  - UNIC: Eliminate compile warnings
  - drm/stm: Avoid use-after-free issues with crtc and plane
  - tipc: guard against string buffer overrun
  - bpf, lsm: Add check for BPF LSM return value
  - bpf, lsm: Add disabled BPF LSM hook list
  - hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
  - !12525  powercap: intel_rapl: Fix off by one in get_rpi()
  - !12818  media: venus: fix use after free bug in venus_remove due to race condition
  - !12825  drm/amd/display: Check null pointers before using them
  - !12798  uprobe: avoid out-of-bounds memory access of fetching args
  - ACPI: sysfs: validate return type of _STR method
  - !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
  - !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
  - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
  - !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
  - !12754  CVE-2024-50063
  - !12488  gtp: fix a potential NULL pointer dereference
  - !12762  smack: tcp: ipv4, fix incorrect labeling
  - drm/amd/display: Check null pointers before using them
  - f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
  - media: venus: fix use after free bug in venus_remove due to race condition
  - serial: protect uart_port_dtr_rts() in uart_shutdown() too
  - !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
  - ext4: fix slab-use-after-free in ext4_split_extent_at()
  - uprobe: avoid out-of-bounds memory access of fetching args
  - platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
  - !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
  - slip: make slhc_remember() more robust against malicious packets
  - uprobes: fix kernel info leak via "[uprobes]" vma
  - riscv: Sync efi page table's kernel mappings before switching
  - hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
  - !12551  cifs: Fix buffer overflow when parsing NFS reparse points
  - !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
  - thermal: core: Reference count the zone in thermal_zone_get_by_id()
  - !12723  ppp: fix ppp_async_encode() illegal access
  - smack: tcp: ipv4, fix incorrect labeling
  - !12733  CVE-2024-50059
  - !12373  fix CVE-2024-49954
  - !12705  fix CVE-2024-49924
  - !12517  fix CVE-2024-47742
  - selinux: add the processing of the failure of avc_add_xperms_decision()
  - selftests/bpf: Add test for lsm tail call
  - bpf: Prevent tail call between progs attached to different hooks
  - !12665 v2  CVE-2024-49955
  - !12685  block: fix potential invalid pointer dereference in blk_add_partition
  - net/xen-netback: prevent UAF in xenvif_flush_hash()
  - !12697  mm: memcg: don't periodically flush stats when memcg is disabled
  - !12694  crypto: xor - fix template benchmarking
  - !12701  vhost_vdpa: assign irq bypass producer token correctly
  - r8169: add tally counter fields added with RTL8125
  - ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
  - ppp: fix ppp_async_encode() illegal access
  - !12678  CVE-2024-47673
  - !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
  - drm: omapdrm: Add missing check for alloc_ordered_workqueue
  - fbdev: pxafb: Fix possible use after free in pxafb_task()
  - vhost_vdpa: assign irq bypass producer token correctly
  - !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
  - !12667  randomize_kstack: Improve entropy diffusion
  - !12668  selinux: fix potential counting error in avc_add_xperms_decision()
  - !12499  nbd: fix race between timeout and normal completion
  - mm: memcg: don't periodically flush stats when memcg is disabled
  - !12610  blk_iocost: fix more out of bound shifts
  - crypto: xor - fix template benchmarking
  - crypto: xor - Fix typo of optimization
  - !12633  ALSA: asihpi: Fix potential OOB array access
  - !12354 Backport important bugfix from the kernel-5.10.y
  - ocfs2: reserve space for inline xattr before attaching reflink tree
  - security/keys: fix slab-out-of-bounds in key_task_permission
  - block: fix potential invalid pointer dereference in blk_add_partition
  - smb: client: fix UAF in async decryption
  - wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
  - iwlwifi: mvm: move iwl_mvm_stop_device() out of line
  - IB/core: Fix ib_cache_setup_one error flow cleanup
  - selinux: fix potential counting error in avc_add_xperms_decision()
  - randomize_kstack: Improve entropy diffusion
  - ACPI: battery: Fix possible crash when unregistering a battery hook
  - ACPI: battery: Simplify battery hook locking
  - nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
  - scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
  - ALSA: asihpi: Fix potential OOB array access
  - blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
  - blk_iocost: fix more out of bound shifts
  - cifs: Fix buffer overflow when parsing NFS reparse points
  - fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
  - powercap: intel_rapl: Fix off by one in get_rpi()
  - firmware_loader: Block path traversal
  - nbd: fix race between timeout and normal completion
  - gtp: fix a potential NULL pointer dereference
  - scsi: fix kabi broken
  - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run
  - padata: use integer wrap around to prevent deadlock on seq_nr overflow
  - static_call: Replace pointless WARN_ON() in static_call_module_notify()
  - scsi: mpt3sas: Remove scsi_dma_map() error messages


author: Li Nan <linan122@huawei.com> - 5.10.0-236.0.0.138
changelog:
  - !13186  virtio_pmem: Check device status before requesting flush
  - !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
  - !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
  - !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
  - !13146  arm64: probes: Remove broken LDR (literal) uprobe support
  - !13167  CVE-2024-50133
  - !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
  - !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
  - !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
  - virtio_pmem: Check device status before requesting flush
  - arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
  - sched: smart_grid: Prevent double-free in sched_grid_qos_free
  - !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
  - LoongArch: Don't crash in stack_top() for tasks without vDSO
  - cgroup: add cgroup_root_ext to keep kabi
  - cgroup/cpuset: Prevent UAF in proc_cpuset_show()
  - cgroup: Make operations on the cgroup root_list RCU safe
  - Revert "cgroup: fix uaf when proc_cpuset_show"
  - xfrm: validate new SA's prefixlen using SA family when sel.family is unset
  - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
  - RDMA/mad: Improve handling of timed out WRs of mad agent
  - !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
  - !13144 v2  tracing: Consider the NULL character when validating the event length
  - arm64: probes: Remove broken LDR (literal) uprobe support
  - tracing: Consider the NULL character when validating the event length
  - !13125 v7  mm: support poison recover for more
  - mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
  - arm64: send sig fault for user task when apei_claim_sea fails
  - arm64: mm: Add copy mc support for all migrate_page
  - mm: support poison recovery from do_cow_fault()
  - mm: support poison recovery from copy_present_page()
  - mm: hwpoison: support recovery from HugePage copy-on-write faults
  - make copy_[user]_highpage_mc have return value
  - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
  - !12974  ext4: fix timer use-after-free on failed mount
  - !12976  : ext4: no need to continue when the number of entries is 1
  - !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
  - !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
  - !12970  exfat: fix memory leak in exfat_load_bitmap()
  - !12972  ext4: fix access to uninitialised lock in fc replay path
  - !13094  RDMA/hns: Fix DCA mmap area PUAF
  - !12973  vfs: fix race between evice_inodes() and find_inode()&iput()
  - PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
  - !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
  - !13101  thunderbolt: Mark XDomain as unplugged when router is removed
  - !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
  - !13103  CVE-2024-49878
  - resource: fix region_intersects() vs add_memory_driver_managed()
  - thunderbolt: Mark XDomain as unplugged when router is removed
  - pinctrl: single: fix potential NULL dereference in pcs_get_function()
  - RDMA/hns: Fix DCA mmap area PUAF
  - !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
  - !13067  Fix UAF of rpc_task
  - bpf, net: Fix a potential race in do_sock_getsockopt()
  - !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
  - !12996 【OLK-5.10】Support SMT control on arm64
  - network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
  - !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
  - !13054  net: add more sanity checks to qdisc_pkt_len_init()
  - !13048 sdma-dae: add ida validation
  - !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
  - nfs: fix rpc_task use-after-free when open and close different files concurrently
  - NFSv4: release seqid when open failed for nfs4.0
  - drivers:misc:sdma-dae: add channel ida validation
  - net: avoid potential underflow in qdisc_pkt_len_init() with UFO
  - net: add more sanity checks to qdisc_pkt_len_init()
  - tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
  - config: enable CONFIG_HOTPLUG_SMT for arm64
  - arm64: Kconfig: Enable HOTPLUG_SMT
  - arm64: topology: Support SMT control on ACPI based system
  - arch_topology: Support SMT control for OF based system
  - arch_topology: Support basic SMT control for the driver
  - cpu/SMT: Store the current/max number of threads
  - cpu/SMT: Move SMT prototypes into cpu_smt.h
  - ext4: no need to continue when the number of entries is 1
  - ext4: fix i_data_sem unlock order in ext4_ind_migrate()
  - ext4: fix timer use-after-free on failed mount
  - vfs: fix race between evice_inodes() and find_inode()&iput()
  - ext4: fix access to uninitialised lock in fc replay path
  - ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
  - exfat: fix memory leak in exfat_load_bitmap()
  - drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]


author: Li Nan <linan122@huawei.com> - 5.10.0-237.0.0.139
changelog:
  - !13310  fs/ntfs3: Additional check in ni_clear()
  - !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
  - !13344  mm,hwpoison: check mm when killing accessing process
  - mm,hwpoison: check mm when killing accessing process
  - smb: client: fix OOBs when building SMB2_IOCTL request
  - !13318 Fix objtool error for AMX instruction decoding
  - !13196  fs/ntfs3: Additional check in ntfs_file_release
  - !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
  - !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
  - !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
  - !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
  - bpf: Fix out-of-bounds write in trie_get_next_key()
  - !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
  - !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
  - !13276  mailbox: bcm2835: Fix timeout during suspend mode
  - !13294 sdma-dae: change authority of debugfs
  - x86/insn: Add AMX instructions to the x86 instruction decoder
  - !13277  CVE-2023-52920
  - fs/ntfs3: Additional check in ni_clear()
  - !13227  fs/ntfs3: Add rough attr alloc_size check
  - !13225  fs/ntfs3: Check if more than chunk-size bytes are written
  - !13226  fs/ntfs3: Fix possible deadlock in mi_read
  - !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
  - !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
  - !13194  fix CVE-2024-50115
  - bpf, arm64: Fix address emission with tag-based KASAN enabled
  - driver:misc:sdma:change authority of sdma device
  - wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
  - !13178  bpf: Use raw_spinlock_t in ringbuf
  - bpf: handle fake register spill to stack with BPF_ST_MEM instruction
  - bpf: support non-r10 register spill/fill to/from stack in precision tracking
  - bpf: mostly decouple jump history management from is_state_visited()
  - bpf: encapsulate precision backtracking bookkeeping
  - bpf: decouple prune and jump points
  - mailbox: bcm2835: Fix timeout during suspend mode
  - !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
  - bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
  - scsi: target: core: Fix null-ptr-deref in target_alloc_device()
  - platform/x86/intel/ifs: Initialize union ifs_status to zero
  - platform/x86/intel/ifs: release cpus_read_lock()
  - platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
  - tools arch x86: Sync the msr-index.h copy with the kernel sources
  - !13221  aoe: fix the potential use-after-free problem in more places
  - !13239  scsi: pm80xx: Set phy->enable_completion only when we wait for it
  - !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
  - !13255  RDMA/hns: Fix the valid QP bank set to improve performance
  - RDMA/hns: Fix the valid QP bank set to improve performance
  - !12858 intel: backport GNR and SRF intel_idle fix for 5.10
  - !12154 v2  netfilter: flowtable: initialise extack before use
  - !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
  - scsi: pm80xx: Set phy->enable_completion only when we wait for it
  - staging: iio: frequency: ad9834: Validate frequency parameter value
  - !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
  - !13212 v7  arm64: support page mapping percpu first chunk allocator
  - fs/ntfs3: Add rough attr alloc_size check
  - fs/ntfs3: Fix possible deadlock in mi_read
  - fs/ntfs3: Check if more than chunk-size bytes are written
  - aoe: fix the potential use-after-free problem in more places
  - !13080  serial: core: Fix atomicity violation in uart_tiocmget
  - !13073  selinux: clarify return code in filename_trans_read_helper_compat()
  - !13128  drm/amd/display: Add null check for pipe_ctx->plane_state in dcn20_program_pipe
  - kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
  - arm64: support page mapping percpu first chunk allocator
  - vmalloc: choose a better start address in vm_area_register_early()
  - iio: light: veml6030: fix IIO device retrieval from embedded device
  - fs/ntfs3: Additional check in ntfs_file_release
  - KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
  - net/ncsi: Disable the ncsi work before freeing the associated structure
  - bpf: Use raw_spinlock_t in ringbuf
  - cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
  - drm/amd/display: Add null check for pipe_ctx->plane_state in dcn20_program_pipe
  - serial: core: Fix atomicity violation in uart_tiocmget
  - selinux: clarify return code in filename_trans_read_helper_compat()
  - KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
  - intel_idle: fix ACPI _CST matching for newer Xeon platforms
  - intel_idle: add Granite Rapids Xeon support
  - intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
  - intel_idle: Add a new flag to initialize the AMX state
  - x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
  - cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
  - wifi: mac80211: fix NULL dereference at band check in starting tx ba session
  - netfilter: flowtable: initialise extack before use
  - intel_th: pci: Add Sapphire Rapids SOC support
  - intel_th: pci: Add Granite Rapids SOC support
  - intel_th: pci: Add Granite Rapids support


author: Yang Yanchao <yangyanchao6@huawei.com> - 27-7
changelog:
  - Precisely filters ko files in "/lib/modules/$kernel/extra" 
    to avoid creating unnecessary symbols.


author: Yang Yanchao <yangyanchao6@huawei.com> - 27-8
changelog:
  - kmod: don't check module's refcnt when rmmod with -r
    Module: replace the module with new module
    Module: suspend the module by rmmod r option


author: Fang Chuangchuang <fangchuangchuang@huawei.com> - 29-7
changelog:
  - libkmod: Set builtin to no when module is created from path.
    modprobe: fix the NULL-termination of new_argv


author: shixin <shixin21@huawei.com> - 29-8
changelog:
  - libkmod: fix possible out-of-bounds memory access
    shared: avoid passing {NULL, 0} array to bsearch()


author: caixiaomeng <caixiaomeng2@huawei.com> - 1:0.9.5-10
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ignore sssnic module when building hotpatch to fix sssnic wrongly dependency of sssnic


author: wangjiang <wangjiang37@h-partners.com> - 1:2020.0.0-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix backport-Fix-hist_nearend.patch
         backport-functions-with-not-loaded-autoloaded-functions.patch
         backport-Fix-interactive-restricted-shell-behavior.patch


author: wangyuhang <wangyuhang27@huawei.com> - 1:2020.0.0-11
changelog:
  - solve the problem of dereference null return value when moving a job to the head of the linked list and reorder patches


author: wangli <3214053332@qq.com> - 1.1.0-1
changelog:
  -   add some test files
  -   prepare corresponding script for ras\rac\rahub to deploy config file respectively
  -   update part of file paths
  -   update to 1.1.0


author: gwei3 <11015100@qq.com> - 1.1.2-1
changelog:
  -   update to 1.1.2
  -   add slice length checks to avoid buffer overflow while extracting and verifying
  -   update integration test data to meet restapi parameter check requirement
  -   modify raagent/main.go file, change log to logger, os.Exit returns different values based on diff errors
  -   close RAS restapi server in signal handler
  -   Add parameter format checking for pcr/bios/ima in POST {id}/newbasevalue API
  -   Fix bugs in v1.1.1
      bug 1: hostintegritytool.sh can only add the 2nd part of ima policy into /etc/ima/ima-policy.
      bug 2: running hostintegritytool.sh multiple times will add duplicated linux cmdlines in /etc/default/grub.
      bug 3: rahub config path was assigned wrong values, which is caused by copy/paste
  -   fix the issue that Makefile not sync vendor
  -   modify readme file


author: gwei3 <11015100@qq.com> - 1.1.2-2
changelog:
  -   update BuildRequires & Requires to replace openssl* with compat-openssl11* to adapt to latest Mainline
  -   remove redundent clean label in spec file


author: leezhenxiang <1172294056@qq.com> - 2.0.0-1
changelog:
  -   update to 2.0.0
  -   add qcaserver, attester, and tas packages
  -   add BuildRequires itrustee_sdk-devel, cjson-devel and Requires itrustee_sdk, cjson
  -   modify makefile to adapt to different architectures
  -   specify the build requires in rac and attester package


author: chenyanpanHW <chenyanpan@huawei.com> - .0-4
changelog:
  - DESC: delete -Sgit from 
  %setup -a 0      -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-fix-lapack-devel-build-error.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-Fix-out-of-bounds-read-in-slarrv.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Eibz-Chan <chenbingzhao@huawei.com> - 590-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:[add] backport patches from upstream
  	Fix-memory-leak-when-using-corrupt-lesshst-file.patch
  	Fix-crash-when-enter-invaid-pattern-in-command.patch


author: xihaochen <xihaochen@huawei.com> - 4.9.2-1
changelog:
  - Type:requirements                                                                                                                                            
  - Id:NA
  - SUG:NA
  - DESC:update lftp to 4.9.2


author: yaoxin <yaoxin30@huawei.com> - 1.0.13-1
changelog:
  - Upgrade libEMF to 1.0.13; fix CVE-2020-13999 CVE-2020-11863 CVE-2020-11865 CVE-2020-11866 CVE-2020-11864


author: wujie <wujie@nj.iscas.ac.cn> - 1.0.13-2
changelog:
  - Add riscv64 support from http://fedora.riscv.rocks/koji/buildinfo?buildID=24988
    Author is David Abdurachmanov <david.abdurachmanov@gmail.com>


author: chenyanpanHW <chenyanpan@huawei.com> - 1.1.3-3
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0003-Add-getentropy-emulation-through-syscall.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yanzhihua <yanzhihua4@huawei.com> - 12.10.0-25
changelog:
  - Type:enhancement
  - Id:NA
  - SUG:NA
  - DESC:ldconfig_scriptlets does not exist so modify the use of ldconfig, and rename the patch


author: zhangmingyi <zhangmingyi5@huawei.com> -2:0.8.1-8
changelog:
  - backport patches from upstream:
    backport-libbpf-disassociate-section-handler-on-explicit-bpf_.patch
    backport-libbpf-Use-correct-return-pointer-in-attach_raw_tp.patch
    backport-libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:0.8.1-9
changelog:
  - backport patches from upstream:
    backport-libbpf-Ensure-FD-3-during-bpf_map__reuse_fd.patch
    backport-libbpf-Ensure-libbpf-always-opens-files-with-O_CLOEX.patch


author: liningjie <liningjie@xfusion.com> 2:0.8.1-10
changelog:
  - backport patches from openEuler-22.03-LTS-SP2:
    0001-remove-nonexistent-helper-functions-and-add-new-help.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:0.8.1-11
changelog:
  - backport patches from upstream:
    backport-libbpf-Fix-realloc-API-handling-in-zero-sized-edge-cases.patch
    backport-libbpf-Set-close-on-exec-flag-on-gzopen.patch
    backport-libbpf-Fix-is_pow_of_2.patch
    backport-libbpf-make-RINGBUF-map-size-adjustments-more-eagerly.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:0.8.1-12
changelog:
  - backport patches from upstream:
    backport-libbpf-Fix-NULL-pointer-dereference-in_bpf_object__c.patch
    backport-libbpf-Fix-str_has_sfxs-return-value.patch
    backport-libbpf-Initialize-err-in-probe_map_create.patch


author: jinzhiguang <jinzhiguang@kylinos.cn> - 2:0.8.1-13
changelog:
  - backport patch from upstream:
    backport-libbpf-Modify-the-function-name-in-libbpf.c-to-match.patch


author: xiesongyang <xiesongyang@huawei.com> - 2:0.8.1-14
changelog:
  - backport patch from upstream:
    backport-libbpf-Fix-an-error-in-64bit-relocation-value-comput.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:0.8.1-15
changelog:
  - backport patch from upstream:
    backport-libbpf-Avoid-uninitialized-value-in-BPF_CORE_READ_BI.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:0.8.1-16
changelog:
  - backport patch from upstream:
    backport-libbpf-Add-NULL-checks-to-bpf_object__prev_map,next_.patch
    backport-libbpf-Apply-map_set_def_max_entries-for-inner_maps-.patch
    backport-libbpf-Fix-uninitialized-warning-in-btf_dump_dump_ty.patch


author: yanglongkang <yanglongkang@h-partners.com> - 2.61-7
changelog:
  - backport upstream patches:
    getcpcaps: fix program name in help message
    Stop using _pam_overwrite() in pam_cap.c


author: yezengruan <yezengruan@huawei.com> 1.0.0-12
changelog:
  - kpatch_process: fix possible double free.
  - ptrace: fix NULL pointer access problem
  - fix patched process crashing when acccess the global var
  - fix probably restore cc symbol link fail when kill patch building uncourteous
  - optimize: Remove unnecessary comparison code


author: chenyanpanHW <chenyanpan@huawei.com> - 2.1.0-3
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-correct-realpath-test-failure.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-fix-Werror-format-security.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: chenhaixing <chenhaixing@huawei.com> - 0.69.0-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:libdnf:Avoid reinstalling installonly packages marked for ERASE
                Fix utimes error message in dnf-repo
                Do not download repository if our local cache is up to date in dnf-repo
                python bindings:Load all modules with RTLD_GLOBAL


author: hanhuihui <hanhuihui5@huawei.com> - 0.69.0-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix history rollback cmd not meet the expectation
         Fix memory leak in subject-py


author: liujing <liujing144@huawei.com> - 1.0.0-30
changelog:
  - update patches from https://code.foxkit.us/adelie/aports-old/blob/50de7d785d5500a14ed00fa12e483e8ceaf4f06a/main/libdv


author: doupengda <doupengda@loongson.cn> 1.0.1-7
changelog:
  - update config.guess and config.sub
  - fix SOURCE1 file autoconf.h '__loongarch64__' to '__loongarch64'


author: chenyanpanHW <chenyanpan@huawei.com> - 4.33-3
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/libev-Add-sw64-architecture.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: dongyuzhen <dongyuzhen@h-partners.com> - 2.1.12-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix the installation conflict between x86 and i686 in event-config.h


author: shixuantong <shixuantong1@huawei.com> - 2.1.12-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:ssl: do not trigger EOF if some data had been successfully read


author: zhengxiaoxiao <zhengxiaoxiao@huawei.com> - 1.9.4-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add backport-Fix-the-behavior-for-child-process.patch
             backport-Clear-AESWRAP-scratch-area-immediately-after-use.patch


author: weijin deng <weijin.deng@turbolinux.com.cn> - 0.18.1-1
changelog:
  - Upgrade to 0.18.1
  - Update Version, Release, Source0, stage 'files'
  - Stage 'build' use meson build


author: Wenlong Ding <wenlong.ding@turbolinux.com.cn> - 2.6.4-22
changelog:
  - Remove /usr/lib64/libglade-2.0.so.* from libglade2-devel package which already exists in libglade2 package.


author: xu_ping <xuping33@huawei.com> - 1:1.40.2-16
changelog:
  - Use actual function Pervasives.compare to instead of default compare and omit the labels on positional arguments.


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.2.0-1
changelog:
  - Upgrade to 1.2.0
  - Update Version, URL, Source0. delete Patch0. update stage 'prep'
  - Add 'find_lang', update stage 'files'


author: yanglu <yanglu72@h-partners.com> - 3.0.11-2
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:avoid crashing in icalcomponent_normalize
         fix a memleak in icalcomponent_normalize


author: chenyanpanHW <chenyanpan@huawei.com> - 1.16.4-2
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-evdev-strip-the-device-name-of-format-directives.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git-core


author: chengyechun <chengyechun1@huawei.com> - 3.7.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:prevent segfault in af_request_type
         fix bridge info parsing


author: chenyanpanHW <chenyanpan@huawei.com> - 0.16-2
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0000-libpciaccess-rom-size.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-libpciaccess-add-sw64.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.28.0-1
changelog:
  - Upgrade to 1.28.0
  - Update Version, Release, Source0, BuildRequires
  - Use meson rebuild, delete python3.8-fix.patch that for autoreconf


author: ZhengZhenyu <zhengzhenyu@openeuler.sh> - 13.12-1
changelog:
  - aupgrade libpq to 13.12,fix CVE-2023-2455, CVE-2023-2454, CVE-2023-39417, CVE-2023-39418, CVE-2020-21469


author: shixuantong <shixuantong1@huawei.com> - 0.21.1-7
changelog:
  - Fix write buffer overflow by 1 in domain_to_punycode()
  - Fix stack buffer overflow WRITE 1 in domain_to_punycode()
  - Avoid 8bit overflow in is_public_suffix()
  - Avoid 'NULL + 1' as it is UB


author: yixiangzhike <yixiangzhike007@163.com> - 1.4.4-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:change the files order in patch file fix-doc-about-difok.patch


author: zhangjun<zhangjun@kylinos.cn> - 0.7.20-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memory leak when using testsolv to execute cases 
         Fix segfault on conflict resolution when using bindings


author: xinghe <xinghe2@h-partners.com> - 2.74.2-5
changelog:
  - Type:cves
  - ID:CVE-2024-52530 CVE-2024-52531 CVE-2024-52532
  - SUG:NA
  - DESC:fix CVE-2024-52530 CVE-2024-52531 CVE-2024-52532


author: zengweifeng <zwfeng@huawei.com> - 0.9.6-3
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:add errno while reset with strtoul call
         fix error returned in ssh_userauth_try_publicke
         client do not close the socket if it was set via opt
         fix openForward to not set sourcehost to NULL
         fix the length calculation of packet in sftp_write


author: xinghe <xinghe2@h-partners.com> - 0.9.6-4
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:options: Parse hostname by last '@'
         torture_options: Add test for '@' in login name
         session: Initialize pointers
         tests: Ensure the mode of the created file is what we set


author: seuzw <930zhaowei@163.com> - 0.9.6-5
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:backport some upstream patches:
         Avoid false positive report from Coveritt CID 1470006
         kdf: Avoid endianess issues
         misc: Fix format truncation in ssh_path_expand_escape()
         misc: Fix expanding port numbers
         misc: rename gettimeofday symbol
         session: Initialize the port with the standard port (22)
         session->socket_callbacks.data will be set to ssh_packet_socket_callback
         socket: Add error message if execv fails
         tests: Add test for expanding port numbers


author: renmingshuai <renmingshuai@huawei.com> - 0.9.6-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:config: Escape brackets in ProxyCommand build
         packet: do not enqueue outgoing packets


author: renmingshuai <renmingshuai@huawei.com> - 0.9.6-8
changelog:
  - Type:CVE
  - Id:CVE-2023-6004,CVE-2023-6918,CVE-2023-48795
  - SUG:NA
  - DESC:fix CVE-2023-6004, CVE-2023-6918 and CVE-2023-48795


author: wangjiang <wangjiang37@h-partners.com> - 1.4.7-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:tdb: Do not pass non–null‐terminated strings to strcmp()
         python: Safely clear structure members


author: chenyanpanHW <chenyanpan@huawei.com> - 0.10.2-2
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-tevent-fix-CID-1437974-dereference-after-null-check.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yezengruan <yezengruan@huawei.com> - 0.7.3-7
changelog:
  - tpm2: Reset TPM2B buffer sizes after test fails for valid buffer size
  - tpm2: Add maxSize parameter to TPM2B_Marshal for sanity checks
  - tpm2: Restore original value if unmarsalled value was illegal
  - fix CVE-2021-3623


author: chenziyang <chenziyang4@huawei.com> - 2:1.6.2-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch to fix failed run-ptrace-mapper testcase


author: chenyanpanHW <chenyanpan@huawei.com> - 0.1.5-18
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0000-Link-with-znodelete-to-disallow-unloading.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-Revert-use-atexit-to-call-libusb_exit.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yaoxin <yao_xin001@hoperun.com> - 2.20.0-1
changelog:
  - Upgrade to 2.20.0
  - Fix CVE-2023-39929
  - Fix minor issue about printf data type and value range
  - av1: Revise offsets comments for av1 encode
  - jpeg: add support for crop and partial decode
  - Drop no longer applicable vaGetDriverNames check


author: Jiabo Feng <fengjiabo1@huawei.com> - 6.2.0-67
changelog:
  - virt-host-validate: Fix IOMMU output on aarch64
  - cpu: revert: Modify virCPUarmCompare to perform compare actions
  - cpu: Modify virCPUarmCompare to perform compare actions
  - add phytium s5000c support on arm architecture for capability


author: imxcc <xingchaochao@huawei.com> - 6.2.0-2
changelog:
  - setup: use pytest instead of nose to run the test suite
  - spec: use pytest instead of nose
  - Update readme to mention pytest instead of nose
  - Fix PY_SSIZE_T_CLEAN deprecation warning
  - Avoid use of thread function deprecated in 3.9
  - Replace deprecated PyEval_CallObject with PyObject_Call


author: xihaochen <xihaochen@huawei.com> - 1.1-1
changelog:
  - Type:requirements                                                                                            
  - Id:NA
  - SUG:NA
  - DESC:update lldpad to 1.1


author: chenyanpanHW <chenyanpan@huawei.com> - 1.1-2
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-8021Qaz-check-for-rx-block-validity.patch | 
  /usr/bin/patch  -s --fuzz=2 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-8021qaz-squelch-initialization-errors.patch | 
  /usr/bin/patch  -s --fuzz=2 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-basman-use-return-address-when-pulling-address.patch | 
  /usr/bin/patch  -s --fuzz=2 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-macvtap-fix-error-condition.patch | 
  /usr/bin/patch  -s --fuzz=2 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-vdp22-convert-command-parsing-to-null-term.patch | 
  /usr/bin/patch  -s --fuzz=2 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-lldptool-fix-null-pointer-deference.patch | 
  /usr/bin/patch  -s --fuzz=2 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Xiong Zhou <xiongzhou4@huawei.com> 15.0.7-2
changelog:
  - Type:Update
  - ID:NA
  - SUG:NA
  - DESC: Backport bugfix and add AArch64 support for hugify and inline.


author: chenyanpanHW <chenyanpan@huawei.com> - 9-5
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-Relax-content-tests-in-test-suite.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-Force-creation-of-LUKS1-containers-in-test-suite.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0003-Define-log-callback-function-to-use-with-libcryptset.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: xiejing <xiejing@kylinos.cn> - 1:10.5.25-1
changelog:
  - Bump to 10.5.25 for resolving CVE-2024-21096, CVE-2023-22084
  - Fix version description in systemd service file


author: yaoxin <yao_xin001@hoperun.com> - 1.27.4-1
changelog:
  - Update to 1.27.4 for fix CVE-2024-6381 and CVE-2024-6383
  - libbson Fixes:
    * Fix build with Visual Studio 2013.
    * Fix parsing of colon in timezone.
    * Error on failure to init subdocument in bson_iter_visit_all.
    * Fix string handling in bson_string_new and bson_string_append.
    * Fix iteration in bson_strfreev.
    * Use aligned alloc for bson_array_builder_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Fix conversion warning with GCC 12.
    * Fixes to some format strings in trace logs.
    * Allow mongoc_buffer_t to be larger than INT_MAX.
    * Add bson_array_builder_t.
  - libmongoc Fixes:
    * Fix possible crash reading malformed wire protocol message.
    * Upgraded bundled Zlib from 1.2.3 to 1.3.1
    * Close leftover connections to removed servers.
    * Fix possible crash when client is configured with empty password.
    * Fix possible hang if mongoc_gridfs_file_readv is called with a corrupt chunk with incomplete data.
    * Fix 32-bit compile with 64-bit time_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Disable shared libmongoc targets if ENABLE_SHARED=OFF
    * Fix documentation build with Python 3.9.
    * Fix data race in mongoc_cursor_get_host.
    * Add back support for BUILD_VERSION CMake option. BUILD_VERSION was unintentionally removed in 1.25.0.
    * Send recoveryToken in transactions when connected to a load balancer.


author: chenyanpanHW <chenyanpan@huawei.com> - 4.0.26-2
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-comment-invalid-info-in-conf-file.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: gaihuiying <eaglegai@163.com> - 2:0.94-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add macros to control if detach the GTK package from the master package
         modify changelog  to add epoch:2


author: liyunqing <liyunqing@kylinos.cn> - 2:0.94-5
changelog:
  - modify mtr-gtk-pkexec-wrapper.sh and net-xmtr.desktop
    to fix xmtr cannot start in Xface4 environment


author: wangkai <13474090681@163.com> - 8.0.37-1
changelog:
  - Update to 8.0.37 for fix CVEs(CVE-2024-20964,CVE-2024-20971,CVE-2024-20976,
    CVE-2024-20973,CVE-2024-20978,CVE-2024-20981,CVE-2024-20962,CVE-2024-20977,
    CVE-2024-20963,CVE-2024-20965,CVE-2024-20972,CVE-2024-20961,CVE-2024-20982,
    CVE-2024-20970,CVE-2024-20967,CVE-2024-20984,CVE-2024-20974,CVE-2024-20966,
    CVE-2024-20960,CVE-2024-20985,CVE-2024-20969,CVE-2024-21000,CVE-2024-21069,
    CVE-2024-21009,CVE-2024-21087,CVE-2024-21047,CVE-2024-20998,CVE-2024-21013,
    CVE-2024-21060,CVE-2024-21008,CVE-2024-21102,CVE-2024-21054,CVE-2024-21062,
    CVE-2024-20994,CVE-2024-21096,CVE-2024-21061,CVE-2024-20993,CVE-2024-21055,
    CVE-2024-21057,CVE-2023-6129)


author: wangkai <13474090681@163.com> - 8.0.38-1
changelog:
  - Update to 8.0.38 for fix CVEs(CVE-2024-21125,CVE-2024-21142,CVE-2024-21179,
    CVE-2024-21171,CVE-2024-21130,CVE-2024-21162,CVE-2024-21177,CVE-2024-20996,
    CVE-2024-21134,CVE-2024-21165,CVE-2024-21173,CVE-2024-21129,CVE-2024-21127,
    CVE-2024-21163)


author: wangkai <13474090681@163.com> - 8.0.40-1
changelog:
  - Update to 8.0.40 for fix CVEs(CVE-2024-21218,CVE-2024-21196,CVE-2024-21207,
    CVE-2024-21198,CVE-2024-21203,CVE-2024-21213,CVE-2024-21239,CVE-2024-21199,
    CVE-2024-21197,CVE-2024-21247,CVE-2024-21193,CVE-2024-21212,CVE-2024-21241,
    CVE-2024-21230,CVE-2024-21236,CVE-2024-21194,CVE-2024-21238,CVE-2024-21237,
    CVE-2024-21201,CVE-2024-21231,CVE-2024-21219,CVE-2024-21185)


author: bzhaoop <bzhaojyathousandy@gmail.com> - 5.7.37-1
changelog:
  - Fix CVE issues for bump to the 5.7.37 version
  - CVE-2022-21245
  - CVE-2022-21270
  - CVE-2022-21303
  - CVE-2022-21304
  - CVE-2022-21344
  - CVE-2022-21367
  - CVE-2021-35624
  - CVE-2021-2356
  - CVE-2021-2011
  - CVE-2021-2010
  - CVE-2021-2007


author: yaoxin <yao_xin001@hoperun.com> - 8.0-1
changelog:
  - Update to 8.0
    * CVE-2024-5742: Avoid privilege escalations via symlink attacks
      on emergency save file (boo#1226099)
    * By default ^F is bound to starting a forward search, and ^B to
      starting a backward search, while M-F and M-B repeat the search
      in the corresponding direction. (See the documentation if you
      want the old bindings back.)
    * Command-line option --modernbindings (-/) makes ^Q quit, ^X cut,
      ^C copy, ^V paste, ^Z undo, ^Y redo, ^O open a file, ^W write a file,
      ^R replace, ^G find again, ^D find again backwards, ^A set the mark,
      ^T jump to a line, ^P show the position, and ^E execute.
    * For easier access, M-" is bound to placing/removing an anchor,
      and M-' to jumping to the next anchor.


author: chenyanpanHW <chenyanpan@huawei.com> - 71.1-3
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-ndctl-test-Fix-device-dax-mremap-test.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-zero_info_block-skip-seed-devices.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: eaglegai <eaglegai@163.com> - 2.10-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix ifconfig display error when the length of interface name is 15


author: chenyanpanHW <chenyanpan@huawei.com> - 0.2.8-19
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0000-netcf-call-aug_load-at-most-once-per-second.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-netcf-optimize-aug_match-query-for-all-ifcfg-files-related.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-netcf-linux-include-bond-element-for-bonds-with-no-slaves.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0003-netcf-Properly-classify-bond-devices-with-no-slaves.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/Fix-memory-leak-in-aug-match-mac.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: huangyu <huangyu106@huawei.com> - 1:1.0.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix string prefix expression must retain original length
  fix release top level scope


author: zhanghao <zhanghao383@huawei.com> - 1:1.0.0-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:evaluate allow implicit ether vlan dep
  evaluate datatype memleak after binop transfer
  evaluate bogus datatype assertion in binary operation evaluation
  netlink delinearize do not transfer binary operation to non anonymous sets
  payload do not kill dependency for proto unknown
  monitor missing cache and set handle initialization
  netlink linearize fix timeout with map updates


author: zhanghao <zhanghao383@huawei.com> - 1:1.0.0-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix potential array out of bounds access
  evaluate: fix shift exponent underflow in concatenation evaluation
  netlink: Fix for potential NULL-pointer deref
  mnl: dump_nf_hooks() leaks memory in error path


author: gaihuiying <eaglegai@163.com> - 1:1.0.0-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         evaluate: error out if basetypes are different
         evaluate: guard against NULL basetype
         evaluate: handle invalid mapping expressions gracefully
         evaluate: reject attempt to update a set
         evaluate: release mpz type in expr_evaluate_list() error path
         expression: missing line in describe command with invalid expression

  Thu Apr 18 2024 lingsheng <lingsheng1@h-partners.com> - 1:1.0.0-10
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:datatype: don't return a const string from cgroupv2_get_path()
  datatype: fix leak and cleanup reference counting for struct datatype
  datatype: initialize TYPE_CT_EVENTBIT slot in datatype array
  datatype: initialize TYPE_CT_LABEL slot in datatype array
  evaluate: do not remove anonymous set with protocol flags and single element
  evaluate: don't crash if object map does not refer to a value
  evaluate: error out when expression has no datatype
  evaluate: error out when store needs more than one 128bit register of align fixup
  evaluate: fix check for truncation in stmt_evaluate_log_prefix()
  evaluate: fix double free on dtype release
  evaluate: fix memleak in prefix evaluation with wildcard interface name
  evaluate: reject set in concatenation
  evaluate: revisit anonymous set with single element optimization
  evaluate: skip anonymous set optimization for concatenations
  evaluate: stmt_nat: set reference must point to a map
  evaluate: tproxy: move range error checks after arg evaluation
  evaluate: validate chain max length
  evaluate: validate maximum log statement prefix length
  exthdr: fix tcpopt_find_template to use length after mask adjustment
  exthdr: prefer raw_type instead of desc->type
  json: expose dynamic flag
  json: fix use after free in table_flags_json()
  libnftables: Drop cache in -c/--check mode
  meta: fix tc classid parsing out-of-bounds access
  netlink: don't crash if prefix for < byte is requested
  netlink: fix leaking typeof_expr_data/typeof_expr_key in netlink_delinearize_set()
  netlink: handle invalid etype in set_make_key()
  parser_bison: fix ct scope underflow if ct helper section is duplicated
  parser_bison: fix memleak in meta set error handling
  parser_bison: make sure obj_free releases timeout policies
  parser_json: Catch nonsense ops in match statement
  parser_json: Default meter size to zero
  parser_json: Fix flowtable prio value parsing
  parser_json: Fix synproxy object mss/wscale parsing
  parser_json: Fix typo in json_parse_cmd_add_object()
  parser_json: Proper ct expectation attribute parsing
  parser_json: Wrong check in json_parse_ct_timeout_policy()
  py: fix exception during cleanup of half-initialized Nftables
  rule: fix sym refcount assertion


author: gaihuiying <eaglegai@163.com> - 1:1.0.0-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         evaluate: disable meta set with ranges
         src: reject large raw payload and concat expressions
         evaluate: fix stack overflow with huge priority string
         tcpopt: don't create exthdr expression without datatype
         src: do not allow to chain more than 16 binops
         rule: fix ASAN errors in chain priority to textual names
         tests: shell: add regression test for double-free crash bug
         evaluate: handle invalid mapping expressions in stateful object
         evaluate: Fix incorrect checking the `base` variable in case of IPV6
         netlink: reset temporary set element stmt list after list splice


author: xingwei <xingwei14@h-partners.com> - 2:7.92-4
changelog:
  - Type:bugfix
  - CVE:
  - SUG:NA
  - DESC:decouple from PCRE because it has been End-of-life, use local libpcre to build instead


author: wangkai <13474090681@163.com> - 1:12.22.11-5
changelog:
  - Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
  - CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
  - CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
  - CVE-2023-32559,CVE-2022-35256


author: chenyanpanHW <chenyanpan@huawei.com> - 4.29.0-2
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/nspr-gcc-atomics.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p15-7
changelog:
  - Type:CVE
  - ID:CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26554
  - SUG:NA
  - DESC:make sure the buffer has enough room for the input extra characters


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p15-13
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add restart and conflict to service
         run the bootstrap script to prevent build failures


author: Ruozhu Li <liruozhu@huawei.com> - 1.00.029-1
changelog:
  - Added the function of sending a notification message to the switch when the software starts, and the switch sending domain members to the host, improving the reliability of software upgrade scenarios.
  - Add more connection parameter support, consistent with nvme cli.
  - Bond ports can join the domain and automatically establish a connection.


author: cuixucui <cuixucui@h-partner.com> - 1.1.5-0
changelog:
  - Add support for openEuler 20.03 LTS SP4, openEuler 22.03 LTS SP2, openEuler 22.03 LTS SP3
  - Add modifications to Kylinsec with oec-hardware
  - Add support for Loongson and SW architectures
  - Bugfix


author: cuixucui <cuixucui@h-partner.com> - 1.1.5-1
changelog:
  - Add virtual cases
  - Resolve IB startup IB_Read_BW service failure issue
  - Delete redundant references
  - Resolve incorrect type in vgpu result data
  - Resolve the issue of getting the kernel source rpm


author: cuixucui <cuixucui@h-partner.com> - 1.1.5-1
changelog:
  - Resolve kdump\watchdog\cpufreq\kabiwhitelist\network test failure issue 
  - Add fio test cases:read,write,randread,randwrite
  - Solve the nvme line break issue in the command line interface
  - Fix compilation errors in the make command
  - Add Vulkan testcase for nvida GPU
  - Resolve the issue of oech server startup failure on version 24.03


author: xiaochn <xiaochuannan@inspur.com> - 1.1.5-3
changelog:
  - Resolve the issue of different kernel source download locations in kabi test case
  - Resolve the issue that kabiwhitelist still passes when the ko and rpm file does not exist
  - Add the way for manually adding kabiwhitelist file
  - For custom vendors, refer to the method of obtaining openEuler os information
  - Supports custom vendor


author: wangshuai <wangshuai321@huawei.com> - 1.1.6-0
changelog:
  - Add new test suite srpm and intel
  - Add virtual branch of test suite
  - Add support for Kylin and UOS
  - Bugfix


author: wangshuai <wangshuai321@huawei.com> - 1.1.6-3
changelog:
  - Update the pci.ids file
  - Remove unused variable in cdrom test suite
  - Update test_guide doc
  - Unify the location for downloading kernel source RPMs
  - Optimize kabiwhitelist and system test


author: JofDiamonds <kwb0523@163.com> - 1.1-5
changelog:
  - fix some review issues:
    1.fix segment fault triggered by unsupported command operations
    2.fix incorrect use of securec function parameters
    3.remove redundant cmd option 'V'


author: chenyanpanHW <chenyanpan@huawei.com> - 0.100-6
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-Do-not-install-isnsd.socket-in-isnsd.service.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-isnsadm-Fix-unparse-command-line-options-V-and-r.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0003-isnsd-socket-Make-sure-to-create-IPv6-socket-default.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Funda Wang <fundawang@yeah.net> - 0.21.0-11
changelog:
  - fix CVE-2024-8443, CVE-2024-45615, CVE-2024-45616,
    CVE-2024-45617, CVE-2024-45618, CVE-2024-45619, CVE-2024-45620


author: chenyanpanHW <chenyanpan@huawei.com> - 2.0.0-26
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-multicast-set.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-notify-systemd-of-start-up.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-null-pointer-deref.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-openssl-1.1-fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-cve-2016-7567.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-cve-2017-17833.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/CVE-2012-4428-fix-handling-of-string-list-in-slp_common-c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/Fix-slp_iface-c-comma-expression-so-it-works-as-designed.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/Daemon-sends-wrong-service-reply-when-security-is-enabled.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/Fix-DAAddresses-hostname-resolution-issue.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/Change-default-slpreg-connection-from-UDP-to-TCP.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/Fix-interface-parsing-code-to-look-for-null-ifc-addrs.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/Fix-broadcast-functionality.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/Properly-initialize-xcastsocks-for-error-exit.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/Fix-xrealloc-to-properly-free-original-pointer-on-resize.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/CVE-2019-5544.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: xingwei <xingwei14@h-partners.com> - 2.0.0-27
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Introduce epoch command to slove package upgrade failure problem


author: renmingshuai<renmingshuai@huawei.com> - 8.8p1-25
changelog:
  - Type:CVE
  - CVE:CVE-2023-48795,CVE-2023-51385
  - SUG:NA
  - DESC:fix CVE-2023-48795 and CVE-2023-51385


author: wujie <wujie@nj.iscas.ac.cn> - 5.6.0-10
changelog:
  - add support for riscv64 from http://fedora.riscv.rocks/koji/buildinfo?buildID=31200
    Author is David Abdurachmanov <david.abdurachmanov@gmail.com>


author: chenyanpanHW <chenyanpan@huawei.com> - 3.7.0-2
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0000-pciutils-2.2.1-idpath.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-pciutils-dir-d.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: wangkai <13474090681@163.com> - 5.3.7-6
changelog:
  - Fix CVE-2024-45769,CVE-2024-45770
  - Fix buffer sizing checks in pmstore PDU handling (RHEL-57805)
  - Guard against symlink attacks in pmpost program (RHEL-57810)
  - Fix libpcp_web webgroup slow request refcounting (RHEL-58306)
  - Updated pmdahacluster for newer crm_mon versions (RHEL-50693)
  - Fix invalid memory access in pmfind utility (BZ 2135314)


author: chenyanpanHW <chenyanpan@huawei.com> - 1.9.0-3
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-pcscdaemon.c-Fix-data-race-for-AraKiri-variable.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Xiaoqian Lv <xiaoqian@nj.iscas.ac.cn> - 4.5-5
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC: backport upstream 4.5-0.20 patches to support riscv64


author: lichaoran <pkwarcraft@hotmail.com> 1.3293-3
changelog:
  - add buildRequires: add gcc as we using it to compile
  - and perl-generators to auto-generate perl module provides


author: wujie <wujie@nj.iscas.ac.cn> - 0.61-20
changelog:
  - Add riscv64 support from http://fedora.riscv.rocks/koji/buildinfo?buildID=186681
    Author is David Abdurachmanov <david.abdurachmanov@sifive.com>


author: shenbowen <shenbowen@xfusion.com> - 0.4.1-8
changelog:
  - Type:SPEC
  - ID:NA
  - SUG:NA
  - DESC:modify %patchxxx -p1 to 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-Pin-gcc-client-BugFix-for-SwitchOp-change-it-to-term.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-Pin-gcc-client-Bugfix-for-GetFunctionById.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0003-Pin-gcc-client-Init-a-SimpleIPAPASS.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0004-Pin-gcc-client-Add-CGnodeOp.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0005-Pin-gcc-client-Add-support-for-decl-and-field-SetDec.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0006-Pin-gcc-client-Add-GetDeclType.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0007-Pin-gcc-client-Fix-VectorType.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0008-Pin-gcc-client-Fix-struct-self-contained-CallOp-Tree.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0009-Pin-gcc-client-Fix-TreeToValue-VAR_DECL-and-ARRAY_TY.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0010-PluginClient-Fix-the-bug-during-multi-process-compil.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0011-Fix-BUILD-errors.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0012-PluginClient-Update-transfer-command.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch -f


author: weijin deng <weijin.deng@turbolinux.com.cn> - 0.3.15-1
changelog:
  - Upgrade to 0.3.15
  - Update Version, Source0, BuildRequires, Obsoletes
  - Update stage 'build', 'install' and 'files'
  - Correct uncorrect date, add one patch


author: gaihuiying <eaglegai@163.com> - 0.9.5-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add macros to control if need libdrm, pango, libpng and if need to exclude bootlog


author: zhouwenpei <zhouwenpei1@h-partners.com> - 0.90.0-6
changelog:
  - fix CVE-2022-37050,CVE-2022-37051,CVE-2022-37052,CVE-2022-38349,CVE-2020-23804
  - fix install error


author: xiongyi <xiongyi@uniontech.com> - 0.90.0-7
changelog:
  - fix CVE-2020-36023
  - fix infinite looping in cvtGlyph with broken files
  - patch source:https://gitlab.freedesktop.org/poppler/poppler/-/issues/1013


author: dillon chen <dillon.chen@gmail.com> - 13.3-8
changelog:
  - Fix build error for loongarch64
  - Fix issue: confilct between libpq-devel and postgresql-devel
  - guess init spec from redhat
  - change redhat spec:rm private package and add files to server-devel
  - so add delete lines to Fix issue
  - Next: write oe libpq and postgresql spec by myself


author: queyanwen <queyanwen@huawei.com> - 1.0.0-5
changelog:
  - Solve the coredump problem during CI compilation
  - Solve the garbled characters caused by uninitialized string variables


author: xuchongyu <xuchongyu@huawei.com> - 1.0.0-7
changelog:
  - Solve the problem that the illegal frequency range of the PWR_CPU_SetFreq interface is inconsistent with the illegal governor error code
  - And the error code returned by the interface with the set frequency range is inappropriate


author: xuchongyu <xuchongyu@huawei.com> - 1.0.0-8
changelog:
  - Solve the problem that the automatic generation permission of the sockfile path on the server is insufficient
  - And ordinary users cannot connect


author: xuchongyu <xuchongyu@huawei.com> - 1.0.1-2
changelog:
  - Solve the problem that the client is actively disconnected and the server is incorrect in clearing resources


author: heppen <hepeng68@huawei.com> - 1.0.1-4
changelog:
  - Add the dependency on ipmitool.
  - Fix bug: Coredump when CPU cores number exceed 248 or numa nodes exceed 16.
  - Fix some memory bug.


author: gaihuiying <eaglegai@163.com> - 2.4.9-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:pppd: Negotiate IP address when only peer addresses are provided


author: chenyanpanHW <chenyanpan@huawei.com> - 3.22-52
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/procmail-3.22-rhconfig.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/procmail-3.15.1-man.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/procmail_3.22-8.debian.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/procmail-3.22-truncate.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/procmail-3.22-ipv6.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/procmail-3.22-getline.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/procmail-3.22-CVE-2014-3618.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/procmail-3.22-crash-fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/procmail-3.22-CVE-2017-16844.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: chengzeruizhi <chengzeruizhi@huawei.com> - 3.14.0-7
changelog:
  - Type:enhancement
  - ID:NA                  
  - SUG:NA                                                             
  - DESC: add compile option for coverage


author: ouyangminxiang <ouyangminxiang@kylinsec.com.cn> - 15.0-7
changelog:
  - Fix mate-volume-control-status-icon doesn't work
  - Fix the problem that the muted function in mate-volume-control-status-icon doesn't work when the system is boot
  - Recompile systemd post scripts for pulseaudio


author: xihaochen <xihaochen@huawei.com> - 1.20.0-1
changelog:
  - Type:requirements                                                                                                                                  
  - Id:NA
  - SUG:NA
  - DESC:update pycairo to 1.20.0


author: xihaochen <xihaochen@huawei.com> - 5.4-1
changelog:
  - Type:requirements                                                                                                                                  
  - Id:NA
  - SUG:NA
  - DESC:update python-coverage to 5.4


author: dongyuzhen <dongyuzhen@h-partners.com> - 9.0.1-2
changelog:
  - correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)


author: shixuantong <shixuantong@huawei.com> - 7.43.0.6-2
changelog:
  - fix test fail for test_sslversion_options, test_failonerror and test_failonerror_status_line_invalid_utf8_python3


author: xu_ping <xuping33@h-partners.com> - 0.2.6-2
changelog:
  - Tarball of source code has correct file content,but inconsistent checksum.
    Replace tarball with the consistent checksum.


author: xinsheng <xinsheng3@huawei.com> - 3.9.9-30
changelog:
  - Type:CVE
  - CVE:NA
  - SUG:NA
  - DESC:fix CVE-2024-6923,CVE-2024-7592,CVE-2024-8088
      - Encode newlines in headers, and verify headers are sound
      - Fix quadratic complexity in parsing quoted cookie values with backslashes
      - Replaced SanitizedNames with a more surgical fix


author: xinsheng <xinsheng3@huawei.com> - 3.9.9-31
changelog:
  - Type:CVE
  - CVE:CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597,CVE-2024-4032
  - SUG:NA
  - DESC:fix CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597,CVE-2024-4032
      - rename all CVE patch name
      - CVE-2024-6232: Remove backtracking when parsing tarfile headers
      - CVE-2024-3219: patch1 Authenticate socket connection for `socket.socketpair()` fallback
      - CVE-2024-3219: patch2 Rework pure Python socketpair tests to avoid use of importlib.reload.
      - CVE-2024-0450: Protect zipfile from "quoted-overlap" zipbomb
      - CVE-2023-6597: tempfile.TemporaryDirectory: fix symlink bug in cleanup
      - CVE-2024-4032: Fix "private" (non-global) IP address ranges


author: wangshuo <wangshuo@kylinos.cn> - 3.9.9-32
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch, fix the bug introduced by the fix for CVE-2007-4559
  -      gh-107845: Fix symlink handling for tarfile.data_filter


author: <fengjiabo1@huawei.com> - 10:6.2.0-92
changelog:
  - s390x/sclp: Simplify get_sclp_device() 
  - target/ppc: Remove msr_pr macro
  - docs/system/target-arm: Re-alphabetize board list
  - migration: Extend query-migrate to provide dirty page limit info
  - migration: Implement dirty-limit convergence algo
  - migration: Put the detection logic before auto-converge checking
  - migration: Refactor auto-converge capability logic
  - migration: Introduce dirty-limit capability
  - qapi/migration: Introduce vcpu-dirty-limit parameters
  - qapi/migration: Introduce x-vcpu-dirty-limit-period parameter
  - Change the value of no_ged from true to false
  - Allow UNIX socket option for VNC websocket
  - tpm_emulator: Avoid double initialization during
  - chardev/char-socket: Update AF_UNIX for Windows
  - KVM: dirty ring: add missing memory barrier
  - i386: reset KVM nested state upon CPU reset
  - esp: Handle CMD_BUSRESET by resetting the SCSI bus
  - dbus-vmstate: Restrict error checks to registered proxies in dbus_get_proxies
  - vfio/pci: Add Ascend310b scend910b support
  - target/i386: Export RFDS bit to guests
  - target/i386: Add new CPU model SierraForest
  - target/i386: Introduce Icelake-Server-v7 to enable TSX
  - hw/virtio: handle un-configured shutdown in virtio-pci
  - target/s390x: display deprecation status in '-cpu  help'
  - target/i386: display deprecation status in '-cpu  help'
  - pc-bios/s390-ccw: Fix booting with logical block size < physical block size


author: <fengjiabo1@huawei.com> - 10:6.2.0-93
changelog:
  - cvm: bug-fix for macro isolation
  - tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fix CVE-2023-5088)
  - hw/ide: reset: cancel async DMA operation before resetting state (Fix CVE-2023-5088)
  - Add support for the virtcca cvm feature.


author: <fengjiabo1@huawei.com> - 10:6.2.0-96
changelog:
  - vdpa: Fix bug where vdpa appliance migration does not resume after rollback
  - block: Parse filenames only when explicitly requested (CVE-2024-4467)
  - block: introduce bdrv_open_file_child() helper
  - iotests/270: Don't store data-file with json: prefix in image (CVE-2024-4467)
  - iotests/244: Don't store data-file with protocol in image (CVE-2024-4467)
  - qcow2: Don't open data_file with BDRV_O_NO_IO (CVE-2024-4467)
  - qcow2: Do not reopen data_file in invalidate_cache
  - hw/intc/arm_gic: Fix deactivation of SPI lines chery-pick from 7175a562f157d39725ab396e39c1e8e410d206b3
  - vhost-user: Skip unnecessary duplicated VHOST_USER_SET_LOG_BASE requests
  - target/ppc: Split off common embedded TLB init cheery-pick from 581eea5d656b73c6532109f4ced4c73fd4e5fd47`
  - vdpa: fix vdpa device migrate rollback wrong when suspend device failed 1. 
  - hw/virtio/virtio-pci:Support shadow device for virtio-net/blk/scsi devices


author: <fengjiabo1@huawei.com> - 10:6.2.0-97
changelog:
  - nbd/server: CVE-2024-7409: Close stray clients at server-stop
  - main-loop.h: introduce qemu_in_main_thread()
  - aio-wait.h: introduce AIO_WAIT_WHILE_UNLOCKED
  - nbd/server: CVE-2024-7409: Drop non-negotiating clients
  - nbd/server: CVE-2024-7409: Cap default max-connections to 100
  - nbd/server: Plumb in new args to nbd_client_add()
  - nbd: Minor style and typo fixes


author: <fengjiabo1@huawei.com> - 10:6.2.0-98
changelog:
  - pci-host: designware: Limit value range of iATU viewport register
  - hmat acpi: Fix out of bounds access due to missing use of indirection
  - migration: Skip only empty block devices
  - aspeed/hace: Initialize g_autofree pointer
  - hw/net/vmxnet3: Fix guest-triggerable assert()
  - qxl: don't assert() if device isn't yet initialized
  - Avoid unaligned fetch in ladr_match()
  - linux-user: Fix waitid return of siginfo_t and rusage
  - hw/net/lan9118: Replace magic '2048' value by MIL_TXFIFO_SIZE definition
  - stdvga: fix screen blanking
  - virtio-net: drop too short packets early
  - ebpf: replace deprecated bpf_program__set_socket_filter
  - vhsot-user: only read reply of SET_LOG_BASE from vq 0
  - cpu: add Tengyun S5000C cpu support
  - hw/virtio: Fix obtain the buffer id from the last descriptor
  - hw/core: ensure kernel_end never gets used undefined


author: <fengjiabo1@huawei.com> - 10:6.2.0-99
changelog:
  - target/i386: Introduce SapphireRapids-v3 to add missing features
  - qtest/fuzz-lsi53c895a-test: set guest RAM to 2G
  - hw/net/lan9118: Signal TSFL_INT flag when TX FIFO reaches specified level
  - target/arm: Fix alignment for VLD4.32
  - hw/microblaze: pass random seed to fdt
  - tests/qtest: npcm7xx-emc-test: Skip checking MAC
  - tests: mark io-command test as skipped if socat is missing
  - tests: unit: add NULL-pointer check
  - tests: test-qga: close socket on failure to connect
  - vdpa:block device capacity expansion online support vdpa block device update capacity.
  - virtio-net: Ensure queue index fits with RSS(CVE-2024-6505)
  - nbd/server: CVE-2024-7409: Avoid use-after-free when closing server
  - ppc/vof: Fix unaligned FDT property access
  - vvfat: Fix reading files with non-continuous clusters
  - vvfat: Fix bug in writing to middle of file
  - savevm: Fix load_snapshot error path crash
  - hw/dma/xilinx_axidma: Use semicolon at end of statement, not comma
  - hw/remote/message.c: Don't directly invoke DeviceClass:reset
  - crypto/tlscredspsk: Free username on finalize
  - hw/display/vhost-user-gpu.c: fix vhost_user_gpu_chr_read()
  - virtio: remove virtio_tswap16s() call in vring_packed_event_read()
  - char-stdio: Restore blocking mode of stdout on exit
  - hw/ppc: spapr: Use qemu_vfree() to free spapr->htab
  - smbios: sanitize type from external type before checking have_fields_bitmap
  - spapr_pci: fix leak in spapr_phb_vfio_get_loc_code
  - KVM: use store-release to mark dirty pages as harvested
  - monitor/hmp: print trace as option in help for log command
  - tpm_crb: Avoid backend startup just before shutdown under Xen
  - crypto/block-luks: make range overlap check more readable
  - spapr: Free stdout path
  - target/rx: Use target_ulong for address in LI
  - virtio-pci: Fix the use of an uninitialized irqfd
  - rtl8139: Fix behaviour for old kernels.
  - virtio-rng: block max-bytes=0 MIME-Version: 1.0
  - hw/audio/es1370: Clean up comment
  - vhost-user-server: do not set memory fd non-blocking
  - ui: reject extended clipboard message if not activated
  - virtio-net: Fix vhost virtqueue notifiers for RSS
  - hw/misc/applesmc: Fix memory leak in reset() handler


author: <fengjiabo1@huawei.com> - 10:6.2.0-100
changelog:
  - mac_dbdma: Remove leftover `dma_memory_unmap` calls(CVE-2024-8612)
  - softmmu: Support concurrent bounce buffers(CVE-2024-8612)
  - system/physmem: Per-AddressSpace bounce buffering
  - system/physmem: Propagate AddressSpace to MapClient helpers


author: <fengjiabo1@huawei.com> - 10:6.2.0-101
changelog:
  - python/aqmp: use absolute import statement
  - sysemu: Cleanup qemu_run_machine_init_done_notifiers()
  - vhost-backend: avoid overflow on memslots_limit
  - hw/i386/vmmouse: Require 'i8042' property to be set
  - hw/scsi/megasas: Fails command if SGL buffer overflows
  - target/i386/kvm: Replace use of __u32 type
  - hw/avr: Realize AVRCPU qdev object using qdev_realize()
  - qemu-keymap: Add license in generated files
  - configure: Symlink binaries using .exe suffix with MinGW
  - ui: remove break after g_assert_not_reached()
  - io/channel-websock: Replace strlen(const_str) by sizeof(const_str) - 1
  - target/ppc: Add HASHKEYR and HASHPKEYR SPRs
  - tests: Fix error strings
  - Hexagon (target/hexagon) remove unused encodings
  - target/i386: introduce insn_get_addr
  - target/i386: REPZ and REPNZ are mutually exclusive
  - target/i386: correctly mask SSE4a bit indices in register operands
  - bios-tables-test: Make oem-fields tests be consistent
  - tests/vm: update NetBSD to 9.3
  - monitor/hmp-cmds: Avoid displaying bogus size in 'info pci' When BAR aren't mapped, we get:
  - virtio-mem: don't warn about THP sizes on a kernel without THP Support
  - Subject: [PATCH] kvm: Use 'unsigned long' for request argument in functions  wrapping ioctl()


author: xihaochen <xihaochen@huawei.com> - 2.19-1
changelog:
  - Type:requirements                                                                                                                               
  - Id:NA
  - SUG:NA
  - DESC:update radvd to 2.19


author: renhongxun <renhongxun@h-partners.com> - 0.6.7-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:clear the link to rasdaemon.service when uninstalling rasdaemon
         and ensure rasdaemon restart once be upgraded


author: caijian <caijian11@h-partners.com> - 0.6.7-15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:
    1. Fix "nimbus_id=0" field is not displayed when query RAS error information.
    2. Check CPUs online,not configured.


author: caixiaomeng <caixiaomeng2@huawei.com> - 0.6.7-19
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add-dynamic-switch-of-ras-events-support-and-disable-block-rq-complete


author: yangjunshuo <yangjunshuo@huawei.com> - 0.6.7-20
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix cpu isolate errors when some cpus are offline
    before the service started


author: chenziyang <chenziyang4@huawei.com> - 8.1-3
changelog:
  - Add shell command to switch bracketed-paste mode from on to off to keep consistent with realine-8.0


author: sunsuwan <sunsuwan3@huawei.com> - 1.2.6-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:add a user directory when the rpc user directory does not exist


author: wangyueliang <wangyueliang@kylinos.cn> - 2022.16-4
changelog:
  - merge feature from branch openEuler-22.03-LTS-SP1：
  - DESC: add loongarch64 and sw_64 support
  - AUTHOR: panchenbo <panchenbo@kylinsec.com.cn>


author: linzhuorong <linzhuorong@huawei.com> - 8.2210.0-2
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC: imjournal: add second fallback to _COMM
          bugfix: prevent pot. segfault when switchung to
          core/bugfix: using $uuid msg prop can deadlock rsyslog on shutdown
          GNUTls Driver: Fix memory leaks in gtlsInitCred


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 8.2210.0-3
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC:omprog bugfix: invalid status handling at called program
         core bugfix: template system may generate invalid json


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 8.2210.0-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:tcp net subsystem: handle data race gracefully
         fix startup issue on modern systemd systems
         tcpflood bugfix: plain tcp send error not properly reported
         tcpflood bugfix: TCP sending was not implemented properly
         lookup tables: fix static analyzer issue
         lookup tables bugfix: reload on HUP did not work when backgrounded
         openssl: Replaced depreceated method SSLv23_method with TLS_method
         mmnormalize bugfix: if msg cannot be parsed, parser chain is stopped
         core bugfix: potential segfault on busy systems
         imfile: fix ext directory's fd leak in case of inotify on symlink
         imfile tests: ext directory's fd leak in case of inotify on symlink


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 8.2210.0-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:imfile: remove state file on file delete fix
         omfile: do not carry out actual action when writing to /dev/null
         core bugfix: rsyslog messages may not always have FQDN


author: xinghe <xinghe2@h-partners.com> - 4.17.5-3
changelog:
  - Type:cves
  - ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
  - SUG:NA
  - DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922


author: xinghe <xinghe2@h-partners.com> - 4.17.5-7
changelog:
  - Type:cves
  - ID:CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968
  - SUG:NA
  - DESC:fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968


author: xinghe <xinghe2@h-partners.com> - 4.17.5-9
changelog:
  - Type:cves
  - ID:CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670
  - SUG:NA
  - DESC:fix CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670


author: yanglu<yanglu72@h-partners.com> - 8.17.1-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix newaliases command error and postfix service start execption after sendmail install


author: wangkai <13474090681@163.com> - 14.4.2.0-29
changelog:
  - Fix CVE-2021-33844,CVE-2023-32627,CVE-2021-23159,CVE-2023-34432
  - CVE-2023-34318,CVE-2021-23172,CVE-2021-3643,CVE-2021-23210
  - CVE-2022-31650,CVE-2023-26590,CVE-2022-31651,CVE-2023-32627
  - CVE-2017-18189


author: chenyanpanHW <chenyanpan@huawei.com> - 0.8.8-12
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-Remove-pyxdg-dependency.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: chenyanpanHW <chenyanpan@huawei.com> - 4.4-4
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0003-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0004-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0005-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0006-pseudo-fix-possible-dereference-of-NULL-pointer.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Jie Yang <yangjieyj.yang@huawei.com> - 2.0.0-6
changelog:
  - docs: fix some statement
  - machine_manager: add autodeflate for balloon
  - migration: add dev_id into VirtioPciState when save and restore device state
  - machine: fix more than one pcie-root-ports with same id
  - migration: move function "transport_reset" to save state stage for vhost vsock device
  - vfio: adding ram device region to vfio bar region
  - machine_manager: move argument "serial" from -drive to -device virtio-blk-pci/device
  - machine_manager: add multifunction for devices
  - machine: add init_multifunction function to init multifunction
  - machine: add realization for multifunction


author: Jie Yang <yangjieyj.yang@huawei.com> - 2.1.0-1
changelog:
  - Add support for PCIe native hotplugging.
  - Reduce memory consumption of reading edk2 firmware files on aarch64.
  - Add support for booting from disk image directly.
  - Add support for VM reboot and VM shutdown.
  - Add support for guest memory preallocation.
  - Add more test cases.
  - Add and fix documentation.
  - Replace lazy_static crate with once_cell.
  - Performance enhancement for virtio-blk and virtio-net devices.
  - Add ftrace support.


author: Jie Yang <yangjieyj.yang@huawei.com> - 2.1.0-2
changelog:
  - Fix VFIO hotplugging failure caused by missing seccomp rules.
  - Fix booting failure from disk image on x86_64.
  - Update some documents.


author: Jie Yang <yangjieyj.yang@huawei.com> - 2.1.0-3
changelog:
  - Fix memory snapshot failure with hotplugged devices.
  - Fix address translation for virtio devices.
  - Add some test cases for microvm.
  - Update some documents.


author: yeqinglong <yeqinglong@kylinsec.com.cn> - 5.1.19-17
changelog:
  - add loongarch64 and sw_64 support
  - add kylinsec to supermin support
  - fix supermin cannot detect kylinsecos


author: openEuler Buildteam <buildteam@openeuler.org> - 1.4-23
changelog:
  - Modify spec error information

   Sat Sep 07 2019 openEuler Buildteam <buildteam@openeuler.org> - 1.4-22
  - Package init


author: ningyu<ningyu9@huawei.com> - 1.2.1-3
changelog:
  - upatch-hijacker: fix compile bug
  - daemon: fix 'cannot get file selinux xattr when selinux is not enforcing' issue
  - syscared: fix 'syscare check command does not check symbol confiliction' issue
  - syscared: fix 'cannot find process of dynlib patch' issue
  - Change uuid type from string to uuid bytes
  - syscared: optimize patch error logic
  - syscared: optimize transaction creation logic
  - upatch-manage: optimize output
  - syscared: optimize patch error logic
  - syscared: optimize transaction creation logic
  - spec: fix "cannot find syscare service after upgrade" bug


author: ningyu<ningyu9@huawei.com> - 1.2.1-4
changelog:
  - syscared: stop activating ignored process on new process start
  - syscared: adapt upatch-manage exit code change
  - upatch-manage: change exit code
  - upatch-manage: change the way to calculate frozen time


author: renoseven<dev@renoseven.net> - 1.2.1-6
changelog:
  - upatch-diff: fix 'lookup_elf failed' issue
  - upatch-manage: fixed the core dump issue after applying hot patches to nginx on x86_64 architecture
  - security: change daemon socket permission
  - security: change directory permission
  - upatch-build: fix 'file detection cause build failure' issue
  - syscared: stop activating ignored process on new process start


author: ningyu<ningyu9@huawei.com> - 1.2.1-7
changelog:
  - upatch-diff: remove rela check while build rebuilding .eh_frame
  - upatch-diff: only check changed file symbols


author: renoseven<dev@renoseven.net> - 1.2.1-9
changelog:
  - abi: remove display limit of patch info
  - all: clean code
  - all: implement asan gcov build type
  - security: sanitize sensitive code
  - upatch-manage: fix memory leak
  - upatch-helper: fix memory leak
  - upatch-diff: fix memory leak
  - upatch-diff: fix find duplicate symbol issue
  - upatch-diff: prevent tls variable modification
  - common: fix failed to set selinux status issue
  - all: add compile options
  - all: remove redundant code
  - all: finding executable from environment variables
  - add excludearch loongarch64


author: renoseven<dev@renoseven.net> - 1.2.1-10
changelog:
  - upatch-diff: fix '.rela' '.rela.text' resolving issue
  - upatch-manage: fix plt resolving issue
  - upatch-manage: fix patch region finding issue
  - common: fix normalizing empty path return non-empty issue
  - syscared: add check action for [DEACTIVED -> ACTIVED] transition


author: yangjiaqi<yangjiaqi16@huawei.com> - 0.9-57
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:use file locks to avoid remounting the sharepath/master dir


author: yangjiaqi<yangjiaqi16@huawei.com> - 0.9-58
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:clean up run/syscontainer-tools/netns/container_id directory residues in the prestart phase


author: zhangxianting <zhangxianting@uniontech.com> - 0.9-64
changelog:
  - Type:patch
  - CVE:NA
  - SUG:NA
  - DESC:patch hunk FAILED bacause of the arch judgement of sw_64 and loongarch64


author: zhang_chunjing<zhang_chunjing@hoperun.com> - 1.3.2-1.1
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC: add systemd to BuildRequires to fix install/uninstall errors


author: huyubiao <huyubiao@huawei.com> - 249-78
changelog:
  - add backport-login-user-runtime-dir-properly-check-for-mount-poin.patch
        backport-user-util-validate-the-right-field.patch


author: langfei<langfei@huawei.com> - 4.5-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Resolve stap-exporter.service chenge to disable when upgraded systemtap-stap-exporter package


author: yangzhuangzhuang <yangzhuangzhaung1@huawei.com> - 1:8.6.10-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:The "no acceptable C compiler found" error message is displayed during compilation.Therefore,add buildrequires gcc.


author: yixiangzhike <yixiangzhike007@163.com> - 1:8.6.12-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert "Change wrong Provides. Replace 1:8.6.10 to epoch:version"


author: xingwei <xingwei14@h-partners.com> - 14:4.99.1-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Set SA_RESTART on non-lethal signals (REQ_INFO, FLUSH_PCAP) to avoid corrupting binary pcap output


author: yaoxin <yaoxin30@huawei.com> - 0.14.0-4
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-45105 is fixed,the version needs to be rebuild.


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com>- 0.6-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:The "cc:No such file or directroy" error message is displayed during compilation.Therefore,add buildrequires gcc.
         The macro unitdir is used.Therefore,add buildrequires systemd


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.38.0-1
changelog:
  - Upgrade to 3.38.0
  - Sub package totem-nautilus becomes empty
    in version 3.31.91 Move nautilus properties page to nautilus module


author: qinyu<qinyu32@huawei.com> - 2022a-10
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Greenland change should affect only America/Nuuk; The northern edge of Chihuahua changes to US rules


author: langfei<langfei@huawei.com> - 2022a-16
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Fix Palestine predictions for 2072 through 2075; Ittoqqortoormiit (America/Scoresbysund) zone change.


author: liuchao <liuchao173@huawei.com> - 2022a-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Vostok switches to +05; Sync Casey data from timeanddata.com; Kazakhstan unifies on UTC+5


author: renmingshuai <renmingshuai@huawei.com> - 4.4.2-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:remove build require bind-export-devel and add buildin bind


author: renmingshuai <renmingshuai@huawei.com> - 4.4.2-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:add a test case for PXE to support ipv6
         support lease time config for ipv6


author: gaihuiying <eaglegai@163.com> - 1.13.2-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:change run directory from /var/run to /run to fix "/usr/lib/tmpfiles.d/unbound.conf:1: xxxx"


author: chenyanpanHW <chenyanpan@huawei.com> - 0.8.0-6
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-usbredirect-listen-on-correct-address.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-29
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add provides and support enable-raw
         The current version of the kernel also supports the raw driver.
         To keep consistent with the previous version, roll back the modification.


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-30
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix lscpu core dump
         backport-lscpu-don-t-use-NULL-sharedmap.patch
         backport-lscpu-use-topology-maps-in-more-robust-way.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-31
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         backport-hexdump-check-blocksize-when-display-data.patch
         backport-lslocks-fix-buffer-overflow.patch
         backport-last-avoid-out-of-bounds-array-access.patch
         backport-lsipc-fix-semaphore-USED-counter.patch


author: yanglongkang <yanglongkang@h-partners.com> - 2.37.2-32
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         backport-uuidd-fix-open-lock-state-issue.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-34
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         [add]backport-Fix-ul_path_read_buffer.patch
         backport-fsck.minix-fix-possible-overrun.patch
         backport-wall-fix-possible-memory-leak.patch
         backport-wall-make-sure-unsigned-variable-not-underflow.patch


author: liyuzhe <liyuzhe@cqsoftware.com.cn> - 2.37.2-36
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         backport-login-su-pam_end-compliance.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-38
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         [add]backport-lsmem-make-lsmem-to-check-for-the-nodes-more-robust.patch
         backport-cfdisk-fix-possible-integer-overflow-coverity-scan.patch
         backport-more-make-sure-we-have-data-on-stderr.patch
         backport-libblkid-apfs-validate-checksums.patch


author: weijin deng <weijin.deng@turbolinux.com.cn> - 0.50.8-2
changelog:
  - Correct package depends
  - Delete unnecessary and uncorrect Requires, Provides, Obsoletes, Conflicts
  - Update Release to 2


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-22
changelog:
  - Type:CVE
  - ID:CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237
  - SUG:NA
  - DESC:fix CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237


author: Jiajun Chen <1250062498@qq.com> - 1.1-2
changelog:
  - vcp_stat: add Max Scheduling Delay time items to display
  - args: add -p option
  - key: add page up/down key response
  - vcpu_stat: get vcpu stat list once per display instead of per vcpu
  - proc: del /prc/pid/comm read
  - display: del screen clear after key response
  - arch: add x86 kvm exits items
  - codestyle: del unused var


author: Huawei Technologies Co., Ltd <alex.chen@huawei.com> - 1.1-5
changelog:
  - vcpu_list: pre malloc vcpu list to improve performance
  - performance: del unnecessary memcpy and memset
  - keyboard: change wait time to 3s
  - performance: change memset location
  - proc: del unused items getting from proc stat refresh
  - proc: del loop sscanf for proc pid stat file
  - utils: del realpath from read_file


author: yangzhuangzhuang<yangzhuangzhuang1@huawei.com> - 0.3.12-3
changelog:
  - The "no acceptable C compiler found" error message is displayed during compilation.Therefore,add buildrequires gcc.


author: wangzhishun <wangzhishun1@huawei.com> - 5.1.0-11
changelog:
  - Make sure sample rate is specified and non-zero in DFF files
  - Fix potential out-of-bounds heap read


author: Zhiqiang Liu <liuzhiqiang26@huawei.com> - 5.14.1-8
changelog:
  - readline has been removed by bbe12eb9a0f9 (xfsprogs: remove libreadline support),
    we can use --enable-editline=yes to enable similar functions.
    fix issue: https://gitee.com/src-openeuler/xfsprogs/issues/I6Y8SU


author: yanglu <yanglu72@h-partners.com> -1.20.11-31
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix regression caused by the fix for CVE-2024-0229 
         fix use after free related to CVE-2024-21886


author: shuaijiakun <shuaijiakun1288@phytium.com.cn> -1.20.11-32
changelog:
  - Type:feature
  - CVE:NA
  - SUG:NA
  - DESC:fix display error for ps23xx when using ast and pe2201 bmc card.


author: wangkerong <wangkerong@h-partners.com> - 7.8-1
changelog:
  - upgrade to setxkbmap-1.3.3
  - upgrade to xkbcomp-1.4.5
  - upgrade to xkbprint-1.0.6
  - upgrade to xkbutils-1.0.5


author: luhuaxin <luhuaxin@huawei.com> - 1.3-39
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC: move gxvattr to main package, move AUTHORS to license folder


author: kouwenqi <kouwenqi@kylinos.cn> - 5.2.5-4
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC:Add overflow check for Unpadded size in lzma_index_append


author: xingwei <xingwei14@h-partners.com> - 4.2.3-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add haveged requires and optimize random number function replacement patch


author: yanglu <yanglu72@huawei.com> - 4.1-6
changelog:
  - DESC:delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ypserv-2.5-nfsnobody2.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ypserv-2.13-ypxfr-zeroresp.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ypserv-2.13-nonedomain.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ypserv-2.19-slp-warning.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ypserv-4.0-manfix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ypserv-2.24-aliases.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ypserv-2.27-confpost.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ypserv-2.31-netgrprecur.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ypserv-4.0-headers.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ypserv-4.0-selinux-context.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  ,and delete BuildRequires git


