# changelog

author: wangkai <13474090681@163.com> - 1.4.3.36-8
changelog:
  - Fix dsidm role subtree-status fails with TypeError
  - Fix name cockpit_present is not defined.
  - Fix typo
  - Fix DirSrv has no attribute userid


author: yaoxin <yaoxin30@huawei.com> 2.4.3-5
changelog:
  - This package depends on log4j. After the log4j vulnerability CVE-2021-44228 is fixed, the version needs to be rebuild.


author: yaoxin <yaoxin30@huawei.com> 2.4.3-6
changelog:
  - This package depends on log4j. After the log4j vulnerability CVE-2021-45105 is fixed, the version needs to be rebuild.


author: liyuanrong<liyuanrong1@huawei.com> - 1.0.2-4
changelog:
  - Type:requirement
  - CVE:NA
  - SUG:restart
  - DESC:fixed the issue of VMs images and add check of Global.cfg.


author: liyuanrong<liyuanrong1@huawei.com> - 1.0.2-5
changelog:
  - Type:requirement
  - CVE:NA
  - SUG:restart
  - DESC:add the clearing of space before the upgrade and rectifying the rollback failure.


author: liyuanrong<liyuanrong1@huawei.com> - 1.0.2-6
changelog:
  - Type:requirement
  - CVE:NA
  - SUG:restart
  - DESC:add the configuration of /etc/resolv.conf and change the VM disk to gpt.


author: liyuanrong<liyuanrong1@huawei.com> - 1.0.2-7
changelog:
  - Type:requirement
  - CVE:NA
  - SUG:restart
  - DESC:remove grub2 legacy install, add error handling for opstype and add entry for unit test in Makefile


author: liyuanrong<liyuanrong1@huawei.com> - 1.0.2-8
changelog:
  - Type:requirement
  - CVE:NA
  - SUG:restart
  - DESC:fix usage does not print when an error occurs in the upgrade image creation


author: Yuhang Wei<weiyuhang3@huawei.com> - 1.0.6-2
changelog:
  - Type:requirement
  - CVE:NA
  - SUG:restart
  - DESC:modify version display and fix the path for EFI boot in bootloader.sh


author: yaoxin <yao_xin001@hoperun.com> - 1.2.24-1
changelog:
  - Update to 1.2.24:
    * Fixed formatting of ipsec.conf snippet. This is a security
    issue with severity of "Important." (CVE-2024-9050)
    * Added support for "require-id-on-certificate" setting.
    * Updated Georgian, Slovenian and Ukrainian translations.


author: chenyanpanHW <chenyanpan@huawei.com> - 2.14.19-25
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ORBit2-2.14.3-multilib.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ORBit2-2.14.3-ref-leaks.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ORBit2-make-j-safety.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ORBit2-allow-deprecated.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0005-Fix-link_protocol_is_local_ipv46-for-ipv4-on-some-ip.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0014-Commit-patch-from-bug-662623-to-fix-connection-failu.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0016-bug-732274-fix-parallel-build-failure.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yixiangzhike <yixiangzhike007@163.com> - 0.17.4-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: backport upstream patch to use signal safe write function in signal handler


author: sunhai <sunhai10@huawei.com> - 36.16.5-23
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: revert "Set default entry to the BLS id instead of the entry index"


author: sunhai <sunhai10@huawei.com> - 36.16.5-24
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: config adjust
          revise hostname chinese  tip
  		fix custom storage chinese tip


author: lin zhang <lin.zhang@turbolinux.com.cn> - 0.15.2-2
changelog:
  - fix build error
  - File listed twice libappstream-compose.so.0.15.2
  - uppackaged /usr/share/gtk-doc/html/appstream-compose


author: shenyangyang<shenyangyang4@huawei.com> - 1.7.0-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Rebuild for openEuler-rpm-config moving /usr/lib/rpm/openEuler/xxxx
         to /usr/lib/xxxx


author: yaoxin <yao_xin001@hoperun.com> - 2.12.0-1
changelog:
  - Update to 2.12.0
  - Bootloader Images:
      * remove unused plat_try_next_boot_source
  - Architecture:
      *Branch Record Buffer Extension (FEAT_BRBE)
      * allow RME builds with BRBE
  - Arm:
      * avoid stripping kernel trampoline
      * add DRAM memory regions that linux kernel can share
      * add optee specific mem-size attribute
      * add secure uart interrupt in device region
      * enable FEAT_MTE2
      * fix the FF-A optee manifest by adding the boot info node
      * update the memory size allocated to optee at EL1
  - Intel:
      * add cache invalidation during BL31 initialization
      * add in JTAG ID for Linux FCS
      * add in missing ECC register
      * add in watchdog for QSPI driver
      * bridge ack timing issue causing fpga config hung
      * correct macro naming
      * f2sdram bridge quick write thru failed
      * fix bridge enable and disable function
      * fix CCU for cache maintenance
      * flush L1/L2/L3/Sys cache before HPS cold reset
      * implement soc and lwsoc bridge control for burst speed
      * refactor SDMMC driver for Altera products
      * remove redundant BIT_32 macro
      * software workaround for bridge timeout
      * update Agilex5 BL2 init flow and other misc changes
      * update Agilex5 warm reset subroutines
      * update all the platforms hand-off data offset value
      * update CCU configuration for Agilex5 platform
      * update mailbox SDM printout message
      * update memcpy to memcpy_s ([e264b55]
      * update outdated code for Linux direct boot
      * update preloaded_bl33_base for legacy product
      * update sip smc config addr for agilex5
      * update the size with addition 0x8000 0000 base


author: majianhan <majianhan@kylinos.cn> - 5.2.4-13
changelog:
  - Type:CVE
  - CVE:CVE-2025-2752 CVE-2025-2754 CVE-2025-2755 CVE-2025-2756 CVE-2025-5200 CVE-2025-5201 CVE-2025-5202 CVE-2025-5203 CVE-2025-5204
  - SUG:NA
  - DESC:fix CVE-2025-2752 CVE-2025-2754 CVE-2025-2755 CVE-2025-2756 CVE-2025-5200 CVE-2025-5201 CVE-2025-5202 CVE-2025-5203 CVE-2025-5204


author: yanglongkang<yanglongkang@h-partners.com> - 3.2.2-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Adding Patching Operations
         provides relibility and self-heading capabilities for service


author: Linux_zhang <zhangruifang@h-partners.com> - 3.2.2-5
changelog:
  - Type：update
  - ID：NA
  - SUG:NA
  - DESC: Modify the license to SPDX format
          Delete MIT and Public Domain license because it no longer appears in the upstream source


author: baizhonggui <baizhonggui@huawei.com> - 0.2.92-3
changelog:
  - Fix building error: File must begin with "/": /usr/lib/systemd/system/attest_ra_server.service
  - Add systemd in BuildRequires


author: fuanan <fuanan3@h-partners.com> - 2.71-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix Adapt signed-char check macro which lead to python3 testcase failure.


author: Funda Wang <fundawang@yeah.net> - 2.71-8
changelog:
  - fix AC_CHECK_LIB no longer works with g++ (debian bug#992981)
  - Fix testsuite failures with bash 5.2.15


author: wangkai <wangkai385@huawei.com> - 0:4.3-23
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-44228 is fixed,the version needs to be rebuild.


author: yaoxin <yaoxin30@huawei.com> - 0:4.3-24
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-45105 is fixed,the version needs to be rebuild.


author: wangyuhang <wangyuhang27@huawei.com> -5.1.8-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: add backport-fix-for-nofork-comsub-command-printing-fix-for-crash.patch
          backport-fix-small-memleak-in-globbing.patch
          backport-fix-for-leak-when-completing-command-word-with-glob-.patch
          del doesn't exist PATH dirs in bashrc


author: wangyuhang <wangyuhang27@huawei.com> -5.1.8-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: add backport-fix-for-E-transformation-fixes-for-failures-in-arith.patch
          backport-changes-for-quoting-special-and-multibyte-characters.patch
          backport-fixes-for-LINENO-in-multi-line-simple-commands-print.patch
          backport-changes-to-SIGINT-handler-while-waiting-for-a-child-.patch
          backport-renamed-several-functions-beginning-with-legal_-chan.patch


author: Zhao Mengmeng <zhaomengmeng@kylinos.cn> - 5.1.8-15
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Fix a performance regression while using large number of environment variables


author: yixiangzhike <yixiangzhike007@163.com> - 5.1.8-19
changelog:
  - sync patches from bash community:
     fix default file descriptor for <> redirection when printing command
     update BASH_COMMAND for subshells
     fix potential file descriptor leak in here document pipes


author: yaoxin <yao_xin001@hoperun.com> - 1.17-1
changelog:
  - Update to 1.17 for fix CVE-2022-38398,CVE-2022-38648,CVE-2022-40146,CVE-2022-44729 and CVE-2022-44730


author: liequan che <cheliequan@inspur.com> - 1.1-4
changelog:
  - add bcache-export-cached to export CACHED_UUID and CACHED_LABEL,so that 69-bcache.rules
  udev rules can correctly create uuid and label links for bcache devices


author: yaoxin <yaoxin30@huawei.com> - 6.4.1-1
changelog:
  - When bcel is upgraded to 6.5.0,other packages that depend on bcel fail to be compiled.
  - Downgrade bcel to 6.4.1.


author: chengyechun <chengyechun1@huawei.com> - 32:9.16.23-23
changelog:
  - Type:CVE
  - CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
  - SUG:NA
  - DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737


author: chengyechun <chengyechun1@huawei.com> - 32:9.16.23-25
changelog:
  - Type:CVE
  - CVE:CVE-2024-1737
  - SUG:NA
  - DESC:add max-records-per-type and max-types-per-name for fix CVE-2024-1737
         The default value both of max-records-per-type and max-types-per-name is 5000


author: tangce <tangce1@huawei.com> - 32:9.16.23-30
changelog:
  - Type:CVE
  - CVE:CVE-2026-3039,CVE-2026-3592,CVE-2026-5946
  - SUG:NA
  - DESC:fix CVE-2026-3039,CVE-2026-3592,CVE-2026-5946


author: Funda Wang <fundawang@yeah.net> - 2.37-31
changelog:
  - Fix CVE-2024-57360: nm: Avoid potential segmentation fault when displaying
    symbols without version info.
  - Fix CVE-2025-0840: stack-buffer-overflow at objdump disassemble_bytes


author: yueyuankun <yueyuankun@kylinos.cn> - 3.8.2-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix syntax error on SymbolKind.toString method
         fix interface syntax error


author: liuxu <liuxu156@huawei.com> - 1:1.34.1-21
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363


author: wangjiang <wangjiang37@h-partners.com> - 2023.2.60-3
changelog:
  - remove expired and sync new certificates
    Removing:
      Security Communication Root CA
    Adding:
      Atos TrustedRoot Root CA ECC G2 2020
      Atos TrustedRoot Root CA ECC TLS 2021
      Atos TrustedRoot Root CA RSA G2 2020
      Atos TrustedRoot Root CA RSA TLS 2021
      CommScope Public Trust ECC Root-01
      CommScope Public Trust ECC Root-02
      CommScope Public Trust RSA Root-01
      CommScope Public Trust RSA Root-02
      D-Trust SBR Root CA 1 2022
      D-Trust SBR Root CA 2 2022
      LAWtrust Root CA2 (4096)
      Sectigo Public Email Protection Root E46
      Sectigo Public Email Protection Root R46
      Sectigo Public Server Authentication Root E46
      Sectigo Public Server Authentication Root R46
      SSL.com Client ECC Root CA 2022
      SSL.com Client RSA Root CA 2022
      SSL.com TLS ECC Root CA 2022
      SSL.com TLS RSA Root CA 2022
      Telekom Security SMIME ECC Root 2021
      Telekom Security SMIME RSA Root 2023
      Telekom Security TLS ECC Root 2020
      Telekom Security TLS RSA Root 2023
      TrustAsia Global Root CA G3
      TrustAsia Global Root CA G4


author: wangjiang <app@cameyan.com> - 2023.2.60-5
changelog:
  - remove expired and sync new certificates
    Removing:
      Certificate "Explicitly Distrust DigiNotar Root CA"
      Certificate "Baltimore CyberTrust Root"
    Adding:
      Certificate "FIRMAPROFESIONAL CA ROOT-A WEB"
      Certificate "TWCA CYBER Root CA"
      Certificate "TWCA Global Root CA G2"
      Certificate "SecureSign Root CA12"
      Certificate "SecureSign Root CA14"
      Certificate "SecureSign Root CA15"
      Certificate "D-TRUST BR Root CA 2 2023"
      Certificate "D-TRUST EV Root CA 2 2023"


author: wjiang <cameyan@163.com> - 2023.2.60-7
changelog:
  - sync certificate from upstream
    Adding:
      Certificate "TrustAsia SMIME ECC Root CA"
      Certificate "TrustAsia SMIME RSA Root CA"
      Certificate "TrustAsia TLS ECC Root CA"
      Certificate "TrustAsia TLS RSA Root CA"
      Certificate "SwissSign RSA SMIME Root CA 2022 - 1"
      Certificate "SwissSign RSA TLS Root CA 2022 - 1"
      Certificate "OISTE Client Root ECC G1"
      Certificate "OISTE Client Root RSA G1"
      Certificate "OISTE Server Root ECC G1"
      Certificate "OISTE Server Root RSA G1"
      Certificate "e-Szigno TLS Root CA 2023"


author: sunhai<sunhai10@huawei.com> - 1.17.4-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:cairo_truetype_reverse_cmap detected memory leaks
         fix read memory access
         fix call get_unaligned_be32 heap buffer overflow
         fix heap buffer overflow in cairo_cff_parse_charstring


author: wangjie<wangjie294@huawei.com> - 4.0.2-2
changelog:
  - DESC:remove capstone-4.0.1.tar.gz and 0001-Fix-include-path-in-pkg-config-for-Makefile-too-1339.patch after upgrade 4.0.2


author: chenyanpanHW <chenyanpan@huawei.com> - 1.4.33-3
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-Fix-SafeNet-eToken-5110-SC-issue.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-Fix-SafeNet-eToken-5110-SC-issue-firmware-0.13.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: shixuantong <shixuantong1@huawei.com> - 21.4-28
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:disable use-dns for secondary nics
         Make duplicate route add succeed
         Fix predictable interface rename issue


author: dongyuzhen <dongyuzhen@h-partners.com> - 21.4-29
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix(net): klibc ipconfig PROTO compatibility
         fix(openstack): Fix bond mac_address


author: shixuantong <shixuantong1@huawei.com> - 21.4-32
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:chore: set recursive=False for ensure_dir if parent path is "/"
         test(openstack): Test bond mac address
         fix: Ensure properties for bonded interfaces are properly translated


author: Linux_zhang <zhangruifang@h-partners.com> - 21.4-33
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         skip some test if there are multiple NICs with the MAC address 'ee:ee:ee:ee:ee:ee'


author: shixuantong <shixuantong1@huawei.com> - 21.4-37
changelog:
  - Type:bugfix
  - CVE:
  - SUG:NA
  - DESC:fix: Add get_connection_with_tls_context() for requests 2.32.2+


author: fuanan <fuanan3@h-partners.com> - 3.22.0-10
changelog:
  - remove the architecture judgment in the patches section;
  - include all patches in the source package.


author: Yu Peng <yupeng@kylinos.cn> - 1.2.0-323
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix ctr snapshot mount produce invalid mount command for empty option.


author: huyubiao <huyubiao@huawei.com> - 9.0-18
changelog:
  - sync patches from community
  - add backport-numfmt-don-t-require-a-suffix-with-from-iec-i.patch
        backport-sort-fix-debug-buffer-overrun.patch
        backport-tac-avoid-out-of-bounds-access.patch
        backport-yes-avoid-failure-on-CHERI-protected-systems.patch


author: huyubiao <huyubiaox@gmail.com> - 9.0-25
changelog:
  - sync patches from community
  - add backport-basenc-auto-pad-base32-and-base64-inputs-when-decodi.patch
        backport-basenc-fix-stripping-of-chars-in-some-encodings.patch
        backport-chcon-fix-memory-leak-in-error-path.patch
        backport-numfmt-fix-buffer-over-read-CWE-126.patch
        backport-regex-fix-parse_bracket_exp-double-free.patch
        backport-seq-be-more-accurate-with-large-integer-start-values.patch
        backport-unexpand-fix-heap-buffer-overflow-with-tabs-NUM.patch


author: fly_fzc <2385803914@qq.com> - 9.0-26
changelog:
  - sync patches from community
  - add backport-timeout-prioritize-timed-out-exit-status.patch
        backport-pinky-promptly-diagnose-write-errors.patch
        backport-numfmt-fix-dropped-custom-suffix-when-failing-to-par.patch
        backport-dd-don-t-continue-copying-when-ftruncate-fails-using.patch
        backport-cat-don-t-treat-copy_file_range-EFBIG-as-fatal.patch


author: fuanan <fuanan3@h-partners.com> - 2.13-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert fix CVE-2015-1197 because it causes AT testcases problems


author: chenziyang <chenziyang4@huawei.com> - 2.13-10
changelog:
  - Type:CVE
  - ID:CVE-2015-1197
  - SUG:NA
  - DESC:backport CVE-2015-1197, delete revert-CVE-2015-1197.patch and backport the following 2 bugfix patches


author: chenhaixiang <chenhaixiang3@huawei.com> - 8.0.2-2
changelog:
  - arm64: Fix again segfault in arm64_is_kernel_exception_frame()
    when corrupt stack pointer address is given


author: Hewenliang <hewenliang4@huawei.com> - 3.16.1-7
changelog:
  - fix the null pointer of get_tty_driver.
  - criu files Dont cache fd ids for device files.
  - pre dump call vmsplice with SPLICE_F_GIFT.


author: chenyanpanHW <chenyanpan@huawei.com> - 2.3.3-5
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-cryptsetup-add-system-library-paths.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fix-compat-test.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0003-add-test-case-for-sm4.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0004-Fix-CVE-2021-4122-LUKS2-reencryption-crash-recovery-.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0005-Fix-OpenSSL-2-crypto-backend-PBKDF2-possible-iterati.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0006-fix-potential-null-pointer-dereference.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0007-Update-file-cryptsetup-ssh.c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Funda Wang <fundawang@yeah.net> - 1:2.4.0-15
changelog:
  - fix CVE-2025-58060, CVE-2025-58364
  - move www files into main package due to requirement by web interface


author: gaihuiying <eaglegai@163.com> - 1:2.4.0-19
changelog:
  - fix CVE-2026-27447,CVE-2026-34978,CVE-2026-34979,CVE-2026-34980,CVE-2026-34990,CVE-2026-39314,CVE-2026-39316


author: gaihuiying <eaglegai@163.com> - 1:2.4.0-21
changelog:
  - fix handling of multiple PPD: keywords from filters related to CVE-2026-34980
    fix a regression in shared printing from non-local accounts related to CVE-2026-27447


author: zhouyihang <zhouyihang3@h-partners.com> - 7.79.1-45
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:libssh: fix readdir issues
         krb5_gssapi: fix memory leak on error path
         pop3: fix CAPA response termination detection
         libssh: properly free sftp_attributes


author: zhouyihang <zhouyihang3@h-partners.com> - 7.79.1-46
changelog:
  - Type:CVE
  - CVE:CVE-2025-14017 CVE-2025-14524 CVE-2025-15079 CVE-2025-15224
  - SUG:NA
  - DESC:fix CVE-2025-14017 CVE-2025-14524 CVE-2025-15079 CVE-2025-15224


author: zhouyihang <zhouyihang_z@163.com> - 7.79.1-47
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:formdata: validate callback is non-NULL before use
         tftp: correct the filename length check


author: zhouyihang <zhouyihang_z@163.com> - 7.79.1-48
changelog:
  - Type:CVE
  - CVE:CVE-2026-1965 CVE-2026-3783 CVE-2026-3784
  - SUG:NA
  - DESC:fix CVE-2026-1965 CVE-2026-3783 CVE-2026-3784


author: zhouyihang <zhouyihang_z@163.com> - 7.79.1-49
changelog:
  - Type:CVE
  - CVE:CVE-2026-4873 CVE-2026-5545 CVE-2026-5773 CVE-2026-6253 CVE-2026-6276 CVE-2026-6429 CVE-2026-7168
  - SUG:NA
  - DESC:fix CVE-2026-4873 CVE-2026-5545 CVE-2026-5773 CVE-2026-6253 CVE-2026-6276 CVE-2026-6429 CVE-2026-7168


author: senlin <xiasenlin1@huawei.com> - 1.0.0-19
changelog:
  - Type: Correction of bad behavior
  - ID: NA
  - SUG: NA
  - DESC: Specify the specific sudo commands for abuild users


author: wangkai <13474090681@163.com> - 1.11.23-54
changelog:
  - Add patches from fedora, improve C compatibility and fix build failures caused by higher gcc versions


author: yaoxin <yaoxin30@huawei.com> - 3.2.15-4
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-44832 is fixed,the version needs to be rebuild.


author: hongjinghao <hongjinghao@huawei.com> - 1:1.12.20-9
changelog:
  - add backport-bus-dir-watch-Do-not-crash-with-128-dirs.patch	
  backport-Do-not-crash-when-reloading-configuration.patch


author: huyubiao<huyubiao@huawei.com> - 29-10
changelog:
  - fix enable-dbus-broker-to-reexecute.patch and backport-launch-config-use-AT_RANDOM-for-XML-hash-salt.patch


author: liuyumeng <liuyumeng5@huawei.com> - 0.40.0-2
changelog:
  - add patch:dconf read random contents of memory causing discrepancy,initialize memory to eliminate discrepancy


author: Wenlong Ding <wenlong.ding@turbolinux.com.cn> - 0.6.0-5
changelog:
  - Port to gupnp-1.2
  - Don't remove a queue more than once
  - Remove any pending task processing handlers when destroying a queue


author: LuWu <2398491106@qq.com> - 4.14.0-20
changelog:
  - Limit queries to nevra forms when provided by command and Update the man page entry for the countme option


author: chenhaixing <chenhaixing@huawei.com> - 4.3.1-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dnf-plugins-core:download plugin:respect install_weak_deps option value


author: lingsheng <lingsheng1@h-partners.com> - 2.86-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Update DNS records after pruning DHCP leases
         Fix potential memory leak
         Fix possible SIGSEGV in bpf.c
         adapt bugfix allow binding mac with ipv6


author: luoguocui <luoguocui@h-partners.com> - 2.86-12
changelog:
  - Type:bugfix
  - CVE:
  - SUG:NA
  - DESC:Fix bad reply to DHCPCONFIRM messages (wrong message type)
         Fix reply confirm packet when binding-mac-with-ip6 on


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 2.86-13
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix bounds checking in check_ia()
         Fix SEGV in Dbus code
         More fixes for DHCP ops in Dbus when DHCP not configured


author: zhaoyonghao10 <zhaoyonghao10@h-partners.com> - 2.86-15
changelog:
  - Type:security
  - CVE:CVE-2026-4890 CVE-2026-4891 CVE-2026-4892 CVE-2026-4893
  - SUG:NA
  - DESC:Fix NSEC bitmap parsing infinite loop
         Fix rdlen field validation in RRSIG packets
         Fix buffer overflow in helper with large CLIDs
         Fix broken client subnet validation


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 7.4.2-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:delete buildrequires perl,
         because the compilation dependency has been added to the basic project


author: wangkai <13474090681@163.com> - 1:2.3.15-7
changelog:
  - Fix CVE-2025-59031, CVE-2025-59032, CVE-2026-27855, CVE-2026-27856,
    CVE-2026-27857, CVE-2026-27858, CVE-2026-27859, CVE-2026-0394


author: chenyi <chenyi211@huawei.com> - 21.11-78
changelog:
  Sync some patches from upstream about bugfix, modifies are as follow:
  - bus/pci: fix UIO resource mapping in secondary process


author: queyanwen<queyanwen@huawei.com> - 1.0.1-2
changelog:
  - Optimize the accuracy of non-steady-state data prediction and training.
  - The anbient temperature check is added befor the collection is started. If the temperature is
  - greater than 28°C, the collection will not be started.


author: queyanwen<queyanwen@huawei.com> - 1.0.1-3
changelog:
  - The current condition for determining whether the system enters the stable state is that
  - the difference between the maximum temperature and the minimum temperature within 60s is less than 0.2 degrees.
  - This judgment is too strict and needs to be changed to 2 degrees.
  - In addition, the average fuzzy processing in five windows is used to prevent data jitter.
  - When the entire system can obtain the CPU power consumption data, the obtained CPU power consumption
  - is directly used during training, instead of obtaining the CPU power consumption by inferring.


author: heppen<hepeng68@huawei.com> - 1.1.0-3
changelog:
  - Bug fix: Ctrl Auth request on main thread, but release on socket thread.
  - Bug fix: Modify policy file but do not take effect.
  - Bug fix: IsNumStr returns false when the input string is a negative number.
  - Add instructions to the config file.


author: xinghe <xinghe2@h-partners.com> - 2.0.11-10
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix: if libvirt and ebtables are installed at the same time, ping the operation prompts "sendmsg: Operation not permitted".


author: yanglu <yanglu72@h-partners.com> - 2.0.11-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:rebuild package to ensure that the upgrade between branches is normal


author: xinghe <xinghe2@h-partners.com> - 2.0.11-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix ebtables-restore --noflush failed when ebtables is uninstall


author: wangkai <wangkai385@h-partners.com> - 1:4.11-6
changelog:
  - Fix objectweb.asm version limit 
  - Add security compile options pie, relro and -fstack-protector-strong
  - Add glassfish-jsp and glassfish-servlet-api and glassfish-el-api version limit


author: taolinghongfei <taolinghongfei@h-partners.com> - 202011-30
changelog:
  - fix CVE-2026-22795,CVE-2026-22796
  - fix CVE-2025-69420
  - fix CVE-2025-69421
  - fix CVE-2025-68160
  - fix CVE-2025-69418
  - fix CVE-2025-69419


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 18-4
changelog:
  - Fix segfault when passed --index is greater than current boot order size
    Add missing short option handling for --index (-I)


author: zhangxingrong <zhangxingrong@uniontech.com> - 18-5
changelog:
  - Fix the incorrect long parameter in help messages
  - efibootmgr: delete_bootnext is just a boolean, not an entry id


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.38.3-1
changelog:
  - Upgrade to 3.38.3
  - Update Version, Release, Source0, BuildRequires
  - Temporaryly disable libportal, because there isn't in cunrrent community


author: lvxiangcong<lvxiangcong@kylinos.cn> - 3.4.14-7
changelog:
  - Type:CVE
  - CVE:CVE-2022-24675 CVE-2022-28327 CVE-2022-24921 CVE-2021-44717 CVE-2021-33195
  - SUG:NA
  - DESC: Batch fix cve through rebuild and sync release


author: lvxiangcong<lvxiangcong@kylinos.cn> - 3.4.14-11
changelog:
  - Type:CVE
  - CVE:CVE-2023-32082 CVE-2021-28235
  - SUG:NA
  - DESC: backport fix CVE-2023-32082 and CVE-2021-28235


author: andy <liuyang01@kylinos.cn> - 2:5.15-8
changelog:
  - Type:requirement
  - Id:NA
  - SUG:NA
  - DESC:ethtool: Fix SFF-8472 transceiver module identification
          ethtool: Add default branch to sff8636_show_all_ioctl switch
          qsfp: Better handling of Page 03h netlink read failure
          module-eeprom: treat zero arguments like any other arguments for hex dump


author: zhangyaqi <zhangyaqi@kylinos.cn> - 2:5.15-9
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:add NULL check before jsonw_string_field() in print_string()
         netlink: add NULL check for get_string() in features.c


author: dillon chen <dillon.chen@gmail.com> - 2.5.2-4
changelog:
  - CVE-2021-36045, CVE-2021-36046, CVE-2021-36047, CVE-2021-36048,
  - CVE-2021-36050, CVE-2021-36051, CVE-2021-36052, CVE-2021-36053,
  - CVE-2021-36054, CVE-2021-36055, CVE-2021-36056, CVE-2021-36058,
  - CVE-2021-36064, CVE-2021-39847, CVE-2021-40716, CVE-2021-40732,
  - CVE-2021-42528, CVE-2021-42529, CVE-2021-42530, CVE-2021-42531,
  - CVE-2021-42532


author: wangyue <wangyue92@huawei.com> - 1.14.0-1
changelog:
  - Update to 1.14.0 to fix CVE-2020-6106 and CVE-2020-6104 and CVE-2020-6107 and CVE-2020-6108 and CVE-2020-6105


author: wangkai <13474090681@163.com> - 1:2.3.0-1
changelog:
  - Update to 2.3.0 for fix CVE-2022-48682
  - Add ncurses mode for interactive file deletion (plain mode still available via --plain or ./configure).
  - Add --minsize --maxsize --time --order=ctime --log --deferconfirmation --cache option.
  - Use configure script for installation (Autotools/Automake).
  - Rename cs command ("clear all selections") from cs to csel.
  - Rename igs command ("invert selections") from igs to isel.
  - Add "prune" command as synonym for DELETE key.
  - Clear selections after deleting files via prune/DELETE.
  - Fix dependency issues when fdupes is configured to not use ncurses.
  - Do not enter ncurses mode when --immediate option given.


author: weidongkl <weidong@kylinsec.com.cn> - 4.2.4-30
changelog:
  - Type: CVE
  - CVE: CVE-2020-20450
  - SUG: NA
  - DESC: mxfenc: never set codec_ul UID to NULL to prevent null pointer dereference


author: Funda Wang <fundawang@yeah.net> - 140.7.0-1
changelog:
  - update to 140.7.0
    * fix CVE-2026-0877, CVE-2026-0878, CVE-2026-0879, CVE-2026-0880,
      CVE-2026-0882, CVE-2025-14327, CVE-2026-0883, CVE-2026-0884,
      CVE-2026-0885, CVE-2026-0886, CVE-2026-0887, CVE-2026-0890,
      CVE-2026-0891


author: zhouyihang <zhouyihang3@h-partners.com> - 1.0.2-8
changelog:
  - Type:requirement
  - ID:NA
  - SUG:NA
  - DESC:To reduce unnecessary loading of ebtables-related kernel modules


author: zhouyihang <zhouyihang3@h-partners.com> - 1.0.2-12
changelog:
  - Type:bugfix
  - CVE:NA   
  - SUG:NA   
  - DESC:fix(icmp): fix check_icmpv6_name() to use correct IPv6 names
         fix(ipset): fix configuring IP range for ipsets with nftables
         fix(ipset): fix configuring "timeout","maxelem" values for
         fix(rich): validate service name of rich rule
         fix(rich): fix range check for large rule limit
         fix(nftables): use current pkttype keywords


author: wangkai <13474090681@163.com> - 2:2.11.8-1
changelog:
  - Update to 2.11.8
  - Fix CVE-2026-22852, CVE-2026-22856, CVE-2026-22859, CVE-2026-23530, CVE-2026-23531,
    CVE-2026-23532, CVE-2026-23534, CVE-2026-24491, CVE-2026-24675, CVE-2026-24676,
    CVE-2026-24679, CVE-2026-24681, CVE-2026-24682, CVE-2026-24683, CVE-2026-24684,
    CVE-2026-25997, CVE-2026-26271, CVE-2026-26986, CVE-2026-27015, CVE-2026-25941,
    CVE-2026-22855, CVE-2026-22857, CVE-2026-23533, CVE-2026-23732, CVE-2026-23883,
    CVE-2026-23884


author: wangkai <13474090681@163.com> - 2:2.11.8-3
changelog:
  - Fix CVE-2026-26955, CVE-2026-26965, CVE-2026-31806, CVE-2026-31883, CVE-2026-31885,
    CVE-2026-33984, CVE-2026-33983


author: wangkai <13474090681@163.com> - 2:2.11.8-5
changelog:
  - Fix CVE-2026-25942, CVE-2026-25952, CVE-2026-25953, CVE-2026-25954, CVE-2026-27951,
    CVE-2026-29774, CVE-2026-29775, CVE-2026-31884, CVE-2026-33985


author: Chenzhen <chenzhen126@huawei.com> - 2.0.2-2
changelog:
  - fix restart thread block by resetting probe pid
    fix service failed when cmd server thread starts late
    fix OOB write when getting proc cmdline
    fix restart gopher failed for check gopher pid multi times
    fix run sig hander core for probe mng create later
    fix potential nullptr dereference in libevent openssl cb
    ipc: reset probe_flags to 0 when restarting probes
    tcpprobe: do not flush snooped procs to avoid deleting tcp link by accident
    fix buffer overflow in sscanf
    fix buffer overflow and ret value of sscanf
    snooper: enlarge channel map and shorten poll timeout to ease event loss
    system_infos: fix oob of arrays and double free
    Refactor to reduce memory usage of metric record
    bugfix: path parsing error when gala-gopher running in container
    fix strdup relative error
    tcpprobe: fix incorret struct type of tracepoint event
    fix UAF of probe bin after parsing invalid config
    snooper: fix opposite judgment logic of container info


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-79
changelog:
  - cfg: notify that it's unsupported, when stack_num > 1
  - fix errno == ETIMEFOUT
  - fix epoll and recv threads blocked on the same semaphore. data cannot be read in recv thread.
  - fix rpc pool leak, when thread exits
  - remove app_bind_numa check from exclude_cpus
  - openGauss: fix connection attempt failed
  - openGauss: fix gs_ctl switchover failed


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-80
changelog:
  - Connect: execute lwip connect if dst_ip and host_ip are in the same network.
  - kernerl bind: add ipv6 add check
  - openGauss unsupport_tcp_optname
  - fix a contention issue when rpc pools are added to rpc_pool_array


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-82
changelog:
  - DUMP: fix abnomal printing in the dump process.
  - SIGNAL: Adjust hijack sigal table to hijack SIGABRT SIGQUIT and delet SIGKILL
  - SIGNAL: Adjust sigaction function to keep lstack signal function executed successfully.


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-83
changelog:
  - SIGNAL: block SIGSEGV during exit process
  - Stack: unset stack_stop, while stacks exit by rpc message.
  - fix the memory leak when using strdup


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-84
changelog:
  - update gazelle max numa nodes 8
  - Protocal: fixing deathlock between protocol threads and app thread
  - Connect: fix benchmark_dws connect failed
  - RTC-mode: fix gazellectl can't print connenct info
  - add xdp tx checksum/tso offload


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-85
changelog:
  - sockio: fix rpc_send coredump after RPC_MSG_EXIT
  - sockio: fix tcp_write not remove EPOLLOUT
  - fix 20.03-LTS build failed
  - sk_wait: igonre mem_thread flush signal
  - sockio: fix sendmbox full return EWOULDBLOCK
  - sockio: fix callback_tcp_send output too many at once
  - mempool: increase MEM_THREAD_MANAGER_FREE_S to avoid poll
  - sockctl: fix rtw broadcast close and shutdown
  - poll: fix do_lwip_connected_callback not delete poll kernel fd
  - sk_event: fix rtw epoll wrong event notify and remove
  - sockio: fix rtw_stack_tcp_write wrong copied_total after append
  - epoll: fix do_lwip_connected_callback
  - sk_wait: fix lwip_wait_foreach_notify coredump at startup
  - socket: fix stack_udp_readmsg return len
  - sk_wait: fix sock_wait_common_free socket: simplify calling free_count in rtw_stack_tcp_write
  - mbox: fix mbox_ring_common_free coredump when rte_ring_create failed
  - sk_wait: fix lwip_tcp_allow_send coredump
  - mempool: stop using cache when too many threads
  - mempool: fix pthread_tryjoin_np coredump when mysqld shutdown
  - mempool: mem_get_rpc add reserve limit
  - mempool: fix mbox_ring free not call recv_finish_burst
  - mempool: modify mbuf num and rpc_msg num
  - socket: fix sk_wait cannot be interrupted by signals
  - socket: fix tcp closed
  - tcp: add GAZELLE_TCP_ASYNC_RECVD      fix mbuf OOM caused by untimely sockio_peek_recv_free
  - socket: fix stack_tcp_read do not recv_finish_burst
  - socket: fix connect blocking
  - mempool: fix copy_mbuf_private
  - dfx: support sk_wait stat
  - mempool: add mem_thread_cache_flush          fix PBUF_POOL_PREINIT
  - cfg: add mem_async_mode
  - cfg: add mem_cache_max and change default rpc_msg_max
  - socket: adapt to tcp and udp
  - socket: refactor tcp and udp
  - socket: adapt to sock_event
  - socket: refactor sock_event
  - cleancode: remove get_stack_tid DPDK_PKT_BURST_SIZE PACKET_READ_SIZE
  - cleancode: remove gazelle_light_ring
  - cleancode: add GAZELLE_SAME_NODE
  - RTC: fixing program stuck while gazelle exit in multi-threads envirement


author: zhaoshujian <zhaoshujian@huawei.com> - 14.2.1-3
changelog:
  - [bugfix] Change libgomp, libfortran, libgcc_s, libitm, libatomic package path
  - Add gcc-toolset-14 Readme


author: shenyangyang<shenyangyang4@huawei.com> - 1.0-0.7
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC: bump release rebuilding for adding rhash.spec to macro gcc_secure_exclude


author: tangjie02 <tangjie02@kylinos.com.cn> - 1.0.1-1.ky3
changelog:
  - KYOS-F: Modify the python3-jinja2 to Requires from BuildRequires.
  - KYOS-F: Remove gdbus_codegen.glibmm*egg-info directory after install.


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.38.2-1
changelog:
  - Upgrade to 3.38.2
  - Update Version, Release, Source0, BuildRequires
  - Use meson rebuild and install
  - Delete patches, delete pam.d related and other two files which not in 3.38.2
  - Add new file session.conf. modify /etc/gdm/custom.conf


author: Funda Wang <fundawang@yeah.net> - 9.55.0-18
changelog:
  - Type:CVE
  - ID:NA
  - SUG:NA
  - DECS: Fix CVE-2025-27830, CVE-2025-27832, CVE-2025-27834, CVE-2025-27835, CVE-2025-27836


author: hdliu <dev03108@linx-info.com> - 9.55.0-19
changelog:
  - Add font mappings so that the PS interpreter can rasterize Chinese content using the two fonts STKaiti-Regular and STheiti-Regular.


author: yaoxin <yao_xin001@hoperun.com> - 5.2.2-1
changelog:
  - Update to 5.2.2
    * Fixes for CVE-2023-48161 (bsc#1217390), CVE-2022-28506 (bsc#1198880)
    * Address SF issue #151: A heap-buffer-overflow in gif2rgb.c:294:45
    * Address SF issue #166: a read zero page leads segment fault in
      getarg.c and memory leaks in gif2rgb.c and gifmalloc.c


author: fuanan <fuanan3@h-partners.com> - 2.33.0-14
changelog:
  - Type:CVE
  - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
  - SUG:NA
  - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465


author: fuanan <fuanan3@h-partners.com> - 2.33.0-19
changelog:
  - Type:CVE
  - ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
  - SUG:NA 
  - DESC:Fix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835


author: fuanan <fuanan3@h-partners.com> - 2.33.0-20
changelog:
  - Type:CVE
  - ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
  - SUG:NA
  - DESC:refix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835


author: zhaoyonghao10 <zhaoyonghao10@h-partners.com> - 2.72.2-27
changelog:
  - apply 3 patches: backport-gsocks4aproxy-Fix-a-buffer-leak-when-finishing-con.patch, backport-tests-Add-thread-pool-stress-test-to-task-c.patch, backport-test-cleanup-trailing-spaces-task-c.patch


author: Qingqing Li <liqingqing3@huawei.com> - 2.34-176
changelog:
  - libio: Fix ungetwc operating on byte stream [BZ #33998] (CVE-2026-5928)
  - stdio-common: Fix buffer overflow in scanf %mc [BZ #34008] (CVE-2026-5450)


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.38.2-1
changelog:
  - Upgrade to 3.38.2
  - Delete 0001-Fix-compiler-errors.patch which existed in version 3.38.2
  - Add sub package gnome-calculator-devel


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.38.0-1
changelog:
  - Upgrade to 3.38.0
  - Delete 0001-timer-Set-width-chars-2-property-on-the-spinbuttons.patch
    whose target file that to be patched doesn't exist in version 3.38.0


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.38.6-1
changelog:
  - Upgrade to 3.38.6
  - Update Version, Release, BuildRequires, stage 'files'
  - Delete 4 patches, modify the left 6 patches


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.38.5-1
changelog:
  - Upgrade to 3.38.5
  - Update Version, Release, Source0, BuildRequires, Requires, stage 'build', 'install', 'files'
  - Use meson rebuild, delete setup-shell.desktop, which doesn't existed in this version
  - Delete honor-firstboot-disabled.patch which existed in this version


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.36.0-1
changelog:
  - Upgrade to 3.36.0
  - Update Version, Release, Source0, stage 'build' and 'files'
  - Delete old patch that existed in new version, add new patch


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.38.0-1
changelog:
  - Upgrade to 3.38.0
  - Update Version, Release, Source0, Obsoletes
  - Modify patches, update stage 'files'


author: wangxiao<wangxia65@huawei.com> -3.30.1-6
changelog:
  - move the libcroco sources directly under src/st
    remove the libcroco dependency from the meson.build files


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.38.4-1
changelog:
  - Upgrade to 3.38.4
  - Update Version, Release, Source0, BuildRequires, Requires
  - Delete patches which existed in current version, modify one patch
  - Update stage 'build', 'check', 'files'


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.38.4-2
changelog:
  - Delete requires gdm-libs which gdm contains it
  - Use pipewire replace pipewire-gstreamer which pipewire contains it
  - Add xdg-desktop-portal-gtk for launching flatpak apps etc


author: chenyanpanHW <chenyanpan@huawei.com> - 3.38.4-3
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/gnome-shell-favourite-apps-firefox.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.38.2-1
changelog:
  - Upgrade to 3.38.2
  - Delete all two patches that existed in this version
  - Add 0001-Revert-packagekit-Avoid-600000-allocations-when-comp.patch
  - Temporarily disabled snap and rpm_ostree option


author: weijin deng <weijin.deng@turbolinux.com.cn> - 0.5.0-1
changelog:
  - Upgrade to 0.5.0
  - Update Version, Release, Source0, BuildRequires
  - Update stage 'build', 'install'


author: Xu Raoqing <609179072@qq.com> - 3.7.2-23
changelog:
  - fix CVE:
  - CVE-2026-42009
  - CVE-2026-42010
  - CVE-2026-3833
  - CVE-2026-42013
  - CVE-2026-42014
  - CVE-2026-5260
  - CVE-2026-42015
  - CVE-2026-3832


author: huzhangying <huzhangying@huawei.com> - 1.17.3-43
changelog:
  - Type:CVE
  - CVE:CVE-2025-58183,CVE-2025-58185,CVE-2025-58189,CVE-2025-61724
  - SUG:NA
  - DESC:fix CVE-2025-58183,CVE-2025-58185,CVE-2025-58189,CVE-2025-61724


author: huzhangying <huzhangying@huawei.com> - 1.17.3-47
changelog:
  - Type:CVE
  - CVE:CVE-2025-61732,CVE-2025-68119,CVE-2025-61731,CVE-2025-61728,CVE-2025-61726,CVE-2025-68121
  - SUG:NA
  - DESC:fix CVE-2025-61732,CVE-2025-68119,CVE-2025-61731,CVE-2025-61728,CVE-2025-61726,CVE-2025-68121


author: huzhangying <huzhangying@huawei.com> - 1.17.3-49
changelog:
  - Type:CVE
  - CVE:CVE-2026-27140
  - SUG:NA
  - DESC:fix CVE-2026-27140 cmd/go disallow cgo trust boundary bypass
  - Type:CVE
  - CVE:CVE-2026-32288
  - SUG:NA
  - DESC:fix CVE-2026-32288 archive/tar limit sparse format entries


author: baizhonggui <baizhonggui@huawei.com> - 2.5.17-4
changelog:
  - Fix building error: configure: error: no acceptable C compiler found in $PATH
  - Add gcc in BuildRequires


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-44
changelog:
  - Type:CVE
  - CVE:CVE-2024-1048
  - SUG:NA
  - DESC:grub-set-bootflag: Fix for CVE-2024-1048
         commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
         kern/acpi: Skip NULL entries in RSDT and XSDT
         util/grub-mount: Check file path sanity


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-46
changelog:
  - Type:CVE
  - CVE:CVE-2021-46848
  - SUG:NA
  - DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-47
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix log printing in tpcm_kunpeng moddule
         osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
         osdep: Introduce include/grub/osdep/major.h and use it
         disk/mdraid1x_linux: Prevent infinite recursion
         disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-49
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:commands/legacycfg: Avoid closing file twice
         disk/lvm: GRUB fails to detect LVM volumes due to an incorrect computation of mda_end


author: sunhai <sunhai10@huawei.com> - 1:2.06-51
changelog:
  - Type:CVE
  - CVE:CVE-2024-45781,CVE-2024-45782,CVE-2024-56737,CVE-2024-45780,CVE-2024-45783,CVE-2024-49504,CVE-2025-0624,CVE-20
  24-45774,CVE-2024-45775,CVE-2025-0622,CVE-2025-0622,CVE-2025-0622,CVE-2024-45776,CVE-2024-45777,CVE-2025-0690,CVE-20
  25-1118,CVE-2024-45778,CVE-2024-45779,CVE-2025-0677,CVE-2025-0684,CVE-2025-0685,CVE-2025-0686,CVE-2025-0689,CVE-2025
  -0678,CVE-2025-1125
  - SUG:NA
  - DESC:fix the vulnerabilities announced on February 18th, 2025


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1:2.06-53
changelog:
  - Type:CVE
  - CVE:CVE-2025-61661,CVE-2025-61662,CVE-2025-54771,CVE-2025-61663,CVE-2025-61664
  - SUG:NA
  - DESC:commands/usbtest: Ensure string length is sufficient in usb string processing
         commands/usbtest: Use correct string length field
         tests/lib/functional_test: Unregister commands on module unload
         normal/main: Unregister commands on module unload
         gettext/gettext: Unregister gettext command on module unload
         kern/file: Call grub_dl_unref() after fs->fs_close()
         commands/test: Fix error in recursion depth calculation


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.2.3-1
changelog:
  - Upgrade to 1.2.3
  - Update Version, Release, Source0, BuildRequires
  - Update stage 'build', 'install', 'check' and 'files'


author: lizhengde <lizhengde@xfusion.com> - 1.16.2-14
changelog:
  - Type:CVE
  - CVE:CVE-2026-53702
  - SUG:NA
  - DESC:Stack buffer overflow in GStreamer H.265 parser. Fix incorrect loop bound.


author: Funda Wang <fundawang@yeah.net> - 1.18.4-8
changelog:
  - fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
    CVE-2024-47607, CVE-2024-47615, CVE-2024-47835


author: yaoxin <yao_xin001@hoperun.com> - 1.16.2-7
changelog:
  - Fix cves:
    CVE-2024-47606,CVE-2024-47613,CVE-2024-47775,CVE-2024-47776
    CVE-2024-47777,CVE-2024-47778,CVE-2024-47774,CVE-2024-47540
    CVE-2024-47602,CVE-2024-47601,CVE-2024-47834,CVE-2024-47537
    CVE-2024-47597,CVE-2024-47543,CVE-2024-47596,CVE-2024-47539
    CVE-2024-47546


author: Funda Wang <fundawang@yeah.net> - 1.16.2-12
changelog:
  - fix CVE-2026-1940, CVE-2026-3083, CVE-2026-3085
  - fix GStreamer-SA-2026-0002: Out-of-bounds read in MP4 demuxer


author: yangchenguang <yangchenguang@kylinsec.com.cn> - 3.24.30-8
changelog:
  - Fix the problem that the prompt information of network icon volume icon is not displayed
  - update xscreen size when x11 screen size change
  - always send the monitors changed signal when screen size change
  - Add function definition of gtk_image_set_from_pixbuf_with_scale


author: chenyanpanHW <chenyanpan@huawei.com> - 2.0.14-17
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/guile-multilib.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/guile-i18ntest.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/guile-threadstest.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/guile-2.0.14-gc_pkgconfig_private.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.2.4-1
changelog:
  - Upgrade to 1.2.4
  - Update Version, Release, Source0, BuildRequires
  - Delete sed operation which existed in this version
  - Add patch for fix CVE-2021-33516
  - Update stage 'prep', 'build', 'install', 'check', 'files'


author: Jia Chao <jiac13@chinaunicom.cn> - 3.3.4-4
changelog:
  - fix: use $HOME rather than /home/abuild, suit for all buildtools.
  - fix: yarn have ELF bin, not noarch at all.


author: xiaochn <xiaochuannan@inspur.com> - 3.3.6-4
changelog:
  - Remove settings.xml and use ${HOME}/.m2/repository as maven repo
  - Remove npm repo in spec file and use unified configuration of the build environment


author: xinghe <xinghe2@h-partners.com> - 2.6.6-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:server: 'source' interface ignored from 'default-server' directive


author: xinghe <xinghe2@h-partners.com> - 2.6.6-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:haproxy: only tid 0 must not sleep if got signal
         fix timehopping in freq_ctr_total


author: xinghe <xinghe2@h-partners.com> - 2.6.6-13
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:stream: Prevent mux upgrades if client connection is no longer ready


author: yanglu <yanglu72@h-partners.com> - 2.6.6-15
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:queues:Do not use pendconn_grab_from_px
         queues:Make sure we call process_srv_queue when leaving
         queue:Make process_srv_queue return the number of streams


author: yaoxin <yao_xin001@hoperun.com> - 1.14.5-1
changelog:
  - Update to 1.14.5:
    * Added signed Windows msi binary and signed Apple dmg binary files.
    * Moved examples to the HDF5Examples folder in the source tree.
    * Added support for using zlib-ng package as the zlib library
    * Disable CMake UNITY_BUILD for hdf5
    * Removed "function/code stack" debugging configuration option
    * Added configure options for enabling/disabling non-standard programming language features
    * Added the CMake variable HDF5_ENABLE_ROS3_VFD to the HDF5 CMake config
      file hdf5-config.cmake. This allows it to easily detect if the library
      has been built with or without read-only S3 functionality.
    * Fixed many CVE:
      CVE-2024-29157,CVE-2024-29158,CVE-2024-29159,CVE-2024-29160,CVE-2024-29161,CVE-2024-29162
      CVE-2024-29163,CVE-2024-29164,CVE-2024-29165,CVE-2024-29166,CVE-2024-32605,CVE-2024-32606
      CVE-2024-32607,CVE-2024-32608,CVE-2024-32609,CVE-2024-32610,CVE-2024-32611,CVE-2024-32612
      CVE-2024-32613,CVE-2024-32614,CVE-2024-32615,CVE-2024-32616,CVE-2024-32617,CVE-2024-32618
      CVE-2024-32619,CVE-2024-32620,CVE-2024-32621,CVE-2024-32622,CVE-2024-32623,CVE-2024-32624
      CVE-2024-33873,CVE-2024-33874,CVE-2024-33875,CVE-2024-33876,CVE-2024-33877,CVE-2018-13871
      CVE-2018-13875,CVE-2018-14034


author: Funda Wang <fundawang@yeah.net> - 1.14.5-2
changelog:
  - add patches from azure linux for fixing CVE-2025-2153, CVE-2025-2310,
    CVE-2025-2914, CVE-2025-2926, CVE-2025-6816, CVE-2025-2925,
    CVE-2025-2924, CVE-2025-44905, CVE-2025-6269, CVE-2025-6750,
    CVE-2025-6857, CVE-2025-7067, CVE-2025-7068, CVE-2025-6858,
    CVE-2025-2923, CVE-2025-2913, CVE-2025-6516, CVE-2025-6818,
    CVE-2025-6817, CVE-2025-6856, CVE-2025-7069


author: chenyanpanHW <chenyanpan@huawei.com> - 9.58-2
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-hdparm-fallocate-close-fd.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-hdparam-Remove-security_password-printing.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0003-hdparm-fix-fd-leak-in-sysfs_write_attr.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: baizhonggui <baizhonggui@huawei.com> - 540.1.linux3-18
changelog:
  - Fix building error: make[1]: cc: No such file or directory
  - Add gcc in BuildRequires 
  - Add hfsplus-tools-sysctl.patch


author: xingwei <xingwei14@h-partners.com> - 2.4.51-24
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:mod_log_config: Fix LogFormat directive merging
         Fix X509 leak and Increase MAX_CONCURRENCY hard limit
         mod_proxy_balancer: Fix the handling of the stickysession
         mod_cache_socache: Fix possible crash on error path
         mod_ssl: Check SSL_CTX_new() return value
         core: Report invalid Options argument when parsing AllowOverride directives


author: yanglu <yanglu72@h-partners.com> - 2.4.51-25
changelog:
  - Type:CVE
  - CVE:CVE-2025-49812,CVE-2025-23048,CVE-2024-47252,CVE-2024-43204,CVE-2024-42516
  - SUG:NA
  - DESC:fix CVE-2025-49812 CVE-2025-23048 CVE-2024-47252 CVE-2024-43204 CVE-2024-42516
         mod_lua: Fix memory handling in output filters.
         Fix a regression that caused stickysession keys
         avoid ap_set_content_type when processing a _Request_Header
         set_cookie_name: ensure correct format


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 2.4.51-26
changelog:
  - Type:bugfix
  - CVE:
  - SUG:NA
  - DESC:mod_proxy: SetEnv proxy-nohalfclose to disable half-close tunneling


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 2.4.51-27
changelog:
  - Type:CVE
  - CVE:CVE-2025-58098,CVE-2025-65082,CVE-2025-55753,CVE-2025-66200
  - SUG:NA
  - DESC:SSI request judgment
         Request header similarity detection
         fix mod_mod error retry delay calculation to not already doubling the wait on the first error.
         stop accepting "note" in RequestHeader.


author: tangce <tangce1@h-partners.com> - 2.4.51-29
changelog:
  - Type:CVE
  - CVE:CVE-2026-24072,CVE-2026-29168,CVE-2026-29169,CVE-2026-33006,CVE-2026-34059
  - SUG:NA
  - DESC:fix CVE-2026-24072,CVE-2026-29168,CVE-2026-29169,CVE-2026-33006,CVE-2026-34059


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 2.4.51-30
changelog:
  - Type:CVE
  - CVE:CVE-2026-33007,CVE-2026-33523,CVE-2026-33857,CVE-2026-34032
  - SUG:NA
  - DESC:fix CVE-2026-33007,CVE-2026-33523,CVE-2026-33857,CVE-2026-34032


author: tangce <tangce1@h-partners.com> - 2.4.51-32
changelog:
  - Type:CVE        
  - CVE:CVE-2026-29167,CVE-2026-42535,CVE-2026-44631
  - SUG:NA          
  - DESC:fix CVE-2026-29167,CVE-2026-42535,CVE-2026-44631


author: tangce <tangce1@h-partners.com> - 2.4.51-33
changelog:
  - Type:CVE
  - CVE:CVE-2026-44186,CVE-2026-44185,CVE-2026-44119,CVE-2026-42536,CVE-2026-34356,CVE-2026-34355,CVE-2026-29170
  - SUG:NA          
  - DESC:fix CVE-2026-44186,CVE-2026-44185,CVE-2026-44119,CVE-2026-42536,CVE-2026-34356,CVE-2026-34355,CVE-2026-29170


author: gaihuiying <gaihuiying1@huawei.com> - 2.14.13-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add dependency uname-build-checks
         fix hang when install i40e in docker


author: wujichao <wujichao1@huawei.com> - 2.1.5-12
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: combine ten similar submissions into one(0125-fix-clang-build-error.patch) and Upgrade from upstream


author: jingxiaolu<lujingxiao@huawei.com> - 2.1.5-18
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: sync patches from upstream for refactoring sandbox and bugfixing


author: gaihuiying <gaihuiying1@huawei.com> - 4.0.1-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add dependency uname-build-checks
         fix hang when install iavf in docker


author: yangchenguang <yangchenguang@kylinsec.com.cn> - 72.1-7
changelog:
  - icu already supports loongarch64 architecture
  - Remove loongarch64 patch and modify sw_64 support patch to use all arch


author: gaoxingwang <gaoxingwang1@huawei.com> - 10.12-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:remove redundant provide for service cmd and delete unnecessary obseletes to fix upgrade problem


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1.2-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:after executing hook scripts, remove their executable permission
         of non root users


author: zhangxingrong <zhangxingrong@uniontech.com> - 3.16-4
changelog:
  - iperf3 now builds correctly on architectures without native support for 64-bit atomic types, by linking with the libatomic library


author: wangkai <13474090681@163.com> - 3.17.1-1
changelog:
  - Update to 3.17.1
  - iperf3 no longer changes its current working directory in --daemon mode. This results in more 
    predictable behavior with relative paths, in particular finding key and credential files for authentication.
  - A new --json-stream option has been added to enable a streaming output format, consisting of 
    a series of JSON objects (for the start of the test, each measurement interval, and the end of the test) separated by newlines
  - UDP tests now work correctly between different endian hosts
  - The --fq-rate parameter now works for --reverse tests
  - The statistics reporting interval is now available in the --json start test object


author: caokeming <caokeming@huawei.com> - 1:5.15.0-20
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ctrl: Fix fd leak in ctrl_list()
         ctrl: Fix fd leak in ctrl_listen()
         devlink: use snprintf instead of sprintf


author: xinghe <xinghe2@h-partners.com> - 1:5.15.0-22
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ss: fix expired time format of timer
         route: filter by interface on multipath routes
         lib: names: check calloc return value in db_names_alloc


author: yanglu <yanglu72@h-partners.com> - 1.8.7-15
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:libxtables：Fix memleak in xtopt_parse_hostmask
         nft：Avoid memleak in error path of nft_cmd_new
         exit if called by setuid executeable
         fix for non verbose check command
         use fully random so that nft can understand
         Use xtables_malloc in mnl_err_list_node_add
         nft: Special casing for among match in compare_matches
         extensions: libipt_icmp: Fix confusion between 255/255 and any
         Revert libiptc: fix wrong maptype of base chain counters on restore
         extensions: Fix checking of conntrack --ctproto 0
         libxtables: xtoptions: Fix for non-CIDR-compatible hostmasks
         libxtables: xtoptions: Prevent XTOPT_PUT with XTTYPE_HOSTMASK
         libiptc: Fix for another segfault due to chain index NULL pointer
         libiptc: Fix for segfault when renaming a chain


author: yanglu <yanglu72@h-partners.com> - 1.8.7-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:libxtables:Fix memleak of matches' udata
         Fix parsing of empty string arg in '-c' option


author: yanglu <yanglu72@h-partners.com> - 1.8.7-19
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:extensions:recent:Fix format string for unsigned values
         nft:cmd:Init struct nft_cmd::head early


author: wangkerong <wangkerong@huawei.com> - 1.21.1-2
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC: round commmunity patch fix Avoid infinite loop on allocation failure


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:1.21.1-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:[pci] Ensure that pci_read_config() initialises all fields
         [image] Do not clear current working URI when executing embedded image
         [uri] Retain original encodings for path, query, and fragment fields
         [uri] Allow for relative URIs that include colons within the path


author: langfei <langfei@huawei.com> - 3:1.8.0-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC: filter console only output when using journal mode;
  -	Slience ... rebalancing messages for unmigratable IRQs;
  -	Avoid repeated affinity checks when no change is necessary;
  -	activate_mapping:set errsave before first jump to the error label.


author: langfei <langfei@huawei.com> - 3:1.8.0-13
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC: Fix socket API being blocked for 10s;
  -	Flush file brfore closing;
  -	Check fflush() return value.


author: daisicheng <daisicheng@huawei.com> - 0.9.6-13
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:fix the problem that the /var/lib/isula-build/storage/overlay is still existed when killing daemon


author: jingxiaolu <lujingxiao@huawei.com> - 0.9.6-15
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:add read lock in load/import/pull to fix GC preempts to exit subprocess


author: daisicheng <daisicheng@huawei.com> - 0.9.6-21
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix the problem that isula-build service did not stop after it removed


author: Ge Wang <wangge20@huawei.com> - 5.0.0-2
changelog:
  - Fix install confilict with glassfish-servlet-api due to provides same file glassfish-servlet-api.jar


author: DXwangg <wangjiawei80@huawei.com> -1:1.8.0.482.b08-0
changelog:
  - update to 8u482
  - modified 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch
  - modified Fix-LineBuffer-vappend-when-buffer-too-small.patch
  - modified add-missing-test-case.patch
  - add Fix-KAEProvider-SM2-Code.patch


author: yangyingqing <yangyingqing@h-partners.com> -1:11.0.28.6-0
changelog:
  - update to 11.0.28+6(GA)
  - delete 8352716-tz-Update-Timezone-Data-to-2025b.patch
  - modify delete_expired_certificates.patch
  - modify G1-interate-region-by-bitmap-rather-than-obj-size-in.patch


author: DXwangg <wangjiawei80@huawei.com> -1:11.0.29.7-0
changelog:
  - update to 11.0.29+7(GA)
  - modify delete_expired_certificates.patch
  - modify G1-interate-region-by-bitmap-rather-than-obj-size-in.patch
  - add Enable-optimizations-upon-detecting-Phytium-CPU.patch


author: douyiwang <douyiwang@huawei.com> -1:11.0.29.7-2
changelog:
  - add fix-libpng-API-allow-reading-up-to-1012-bytes-beyond-the-png-sRGB-bbase-array-bug.patch to fix CVE-2025-66293


author: BenShuai5D <benshuai5d@163.com> 1:17.0.18.8-0
changelog:
  - upgrade to 17.0.18
  - modify Backport-Important-Fixed-Issues.patch
  - modify downgrade-the-glibc-symver-of-memcpy.patch
  - modify puyuan-jdk17.0.9-patch.patch
  - modify add-version-txt.patch
  - modify jdk17-Add-KAE-provider.patch
  - add huawei-Fix-KAEProvider-SM2-Code.patch


author: Benshuai5D <benshuai5d@163.com> - 1:21.0.10.7-0
changelog:
  - update to jdk21.0.9-ga
  - modify Add-Compact-Object-Headers-feature-for-Aarch64.patch
  - modify Add-dynamic-max-heap-size.patch
  - modify Fix-kae-testcat-and-EATest-testcast-bug-and-fix-cve-.patch
  - modify add-version.txt.patch
  - add huawei-Fix-KAE-Provider-SM2-code.patch
  - add huawei-fix-UseCompactObjectHeaders-slowdebug-build-fail.patch


author: douyiwang <douyiwang@huawei.com> -1:21.0.10.7-8
changelog:
  - Need to support noarch for srpm build
  - add Backport-JDK-8338686-App-classpath-mismatch-if-a-jar-from-the-Cla.patch


author: yaoxin <yao_xin001@hoperun.com> - 1.5.4-1
changelog:
  - Upgrade to 1.5.4 for fix cves: CVE-2022-40149,CVE-2022-40150,
    CVE-2022-45685,CVE-2022-45693 and CVE-2023-1436


author: yaoxin <1024769339@qq.com> - 1.8.0-4
changelog:
  - Fix CVE-2026-40612,CVE-2026-41256,CVE-2026-41257,CVE-2026-43894,
    CVE-2026-43895,CVE-2026-43896 and CVE-2026-44777


author: sunhai <sunhai10@huawei.com> - 0.16-4
changelog:
  - backport patch to Fix build with clang-15+
  - backport patch to Fix json_tokener_parse_ex: handle out of memory errors


author: sunhai <sunhai10@huawei.com> - 0.16-5
changelog:
  - Handle yet another out of memory condition
  - Fix issue 854 Set error json_tokener_error_memory in
  - Issue 857 fix a few places where json_tokener should
  - Handle NULL gracefully in json_tokener_free
  - Issue 881 don t allow json_tokener_new_ex with a dep


author: dongyuzhen <dongyuzhen@h-partners.com> - 1.11.1-30
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix the problem of missing kata-containers source code in the src package


author: jade_t <yzd50036@gmail.com> - 1.11.1-35
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix the problem of self-compilation failure in the kata-containers source package


author: chenjiankun<chenjiankun1@huawei.com> - v1.0.0-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:correct spec name from kata-integration.spec to kata_integration.spec


author: yanglu <yanglu72@h-partners.com> - 006-2
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC:Add crashkernel auto for Arm 
         enable kdump and set default reserve memory 512MB
         fix test failed due to default value change


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-310.0.0.213
changelog:
  - !21832  smb: client: fix krb5 mount with username option
  - !21838  ACPI: EC: clean up handlers on probe failure in acpi_ec_setup()
  - ACPI: EC: clean up handlers on probe failure in acpi_ec_setup()
  - smb: client: fix krb5 mount with username option
  - !21801 Fix CVE-2026-23450
  - !21800 Fix CVE-2025-71078
  - !21505 crypto: hisilicon/qm - support querying the hardware fault status through VFs
  - !21811 RDMA/hns: Fix warning in poll cq direct mode
  - !21758  nfsd: fix heap overflow in NFSv4.0 LOCK replay cache
  - RDMA/hns: Fix warning in poll cq direct mode
  - net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock()
  - powerpc/64s/slb: Fix SLB multihit issue during SLB preload
  - !21766  Fix CVE-2026-23271
  - perf: Fix Wdeclaration-after-statement
  - perf: Fix __perf_event_overflow() vs perf_remove_from_context() race
  - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache
  - crypto: hisilicon/qm - support querying the hardware fault status through VFs
  - crypto: hisilicon/qm - add concurrency protection for variable err_threshold


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-311.0.0.214
changelog:
  - !22036 drivers:misc:sdma-dae: Write the CQ head pointer correctly.
  - drivers:misc:sdma-dae: Write the CQ head pointer correctly.
  - !21966  netfilter: nf_tables: unconditionally bump set->nelems before insertion
  - !21965  net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs
  - !21968  netfilter: xt_CT: drop pending enqueued packets on template removal
  - !21967  netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels
  - !21964  netfilter: Fix CVE-2026-23351
  - !21963 v2  bonding: limit BOND_MODE_8023AD to Ethernet devices
  - !21983 Fix CVE-2026-23383
  - bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing
  - netfilter: xt_CT: drop pending enqueued packets on template removal
  - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels
  - netfilter: nf_tables: unconditionally bump set->nelems before insertion
  - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs
  - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase
  - netfilter: nf_tables: de-constify set commit ops function argument
  - bonding: limit BOND_MODE_8023AD to Ethernet devices
  - !21936 drivers:misc:sdma-dae: Remove interference print.
  - drivers:misc:sdma-dae: Remove interference print.
  - !21901 [Hygon][5.10][bugfix] Fix switch_kernel_fpu_prepare in Hygon non-atomic NT copy path
  - !21896 driver/misc/sdma-dae:Resolve conflicts between NCOB and SDMA
  - drivers:misc:sdma-dae: Checking the address alignment
  - !21897 Fix CVE-2026-31473
  - x86/fpu: fix wrong thread_flag check in switch_kernel_fpu_prepare
  - x86/copy_user_avx2: add sfence before vzeroupper in fixup path
  - !21877 net: hns3: Clear the static alarm about 'implicit type conversion'
  - media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex
  - net: hns3: Clear the static alarm about 'implicit type conversion'
  - net: hns3: Clear the static alarm about 'no previous prototype'
  - net: hns3: Clear the static alarm about discarding the 'const' qualifier
  - net: hns3: set the freed pointer to NULL
  - net: hns3: fix wrong location of HCLGE_FD_AD_QID_H_B


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-312.0.0.215
changelog:
  - !22139  Fix CVE-2026-31431
  - crypto: algif_aead - Fix minimum RX size check for decryption
  - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
  - crypto: authencesn - Fix src offset when decrypting in-place
  - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
  - crypto: authenc - use memcpy_sglist() instead of null skcipher
  - crypto: algif_aead - snapshot IV for async AEAD requests
  - crypto: algif_aead - Revert to operating out-of-place
  - crypto: algif_aead - use memcpy_sglist() instead of null skcipher
  - crypto: scatterwalk - Backport memcpy_sglist()
  - crypto: doc - fix kernel-doc notation in chacha.c and af_alg.c
  - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec
  - !22064 CVE-2026-31504
  - !22058 CVE-2026-31515
  - !22007 Fix CVE-2026-31677
  - crypto: af_alg - limit RX SG extraction by receive buffer budget
  - net: fix fanout UAF in packet_release() via NETDEV_UP race
  - !21871 [Hygon][5.10][Feature] pwm: dwc: Add support for Hygon pwm controller
  - !21982 Backport the patch that fix whitespace in sev_cmd_buffer_len() from upstream.
  - af_key: validate families in pfkey_send_migrate()
  - crypto: ccp - Fix whitespace in sev_cmd_buffer_len()
  - pwm: dwc: Add support for Hygon pwm controller
  - openeuler_defconfig: Add CONFIG_PWM_DWC
  - pwm: Add DesignWare PWM Controller Driver


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-313.0.0.216
changelog:
  - !22057 Fix CVE-2026-31590
  - !21943 Fix CVE-2026-31450
  - !21988  Fix CVE-2026-31449
  - !21118 [OLK-5.10] Fix CVE-2025-68340
  - !22045  ALSA: ctxfi: Limit PTP to a single page
  - !22100  KVM: x86: Use scratch field in MMIO fragment to hold small write values
  - !21944  media: dvb-net: fix OOB access in ULE extension header tables
  - !22099 Fix CVE-2026-31678
  - !22070 CVE-2026-31673
  - !22068 CVE-2026-31674
  - !22067 CVE-2026-31680
  - !22065 CVE-2026-31682
  - !22073 CVE-2026-31570
  - KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION
  - KVM: x86: Use scratch field in MMIO fragment to hold small write values
  - openvswitch: defer tunnel netdev_put to RCU release
  - can: gw: fix OOB heap access in cgw_csum_crc8_rel()
  - af_unix: read UNIX_DIAG_VFS data under unix_state_lock
  - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check()
  - net: ipv6: flowlabel: defer exclusive option free until RCU teardown
  - bridge: br_nd_send: linearize skb before parsing ND options
  - ALSA: ctxfi: Limit PTP to a single page
  - ext4: validate p_idx bounds in ext4_ext_correct_indexes
  - ext4: prevent partial update of the extents path
  - ext4: refactor ext4_ext_rm_idx() to index 'path'
  - media: dvb-net: fix OOB access in ULE extension header tables
  - ext4: publish jinode after initialization
  - team: Move team device type change at the end of team_port_add


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-314.0.0.217
changelog:
  - !22409  CVE
  - !22408  *** fix CVE-2026-31527 ***
  - !22423  ALSA: ctxfi: Check the error for index mapping
  - ALSA: ctxfi: Check the error for index mapping
  - !22405  dmaengine: idxd: Fix not releasing workqueue on .release()
  - !22389  Fix CVE-2025-38680
  - !22373  fbdev: Fix vmalloc out-of-bounds write in fast_imageblit
  - HID: core: Mitigate potential OOB by removing bogus memset()
  - HID: core: Add printk_ratelimited variants to hid_warn() etc
  - HID: multitouch: Check to ensure report responses match the request
  - Bluetooth: MGMT: validate LTK enc_size on load
  - driver/core: Fix kabi broken of platform_device/device/bus_type
  - driver core: platform: use generic driver_override infrastructure
  - hwmon: axi-fan: don't use driver_override as IRQ name
  - driver core: generalize driver_override in struct device
  - !22299  ALSA: fireworks: bound device-supplied status before string array lookup
  - dmaengine: idxd: Fix not releasing workqueue on .release()
  - !22354  Bluetooth: SMP: derive legacy responder STK authentication from MITM state
  - !22337  HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure
  - media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format()
  - !22273  EFI/CPER: don't dump the entire memory region
  - !22366  Input: uinput - fix circular locking dependency with ff-core
  - !22344  rxrpc: proc: size address buffers for %pISpc output
  - !22357  dmaengine: idxd: Fix memory leak when a wq is reset
  - fbdev: Fix vmalloc out-of-bounds write in fast_imageblit
  - !22328  ALSA: caiaq: fix stack out-of-bounds read in init_card
  - !22279 Fix CVE-2026-31699
  - !22277  crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed
  - Input: uinput - fix circular locking dependency with ff-core
  - dmaengine: idxd: Fix memory leak when a wq is reset
  - Bluetooth: SMP: derive legacy responder STK authentication from MITM state
  - rxrpc: proc: size address buffers for %pISpc output
  - HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure
  - !22297 Fix CVE-2026-23317
  - !20491  scsi: leapraid: add RAID disk hide/show events and fix misc issues
  - ALSA: caiaq: fix stack out-of-bounds read in init_card
  - !22303  module: Fix kernel panic when a symbol st_shndx is out of bounds
  - !22318  drm/ioc32: stop speculation on the drm_compat_ioctl path
  - !22231 Revert "[cpufreq]Fix re-boost issue after hotplugging a CPU"
  - !22230  cpufreq: conservative: Reset requested_freq on limits change
  - drm/ioc32: stop speculation on the drm_compat_ioctl path
  - !22293 Fix CVE-2026-43407
  - module: Fix kernel panic when a symbol st_shndx is out of bounds
  - ALSA: fireworks: bound device-supplied status before string array lookup
  - drm/vmwgfx: Return the correct value in vmw_translate_ptr functions
  - libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply()
  - crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed
  - crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed
  - !22225  bpf: Fix regsafe() for pointers to packet
  - !22263 CVE-2026-31419
  - !22237 Fix CVE-2026-31697
  - EFI/CPER: don't dump the entire memory region
  - !21864 Backport the patch that add support for SEV attestation command
  - bonding: remove unused bond_is_first_slave and bond_is_last_slave macros
  - net: bonding: fix use-after-free in bond_xmit_broadcast()
  - bonding: do not set usable_slaves for broadcast mode
  - net: bonding: update the slave array for broadcast mode
  - !22132 Ethernet: Linkdata: Supports Linkdata ethernet Controllers
  - !22253 [OLK-5.10] Fix CVE-2026-43284
  - Ethernet: Linkdata: Supports Linkdata ethernet Controllers
  - xfrm: esp: avoid in-place decrypt on shared skb frags
  - crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed
  - Revert "[cpufreq]Fix re-boost issue after hotplugging a CPU"
  - cpufreq: conservative: Reset requested_freq on limits change
  - bpf: Fix regsafe() for pointers to packet
  - !22214  futex: Clear stale exiting pointer in futex_lock_pi() retry path
  - !22205  pstore: ram_core: fix incorrect success return when vmap() fails
  - !22207  perf/x86/intel/uncore: Skip discovery table for offline dies
  - !22211  usb: cdns3: gadget: fix state inconsistency on gadget init failure
  - !22216  x86/CPU: Fix FPDSS on Zen1
  - !22186 Fix CVE-2026-31679
  - x86/CPU: Fix FPDSS on Zen1
  - futex: Clear stale exiting pointer in futex_lock_pi() retry path
  - usb: cdns3: gadget: fix state inconsistency on gadget init failure
  - !22174 Fix CVE-2026-31592
  - !22094  NFSD: Defer sub-object cleanup in export put callbacks
  - !22102  NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd
  - !21933  ksmbd: do not expire session on binding failure
  - !21927  nvme-pci: ensure we're polling a polled queue
  - !21925  ext4: avoid infinite loops caused by residual data
  - !22169  xen/privcmd: fix double free via VMA splitting
  - !22168  Buffer overflow in drivers/xen/sys-hypervisor.c
  - !22163  spi: spi-dw-dma: fix print error log when wait finish transaction
  - perf/x86/intel/uncore: Skip discovery table for offline dies
  - pstore: ram_core: fix incorrect success return when vmap() fails
  - openvswitch: validate MPLS set/set_masked payload length
  - KVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm->lock
  - xen/privcmd: fix double free via VMA splitting
  - Buffer overflow in drivers/xen/sys-hypervisor.c
  - spi: spi-dw-dma: fix print error log when wait finish transaction
  - KVM/SVM: add support for SEV attestation command
  - NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd
  - NFSD: Defer sub-object cleanup in export put callbacks
  - ksmbd: do not expire session on binding failure
  - nvme-pci: ensure we're polling a polled queue
  - ext4: avoid infinite loops caused by residual data
  - scsi: leapraid: add RAID disk hide/show events and fix misc issues


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-315.0.0.218
changelog:
  - !22654 Fix CVE-2026-23395
  - !22674  *** Fix CVE-2026-43428 ***
  - USB: core: Limit the length of unkillable synchronous timeouts
  - USB: usbcore: Introduce usb_bulk_msg_killable()
  - !22476 Fix CVE-2026-43427
  - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ
  - !22533  usb: xhci: Prevent interrupt storm on host controller error (HCE)
  - !22553 net/oenetcls: free sk entry hash on ntuple cleanup
  - !22565 Fix CVE-2026-43212
  - !22562 Fix CVE-2026-43261
  - !22532 net/oenetcls: RPS enhancements and bug fixes
  - !22183 Fix CVE-2026-31755
  - !22569  Fix CVE-2026-31477
  - ksmbd: fix memory leaks and NULL deref in smb2_lock()
  - ksmbd: use F_SETLK when unlocking a file
  - !22528  ksmbd: validate EaNameLength in smb2_get_ea()
  - !22526  ksmbd: require 3 sub-authorities before reading sub_auth[2
  - LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODE
  - !22552  CVE-2026-46333
  - arm64: Add support for TSV110 Spectre-BHB mitigation
  - net/oenetcls: free sk entry hash on ntuple cleanup
  - ptrace: Fix kabi breakage in struct task_struct
  - ptrace: slightly saner 'get_dumpable()' logic
  - usb: xhci: Prevent interrupt storm on host controller error (HCE)
  - net/oenetcls: fix mode-0 init rollback for ntuple resources
  - net/oenetcls: fix RPS CPU index scaling bias
  - !22488  ksmbd: require minimum ACE size in smb_check_perm_dacl()
  - !22499  ksmbd: use check_add_overflow() to prevent u16 DACL size overflow
  - !22477  smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path
  - ksmbd: validate EaNameLength in smb2_get_ea()
  - ksmbd: require 3 sub-authorities before reading sub_auth[2]
  - ksmbd: use check_add_overflow() to prevent u16 DACL size overflow
  - !22358 linkdata: fix compile error
  - ksmbd: require minimum ACE size in smb_check_perm_dacl()
  - smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path
  - usb: class: cdc-wdm: fix reordering issue in read code path
  - !22403  x86: fix duplicate ret variable in copy_user_generic
  - Linkdata: fix build failure due to missing IPsec configs in defconfig
  - net/oenetcls: Limit rxqs against combined_channels
  - net/oenetcls: Add rps policy switch for phy NIC
  - net/oenetcls: Make OENETCLS default as module
  - net/oenetcls: Support ipv6 for ntuple mode
  - net/oenetcls: Supports rxq multiplexing
  - net/oenetcls: Add local flow NUMA-aware rps
  - net/oenetcls: Fix possible hash collision issue
  - !22410  Bluetooth: hci_event: move wake reason storage into validated event handlers
  - !22191 Fix CVE-2026-31447
  - Bluetooth: hci_event: move wake reason storage into validated event handlers
  - x86: fix duplicate ret variable in copy_user_generic
  - ext4: reject mount if bigalloc with s_first_data_block != 0
  - usb: cdns3: gadget: fix NULL pointer dereference in ep_queue


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-316.0.0.219
changelog:
  - !22869  tracing/probe: reject non-closed empty immediate strings
  - !22863  tracing: branch: Fix inverted check on stat tracer registration
  - !22609  Fix CVE-2026-31729
  - !22130 [Hygon][5.10][Feature] KVM: x86: Add support for CPUID leaf 0x8C860000
  - !21989 Support Hygon CSV2 VM Live Migration
  - !22771 Fix CVE-2026-43037
  - !22769 Fix CVE-2026-43038
  - !22767 Fix CVE-2026-43040
  - !22856  crypto: pcrypt - Fix handling of MAY_BACKLOG requests
  - tracing/probe: reject non-closed empty immediate strings
  - tracing: branch: Fix inverted check on stat tracer registration
  - crypto: pcrypt - Fix handling of MAY_BACKLOG requests
  - !22814 ipmi: hisi_pso: fix atomic sleep and use-after-free via async workqueue
  - !22466 net/hinic5: Add Huawei Intelligent Network Card Driver: hinic5
  - net/hinic5: Add Huawei Intelligent Network Card Driver: hinic5
  - ipmi: hisi_pso: fix atomic sleep and use-after-free via async workqueue
  - !22770  tracepoints: get correct superblock from dentry in event btrfs_sync_file()
  - ip6_tunnel: clear skb2->cb[] in ip4ip6_err()
  - btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file()
  - btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file()
  - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()
  - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak
  - !22684  mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate()
  - !22726  Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ
  - !22647 [OLK-5.10] Fix CVE-2026-31668
  - Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ
  - mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate()
  - seg6: separate dst_cache for input and output paths in seg6 lwtunnel
  - net: ipv6: fix dst refleaks in rpl, seg6 and ioam6 lwtunnels
  - net: ipv6: rpl_iptunnel: mitigate 2-realloc issue
  - net: ipv6: rpl_iptunnel: simplify the return expression of rpl_do_srh()
  - include: net: add static inline dst_dev_overhead() to dst.h
  - net: use indirect call helpers for dst_output
  - net: use indirect call helpers for dst_input
  - net: ipv6: rpl_iptunnel: Fix memory leak in rpl_input
  - net: ipv6: rpl_iptunnel: block BH in rpl_output() and rpl_input()
  - ipv6: sr: block BH in seg6_output_core() and seg6_input_core()
  - usb: typec: ucsi: skip connector validation before init
  - usb: typec: ucsi: validate connector number in ucsi_notify_common()
  - KVM: SVM: Unmap ghcb pages if they're still mapped when destroy a CSV2 guest
  - KVM: SVM: Export MSR_AMD64_SEV_ES_GHCB to userspace for CSV2 guest
  - KVM: x86: Restore control registers in __set_sregs() to support CSV2 guest live migration
  - KVM: SVM: Keep track EFER even though the VM is CSV2 guest
  - KVM: SVM: Add KVM_SEV_RECEIVE_UPDATE_VMSA command
  - KVM: SVM: Add KVM_SEV_SEND_UPDATE_VMSA command
  - KVM: x86: Add support for CPUID leaf 0x8C860000


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-317.0.0.220
changelog:
  - !23420  fbcon: Fix the issue of uninitialized charcount in the remaining consoles
  - !23423 soc: hisilicon: kunpeng_hccs: Remove unused input parameter
  - soc: hisilicon: kunpeng_hccs: Remove unused input parameter
  - soc: hisilicon: kunpeng_hccs: Fix discard 'const' qualifier
  - fbcon: Fix the issue of uninitialized charcount in the remaining consoles
  - !23389  CVE-2026-46181
  - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()
  - refcount: provide ops for cases when object's memory can be reused
  - !23311  sched/cputime: Fix time overflow in cputime_adjust()
  - !23122 Fix CVE-2026-45856
  - !23327 Fix CVE-2026-43466
  - !23329 Fix CVE-2026-46033
  - crypto: authencesn - reject short ahash digests during instance creation
  - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery
  - sched/cputime: Fix time overflow in cputime_adjust()
  - !23253  CVE-2026-31759
  - !23268 Fix CVE-2026-46151
  - !23270 Fix CVE-2026-46167
  - !23275 Fix CVE-2026-46187
  - !23245 Fix CVE-2026-46214
  - !23202  ceph: only d_add() negative dentries when they are unhashed
  - wifi: rsi: fix kthread lifetime race between self-exit and external-stop
  - !23173  thermal: core: Fix thermal zone governor cleanup issues
  - usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl
  - usb: usblp: fix heap leak in IEEE 1284 device ID via short response
  - usb: ulpi: fix memory leak on ulpi_register() error paths
  - usb: ulpi: fix double free in ulpi_register_interface() error path
  - vsock/virtio: fix accept queue count leak on transport mismatch
  - !23189  Fix CVE-2026-45984
  - ceph: only d_add() negative dentries when they are unhashed
  - gfs2: Fix use-after-free in iomap inline data write path
  - gfs2: Add metapath_dibh helper
  - gfs2: Move the inode glock locking to gfs2_file_buffered_write
  - gfs2: Add wrapper for iomap_file_buffered_write
  - gfs2: Replace gfs2_lblk_to_dblk with gfs2_get_extent
  - gfs2: Turn gfs2_extent_map into gfs2_{get,alloc}_extent
  - gfs2: Add new gfs2_iomap_get helper
  - !22991 Fix CVE-2026-43194
  - !23124  cgroup/cpuset.c: Comment out early when prefer_cpus cpumask equals
  - thermal: core: Fix thermal zone governor cleanup issues
  - !23016  CVE-2026-45968
  - cgroup/cpuset.c: Comment out early when prefer_cpus cpumask equals
  - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send
  - !23069  tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG
  - !23035  CVE-2026-43328
  - !23029  Bluetooth: SMP: force responder MITM requirements before building the pairing response
  - !23063  s390/cio: Fix device lifecycle handling in css_alloc_subchannel()
  - tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG
  - !22881 Fix CVE-2026-43503
  - !22871 Fix CVE-2026-46300
  - s390/cio: Fix device lifecycle handling in css_alloc_subchannel()
  - !22782  apei: use blocking notifier for page offline policy chain
  - cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path
  - cpufreq: governor: Free dbs_data directly when gov->init() fails
  - Bluetooth: SMP: force responder MITM requirements before building the pairing response
  - sched: idle: Make skipping governor callbacks more consistent
  - cpuidle: Skip governor when only one idle state is available
  - !22900  scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT
  - !22845  net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode
  - !22956 net/oenetcls: remove HISI_L0 dependency and L0 allocator usage
  - !22701 net/oenetcls: validate module params and reject zero table sizes
  - !22939 oenetcls: fix worker-context locking, async add/del race, and runtime policy toggles
  - !22650 Backport the patch that rename sev-es.{ch} to sev.{ch} from upstream
  - net: consume xmit errors of GSO frames
  - !22943  drm: Account property blob allocations to memcg
  - !22888  lib/crypto: chacha: Zeroize permuted_state before it leaves scope
  - net/oenetcls: remove HISI_L0 dependency and L0 allocator usage
  - drm: Account property blob allocations to memcg
  - net/oenetcls: make rps policy module params read-only
  - net/oenetcls: fix async delete race with pending rule add
  - net/oenetcls: move listen-time tuple resolution to worker context
  - scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT
  - lib/crypto: chacha: Zeroize permuted_state before it leaves scope
  - net: skbuff: preserve shared-frag marker during coalescing
  - net: skbuff: propagate shared-frag marker through frag-transfer helpers
  - net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode
  - net/oenetcls: validate module params and reject zero table sizes
  - apei: use blocking notifier for page offline policy chain
  - x86/sev-es: Rename sev-es.{ch} to sev.{ch}


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-318.0.0.221
changelog:
  - !23811  netfilter: x_tables: ensure names are nul-terminated
  - !23803  netfilter: nf_conntrack_helper: pass helper to expect cleanup
  - !23805  mm/ksm: fix incorrect KSM counter handling in mm_struct during fork
  - !23079 Fix CVE-2026-43141
  - !23077 Fix CVE-2026-43149
  - !22764 [OLK-5.10]  Fix CVE-2026-43196
  - !22760 [OLK-5.10] Fix CVE-2026-43202
  - !22742 [OLK-5.10] Fix CVE-2026-43209
  - !23129 [OLK-5.10] Fix CVE-2026-43226
  - !22820 [OLK-5.10] Fix CVE-2026-31687
  - !22905 [OLK-5.10] Fix CVE-2026-31686
  - !22924 Fix CVE-2026-31683
  - !22983 [OLK-5.10] Fix CVE-2026-31660
  - !22996 [OLK-5.10] Fix CVE-2026-31657
  - !23478 [OLK-5.10] Fix CVE-2026-31649
  - !22909 Fix CVE-2026-31629
  - !22722 [OLK-5.10] Fix CVE-2026-31622
  - !22717 [OLK-5.10] Fix  CVE-2026-31618
  - !22711 [OLK-5.10] Fix CVE-2026-31617
  - !22689 [OLK-5.10] Fix  CVE-2026-31616
  - !22686 [OLK-5.10] Fix CVE-2026-31615
  - !22671 [OLK-5.10] Fix CVE-2026-31607
  - !22621 [OLK-5.10] Fix  CVE-2026-31605
  - !23119 [OLK-5.10] Fix CVE-2026-31464
  - netfilter: x_tables: ensure names are nul-terminated
  - !23555 [OLK-5.10] KVM: arm64: Skip device pfn in kvm_set_spte_gfn()
  - mm/ksm: fix incorrect KSM counter handling in mm_struct during fork
  - netfilter: nf_conntrack_helper: pass helper to expect cleanup
  - !23709  iommu/vt-d: Flush cache for PASID table before using it
  - !23752  iommu/amd: move wait_on_sem() out of spinlock
  - !23756  ALSA: ctxfi: Add fallback to default RSR for S/PDIF
  - !19068 [OLK-5.10] ACPI: processor: idle: Set timer broadcast state on C3 for KH-50000
  - !23761 Fix CVE-2026-46243
  - !23629  drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs()
  - !23746  irqchip/gic-v3: Fix ALLINT masking logic by decoupling from GIC NMI support
  - smb: client: reject userspace cifs.spnego descriptions
  - ALSA: ctxfi: Add fallback to default RSR for S/PDIF
  - iommu/amd: move wait_on_sem() out of spinlock
  - !23304  netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()
  - !23308  netfilter: x_tables: guard option walkers against 1-byte tail reads
  - !22965 Fix CVE-2026-43453
  - !22929 Fix CVE-2026-43139
  - !22953 Fix CVE-2026-43190
  - !22949 Fix CVE-2026-43233
  - !23661  xfrm: Fix CVE-2026-43091 RCU policy netns exit
  - !23635  xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete
  - !23561  ipv6: xfrm6: release dst on error in xfrm6_rcv_encap()
  - !23557  xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path
  - !22995  netfilter: ctnetlink: ensure safe access to master conntrack
  - !23166  xfrm: always flush state and policy upon NETDEV_UNREGISTER event
  - !23736  iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode
  - !23628  RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq()
  - !23704  CVE-2026-46065
  - !23034 Backport the patch that Move GHCB unmapping to fix RCU warning from upstream
  - !23662  ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES
  - !23476  xfs: fix delay extent reserve issue
  - !23731  iommu/vt-d: Clear Present bit before tearing down context entry
  - !23730  iommu/vt-d: Clear Present bit before tearing down PASID entry
  - irqchip/gic-v3: Fix ALLINT masking logic by decoupling from GIC NMI support
  - !23740 drivers:misc:sdma-dae:Remove redundant print during mm exit and resume.
  - drivers:misc:sdma-dae:Remove redundant print during mm exit and resume.
  - !23702  spi: spidev: fix lock inversion between spi_lock and buf_lock
  - iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode
  - !23705 drivers:misc:sdma-dae: Revert incorrect kernel code optimization.
  - !23734  netfilter: flowtable: strictly check for maximum number of actions
  - !23733 net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd()
  - !23711 Fix CVE-2026-43198
  - !23723 net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo
  - !23718 ipv6: prevent possible UaF in addrconf_permanent_addr()
  - netfilter: flowtable: strictly check for maximum number of actions
  - !23707  spi: fix resource leaks on device setup failure
  - !23708  Revert "hwmon: (ibmpex) fix use-after-free in high/low store"
  - !23305  ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names()
  - !23710  sound: ua101: fix division by zero at probe
  - net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd()
  - iommu/vt-d: Clear Present bit before tearing down context entry
  - iommu/vt-d: Clear Present bit before tearing down PASID entry
  - net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo
  - ipv6: prevent possible UaF in addrconf_permanent_addr()
  - tcp: restore kABI for syn_recv_sock() backport
  - sound: ua101: fix division by zero at probe
  - iommu/vt-d: Flush cache for PASID table before using it
  - Revert "hwmon: (ibmpex) fix use-after-free in high/low store"
  - spi: fix resource leaks on device setup failure
  - drivers:misc:sdma-dae:Revert optimize kernel code
  - drivers:misc:sdma-dae:Revert add channel depth info in debugfs
  - drivers:misc:sdma-dae:Revert Write the CQ head pointer correctly.
  - fbdev: defio: fix KABI breakage in struct fb_deferred_io and struct fb_info
  - fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info
  - fbdev: Refactor implementation of page_mkwrite
  - spi: spidev: fix lock inversion between spi_lock and buf_lock
  - !23679  MIPS: Work around LLVM bug when gp is used as global register variable
  - !23534  dm-thin: fix metadata refcount underflow
  - !23251 Fix CVE-2026-45991
  - !23344 Fix CVE-2026-45983
  - !23532  fs/ntfs3: Fix slab-out-of-bounds read in DeleteIndexEntryRoot
  - !23264 Fix CVE-2026-46102
  - !23682  RDMA/rxe: Fix double free in rxe_srq_from_init
  - !23266 Fix CVE-2026-46101
  - !23674  KVM: nSVM: Triple fault if restore host CR3 fails on nested #VMEXIT
  - !23387 Fix CVE-2026-46189
  - RDMA/rxe: Fix double free in rxe_srq_from_init
  - !23018 Fix CVE-2026-46023
  - MIPS: Work around LLVM bug when gp is used as global register variable
  - KVM: nSVM: Triple fault if restore host CR3 fails on nested #VMEXIT
  - !23562 Fix CVE-2026-45840
  - !23437  dlm: validate length in dlm_search_rsb_tree
  - ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES
  - !22890  scsi: leapraid: update driver to v2.0.1.2
  - !23489  KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2
  - xfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit
  - xfrm: Wait for RCU readers during policy netns exit
  - !23239 Fix CVE-2026-45843
  - !23355 Fix CVE-2026-43093
  - tcp: fix potential race in tcp_v6_syn_recv_sock()
  - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete
  - !22749 [OLK-5.10] Fix CVE-2026-23372
  - !22923 [OLK-5.10] Fix CVE-2026-23361
  - !22729 [OLK-5.10] Fix CVE-2026-23339
  - !22805 [OLK-5.10] Fix CVE-2026-23330
  - !22707 [OLK-5.10] Fix CVE-2026-23298
  - !22705 [OLK-5.10] Fix CVE-2026-23291
  - !22699 [OLK-5.10] Fix CVE-2026-23289
  - !22692 [OLK-5.10] Fix CVE-2026-23281
  - !22677 [OLK-5.10] Fix CVE-2026-23266
  - !22673 [OLK-5.10] Fix CVE-2026-23262
  - !22642 [OLK-5.10] Fix CVE-2026-23242
  - !22636 [OLK-5.10] Fix CVE-2026-23238
  - !22604 [OLK-5.10] Fix CVE-2026-23235
  - !22595 [OLK-5.10] Fix CVE-2026-23234
  - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs()
  - !22399 [OLK-5.10] Fix CVE-2026-23182
  - !22484 [OLK-5.10] Fix CVE-2026-23176
  - !22850 [OLK-5.10] Fix CVE-2026-23098
  - !22743 [OLK-5.10] Fix CVE-2026-23073
  - !22515 [OLK-5.10] Fix CVE-2025-71188
  - !22505 [OLK-5.10] Fix CVE-2025-71185
  - !22797 [OLK-5.10] Fix CVE-2025-71184
  - !22282 [OLK-5.10] Fix CVE-2025-71088
  - !22274 [OLK-5.10] Fix CVE-2025-68755
  - !22222 [OLK-5.10] Fix CVE-2026-31698
  - !22190 [OLK-5.10] Fix CVE-2025-39952
  - !20712 [OLK-5.10] Fix CVE-2025-39759
  - RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq()
  - !23483  CVEs
  - openvswitch: cap upcall PID array size and pre-size vport replies
  - ipv6: xfrm6: release dst on error in xfrm6_rcv_encap()
  - xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path
  - !23426 Fix HWPSIRT-2026-70484
  - !23223 Fix CVE-2026-45870
  - !23221 Fix CVE-2026-45964
  - !23171 Fix CVE-2026-43383
  - slip: bound decode() reads against the compressed packet length
  - KVM: arm64: Skip device pfn in kvm_set_spte_gfn()
  - dm-thin: fix metadata refcount underflow
  - fs/ntfs3: Fix slab-out-of-bounds read in DeleteIndexEntryRoot
  - !23003 Fix CVE-2026-43499
  - xfrm: esp: restore combined single-frag length gate
  - KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2
  - RDMA/rxe: Reject unknown opcodes before ICRC processing
  - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv
  - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers
  - net: stmmac: fix integer underflow in chain mode
  - xfs: fix possible bugon in xfs_trans_unreserve_and_mod_sb()
  - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions
  - dlm: validate length in dlm_search_rsb_tree
  - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path
  - gpio: omap: do not register driver in probe()
  - nfsd: never defer requests during idmap lookup
  - xsk: tighten UMEM headroom validation to account for tailroom and min frame
  - netfilter: x_tables: guard option walkers against 1-byte tail reads
  - ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names()
  - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()
  - netfilter: reject zero shift in nft_bitwise
  - nfc: nci: complete pending data exchange on device close
  - net: strparser: fix skb_head leak in strp_abort_strp()
  - udf: fix partition descriptor append bookkeeping
  - SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths
  - SUNRPC: fix gss_auth kref leak in gss_alloc_msg error path
  - net/tcp-md5: Fix MAC comparison to be constant-time
  - xfrm: always flush state and policy upon NETDEV_UNREGISTER event
  - netrom: fix double-free in nr_route_frame()
  - net/rds: No shortcut out of RDS_CONN_ERROR
  - scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done()
  - KVM: SVM: Move GHCB unmapping to fix RCU warning
  - fbdev: rivafb: fix divide error in nv3_arb()
  - ntb: ntb_hw_switchtec: Fix shift-out-of-bounds for 0 mw lut
  - net: wan/fsl_ucc_hdlc: Fix dma_free_coherent() in uhdlc_memclean()
  - dm mirror: fix integer overflow in create_dirty_log()
  - rtmutex: Use waiter::task instead of current in remove_waiter()
  - batman-adv: hold claim backbone gateways by reference
  - netfilter: ctnetlink: ensure safe access to master conntrack
  - batman-adv: prepare for const netdev->dev_addr
  - nfc: pn533: allocate rx skb before consuming bytes
  - NFC: pn533: bound the UART receive buffer
  - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop()
  - netfilter: xt_tcpmss: check remaining length before reading optlen
  - netfilter: nf_conntrack_h323: fix OOB read in decode_choice()
  - xfrm6: fix uninitialized saddr in xfrm6_get_saddr()
  - batman-adv: avoid OGM aggregation when skb tailroom is insufficient
  - PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry
  - nfc: llcp: add missing return after LLCP_CLOSED checks
  - mm/kasan: fix double free for kasan pXds
  - scsi: leapraid: update driver to v2.0.1.2
  - btrfs: fix NULL dereference on root when tracing inode eviction
  - soc: ti: pruss: Fix double free in pruss_clk_mux_setup()
  - fbdev: vt8500lcdfb: fix missing dma_free_coherent()
  - nfc: rawsock: cancel tx_work before socket teardown
  - wifi: rsi: Fix memory corruption due to not set vif driver data size
  - nfc: nci: free skb on nci_transceive early error paths
  - minix: Add required sanity checking to minix_check_superblock()
  - NFC: digital: Bounds check NFC-A cascade depth in SDD response handler
  - fbdev: tdfxfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO
  - usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb()
  - can: ucan: Fix infinite loop from zero-length messages
  - nfc: pn533: properly drop the usb interface reference on disconnect
  - IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq()
  - wifi: libertas: fix use-after-free in lbs_free_adapter()
  - usb: gadget: f_phonet: fix skb frags[] overflow in pn_rx_complete()
  - usb: gadget: renesas_usb3: validate endpoint index in standard request handlers
  - usbip: validate number_of_packets in usbip_pack_ret_submit()
  - gve: Fix stats report corruption on queue count change
  - RDMA/siw: Fix potential NULL pointer dereference in header processing
  - romfs: check sb_set_blocksize() return value
  - f2fs: fix out-of-bounds access in sysfs attribute read/write
  - f2fs: fix to avoid UAF in f2fs_write_end_io()
  - fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO
  - dmaengine: lpc18xx-dmamux: fix device leak on route allocation
  - dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation
  - dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation
  - platform/x86: toshiba_haps: Fix memory leaks in add/remove routines
  - spi: tegra: Fix a memory leak in tegra_slink_probe()
  - spi: tegra: Fix missing IRQ check in tegra_slink_probe()
  - mptcp: fallback earlier on simult connection
  - staging: most: remove broken i2c driver
  - iio: accel: bmc150: Fix irq assumption regression
  - wifi: wilc1000: avoid buffer overflow in WID string configuration
  - btrfs: qgroup: fix race between quota disable and quota rescan ioctl
  - ACPI: processor: idle: Set timer broadcast state on C3 for KH-50000


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-320.0.0.222
changelog:
  - !24064 [OLK-5.10] CVE-2026-46331
  - net/sched: act_pedit: free pedit keys on bail from offset check
  - net/sched: fix pedit partial COW leading to page cache corruption
  - net/sched: act_pedit: Parse L3 Header for L4 offset
  - net/sched: act_pedit: rate limit datapath messages
  - net/sched: act_pedit: check static offsets a priori
  - net/sched: act_pedit: remove extra check for key type
  - net/sched: simplify tcf_pedit_act
  - net/sched: transition act_pedit to rcu and percpu stats
  - net/sched: act_pedit: use NLA_POLICY for parsing 'ex' keys
  - !24072  libceph: make decode_pool() more resilient against corrupted osdmaps
  - !24073  hfs: validate record offset in hfsplus_bmap_alloc
  - hfs: validate record offset in hfsplus_bmap_alloc
  - libceph: make decode_pool() more resilient against corrupted osdmaps
  - !24027  fuse: reject oversized dirents in page cache
  - !24028  xfs: delete attr leaf freemap entries when empty
  - !24024  ntfs: ->d_compare() must not block
  - !23901 net/hinic5: Fix high-risk interfaces in the sdk
  - net/hinic5: Fix high-risk interfaces in the sdk
  - xfs: delete attr leaf freemap entries when empty
  - fuse: reject oversized dirents in page cache
  - ntfs: ->d_compare() must not block
  - !24006 [OLK-5.10] Fix CVE-2026-46322
  - !23992 fbdev: fix potential buffer overflow in do_register_framebuffer()
  - tun: free page on build_skb failure in tun_xdp_one()
  - !23754 Fix CVE-2026-46112
  - fbdev: fix potential buffer overflow in do_register_framebuffer()
  - !23751 CVE-2026-46174
  - RDMA/hns: Fix unlocked call to hns_roce_qp_remove()
  - !23898 RDMA/hns: Fix log flood after cmd_mbox failure
  - !23902  dm: fix a buffer overflow in ioctl processing
  - !23819  bonding: alb: fix UAF in rlb_arp_recv during bond up/down
  - !23820  xfrm: ah: account for ESN high bits in async callbacks
  - dm: fix a buffer overflow in ioctl processing
  - !23643 [OLK-5.10] Fix CVE-2026-46098
  - !23498 [OLK-5.10] Fix CVE-2026-43437
  - !23592 [OLK-5.10] Fix CVE-2026-43382
  - !23440 Fix CVE-2026-43207
  - !23433 Fix CVE-2026-43132
  - !22538 [OLK-5.10] Fix CVE-2026-23420
  - !23684 NFC: nxp-nci: allow GPIOs to sleep
  - !23720 [OLK-5.10] Fix CVE-2026-31580
  - !23716 [OLK-5.10] Fix CVE-2026-31656
  - !22615 [OLK-5.10] Fix CVE-2026-31603
  - !23605 [OLK-5.10] Fix CVE-2026-43295
  - !22611 [OLK-5.10] Fix  CVE-2026-31599
  - !22607 [OLK-5.10] CVE-2026-31598
  - !22591 [OLK-5.10] Fix CVE-2026-31597
  - !23788 [OLK-5.10] Fix CVE-2025-71272
  - !22588 [OLK-5.10] Fix CVE-2026-31596
  - !22583 [OLK-5.10] Fix  CVE-2026-31585
  - !23024 Fix CVE-2026-43183
  - !22578 [OLK-5.10] Fix CVE-2026-31583
  - !23027 Fix CVE-2026-43184
  - !23783 [OLK-5.10] Fix CVE-2026-31627
  - !23782 [OLK-5.10] Fix CVE-2026-31626
  - !23198 [OLK-5.10] Fix CVE-2026-31485
  - !23135 [OLK-5.10] Fix CVE-2026-23058
  - !23683 nfc: nci: fix circular locking dependency in nci_close_device
  - !23681 drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel
  - !23553 [OLK-5.10] Fix CVE-2026-31507
  - !23677 dmaengine: omap-dma: fix dma_pool resource leak in error paths
  - !23666 net: 3com: 3c59x: fix possible null dereference in vortex_probe1()
  - !21861 net: marvell: prestera: fix NULL dereference on devlink_alloc() failure
  - !20918 nilfs2: Fix potential block overflow that cause system hang
  - !22390 [OLK-5.10] Fix CVE-2025-71199
  - !22387 [OLK-5.10] Fix CVE-2025-71192
  - !23870  mm: blk-cgroup: fix use-after-free in cgwb_release_workfn()
  - mm: blk-cgroup: fix use-after-free in cgwb_release_workfn()
  - !23234 Fix CVE-2026-46099
  - !23236 Fix CVE-2026-46027
  - !23843  jbd2: limit checkpoint buffers scanned per j_list_lock hold during shrink
  - jbd2: limit checkpoint buffers scanned per j_list_lock hold during shrink
  - RDMA/hns: Fix log flood after cmd_mbox failure
  - most: core: fix leak on early registration failure
  - most: core: fix resource leak in most_register_interface error paths
  - most: remove usage of the deprecated ida_simple_xx() API
  - !23797  scsi/hiraid: Support new RAID features and bug fixes
  - i2c: s3c24xx: check the size of the SMBUS message before using it
  - xfrm: ah: account for ESN high bits in async callbacks
  - bonding: alb: fix UAF in rlb_arp_recv during bond up/down
  - staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify()
  - scsi/hiraid: Support new RAID features and bug fixes
  - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels
  - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache
  - bcache: fix uninitialized closure object
  - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat
  - bcache: fix cached_dev.sb_bio use-after-free and crash
  - NFC: nxp-nci: allow GPIOs to sleep
  - nfc: nci: fix circular locking dependency in nci_close_device
  - drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel
  - ASoC: tegra: Fix Master Volume Control
  - dmaengine: omap-dma: fix dma_pool resource leak in error paths
  - net: 3com: 3c59x: fix possible null dereference in vortex_probe1()
  - net: caif: clear client service pointer on teardown
  - rapidio: replace rio_free_net() with kfree() in rio_scan_alloc_net()
  - batman-adv: Avoid double-rtnl_lock ELP metric worker
  - net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer
  - ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain()
  - ALSA: pcm: fix wait_time calculations
  - media: mtk-mdp: Fix error handling in probe function
  - dm-verity: correctly handle dm_bufio_client_create() failure
  - net/smc: avoid early lgr access in smc_clc_wait_msg
  - spi: spi-fsl-lpspi: fix teardown order issue (UAF)
  - spi: lpspi: Simplify some error message
  - spi: lpspi: release requested DMA channels
  - spi: lpspi: Silence error message upon deferred probe
  - can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak
  - rnbd-srv: Zero the rsp buffer before using it
  - media: cx25821: Fix a resource leak in cx25821_dev_setup()
  - staging: sm750fb: fix division by zero in ps_to_hz()
  - media: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections
  - ocfs2: fix possible deadlock between unlink and dio_end_io_write
  - ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY
  - ocfs2: handle invalid dinode in ocfs2_group_extend
  - media: vidtv: fix nfeeds state corruption on start_streaming failure
  - media: em28xx: fix use-after-free in em28xx_v4l2_open()
  - wifi: wlcore: Fix a locking bug
  - iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver
  - ALSA: ac97: fix a double free in snd_ac97_controller_register()
  - net: marvell: prestera: fix NULL dereference on devlink_alloc() failure
  - nilfs2: Fix potential block overflow that cause system hang


author: shixin <shixin21@huawei.com> - 29-8
changelog:
  - libkmod: fix possible out-of-bounds memory access
    shared: avoid passing {NULL, 0} array to bsearch()


author: caixiaomeng <caixiaomeng2@huawei.com> - 1:0.9.5-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ignore sssnic module when building hotpatch to fix sssnic wrongly dependency of sssnic


author: caixiaomeng <caixiaomeng2@huawei.com> - 1:0.9.5-12
changelog:
  - Type:bugfix
  - ID:NA                                                                                                         
  - SUG:NA
  - DESC:adpat kpatch bundle symbols to kernel change


author: caixiaomeng <caixiaomeng2@huawei.com> - 1:0.9.5-13
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch and fix .rela.init.text section changed due to __BTF_id_ changed


author: fuanan <fuanan3@h-partners.com> - 1:0.9.5-15
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patch
         backport-lookup-fix-local-bind-check.patch


author: wangyuhang <wangyuhang27@huawei.com> - 1:2020.0.0-11
changelog:
  - solve the problem of dereference null return value when moving a job to the head of the linked list and reorder patches


author: wangli <3214053332@qq.com> - 1.1.0-1
changelog:
  -   add some test files
  -   prepare corresponding script for ras\rac\rahub to deploy config file respectively
  -   update part of file paths
  -   update to 1.1.0


author: gwei3 <11015100@qq.com> - 1.1.2-1
changelog:
  -   update to 1.1.2
  -   add slice length checks to avoid buffer overflow while extracting and verifying
  -   update integration test data to meet restapi parameter check requirement
  -   modify raagent/main.go file, change log to logger, os.Exit returns different values based on diff errors
  -   close RAS restapi server in signal handler
  -   Add parameter format checking for pcr/bios/ima in POST {id}/newbasevalue API
  -   Fix bugs in v1.1.1
      bug 1: hostintegritytool.sh can only add the 2nd part of ima policy into /etc/ima/ima-policy.
      bug 2: running hostintegritytool.sh multiple times will add duplicated linux cmdlines in /etc/default/grub.
      bug 3: rahub config path was assigned wrong values, which is caused by copy/paste
  -   fix the issue that Makefile not sync vendor
  -   modify readme file


author: gwei3 <11015100@qq.com> - 1.1.2-2
changelog:
  -   update BuildRequires & Requires to replace openssl* with compat-openssl11* to adapt to latest Mainline
  -   remove redundent clean label in spec file


author: leezhenxiang <1172294056@qq.com> - 2.0.0-1
changelog:
  -   update to 2.0.0
  -   add qcaserver, attester, and tas packages
  -   add BuildRequires itrustee_sdk-devel, cjson-devel and Requires itrustee_sdk, cjson
  -   modify makefile to adapt to different architectures
  -   specify the build requires in rac and attester package


author: chenyanpanHW <chenyanpan@huawei.com> - .0-4
changelog:
  - DESC: delete -Sgit from 
  %setup -a 0      -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-fix-lapack-devel-build-error.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-Fix-out-of-bounds-read-in-slarrv.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Eibz-Chan <chenbingzhao@huawei.com> - 590-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:[add] backport patches from upstream
  	Fix-memory-leak-when-using-corrupt-lesshst-file.patch
  	Fix-crash-when-enter-invaid-pattern-in-command.patch


author: xihaochen <xihaochen@huawei.com> - 4.9.2-1
changelog:
  - Type:requirements                                                                                                                                            
  - Id:NA
  - SUG:NA
  - DESC:update lftp to 4.9.2


author: yaoxin <yaoxin30@huawei.com> - 1.0.13-1
changelog:
  - Upgrade libEMF to 1.0.13; fix CVE-2020-13999 CVE-2020-11863 CVE-2020-11865 CVE-2020-11866 CVE-2020-11864


author: wujie <wujie@nj.iscas.ac.cn> - 1.0.13-2
changelog:
  - Add riscv64 support from http://fedora.riscv.rocks/koji/buildinfo?buildID=24988
    Author is David Abdurachmanov <david.abdurachmanov@gmail.com>


author: yanzhihua <yanzhihua4@huawei.com> - 12.10.0-25
changelog:
  - Type:enhancement
  - Id:NA
  - SUG:NA
  - DESC:ldconfig_scriptlets does not exist so modify the use of ldconfig, and rename the patch


author: lingsheng <lingsheng1@h-partners.com> - 3.5.2-9
changelog:
  - Type:CVE
  - ID:CVE-2025-5914,CVE-2025-5916,CVE-2025-5917,CVE-2025-5918
  - SUG:NA
  - DESC:fix CVE-2025-5914 CVE-2025-5916 CVE-2025-5917 CVE-2025-5918


author: zhangmingyi <zhangmingyi5@huawei.com> 2:0.8.1-12
changelog:
  - backport patches from upstream:
    backport-libbpf-Fix-NULL-pointer-dereference-in_bpf_object__c.patch
    backport-libbpf-Fix-str_has_sfxs-return-value.patch
    backport-libbpf-Initialize-err-in-probe_map_create.patch


author: jinzhiguang <jinzhiguang@kylinos.cn> - 2:0.8.1-13
changelog:
  - backport patch from upstream:
    backport-libbpf-Modify-the-function-name-in-libbpf.c-to-match.patch


author: xiesongyang <xiesongyang@huawei.com> - 2:0.8.1-14
changelog:
  - backport patch from upstream:
    backport-libbpf-Fix-an-error-in-64bit-relocation-value-comput.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:0.8.1-15
changelog:
  - backport patch from upstream:
    backport-libbpf-Avoid-uninitialized-value-in-BPF_CORE_READ_BI.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:0.8.1-16
changelog:
  - backport patch from upstream:
    backport-libbpf-Add-NULL-checks-to-bpf_object__prev_map,next_.patch
    backport-libbpf-Apply-map_set_def_max_entries-for-inner_maps-.patch
    backport-libbpf-Fix-uninitialized-warning-in-btf_dump_dump_ty.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:0.8.1-17
changelog:
  - backport patch from upstream:
    backport-libbpf-Dont-take-direct-pointers-into-BTF-data-from-.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:0.8.1-18
changelog:
  - backport patch from upstream:
    backport-libbpf-Do-not-resolve-size-on-duplicate-FUNCs.patch
    backport-libbpf-Fix-bpf_object__open_skeleton-s-mishandling-o.patch
    backport-libbpf-Fix-segfault-due-to-libelf-functions-not-sett.patch
    backport-libbpf-Fixed-getting-wrong-return-address-on-arm64-a.patch
    backport-libbpf-fix-sym_is_subprog-logic-for-weak-global-subp.patch
    backport-libbpf-move-global-data-mmap-ing-into-bpf_object__lo.patch


author: tianmuyang <tianmuyang@huawei.com> 2:0.8.1-19
changelog:
  - Adaption for sched type eBPF program:
    backport-libbpf-Adaption-for-sched-type-eBPF-program.patch


author: andy <liuyang01@kylinos.cn> 2:0.8.1-20
changelog:
  - backport patch from upstream:
    backport-libbpf-Fix-out-of-bound-read.patch
    backport-libbpf-fix-LDX_STX_ST-CO-RE-relocation-size-adjustment-logic.patch
    backport-libbpf-Fix-hypothetical-STT_SECTION-extern-NULL-deref-case.patch


author: tianmuyang <tianmuyang@huawei.com> 2:0.8.1-21
changelog:
  - Add bpf_cpumask_op API to support prefered cpu control in eBPF program:
    backport-libbpf-Add-bpf_cpumask_op-API-to-support-prefered-cp.patch


author: yezengruan <yezengruan@huawei.com> 1.0.0-12
changelog:
  - kpatch_process: fix possible double free.
  - ptrace: fix NULL pointer access problem
  - fix patched process crashing when acccess the global var
  - fix probably restore cc symbol link fail when kill patch building uncourteous
  - optimize: Remove unnecessary comparison code


author: chenyanpanHW <chenyanpan@huawei.com> - 2.1.0-3
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-correct-realpath-test-failure.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-fix-Werror-format-security.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: hanhuihui <hanhuihui5@huawei.com> - 0.69.0-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix history rollback cmd not meet the expectation
         Fix memory leak in subject-py


author: zhaoyonghao10 <zhaoyonghao10@h-partners.com> - 0.69.0-12
changelog:
  - apply 2 patches: backport-Mark-all-protected-packages-as-user-installed-for-.patch, backport-fix--compare-RPMItem-in-transaction-with-rpmvercmp.patch


author: liujing <liujing144@huawei.com> - 1.0.0-30
changelog:
  - update patches from https://code.foxkit.us/adelie/aports-old/blob/50de7d785d5500a14ed00fa12e483e8ceaf4f06a/main/libdv


author: doupengda <doupengda@loongson.cn> 1.0.1-7
changelog:
  - update config.guess and config.sub
  - fix SOURCE1 file autoconf.h '__loongarch64__' to '__loongarch64'


author: shixuantong <shixuantong1@huawei.com> - 2.1.12-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:ssl: do not trigger EOF if some data had been successfully read


author: shixuantong <shixuantong1@huawei.com> - 3.4.2-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix x86/ffi64 calls with 6 gp and some sse registers
         Robustify floating point comparison in test
         Fix floating point compare


author: weijin deng <weijin.deng@turbolinux.com.cn> - 0.18.1-1
changelog:
  - Upgrade to 0.18.1
  - Update Version, Release, Source0, stage 'files'
  - Stage 'build' use meson build


author: Wenlong Ding <wenlong.ding@turbolinux.com.cn> - 2.6.4-22
changelog:
  - Remove /usr/lib64/libglade-2.0.so.* from libglade2-devel package which already exists in libglade2 package.


author: wangkai <13474090681@163.com> - 2.5.18-5
changelog:
  - Fix CVE-2026-40334, CVE-2026-40334, CVE-2026-40338, CVE-2026-40339,
    CVE-2026-40340, CVE-2026-40341


author: xu_ping <xuping33@huawei.com> - 1:1.40.2-16
changelog:
  - Use actual function Pervasives.compare to instead of default compare and omit the labels on positional arguments.


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.2.0-1
changelog:
  - Upgrade to 1.2.0
  - Update Version, URL, Source0. delete Patch0. update stage 'prep'
  - Add 'find_lang', update stage 'files'


author: yanglu <yanglu72@h-partners.com> - 3.0.11-2
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:avoid crashing in icalcomponent_normalize
         fix a memleak in icalcomponent_normalize


author: wangxiao <wangxiao184@qq.com> - 1.19.2-4
changelog:
  - add fix patch for CVE-2026-50292
  - CVE-2026-50265 is an invalid CVE, so delete the related information.


author: echo <2220386943@qq.com> - 1.2-2
changelog:
  - update version to 1.2-2
  - support new create thread
  - description of supplementary documents
  - support event grouping
  - add the mangleName in symbol.h


author: chengyechun <chengyechun1@huawei.com> - 3.7.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:prevent segfault in af_request_type
         fix bridge info parsing


author: chenyanpanHW <chenyanpan@huawei.com> - 0.16-2
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0000-libpciaccess-rom-size.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-libpciaccess-add-sw64.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.28.0-1
changelog:
  - Upgrade to 1.28.0
  - Update Version, Release, Source0, BuildRequires
  - Use meson rebuild, delete python3.8-fix.patch that for autoreconf


author: xinghe <xinghe2@h-partners.com> - 2:1.6.38-3
changelog:
  - Type:cves
  - CVE:CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720
  - SUG:NA
  - DESC:fix CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720


author: shixuantong <shixuantong1@huawei.com> - 0.21.1-7
changelog:
  - Fix write buffer overflow by 1 in domain_to_punycode()
  - Fix stack buffer overflow WRITE 1 in domain_to_punycode()
  - Avoid 8bit overflow in is_public_suffix()
  - Avoid 'NULL + 1' as it is UB


author: yixiangzhike <yixiangzhike007@163.com> - 1.4.4-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:change the files order in patch file fix-doc-about-difok.patch


author: litenglong <litenglong@kylinos.cn> - 2.0.0-3
changelog:
  - Fix file conflicts among the help package, main package, and devel package by deleting the duplicated content during upgrades.


author: yixiangzhike <yixiangzhike007@163.com> - 1.14.2-6
changelog:
  - backport patches from upstream
      Fix a memory leak of the glib slist
      Add missing end callback for already downloaded zchunk files
      Fix memory leak of repo and repomd
      Fix a crash when the gnupghomedir is NULL or not specified on Python API


author: zhangpan <zhangpan103@h-partners.com> - 2.74.2-10
changelog:
  - Type:cves
  - ID:CVE-2025-4476 CVE-2025-4948 CVE-2025-4969
  - SUG:NA
  - DESC:fix CVE-2025-4476 CVE-2025-4948 CVE-2025-4969


author: nickyang <nickyang228@163.com> - 2.74.2-12
changelog:
  - Type:cves
  - ID:CVE-2026-1539 CVE-2026-1467 CVE-2026-1761 CVE-2026-0716
  - SUG:NA
  - DESC:fix CVE-2026-1539 CVE-2026-1467 CVE-2026-1761 CVE-2026-0716


author: nickyang <nickyang228@163.com> - 2.74.2-13
changelog:
  - Type:cves
  - ID:CVE-2026-1760 CVE-2026-1801 CVE-2026-2369
  - SUG:NA
  - DESC:fix CVE-2026-1760 CVE-2026-1801 CVE-2026-2369


author: gaihuiying <eaglegai@163.com> - 0.9.6-11
changelog:
  - Type:CVE
  - CVE:CVE-2025-4877 CVE-2025-4878 CVE-2025-5372
  - SUG:NA
  - DESC:fix CVE-2025-4877 CVE-2025-4878 CVE-2025-5372


author: zhangbinqin <zhangbinqin@h-partners.com> - 0.9.6-15
changelog:
  - Type:CVE
  - Id:CVE-2026-0968 CVE-2026-0967 CVE-2026-0966 CVE-2026-0965 CVE-2026-0964 CVE-2025-14821
  - SUG:NA
  - DESC:fix CVE-2026-0968 CVE-2026-0967 CVE-2026-0966 CVE-2026-0965 CVE-2026-0964 CVE-2025-14821


author: zhangbinqin <zhangbinqin@h-partners.com> - 1.10.0-8
changelog:
  - Type:CVE
  - CVE:CVE-2026-7598
  - SUG:NA
  - DESC:add username_len bounds checking to fix CVE-2026-7598


author: wangjiang <wangjiang37@h-partners.com> - 1.4.7-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:tdb: Do not pass non–null‐terminated strings to strcmp()
         python: Safely clear structure members


author: chenyanpanHW <chenyanpan@huawei.com> - 0.10.2-2
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-tevent-fix-CID-1437974-dereference-after-null-check.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: chenziyang <chenziyang4@huawei.com> - 2:1.6.2-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch to fix failed run-ptrace-mapper testcase


author: chenyanpanHW <chenyanpan@huawei.com> - 0.1.5-18
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0000-Link-with-znodelete-to-disallow-unloading.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-Revert-use-atexit-to-call-libusb_exit.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yaoxin <yao_xin001@hoperun.com> - 2.20.0-1
changelog:
  - Upgrade to 2.20.0
  - Fix CVE-2023-39929
  - Fix minor issue about printf data type and value range
  - av1: Revise offsets comments for av1 encode
  - jpeg: add support for crop and partial decode
  - Drop no longer applicable vaGetDriverNames check


author: Jiabo Feng <fengjiabo1@huawei.com> - 6.2.0-67
changelog:
  - virt-host-validate: Fix IOMMU output on aarch64
  - cpu: revert: Modify virCPUarmCompare to perform compare actions
  - cpu: Modify virCPUarmCompare to perform compare actions
  - add phytium s5000c support on arm architecture for capability


author: Jiabo Feng <fengjiabo1@huawei.com> - 6.2.0-69
changelog:
  - migration: support vfio-pci device migration
  - libvirt: Support specifying the cache size presented to guest
  - util: fix success return for virProcessKillPainfullyDelay()
  - test: Fix testNodeGetFreePages
  - qemu: DomainGetGuestVcpusParams: reduce scope of tmp


author: ZixinLi <lizixin10@h-partners.com> - 6.2.0-70
changelog:
  - Fix CVE-2025-12748 CVE-2025-13193
  - conf: split out virDomainDefParseIDs (CVE-2025-12748)
  - conf: Add virDomainDefIDsParseString (CVE-2025-12748)
  - bhyve: Check ACLs before parsing the whole domain XML (CVE-2025-12748)
  - libxl: Check ACLs before parsing the whole domain XML (CVE-2025-12748)
  - lxc: Check ACLs before parsing the whole domain XML (CVE-2025-12748)
  - vz: Check ACLs before parsing the whole domain XML (CVE-2025-12748)
  - qemu: Check ACLs before parsing the whole domain XML (CVE-2025-12748)
  - qemu: snapshot: Set umask for 'qemu-img' when creating external inactive snapshots (CVE-2025-13193)


author: imxcc <xingchaochao@huawei.com> - 6.2.0-2
changelog:
  - setup: use pytest instead of nose to run the test suite
  - spec: use pytest instead of nose
  - Update readme to mention pytest instead of nose
  - Fix PY_SSIZE_T_CLEAN deprecation warning
  - Avoid use of thread function deprecated in 3.9
  - Replace deprecated PyEval_CallObject with PyObject_Call


author: Funda Wang <fundawang@yeah.net> - 2.9.14-19
changelog:
  - Type:CVE
  - CVE:CVE-2025-49794
  - CVE:CVE-2025-49796
  - SUG:NA
  - DESC: fix CVE-2025-49794, CVE-2025-49796


author: fuanan <fuanan3@h-partners.com> - 1.1.37-4
changelog:
  - fix xsltCleanupSourceDoc function:
    Clean up attributes in source doc
    Avoid null deref on documents without root


author: liujie-answer <liujie5@linkdatatechnology.com> - 20260410-2
changelog:
  - add linux-firmware-linkdata sub-package
  - This configuration file is from Linkdata, supporting Linkdata Ethernet Controller advanced feature configuration.


author: liyunfei <liyunfei33@huawei.com> - 17.0.6-11
changelog:
  - update to llvm-for-oe-17.0.6-2509.0.2
  - release-note https://gitee.com/openeuler/llvm-project/releases/tag/llvm-for-oE-17.0.6-2509.0.2
  - add fix for Propeller MachineBasicBlock hash set


author: yanglu <yanglu72@h-partners.com> - 33.6-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ensure that the src package contains the loongson and sw patches


author: wujichao <wujichao1@huawei.com> - 0.3-35
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:bugfix: Information in cpu directory is overwritten after lxcfs restart


author: xiejing <xiejing@kylinos.cn> - 1:10.5.25-1
changelog:
  - Bump to 10.5.25 for resolving CVE-2024-21096, CVE-2023-22084
  - Fix version description in systemd service file


author: Funda Wang <fundawang@yeah.net> - 20250211-1
changelog:
  - update to 2025021 for fix CVE-2024-28047, CVE-2024-31157, CVE-2024-39279,
    CVE-2024-28127, CVE-2024-29214, CVE-2024-24582, CVE-2023-34440, CVE-2024-37020,
    CVE-2024-39355, CVE-2023-43758, CVE-2024-36293, CVE-2024-31068


author: Funda Wang <fundawang@yeah.net> - 20250512-1
changelog:
  - update to 20250512 to fix CVE-2024-28956, CVE-2025-24495, CVE-2025-20012,
    CVE-2024-45332, CVE-2025-20623, CVE-2024-43420, CVE-2025-20054, CVE-2025-20103


author: Funda Wang <fundawang@yeah.net> - 20250812-1
changelog:
  - update to 20250812 to fix CVE-2025-20053, CVE-2025-20109, CVE-2025-21090,
    CVE-2025-22839, CVE-2025-22840, CVE-2025-22889, CVE-2025-24305, CVE-2025-26403,
    CVE-2025-32086


author: openEuler Buildteam <buildteam@openeuler.org> - 20190618-1
changelog:
  - Type: enhancement
  - ID:   NA
  - SUG:  NA
  - DESC: Update to 20190618, add help package.

  - Type: enhancement
  - ID:   NA
  - SUG:  NA
  - DESC: Update to 20190116, add help package.


author: yaoxin <1024769339@qq.com> - 2.4.16.6-1
changelog:
  - Update to 2.4.16.6:
    * metadata: fix caching of JWKs from jwks_uri when using the default expiry setting
    * info: fix requests to the info hook with extend_session=false
    * cookie: OIDCCookieSameSite default behaviour Lax
    * cookie: apply OIDCCookieSameSite Off/None properly to state cookies instead of always setting Lax
    * cache: avoid segfault and improve error reporting in case apr_temp_dir_get fails when a temp directory
      cannot be found on the system upon initaliizing cache mutexes and the file cache
    * metadata: allow plain HTTP URLs in metadata elements jwks_uri and signed_jwks_uri to ensure backwards
      compatibility with <=2.4.15.7 and to support private/test deployments
    * code: address warnings from static code analysis tool CodeChecker


author: yaoxin <yao_xin001@hoperun.com> - 1.27.4-1
changelog:
  - Update to 1.27.4 for fix CVE-2024-6381 and CVE-2024-6383
  - libbson Fixes:
    * Fix build with Visual Studio 2013.
    * Fix parsing of colon in timezone.
    * Error on failure to init subdocument in bson_iter_visit_all.
    * Fix string handling in bson_string_new and bson_string_append.
    * Fix iteration in bson_strfreev.
    * Use aligned alloc for bson_array_builder_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Fix conversion warning with GCC 12.
    * Fixes to some format strings in trace logs.
    * Allow mongoc_buffer_t to be larger than INT_MAX.
    * Add bson_array_builder_t.
  - libmongoc Fixes:
    * Fix possible crash reading malformed wire protocol message.
    * Upgraded bundled Zlib from 1.2.3 to 1.3.1
    * Close leftover connections to removed servers.
    * Fix possible crash when client is configured with empty password.
    * Fix possible hang if mongoc_gridfs_file_readv is called with a corrupt chunk with incomplete data.
    * Fix 32-bit compile with 64-bit time_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Disable shared libmongoc targets if ENABLE_SHARED=OFF
    * Fix documentation build with Python 3.9.
    * Fix data race in mongoc_cursor_get_host.
    * Add back support for BUILD_VERSION CMake option. BUILD_VERSION was unintentionally removed in 1.25.0.
    * Send recoveryToken in transactions when connected to a load balancer.


author: chenyanpanHW <chenyanpan@huawei.com> - 4.0.26-2
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-comment-invalid-info-in-conf-file.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yanglu <yanglu72@h-partners.com> - 2:0.95-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Change UDP and ICMP sockets binding to accept a source IP from the -a CLI option


author: zhangxingrong <zhangxingrong@uniontech.com> - 5:2.2.12-3
changelog:
  - Fix smtp client to respect $use_envelope_from option.
  - Fix smtp client $envelope_from_address possible dangling pointer.


author: Funda Wang <fundawang@yeah.net> - 5:2.2.12-4
changelog:
  - fix CVE-2026-43859, CVE-2026-43860, CVE-2026-43861, CVE-2026-43862,
    CVE-2026-43863, CVE-2026-43864


author: yaoxin <1024769339@qq.com> - 8.0.41-1
changelog:
  - Update to 8.0.41 for fix CVEs(CVE-2025-21490,CVE-2025-21491,CVE-2025-21495,
    CVE-2025-21497,CVE-2025-21500,CVE-2025-21501,CVE-2025-21503,CVE-2025-21505,
    CVE-2025-21518,CVE-2025-21519,CVE-2025-21520,CVE-2025-21522,CVE-2025-21523,
    CVE-2025-21529,CVE-2025-21531,CVE-2025-21540,CVE-2025-21543,CVE-2025-21546,
    CVE-2025-21555,CVE-2025-21559)


author: yaoxin <1024769339@qq.com> - 8.0.42-1
changelog:
  - Update to 8.0.42 for fix CVEs(CVE-2025-21574,CVE-2025-21575,CVE-2025-21577,
    CVE-2025-21580,CVE-2025-21581,CVE-2025-21584,CVE-2025-21585,CVE-2025-30681,
    CVE-2025-30682,CVE-2025-30683,CVE-2025-30684,CVE-2025-30685,CVE-2025-30687,
    CVE-2025-30688,CVE-2025-30689,CVE-2025-30693,CVE-2025-30695,CVE-2025-30696,
    CVE-2025-30699,CVE-2025-30703,CVE-2025-30704,CVE-2025-30705,CVE-2025-30710,
    CVE-2025-30715,CVE-2025-30721,CVE-2025-30722


author: yaoxin <1024769339@qq.com> - 8.0.43-1
changelog:
  - Update to 8.4.6 for fix CVEs (CVE-2025-50068,CVE-2025-50077,CVE-2025-50078,
    CVE-2025-50079,CVE-2025-50080,CVE-2025-50081,CVE-2025-50082,CVE-2025-50083,
    CVE-2025-50084,CVE-2025-50085,CVE-2025-50086,CVE-2025-50087,CVE-2025-50091,
    CVE-2025-50092,CVE-2025-50093,CVE-2025-50094,CVE-2025-50096,CVE-2025-50097,
    CVE-2025-50098,CVE-2025-50099,CVE-2025-50100,CVE-2025-50101,CVE-2025-50102,
    CVE-2025-50104,CVE-2025-53023)


author: wangkai <13474090681@163.com> - 8.0.44-1
changelog:
  - Update to 8.0.44 for fix CVEs (CVE-2025-53069,CVE-2025-53062,CVE-2025-53054,
    CVE-2025-53053,CVE-2025-53045,CVE-2025-53044,CVE-2025-53042,CVE-2025-53040)


author: yaoxin <1024769339@qq.com> - 8.0.45-1
changelog:
  - Update to 8.0.45 for fix CVEs (CVE-2026-21936,CVE-2026-21937,
    CVE-2026-21941,CVE-2026-21948,CVE-2026-21964,CVE-2026-21968)


author: wangkai <13474090681@163.com> - 8.0.46-1
changelog:
  - Update to 8.0.46 for fix CVEs (CVE-2026-21998, CVE-2026-22001, CVE-2026-22002,
    CVE-2026-22004, CVE-2026-22005, CVE-2026-22009, CVE-2026-22015, CVE-2026-22017,
    CVE-2026-34267, CVE-2026-34270, CVE-2026-34271, CVE-2026-34276, CVE-2026-34278,
    CVE-2026-34293, CVE-2026-34303, CVE-2026-34304, CVE-2026-34308, CVE-2026-35236,
    CVE-2026-35237, CVE-2026-35238, CVE-2026-35239, CVE-2026-35240)


author: bzhaoop <bzhaojyathousandy@gmail.com> - 5.7.37-1
changelog:
  - Fix CVE issues for bump to the 5.7.37 version
  - CVE-2022-21245
  - CVE-2022-21270
  - CVE-2022-21303
  - CVE-2022-21304
  - CVE-2022-21344
  - CVE-2022-21367
  - CVE-2021-35624
  - CVE-2021-2356
  - CVE-2021-2011
  - CVE-2021-2010
  - CVE-2021-2007


author: yaoxin <yao_xin001@hoperun.com> - 8.0-1
changelog:
  - Update to 8.0
    * CVE-2024-5742: Avoid privilege escalations via symlink attacks
      on emergency save file (boo#1226099)
    * By default ^F is bound to starting a forward search, and ^B to
      starting a backward search, while M-F and M-B repeat the search
      in the corresponding direction. (See the documentation if you
      want the old bindings back.)
    * Command-line option --modernbindings (-/) makes ^Q quit, ^X cut,
      ^C copy, ^V paste, ^Z undo, ^Y redo, ^O open a file, ^W write a file,
      ^R replace, ^G find again, ^D find again backwards, ^A set the mark,
      ^T jump to a line, ^P show the position, and ^E execute.
    * For easier access, M-" is bound to placing/removing an anchor,
      and M-' to jumping to the next anchor.


author: chenyanpanHW <chenyanpan@huawei.com> - 71.1-3
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-ndctl-test-Fix-device-dax-mremap-test.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-zero_info_block-skip-seed-devices.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: chenyanpanHW <chenyanpan@huawei.com> - 0.2.8-19
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0000-netcf-call-aug_load-at-most-once-per-second.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-netcf-optimize-aug_match-query-for-all-ifcfg-files-related.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-netcf-linux-include-bond-element-for-bonds-with-no-slaves.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0003-netcf-Properly-classify-bond-devices-with-no-slaves.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/Fix-memory-leak-in-aug-match-mac.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: gaihuiying <eaglegai@163.com> - 1:1.0.0-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         evaluate: error out if basetypes are different
         evaluate: guard against NULL basetype
         evaluate: handle invalid mapping expressions gracefully
         evaluate: reject attempt to update a set
         evaluate: release mpz type in expr_evaluate_list() error path
         expression: missing line in describe command with invalid expression

  Thu Apr 18 2024 lingsheng <lingsheng1@h-partners.com> - 1:1.0.0-10
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:datatype: don't return a const string from cgroupv2_get_path()
  datatype: fix leak and cleanup reference counting for struct datatype
  datatype: initialize TYPE_CT_EVENTBIT slot in datatype array
  datatype: initialize TYPE_CT_LABEL slot in datatype array
  evaluate: do not remove anonymous set with protocol flags and single element
  evaluate: don't crash if object map does not refer to a value
  evaluate: error out when expression has no datatype
  evaluate: error out when store needs more than one 128bit register of align fixup
  evaluate: fix check for truncation in stmt_evaluate_log_prefix()
  evaluate: fix double free on dtype release
  evaluate: fix memleak in prefix evaluation with wildcard interface name
  evaluate: reject set in concatenation
  evaluate: revisit anonymous set with single element optimization
  evaluate: skip anonymous set optimization for concatenations
  evaluate: stmt_nat: set reference must point to a map
  evaluate: tproxy: move range error checks after arg evaluation
  evaluate: validate chain max length
  evaluate: validate maximum log statement prefix length
  exthdr: fix tcpopt_find_template to use length after mask adjustment
  exthdr: prefer raw_type instead of desc->type
  json: expose dynamic flag
  json: fix use after free in table_flags_json()
  libnftables: Drop cache in -c/--check mode
  meta: fix tc classid parsing out-of-bounds access
  netlink: don't crash if prefix for < byte is requested
  netlink: fix leaking typeof_expr_data/typeof_expr_key in netlink_delinearize_set()
  netlink: handle invalid etype in set_make_key()
  parser_bison: fix ct scope underflow if ct helper section is duplicated
  parser_bison: fix memleak in meta set error handling
  parser_bison: make sure obj_free releases timeout policies
  parser_json: Catch nonsense ops in match statement
  parser_json: Default meter size to zero
  parser_json: Fix flowtable prio value parsing
  parser_json: Fix synproxy object mss/wscale parsing
  parser_json: Fix typo in json_parse_cmd_add_object()
  parser_json: Proper ct expectation attribute parsing
  parser_json: Wrong check in json_parse_ct_timeout_policy()
  py: fix exception during cleanup of half-initialized Nftables
  rule: fix sym refcount assertion


author: gaihuiying <eaglegai@163.com> - 1:1.0.0-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         evaluate: disable meta set with ranges
         src: reject large raw payload and concat expressions
         evaluate: fix stack overflow with huge priority string
         tcpopt: don't create exthdr expression without datatype
         src: do not allow to chain more than 16 binops
         rule: fix ASAN errors in chain priority to textual names
         tests: shell: add regression test for double-free crash bug
         evaluate: handle invalid mapping expressions in stateful object
         evaluate: Fix incorrect checking the `base` variable in case of IPV6
         netlink: reset temporary set element stmt list after list splice


author: gaihuiying <eaglegai@163.com> - 1:1.0.0-13
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:parser: split tcp option rules
         cache: prepare nft_cache_evaluate() to return error
         ct timeout: fix 'list object x' vs. 'list objects in table' confusion
         ct expectation: fix 'list object x' vs. 'list objects in table' confusion
         tests: shell: connect chains to hook point


author: gaihuiying <eaglegai@163.com> - 1:1.0.0-14
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         parser_json: release buffer returned by json_dumps
         parser_json: fix handle memleak from error path
         parser_json: fix several expression memleaks from error path
         libnftables: Zero ctx->vars after freeing it


author: gaihuiying <eaglegai@163.com> - 1:1.0.0-16
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         evaluate: don't allow nat map with specified protocol
         rule: return error if table does not exist
         json: make sure timeout list is initialised
         evaluate: don't update cache for anonymous chains
         json: don't BUG when asked to list synproxies
         evaluate: compact STMT_F_STATEFUL checks
         evaluate: only allow stateful statements in set and map definitions
         netlink: fix crash when ops doesn't support udata
         netlink: Catch unknown types when deserializing objects
         netlink: Avoid potential NULL-ptr deref parsing set elem expressions
         netlink: Avoid crash upon missing NFTNL_OBJ_CT_TIMEOUT_ARRAY


author: xingwei <xingwei14@h-partners.com> - 2:7.92-4
changelog:
  - Type:bugfix
  - CVE:
  - SUG:NA
  - DESC:decouple from PCRE because it has been End-of-life, use local libpcre to build instead


author: wangkai <13474090681@163.com> - 1:12.22.11-5
changelog:
  - Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
  - CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
  - CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
  - CVE-2023-32559,CVE-2022-35256


author: leiju <leiju4@huawei.com> - 0.1.3-2
changelog:
  - delete ExclusiveArch:i386 i486 i586 i686 pentium3 pentium4 athlon geode x86_64 armv3l armv4b armv4l armv4tl armv5tl armv5tel armv5tejl armv6l armv6hl armv7l armv7hl armv7hnl armv8l armv8hl armv8hnl armv8hcnl noarch


author: yyjeqhc <jialin.oerv@isrc.iscas.ac.cn> - 0.2.17-3
changelog:
  - Migrated legacy `import pango` and `pangocairo` usage to modern PyGObject (`gi.repository.Pango`, `PangoCairo`)
  - Replaced all legacy constants (`pango.STRETCH_...`) with `Pango.Stretch.XXX` enums


author: chenyanpanHW <chenyanpan@huawei.com> - 4.29.0-2
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/nspr-gcc-atomics.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yixiangzhike <yixiangzhike007@163.com> - 0.9.12-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:Move temporary files from /var/run to /run to delete warning in installing


author: xuchenchen <xuchenchen@kylinos.cn> - 2.0.16-11
changelog:
  - backport patches from upstream
  - libnuma: Make numa_available respect EPERM
  - libnuma: fix nodemask allocation size for get_mempolicy


author: Ruozhu Li <liruozhu@huawei.com> - 1.00.029-1
changelog:
  - Added the function of sending a notification message to the switch when the software starts, and the switch sending domain members to the host, improving the reliability of software upgrade scenarios.
  - Add more connection parameter support, consistent with nvme cli.
  - Bond ports can join the domain and automatically establish a connection.


author: yeyiyang <yeyiyang3@h-partners.com> -v2.0.6-3
changelog:
  - add adapt dynamicsmt analysis if smt is not enable
  - fix code check
  - add trace log and change level intf and delete logger
  - smc-d analysis fix inconsistency in the display of zero connection


author: LHesperus <liuchanggeng@huawei.com> -v2.1.0-1
changelog:
  - remove the logger.h interface and add TRACE interface, increase safe_queue wait time to 5s
  - support reload log-level online
  - adapt analysis on riscv
  - add load base sched instance


author: fly_1997 <flylove7@outlook.com> -v2.1.1-1
changelog:
  - add hwprobe_analysis for RISC-V
  - fix error logger info
  - support kernel cluster scheduler
  - adapt for kylin-v10-sp3
  - realtime tune add new tuning item
  - fix smc insmod err
  - realtime tune skip grubby update
  - add hwprobe_tune hwprobe_ext_zbb_tune for RISC-V
  - add high_load value check


author: wangshuai <wangshuai321@huawei.com> - 1.1.6-0
changelog:
  - Add new test suite srpm and intel
  - Add virtual branch of test suite
  - Add support for Kylin and UOS
  - Bugfix


author: wangshuai <wangshuai321@huawei.com> - 1.1.6-3
changelog:
  - Update the pci.ids file
  - Remove unused variable in cdrom test suite
  - Update test_guide doc
  - Unify the location for downloading kernel source RPMs
  - Optimize kabiwhitelist and system test


author: xiaochn <xiaochuannan@inspur.com> - 1.1.7-1
changelog:
  - Add KylinSec 3.5.3 support
  - Fix the problem of disk size calculation
  - Fix bcm57414 nic test failed issue
  - Change the format of date
  - Fixed a bug where a non-existent logger level was used
  - Update README.md
  - Fix vgpu testing issue


author: zhoukaiqi <zhoukaiqi@huawei.com> - 3.1.0-7
changelog:
  - ID:NA
  - SUG:NA
  - DESC: add oeAware-manager, oeAware-collector, oeAware-scenario and oeAware-tune packages


author: JofDiamonds <kwb0523@163.com> - 1.1-5
changelog:
  - fix some review issues:
    1.fix segment fault triggered by unsupported command operations
    2.fix incorrect use of securec function parameters
    3.remove redundant cmd option 'V'


author: xujing <xujing125@huawei.com> - 30-38
changelog:
  - add the scanning path of the rpath
    fix the ELF file cannot be found due to escape of '\'
    excute brp_chrpath before arch_install_post


author: xu_ping <707078654@qq.com> - 3.24.0-1
changelog:
  - Upgrade version to 3.24.0
    * Add support for FIPS-session mode
    * Updates to harden against RSA timing attacks
    * Add option to show the master key verification patterns of secure keys
    * Add support for exporting a key or certificate as URI-PEM file
    * Performance improvements for attribute retrieval
    * Add support for SHA-2 mechanisms
    * Experimental support for IBM Dilithium via OpenSSL OQS provider
    * Support live guest relocation for protected key (PKEY) operations
    * Add support for CKA_ALWAYS_AUTHENTICATE
    * Add support for CKD_*_SP800 KDFs for ECDH
    * Add support for SHA based key derivation mechanisms
    * Add support for PKCS#11 v3.0 SHA3 mechanisms
    * Add support for building Opencryptoki on the IBM AIX platform
    * Add support for the CCA token on non-IBM Z platforms (x86_64, ppc64)
    * Add support for protecting tokens with a token specific user group
    * Add support for combined CKA_EXTRACTABLE and CKA_IBM_PROTKEY_EXTRACTABLE
    * Add support for Koblitz curve secp256k1. Requires CCA v7.2 or later


author: zhang_wenyu <zhang_wenyu@hoperun.com> - 3.25.0-1
changelog:
  - Upgrade version to 3.25.0
    * Add support for PKCS#11 v3.0 SHAKE key derivation
    * Add support for PKCS#11 v3.0 SHA3 and SHA3-HMAC mechanisms
    * Add support for PKCS#11 v3.0 SHA3 mechanisms and MGFs for RSA-OAEP
    * Add support for PKCS#11 v3.0 SHA3 variants of RSA-PKCS and ECDSA mechanisms
    * Add support for CCA AES CIPHER secure key types
    * Add support for the CKM_ECDH1_DERIVE mechanism
    * Add support for the CKM_AES_KEY_WRAP[_*] mechanisms
    * Add support for the CKM_RSA_AES_KEY_WRAP mechanism
    * Add support for the CKM_ECDH_AES_KEY_WRAP mechanism
    * Add a tool for import and exporting PKCS#11 keys to a KMIP server
    * Add support for opaque secure key blob import via C_CreateObject
    * Add support for key wrapping with AES-GCM
    * Add support for newer CCA versions on s390x and non-s390x platforms
    * Add support for CKM_AES_GCM (single-part operations only)


author: Noah <hedongbo@huawei.com> - 8u330.1
changelog:
  - change upstream to openeuler
  - rm 0004-Fix-Compilation-Flags.patch
  - rm 0005-fxpackager-extract-jre-accept-symlink.patch
  - rm 0003-fix-cast-between-incompatible-function-types.patch


author: Funda Wang <fundawang@yeah.net> - 0.21.0-11
changelog:
  - fix CVE-2024-8443, CVE-2024-45615, CVE-2024-45616,
    CVE-2024-45617, CVE-2024-45618, CVE-2024-45619, CVE-2024-45620


author: chenyanpanHW <chenyanpan@huawei.com> - 2.0.0-26
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-multicast-set.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-notify-systemd-of-start-up.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-null-pointer-deref.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-openssl-1.1-fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-cve-2016-7567.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-cve-2017-17833.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/CVE-2012-4428-fix-handling-of-string-list-in-slp_common-c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/Fix-slp_iface-c-comma-expression-so-it-works-as-designed.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/Daemon-sends-wrong-service-reply-when-security-is-enabled.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/Fix-DAAddresses-hostname-resolution-issue.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/Change-default-slpreg-connection-from-UDP-to-TCP.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/Fix-interface-parsing-code-to-look-for-null-ifc-addrs.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/Fix-broadcast-functionality.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/Properly-initialize-xcastsocks-for-error-exit.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/Fix-xrealloc-to-properly-free-original-pointer-on-resize.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/CVE-2019-5544.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: xingwei <xingwei14@h-partners.com> - 2.0.0-27
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Introduce epoch command to slove package upgrade failure problem


author: zhangbinqin<zhangbinqin@h-partners.com> - 8.8p1-36
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix the missing member of the struct Authmethod method_gsskeyex


author: zhangbinqin<zhangbinqin@h-partners.com> - 8.8p1-41
changelog:
  - Type:CVE
  - CVE:CVE-2026-35414 CVE-2026-35385 CVE-2026-35386 CVE-2026-35387 CVE-2026-35388
  - SUG:NA
  - DESC:fix CVE-2026-35414 CVE-2026-35385 CVE-2026-35386 CVE-2026-35387 CVE-2026-35388


author: fly_fzc <2385803914@qq.com> - 1:1.1.1wa-15
changelog:
  - fix CVE-2025-68160 CVE-2026-22796 CVE-2026-22795 CVE-2025-69418 CVE-2025-69421 CVE-2025-69419 CVE-2025-69420


author: wujie <wujie@nj.iscas.ac.cn> - 5.6.0-10
changelog:
  - add support for riscv64 from http://fedora.riscv.rocks/koji/buildinfo?buildID=31200
    Author is David Abdurachmanov <david.abdurachmanov@gmail.com>


author: wangkai <13474090681@163.com> - 5.3.7-6
changelog:
  - Fix CVE-2024-45769,CVE-2024-45770
  - Fix buffer sizing checks in pmstore PDU handling (RHEL-57805)
  - Guard against symlink attacks in pmpost program (RHEL-57810)
  - Fix libpcp_web webgroup slow request refcounting (RHEL-58306)
  - Updated pmdahacluster for newer crm_mon versions (RHEL-50693)
  - Fix invalid memory access in pmfind utility (BZ 2135314)


author: chenyanpanHW <chenyanpan@huawei.com> - 1.9.0-3
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-pcscdaemon.c-Fix-data-race-for-AraKiri-variable.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Guofeng Yue <yueguofeng@h-partners.com> - 4.5-12
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: modify "--source_ip" to "--bind_source_ip" to fix init connection establishment with specific interface


author: wangkai <13474090681@163.com> - 1:0.78-13
changelog:
  - Fix CVE-2012-6687
  - Introduced environment variable-controlled polling timeouts 
    for the close and connection-keeping functions in the os_unix.c file.


author: lichaoran <pkwarcraft@hotmail.com> 1.3293-3
changelog:
  - add buildRequires: add gcc as we using it to compile
  - and perl-generators to auto-generate perl module provides


author: wuchaochao <wuchaochao4@huawei.com> - 0.41-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Modify the spec file ,solving the problem of the test probability failure


author: wangjiang <app@cameyan.com> - 2.072-3
changelog:
  - Passing NO_NETWORK_TESTING=1 as an environment variable
    solves the interactive issue required for using rpmbuild locally


author: gss <guoshengsheng@kylinos.cn> - 0.049-1
changelog:
  - Update to version 0.049
  - Do not apply 0001-test-and-fix-for-RT-52317-Calling-run3-garbles-STDIN.patch
  - Avoid some uninitialized warnings in ProfLogReader
  - Improve errno handling on Windows (thanks, Graham Ollis)
  - Avoid leaking fds (thanks, Dan Book)
  - Fix typos in docs (thanks, Yoshikazu Sawa and Jakub Wilk)


author: huyubiao <huyubiao@huawei.com> - 1:1.07_01-1
changelog:
  - Upgrade version to 1.07_01

  Thu Jul 22 2021 Jiuyue Ma <majiuyue@huawei.com> - 1:1.07-420
  - fix conflict package file '/usr/share/perl5/vendor_perl/Pod'


author: wujie <wujie@nj.iscas.ac.cn> - 0.61-20
changelog:
  - Add riscv64 support from http://fedora.riscv.rocks/koji/buildinfo?buildID=186681
    Author is David Abdurachmanov <david.abdurachmanov@sifive.com>


author: Funda Wang <fundawang@yeah.net> - 8.0.30-7
changelog:
  - Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
    GHSA-4w77-75f9-2c8w
  - Fix OOB access in ldap_escape
    CVE-2024-8932
  - Fix Integer overflow in the dblib/firebird quoter causing OOB writes
    CVE-2024-11236
  - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
    CVE-2024-11234
  - Fix Single byte overread with convert.quoted-printable-decode filter
    CVE-2024-11233


author: Funda Wang <fundawang@yeah.net> - 8.0.30-11
changelog:
  - Fix Null byte termination in dns_get_record()
    GHSA-www2-q4fc-65wf
  - Fix Heap buffer overflow in array_merge()
    CVE-2025-14178
  - Fix Information Leak of Memory in getimagesize
    CVE-2025-14177


author: Funda Wang <fundawang@yeah.net> - 8.0.30-12
changelog:
  - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init()
    CVE-2026-7259
  - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map
    CVE-2026-6722
  - Fix Broken Apache map value NULL check
    CVE-2026-7262
  - Fix Signed integer overflow of char array offset
    CVE-2026-7568


author: Funda Wang <fundawang@yeah.net> - 8.0.30-13
changelog:
  - Fix XSS within status endpoint
    CVE-2026-6735
  - Fix SQL injection via NUL bytes in quoted strings
    CVE-2025-14179
  - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION
    CVE-2026-7261
  - Fix Consistently pass unsigned char to ctype.h functions
    CVE-2026-7258


author: shenbowen <shenbowen@xfusion.com> - 0.4.1-8
changelog:
  - Type:SPEC
  - ID:NA
  - SUG:NA
  - DESC:modify %patchxxx -p1 to 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-Pin-gcc-client-BugFix-for-SwitchOp-change-it-to-term.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-Pin-gcc-client-Bugfix-for-GetFunctionById.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0003-Pin-gcc-client-Init-a-SimpleIPAPASS.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0004-Pin-gcc-client-Add-CGnodeOp.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0005-Pin-gcc-client-Add-support-for-decl-and-field-SetDec.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0006-Pin-gcc-client-Add-GetDeclType.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0007-Pin-gcc-client-Fix-VectorType.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0008-Pin-gcc-client-Fix-struct-self-contained-CallOp-Tree.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0009-Pin-gcc-client-Fix-TreeToValue-VAR_DECL-and-ARRAY_TY.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0010-PluginClient-Fix-the-bug-during-multi-process-compil.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0011-Fix-BUILD-errors.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0012-PluginClient-Update-transfer-command.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch -f


author: weijin deng <weijin.deng@turbolinux.com.cn> - 0.3.15-1
changelog:
  - Upgrade to 0.3.15
  - Update Version, Source0, BuildRequires, Obsoletes
  - Update stage 'build', 'install' and 'files'
  - Correct uncorrect date, add one patch


author: Haiwei Li <lihaiwei8@huawei.com> - 2.2.0-1
changelog:
  - pkgship Upgrade to 2.2.0
  - Merge the patch before 2021/8/16 into the source code
  - Added the function of comparing the dependency information of different database packages


author: Pengju Jiang <jiangpengju2@huawei.com> - 2.2.0-2
changelog:
  - when the command line is parsing a single package of json data, there will be none in the
  - required_by_bin and required_by_bin lists in the json data, resulting in parsing errors,
  - increase the judgment condition to prevent the existence of none value


author: Haiwei Li <lihaiwei8@huawei.com> - 2.2.0-3
changelog:
  - When the input parameters of the script that executes the installation of es and redis are incorrect, 
  - the prompt message is incorrect.
  - When the redis port setting is unreasonable, the prompt message for starting the service is incorrect.


author: Haiwei Li <lihaiwei8@huawei.com> - 2.2.0-4
changelog:
  - Due to the inappropriate mapping rules between the binary package and the source package, 
  - the source package corresponding to the binary package cannot be found when the query bedepend require, 
  - and an error is reported.


author: Haiwei Li <lihaiwei8@huawei.com> - 2.2.0-5
changelog:
  - When the query is dependent, a list containing only None is entered, 
  - which causes an error in the es query. 
  - Modify the es query encapsulation interface to filter the None value.


author: Haiwei Li <lihaiwei8@huawei.com> - 2.2.0-7
changelog:
  - Due to a problem with docker, when pkgship is used in docker,
  - it must be created with the --privileged parameter, otherwise it will fail. So update the instructions.


author: Haiwei Li <lihaiwei8@huawei.com> - 2.2.0-8
changelog:
  - Solve the problem of patch application failure due to the file encoding format being crlf.
  - Solve the problem of json serialization caused by flask's new dependency on simple-json.


author: Haiwei Li <lihaiwei8@huawei.com> - 2.2.0-9
changelog:
  - TerminalTable class Use the deprecated method of PrettyTable, resulting in compilation failure, delete the file.


author: gaihuiying <eaglegai@163.com> - 0.9.5-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add macros to control if need libdrm, pango, libpng and if need to exclude bootlog


author: duyiwei <duyiwei@kylinos.cn> - 1:3.4.4-4
changelog:
  - Type:bugfix
  - CVE:CVE-2024-9355、CVE-2019-9514、CVE-2024-24791、CVE-2022-32189、CVE-2022-41715、CVE-2022-2880、CVE-2022-1962、CVE-2023-45290、CVE-2024-24783、CVE-2024-24785
  - SUG:NA
  - DESC: Optimize spec files and fix CVE in batches through rebuild


author: openEuler Buildteam <buildteam@openeuler.org> - 0.4.9-4
changelog:
  -Type:enhancement
  -Id:NA
  -SUG:NA
  -DESC:Increase the ability of encoding files for use with libpoppler


author: heppen <hepeng68@huawei.com> - 1.1.0-3
changelog:
  - Bug fix: fix build warning.
  - Bug fix: export PWR_SYS_GetRtPowerInfo.
  - Bug fix: data collection task intercept invalid task type.


author: heppen <hepeng68@huawei.com> - 1.1.0-4
changelog:
  - Bug fix: memcpy null pointer, array out of bounds, struct align.
  - Bug fix: get watt state will failed at the first time.
  - Bug fix: use process name to query pid but return all pids.
  - Bug fix: mismatch fopen/pclose and popen/fclose, useless if statement.


author: heppen <hepeng68@huawei.com> - 1.1.0-5
changelog:
  - Bug fix: SIGPIPE cause powerapi server exit.
  - Bug fix: pstree command is too slow to get all pid.
  - Bug fix: set smart grid state failed.
  - Bug fix: get watt attr and task list is not correct.


author: Zihao Xue <xuezihao@huawei.com> - 1.1.0-6
changelog:
  - Bug fix: heap buffer overflow caused by sending incomplete strings.
  - Bug fix: too long strings into QueryProcs causes services broke down.


author: gaihuiying <eaglegai@163.com> - 2.4.9-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream
         Fixing up parsing in radiusclient.conf


author: chenyanpanHW <chenyanpan@huawei.com> - 3.22-52
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/procmail-3.22-rhconfig.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/procmail-3.15.1-man.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/procmail_3.22-8.debian.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/procmail-3.22-truncate.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/procmail-3.22-ipv6.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/procmail-3.22-getline.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/procmail-3.22-CVE-2014-3618.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/procmail-3.22-crash-fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/procmail-3.22-CVE-2017-16844.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Zhu Jin <zhujin18@huawei.com> - 4.0.2-16
changelog:
  - library: address a potential race resulting in a fault and avoid strdup() calls in sd2proc() if possible


author: wangkai <13474090681@163.com> - 1.3.9a-1
changelog:
  - Update to 1.3.9a for fix CVE-2026-42167
  - Add 'proxy' sub-package with unbundled mod_proxy
  - Use libsodium to provide ed25519 key support for mod_sftp
  - Update logrotate snippet to use try-reload-or-restart rather than reload
    for distributions with systemd 229 or later


author: zhengxiaoxiao <zhengxiaoxiao2@huawei.com> - 3.14.0-11
changelog:
  - Type:CVE
  - CVE:CVE-2026-0994
  - SUG:NA
  - DESC:Fix Any recursion depth bypass in Python json_format.ParseDict


author: ouyangminxiang <ouyangminxiang@kylinsec.com.cn> - 15.0-7
changelog:
  - Fix mate-volume-control-status-icon doesn't work
  - Fix the problem that the muted function in mate-volume-control-status-icon doesn't work when the system is boot
  - Recompile systemd post scripts for pulseaudio


author: xihaochen <xihaochen@huawei.com> - 5.4-1
changelog:
  - Type:requirements                                                                                                                                  
  - Id:NA
  - SUG:NA
  - DESC:update python-coverage to 5.4


author: yaoxin <yaoxin30@huawei.com> - 0.7.5-1
changelog:
  - Fixed the issue that python-genshi could not recognize the parameter use_2to3 in the %build stage due to the upgrade of  python-setuptools to version 59.4.0


author: shixuantong <shixuantong@huawei.com> - 7.43.0.6-2
changelog:
  - fix test fail for test_sslversion_options, test_failonerror and test_failonerror_status_line_invalid_utf8_python3


author: xu_ping <xuping33@h-partners.com> - 0.2.6-2
changelog:
  - Tarball of source code has correct file content,but inconsistent checksum.
    Replace tarball with the consistent checksum.


author: wangkai <13474090681@163.com> - 3.17.6-2
changelog:
  - Fixed the packaging process does not include __pycache__ tests
  - Obsoletes empty package python-simplejson-help


author: lixiaoyong <lixiaoyong@kylinos.cn> - 0.14.1-1
changelog:
  - Upgrade package to version 0.14.1
    - Drop support for Python older than 3.6
    - Additional ruff/Pyflakes/codespell fixes


author: lipengyu <lipengyu@kylinos.cn> - 3.9.9-45
changelog:
  - Type:CVE
  - CVE:CVE-2025-4517 CVE-2025-4138 CVE-2024-12718 CVE-2025-4330 CVE-2025-4435
  - SUG:NA
  - DESC:fix CVE-2025-4517 CVE-2025-4138 CVE-2024-12718 CVE-2025-4330 CVE-2025-4435


author: fuanan <fuanan3@h-partners.com> - 3.9.9-50
changelog:
  - Type:CVE
  - CVE:CVE-2025-12084 CVE-2025-13836 CVE-2025-13837
  - SUG:NA
  - DESC:fix CVE-2025-12084 CVE-2025-13836 CVE-2025-13837


author: xihaochen <xihaochen@huawei.com> - 2020.5-1
changelog:
  - Type:requirements                                                                                                                                  
  - Id:NA
  - SUG:NA
  - DESC:update pytz to 2020.5


author: <ganqixin@huawei.com> - 10:6.2.0-104
changelog:
  - intel_iommu: Add missed reserved bit check for IEC descriptor
  - 9pfs: fix crash on 'Treaddir' request
  - s390x/ap: fix missing subsystem reset registration
  - qemu/bswap: Undefine CPU_CONVERT() once done
  - linux-user: Add missing signals in strace output
  - linux-user: Add missing clock_gettime64() syscall strace


author: <alex.chen@huawei.com> - 10:6.2.0-105
changelog:
  - target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  - target/i386: Add VNMI and automatic IBRS feature bits
  - target/i386: Add missing feature bits in EPYC-Milan model
  - target/i386: Add feature bits for CPUID_Fn80000021_EAX
  - target/i386: Add a couple of feature bits in 8000_0008_EBX
  - target/i386: Add new EPYC CPU versions with updated cache_info
  - target/i386: allow versioned CPUs to specify new cache_info


author: <fengjiabo1@huawei.com> - 10:6.2.0-106
changelog:
  - hw/nvme: Remove redundant dma_blk_write
  - tests/avocado/machine_s390_ccw_virtio: Adapt test to new default resolution
  - edid: set default resolution to 1280x800 (WXGA)
  - iotests/308: Fix for CAP_DAC_OVERRIDE
  - hvf: remove unused but set variable
  - vvfat: Fix vvfat_write() for writes before the root directory
  - hw/misc/nrf51_rng: Don't use BIT_MASK() when we mean BIT()
  - hw/pci: Remove unused pci_irq_pulse() method
  - ui/gtk: fix leaks found wtih fuzzing
  - target/i386: fix size of EBP writeback in gen_enter()
  - tests/qtest/fuzz: fix memleak in qos_fuzz.c
  - hw/core/loader: gunzip(): fix memory leak on error path
  - migration: fix a typo
  - scsi: fetch unit attention when creating the request
  - raw-format: Fix error message for invalid offset/size
  - tcg: Reset data_gen_ptr correctly
  - Fix calculation of minimum in colo_compare_tcp
  - hw/intc: Don't clear pending bits on IRQ lowering
  - target/arm: Drop user-only special case in sve_stN_r
  - usb-hub: Fix handling port power control messages
  - target/ppc: Set ctx->opcode for decode_insn32()
  - linux-user: Add proper strace format strings for getdents()/getdents64()
  - linux-user: Fix TARGET_PROT_SEM for XTENSA
  - linux-user/hppa: Set TASK_UNMAPPED_BASE to 0xfa000000 for hppa arch
  - linux-user/hppa: Dump IIR on register dump
  - tests: Fix typo in check-help output
  - qdev-core.h: Fix wrongly named reference to TYPE_SPLIT_IRQ
  - hw/scsi/megasas: Simplify using the ldst API
  - gqa-win: get_pci_info: Clean dev_info if handle is valid
  - target/ppc: Fix 7448 support
  - vvfat: Fix size of temporary qcow file
  - docs: Correct 'vhost-user-blk' spelling
  - jackaudio: use ifdefs to hide unavailable functions
  - simplebench: Fix Python syntax error (reported by LGTM)
  - python: update type hints for mypy 0.930
  - Python/aqmp: fix type definitions for mypy 0.920
  - tcg: Allow top bit of SIMD_DATA_BITS to be set in simd_desc()
  - hw/ppc/e500: Prefer QOM cast
  - hw/ppc/e500: Remove unused "irqs" parameter
  - hw/ppc/e500: Add missing device tree properties to i2c controller node
  - linux-user: Show timespec on strace for futex()
  - linux-user: Add strace for clock_nanosleep()
  - linux-user: Fix strace of chmod() if mode == 0
  - linux-user: Log failing executable in EXCP_DUMP()
  - linux-user: Add pidfd_open(), pidfd_send_signal() and pidfd_getfd() syscalls


author: <fengjiabo1@huawei.com> - 10:6.2.0-107
changelog:
  - qemu: Support specifying the cache size presented to guest
  - hw/core/machine-smp: Initialize caches_bitmap before reading
  - qapi/qom: Define cache enumeration and properties for machine
  - linux-aio: fix unbalanced plugged counter in laio_io_unplug()


author: <fengjiabo1@huawei.com> - 10:6.2.0-109
changelog:
  - migration:Extand the fdtable in the incoming phase of migration
  - qemu6.2.0: Add trace to measure hot migrate downtime


author: Pengrui Zhang <zhangpengrui@huawei.com> - 10:6.2.0-111
changelog:
  - target/i386: Add Hygon Dhyana-v3 CPU model
  - target/i386: Add new Hygon 'Dharma' CPU model
  - migration: Don't sync volatile memory after migration completes
  - hw/display/framebuffer: Add cast to force 64x64 multiply
  - vmxcap: Add 5-level EPT bit
  - i386: Add Icelake-Server-v6 CPU model with 5-level EPT support
  - vmxcap: add tertiary execution controls
  - target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  - target/i386: enumerate bit 56 of MSR_IA32_VMX_BASIC
  - target/i386: fix feature dependency for WAITPKG
  - target/i386: add support for LAM in CPUID enumeration
  - target/i386: add control bits support for LAM
  - target/i386: add support for FRED in CPUID enumeration
  - target/i386: mark CR4.FRED not reserved
  - vmxcap: add support for VMX FRED controls
  - target/i386: enumerate VMX nested-exception support
  - target/i386: Add get/set/migrate support for FRED MSRs
  - target/i386: Delete duplicated macro definition CR4_FRED_MASK
  - target/i386: Add VMX control bits for nested FRED support
  - target/i386: Raise the highest index value used for any VMCS encoding
  - target/i386: Add more features enumerated by CPUID.7.2.EDX
  - target/i386: pass X86CPU to x86_cpu_get_supported_feature_word
  - i386/cpuid: Remove subleaf constraint on CPUID leaf 1F
  - target/i386: Don't construct a all-zero entry for CPUID[0xD 0x3f]
  - target/i386: Enable fdp-excptn-only and zero-fcs-fds
  - target/i386: Construct CPUID 2 as stateful iff times > 1
  - target/i386: Make invtsc migratable when user sets tsc-khz explicitly
  - target/i386/cpu: Fix notes for CPU models
  - target/i386: Introduce SierraForest-v2 model
  - target/i386: Export BHI_NO bit to guests
  - target/i386: Add new CPU model ClearwaterForest
  - docs: Add GNR, SRF and CWF CPU models
  - target/i386: add sha512, sm3, sm4 feature bits
  - target/i386: add avx-vnni-int16 feature
  - net: pad packets to minimum length in qemu_receive_packet()(CVE-2025-12464)
  - block-qdict: Fix-Werror=maybe-uninitialized build failure
  - block/curl.c: Check error return from curl_easy_setopt()
  - block: Handle curl 7.55.0..7.85.0 version changes
  - amd_iommu: fix uninitialized werror
  - io: release active GSource in TLS channel finalizer
  - io: move websocket resource release to close method
  - io: fix use after free in websocket handshake code(CVE-2025-11234)


author: Pengrui Zhang <zhangpengrui@huawei.com> - 10:6.2.0-113
changelog:
  - cryptodev-builtin: Limit the maximum size(CVE-2025-14876)
  - block/vmdk: fix OOB read in vmdk_read_extent()(CVE-2026-2243)
  - lsi53c895a: keep a reference to the device while SCRIPTS execute(CVE-2024-6519)


author: lifeifei <lifeifei@kylinos.cn> - 2.19-3
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Add the socket option IPV6_MULTICAST_LOOP to prevent the interface from autoconfiguring using RA messages sent by itself.


author: Bing Xia <xiabing12@h-partners.com> - 0.6.7-20
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix for vendor errors are not recorded in the SQLite database if 
         some cpus are offline at the system start


author: yangjunshuo <yangjunshuo@huawei.com> - 0.6.7-21
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix cpu isolate errors when some cpus are offline
    before the service started


author: Donghua Huang <huangdonghua3@h-partners.com> - 41.0-40
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: libhns: Fix wrong WQE data in new post send API when QP wraps around


author: Donghua Huang <huangdonghua3@h-partners.com> - 41.0-45
changelog:
  - Type: feature
  - ID: NA
  - SUG: NA
  - DESC: Add tracing support for libhns, including HNS RoCE I/O tracepoints and USDT support


author: Donghua Huang <huangdonghua3@h-partners.com> - 41.0-47
changelog:
  - Type: feature
  - ID: NA
  - SUG: NA
  - DESC: Fix missing CQE when UD QP uses different SL and zero-length message error


author: wangkai <13474090681@163.com> - 7.2.7-1
changelog:
  - Update to 7.2.7
  - Fix CVE-2021-32626 CVE-2021-32627 CVE-2021-32762 CVE-2021-32675
    CVE-2021-41099 CVE-2021-32628 CVE-2021-32687 CVE-2022-24735
    CVE-2022-24736 CVE-2022-3647 CVE-2022-3734 CVE-2022-35977
    CVE-2023-25155 CVE-2024-46981


author: sunsuwan <sunsuwan3@huawei.com> - 1.2.6-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:add a user directory when the rpc user directory does not exist


author: wangyueliang <wangyueliang@kylinos.cn> - 2022.16-4
changelog:
  - merge feature from branch openEuler-22.03-LTS-SP1：
  - DESC: add loongarch64 and sw_64 support
  - AUTHOR: panchenbo <panchenbo@kylinsec.com.cn>


author: dongyuzhen <dongyuzhen@h-partners.com> - 2.16-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix failure when recompiling noarch rpm and remove the require to rpm-build


author: dongyuzhen <dongyuzhen@h-partners.com> - 2.16-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:revert: remove the require to rpm-build.For consistency with other community-released dependencies


author: yixiangzhike <yixiangzhike007@163.com> - 2.16-13
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:avoid truncate trailer space and do not escape backslash when read filename


author: yixiangzhike <yixiangzhike007@163.com> - 2.16-14
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:revert "avoid truncate trailer space and do not escape backslash when read filename"


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 8.2210.0-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:tcp net subsystem: handle data race gracefully
         fix startup issue on modern systemd systems
         tcpflood bugfix: plain tcp send error not properly reported
         tcpflood bugfix: TCP sending was not implemented properly
         lookup tables: fix static analyzer issue
         lookup tables bugfix: reload on HUP did not work when backgrounded
         openssl: Replaced depreceated method SSLv23_method with TLS_method
         mmnormalize bugfix: if msg cannot be parsed, parser chain is stopped
         core bugfix: potential segfault on busy systems
         imfile: fix ext directory's fd leak in case of inotify on symlink
         imfile tests: ext directory's fd leak in case of inotify on symlink


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 8.2210.0-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:imfile: remove state file on file delete fix
         omfile: do not carry out actual action when writing to /dev/null
         core bugfix: rsyslog messages may not always have FQDN


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 8.2210.0-10
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:rainerscript: do not try to call a function if it does not exist
         gnutls bugfix: Avoid blocking sockets during TLS handshake
         gnutls bugfix: Add timeout to GnuTLS handshake
         core: fix potential NULL ptr access on HUP in very early startup phase
         omfwd: fix segfault in UDP freeaddrinfo
         gnutls TLS driver: fix small memory leak
         rsyslog startup bugfix: cosmetic memory leak
         core: fix potential misadressing in sigmask
         covscan: remove defect type of RESOURCE_LEAK
         Fix a buffer overflow when the argument to replace is empty
         Fix passing the value to EscapeChar
         Do not free the uninitialized cstring
         Keep original free pattern
         network subsystem: improve connection failure error message
         Fix runConf NULL pointer refence
         nsd_ptcp regression fix: remove debugging messages emited to stderr


author: chenyanpanHW <chenyanpan@huawei.com> - 1.3.8-3
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/00-disable-rubocop-tests.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: zouzhimin <zouzhimin@kylinos.cn> - 1:2.2.3.1-4
changelog:
  - Type:CVES
  - ID:CVE-2024-26141 CVE-2024-26146 CVE-2024-25126
  - SUG:NA
  - DESC:CVE-2024-26141 CVE-2024-26146 CVE-2024-25126


author: zouzhimin <zouzhimin@kylinos.cn> - 1:2.2.3.1-5
changelog:
  - Type:CVES
  - ID:CVE-2022-44570 CVE-2022-44571 CVE-2022-44572
  - SUG:NA
  - DESC:CVE-2022-44570 CVE-2022-44571 CVE-2022-44572


author: wangkai <13474090681@163.com> - 1.76.0-1
changelog:
  - Update to 1.76.0 because firefox update 128ESR version
  - Fix CVE-2022-21658 CVE-2022-46176 CVE-2023-38497
  - Obsoletes rust-analysis


author: wangkai <13474090681@163.com> - 1.82.0-1
changelog:
  - Update to 1.82.0 because firefox update 140ESR version
  - Synchronize the code from the openEuler-24.03-LTS-SP1 branch
  - Remove rls command


author: xinghe <xingheyd@163.com> - 4.17.5-15
changelog:
  - Type:cves
  - ID:CVE-2026-3238 CVE-2026-3012 CVE-2026-4480 CVE-2026-4408
  - SUG:NA
  - DESC:fix CVE-2026-3238 CVE-2026-3012 CVE-2026-4480 CVE-2026-4408


author: wangjiang <wangjiang37@h-partners.com> - 35.5-17
changelog:
  - backport patch Allow virt_domain read device sysctls
                   Allow icecast rename its log files


author: yanglu<yanglu72@h-partners.com> - 8.17.1-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix newaliases command error and postfix service start execption after sendmail install


author: wjiang <app@cameyan.com> - 15.6-28
changelog:
  - backport bugfix patches from upstream
  - Fix build with binutils 2.46 (c4665d2)
  - Fix memory leak on TPM log error in mirror_one_mok_variable (92630f2)


author: Jianmin <jianmin@iscas.ac.cn> - 1:1.8.0-7
changelog:
  - Type:cve
  - CVE:CVE-2023-39325 and CVE-2023-44487
  - SUG:NA
  - DESC:backport CVE-2023-39325 and CVE-2023-44487


author: Keqian Zhu <zhukeqian1@huawei.com> - 1.0.0-4
changelog:
  - guestinfo: Take another VM stop reason to account
  - cpu_qos: Add aditional setting for cpu QOS
  - cachembw_qos: Add a job to sync VM pids to resctrl


author: Dongxu Sun <sundongxu3@huawei.com> - 1.0.0-6
changelog:
  - cpu_qos: Register reset_domain_bandwidth as exit func after adding power_qos job
  - power_qos/cachembw_qos: Add type check for environment variables


author: Dongxu Sun <sundongxu3@huawei.com> - 1.0.0-7
changelog:
  - docs-Use-chinese-description-instead-of-English-in-R.patch
  - Makefile-Use-strip-option-in-gcc.patch


author: wangkai <13474090681@163.com> - 14.4.2.0-29
changelog:
  - Fix CVE-2021-33844,CVE-2023-32627,CVE-2021-23159,CVE-2023-34432
  - CVE-2023-34318,CVE-2021-23172,CVE-2021-3643,CVE-2021-23210
  - CVE-2022-31650,CVE-2023-26590,CVE-2022-31651,CVE-2023-32627
  - CVE-2017-18189


author: chenyanpanHW <chenyanpan@huawei.com> - 0.8.8-12
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-Remove-pyxdg-dependency.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: chenyanpanHW <chenyanpan@huawei.com> - 4.4-4
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0003-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0004-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0005-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0006-pseudo-fix-possible-dereference-of-NULL-pointer.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: xinghe <xinghe2@h-partners.com> - 7:4.9-29
changelog:
  - Type:cves
  - ID:CVE-2023-49288 CVE-2025-54574 CVE-2023-5824 CVE-2025-62168
  - SUG:NA
  - DESC:fix CVE-2023-49288 CVE-2025-54574 CVE-2023-5824 CVE-2025-62168


author: yixiangzhike <yixiangzhike007@163.com> - 2.6.1-24
changelog:
  - KRB5: fix mem leak in authenticate_stored_users (8b452b3)
  - KCM: fix use-after-free in kcm_read_options (50ae35f)


author: Jie Yang <yangjieyj.yang@huawei.com> - 2.0.0-6
changelog:
  - docs: fix some statement
  - machine_manager: add autodeflate for balloon
  - migration: add dev_id into VirtioPciState when save and restore device state
  - machine: fix more than one pcie-root-ports with same id
  - migration: move function "transport_reset" to save state stage for vhost vsock device
  - vfio: adding ram device region to vfio bar region
  - machine_manager: move argument "serial" from -drive to -device virtio-blk-pci/device
  - machine_manager: add multifunction for devices
  - machine: add init_multifunction function to init multifunction
  - machine: add realization for multifunction


author: Jie Yang <yangjieyj.yang@huawei.com> - 2.1.0-1
changelog:
  - Add support for PCIe native hotplugging.
  - Reduce memory consumption of reading edk2 firmware files on aarch64.
  - Add support for booting from disk image directly.
  - Add support for VM reboot and VM shutdown.
  - Add support for guest memory preallocation.
  - Add more test cases.
  - Add and fix documentation.
  - Replace lazy_static crate with once_cell.
  - Performance enhancement for virtio-blk and virtio-net devices.
  - Add ftrace support.


author: Jie Yang <yangjieyj.yang@huawei.com> - 2.1.0-2
changelog:
  - Fix VFIO hotplugging failure caused by missing seccomp rules.
  - Fix booting failure from disk image on x86_64.
  - Update some documents.


author: Jie Yang <yangjieyj.yang@huawei.com> - 2.1.0-3
changelog:
  - Fix memory snapshot failure with hotplugged devices.
  - Fix address translation for virtio devices.
  - Add some test cases for microvm.
  - Update some documents.


author: yixiangzhike <yixiangzhike007@163.com> - 1.9.8p2-21
changelog:
  - apply 2 patches: backport-sudo_rfc1938_setup--fix-out-of-bounds-read-if-the-.patch, backport-sudo_auth_init--Fix-setting-FLAG_ONEANDONLY-if-onl.patch


author: yeqinglong <yeqinglong@kylinsec.com.cn> - 5.1.19-17
changelog:
  - add loongarch64 and sw_64 support
  - add kylinsec to supermin support
  - fix supermin cannot detect kylinsecos


author: shixuantong <shixuantong1@huawei.com> - 1.0.2-34
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix period task some bugs
         fix env_file and environ_conf


author: shixuantong <shixuantong1@huawei.com> - 1.0.2-35
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix cpu_sentry result when found_fault_cores_number != isolated_cores_number


author: shixuantong <shixuantong1@h-partners.com> - 1.0.2-39
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add NONZERO_EXITED status for plugin exited with non-zero
         fix process exit status and service kill mode


author: ningyu<ningyu9@huawei.com> - 1.2.1-3
changelog:
  - upatch-hijacker: fix compile bug
  - daemon: fix 'cannot get file selinux xattr when selinux is not enforcing' issue
  - syscared: fix 'syscare check command does not check symbol confiliction' issue
  - syscared: fix 'cannot find process of dynlib patch' issue
  - Change uuid type from string to uuid bytes
  - syscared: optimize patch error logic
  - syscared: optimize transaction creation logic
  - upatch-manage: optimize output
  - syscared: optimize patch error logic
  - syscared: optimize transaction creation logic
  - spec: fix "cannot find syscare service after upgrade" bug


author: ningyu<ningyu9@huawei.com> - 1.2.1-4
changelog:
  - syscared: stop activating ignored process on new process start
  - syscared: adapt upatch-manage exit code change
  - upatch-manage: change exit code
  - upatch-manage: change the way to calculate frozen time


author: renoseven<dev@renoseven.net> - 1.2.1-6
changelog:
  - upatch-diff: fix 'lookup_elf failed' issue
  - upatch-manage: fixed the core dump issue after applying hot patches to nginx on x86_64 architecture
  - security: change daemon socket permission
  - security: change directory permission
  - upatch-build: fix 'file detection cause build failure' issue
  - syscared: stop activating ignored process on new process start


author: ningyu<ningyu9@huawei.com> - 1.2.1-7
changelog:
  - upatch-diff: remove rela check while build rebuilding .eh_frame
  - upatch-diff: only check changed file symbols


author: renoseven<dev@renoseven.net> - 1.2.1-9
changelog:
  - abi: remove display limit of patch info
  - all: clean code
  - all: implement asan gcov build type
  - security: sanitize sensitive code
  - upatch-manage: fix memory leak
  - upatch-helper: fix memory leak
  - upatch-diff: fix memory leak
  - upatch-diff: fix find duplicate symbol issue
  - upatch-diff: prevent tls variable modification
  - common: fix failed to set selinux status issue
  - all: add compile options
  - all: remove redundant code
  - all: finding executable from environment variables
  - add excludearch loongarch64


author: renoseven<dev@renoseven.net> - 1.2.1-10
changelog:
  - upatch-diff: fix '.rela' '.rela.text' resolving issue
  - upatch-manage: fix plt resolving issue
  - upatch-manage: fix patch region finding issue
  - common: fix normalizing empty path return non-empty issue
  - syscared: add check action for [DEACTIVED -> ACTIVED] transition


author: yangjiaqi<yangjiaqi16@huawei.com> - 0.9-57
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:use file locks to avoid remounting the sharepath/master dir


author: yangjiaqi<yangjiaqi16@huawei.com> - 0.9-58
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:clean up run/syscontainer-tools/netns/container_id directory residues in the prestart phase


author: zhangxianting <zhangxianting@uniontech.com> - 0.9-64
changelog:
  - Type:patch
  - CVE:NA
  - SUG:NA
  - DESC:patch hunk FAILED bacause of the arch judgement of sw_64 and loongarch64


author: lingsheng <lingsheng1@h-partners.com> - 6.04-16
changelog:
  - update libpng 1.6.36 to fix CVE-2011-2501 CVE-2011-2690 CVE-2011-2691
  - CVE-2011-2692 CVE-2011-3045 CVE-2011-3048 CVE-2012-3425 CVE-2015-7981
  - CVE-2015-8126 CVE-2015-8472 CVE-2015-8540 CVE-2016-10087 CVE-2017-12652


author: zhang_chunjing<zhang_chunjing@hoperun.com> - 1.3.2-1.1
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC: add systemd to BuildRequires to fix install/uninstall errors


author: wjiang <app@cameyan.com> - 249-108
changelog:
  - backport community patches:
        backport-login-user-runtime-dir-free-ignored-sd_bus_error-avo.patch
        backport-login-user-runtime-dir-use-STRLEN-where-appropriate.patch
        backport-systemctl-gracefully-adjust-bus-transport-and-runtim.patch
        backport-journal-do-not-rotate-journal-when-MaxRetentionSec-i.patch
        backport-compress-avoid-a-bunch-of-div-by-zeroes.patch


author: yixiangzhike <yixiangzhike007@163.com> - 249-110
changelog:
  - fix coredump generation when systemd-resolved and systemd-networkd service is started then uninstalled


author: langfei<langfei@huawei.com> - 4.5-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Resolve stap-exporter.service chenge to disable when upgraded systemtap-stap-exporter package


author: yangzhuangzhuang <yangzhuangzhaung1@huawei.com> - 1:8.6.10-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:The "no acceptable C compiler found" error message is displayed during compilation.Therefore,add buildrequires gcc.


author: yixiangzhike <yixiangzhike007@163.com> - 1:8.6.12-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert "Change wrong Provides. Replace 1:8.6.10 to epoch:version"


author: Funda Wang <fundawang@yeah.net> - 0.8.2-15
changelog:
  - move glib schemas into main package
  - drop static lib as it was not used by any other packages
  - drop uselss scriptlets as they are handled by rpm file trigger already


author: gaihuiying <eaglegai@163.com> - 1:0.17-80
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix telnet crashes on stack overflow due to infinite recursion.


author: Guoshuai Sun <sunguoshuai@huawe.com> - 8:2018-24
changelog:
  - Drop texlive-venturisadf texlive-wsuipa texlive-vntex, because those packages
    use utopia license may not be free for anyone


author: sunguoshuai <sunguoshuai@huawei.com> - 8:2018-26
changelog:
  - Remove texlive-collection-langother,texlive-scheme-full,texlive-scheme-tetex
    who requires texlive-vntex


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com>- 0.6-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:The "cc:No such file or directroy" error message is displayed during compilation.Therefore,add buildrequires gcc.
         The macro unitdir is used.Therefore,add buildrequires systemd


author: yaoxin <1024769339@qq.com> - 1:9.0.117-1
changelog:
  - Update to 9.0.117 for fix CVEs: CVE-2026-24880, CVE-2026-25854,
    CVE-2026-29129, CVE-2026-29145, CVE-2026-29146, CVE-2026-32990,
    CVE-2026-34483, CVE-2026-34486, CVE-2026-34487, CVE-2026-34500


author: yaoxin <1024769339@qq.com> - 1:9.0.118-1
changelog:
  - Update to 9.0.118 for fix CVEs: CVE-2026-41284, CVE-2026-41293,
    CVE-2026-42498, CVE-2026-43512, CVE-2026-43513, CVE-2026-43514,
    CVE-2026-43515
  - Fix tomcat-jsvc stop failed


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.38.0-1
changelog:
  - Upgrade to 3.38.0
  - Sub package totem-nautilus becomes empty
    in version 3.31.91 Move nautilus properties page to nautilus module


author: wangshuo <wangshuo@kylinos.cn> - 3.0.5-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix the SIGSYS coredump issue that occurs when executing
  -      the /usr/libexec/tracker-extract-3 command


author: Liu Chao <liuchao173@huawei.com> - 2.24.1-1
changelog:
  - Upgrade to 2.24.1:
    - fixed privileged execution of arbitrary scripts by active local user. (CVE-2024-52336)
    - added sanity checks for API methods parameters. (CVE-2024-52337)


author: tianmuyang <tianmuyang@huawei.com> - 2.24.1-3
changelog:
  - profiles: add programmable scheduling based on eBPF
  - package:  change package tuned to architecture-dependent


author: tianmuyang <tianmuyang@huawei.com> - 2.24.1-5
changelog:
  - tuned-ebpf: Add pid cache to avoid binding one process for multiple times
  - tuned-ebpf: Add "AND" logic of cpu mask in eBPF programmable schedule


author: langfei <langfei@huawei.com> - 2022a-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Aysén Region moves from -04/-03 to -03; new zone;
  -	Improve recent commentary for Chilean decrees.


author: Liu Chao <liuchao173@huawei.com> - 2022a-22
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Moldova has used EU transition times since 2022
  	Most of BC moves from PDT to Pacific Time on 03-09
  	Delay America/Vancouver tm_isdst transition


author: gaihuiying <eaglegai@163.com> - 1.13.2-21
changelog:
  - Type:CVE
  - CVE:CVE-2025-11411
  - SUG:NA
  - DESC:Additional fix for CVE-2025-11411 to include YXDOMAIN and non-referral nodata answers in the mitigation


author: gaihuiying <eaglegai@163.com> - 1.13.2-22
changelog:
  - Type:cves
  - CVE:CVE-2026-33278,CVE-2026-41292,CVE-2026-42959,CVE-2026-42960
  - SUG:NA
  - DESC:fix CVE-2026-33278,CVE-2026-41292,CVE-2026-42959,CVE-2026-42960


author: gaihuiying <eaglegai@163.com> - 1.13.2-23
changelog:
  - Type:cves
  - CVE:CVE-2026-32792,CVE-2026-42923,CVE-2026-40622,CVE-2026-42534,CVE-2026-44390
  - SUG:NA
  - DESC:fix CVE-2026-32792,CVE-2026-42923,CVE-2026-40622,CVE-2026-42534,CVE-2026-44390


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-43
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:revert community patches
         [del] backport-libblkid-ext-add-checksum-support.patch
         backport-libblkid-fix-spurious-ext-superblock-checksum-mismat.patch


author: markeryang <yanglongkang@h-partners.com> - 2.37.2-44
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport community patches
         [add] backport-lslogins-remove-possible-memory-leaks-coverity-scan.patch
               backport-mkfs.bfs-fix-memory-leaks-and-weak-code.patch
               backport-cfdisk-fix-memory-leak-and-possible-NULL-dereference.patch
               backport-swapoff-clean-up-tag-resolution.patch
               backport-libblkid-befs-fix-underflow.patch


author: cenhuilin <cenhuilin@kylinos.cn> - 2.37.2-46
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:lsblk: fix memory leak [coverity scan]
         lsblk: fix possible use-after-free


author: yixiangzhike <yixiangzhike007@163.com> - 2.37.2-48
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport community patches
           fix off-by-one in maximum last sector calculation


author: weijin deng <weijin.deng@turbolinux.com.cn> - 0.50.8-2
changelog:
  - Correct package depends
  - Delete unnecessary and uncorrect Requires, Provides, Obsoletes, Conflicts
  - Update Release to 2


author: yueyuankun <yueyuankun@kylinos.cn> - 1:3.16.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:arm64: Handle sp, lr, fp as DwReg in CfiExpr
         sync arm64-Handle-sp-lr-fp-as-DwReg-in-CfiExpr.patch


author: herengui <herengui@kylinsec.com.cn> - 7.4.3-5
changelog:
  - Fix CVE-2026-34475: Fix http/1.1 absolute form dissection edge case leading to cache poisoning or authentication bypass


author: yangzhuangzhuang<yangzhuangzhuang1@huawei.com> - 0.3.12-3
changelog:
  - The "no acceptable C compiler found" error message is displayed during compilation.Therefore,add buildrequires gcc.


author: John W. Linville <linville@redhat.com> - 2019.06.03-5
changelog:
  - Remove patch preventing install of regulatory.bin.5 man page
  - Include regulatory.bin.5 man page in distributed files


author: mahailiang <mahailiang@uniontech.com> - 1.1.3-6
changelog:
  - xdg-email: Support for Deepin
  - Restore matching of older deepin names
  - Add new case for Deepin while detecting DE


author: liuh <liuhuan01@kylinos.cn> - 5.14.1-19
changelog:
  - sync patch from community
    xfs_repair: don't leak the rootdir inode when orphanage already exists


author: xihaochen <xihaochen@huawei.com> - 2.5.0-1
changelog:
  - Type:requirements                                                                                                                                  
  - Id:NA
  - SUG:NA
  - DESC:update xorg-x11-drv-vesa to 2.5.0


author: Funda Wang <fundawang@yeah.net> - 1.20.11-35
changelog:
  - fix CVE-2025-26594, CVE-2025-26595, CVE-2025-26596,
    CVE-2025-26597, CVE-2025-26598, CVE-2025-26599
    CVE-2025-26600, CVE-2025-26601


author: xuyan <xuyan1481@phytium.com> - 1.20.11-41
changelog:
  - Type:feature
  - CVE:NA
  - SUG:NA
  - DESC:Fix possible Xorg crashes for ps23xx when using  ast and pe2201 bmc card.


author: lingsheng <ultra_planet@qq.com> - 1.20.11-42
changelog:
  - fix CVE-2022-49737 CVE-2025-49175 CVE-2025-49176 CVE-2025-49178 CVE-2025-49179 CVE-2025-49180 CVE-2025-62229 CVE-2025-62230 CVE-2025-62231


author: lingsheng <ultra_planet@qq.com> - 1.20.11-44
changelog:
  - fix CVE-2026-50256 CVE-2026-50257 CVE-2026-50258 CVE-2026-50259 CVE-2026-50260 CVE-2026-50261 CVE-2026-50262 CVE-2026-50263 CVE-2026-50264


author: wangkerong <wangkerong@h-partners.com> - 7.8-1
changelog:
  - upgrade to setxkbmap-1.3.3
  - upgrade to xkbcomp-1.4.5
  - upgrade to xkbprint-1.0.6
  - upgrade to xkbutils-1.0.5


author: luhuaxin <luhuaxin@huawei.com> - 1.3-39
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC: move gxvattr to main package, move AUTHORS to license folder


author: kouwenqi <kouwenqi@kylinos.cn> - 5.2.5-4
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC:Add overflow check for Unpadded size in lzma_index_append


author: xingwei <xingwei14@h-partners.com> - 4.2.3-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add haveged requires and optimize random number function replacement patch


author: yanglu <yanglu72@huawei.com> - 4.1-6
changelog:
  - DESC:delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ypserv-2.5-nfsnobody2.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ypserv-2.13-ypxfr-zeroresp.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ypserv-2.13-nonedomain.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ypserv-2.19-slp-warning.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ypserv-4.0-manfix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ypserv-2.24-aliases.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ypserv-2.27-confpost.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ypserv-2.31-netgrprecur.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ypserv-4.0-headers.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ypserv-4.0-selinux-context.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  ,and delete BuildRequires git


