# changelog

author: chenyanpanHW <chenyanpan@huawei.com> - 2.14.19-25
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ORBit2-2.14.3-multilib.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ORBit2-2.14.3-ref-leaks.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ORBit2-make-j-safety.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ORBit2-allow-deprecated.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0005-Fix-link_protocol_is_local_ipv46-for-ipv4-on-some-ip.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0014-Commit-patch-from-bug-662623-to-fix-connection-failu.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0016-bug-732274-fix-parallel-build-failure.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yixiangzhike <yixiangzhike007@163.com> - 2.3.1-7
changelog:
  - Fix CVE-2026-54369 CVE-2026-54370
  - New API acl_get_file_at, acl_set_file_at, acl_extended_file_at, acl_delete_def_file_at
  - New provided symbol LIBACL_1_3 for new API in libacl
  - The change that commands like 'getfacl -P symlink' or 'setfacl -P symlink' will fail now


author: yixiangzhike <yixiangzhike007@163.com> - 0.17.4-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: backport upstream patch to use signal safe write function in signal handler


author: sunhai <sunhai10@huawei.com> - 36.16.5-23
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: revert "Set default entry to the BLS id instead of the entry index"


author: sunhai <sunhai10@huawei.com> - 36.16.5-24
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: config adjust
          revise hostname chinese  tip
  		fix custom storage chinese tip


author: shenyangyang<shenyangyang4@huawei.com> - 1.7.0-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Rebuild for openEuler-rpm-config moving /usr/lib/rpm/openEuler/xxxx
         to /usr/lib/xxxx


author: yanglongkang<yanglongkang@h-partners.com> - 3.2.2-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Adding Patching Operations
         provides relibility and self-heading capabilities for service


author: Linux_zhang <zhangruifang@h-partners.com> - 3.2.2-5
changelog:
  - Type：update
  - ID：NA
  - SUG:NA
  - DESC: Modify the license to SPDX format
          Delete MIT and Public Domain license because it no longer appears in the upstream source


author: fuanan <fuanan3@h-partners.com> - 2.71-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix Adapt signed-char check macro which lead to python3 testcase failure.


author: Funda Wang <fundawang@yeah.net> - 2.71-8
changelog:
  - fix AC_CHECK_LIB no longer works with g++ (debian bug#992981)
  - Fix testsuite failures with bash 5.2.15


author: wangyuhang <wangyuhang27@huawei.com> -5.1.8-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: add backport-fix-for-nofork-comsub-command-printing-fix-for-crash.patch
          backport-fix-small-memleak-in-globbing.patch
          backport-fix-for-leak-when-completing-command-word-with-glob-.patch
          del doesn't exist PATH dirs in bashrc


author: wangyuhang <wangyuhang27@huawei.com> -5.1.8-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: add backport-fix-for-E-transformation-fixes-for-failures-in-arith.patch
          backport-changes-for-quoting-special-and-multibyte-characters.patch
          backport-fixes-for-LINENO-in-multi-line-simple-commands-print.patch
          backport-changes-to-SIGINT-handler-while-waiting-for-a-child-.patch
          backport-renamed-several-functions-beginning-with-legal_-chan.patch


author: Zhao Mengmeng <zhaomengmeng@kylinos.cn> - 5.1.8-15
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Fix a performance regression while using large number of environment variables


author: yixiangzhike <yixiangzhike007@163.com> - 5.1.8-19
changelog:
  - sync patches from bash community:
     fix default file descriptor for <> redirection when printing command
     update BASH_COMMAND for subshells
     fix potential file descriptor leak in here document pipes


author: chengyechun <chengyechun1@huawei.com> - 32:9.16.23-25
changelog:
  - Type:CVE
  - CVE:CVE-2024-1737
  - SUG:NA
  - DESC:add max-records-per-type and max-types-per-name for fix CVE-2024-1737
         The default value both of max-records-per-type and max-types-per-name is 5000


author: tangce <tangce1@huawei.com> - 32:9.16.23-30
changelog:
  - Type:CVE
  - CVE:CVE-2026-3039,CVE-2026-3592,CVE-2026-5946
  - SUG:NA
  - DESC:fix CVE-2026-3039,CVE-2026-3592,CVE-2026-5946


author: tangce <tangce1@huawei.com> - 32:9.16.23-31
changelog:
  - Type:CVE
  - CVE:CVE-2026-13321,CVE-2026-11721,CVE-2026-10723,CVE-2026-11331,CVE-2026-13204,CVE-2026-11622
  - SUG:NA
  - DESC:fix CVE-2026-13321,CVE-2026-11721,CVE-2026-10723,CVE-2026-11331,CVE-2026-13204,CVE-2026-11622


author: Funda Wang <fundawang@yeah.net> - 2.37-31
changelog:
  - Fix CVE-2024-57360: nm: Avoid potential segmentation fault when displaying
    symbols without version info.
  - Fix CVE-2025-0840: stack-buffer-overflow at objdump disassemble_bytes


author: yueyuankun <yueyuankun@kylinos.cn> - 3.8.2-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix syntax error on SymbolKind.toString method
         fix interface syntax error


author: wangjiang <wangjiang37@h-partners.com> - 2023.2.60-3
changelog:
  - remove expired and sync new certificates
    Removing:
      Security Communication Root CA
    Adding:
      Atos TrustedRoot Root CA ECC G2 2020
      Atos TrustedRoot Root CA ECC TLS 2021
      Atos TrustedRoot Root CA RSA G2 2020
      Atos TrustedRoot Root CA RSA TLS 2021
      CommScope Public Trust ECC Root-01
      CommScope Public Trust ECC Root-02
      CommScope Public Trust RSA Root-01
      CommScope Public Trust RSA Root-02
      D-Trust SBR Root CA 1 2022
      D-Trust SBR Root CA 2 2022
      LAWtrust Root CA2 (4096)
      Sectigo Public Email Protection Root E46
      Sectigo Public Email Protection Root R46
      Sectigo Public Server Authentication Root E46
      Sectigo Public Server Authentication Root R46
      SSL.com Client ECC Root CA 2022
      SSL.com Client RSA Root CA 2022
      SSL.com TLS ECC Root CA 2022
      SSL.com TLS RSA Root CA 2022
      Telekom Security SMIME ECC Root 2021
      Telekom Security SMIME RSA Root 2023
      Telekom Security TLS ECC Root 2020
      Telekom Security TLS RSA Root 2023
      TrustAsia Global Root CA G3
      TrustAsia Global Root CA G4


author: wangjiang <app@cameyan.com> - 2023.2.60-5
changelog:
  - remove expired and sync new certificates
    Removing:
      Certificate "Explicitly Distrust DigiNotar Root CA"
      Certificate "Baltimore CyberTrust Root"
    Adding:
      Certificate "FIRMAPROFESIONAL CA ROOT-A WEB"
      Certificate "TWCA CYBER Root CA"
      Certificate "TWCA Global Root CA G2"
      Certificate "SecureSign Root CA12"
      Certificate "SecureSign Root CA14"
      Certificate "SecureSign Root CA15"
      Certificate "D-TRUST BR Root CA 2 2023"
      Certificate "D-TRUST EV Root CA 2 2023"


author: wjiang <cameyan@163.com> - 2023.2.60-7
changelog:
  - sync certificate from upstream
    Adding:
      Certificate "TrustAsia SMIME ECC Root CA"
      Certificate "TrustAsia SMIME RSA Root CA"
      Certificate "TrustAsia TLS ECC Root CA"
      Certificate "TrustAsia TLS RSA Root CA"
      Certificate "SwissSign RSA SMIME Root CA 2022 - 1"
      Certificate "SwissSign RSA TLS Root CA 2022 - 1"
      Certificate "OISTE Client Root ECC G1"
      Certificate "OISTE Client Root RSA G1"
      Certificate "OISTE Server Root ECC G1"
      Certificate "OISTE Server Root RSA G1"
      Certificate "e-Szigno TLS Root CA 2023"


author: sunhai<sunhai10@huawei.com> - 1.17.4-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:cairo_truetype_reverse_cmap detected memory leaks
         fix read memory access
         fix call get_unaligned_be32 heap buffer overflow
         fix heap buffer overflow in cairo_cff_parse_charstring


author: chenyanpanHW <chenyanpan@huawei.com> - 1.4.33-3
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-Fix-SafeNet-eToken-5110-SC-issue.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-Fix-SafeNet-eToken-5110-SC-issue-firmware-0.13.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: shixuantong <shixuantong1@huawei.com> - 21.4-28
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:disable use-dns for secondary nics
         Make duplicate route add succeed
         Fix predictable interface rename issue


author: dongyuzhen <dongyuzhen@h-partners.com> - 21.4-29
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix(net): klibc ipconfig PROTO compatibility
         fix(openstack): Fix bond mac_address


author: shixuantong <shixuantong1@huawei.com> - 21.4-32
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:chore: set recursive=False for ensure_dir if parent path is "/"
         test(openstack): Test bond mac address
         fix: Ensure properties for bonded interfaces are properly translated


author: Linux_zhang <zhangruifang@h-partners.com> - 21.4-33
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         skip some test if there are multiple NICs with the MAC address 'ee:ee:ee:ee:ee:ee'


author: shixuantong <shixuantong1@huawei.com> - 21.4-37
changelog:
  - Type:bugfix
  - CVE:
  - SUG:NA
  - DESC:fix: Add get_connection_with_tls_context() for requests 2.32.2+


author: fuanan <fuanan3@h-partners.com> - 3.22.0-10
changelog:
  - remove the architecture judgment in the patches section;
  - include all patches in the source package.


author: huyubiao <huyubiao@huawei.com> - 9.0-18
changelog:
  - sync patches from community
  - add backport-numfmt-don-t-require-a-suffix-with-from-iec-i.patch
        backport-sort-fix-debug-buffer-overrun.patch
        backport-tac-avoid-out-of-bounds-access.patch
        backport-yes-avoid-failure-on-CHERI-protected-systems.patch


author: huyubiao <huyubiaox@gmail.com> - 9.0-25
changelog:
  - sync patches from community
  - add backport-basenc-auto-pad-base32-and-base64-inputs-when-decodi.patch
        backport-basenc-fix-stripping-of-chars-in-some-encodings.patch
        backport-chcon-fix-memory-leak-in-error-path.patch
        backport-numfmt-fix-buffer-over-read-CWE-126.patch
        backport-regex-fix-parse_bracket_exp-double-free.patch
        backport-seq-be-more-accurate-with-large-integer-start-values.patch
        backport-unexpand-fix-heap-buffer-overflow-with-tabs-NUM.patch


author: fly_fzc <2385803914@qq.com> - 9.0-26
changelog:
  - sync patches from community
  - add backport-timeout-prioritize-timed-out-exit-status.patch
        backport-pinky-promptly-diagnose-write-errors.patch
        backport-numfmt-fix-dropped-custom-suffix-when-failing-to-par.patch
        backport-dd-don-t-continue-copying-when-ftruncate-fails-using.patch
        backport-cat-don-t-treat-copy_file_range-EFBIG-as-fatal.patch


author: Qin Fandong <qinfandong@kylinos.cn> - 9.0-27
changelog:
  - Type:CVE
  - ID:CVE-2026-56392
  - SUG:NA
  - DESC:fix heap overflow in unexpand with large tab stop values


author: fuanan <fuanan3@h-partners.com> - 2.13-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert fix CVE-2015-1197 because it causes AT testcases problems


author: chenziyang <chenziyang4@huawei.com> - 2.13-10
changelog:
  - Type:CVE
  - ID:CVE-2015-1197
  - SUG:NA
  - DESC:backport CVE-2015-1197, delete revert-CVE-2015-1197.patch and backport the following 2 bugfix patches


author: chenhaixiang <chenhaixiang3@huawei.com> - 8.0.2-2
changelog:
  - arm64: Fix again segfault in arm64_is_kernel_exception_frame()
    when corrupt stack pointer address is given


author: Hewenliang <hewenliang4@huawei.com> - 3.16.1-7
changelog:
  - fix the null pointer of get_tty_driver.
  - criu files Dont cache fd ids for device files.
  - pre dump call vmsplice with SPLICE_F_GIFT.


author: chenyanpanHW <chenyanpan@huawei.com> - 2.3.3-5
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-cryptsetup-add-system-library-paths.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fix-compat-test.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0003-add-test-case-for-sm4.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0004-Fix-CVE-2021-4122-LUKS2-reencryption-crash-recovery-.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0005-Fix-OpenSSL-2-crypto-backend-PBKDF2-possible-iterati.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0006-fix-potential-null-pointer-dereference.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0007-Update-file-cryptsetup-ssh.c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Funda Wang <fundawang@yeah.net> - 1:2.4.0-15
changelog:
  - fix CVE-2025-58060, CVE-2025-58364
  - move www files into main package due to requirement by web interface


author: gaihuiying <eaglegai@163.com> - 1:2.4.0-19
changelog:
  - fix CVE-2026-27447,CVE-2026-34978,CVE-2026-34979,CVE-2026-34980,CVE-2026-34990,CVE-2026-39314,CVE-2026-39316


author: gaihuiying <eaglegai@163.com> - 1:2.4.0-21
changelog:
  - fix handling of multiple PPD: keywords from filters related to CVE-2026-34980
    fix a regression in shared printing from non-local accounts related to CVE-2026-27447


author: zhouyihang <zhouyihang3@h-partners.com> - 7.79.1-45
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:libssh: fix readdir issues
         krb5_gssapi: fix memory leak on error path
         pop3: fix CAPA response termination detection
         libssh: properly free sftp_attributes


author: zhouyihang <zhouyihang3@h-partners.com> - 7.79.1-46
changelog:
  - Type:CVE
  - CVE:CVE-2025-14017 CVE-2025-14524 CVE-2025-15079 CVE-2025-15224
  - SUG:NA
  - DESC:fix CVE-2025-14017 CVE-2025-14524 CVE-2025-15079 CVE-2025-15224


author: zhouyihang <zhouyihang_z@163.com> - 7.79.1-47
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:formdata: validate callback is non-NULL before use
         tftp: correct the filename length check


author: zhouyihang <zhouyihang_z@163.com> - 7.79.1-48
changelog:
  - Type:CVE
  - CVE:CVE-2026-1965 CVE-2026-3783 CVE-2026-3784
  - SUG:NA
  - DESC:fix CVE-2026-1965 CVE-2026-3783 CVE-2026-3784


author: zhouyihang <zhouyihang_z@163.com> - 7.79.1-49
changelog:
  - Type:CVE
  - CVE:CVE-2026-4873 CVE-2026-5545 CVE-2026-5773 CVE-2026-6253 CVE-2026-6276 CVE-2026-6429 CVE-2026-7168
  - SUG:NA
  - DESC:fix CVE-2026-4873 CVE-2026-5545 CVE-2026-5773 CVE-2026-6253 CVE-2026-6276 CVE-2026-6429 CVE-2026-7168


author: zhouyihang <zhouyihang_z@163.com> - 7.79.1-51
changelog:
  - Type:CVE
  - CVE:CVE-2026-8286 CVE-2026-8924 CVE-2026-8927 CVE-2026-9547
  - SUG:NA
  - DESC:fix CVE-2026-8286 CVE-2026-8924 CVE-2026-8927 CVE-2026-9547


author: wangkai <13474090681@163.com> - 1.11.23-54
changelog:
  - Add patches from fedora, improve C compatibility and fix build failures caused by higher gcc versions


author: chenyanpanHW <chenyanpan@huawei.com> - 71.1-3
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-ndctl-test-Fix-device-dax-mremap-test.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-zero_info_block-skip-seed-devices.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: hongjinghao <hongjinghao@huawei.com> - 1:1.12.20-9
changelog:
  - add backport-bus-dir-watch-Do-not-crash-with-128-dirs.patch	
  backport-Do-not-crash-when-reloading-configuration.patch


author: liuyumeng <liuyumeng5@huawei.com> - 0.40.0-2
changelog:
  - add patch:dconf read random contents of memory causing discrepancy,initialize memory to eliminate discrepancy


author: LuWu <2398491106@qq.com> - 4.14.0-20
changelog:
  - Limit queries to nevra forms when provided by command and Update the man page entry for the countme option


author: chenhaixing <chenhaixing@huawei.com> - 4.3.1-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dnf-plugins-core:download plugin:respect install_weak_deps option value


author: lingsheng <lingsheng1@h-partners.com> - 2.86-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Update DNS records after pruning DHCP leases
         Fix potential memory leak
         Fix possible SIGSEGV in bpf.c
         adapt bugfix allow binding mac with ipv6


author: luoguocui <luoguocui@h-partners.com> - 2.86-12
changelog:
  - Type:bugfix
  - CVE:
  - SUG:NA
  - DESC:Fix bad reply to DHCPCONFIRM messages (wrong message type)
         Fix reply confirm packet when binding-mac-with-ip6 on


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 2.86-13
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix bounds checking in check_ia()
         Fix SEGV in Dbus code
         More fixes for DHCP ops in Dbus when DHCP not configured


author: zhaoyonghao10 <zhaoyonghao10@h-partners.com> - 2.86-15
changelog:
  - Type:security
  - CVE:CVE-2026-4890 CVE-2026-4891 CVE-2026-4892 CVE-2026-4893
  - SUG:NA
  - DESC:Fix NSEC bitmap parsing infinite loop
         Fix rdlen field validation in RRSIG packets
         Fix buffer overflow in helper with large CLIDs
         Fix broken client subnet validation


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 7.4.2-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:delete buildrequires perl,
         because the compilation dependency has been added to the basic project


author: xinghe <xinghe2@h-partners.com> - 2.0.11-10
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix: if libvirt and ebtables are installed at the same time, ping the operation prompts "sendmsg: Operation not permitted".


author: yanglu <yanglu72@h-partners.com> - 2.0.11-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:rebuild package to ensure that the upgrade between branches is normal


author: xinghe <xinghe2@h-partners.com> - 2.0.11-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix ebtables-restore --noflush failed when ebtables is uninstall


author: taolinghongfei <taolinghongfei@h-partners.com> - 202011-30
changelog:
  - fix CVE-2026-22795,CVE-2026-22796
  - fix CVE-2025-69420
  - fix CVE-2025-69421
  - fix CVE-2025-68160
  - fix CVE-2025-69418
  - fix CVE-2025-69419


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 18-4
changelog:
  - Fix segfault when passed --index is greater than current boot order size
    Add missing short option handling for --index (-I)


author: zhangxingrong <zhangxingrong@uniontech.com> - 18-5
changelog:
  - Fix the incorrect long parameter in help messages
  - efibootmgr: delete_bootnext is just a boolean, not an entry id


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.38.3-1
changelog:
  - Upgrade to 3.38.3
  - Update Version, Release, Source0, BuildRequires
  - Temporaryly disable libportal, because there isn't in cunrrent community


author: andy <liuyang01@kylinos.cn> - 2:5.15-8
changelog:
  - Type:requirement
  - Id:NA
  - SUG:NA
  - DESC:ethtool: Fix SFF-8472 transceiver module identification
          ethtool: Add default branch to sff8636_show_all_ioctl switch
          qsfp: Better handling of Page 03h netlink read failure
          module-eeprom: treat zero arguments like any other arguments for hex dump


author: zhangyaqi <zhangyaqi@kylinos.cn> - 2:5.15-9
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:add NULL check before jsonw_string_field() in print_string()
         netlink: add NULL check for get_string() in features.c


author: dillon chen <dillon.chen@gmail.com> - 2.5.2-4
changelog:
  - CVE-2021-36045, CVE-2021-36046, CVE-2021-36047, CVE-2021-36048,
  - CVE-2021-36050, CVE-2021-36051, CVE-2021-36052, CVE-2021-36053,
  - CVE-2021-36054, CVE-2021-36055, CVE-2021-36056, CVE-2021-36058,
  - CVE-2021-36064, CVE-2021-39847, CVE-2021-40716, CVE-2021-40732,
  - CVE-2021-42528, CVE-2021-42529, CVE-2021-42530, CVE-2021-42531,
  - CVE-2021-42532


author: fly_fzc <2385803914@qq.com> - 2.4.1-27
changelog:
  - fix CVE-2026-56403 CVE-2026-56404 CVE-2026-56405 CVE-2026-56406 CVE-2026-56407
        CVE-2026-56408 CVE-2026-56409 CVE-2026-56410 CVE-2026-56411 CVE-2026-56412


author: Funda Wang <fundawang@yeah.net> - 4.2.4-45
changelog:
  - fix CVE-2020-22031, CVE-2020-22032, CVE-2020-22023, CVE-2020-21041,
    CVE-2020-22040, CVE-2020-22036


author: Funda Wang <fundawang@yeah.net> - 4.2.4-46
changelog:
  - fix CVE-2025-9951 (patch from debian)
  - fix CVE-2020-22024
  - fix CVE-2020-22028
  - fix CVE-2020-22035
  - fix CVE-2020-22041
  - fix CVE-2020-22048
  - fix CVE-2020-22056


author: Liu Wang <1823363429@qq.com> - 140.13.0-2
changelog:
  - Add StartupWMClass=firefox so that GNOME can correctly recognize the Firefox window and associate it with the icon.


author: zhouyihang <zhouyihang3@h-partners.com> - 1.0.2-8
changelog:
  - Type:requirement
  - ID:NA
  - SUG:NA
  - DESC:To reduce unnecessary loading of ebtables-related kernel modules


author: zhouyihang <zhouyihang3@h-partners.com> - 1.0.2-12
changelog:
  - Type:bugfix
  - CVE:NA   
  - SUG:NA   
  - DESC:fix(icmp): fix check_icmpv6_name() to use correct IPv6 names
         fix(ipset): fix configuring IP range for ipsets with nftables
         fix(ipset): fix configuring "timeout","maxelem" values for
         fix(rich): validate service name of rich rule
         fix(rich): fix range check for large rule limit
         fix(nftables): use current pkttype keywords


author: wangkai <13474090681@163.com> - 2:2.11.8-1
changelog:
  - Update to 2.11.8
  - Fix CVE-2026-22852, CVE-2026-22856, CVE-2026-22859, CVE-2026-23530, CVE-2026-23531,
    CVE-2026-23532, CVE-2026-23534, CVE-2026-24491, CVE-2026-24675, CVE-2026-24676,
    CVE-2026-24679, CVE-2026-24681, CVE-2026-24682, CVE-2026-24683, CVE-2026-24684,
    CVE-2026-25997, CVE-2026-26271, CVE-2026-26986, CVE-2026-27015, CVE-2026-25941,
    CVE-2026-22855, CVE-2026-22857, CVE-2026-23533, CVE-2026-23732, CVE-2026-23883,
    CVE-2026-23884


author: wangkai <13474090681@163.com> - 2:2.11.8-3
changelog:
  - Fix CVE-2026-26955, CVE-2026-26965, CVE-2026-31806, CVE-2026-31883, CVE-2026-31885,
    CVE-2026-33984, CVE-2026-33983


author: wangkai <13474090681@163.com> - 2:2.11.8-5
changelog:
  - Fix CVE-2026-25942, CVE-2026-25952, CVE-2026-25953, CVE-2026-25954, CVE-2026-27951,
    CVE-2026-29774, CVE-2026-29775, CVE-2026-31884, CVE-2026-33985


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.38.2-1
changelog:
  - Upgrade to 3.38.2
  - Update Version, Release, Source0, BuildRequires
  - Use meson rebuild and install
  - Delete patches, delete pam.d related and other two files which not in 3.38.2
  - Add new file session.conf. modify /etc/gdm/custom.conf


author: Funda Wang <fundawang@yeah.net> - 9.55.0-18
changelog:
  - Type:CVE
  - ID:NA
  - SUG:NA
  - DECS: Fix CVE-2025-27830, CVE-2025-27832, CVE-2025-27834, CVE-2025-27835, CVE-2025-27836


author: hdliu <dev03108@linx-info.com> - 9.55.0-19
changelog:
  - Add font mappings so that the PS interpreter can rasterize Chinese content using the two fonts STKaiti-Regular and STheiti-Regular.


author: yaoxin <yao_xin001@hoperun.com> - 5.2.2-1
changelog:
  - Update to 5.2.2
    * Fixes for CVE-2023-48161 (bsc#1217390), CVE-2022-28506 (bsc#1198880)
    * Address SF issue #151: A heap-buffer-overflow in gif2rgb.c:294:45
    * Address SF issue #166: a read zero page leads segment fault in
      getarg.c and memory leaks in gif2rgb.c and gifmalloc.c


author: fuanan <fuanan3@h-partners.com> - 2.33.0-19
changelog:
  - Type:CVE
  - ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
  - SUG:NA 
  - DESC:Fix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835


author: fuanan <fuanan3@h-partners.com> - 2.33.0-20
changelog:
  - Type:CVE
  - ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
  - SUG:NA
  - DESC:refix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835


author: fly_fzc <2385803914@qq.com> - 2.33.0-22
changelog:
  - fix crash with find object outside repository
  - fix crash with run git-shortlog outside repository


author: zhaoyonghao10 <zhaoyonghao10@h-partners.com> - 2.72.2-27
changelog:
  - apply 3 patches: backport-gsocks4aproxy-Fix-a-buffer-leak-when-finishing-con.patch, backport-tests-Add-thread-pool-stress-test-to-task-c.patch, backport-test-cleanup-trailing-spaces-task-c.patch


author: zhusicong <zhusicong@h-partners> - 2.72.2-29
changelog:
  - fix CVE-2026-58010, CVE-2026-58011, CVE-2026-58012, CVE-2026-58013, CVE-2026-58015, CVE-2026-58016


author: Qingqing Li <liqingqing3@huawei.com> - 2.34-176
changelog:
  - libio: Fix ungetwc operating on byte stream [BZ #33998] (CVE-2026-5928)
  - stdio-common: Fix buffer overflow in scanf %mc [BZ #34008] (CVE-2026-5450)


author: yangyun <yangyun50@huawei.com> - 2.34-181
changelog:
  - malloc: Add size check when moving fastbin->tcache
  - malloc: Add integrity check to largebin nextsizes
  - malloc: Do not make out-of-bounds madvise call on non-aligned heap


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.38.6-1
changelog:
  - Upgrade to 3.38.6
  - Update Version, Release, BuildRequires, stage 'files'
  - Delete 4 patches, modify the left 6 patches


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.38.5-1
changelog:
  - Upgrade to 3.38.5
  - Update Version, Release, Source0, BuildRequires, Requires, stage 'build', 'install', 'files'
  - Use meson rebuild, delete setup-shell.desktop, which doesn't existed in this version
  - Delete honor-firstboot-disabled.patch which existed in this version


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.36.0-1
changelog:
  - Upgrade to 3.36.0
  - Update Version, Release, Source0, stage 'build' and 'files'
  - Delete old patch that existed in new version, add new patch


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.38.0-1
changelog:
  - Upgrade to 3.38.0
  - Update Version, Release, Source0, Obsoletes
  - Modify patches, update stage 'files'


author: wangxiao<wangxia65@huawei.com> -3.30.1-6
changelog:
  - move the libcroco sources directly under src/st
    remove the libcroco dependency from the meson.build files


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.38.4-1
changelog:
  - Upgrade to 3.38.4
  - Update Version, Release, Source0, BuildRequires, Requires
  - Delete patches which existed in current version, modify one patch
  - Update stage 'build', 'check', 'files'


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.38.4-2
changelog:
  - Delete requires gdm-libs which gdm contains it
  - Use pipewire replace pipewire-gstreamer which pipewire contains it
  - Add xdg-desktop-portal-gtk for launching flatpak apps etc


author: chenyanpanHW <chenyanpan@huawei.com> - 3.38.4-3
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/gnome-shell-favourite-apps-firefox.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Xu Raoqing <609179072@qq.com> - 3.7.2-23
changelog:
  - fix CVE:
  - CVE-2026-42009
  - CVE-2026-42010
  - CVE-2026-3833
  - CVE-2026-42013
  - CVE-2026-42014
  - CVE-2026-5260
  - CVE-2026-42015
  - CVE-2026-3832


author: huzhangying <huzhangying@huawei.com> - 1.17.3-43
changelog:
  - Type:CVE
  - CVE:CVE-2025-58183,CVE-2025-58185,CVE-2025-58189,CVE-2025-61724
  - SUG:NA
  - DESC:fix CVE-2025-58183,CVE-2025-58185,CVE-2025-58189,CVE-2025-61724


author: huzhangying <huzhangying@huawei.com> - 1.17.3-47
changelog:
  - Type:CVE
  - CVE:CVE-2025-61732,CVE-2025-68119,CVE-2025-61731,CVE-2025-61728,CVE-2025-61726,CVE-2025-68121
  - SUG:NA
  - DESC:fix CVE-2025-61732,CVE-2025-68119,CVE-2025-61731,CVE-2025-61728,CVE-2025-61726,CVE-2025-68121


author: huzhangying <huzhangying@huawei.com> - 1.17.3-49
changelog:
  - Type:CVE
  - CVE:CVE-2026-27140
  - SUG:NA
  - DESC:fix CVE-2026-27140 cmd/go disallow cgo trust boundary bypass
  - Type:CVE
  - CVE:CVE-2026-32288
  - SUG:NA
  - DESC:fix CVE-2026-32288 archive/tar limit sparse format entries


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-44
changelog:
  - Type:CVE
  - CVE:CVE-2024-1048
  - SUG:NA
  - DESC:grub-set-bootflag: Fix for CVE-2024-1048
         commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
         kern/acpi: Skip NULL entries in RSDT and XSDT
         util/grub-mount: Check file path sanity


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-46
changelog:
  - Type:CVE
  - CVE:CVE-2021-46848
  - SUG:NA
  - DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-47
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix log printing in tpcm_kunpeng moddule
         osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
         osdep: Introduce include/grub/osdep/major.h and use it
         disk/mdraid1x_linux: Prevent infinite recursion
         disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-49
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:commands/legacycfg: Avoid closing file twice
         disk/lvm: GRUB fails to detect LVM volumes due to an incorrect computation of mda_end


author: sunhai <sunhai10@huawei.com> - 1:2.06-51
changelog:
  - Type:CVE
  - CVE:CVE-2024-45781,CVE-2024-45782,CVE-2024-56737,CVE-2024-45780,CVE-2024-45783,CVE-2024-49504,CVE-2025-0624,CVE-20
  24-45774,CVE-2024-45775,CVE-2025-0622,CVE-2025-0622,CVE-2025-0622,CVE-2024-45776,CVE-2024-45777,CVE-2025-0690,CVE-20
  25-1118,CVE-2024-45778,CVE-2024-45779,CVE-2025-0677,CVE-2025-0684,CVE-2025-0685,CVE-2025-0686,CVE-2025-0689,CVE-2025
  -0678,CVE-2025-1125
  - SUG:NA
  - DESC:fix the vulnerabilities announced on February 18th, 2025


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1:2.06-53
changelog:
  - Type:CVE
  - CVE:CVE-2025-61661,CVE-2025-61662,CVE-2025-54771,CVE-2025-61663,CVE-2025-61664
  - SUG:NA
  - DESC:commands/usbtest: Ensure string length is sufficient in usb string processing
         commands/usbtest: Use correct string length field
         tests/lib/functional_test: Unregister commands on module unload
         normal/main: Unregister commands on module unload
         gettext/gettext: Unregister gettext command on module unload
         kern/file: Call grub_dl_unref() after fs->fs_close()
         commands/test: Fix error in recursion depth calculation


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.2.3-1
changelog:
  - Upgrade to 1.2.3
  - Update Version, Release, Source0, BuildRequires
  - Update stage 'build', 'install', 'check' and 'files'


author: lizhengde <lizhengde@xfusion.com> - 1.16.2-14
changelog:
  - Type:CVE
  - CVE:CVE-2026-53702
  - SUG:NA
  - DESC:Stack buffer overflow in GStreamer H.265 parser. Fix incorrect loop bound.


author: Funda Wang <fundawang@yeah.net> - 1.18.4-8
changelog:
  - fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
    CVE-2024-47607, CVE-2024-47615, CVE-2024-47835


author: yaoxin <yao_xin001@hoperun.com> - 1.16.2-7
changelog:
  - Fix cves:
    CVE-2024-47606,CVE-2024-47613,CVE-2024-47775,CVE-2024-47776
    CVE-2024-47777,CVE-2024-47778,CVE-2024-47774,CVE-2024-47540
    CVE-2024-47602,CVE-2024-47601,CVE-2024-47834,CVE-2024-47537
    CVE-2024-47597,CVE-2024-47543,CVE-2024-47596,CVE-2024-47539
    CVE-2024-47546


author: Funda Wang <fundawang@yeah.net> - 1.16.2-12
changelog:
  - fix CVE-2026-1940, CVE-2026-3083, CVE-2026-3085
  - fix GStreamer-SA-2026-0002: Out-of-bounds read in MP4 demuxer


author: yangchenguang <yangchenguang@kylinsec.com.cn> - 3.24.30-8
changelog:
  - Fix the problem that the prompt information of network icon volume icon is not displayed
  - update xscreen size when x11 screen size change
  - always send the monitors changed signal when screen size change
  - Add function definition of gtk_image_set_from_pixbuf_with_scale


author: chenyanpanHW <chenyanpan@huawei.com> - 2.0.14-17
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/guile-multilib.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/guile-i18ntest.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/guile-threadstest.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/guile-2.0.14-gc_pkgconfig_private.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.2.4-1
changelog:
  - Upgrade to 1.2.4
  - Update Version, Release, Source0, BuildRequires
  - Delete sed operation which existed in this version
  - Add patch for fix CVE-2021-33516
  - Update stage 'prep', 'build', 'install', 'check', 'files'


author: yaoxin <yao_xin001@hoperun.com> - 1.14.5-1
changelog:
  - Update to 1.14.5:
    * Added signed Windows msi binary and signed Apple dmg binary files.
    * Moved examples to the HDF5Examples folder in the source tree.
    * Added support for using zlib-ng package as the zlib library
    * Disable CMake UNITY_BUILD for hdf5
    * Removed "function/code stack" debugging configuration option
    * Added configure options for enabling/disabling non-standard programming language features
    * Added the CMake variable HDF5_ENABLE_ROS3_VFD to the HDF5 CMake config
      file hdf5-config.cmake. This allows it to easily detect if the library
      has been built with or without read-only S3 functionality.
    * Fixed many CVE:
      CVE-2024-29157,CVE-2024-29158,CVE-2024-29159,CVE-2024-29160,CVE-2024-29161,CVE-2024-29162
      CVE-2024-29163,CVE-2024-29164,CVE-2024-29165,CVE-2024-29166,CVE-2024-32605,CVE-2024-32606
      CVE-2024-32607,CVE-2024-32608,CVE-2024-32609,CVE-2024-32610,CVE-2024-32611,CVE-2024-32612
      CVE-2024-32613,CVE-2024-32614,CVE-2024-32615,CVE-2024-32616,CVE-2024-32617,CVE-2024-32618
      CVE-2024-32619,CVE-2024-32620,CVE-2024-32621,CVE-2024-32622,CVE-2024-32623,CVE-2024-32624
      CVE-2024-33873,CVE-2024-33874,CVE-2024-33875,CVE-2024-33876,CVE-2024-33877,CVE-2018-13871
      CVE-2018-13875,CVE-2018-14034


author: Funda Wang <fundawang@yeah.net> - 1.14.5-2
changelog:
  - add patches from azure linux for fixing CVE-2025-2153, CVE-2025-2310,
    CVE-2025-2914, CVE-2025-2926, CVE-2025-6816, CVE-2025-2925,
    CVE-2025-2924, CVE-2025-44905, CVE-2025-6269, CVE-2025-6750,
    CVE-2025-6857, CVE-2025-7067, CVE-2025-7068, CVE-2025-6858,
    CVE-2025-2923, CVE-2025-2913, CVE-2025-6516, CVE-2025-6818,
    CVE-2025-6817, CVE-2025-6856, CVE-2025-7069


author: chenyanpanHW <chenyanpan@huawei.com> - 9.58-2
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-hdparm-fallocate-close-fd.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-hdparam-Remove-security_password-printing.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0003-hdparm-fix-fd-leak-in-sysfs_write_attr.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yanglu <yanglu72@h-partners.com> - 2.4.51-25
changelog:
  - Type:CVE
  - CVE:CVE-2025-49812,CVE-2025-23048,CVE-2024-47252,CVE-2024-43204,CVE-2024-42516
  - SUG:NA
  - DESC:fix CVE-2025-49812 CVE-2025-23048 CVE-2024-47252 CVE-2024-43204 CVE-2024-42516
         mod_lua: Fix memory handling in output filters.
         Fix a regression that caused stickysession keys
         avoid ap_set_content_type when processing a _Request_Header
         set_cookie_name: ensure correct format


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 2.4.51-26
changelog:
  - Type:bugfix
  - CVE:
  - SUG:NA
  - DESC:mod_proxy: SetEnv proxy-nohalfclose to disable half-close tunneling


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 2.4.51-27
changelog:
  - Type:CVE
  - CVE:CVE-2025-58098,CVE-2025-65082,CVE-2025-55753,CVE-2025-66200
  - SUG:NA
  - DESC:SSI request judgment
         Request header similarity detection
         fix mod_mod error retry delay calculation to not already doubling the wait on the first error.
         stop accepting "note" in RequestHeader.


author: tangce <tangce1@h-partners.com> - 2.4.51-29
changelog:
  - Type:CVE
  - CVE:CVE-2026-24072,CVE-2026-29168,CVE-2026-29169,CVE-2026-33006,CVE-2026-34059
  - SUG:NA
  - DESC:fix CVE-2026-24072,CVE-2026-29168,CVE-2026-29169,CVE-2026-33006,CVE-2026-34059


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 2.4.51-30
changelog:
  - Type:CVE
  - CVE:CVE-2026-33007,CVE-2026-33523,CVE-2026-33857,CVE-2026-34032
  - SUG:NA
  - DESC:fix CVE-2026-33007,CVE-2026-33523,CVE-2026-33857,CVE-2026-34032


author: tangce <tangce1@h-partners.com> - 2.4.51-32
changelog:
  - Type:CVE        
  - CVE:CVE-2026-29167,CVE-2026-42535,CVE-2026-44631
  - SUG:NA          
  - DESC:fix CVE-2026-29167,CVE-2026-42535,CVE-2026-44631


author: tangce <tangce1@h-partners.com> - 2.4.51-33
changelog:
  - Type:CVE
  - CVE:CVE-2026-44186,CVE-2026-44185,CVE-2026-44119,CVE-2026-42536,CVE-2026-34356,CVE-2026-34355,CVE-2026-29170
  - SUG:NA          
  - DESC:fix CVE-2026-44186,CVE-2026-44185,CVE-2026-44119,CVE-2026-42536,CVE-2026-34356,CVE-2026-34355,CVE-2026-29170


author: wujichao <wujichao1@huawei.com> - 2.1.5-12
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: combine ten similar submissions into one(0125-fix-clang-build-error.patch) and Upgrade from upstream


author: jingxiaolu<lujingxiao@huawei.com> - 2.1.5-18
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: sync patches from upstream for refactoring sandbox and bugfixing


author: gaoxingwang <gaoxingwang1@huawei.com> - 10.12-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:remove redundant provide for service cmd and delete unnecessary obseletes to fix upgrade problem


author: zhangxingrong <zhangxingrong@uniontech.com> - 3.16-4
changelog:
  - iperf3 now builds correctly on architectures without native support for 64-bit atomic types, by linking with the libatomic library


author: wangkai <13474090681@163.com> - 3.17.1-1
changelog:
  - Update to 3.17.1
  - iperf3 no longer changes its current working directory in --daemon mode. This results in more 
    predictable behavior with relative paths, in particular finding key and credential files for authentication.
  - A new --json-stream option has been added to enable a streaming output format, consisting of 
    a series of JSON objects (for the start of the test, each measurement interval, and the end of the test) separated by newlines
  - UDP tests now work correctly between different endian hosts
  - The --fq-rate parameter now works for --reverse tests
  - The statistics reporting interval is now available in the --json start test object


author: caokeming <caokeming@huawei.com> - 1:5.15.0-20
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ctrl: Fix fd leak in ctrl_list()
         ctrl: Fix fd leak in ctrl_listen()
         devlink: use snprintf instead of sprintf


author: xinghe <xinghe2@h-partners.com> - 1:5.15.0-22
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ss: fix expired time format of timer
         route: filter by interface on multipath routes
         lib: names: check calloc return value in db_names_alloc


author: yanglu <yanglu72@h-partners.com> - 1.8.7-15
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:libxtables：Fix memleak in xtopt_parse_hostmask
         nft：Avoid memleak in error path of nft_cmd_new
         exit if called by setuid executeable
         fix for non verbose check command
         use fully random so that nft can understand
         Use xtables_malloc in mnl_err_list_node_add
         nft: Special casing for among match in compare_matches
         extensions: libipt_icmp: Fix confusion between 255/255 and any
         Revert libiptc: fix wrong maptype of base chain counters on restore
         extensions: Fix checking of conntrack --ctproto 0
         libxtables: xtoptions: Fix for non-CIDR-compatible hostmasks
         libxtables: xtoptions: Prevent XTOPT_PUT with XTTYPE_HOSTMASK
         libiptc: Fix for another segfault due to chain index NULL pointer
         libiptc: Fix for segfault when renaming a chain


author: yanglu <yanglu72@h-partners.com> - 1.8.7-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:libxtables:Fix memleak of matches' udata
         Fix parsing of empty string arg in '-c' option


author: yanglu <yanglu72@h-partners.com> - 1.8.7-19
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:extensions:recent:Fix format string for unsigned values
         nft:cmd:Init struct nft_cmd::head early


author: langfei <langfei@huawei.com> - 3:1.8.0-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC: filter console only output when using journal mode;
  -	Slience ... rebalancing messages for unmigratable IRQs;
  -	Avoid repeated affinity checks when no change is necessary;
  -	activate_mapping:set errsave before first jump to the error label.


author: langfei <langfei@huawei.com> - 3:1.8.0-13
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC: Fix socket API being blocked for 10s;
  -	Flush file brfore closing;
  -	Check fflush() return value.


author: DXwangg <wangjiawei80@huawei.com> -1:1.8.0.482.b08-0
changelog:
  - update to 8u482
  - modified 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch
  - modified Fix-LineBuffer-vappend-when-buffer-too-small.patch
  - modified add-missing-test-case.patch
  - add Fix-KAEProvider-SM2-Code.patch


author: sunhai <sunhai10@huawei.com> - 0.16-4
changelog:
  - backport patch to Fix build with clang-15+
  - backport patch to Fix json_tokener_parse_ex: handle out of memory errors


author: sunhai <sunhai10@huawei.com> - 0.16-5
changelog:
  - Handle yet another out of memory condition
  - Fix issue 854 Set error json_tokener_error_memory in
  - Issue 857 fix a few places where json_tokener should
  - Handle NULL gracefully in json_tokener_free
  - Issue 881 don t allow json_tokener_new_ex with a dep


author: dongyuzhen <dongyuzhen@h-partners.com> - 1.11.1-30
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix the problem of missing kata-containers source code in the src package


author: jade_t <yzd50036@gmail.com> - 1.11.1-35
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix the problem of self-compilation failure in the kata-containers source package


author: yanglu <yanglu72@h-partners.com> - 006-2
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC:Add crashkernel auto for Arm 
         enable kdump and set default reserve memory 512MB
         fix test failed due to default value change


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-317.0.0.220
changelog:
  - !23420  fbcon: Fix the issue of uninitialized charcount in the remaining consoles
  - !23423 soc: hisilicon: kunpeng_hccs: Remove unused input parameter
  - soc: hisilicon: kunpeng_hccs: Remove unused input parameter
  - soc: hisilicon: kunpeng_hccs: Fix discard 'const' qualifier
  - fbcon: Fix the issue of uninitialized charcount in the remaining consoles
  - !23389  CVE-2026-46181
  - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()
  - refcount: provide ops for cases when object's memory can be reused
  - !23311  sched/cputime: Fix time overflow in cputime_adjust()
  - !23122 Fix CVE-2026-45856
  - !23327 Fix CVE-2026-43466
  - !23329 Fix CVE-2026-46033
  - crypto: authencesn - reject short ahash digests during instance creation
  - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery
  - sched/cputime: Fix time overflow in cputime_adjust()
  - !23253  CVE-2026-31759
  - !23268 Fix CVE-2026-46151
  - !23270 Fix CVE-2026-46167
  - !23275 Fix CVE-2026-46187
  - !23245 Fix CVE-2026-46214
  - !23202  ceph: only d_add() negative dentries when they are unhashed
  - wifi: rsi: fix kthread lifetime race between self-exit and external-stop
  - !23173  thermal: core: Fix thermal zone governor cleanup issues
  - usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl
  - usb: usblp: fix heap leak in IEEE 1284 device ID via short response
  - usb: ulpi: fix memory leak on ulpi_register() error paths
  - usb: ulpi: fix double free in ulpi_register_interface() error path
  - vsock/virtio: fix accept queue count leak on transport mismatch
  - !23189  Fix CVE-2026-45984
  - ceph: only d_add() negative dentries when they are unhashed
  - gfs2: Fix use-after-free in iomap inline data write path
  - gfs2: Add metapath_dibh helper
  - gfs2: Move the inode glock locking to gfs2_file_buffered_write
  - gfs2: Add wrapper for iomap_file_buffered_write
  - gfs2: Replace gfs2_lblk_to_dblk with gfs2_get_extent
  - gfs2: Turn gfs2_extent_map into gfs2_{get,alloc}_extent
  - gfs2: Add new gfs2_iomap_get helper
  - !22991 Fix CVE-2026-43194
  - !23124  cgroup/cpuset.c: Comment out early when prefer_cpus cpumask equals
  - thermal: core: Fix thermal zone governor cleanup issues
  - !23016  CVE-2026-45968
  - cgroup/cpuset.c: Comment out early when prefer_cpus cpumask equals
  - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send
  - !23069  tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG
  - !23035  CVE-2026-43328
  - !23029  Bluetooth: SMP: force responder MITM requirements before building the pairing response
  - !23063  s390/cio: Fix device lifecycle handling in css_alloc_subchannel()
  - tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG
  - !22881 Fix CVE-2026-43503
  - !22871 Fix CVE-2026-46300
  - s390/cio: Fix device lifecycle handling in css_alloc_subchannel()
  - !22782  apei: use blocking notifier for page offline policy chain
  - cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path
  - cpufreq: governor: Free dbs_data directly when gov->init() fails
  - Bluetooth: SMP: force responder MITM requirements before building the pairing response
  - sched: idle: Make skipping governor callbacks more consistent
  - cpuidle: Skip governor when only one idle state is available
  - !22900  scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT
  - !22845  net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode
  - !22956 net/oenetcls: remove HISI_L0 dependency and L0 allocator usage
  - !22701 net/oenetcls: validate module params and reject zero table sizes
  - !22939 oenetcls: fix worker-context locking, async add/del race, and runtime policy toggles
  - !22650 Backport the patch that rename sev-es.{ch} to sev.{ch} from upstream
  - net: consume xmit errors of GSO frames
  - !22943  drm: Account property blob allocations to memcg
  - !22888  lib/crypto: chacha: Zeroize permuted_state before it leaves scope
  - net/oenetcls: remove HISI_L0 dependency and L0 allocator usage
  - drm: Account property blob allocations to memcg
  - net/oenetcls: make rps policy module params read-only
  - net/oenetcls: fix async delete race with pending rule add
  - net/oenetcls: move listen-time tuple resolution to worker context
  - scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT
  - lib/crypto: chacha: Zeroize permuted_state before it leaves scope
  - net: skbuff: preserve shared-frag marker during coalescing
  - net: skbuff: propagate shared-frag marker through frag-transfer helpers
  - net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode
  - net/oenetcls: validate module params and reject zero table sizes
  - apei: use blocking notifier for page offline policy chain
  - x86/sev-es: Rename sev-es.{ch} to sev.{ch}


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-318.0.0.221
changelog:
  - !23811  netfilter: x_tables: ensure names are nul-terminated
  - !23803  netfilter: nf_conntrack_helper: pass helper to expect cleanup
  - !23805  mm/ksm: fix incorrect KSM counter handling in mm_struct during fork
  - !23079 Fix CVE-2026-43141
  - !23077 Fix CVE-2026-43149
  - !22764 [OLK-5.10]  Fix CVE-2026-43196
  - !22760 [OLK-5.10] Fix CVE-2026-43202
  - !22742 [OLK-5.10] Fix CVE-2026-43209
  - !23129 [OLK-5.10] Fix CVE-2026-43226
  - !22820 [OLK-5.10] Fix CVE-2026-31687
  - !22905 [OLK-5.10] Fix CVE-2026-31686
  - !22924 Fix CVE-2026-31683
  - !22983 [OLK-5.10] Fix CVE-2026-31660
  - !22996 [OLK-5.10] Fix CVE-2026-31657
  - !23478 [OLK-5.10] Fix CVE-2026-31649
  - !22909 Fix CVE-2026-31629
  - !22722 [OLK-5.10] Fix CVE-2026-31622
  - !22717 [OLK-5.10] Fix  CVE-2026-31618
  - !22711 [OLK-5.10] Fix CVE-2026-31617
  - !22689 [OLK-5.10] Fix  CVE-2026-31616
  - !22686 [OLK-5.10] Fix CVE-2026-31615
  - !22671 [OLK-5.10] Fix CVE-2026-31607
  - !22621 [OLK-5.10] Fix  CVE-2026-31605
  - !23119 [OLK-5.10] Fix CVE-2026-31464
  - netfilter: x_tables: ensure names are nul-terminated
  - !23555 [OLK-5.10] KVM: arm64: Skip device pfn in kvm_set_spte_gfn()
  - mm/ksm: fix incorrect KSM counter handling in mm_struct during fork
  - netfilter: nf_conntrack_helper: pass helper to expect cleanup
  - !23709  iommu/vt-d: Flush cache for PASID table before using it
  - !23752  iommu/amd: move wait_on_sem() out of spinlock
  - !23756  ALSA: ctxfi: Add fallback to default RSR for S/PDIF
  - !19068 [OLK-5.10] ACPI: processor: idle: Set timer broadcast state on C3 for KH-50000
  - !23761 Fix CVE-2026-46243
  - !23629  drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs()
  - !23746  irqchip/gic-v3: Fix ALLINT masking logic by decoupling from GIC NMI support
  - smb: client: reject userspace cifs.spnego descriptions
  - ALSA: ctxfi: Add fallback to default RSR for S/PDIF
  - iommu/amd: move wait_on_sem() out of spinlock
  - !23304  netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()
  - !23308  netfilter: x_tables: guard option walkers against 1-byte tail reads
  - !22965 Fix CVE-2026-43453
  - !22929 Fix CVE-2026-43139
  - !22953 Fix CVE-2026-43190
  - !22949 Fix CVE-2026-43233
  - !23661  xfrm: Fix CVE-2026-43091 RCU policy netns exit
  - !23635  xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete
  - !23561  ipv6: xfrm6: release dst on error in xfrm6_rcv_encap()
  - !23557  xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path
  - !22995  netfilter: ctnetlink: ensure safe access to master conntrack
  - !23166  xfrm: always flush state and policy upon NETDEV_UNREGISTER event
  - !23736  iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode
  - !23628  RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq()
  - !23704  CVE-2026-46065
  - !23034 Backport the patch that Move GHCB unmapping to fix RCU warning from upstream
  - !23662  ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES
  - !23476  xfs: fix delay extent reserve issue
  - !23731  iommu/vt-d: Clear Present bit before tearing down context entry
  - !23730  iommu/vt-d: Clear Present bit before tearing down PASID entry
  - irqchip/gic-v3: Fix ALLINT masking logic by decoupling from GIC NMI support
  - !23740 drivers:misc:sdma-dae:Remove redundant print during mm exit and resume.
  - drivers:misc:sdma-dae:Remove redundant print during mm exit and resume.
  - !23702  spi: spidev: fix lock inversion between spi_lock and buf_lock
  - iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode
  - !23705 drivers:misc:sdma-dae: Revert incorrect kernel code optimization.
  - !23734  netfilter: flowtable: strictly check for maximum number of actions
  - !23733 net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd()
  - !23711 Fix CVE-2026-43198
  - !23723 net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo
  - !23718 ipv6: prevent possible UaF in addrconf_permanent_addr()
  - netfilter: flowtable: strictly check for maximum number of actions
  - !23707  spi: fix resource leaks on device setup failure
  - !23708  Revert "hwmon: (ibmpex) fix use-after-free in high/low store"
  - !23305  ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names()
  - !23710  sound: ua101: fix division by zero at probe
  - net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd()
  - iommu/vt-d: Clear Present bit before tearing down context entry
  - iommu/vt-d: Clear Present bit before tearing down PASID entry
  - net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo
  - ipv6: prevent possible UaF in addrconf_permanent_addr()
  - tcp: restore kABI for syn_recv_sock() backport
  - sound: ua101: fix division by zero at probe
  - iommu/vt-d: Flush cache for PASID table before using it
  - Revert "hwmon: (ibmpex) fix use-after-free in high/low store"
  - spi: fix resource leaks on device setup failure
  - drivers:misc:sdma-dae:Revert optimize kernel code
  - drivers:misc:sdma-dae:Revert add channel depth info in debugfs
  - drivers:misc:sdma-dae:Revert Write the CQ head pointer correctly.
  - fbdev: defio: fix KABI breakage in struct fb_deferred_io and struct fb_info
  - fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info
  - fbdev: Refactor implementation of page_mkwrite
  - spi: spidev: fix lock inversion between spi_lock and buf_lock
  - !23679  MIPS: Work around LLVM bug when gp is used as global register variable
  - !23534  dm-thin: fix metadata refcount underflow
  - !23251 Fix CVE-2026-45991
  - !23344 Fix CVE-2026-45983
  - !23532  fs/ntfs3: Fix slab-out-of-bounds read in DeleteIndexEntryRoot
  - !23264 Fix CVE-2026-46102
  - !23682  RDMA/rxe: Fix double free in rxe_srq_from_init
  - !23266 Fix CVE-2026-46101
  - !23674  KVM: nSVM: Triple fault if restore host CR3 fails on nested #VMEXIT
  - !23387 Fix CVE-2026-46189
  - RDMA/rxe: Fix double free in rxe_srq_from_init
  - !23018 Fix CVE-2026-46023
  - MIPS: Work around LLVM bug when gp is used as global register variable
  - KVM: nSVM: Triple fault if restore host CR3 fails on nested #VMEXIT
  - !23562 Fix CVE-2026-45840
  - !23437  dlm: validate length in dlm_search_rsb_tree
  - ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES
  - !22890  scsi: leapraid: update driver to v2.0.1.2
  - !23489  KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2
  - xfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit
  - xfrm: Wait for RCU readers during policy netns exit
  - !23239 Fix CVE-2026-45843
  - !23355 Fix CVE-2026-43093
  - tcp: fix potential race in tcp_v6_syn_recv_sock()
  - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete
  - !22749 [OLK-5.10] Fix CVE-2026-23372
  - !22923 [OLK-5.10] Fix CVE-2026-23361
  - !22729 [OLK-5.10] Fix CVE-2026-23339
  - !22805 [OLK-5.10] Fix CVE-2026-23330
  - !22707 [OLK-5.10] Fix CVE-2026-23298
  - !22705 [OLK-5.10] Fix CVE-2026-23291
  - !22699 [OLK-5.10] Fix CVE-2026-23289
  - !22692 [OLK-5.10] Fix CVE-2026-23281
  - !22677 [OLK-5.10] Fix CVE-2026-23266
  - !22673 [OLK-5.10] Fix CVE-2026-23262
  - !22642 [OLK-5.10] Fix CVE-2026-23242
  - !22636 [OLK-5.10] Fix CVE-2026-23238
  - !22604 [OLK-5.10] Fix CVE-2026-23235
  - !22595 [OLK-5.10] Fix CVE-2026-23234
  - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs()
  - !22399 [OLK-5.10] Fix CVE-2026-23182
  - !22484 [OLK-5.10] Fix CVE-2026-23176
  - !22850 [OLK-5.10] Fix CVE-2026-23098
  - !22743 [OLK-5.10] Fix CVE-2026-23073
  - !22515 [OLK-5.10] Fix CVE-2025-71188
  - !22505 [OLK-5.10] Fix CVE-2025-71185
  - !22797 [OLK-5.10] Fix CVE-2025-71184
  - !22282 [OLK-5.10] Fix CVE-2025-71088
  - !22274 [OLK-5.10] Fix CVE-2025-68755
  - !22222 [OLK-5.10] Fix CVE-2026-31698
  - !22190 [OLK-5.10] Fix CVE-2025-39952
  - !20712 [OLK-5.10] Fix CVE-2025-39759
  - RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq()
  - !23483  CVEs
  - openvswitch: cap upcall PID array size and pre-size vport replies
  - ipv6: xfrm6: release dst on error in xfrm6_rcv_encap()
  - xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path
  - !23426 Fix HWPSIRT-2026-70484
  - !23223 Fix CVE-2026-45870
  - !23221 Fix CVE-2026-45964
  - !23171 Fix CVE-2026-43383
  - slip: bound decode() reads against the compressed packet length
  - KVM: arm64: Skip device pfn in kvm_set_spte_gfn()
  - dm-thin: fix metadata refcount underflow
  - fs/ntfs3: Fix slab-out-of-bounds read in DeleteIndexEntryRoot
  - !23003 Fix CVE-2026-43499
  - xfrm: esp: restore combined single-frag length gate
  - KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2
  - RDMA/rxe: Reject unknown opcodes before ICRC processing
  - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv
  - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers
  - net: stmmac: fix integer underflow in chain mode
  - xfs: fix possible bugon in xfs_trans_unreserve_and_mod_sb()
  - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions
  - dlm: validate length in dlm_search_rsb_tree
  - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path
  - gpio: omap: do not register driver in probe()
  - nfsd: never defer requests during idmap lookup
  - xsk: tighten UMEM headroom validation to account for tailroom and min frame
  - netfilter: x_tables: guard option walkers against 1-byte tail reads
  - ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names()
  - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()
  - netfilter: reject zero shift in nft_bitwise
  - nfc: nci: complete pending data exchange on device close
  - net: strparser: fix skb_head leak in strp_abort_strp()
  - udf: fix partition descriptor append bookkeeping
  - SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths
  - SUNRPC: fix gss_auth kref leak in gss_alloc_msg error path
  - net/tcp-md5: Fix MAC comparison to be constant-time
  - xfrm: always flush state and policy upon NETDEV_UNREGISTER event
  - netrom: fix double-free in nr_route_frame()
  - net/rds: No shortcut out of RDS_CONN_ERROR
  - scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done()
  - KVM: SVM: Move GHCB unmapping to fix RCU warning
  - fbdev: rivafb: fix divide error in nv3_arb()
  - ntb: ntb_hw_switchtec: Fix shift-out-of-bounds for 0 mw lut
  - net: wan/fsl_ucc_hdlc: Fix dma_free_coherent() in uhdlc_memclean()
  - dm mirror: fix integer overflow in create_dirty_log()
  - rtmutex: Use waiter::task instead of current in remove_waiter()
  - batman-adv: hold claim backbone gateways by reference
  - netfilter: ctnetlink: ensure safe access to master conntrack
  - batman-adv: prepare for const netdev->dev_addr
  - nfc: pn533: allocate rx skb before consuming bytes
  - NFC: pn533: bound the UART receive buffer
  - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop()
  - netfilter: xt_tcpmss: check remaining length before reading optlen
  - netfilter: nf_conntrack_h323: fix OOB read in decode_choice()
  - xfrm6: fix uninitialized saddr in xfrm6_get_saddr()
  - batman-adv: avoid OGM aggregation when skb tailroom is insufficient
  - PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry
  - nfc: llcp: add missing return after LLCP_CLOSED checks
  - mm/kasan: fix double free for kasan pXds
  - scsi: leapraid: update driver to v2.0.1.2
  - btrfs: fix NULL dereference on root when tracing inode eviction
  - soc: ti: pruss: Fix double free in pruss_clk_mux_setup()
  - fbdev: vt8500lcdfb: fix missing dma_free_coherent()
  - nfc: rawsock: cancel tx_work before socket teardown
  - wifi: rsi: Fix memory corruption due to not set vif driver data size
  - nfc: nci: free skb on nci_transceive early error paths
  - minix: Add required sanity checking to minix_check_superblock()
  - NFC: digital: Bounds check NFC-A cascade depth in SDD response handler
  - fbdev: tdfxfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO
  - usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb()
  - can: ucan: Fix infinite loop from zero-length messages
  - nfc: pn533: properly drop the usb interface reference on disconnect
  - IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq()
  - wifi: libertas: fix use-after-free in lbs_free_adapter()
  - usb: gadget: f_phonet: fix skb frags[] overflow in pn_rx_complete()
  - usb: gadget: renesas_usb3: validate endpoint index in standard request handlers
  - usbip: validate number_of_packets in usbip_pack_ret_submit()
  - gve: Fix stats report corruption on queue count change
  - RDMA/siw: Fix potential NULL pointer dereference in header processing
  - romfs: check sb_set_blocksize() return value
  - f2fs: fix out-of-bounds access in sysfs attribute read/write
  - f2fs: fix to avoid UAF in f2fs_write_end_io()
  - fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO
  - dmaengine: lpc18xx-dmamux: fix device leak on route allocation
  - dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation
  - dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation
  - platform/x86: toshiba_haps: Fix memory leaks in add/remove routines
  - spi: tegra: Fix a memory leak in tegra_slink_probe()
  - spi: tegra: Fix missing IRQ check in tegra_slink_probe()
  - mptcp: fallback earlier on simult connection
  - staging: most: remove broken i2c driver
  - iio: accel: bmc150: Fix irq assumption regression
  - wifi: wilc1000: avoid buffer overflow in WID string configuration
  - btrfs: qgroup: fix race between quota disable and quota rescan ioctl
  - ACPI: processor: idle: Set timer broadcast state on C3 for KH-50000


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-320.0.0.222
changelog:
  - !24064 [OLK-5.10] CVE-2026-46331
  - net/sched: act_pedit: free pedit keys on bail from offset check
  - net/sched: fix pedit partial COW leading to page cache corruption
  - net/sched: act_pedit: Parse L3 Header for L4 offset
  - net/sched: act_pedit: rate limit datapath messages
  - net/sched: act_pedit: check static offsets a priori
  - net/sched: act_pedit: remove extra check for key type
  - net/sched: simplify tcf_pedit_act
  - net/sched: transition act_pedit to rcu and percpu stats
  - net/sched: act_pedit: use NLA_POLICY for parsing 'ex' keys
  - !24072  libceph: make decode_pool() more resilient against corrupted osdmaps
  - !24073  hfs: validate record offset in hfsplus_bmap_alloc
  - hfs: validate record offset in hfsplus_bmap_alloc
  - libceph: make decode_pool() more resilient against corrupted osdmaps
  - !24027  fuse: reject oversized dirents in page cache
  - !24028  xfs: delete attr leaf freemap entries when empty
  - !24024  ntfs: ->d_compare() must not block
  - !23901 net/hinic5: Fix high-risk interfaces in the sdk
  - net/hinic5: Fix high-risk interfaces in the sdk
  - xfs: delete attr leaf freemap entries when empty
  - fuse: reject oversized dirents in page cache
  - ntfs: ->d_compare() must not block
  - !24006 [OLK-5.10] Fix CVE-2026-46322
  - !23992 fbdev: fix potential buffer overflow in do_register_framebuffer()
  - tun: free page on build_skb failure in tun_xdp_one()
  - !23754 Fix CVE-2026-46112
  - fbdev: fix potential buffer overflow in do_register_framebuffer()
  - !23751 CVE-2026-46174
  - RDMA/hns: Fix unlocked call to hns_roce_qp_remove()
  - !23898 RDMA/hns: Fix log flood after cmd_mbox failure
  - !23902  dm: fix a buffer overflow in ioctl processing
  - !23819  bonding: alb: fix UAF in rlb_arp_recv during bond up/down
  - !23820  xfrm: ah: account for ESN high bits in async callbacks
  - dm: fix a buffer overflow in ioctl processing
  - !23643 [OLK-5.10] Fix CVE-2026-46098
  - !23498 [OLK-5.10] Fix CVE-2026-43437
  - !23592 [OLK-5.10] Fix CVE-2026-43382
  - !23440 Fix CVE-2026-43207
  - !23433 Fix CVE-2026-43132
  - !22538 [OLK-5.10] Fix CVE-2026-23420
  - !23684 NFC: nxp-nci: allow GPIOs to sleep
  - !23720 [OLK-5.10] Fix CVE-2026-31580
  - !23716 [OLK-5.10] Fix CVE-2026-31656
  - !22615 [OLK-5.10] Fix CVE-2026-31603
  - !23605 [OLK-5.10] Fix CVE-2026-43295
  - !22611 [OLK-5.10] Fix  CVE-2026-31599
  - !22607 [OLK-5.10] CVE-2026-31598
  - !22591 [OLK-5.10] Fix CVE-2026-31597
  - !23788 [OLK-5.10] Fix CVE-2025-71272
  - !22588 [OLK-5.10] Fix CVE-2026-31596
  - !22583 [OLK-5.10] Fix  CVE-2026-31585
  - !23024 Fix CVE-2026-43183
  - !22578 [OLK-5.10] Fix CVE-2026-31583
  - !23027 Fix CVE-2026-43184
  - !23783 [OLK-5.10] Fix CVE-2026-31627
  - !23782 [OLK-5.10] Fix CVE-2026-31626
  - !23198 [OLK-5.10] Fix CVE-2026-31485
  - !23135 [OLK-5.10] Fix CVE-2026-23058
  - !23683 nfc: nci: fix circular locking dependency in nci_close_device
  - !23681 drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel
  - !23553 [OLK-5.10] Fix CVE-2026-31507
  - !23677 dmaengine: omap-dma: fix dma_pool resource leak in error paths
  - !23666 net: 3com: 3c59x: fix possible null dereference in vortex_probe1()
  - !21861 net: marvell: prestera: fix NULL dereference on devlink_alloc() failure
  - !20918 nilfs2: Fix potential block overflow that cause system hang
  - !22390 [OLK-5.10] Fix CVE-2025-71199
  - !22387 [OLK-5.10] Fix CVE-2025-71192
  - !23870  mm: blk-cgroup: fix use-after-free in cgwb_release_workfn()
  - mm: blk-cgroup: fix use-after-free in cgwb_release_workfn()
  - !23234 Fix CVE-2026-46099
  - !23236 Fix CVE-2026-46027
  - !23843  jbd2: limit checkpoint buffers scanned per j_list_lock hold during shrink
  - jbd2: limit checkpoint buffers scanned per j_list_lock hold during shrink
  - RDMA/hns: Fix log flood after cmd_mbox failure
  - most: core: fix leak on early registration failure
  - most: core: fix resource leak in most_register_interface error paths
  - most: remove usage of the deprecated ida_simple_xx() API
  - !23797  scsi/hiraid: Support new RAID features and bug fixes
  - i2c: s3c24xx: check the size of the SMBUS message before using it
  - xfrm: ah: account for ESN high bits in async callbacks
  - bonding: alb: fix UAF in rlb_arp_recv during bond up/down
  - staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify()
  - scsi/hiraid: Support new RAID features and bug fixes
  - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels
  - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache
  - bcache: fix uninitialized closure object
  - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat
  - bcache: fix cached_dev.sb_bio use-after-free and crash
  - NFC: nxp-nci: allow GPIOs to sleep
  - nfc: nci: fix circular locking dependency in nci_close_device
  - drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel
  - ASoC: tegra: Fix Master Volume Control
  - dmaengine: omap-dma: fix dma_pool resource leak in error paths
  - net: 3com: 3c59x: fix possible null dereference in vortex_probe1()
  - net: caif: clear client service pointer on teardown
  - rapidio: replace rio_free_net() with kfree() in rio_scan_alloc_net()
  - batman-adv: Avoid double-rtnl_lock ELP metric worker
  - net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer
  - ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain()
  - ALSA: pcm: fix wait_time calculations
  - media: mtk-mdp: Fix error handling in probe function
  - dm-verity: correctly handle dm_bufio_client_create() failure
  - net/smc: avoid early lgr access in smc_clc_wait_msg
  - spi: spi-fsl-lpspi: fix teardown order issue (UAF)
  - spi: lpspi: Simplify some error message
  - spi: lpspi: release requested DMA channels
  - spi: lpspi: Silence error message upon deferred probe
  - can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak
  - rnbd-srv: Zero the rsp buffer before using it
  - media: cx25821: Fix a resource leak in cx25821_dev_setup()
  - staging: sm750fb: fix division by zero in ps_to_hz()
  - media: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections
  - ocfs2: fix possible deadlock between unlink and dio_end_io_write
  - ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY
  - ocfs2: handle invalid dinode in ocfs2_group_extend
  - media: vidtv: fix nfeeds state corruption on start_streaming failure
  - media: em28xx: fix use-after-free in em28xx_v4l2_open()
  - wifi: wlcore: Fix a locking bug
  - iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver
  - ALSA: ac97: fix a double free in snd_ac97_controller_register()
  - net: marvell: prestera: fix NULL dereference on devlink_alloc() failure
  - nilfs2: Fix potential block overflow that cause system hang


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-321.0.0.223
changelog:
  - !24256  fix null pointer in bpf_get_local_storage
  - !24243 net: hns3: fix querying pfc-prevention-tout mismatch issue
  - bpf, verifier: Correct tail_call_reachable for bpf prog
  - bpf: Check for helper calls in check_subprogs()
  - !24205 Fix CVE-2026-52946
  - !24239 Fix CVE-2026-53037
  - !24238 Fix CVE-2026-53071
  - !24224  bpf: Tighten cgroup storage cookie checks for prog arrays
  - net: hns3: fix querying pfc-prevention-tout mismatch issue
  - net: hns3: add support to query/set pfc_prevention_tout for ethtool
  - !24227  smb: client: require a full NFS mode SID before reading mode bits
  - !24124 [OLK-5.10] CVE-2026-31414
  - HID: usbhid: fix deadlock in hid_post_reset()
  - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp
  - smb: client: require a full NFS mode SID before reading mode bits
  - bpf: Tighten cgroup storage cookie checks for prog arrays
  - !24189  vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write
  - !24208 v2  xfs: remove xfs_attr_leaf_hasname
  - xfs: remove xfs_attr_leaf_hasname
  - !24190  fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath
  - !24191  xfs: fix undersized l_iclog_roundoff values
  - fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  - xfs: fix undersized l_iclog_roundoff values
  - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath
  - vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write
  - !24078  ext4: don't cache extent during splitting extent
  - !24139  CVE-2026-45892
  - !24138  Fix CVE-2026-45899
  - !24150 [OLK-5.10] net/sched: act_pedit: fix action bind logic
  - net/sched: act_pedit: fix action bind logic
  - !24052  xfs: stop reclaim before pushing AIL during unmount
  - !24051  Fix CVE-2026-31453
  - !24067 Fix CVE-2026-46149
  - !24068  nvmet-tcp: fix race between ICReq handling and queue teardown
  - !24071  xfs: fix freemap adjustments when adding xattrs to leaf blocks
  - ext4: drop extent cache after doing PARTIAL_VALID1 zeroout
  - ext4: don't zero the entire extent if EXT4_EXT_DATA_PARTIAL_VALID1
  - ext4: subdivide EXT4_EXT_DATA_VALID1
  - ext4: drop extent cache when splitting extent fails
  - ext4: fix inode tree inconsistency caused by ENOMEM
  - !19943  wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187_rx_cb()
  - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump
  - netfilter: nf_conntrack_expect: preserve kABI for new expectation fields
  - !21207 drm/cirrus: Fix ERR_PTR dereference in cirrus_fb_blit_rect
  - !20781  tracing: Fix soft lockup when lseeking trace file
  - !24045 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y
  - !23375  sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL
  - netfilter: nf_conntrack_expect: restore helper propagation via expectation
  - netfilter: ctnetlink: ignore explicit helper on new expectations
  - netfilter: nf_conntrack_expect: store netns and zone in expectation
  - netfilter: nf_conntrack_sip: get helper before allocating expectation
  - netfilter: nf_conntrack_expect: use expect->helper
  - netfilter: nf_conntrack_expect: honor expectation helper field
  - netfilter: nf_conntrack: use rcu accessors where needed
  - ext4: don't cache extent during splitting extent
  - xfs: fix freemap adjustments when adding xattrs to leaf blocks
  - nvmet-tcp: fix race between ICReq handling and queue teardown
  - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()
  - xfs: stop reclaim before pushing AIL during unmount
  - xfs: save ailp before dropping the AIL lock in push callbacks
  - xfs: avoid dereferencing log items after push callbacks
  - Revert "xfs: fix a UAF when inode item push"
  - nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free
  - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL
  - drm/cirrus: Fix ERR_PTR dereference in cirrus_fb_blit_rect
  - tracing: Fix soft lockup when lseeking trace file
  - wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187_rx_cb()


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-323.0.0.224
changelog:
  - !24610 Fix CVE-2026-53357
  - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del()
  - !24304 Fix CVE-2026-53249
  - !24302 Fix CVE-2026-53245
  - !24301 Fix CVE-2026-53238
  - !24269 Fix CVE-2026-52986
  - !24502 x86/hw-vuln:Adjust CPU mitigations MSR handling for newer models
  - !24327 Fix CVE-2026-53269
  - !24307 Fix CVE-2026-53266
  - !24325 Fix CVE-2026-53268
  - !24568  ALSA: usb-audio: Bound MIDI endpoint descriptor scans
  - !24329 Fix CVE-2026-53270
  - !24293 [OLK-5.10] Fix CVE-2026-53320
  - !24517 Fix CVE-2026-53236
  - !24333 Fix CVE-2026-53275
  - ALSA: usb-audio: Bound MIDI endpoint descriptor scans
  - !24355  bus: fsl-mc: use generic driver_override infrastructure
  - !24253 Fix CVE-2026-53072
  - tcp: restrict SO_ATTACH_FILTER to priv users
  - net: use sk_is_tcp() in more places
  - bpf, sockmap: Use stricter sk state checks in sk_lookup_assign
  - x86/hw-vuln:Adjust CPU mitigations MSR handling for newer models
  - !24360 Fix CVE-2026-52991
  - !24291 Fix CVE-2026-53002
  - !24289 Fix CVE-2026-52998
  - !24267 Fix CVE-2026-52970
  - !24265 Fix CVE-2026-52943
  - !23919 [OLK-5.10] Fix CVE-2026-46019
  - !23912 [OLK-5.10] Fix CVE-2026-46022
  - !23852 [OLK-5.10] Fix CVE-2026-43491
  - !23452 Fix CVE-2026-43206
  - !23850 [OLK-5.10] Fix CVE-2026-43111
  - !23854 [OLK-5.10] Fix CVE-2026-43327
  - !23807 [OLK-5.10] Fix CVE-2026-43110
  - !23806 [OLK-5.10] Fix CVE-2026-43480
  - !23794 [OLK-5.10] Fix CVE-2026-43103
  - !23791 [OLK-5.10] Fix CVE-2026-43104
  - !23790 [OLK-5.10] Fix CVE-2026-43105
  - !23789 [OLK-5.10] Fix CVE-2026-43113
  - !23114 [OLK-5.10] Fix CVE-2026-43159
  - !22993 [OLK-5.10] Fix CVE-2026-31658
  - !23802 [OLK-5.10] Fix CVE-2026-31623
  - !24363  ipc: limit next_id allocation to the valid ID range
  - netfilter: nf_conntrack_sip: don't use simple_strtoul
  - netfilter: conntrack: remove sprintf usage
  - netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp
  - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp()
  - !24368  USB: serial: kl5kusb105: fix bulk-out buffer overflow
  - !24274  signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads()
  - !24312 Fix CVE-2026-53208
  - !24310 Fix CVE-2026-53252
  - USB: serial: kl5kusb105: fix bulk-out buffer overflow
  - ipc: limit next_id allocation to the valid ID range
  - sched/psi: fix race between file release and pressure write
  - bus: fsl-mc: use generic driver_override infrastructure
  - !24323  gfs2: add some missing log locking
  - !24339 Fix CVE-2026-53195
  - !24334  wifi: mac80211: check tdls flag in ieee80211_tdls_oper
  - !24276 net/oenetcls: validate last_recv_cpu against nr_cpu_ids before use
  - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr()
  - wifi: mac80211: check tdls flag in ieee80211_tdls_oper
  - ipv6: mcast: Fix use-after-free when processing MLD queries
  - ipvs: clear the svc scheduler ptr early on edit
  - netfilter: synproxy: add mutex to guard hook reference counting
  - netfilter: conntrack_irc: fix possible out-of-bounds read
  - gfs2: add some missing log locking
  - Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig
  - Bluetooth: fix memory leak in error path of hci_alloc_dev()
  - netfilter: bridge: make ebt_snat ARP rewrite writable
  - ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options
  - net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr
  - netlabel: validate unlabeled address and mask attribute lengths
  - nilfs2: reject zero bd_oblocknr in nilfs_ioctl_mark_blocks_dirty()
  - netfilter: conntrack: remove sprintf usage
  - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check
  - net/oenetcls: validate last_recv_cpu against nr_cpu_ids before use
  - signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads()
  - netfilter: nft_ct: fix missing expect put in obj eval
  - net: skbuff: fix missing zerocopy reference in pskb_carve helpers
  - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER
  - crypto: atmel-aes - Fix 3-page memory leak in atmel_aes_buff_cleanup
  - misc: ibmasm: fix OOB MMIO read in ibmasm_handle_mouse_interrupt()
  - net: qrtr: ns: Limit the maximum server registration per node
  - USB: dummy-hcd: Fix locking/synchronization error
  - net: qrtr: ns: Change servers radix tree to xarray
  - HID: roccat: fix use-after-free in roccat_report_event
  - drm/vc4: Fix memory leak of BO array in hang state
  - net: lapbether: handle NETDEV_PRE_TYPE_CHANGE
  - net: lapbether: replace comparison to NULL with "lapbeth_get_x25_dev"
  - net: lapbether: remove trailing whitespaces
  - wifi: wl1251: validate packet IDs before indexing tx_frames
  - net: usb: cdc-phonet: fix skb frags[] overflow in rx_complete()
  - wifi: brcmfmac: validate bsscfg indices in IF events
  - ASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisition
  - net: lapbether: Close the LAPB device before its underlying Ethernet device closes
  - drm/vc4: Fix a memory leak in hang state error path
  - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set()
  - staging: rtl8723bs: fix null dereference in find_network
  - net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit()


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-324.0.0.225
changelog:
  - !24717  drm/amd/display: Fix out-of-bounds read in dp_get_eq_aux_rd_interval()
  - !24699  CVE-2026-52918
  - !24708 v2  bpf: Fix ld_{abs,ind} failure path analysis in subprogs
  - !24634 [OLK-5.10] backport important bugfix for bnxt_en driver from upstream linux-5.10.y
  - !24707 Ethernet: Linkdata: remove mistakenly committed binary file
  - drm/amd/display: Fix out-of-bounds read in dp_get_eq_aux_rd_interval()
  - Ethernet: Linkdata: remove mistakenly committed binary file
  - bpf: Fix ld_{abs,ind} failure path analysis in subprogs
  - !21142 [OLK-5.10] Fix CVE-2026-23089
  - !21773 [OLK-5.10] btrfs: fix remaining use-after-free in read_one_chunk error path
  - !21146 [OLK-5.10] Fix CVE-2026-23120
  - Bluetooth: serialize accept_q access
  - Bluetooth: Init sk_peer_* on bt_sock_alloc
  - !24678  drm/amd/display: Clamp HDMI HDCP2 rx_id_list read to buffer size
  - drm/amd/display: Clamp HDMI HDCP2 rx_id_list read to buffer size
  - !24631 Fix CVE-2026-53003
  - !24362 Fix CVE-2026-53016
  - !24619 Fix CVE-2026-53075
  - !24614  RDMA/srp: bound SRP_RSP sense copy by the received length
  - !24628  vdpa: use generic driver_override infrastructure
  - bnxt_en: Fix NULL pointer dereference
  - bnxt_en: Modify bnxt_disable_int_sync() to be called more than once.
  - pppoe: drop PFC frames
  - vdpa: use generic driver_override infrastructure
  - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls
  - RDMA/srp: bound SRP_RSP sense copy by the received length
  - crypto: ccp - copy IV using skcipher ivsize
  - btrfs: fix remaining use-after-free in read_one_chunk error path
  - ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  - l2tp: avoid one data-race in l2tp_tunnel_del_work()


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-325.0.0.226
changelog:
  - !24830  IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN
  - !24834  ice: fix double-free of tx_buf skb
  - !24866  ocfs2: validate bg_bits during freefrag scan
  - !24864  isofs: validate Rock Ridge CE continuation extent against volume size
  - ocfs2: validate bg_bits during freefrag scan
  - isofs: validate Rock Ridge CE continuation extent against volume size
  - !24852  sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks
  - sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks
  - !24268 Fix CVE-2026-52981
  - ice: fix double-free of tx_buf skb
  - !24685 [OLK-5.10] Fix CVE-2026-53306
  - !23895 [OLK-5.10] Fix CVE-2026-46047
  - !23950 [OLK-5.10] Fix CVE-2026-46038 CVE-2026-46003 CVE-2026-46026
  - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN
  - !24143 {OLK-5.10| Fix CVE-2026-43302
  - !24103 [OLK-5.10] Fix CVE-2026-43373
  - !24056 [OLK-5.10] Fix CVE-2026-31676
  - !24057 [OLK-5.10] Fix CVE-2026-31642
  - !24058 [OLK-5.10] Fix CVE-2026-31637
  - !23472 [OLK-5.10] Fix CVE-2026-31659
  - !23511 [OLK-5.10] Fix CVE-2026-43387
  - !24632 [OLK-5.10] Fix CVE-2026-53047
  - !24512 [OLK-5.10] Fix CVE-2026-52919
  - !24508 [OLK-5.10] Fix CVE-2026-52913
  - !24501 [OLK-5.10] Fix CVE-2026-23076
  - !24497 [OLK-5.10] Fix CVE-2025-39891
  - !24496 [OLK-5.10] Fix CVE-2025-38708
  - !24495 [OLK-5.10] Fix CVE-2025-23157
  - !23943 [OLK-5.10] Fix CVE-2026-46169
  - !23942 [OLK-5.10] Fix CVE-2026-45904
  - !23908 Fix CVE-2026-45956
  - !23840 [OLK-5.10] Fix CVE-2026-45965
  - !23842 [OLK-5.10] Fix CVE-2026-45993
  - !23878 [OLK-5.10] Fix CVE-2026-46122
  - !23884 [OLK-5.10] Fix CVE-2026-46127
  - !23830 [OLK-5.10] Fix  CVE-2026-46137
  - !23836 [OLK-5.10] Fix  CVE-2026-46157
  - !23888 [OLK-5.10] Fix CVE-2026-46163
  - !23817 [OLK-5.10] Fix  CVE-2026-46198
  - !24783 [OLK-5.10] crypto: ccp: Add new PSP device id for Hygon C86-4G
  - !24781 net/hinic5: fix code logic bug in the nic
  - !24715  drm/amd/display: Fix NULL deref and buffer over-read in SDP debugfs
  - !24795  Fix livepatch activation failure
  - !24763  bpf, arm64: Fix off-by-one in check_imm signed range check
  - net/hinic5: fix code logic bug in the nic
  - kbuild: remove libelf checks from top Makefile
  - kbuild: hide tools/ build targets from external module builds
  - crypto: ccp: Add new PSP device id for Hygon C86-4G
  - bpf, arm64: Fix off-by-one in check_imm signed range check
  - drm/amd/display: Fix NULL deref and buffer over-read in SDP debugfs
  - net: qrtr: ns: Fix use-after-free in driver remove()
  - tty: hvc_iucv: fix off-by-one in number of supported devices
  - tty: hvc: remove HVC_IUCV_MAGIC
  - efi/capsule-loader: fix incorrect sizeof in phys array reallocation
  - batman-adv: fix tp_meter counter underflow during shutdown
  - batman-adv: v: stop OGMv2 on disabled interface
  - ALSA: ctxfi: Fix potential OOB access in audio mixer handling
  - net: qrtr: ns: Limit the total number of nodes
  - net: qrtr: ns: Limit the maximum number of lookups
  - net: qrtr: ns: Free the node during ctrl_cmd_bye()
  - wifi: mwifiex: Initialize the chan_stats array to zero
  - drbd: add missing kref_get in handle_write_conflicts
  - media: venus: hfi_parser: add check to avoid out of bound access
  - neigh: let neigh_xmit take skb ownership
  - drm/v3d: Set DMA segment size to avoid debug warnings
  - drm/v3d/v3d_drv: Check for error num after setting mask
  - drm/v3d: Set dma_mask as well as coherent_dma_mask
  - net: ncsi: fix skb leak in error paths
  - rxrpc: reject undecryptable rxkad response tickets
  - rxrpc: Fix call removal to use RCU safe deletion
  - rxrpc: only handle RESPONSE during service challenge
  - hfsplus: fix uninit-value by validating catalog record size
  - powerpc/eeh: fix recursive pci_lock_rescan_remove locking in EEH event handling
  - powerpc/eeh: Make EEH driver device hotplug safe
  - powerpc/eeh: Rely on dev->link_active_reporting
  - drm/exynos: vidi: use priv->vidi_dev for ctx lookup in vidi_connection_ioctl()
  - wifi: b43legacy: enforce bounds check on firmware key index in RX path
  - RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp()
  - wifi: b43: enforce bounds check on firmware key index in b43_rx()
  - LoongArch: Add spectre boundry for syscall dispatch table
  - apparmor: fix invalid deref of rawdata when export_binary is unset
  - ALSA: pcm: oss: Fix data race at accessing runtime.oss.trigger
  - mptcp: pm: ADD_ADDR rtx: fix potential data-race
  - batman-adv: fix integer overflow on buff_pos
  - staging: rtl8723bs: properly validate the data in rtw_get_ie_ex()
  - batman-adv: reject oversized global TT response buffers


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-326.0.0.227
changelog:
  - !25075 Fix CVE-2026-64118
  - !24915 [OLK-5.10] Fix CVE-2026-53232
  - !24910 netfilter: nf_log: validate MAC header was set before dumping it
  - !24691 netfilter: nf_queue: hold bridge skb->dev while queued
  - !24603 inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP
  - !24913 [OLK-5.10] Fix CVE-2026-53078
  - !24880 [OLK-5.10] Fix CVE-2026-52927
  - !24876 [OLK-5.10] Fix CVE-2026-52920
  - !24869 [OLK-5.10] Fix CVE-2026-52915
  - !25065  gcov: use atomic counter updates to fix concurrent access crashes
  - !25066  ixgbevf: fix use-after-free in VEPA multicast source pruning
  - qed: fix double free in qed_cxt_tables_alloc()
  - ixgbevf: fix use-after-free in VEPA multicast source pruning
  - gcov: use atomic counter updates to fix concurrent access crashes
  - !25008 Fix CVE-2026-63976
  - !23918 [OLK-5.10] Fix CVE-2026-46319
  - !25030  security/keys: fix missed RCU read section on lookup
  - !25002  nfsd: fix posix_acl leak on SETACL decode failure
  - !25025  xfs: resample the data fork mapping after cycling ILOCK
  - netfilter: nf_queue: fix kabi break of struct nf_queue_entry
  - security/keys: fix missed RCU read section on lookup
  - !24995  l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl()
  - xfs: resample the data fork mapping after cycling ILOCK
  - Bluetooth: l2cap: clear chan->ident on ECRED reconfiguration success
  - nfsd: fix posix_acl leak on SETACL decode failure
  - !24920 Fix CVE-2026-52909
  - !24918 Fix CVE-2026-53267
  - !24922 Fix CVE-2026-52999
  - !24921 Fix CVE-2026-46321
  - !24919 Fix CVE-2026-46320
  - l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl()
  - !24832 net: hamradio: 6pack: fix uninit-value in sixpack_receive_buf
  - !24972  usb: typec: tcpm/tcpci_maxim: validate header NDO against RX_BYTE_CNT
  - !24969  KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits
  - !24967  USB: serial: mct_u232: fix missing interrupt-in transfer sanity check
  - !24959  USB: serial: omninet: fix memory corruption with small endpoint
  - !24957  USB: serial: cypress_m8: validate interrupt packet headers
  - usb: typec: tcpm/tcpci_maxim: validate header NDO against RX_BYTE_CNT
  - KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits
  - USB: serial: mct_u232: fix missing interrupt-in transfer sanity check
  - !24893  ceph: fix a buffer leak in __ceph_setxattr()
  - USB: serial: omninet: fix memory corruption with small endpoint
  - USB: serial: cypress_m8: validate interrupt packet headers
  - !24319 Fix CVE-2026-53255
  - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP
  - net/sched: act_ct: Only release RCU read lock after ct_ft
  - sched: act_ct: take care of padding in struct zones_ht_key
  - sched: act_ct: add netns into the key of tcf_ct_flow_table
  - net/sched: act_ct: set 'net' pointer when creating new nf_flow_table
  - !24769 CVE-2025-10263 for olk5.10
  - !24933 Fix CVE-2026-63975
  - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp
  - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching
  - tun: free page on short-frame rejection in tun_xdp_one()
  - tap: free page on error paths in tap_get_user_xdp()
  - netfilter: nft_ct: bail out on template ct in get eval
  - netfilter: nft_ct: track register operations
  - net: phy: clean the sfp upstream if phy probing fails
  - bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops
  - netfilter: nf_log: validate MAC header was set before dumping it
  - netfilter: ebtables: fix OOB read in compat_mtw_from_user
  - netfilter: xt_policy: fix strict mode inbound policy matching
  - netfilter: ip6t_hbh: reject oversized option lists
  - ceph: fix a buffer leak in __ceph_setxattr()
  - net: hamradio: 6pack: fix uninit-value in sixpack_receive_buf
  - openeuler_defconfig: Add CONFIG_ARM64_ERRATUM_4118414
  - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU
  - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  - arm64: errata: Mitigate TLBI errata on various Arm CPUs
  - arm64: cputype: Add Cortex-X925 definitions
  - arm64: cputype: Add Neoverse-V3 definitions
  - arm64: cputype: Add Neoverse-V3AE definitions
  - arm64: cputype: Add Cortex-X4 definitions
  - arm64: Add Neoverse-V2 part
  - arm64: cputype: Add Cortex-X3 definitions
  - arm64: cputype: Add Cortex-X1C definitions
  - arm64: cputype: Add MIDR_CORTEX_A76AE
  - arm64: cputype: Add C1-Premium definitions
  - arm64: cputype: Add C1-Ultra definitions
  - arm64: cputype: Add NVIDIA Olympus definitions
  - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata
  - netfilter: nf_queue: hold bridge skb->dev while queued
  - Bluetooth: MGMT: validate advertising TLV before type checks
  - ip6_vti: set netns_immutable on the fallback device.


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-327.0.0.228
changelog:
  - !25634  bpf: Fix use-after-free in offloaded map/prog info fill
  - !24963  i2c: core: fix adapter registration race
  - !25630  CVE-2026-64560
  - !25601 Fix CVE-2026-64496
  - !25603 Fix CVE-2026-64456
  - bpf: Fix use-after-free in offloaded map/prog info fill
  - !25487  e1000e: Fix out-of-bounds MMIO access by validating BAR0 size
  - posix-cpu-timers: Prevent UAF caused by non-leader exec() race
  - mm/slab: make __free(kfree) accept error pointers
  - locking: Introduce __cleanup() based infrastructure
  - !25109 v2  bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized
  - !25501  spi: qup: fix error pointer deref after DMA setup failure
  - !25500  i2c: stub: Reject I2C block transfers with invalid length
  - !25200 Fix CVE-2026-64378
  - !25579 v4  Fix CVE-2026-46054
  - !25512 [OLK-5.10] Fix CVE-2026-43114
  - hwrng: virtio: clamp device-reported used.len at copy_data()
  - iio: event: Fix event FIFO reset race
  - !25583  ksmbd: serialize QUERY_DIRECTORY requests per file
  - !25582  udf: validate VAT header length against the VAT inode size
  - !25581  NFSv4: include MAY_WRITE in open permission mask for O_TRUNC
  - ksmbd: serialize QUERY_DIRECTORY requests per file
  - udf: validate VAT header length against the VAT inode size
  - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC
  - selinux: fix incorrect execmem checks on overlayfs
  - selinux: fix overlayfs mmap() and mprotect() access checks
  - lsm: add backing_file LSM hooks
  - fs: prepare for adding LSM blob to backing_file
  - fs: constify file ptr in backing_file accessor helpers
  - perf/core: Fix MMAP event path names with backing files
  - ovl: Fix nested backing file paths
  - fs: store real path instead of fake path in backing file f_path
  - fs: create helper file_user_path() for user displayed mapped file path
  - fs: get mnt_writers count for an open backing file's real path
  - lsm: constify the 'file' parameter in security_binder_transfer_file()
  - fs: move cleanup from init_file() into its callers
  - fs: use backing_file container for internal files with "fake" f_path
  - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers
  - ovl: pass layer mnt to ovl_open_realfile()
  - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry
  - !25497 fbcon: fix NULL pointer dereference for a console without vc_data
  - !25353 Fix CVE-2026-64362
  - !25359 Fix CVE-2026-64299
  - !25355 Fix CVE-2026-64374
  - spi: qup: fix error pointer deref after DMA setup failure
  - i2c: stub: Reject I2C block transfers with invalid length
  - fbcon: fix NULL pointer dereference for a console without vc_data
  - e1000e: Fix out-of-bounds MMIO access by validating BAR0 size
  - !24840 net: bcmgenet: fix off-by-one in bcmgenet_put_txcb
  - !24849 drm/sun4i: backend: fix error pointer dereference
  - !24212 【OLK-5.10】 Backport hibmc drm patches from 6.6
  - !23422 [OLK-5.10] Fix CVE-2026-43459
  - tracing: Prevent out-of-bounds read in glob matching
  - sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT
  - !24725 [OLK-5.10] Fix CVE-2026-53023
  - !24841 fs/omfs: reject s_sys_blocksize smaller than OMFS_DIR_START
  - !23302 [OLK-5.10] Fix CVE-2026-43426
  - !23265 [OLK-5.10] Fix CVE-2026-43225
  - !24687 [OLK-5.10] Fix CVE-2026-53077
  - HID: lg-g15: cancel pending work on remove to fix a use-after-free
  - !24936 drm/komeda: fix integer overflow in AFBC framebuffer size check
  - !24848 ASoC: sti: use managed regmap_field allocations
  - !24844 drm/msm/dpu: fix mismatch between power and frequency
  - !24505 [OLK-5.10] Fix CVE-2026-52922
  - !24509 [OLK-5.10] Fix CVE-2026-52916
  - !24499 [OLK-5.10] Fix CVE-2026-31747
  - !23781 [OLK-5.10] Fix CVE-2026-46205
  - !23779 [OLK-5.10] Fix  CVE-2026-46206
  - !23777 [OLK-5.10] Fix CVE-2026-46212
  - !23757 [OLK-5.10] Fix CVE-2026-46219
  - !23748 [OLK-5.10] Fix  CVE-2026-46231
  - !23745 [OLK-5.10] Fix CVE-2026-46233
  - !23741 [OLK-5.10] Fix CVE-2026-46236
  - !23443 [OLK-5.10] Fix CVE-2026-43497
  - !23283 [OLK-5.10] Fix CVE-2026-43218
  - !23155 [OLK-5.10] Fix CVE-2026-43227
  - !25156  apparmor: fix use-after-free in rawdata dedup loop
  - !24992 Fix CVE-2026-63956
  - !25108  RDMA/umem: Fix truncation for block sizes >= 4G
  - !25033  fuse: re-lock request before replacing page cache folio
  - !25032  scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()
  - !25031  scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf
  - writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs()
  - !25170  CVE-2026-64341
  - USB: iowarrior: fix use-after-free on disconnect race
  - usb: iowarrior: remove inherent race with minor number
  - usb: yurex: make waiting on yurex_write interruptible
  - USB: iowarrior: fix use-after-free on disconnect
  - apparmor: fix use-after-free in rawdata dedup loop
  - bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized
  - RDMA/umem: Fix truncation for block sizes >= 4G
  - fuse: re-lock request before replacing page cache folio
  - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()
  - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf
  - USB: serial: cypress_m8: fix memory corruption with small endpoint
  - i2c: core: fix adapter registration race
  - drm/sun4i: backend: fix error pointer dereference
  - ASoC: sti: use managed regmap_field allocations
  - drm/msm/dpu: fix mismatch between power and frequency
  - drm/komeda: fix integer overflow in AFBC framebuffer size check
  - fs/omfs: reject s_sys_blocksize smaller than OMFS_DIR_START
  - net: bcmgenet: fix off-by-one in bcmgenet_put_txcb
  - fs/ntfs3: terminate the cached volume label after UTF-8 conversion
  - net/rds: Restrict use of RDS/IB to the initial network namespace
  - net/rds: Optimize rds_ib_laddr_check
  - batman-adv: fix batadv_skb_is_frag() kernel-doc
  - batman-adv: frag: disallow unicast fragment in fragment
  - batman-adv: dat: handle forward allocation error
  - comedi: me4000: Fix potential overrun of firmware buffer
  - drm/hisilicon: Using the to_hibmc_drm_private to convert
  - drm/hisilicon: Code refactoring for hibmc_drm_drv
  - drm/hisilicon/hibmc: hibmc-drm bugfix for DP
  - drm/hisilicon/hibmc:fix KVM is not displaying when GRUB VGA is on
  - drm/hisilicon/hibmc: fix irq_request()'s irq name variable is local
  - drm/hisilicon/hibmc: fix HPD interrupts triggering the wrong behavior
  - drm/hisilicon/hibmc: Getting connector info and EDID by using AUX channel
  - drm/hisilicon/hibmc: Add vga connector detect functions
  - drm/hisilicon/hibmc: Add MSI irq getting and requesting for HPD
  - drm/hisilicon/hibmc: Enable this hot plug detect of irq feature
  - drm/hisilicon/hibmc: Add colorbar-cfg feature and its debugfs file
  - drm/hisilicon/hibmc: Refactor the member of drm_aux in struct hibmc_dp
  - drm/hisilicon/hibmc: Add dp serdes cfg in dp process
  - drm/hisilicon/hibmc: Add dp serdes cfg to adjust serdes rate, voltage and pre-emphasis
  - drm/hisilicon/hibmc: Restructuring the header dp_reg.h
  - drm/hisilicon/hibmc: select CONFIG_DRM_DISPLAY_DP_HELPER
  - drm: Call drm_atomic_helper_shutdown() at shutdown time for misc drivers
  - drm/ast: Implement polling for VGA and SIL164 connectors
  - drm/sysfs: Register "ddc" symlink later
  - drm/hisilicon/hibmc: add dp module in hibmc
  - drm/hisilicon/hibmc: refactored struct hibmc_drm_private
  - drm/hisilicon/hibmc: add dp hw moduel in hibmc driver
  - drm/hisilicon/hibmc: add dp link moduel in hibmc drivers
  - drm/hisilicon/hibmc: add dp aux in hibmc drivers
  - staging: media: atomisp: Disallow all private IOCTLs
  - batman-adv: reject new tp_meter sessions during teardown
  - batman-adv: bla: prevent use-after-free when deleting claims
  - spi: mpc52xx: fix use-after-free on unbind
  - batman-adv: bla: put backbone reference on failed claim hash insert
  - batman-adv: bla: only purge non-released claims
  - media: rc: xbox_remote: heed DMA restrictions
  - fbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent use-after-free
  - ASoC: soc-core: flush delayed work before removing DAIs and widgets
  - usb: renesas_usbhs: fix use-after-free in ISR during device removal
  - media: i2c/tw9903: Fix potential memory leak in tw9903_probe()
  - staging: rtl8723bs: fix memory leak on failure path
  - clocksource/drivers/sh_tmu: Always leave device running after probe


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-328.0.0.229
changelog:
  - !25835  bpf, cgroup: Fix storage null-ptr-deref after replacing prog
  - !25594 Fix CVE-2026-64304
  - !24948  nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers
  - bpf, cgroup: Fix storage null-ptr-deref after replacing prog
  - !25750 wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet
  - !25794 [OLK-5.10] Fix CVE-2026-53223
  - !25639 btrfs: only release the dirty pages io tree after successful writes
  - !25506 [OLK-5.10] Fix CVE-2026-43449
  - !25505 [OLK-5.10] Fix CVE-2026-31716
  - !25803  KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  - !25806  USB: serial: mct_u232: fix memory corruption with small endpoint
  - USB: serial: mct_u232: fix memory corruption with small endpoint
  - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  - net: guard timestamp cmsgs to real error queue skbs
  - !25762  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb()
  - !25780  PCI: Fix pci_slot_trylock() error handling
  - !25783  KVM: SEV: Ignore Port I/O requests of length '0'
  - !24042 [OLK-5.10] Add Phytium spi driver
  - !25672 bpf: Free reuseport cBPF prog after RCU grace period.
  - !25014 Fix CVE-2026-64178
  - !23916 [OLK-5.10] Fix CVE-2026-46275
  - !25377 [OLK-5.10] Fix CVE-2026-53292
  - !25491 [OLK-5.10] Fix CVE-2026-53375
  - !25488 [OLK-5.10] Fix CVE-2026-64115
  - !25484 [OLK-5.10] Fix CVE-2026-53256
  - !25374 [OLK-5.10] Fix CVE-2026-46273
  - !25367 [OLK-5.10] Fix CVE-2026-46053
  - !25368 [OLK-5.10] Fix CVE-2026-46064
  - !25369 [OLK-5.10] Fix CVE-2026-46068
  - !25372 [OLK-5.10] Fix CVE-2026-46077
  - !24010 [OLK-5.10] Fix CVE-2026-31578
  - !24001 [OLK-5.10] Fix CVE-2026-31577
  - !24005 [OLK-5.10] Fix CVE-2026-31576
  - !23149 [OLK-5.10] Fix CVE-2026-31462
  - KVM: SEV: Ignore Port I/O requests of length '0'
  - !25508  KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level
  - PCI: Fix pci_slot_trylock() error handling
  - !25739  crypto: qat - protect service table iterations with service_lock
  - !25773  fuse: re-lock request before returning from fuse_ref_folio()
  - fuse: re-lock request before returning from fuse_ref_folio()
  - !25731  nfsd: release layout stid on setlease failure
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb()
  - wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet
  - !25713 Fix CVE-2026-63823
  - !25664 tipc: fix double-free in tipc_buf_append()
  - !25698  *** fix CVE-2026-64375 ***
  - crypto: qat - protect service table iterations with service_lock
  - nfsd: release layout stid on setlease failure
  - bpf: Free reuseport cBPF prog after RCU grace period.
  - !25516 net, bpf: fix null-ptr-deref in xdp_master_redirect() for down master
  - keys: Pin request_key_auth payload in instantiate paths
  - !25644  bpf, skmsg: fix verdict sk_data_ready racing with ktls rx
  - !25681  nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path
  - !25643  netfilter: nf_tables: fix dst corruption in same register operation
  - proc: protect ptrace_may_access() with exec_update_lock (FD links)
  - proc/fd: In proc_fd_link use fget_task
  - !25676  udf: validate sparing table length as an entry count, not a byte count
  - !25675  udf: reject descriptors with oversized CRC length
  - !25673  smb: client: mask server-provided mode to 07777 in modefromsid
  - !25671  smb: client: harden POSIX SID length parsing
  - !25670  ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  - !25669  ocfs2: reject oversized group bitmap descriptors
  - !25668  nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page
  - !25645 Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path
  - udf: validate sparing table length as an entry count, not a byte count
  - udf: reject descriptors with oversized CRC length
  - smb: client: mask server-provided mode to 07777 in modefromsid
  - smb: client: harden POSIX SID length parsing
  - ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  - ocfs2: reject oversized group bitmap descriptors
  - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page
  - !25526 [OLK-5.10] Fix CVE-2026-31532
  - !25522 [OLK-5.10] Fix CVE-2026-52924
  - tipc: fix double-free in tipc_buf_append()
  - Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  - Bluetooth: eir: Fix possible crashes on eir_create_adv_data
  - bpf, skmsg: fix verdict sk_data_ready racing with ktls rx
  - netfilter: nf_tables: fix dst corruption in same register operation
  - btrfs: only release the dirty pages io tree after successful writes
  - crypto: qat - validate RSA CRT component lengths
  - net, bpf: check master for NULL in xdp_master_redirect()
  - net, bpf: fix null-ptr-deref in xdp_master_redirect() for down master
  - can: raw: fix ro->uniq use-after-free in raw_rcv()
  - drm/amdgpu/vce: Prevent partial address patches
  - sctp: purge outqueue on stale COOKIE-ECHO handling
  - fs/ntfs3: validate Dirty Page Table capacity in log_replay copy_lcns
  - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level
  - nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set
  - fs/ntfs3: validate rec->used in journal-replay file record check
  - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind()
  - net: phonet: do not BUG_ON() in pn_socket_autobind() on failed bind
  - ibmveth: Disable GSO for packets with small MSS
  - crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx
  - vsock/vmci: fix UAF when peer resets connection during handshake
  - Bluetooth: bnep: Fix UAF read of dev->name
  - net: rds: fix MR cleanup on copy error
  - ibmasm: fix heap over-read in ibmasm_send_i2o_message()
  - crypto: atmel-tdes - fix DMA sync direction
  - nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers
  - arm64: config: add Phytium spi config
  - spi-v2: Phytium: Add phytium spi-v2 driver
  - Documentation: bindings: Add phytium spi-v2 devicetree description
  - spi: add Phytium SPI controller support
  - spi: phytium: Document device tree binding
  - media: as102: fix to not free memory after the device is registered in as102_usb_probe()
  - media: hackrf: fix to not free memory after the device is registered in hackrf_probe()
  - nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map
  - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths
  - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error
  - Bluetooth: hci_h4: Fix race during initialization
  - Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work
  - Bluetooth: hci_uart: Fix another race during initialization
  - Bluetooth: hci_uart: fix race during initialization
  - Bluetooth: hci_h5: Disable the hci_suspend_notifier for btrtl devices
  - drm/amdgpu: replace PASID IDR with XArray
  - drm/amdgpu: fix the idr allocation flags
  - drm/amdgpu: prevent immediate PASID reuse case
  - drm/amdgpu: Remove usage of the deprecated ida_simple_xx() API


author: shixin <shixin21@huawei.com> - 29-8
changelog:
  - libkmod: fix possible out-of-bounds memory access
    shared: avoid passing {NULL, 0} array to bsearch()


author: caixiaomeng <caixiaomeng2@huawei.com> - 1:0.9.5-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ignore sssnic module when building hotpatch to fix sssnic wrongly dependency of sssnic


author: caixiaomeng <caixiaomeng2@huawei.com> - 1:0.9.5-12
changelog:
  - Type:bugfix
  - ID:NA                                                                                                         
  - SUG:NA
  - DESC:adpat kpatch bundle symbols to kernel change


author: caixiaomeng <caixiaomeng2@huawei.com> - 1:0.9.5-13
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch and fix .rela.init.text section changed due to __BTF_id_ changed


author: fuanan <fuanan3@h-partners.com> - 1:0.9.5-15
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patch
         backport-lookup-fix-local-bind-check.patch


author: chenyanpanHW <chenyanpan@huawei.com> - .0-4
changelog:
  - DESC: delete -Sgit from 
  %setup -a 0      -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-fix-lapack-devel-build-error.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-Fix-out-of-bounds-read-in-slarrv.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Eibz-Chan <chenbingzhao@huawei.com> - 590-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:[add] backport patches from upstream
  	Fix-memory-leak-when-using-corrupt-lesshst-file.patch
  	Fix-crash-when-enter-invaid-pattern-in-command.patch


author: xihaochen <xihaochen@huawei.com> - 4.9.2-1
changelog:
  - Type:requirements                                                                                                                                            
  - Id:NA
  - SUG:NA
  - DESC:update lftp to 4.9.2


author: lingsheng <lingsheng1@h-partners.com> - 3.5.2-9
changelog:
  - Type:CVE
  - ID:CVE-2025-5914,CVE-2025-5916,CVE-2025-5917,CVE-2025-5918
  - SUG:NA
  - DESC:fix CVE-2025-5914 CVE-2025-5916 CVE-2025-5917 CVE-2025-5918


author: cenhuilin <cenhuilin@kylinos.cn> - 2.37.2-46
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:lsblk: fix memory leak [coverity scan]
         lsblk: fix possible use-after-free


author: yixiangzhike <yixiangzhike007@163.com> - 2.37.2-48
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport community patches
           fix off-by-one in maximum last sector calculation


author: zhangmingyi <zhangmingyi5@huawei.com> 2:0.8.1-12
changelog:
  - backport patches from upstream:
    backport-libbpf-Fix-NULL-pointer-dereference-in_bpf_object__c.patch
    backport-libbpf-Fix-str_has_sfxs-return-value.patch
    backport-libbpf-Initialize-err-in-probe_map_create.patch


author: jinzhiguang <jinzhiguang@kylinos.cn> - 2:0.8.1-13
changelog:
  - backport patch from upstream:
    backport-libbpf-Modify-the-function-name-in-libbpf.c-to-match.patch


author: xiesongyang <xiesongyang@huawei.com> - 2:0.8.1-14
changelog:
  - backport patch from upstream:
    backport-libbpf-Fix-an-error-in-64bit-relocation-value-comput.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:0.8.1-15
changelog:
  - backport patch from upstream:
    backport-libbpf-Avoid-uninitialized-value-in-BPF_CORE_READ_BI.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:0.8.1-16
changelog:
  - backport patch from upstream:
    backport-libbpf-Add-NULL-checks-to-bpf_object__prev_map,next_.patch
    backport-libbpf-Apply-map_set_def_max_entries-for-inner_maps-.patch
    backport-libbpf-Fix-uninitialized-warning-in-btf_dump_dump_ty.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:0.8.1-17
changelog:
  - backport patch from upstream:
    backport-libbpf-Dont-take-direct-pointers-into-BTF-data-from-.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:0.8.1-18
changelog:
  - backport patch from upstream:
    backport-libbpf-Do-not-resolve-size-on-duplicate-FUNCs.patch
    backport-libbpf-Fix-bpf_object__open_skeleton-s-mishandling-o.patch
    backport-libbpf-Fix-segfault-due-to-libelf-functions-not-sett.patch
    backport-libbpf-Fixed-getting-wrong-return-address-on-arm64-a.patch
    backport-libbpf-fix-sym_is_subprog-logic-for-weak-global-subp.patch
    backport-libbpf-move-global-data-mmap-ing-into-bpf_object__lo.patch


author: tianmuyang <tianmuyang@huawei.com> 2:0.8.1-19
changelog:
  - Adaption for sched type eBPF program:
    backport-libbpf-Adaption-for-sched-type-eBPF-program.patch


author: andy <liuyang01@kylinos.cn> 2:0.8.1-20
changelog:
  - backport patch from upstream:
    backport-libbpf-Fix-out-of-bound-read.patch
    backport-libbpf-fix-LDX_STX_ST-CO-RE-relocation-size-adjustment-logic.patch
    backport-libbpf-Fix-hypothetical-STT_SECTION-extern-NULL-deref-case.patch


author: tianmuyang <tianmuyang@huawei.com> 2:0.8.1-21
changelog:
  - Add bpf_cpumask_op API to support prefered cpu control in eBPF program:
    backport-libbpf-Add-bpf_cpumask_op-API-to-support-prefered-cp.patch


author: hanhuihui <hanhuihui5@huawei.com> - 0.69.0-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix history rollback cmd not meet the expectation
         Fix memory leak in subject-py


author: zhaoyonghao10 <zhaoyonghao10@h-partners.com> - 0.69.0-12
changelog:
  - apply 2 patches: backport-Mark-all-protected-packages-as-user-installed-for-.patch, backport-fix--compare-RPMItem-in-transaction-with-rpmvercmp.patch


author: liujing <liujing144@huawei.com> - 1.0.0-30
changelog:
  - update patches from https://code.foxkit.us/adelie/aports-old/blob/50de7d785d5500a14ed00fa12e483e8ceaf4f06a/main/libdv


author: doupengda <doupengda@loongson.cn> 1.0.1-7
changelog:
  - update config.guess and config.sub
  - fix SOURCE1 file autoconf.h '__loongarch64__' to '__loongarch64'


author: fly_fzc <2385803914@qq.com> - 2.1.12-11
changelog:
  - fix CVE-2026-63387 CVE-2026-63388 CVE-2026-63384 CVE-2026-63381
        CVE-2026-63385 CVE-2026-63382 CVE-2026-63379 CVE-2026-63383


author: shixuantong <shixuantong1@huawei.com> - 3.4.2-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix x86/ffi64 calls with 6 gp and some sse registers
         Robustify floating point comparison in test
         Fix floating point compare


author: weijin deng <weijin.deng@turbolinux.com.cn> - 0.18.1-1
changelog:
  - Upgrade to 0.18.1
  - Update Version, Release, Source0, stage 'files'
  - Stage 'build' use meson build


author: Wenlong Ding <wenlong.ding@turbolinux.com.cn> - 2.6.4-22
changelog:
  - Remove /usr/lib64/libglade-2.0.so.* from libglade2-devel package which already exists in libglade2 package.


author: wangkai <13474090681@163.com> - 2.5.18-5
changelog:
  - Fix CVE-2026-40334, CVE-2026-40334, CVE-2026-40338, CVE-2026-40339,
    CVE-2026-40340, CVE-2026-40341


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.2.0-1
changelog:
  - Upgrade to 1.2.0
  - Update Version, URL, Source0. delete Patch0. update stage 'prep'
  - Add 'find_lang', update stage 'files'


author: yanglu <yanglu72@h-partners.com> - 3.0.11-2
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:avoid crashing in icalcomponent_normalize
         fix a memleak in icalcomponent_normalize


author: yangchenguang <yangchenguang@kylinsec.com.cn> - 72.1-7
changelog:
  - icu already supports loongarch64 architecture
  - Remove loongarch64 patch and modify sw_64 support patch to use all arch


author: wangxiao <wangxiao184@qq.com> - 1.19.2-4
changelog:
  - add fix patch for CVE-2026-50292
  - CVE-2026-50265 is an invalid CVE, so delete the related information.


author: chengyechun <chengyechun1@huawei.com> - 3.7.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:prevent segfault in af_request_type
         fix bridge info parsing


author: chenyanpanHW <chenyanpan@huawei.com> - 0.16-2
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0000-libpciaccess-rom-size.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-libpciaccess-add-sw64.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.28.0-1
changelog:
  - Upgrade to 1.28.0
  - Update Version, Release, Source0, BuildRequires
  - Use meson rebuild, delete python3.8-fix.patch that for autoreconf


author: xinghe <xinghe2@h-partners.com> - 2:1.6.38-3
changelog:
  - Type:cves
  - CVE:CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720
  - SUG:NA
  - DESC:fix CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720


author: shixuantong <shixuantong1@huawei.com> - 0.21.1-7
changelog:
  - Fix write buffer overflow by 1 in domain_to_punycode()
  - Fix stack buffer overflow WRITE 1 in domain_to_punycode()
  - Avoid 8bit overflow in is_public_suffix()
  - Avoid 'NULL + 1' as it is UB


author: yixiangzhike <yixiangzhike007@163.com> - 1.4.4-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:change the files order in patch file fix-doc-about-difok.patch


author: yixiangzhike <yixiangzhike007@163.com> - 1.14.2-6
changelog:
  - backport patches from upstream
      Fix a memory leak of the glib slist
      Add missing end callback for already downloaded zchunk files
      Fix memory leak of repo and repomd
      Fix a crash when the gnupghomedir is NULL or not specified on Python API


author: hongjinghao <hongjinghao@huawei.com> - 2.5.3-6
changelog:
  - Type:bugfix
  - CVE:
  - SUG:NA
  - DESC:sync backport-bpf-properly-reset-clear-the-bpf_program-on-error-in.patch, backport-db-fix-a-copy-n-paste-typo-in-_db_tree_add.patch, backport-bpf-protect-against-addition-overflows-when-building-the.patch


author: xinghe <xingheyd@163.com> - 4.17.5-15
changelog:
  - Type:cves
  - ID:CVE-2026-3238 CVE-2026-3012 CVE-2026-4480 CVE-2026-4408
  - SUG:NA
  - DESC:fix CVE-2026-3238 CVE-2026-3012 CVE-2026-4480 CVE-2026-4408


author: xinghe <xingheyd@163.com> - 4.17.5-17
changelog:
  - Type:cves
  - ID:CVE-2026-6949 CVE-2026-58224 CVE-2026-58216 CVE-2026-58218 CVE-2026-58221 CVE-2026-58222
  - SUG:NA
  - DESC:fix CVE-2026-6949 CVE-2026-58224 CVE-2026-58216 CVE-2026-58218 CVE-2026-58221 CVE-2026-58222


author: nickyang <nickyang228@163.com> - 2.74.2-12
changelog:
  - Type:cves
  - ID:CVE-2026-1539 CVE-2026-1467 CVE-2026-1761 CVE-2026-0716
  - SUG:NA
  - DESC:fix CVE-2026-1539 CVE-2026-1467 CVE-2026-1761 CVE-2026-0716


author: nickyang <nickyang228@163.com> - 2.74.2-13
changelog:
  - Type:cves
  - ID:CVE-2026-1760 CVE-2026-1801 CVE-2026-2369
  - SUG:NA
  - DESC:fix CVE-2026-1760 CVE-2026-1801 CVE-2026-2369


author: zhangbinqin <zhangbinqin@h-partners.com> - 0.9.6-15
changelog:
  - Type:CVE
  - Id:CVE-2026-0968 CVE-2026-0967 CVE-2026-0966 CVE-2026-0965 CVE-2026-0964 CVE-2025-14821
  - SUG:NA
  - DESC:fix CVE-2026-0968 CVE-2026-0967 CVE-2026-0966 CVE-2026-0965 CVE-2026-0964 CVE-2025-14821


author: zhangbinqin <zhangbinqin@h-partners.com> - 1.10.0-8
changelog:
  - Type:CVE
  - CVE:CVE-2026-7598
  - SUG:NA
  - DESC:add username_len bounds checking to fix CVE-2026-7598


author: wangjiang <wangjiang37@h-partners.com> - 1.4.7-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:tdb: Do not pass non–null‐terminated strings to strcmp()
         python: Safely clear structure members


author: chenyanpanHW <chenyanpan@huawei.com> - 0.10.2-2
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-tevent-fix-CID-1437974-dereference-after-null-check.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: chenziyang <chenziyang4@huawei.com> - 2:1.6.2-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch to fix failed run-ptrace-mapper testcase


author: chenyanpanHW <chenyanpan@huawei.com> - 0.1.5-18
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0000-Link-with-znodelete-to-disallow-unloading.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-Revert-use-atexit-to-call-libusb_exit.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yaoxin <yao_xin001@hoperun.com> - 2.20.0-1
changelog:
  - Upgrade to 2.20.0
  - Fix CVE-2023-39929
  - Fix minor issue about printf data type and value range
  - av1: Revise offsets comments for av1 encode
  - jpeg: add support for crop and partial decode
  - Drop no longer applicable vaGetDriverNames check


author: Jiabo Feng <fengjiabo1@huawei.com> - 6.2.0-67
changelog:
  - virt-host-validate: Fix IOMMU output on aarch64
  - cpu: revert: Modify virCPUarmCompare to perform compare actions
  - cpu: Modify virCPUarmCompare to perform compare actions
  - add phytium s5000c support on arm architecture for capability


author: Jiabo Feng <fengjiabo1@huawei.com> - 6.2.0-69
changelog:
  - migration: support vfio-pci device migration
  - libvirt: Support specifying the cache size presented to guest
  - util: fix success return for virProcessKillPainfullyDelay()
  - test: Fix testNodeGetFreePages
  - qemu: DomainGetGuestVcpusParams: reduce scope of tmp


author: ZixinLi <lizixin10@h-partners.com> - 6.2.0-70
changelog:
  - Fix CVE-2025-12748 CVE-2025-13193
  - conf: split out virDomainDefParseIDs (CVE-2025-12748)
  - conf: Add virDomainDefIDsParseString (CVE-2025-12748)
  - bhyve: Check ACLs before parsing the whole domain XML (CVE-2025-12748)
  - libxl: Check ACLs before parsing the whole domain XML (CVE-2025-12748)
  - lxc: Check ACLs before parsing the whole domain XML (CVE-2025-12748)
  - vz: Check ACLs before parsing the whole domain XML (CVE-2025-12748)
  - qemu: Check ACLs before parsing the whole domain XML (CVE-2025-12748)
  - qemu: snapshot: Set umask for 'qemu-img' when creating external inactive snapshots (CVE-2025-13193)


author: fuanan <fuanan3@h-partners.com> - 1.1.37-4
changelog:
  - fix xsltCleanupSourceDoc function:
    Clean up attributes in source doc
    Avoid null deref on documents without root


author: liujie-answer <liujie5@linkdatatechnology.com> - 20260410-2
changelog:
  - add linux-firmware-linkdata sub-package
  - This configuration file is from Linkdata, supporting Linkdata Ethernet Controller advanced feature configuration.


author: yanglu <yanglu72@h-partners.com> - 33.6-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ensure that the src package contains the loongson and sw patches


author: wujichao <wujichao1@huawei.com> - 0.3-35
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:bugfix: Information in cpu directory is overwritten after lxcfs restart


author: xiejing <xiejing@kylinos.cn> - 1:10.5.25-1
changelog:
  - Bump to 10.5.25 for resolving CVE-2024-21096, CVE-2023-22084
  - Fix version description in systemd service file


author: openEuler Buildteam <buildteam@openeuler.org> - 20190618-1
changelog:
  - Type: enhancement
  - ID:   NA
  - SUG:  NA
  - DESC: Update to 20190618, add help package.

  - Type: enhancement
  - ID:   NA
  - SUG:  NA
  - DESC: Update to 20190116, add help package.


author: chenyanpanHW <chenyanpan@huawei.com> - 4.0.26-2
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-comment-invalid-info-in-conf-file.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yanglu <yanglu72@h-partners.com> - 2:0.95-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Change UDP and ICMP sockets binding to accept a source IP from the -a CLI option


author: yaoxin <1024769339@qq.com> - 8.0.41-1
changelog:
  - Update to 8.0.41 for fix CVEs(CVE-2025-21490,CVE-2025-21491,CVE-2025-21495,
    CVE-2025-21497,CVE-2025-21500,CVE-2025-21501,CVE-2025-21503,CVE-2025-21505,
    CVE-2025-21518,CVE-2025-21519,CVE-2025-21520,CVE-2025-21522,CVE-2025-21523,
    CVE-2025-21529,CVE-2025-21531,CVE-2025-21540,CVE-2025-21543,CVE-2025-21546,
    CVE-2025-21555,CVE-2025-21559)


author: yaoxin <1024769339@qq.com> - 8.0.42-1
changelog:
  - Update to 8.0.42 for fix CVEs(CVE-2025-21574,CVE-2025-21575,CVE-2025-21577,
    CVE-2025-21580,CVE-2025-21581,CVE-2025-21584,CVE-2025-21585,CVE-2025-30681,
    CVE-2025-30682,CVE-2025-30683,CVE-2025-30684,CVE-2025-30685,CVE-2025-30687,
    CVE-2025-30688,CVE-2025-30689,CVE-2025-30693,CVE-2025-30695,CVE-2025-30696,
    CVE-2025-30699,CVE-2025-30703,CVE-2025-30704,CVE-2025-30705,CVE-2025-30710,
    CVE-2025-30715,CVE-2025-30721,CVE-2025-30722


author: yaoxin <1024769339@qq.com> - 8.0.43-1
changelog:
  - Update to 8.4.6 for fix CVEs (CVE-2025-50068,CVE-2025-50077,CVE-2025-50078,
    CVE-2025-50079,CVE-2025-50080,CVE-2025-50081,CVE-2025-50082,CVE-2025-50083,
    CVE-2025-50084,CVE-2025-50085,CVE-2025-50086,CVE-2025-50087,CVE-2025-50091,
    CVE-2025-50092,CVE-2025-50093,CVE-2025-50094,CVE-2025-50096,CVE-2025-50097,
    CVE-2025-50098,CVE-2025-50099,CVE-2025-50100,CVE-2025-50101,CVE-2025-50102,
    CVE-2025-50104,CVE-2025-53023)


author: wangkai <13474090681@163.com> - 8.0.44-1
changelog:
  - Update to 8.0.44 for fix CVEs (CVE-2025-53069,CVE-2025-53062,CVE-2025-53054,
    CVE-2025-53053,CVE-2025-53045,CVE-2025-53044,CVE-2025-53042,CVE-2025-53040)


author: yaoxin <1024769339@qq.com> - 8.0.45-1
changelog:
  - Update to 8.0.45 for fix CVEs (CVE-2026-21936,CVE-2026-21937,
    CVE-2026-21941,CVE-2026-21948,CVE-2026-21964,CVE-2026-21968)


author: wangkai <13474090681@163.com> - 8.0.46-1
changelog:
  - Update to 8.0.46 for fix CVEs (CVE-2026-21998, CVE-2026-22001, CVE-2026-22002,
    CVE-2026-22004, CVE-2026-22005, CVE-2026-22009, CVE-2026-22015, CVE-2026-22017,
    CVE-2026-34267, CVE-2026-34270, CVE-2026-34271, CVE-2026-34276, CVE-2026-34278,
    CVE-2026-34293, CVE-2026-34303, CVE-2026-34304, CVE-2026-34308, CVE-2026-35236,
    CVE-2026-35237, CVE-2026-35238, CVE-2026-35239, CVE-2026-35240)


author: yaoxin <yao_xin001@hoperun.com> - 8.0-1
changelog:
  - Update to 8.0
    * CVE-2024-5742: Avoid privilege escalations via symlink attacks
      on emergency save file (boo#1226099)
    * By default ^F is bound to starting a forward search, and ^B to
      starting a backward search, while M-F and M-B repeat the search
      in the corresponding direction. (See the documentation if you
      want the old bindings back.)
    * Command-line option --modernbindings (-/) makes ^Q quit, ^X cut,
      ^C copy, ^V paste, ^Z undo, ^Y redo, ^O open a file, ^W write a file,
      ^R replace, ^G find again, ^D find again backwards, ^A set the mark,
      ^T jump to a line, ^P show the position, and ^E execute.
    * For easier access, M-" is bound to placing/removing an anchor,
      and M-' to jumping to the next anchor.


author: chenyanpanHW <chenyanpan@huawei.com> - 0.2.8-19
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0000-netcf-call-aug_load-at-most-once-per-second.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-netcf-optimize-aug_match-query-for-all-ifcfg-files-related.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-netcf-linux-include-bond-element-for-bonds-with-no-slaves.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0003-netcf-Properly-classify-bond-devices-with-no-slaves.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/Fix-memory-leak-in-aug-match-mac.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: gaihuiying <eaglegai@163.com> - 1:1.0.0-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         evaluate: error out if basetypes are different
         evaluate: guard against NULL basetype
         evaluate: handle invalid mapping expressions gracefully
         evaluate: reject attempt to update a set
         evaluate: release mpz type in expr_evaluate_list() error path
         expression: missing line in describe command with invalid expression

  Thu Apr 18 2024 lingsheng <lingsheng1@h-partners.com> - 1:1.0.0-10
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:datatype: don't return a const string from cgroupv2_get_path()
  datatype: fix leak and cleanup reference counting for struct datatype
  datatype: initialize TYPE_CT_EVENTBIT slot in datatype array
  datatype: initialize TYPE_CT_LABEL slot in datatype array
  evaluate: do not remove anonymous set with protocol flags and single element
  evaluate: don't crash if object map does not refer to a value
  evaluate: error out when expression has no datatype
  evaluate: error out when store needs more than one 128bit register of align fixup
  evaluate: fix check for truncation in stmt_evaluate_log_prefix()
  evaluate: fix double free on dtype release
  evaluate: fix memleak in prefix evaluation with wildcard interface name
  evaluate: reject set in concatenation
  evaluate: revisit anonymous set with single element optimization
  evaluate: skip anonymous set optimization for concatenations
  evaluate: stmt_nat: set reference must point to a map
  evaluate: tproxy: move range error checks after arg evaluation
  evaluate: validate chain max length
  evaluate: validate maximum log statement prefix length
  exthdr: fix tcpopt_find_template to use length after mask adjustment
  exthdr: prefer raw_type instead of desc->type
  json: expose dynamic flag
  json: fix use after free in table_flags_json()
  libnftables: Drop cache in -c/--check mode
  meta: fix tc classid parsing out-of-bounds access
  netlink: don't crash if prefix for < byte is requested
  netlink: fix leaking typeof_expr_data/typeof_expr_key in netlink_delinearize_set()
  netlink: handle invalid etype in set_make_key()
  parser_bison: fix ct scope underflow if ct helper section is duplicated
  parser_bison: fix memleak in meta set error handling
  parser_bison: make sure obj_free releases timeout policies
  parser_json: Catch nonsense ops in match statement
  parser_json: Default meter size to zero
  parser_json: Fix flowtable prio value parsing
  parser_json: Fix synproxy object mss/wscale parsing
  parser_json: Fix typo in json_parse_cmd_add_object()
  parser_json: Proper ct expectation attribute parsing
  parser_json: Wrong check in json_parse_ct_timeout_policy()
  py: fix exception during cleanup of half-initialized Nftables
  rule: fix sym refcount assertion


author: gaihuiying <eaglegai@163.com> - 1:1.0.0-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         evaluate: disable meta set with ranges
         src: reject large raw payload and concat expressions
         evaluate: fix stack overflow with huge priority string
         tcpopt: don't create exthdr expression without datatype
         src: do not allow to chain more than 16 binops
         rule: fix ASAN errors in chain priority to textual names
         tests: shell: add regression test for double-free crash bug
         evaluate: handle invalid mapping expressions in stateful object
         evaluate: Fix incorrect checking the `base` variable in case of IPV6
         netlink: reset temporary set element stmt list after list splice


author: gaihuiying <eaglegai@163.com> - 1:1.0.0-13
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:parser: split tcp option rules
         cache: prepare nft_cache_evaluate() to return error
         ct timeout: fix 'list object x' vs. 'list objects in table' confusion
         ct expectation: fix 'list object x' vs. 'list objects in table' confusion
         tests: shell: connect chains to hook point


author: gaihuiying <eaglegai@163.com> - 1:1.0.0-14
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         parser_json: release buffer returned by json_dumps
         parser_json: fix handle memleak from error path
         parser_json: fix several expression memleaks from error path
         libnftables: Zero ctx->vars after freeing it


author: gaihuiying <eaglegai@163.com> - 1:1.0.0-16
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         evaluate: don't allow nat map with specified protocol
         rule: return error if table does not exist
         json: make sure timeout list is initialised
         evaluate: don't update cache for anonymous chains
         json: don't BUG when asked to list synproxies
         evaluate: compact STMT_F_STATEFUL checks
         evaluate: only allow stateful statements in set and map definitions
         netlink: fix crash when ops doesn't support udata
         netlink: Catch unknown types when deserializing objects
         netlink: Avoid potential NULL-ptr deref parsing set elem expressions
         netlink: Avoid crash upon missing NFTNL_OBJ_CT_TIMEOUT_ARRAY


author: chenyanpanHW <chenyanpan@huawei.com> - 4.29.0-2
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/nspr-gcc-atomics.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yixiangzhike <yixiangzhike007@163.com> - 0.9.12-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:Move temporary files from /var/run to /run to delete warning in installing


author: xuchenchen <xuchenchen@kylinos.cn> - 2.0.16-11
changelog:
  - backport patches from upstream
  - libnuma: Make numa_available respect EPERM
  - libnuma: fix nodemask allocation size for get_mempolicy


author: yeyiyang <yeyiyang3@h-partners.com> -v2.0.6-3
changelog:
  - add adapt dynamicsmt analysis if smt is not enable
  - fix code check
  - add trace log and change level intf and delete logger
  - smc-d analysis fix inconsistency in the display of zero connection


author: LHesperus <liuchanggeng@huawei.com> -v2.1.0-1
changelog:
  - remove the logger.h interface and add TRACE interface, increase safe_queue wait time to 5s
  - support reload log-level online
  - adapt analysis on riscv
  - add load base sched instance


author: fly_1997 <flylove7@outlook.com> -v2.1.1-1
changelog:
  - add hwprobe_analysis for RISC-V
  - fix error logger info
  - support kernel cluster scheduler
  - adapt for kylin-v10-sp3
  - realtime tune add new tuning item
  - fix smc insmod err
  - realtime tune skip grubby update
  - add hwprobe_tune hwprobe_ext_zbb_tune for RISC-V
  - add high_load value check


author: xujing <xujing125@huawei.com> - 30-38
changelog:
  - add the scanning path of the rpath
    fix the ELF file cannot be found due to escape of '\'
    excute brp_chrpath before arch_install_post


author: Funda Wang <fundawang@yeah.net> - 0.21.0-11
changelog:
  - fix CVE-2024-8443, CVE-2024-45615, CVE-2024-45616,
    CVE-2024-45617, CVE-2024-45618, CVE-2024-45619, CVE-2024-45620


author: chenyanpanHW <chenyanpan@huawei.com> - 2.0.0-26
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-multicast-set.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-notify-systemd-of-start-up.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-null-pointer-deref.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-openssl-1.1-fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-cve-2016-7567.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-cve-2017-17833.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/CVE-2012-4428-fix-handling-of-string-list-in-slp_common-c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/Fix-slp_iface-c-comma-expression-so-it-works-as-designed.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/Daemon-sends-wrong-service-reply-when-security-is-enabled.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/Fix-DAAddresses-hostname-resolution-issue.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/Change-default-slpreg-connection-from-UDP-to-TCP.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/Fix-interface-parsing-code-to-look-for-null-ifc-addrs.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/Fix-broadcast-functionality.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/Properly-initialize-xcastsocks-for-error-exit.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/Fix-xrealloc-to-properly-free-original-pointer-on-resize.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/CVE-2019-5544.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: xingwei <xingwei14@h-partners.com> - 2.0.0-27
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Introduce epoch command to slove package upgrade failure problem


author: zhangbinqin<zhangbinqin@h-partners.com> - 8.8p1-41
changelog:
  - Type:CVE
  - CVE:CVE-2026-35414 CVE-2026-35385 CVE-2026-35386 CVE-2026-35387 CVE-2026-35388
  - SUG:NA
  - DESC:fix CVE-2026-35414 CVE-2026-35385 CVE-2026-35386 CVE-2026-35387 CVE-2026-35388


author: fly_fzc <2385803914@qq.com> - 1:1.1.1wa-15
changelog:
  - fix CVE-2025-68160 CVE-2026-22796 CVE-2026-22795 CVE-2025-69418 CVE-2025-69421 CVE-2025-69419 CVE-2025-69420


author: wujie <wujie@nj.iscas.ac.cn> - 5.6.0-10
changelog:
  - add support for riscv64 from http://fedora.riscv.rocks/koji/buildinfo?buildID=31200
    Author is David Abdurachmanov <david.abdurachmanov@gmail.com>


author: wangkai <13474090681@163.com> - 5.3.7-6
changelog:
  - Fix CVE-2024-45769,CVE-2024-45770
  - Fix buffer sizing checks in pmstore PDU handling (RHEL-57805)
  - Guard against symlink attacks in pmpost program (RHEL-57810)
  - Fix libpcp_web webgroup slow request refcounting (RHEL-58306)
  - Updated pmdahacluster for newer crm_mon versions (RHEL-50693)
  - Fix invalid memory access in pmfind utility (BZ 2135314)


author: chenyanpanHW <chenyanpan@huawei.com> - 1.9.0-3
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-pcscdaemon.c-Fix-data-race-for-AraKiri-variable.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Guofeng Yue <yueguofeng@h-partners.com> - 4.5-12
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: modify "--source_ip" to "--bind_source_ip" to fix init connection establishment with specific interface


author: wuchaochao <wuchaochao4@huawei.com> - 0.41-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Modify the spec file ,solving the problem of the test probability failure


author: wangjiang <app@cameyan.com> - 2.072-3
changelog:
  - Passing NO_NETWORK_TESTING=1 as an environment variable
    solves the interactive issue required for using rpmbuild locally


author: huyubiao <huyubiao@huawei.com> - 1:1.07_01-1
changelog:
  - Upgrade version to 1.07_01

  Thu Jul 22 2021 Jiuyue Ma <majiuyue@huawei.com> - 1:1.07-420
  - fix conflict package file '/usr/share/perl5/vendor_perl/Pod'


author: weijin deng <weijin.deng@turbolinux.com.cn> - 0.3.15-1
changelog:
  - Upgrade to 0.3.15
  - Update Version, Source0, BuildRequires, Obsoletes
  - Update stage 'build', 'install' and 'files'
  - Correct uncorrect date, add one patch


author: gaihuiying <eaglegai@163.com> - 0.9.5-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add macros to control if need libdrm, pango, libpng and if need to exclude bootlog


author: openEuler Buildteam <buildteam@openeuler.org> - 0.4.9-4
changelog:
  -Type:enhancement
  -Id:NA
  -SUG:NA
  -DESC:Increase the ability of encoding files for use with libpoppler


author: gaihuiying <eaglegai@163.com> - 2.4.9-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream
         Fixing up parsing in radiusclient.conf


author: chenyanpanHW <chenyanpan@huawei.com> - 3.22-52
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/procmail-3.22-rhconfig.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/procmail-3.15.1-man.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/procmail_3.22-8.debian.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/procmail-3.22-truncate.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/procmail-3.22-ipv6.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/procmail-3.22-getline.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/procmail-3.22-CVE-2014-3618.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/procmail-3.22-crash-fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/procmail-3.22-CVE-2017-16844.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Zhu Jin <zhujin18@huawei.com> - 4.0.2-16
changelog:
  - library: address a potential race resulting in a fault and avoid strdup() calls in sd2proc() if possible


author: zhengxiaoxiao <zhengxiaoxiao2@huawei.com> - 3.14.0-11
changelog:
  - Type:CVE
  - CVE:CVE-2026-0994
  - SUG:NA
  - DESC:Fix Any recursion depth bypass in Python json_format.ParseDict


author: ouyangminxiang <ouyangminxiang@kylinsec.com.cn> - 15.0-7
changelog:
  - Fix mate-volume-control-status-icon doesn't work
  - Fix the problem that the muted function in mate-volume-control-status-icon doesn't work when the system is boot
  - Recompile systemd post scripts for pulseaudio


author: fuanan <fuanan3@h-partners.com> - 3.9.9-50
changelog:
  - Type:CVE
  - CVE:CVE-2025-12084 CVE-2025-13836 CVE-2025-13837
  - SUG:NA
  - DESC:fix CVE-2025-12084 CVE-2025-13836 CVE-2025-13837


author: Qin Fandong <qinfandong@kylinos.cn> - 3.9.9-58
changelog:
  - Type:CVE
  - ID:CVE-2026-6879
  - SUG:NA
  - DESC:fix CVE-2026-6879: avoid quadratic behavior in xml.etree.ElementPath index predicates


author: imxcc <xingchaochao@huawei.com> - 6.2.0-2
changelog:
  - setup: use pytest instead of nose to run the test suite
  - spec: use pytest instead of nose
  - Update readme to mention pytest instead of nose
  - Fix PY_SSIZE_T_CLEAN deprecation warning
  - Avoid use of thread function deprecated in 3.9
  - Replace deprecated PyEval_CallObject with PyObject_Call


author: shixuantong <shixuantong@huawei.com> - 7.43.0.6-2
changelog:
  - fix test fail for test_sslversion_options, test_failonerror and test_failonerror_status_line_invalid_utf8_python3


author: xihaochen <xihaochen@huawei.com> - 2020.5-1
changelog:
  - Type:requirements                                                                                                                                  
  - Id:NA
  - SUG:NA
  - DESC:update pytz to 2020.5


author: yixiangzhike <yixiangzhike007@163.com> - 2.6.1-24
changelog:
  - KRB5: fix mem leak in authenticate_stored_users (8b452b3)
  - KCM: fix use-after-free in kcm_read_options (50ae35f)


author: gaihuiying <eaglegai@163.com> - 1.13.2-21
changelog:
  - Type:CVE
  - CVE:CVE-2025-11411
  - SUG:NA
  - DESC:Additional fix for CVE-2025-11411 to include YXDOMAIN and non-referral nodata answers in the mitigation


author: gaihuiying <eaglegai@163.com> - 1.13.2-22
changelog:
  - Type:cves
  - CVE:CVE-2026-33278,CVE-2026-41292,CVE-2026-42959,CVE-2026-42960
  - SUG:NA
  - DESC:fix CVE-2026-33278,CVE-2026-41292,CVE-2026-42959,CVE-2026-42960


author: gaihuiying <eaglegai@163.com> - 1.13.2-23
changelog:
  - Type:cves
  - CVE:CVE-2026-32792,CVE-2026-42923,CVE-2026-40622,CVE-2026-42534,CVE-2026-44390
  - SUG:NA
  - DESC:fix CVE-2026-32792,CVE-2026-42923,CVE-2026-40622,CVE-2026-42534,CVE-2026-44390


author: gaihuiying <eaglegai@163.com> - 1.13.2-25
changelog:
  - Type:CVE
  - CVE:CVE-2026-46582,CVE-2026-44621,CVE-2026-44690,CVE-2026-50243,CVE-2026-50248,CVE-2026-50251,CVE-2026-55708,CVE-2026-55717,CVE-2026-55990,CVE-2026-56416
  - SUG:NA
  - DESC:fix CVE-2026-46582,CVE-2026-44621,CVE-2026-44690,CVE-2026-50243,CVE-2026-50248,CVE-2026-50251,CVE-2026-55708,CVE-2026-55717,CVE-2026-55990,CVE-2026-56416


author: <fengjiabo1@huawei.com> - 10:6.2.0-109
changelog:
  - migration:Extand the fdtable in the incoming phase of migration
  - qemu6.2.0: Add trace to measure hot migrate downtime


author: Pengrui Zhang <zhangpengrui@huawei.com> - 10:6.2.0-111
changelog:
  - target/i386: Add Hygon Dhyana-v3 CPU model
  - target/i386: Add new Hygon 'Dharma' CPU model
  - migration: Don't sync volatile memory after migration completes
  - hw/display/framebuffer: Add cast to force 64x64 multiply
  - vmxcap: Add 5-level EPT bit
  - i386: Add Icelake-Server-v6 CPU model with 5-level EPT support
  - vmxcap: add tertiary execution controls
  - target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  - target/i386: enumerate bit 56 of MSR_IA32_VMX_BASIC
  - target/i386: fix feature dependency for WAITPKG
  - target/i386: add support for LAM in CPUID enumeration
  - target/i386: add control bits support for LAM
  - target/i386: add support for FRED in CPUID enumeration
  - target/i386: mark CR4.FRED not reserved
  - vmxcap: add support for VMX FRED controls
  - target/i386: enumerate VMX nested-exception support
  - target/i386: Add get/set/migrate support for FRED MSRs
  - target/i386: Delete duplicated macro definition CR4_FRED_MASK
  - target/i386: Add VMX control bits for nested FRED support
  - target/i386: Raise the highest index value used for any VMCS encoding
  - target/i386: Add more features enumerated by CPUID.7.2.EDX
  - target/i386: pass X86CPU to x86_cpu_get_supported_feature_word
  - i386/cpuid: Remove subleaf constraint on CPUID leaf 1F
  - target/i386: Don't construct a all-zero entry for CPUID[0xD 0x3f]
  - target/i386: Enable fdp-excptn-only and zero-fcs-fds
  - target/i386: Construct CPUID 2 as stateful iff times > 1
  - target/i386: Make invtsc migratable when user sets tsc-khz explicitly
  - target/i386/cpu: Fix notes for CPU models
  - target/i386: Introduce SierraForest-v2 model
  - target/i386: Export BHI_NO bit to guests
  - target/i386: Add new CPU model ClearwaterForest
  - docs: Add GNR, SRF and CWF CPU models
  - target/i386: add sha512, sm3, sm4 feature bits
  - target/i386: add avx-vnni-int16 feature
  - net: pad packets to minimum length in qemu_receive_packet()(CVE-2025-12464)
  - block-qdict: Fix-Werror=maybe-uninitialized build failure
  - block/curl.c: Check error return from curl_easy_setopt()
  - block: Handle curl 7.55.0..7.85.0 version changes
  - amd_iommu: fix uninitialized werror
  - io: release active GSource in TLS channel finalizer
  - io: move websocket resource release to close method
  - io: fix use after free in websocket handshake code(CVE-2025-11234)


author: Pengrui Zhang <zhangpengrui@huawei.com> - 10:6.2.0-113
changelog:
  - cryptodev-builtin: Limit the maximum size(CVE-2025-14876)
  - block/vmdk: fix OOB read in vmdk_read_extent()(CVE-2026-2243)
  - lsi53c895a: keep a reference to the device while SCRIPTS execute(CVE-2024-6519)


author: Fei Xu <xufei30@huawei.com> - 10:6.2.0-114
changelog:
  - ui/vnc: fix OOB read updating VNC update frequency stats(CVE-2026-48003)
  - virtio-blk: add missing VIRTIO_BLK_T_SCSI_CMD size check (CVE-2026-48914)


author: Fei Xu <xufei30@huawei.com> - 10:6.2.0-115
changelog:
  - hw/net/rocker_of_dpa: Check group ID pointers are not NULL(CVE-2022-36648)
  - hw/net/rocker_of_dpa: Avoid unaligned accesses in _of_dpa_flow_match()
  - scsi: Add buf_len parameter to scsi_req_new()
  - virtio-scsi: pass the same cdb_size to virtio_scsi_pop_req and virtio_scsi_handle_cmd_req_prepare(CVE-2026-5763)


author: Fei Xu <xufei30@huawei.com> - 10:6.2.0-117
changelog:
  - hw/usb/hcd-xhci-sysbus: Fix OOB heap access in xhci_sysbus_intr_raise() (CVE-2026-16043)
  - hw/9pfs: add xattr FID limit to prevent memory exhaustion (CVE-2026-8348)
  - ui/vnc: validate SetPixelFormat field ranges (CVE-2026-15578)
  - usbredir: fix use-after-free on buffered bulk packet overflow (CVE-2026-15705)
  - usbredir: fix infinite loop and SIGFPE with zero max_packet_size (CVE-2026-63319)
  - hw/9pfs: add response_buffer_size transport callback
  - 9pfs/virtio: implement response_buffer_size callback
  - 9pfs/xen: implement response_buffer_size callback
  - hw/9pfs: cap Treaddir allocation (CVE-2026-9238)
  - ui/vnc: fix OOB write in VNC stats array (CVE-2026-48002)
  - ui/vnc: fix OOB write in lossy rect worker code (CVE-2026-48002)
  - ui/vnc: fix OOB write in vnc_refresh_lossy_rect (CVE-2026-48002)
  - ui/vnc: fix out-of-bounds write in lossy refresh dirty marking (CVE-2026-61475)
  - ui/vnc: remove redundant rows computation
  - hw/9pfs: fix O_TRUNC bypass on read-only export (CVE-2026-63318)


author: lifeifei <lifeifei@kylinos.cn> - 2.19-3
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Add the socket option IPV6_MULTICAST_LOOP to prevent the interface from autoconfiguring using RA messages sent by itself.


author: Bing Xia <xiabing12@h-partners.com> - 0.6.7-20
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix for vendor errors are not recorded in the SQLite database if 
         some cpus are offline at the system start


author: yangjunshuo <yangjunshuo@huawei.com> - 0.6.7-21
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix cpu isolate errors when some cpus are offline
    before the service started


author: Donghua Huang <huangdonghua3@h-partners.com> - 41.0-40
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: libhns: Fix wrong WQE data in new post send API when QP wraps around


author: Donghua Huang <huangdonghua3@h-partners.com> - 41.0-45
changelog:
  - Type: feature
  - ID: NA
  - SUG: NA
  - DESC: Add tracing support for libhns, including HNS RoCE I/O tracepoints and USDT support


author: Donghua Huang <huangdonghua3@h-partners.com> - 41.0-47
changelog:
  - Type: feature
  - ID: NA
  - SUG: NA
  - DESC: Fix missing CQE when UD QP uses different SL and zero-length message error


author: sunsuwan <sunsuwan3@huawei.com> - 1.2.6-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:add a user directory when the rpc user directory does not exist


author: dongyuzhen <dongyuzhen@h-partners.com> - 2.16-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix failure when recompiling noarch rpm and remove the require to rpm-build


author: dongyuzhen <dongyuzhen@h-partners.com> - 2.16-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:revert: remove the require to rpm-build.For consistency with other community-released dependencies


author: yixiangzhike <yixiangzhike007@163.com> - 2.16-13
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:avoid truncate trailer space and do not escape backslash when read filename


author: yixiangzhike <yixiangzhike007@163.com> - 2.16-14
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:revert "avoid truncate trailer space and do not escape backslash when read filename"


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 8.2210.0-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:tcp net subsystem: handle data race gracefully
         fix startup issue on modern systemd systems
         tcpflood bugfix: plain tcp send error not properly reported
         tcpflood bugfix: TCP sending was not implemented properly
         lookup tables: fix static analyzer issue
         lookup tables bugfix: reload on HUP did not work when backgrounded
         openssl: Replaced depreceated method SSLv23_method with TLS_method
         mmnormalize bugfix: if msg cannot be parsed, parser chain is stopped
         core bugfix: potential segfault on busy systems
         imfile: fix ext directory's fd leak in case of inotify on symlink
         imfile tests: ext directory's fd leak in case of inotify on symlink


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 8.2210.0-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:imfile: remove state file on file delete fix
         omfile: do not carry out actual action when writing to /dev/null
         core bugfix: rsyslog messages may not always have FQDN


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 8.2210.0-10
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:rainerscript: do not try to call a function if it does not exist
         gnutls bugfix: Avoid blocking sockets during TLS handshake
         gnutls bugfix: Add timeout to GnuTLS handshake
         core: fix potential NULL ptr access on HUP in very early startup phase
         omfwd: fix segfault in UDP freeaddrinfo
         gnutls TLS driver: fix small memory leak
         rsyslog startup bugfix: cosmetic memory leak
         core: fix potential misadressing in sigmask
         covscan: remove defect type of RESOURCE_LEAK
         Fix a buffer overflow when the argument to replace is empty
         Fix passing the value to EscapeChar
         Do not free the uninitialized cstring
         Keep original free pattern
         network subsystem: improve connection failure error message
         Fix runConf NULL pointer refence
         nsd_ptcp regression fix: remove debugging messages emited to stderr


author: wangjiang <wangjiang37@h-partners.com> - 35.5-17
changelog:
  - backport patch Allow virt_domain read device sysctls
                   Allow icecast rename its log files


author: yanglu<yanglu72@h-partners.com> - 8.17.1-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix newaliases command error and postfix service start execption after sendmail install


author: wjiang <app@cameyan.com> - 15.6-28
changelog:
  - backport bugfix patches from upstream
  - Fix build with binutils 2.46 (c4665d2)
  - Fix memory leak on TPM log error in mirror_one_mok_variable (92630f2)


author: chenyanpanHW <chenyanpan@huawei.com> - 4.4-4
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0003-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0004-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0005-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0006-pseudo-fix-possible-dereference-of-NULL-pointer.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: xinghe <xinghe2@h-partners.com> - 7:4.9-29
changelog:
  - Type:cves
  - ID:CVE-2023-49288 CVE-2025-54574 CVE-2023-5824 CVE-2025-62168
  - SUG:NA
  - DESC:fix CVE-2023-49288 CVE-2025-54574 CVE-2023-5824 CVE-2025-62168


author: Jie Yang <yangjieyj.yang@huawei.com> - 2.0.0-6
changelog:
  - docs: fix some statement
  - machine_manager: add autodeflate for balloon
  - migration: add dev_id into VirtioPciState when save and restore device state
  - machine: fix more than one pcie-root-ports with same id
  - migration: move function "transport_reset" to save state stage for vhost vsock device
  - vfio: adding ram device region to vfio bar region
  - machine_manager: move argument "serial" from -drive to -device virtio-blk-pci/device
  - machine_manager: add multifunction for devices
  - machine: add init_multifunction function to init multifunction
  - machine: add realization for multifunction


author: Jie Yang <yangjieyj.yang@huawei.com> - 2.1.0-1
changelog:
  - Add support for PCIe native hotplugging.
  - Reduce memory consumption of reading edk2 firmware files on aarch64.
  - Add support for booting from disk image directly.
  - Add support for VM reboot and VM shutdown.
  - Add support for guest memory preallocation.
  - Add more test cases.
  - Add and fix documentation.
  - Replace lazy_static crate with once_cell.
  - Performance enhancement for virtio-blk and virtio-net devices.
  - Add ftrace support.


author: Jie Yang <yangjieyj.yang@huawei.com> - 2.1.0-2
changelog:
  - Fix VFIO hotplugging failure caused by missing seccomp rules.
  - Fix booting failure from disk image on x86_64.
  - Update some documents.


author: Jie Yang <yangjieyj.yang@huawei.com> - 2.1.0-3
changelog:
  - Fix memory snapshot failure with hotplugged devices.
  - Fix address translation for virtio devices.
  - Add some test cases for microvm.
  - Update some documents.


author: yixiangzhike <yixiangzhike007@163.com> - 1.9.8p2-21
changelog:
  - apply 2 patches: backport-sudo_rfc1938_setup--fix-out-of-bounds-read-if-the-.patch, backport-sudo_auth_init--Fix-setting-FLAG_ONEANDONLY-if-onl.patch


author: yangjiaqi<yangjiaqi16@huawei.com> - 0.9-57
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:use file locks to avoid remounting the sharepath/master dir


author: yangjiaqi<yangjiaqi16@huawei.com> - 0.9-58
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:clean up run/syscontainer-tools/netns/container_id directory residues in the prestart phase


author: zhangxianting <zhangxianting@uniontech.com> - 0.9-64
changelog:
  - Type:patch
  - CVE:NA
  - SUG:NA
  - DESC:patch hunk FAILED bacause of the arch judgement of sw_64 and loongarch64


author: lingsheng <lingsheng1@h-partners.com> - 6.04-16
changelog:
  - update libpng 1.6.36 to fix CVE-2011-2501 CVE-2011-2690 CVE-2011-2691
  - CVE-2011-2692 CVE-2011-3045 CVE-2011-3048 CVE-2012-3425 CVE-2015-7981
  - CVE-2015-8126 CVE-2015-8472 CVE-2015-8540 CVE-2016-10087 CVE-2017-12652


author: wjiang <app@cameyan.com> - 249-108
changelog:
  - backport community patches:
        backport-login-user-runtime-dir-free-ignored-sd_bus_error-avo.patch
        backport-login-user-runtime-dir-use-STRLEN-where-appropriate.patch
        backport-systemctl-gracefully-adjust-bus-transport-and-runtim.patch
        backport-journal-do-not-rotate-journal-when-MaxRetentionSec-i.patch
        backport-compress-avoid-a-bunch-of-div-by-zeroes.patch


author: yixiangzhike <yixiangzhike007@163.com> - 249-110
changelog:
  - fix coredump generation when systemd-resolved and systemd-networkd service is started then uninstalled


author: langfei<langfei@huawei.com> - 4.5-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Resolve stap-exporter.service chenge to disable when upgraded systemtap-stap-exporter package


author: yangzhuangzhuang <yangzhuangzhaung1@huawei.com> - 1:8.6.10-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:The "no acceptable C compiler found" error message is displayed during compilation.Therefore,add buildrequires gcc.


author: yixiangzhike <yixiangzhike007@163.com> - 1:8.6.12-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert "Change wrong Provides. Replace 1:8.6.10 to epoch:version"


author: Funda Wang <fundawang@yeah.net> - 0.8.2-15
changelog:
  - move glib schemas into main package
  - drop static lib as it was not used by any other packages
  - drop uselss scriptlets as they are handled by rpm file trigger already


author: gaihuiying <eaglegai@163.com> - 1:0.17-80
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix telnet crashes on stack overflow due to infinite recursion.


author: sunguoshuai <sunguoshuai@huawei.com> - 8:2018-26
changelog:
  - Remove texlive-collection-langother,texlive-scheme-full,texlive-scheme-tetex
    who requires texlive-vntex


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com>- 0.6-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:The "cc:No such file or directroy" error message is displayed during compilation.Therefore,add buildrequires gcc.
         The macro unitdir is used.Therefore,add buildrequires systemd


author: wangshuo <wangshuo@kylinos.cn> - 3.0.5-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix the SIGSYS coredump issue that occurs when executing
  -      the /usr/libexec/tracker-extract-3 command


author: Liu Chao <liuchao173@huawei.com> - 2.24.1-1
changelog:
  - Upgrade to 2.24.1:
    - fixed privileged execution of arbitrary scripts by active local user. (CVE-2024-52336)
    - added sanity checks for API methods parameters. (CVE-2024-52337)


author: tianmuyang <tianmuyang@huawei.com> - 2.24.1-3
changelog:
  - profiles: add programmable scheduling based on eBPF
  - package:  change package tuned to architecture-dependent


author: tianmuyang <tianmuyang@huawei.com> - 2.24.1-5
changelog:
  - tuned-ebpf: Add pid cache to avoid binding one process for multiple times
  - tuned-ebpf: Add "AND" logic of cpu mask in eBPF programmable schedule


author: langfei <langfei@huawei.com> - 2022a-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Aysén Region moves from -04/-03 to -03; new zone;
  -	Improve recent commentary for Chilean decrees.


author: Liu Chao <liuchao173@huawei.com> - 2022a-22
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Moldova has used EU transition times since 2022
  	Most of BC moves from PDT to Pacific Time on 03-09
  	Delay America/Vancouver tm_isdst transition


author: yueyuankun <yueyuankun@kylinos.cn> - 1:3.16.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:arm64: Handle sp, lr, fp as DwReg in CfiExpr
         sync arm64-Handle-sp-lr-fp-as-DwReg-in-CfiExpr.patch


author: yangzhuangzhuang<yangzhuangzhuang1@huawei.com> - 0.3.12-3
changelog:
  - The "no acceptable C compiler found" error message is displayed during compilation.Therefore,add buildrequires gcc.


author: mahailiang <mahailiang@uniontech.com> - 1.1.3-6
changelog:
  - xdg-email: Support for Deepin
  - Restore matching of older deepin names
  - Add new case for Deepin while detecting DE


author: liuh <liuhuan01@kylinos.cn> - 5.14.1-19
changelog:
  - sync patch from community
    xfs_repair: don't leak the rootdir inode when orphanage already exists


author: xihaochen <xihaochen@huawei.com> - 2.5.0-1
changelog:
  - Type:requirements                                                                                                                                  
  - Id:NA
  - SUG:NA
  - DESC:update xorg-x11-drv-vesa to 2.5.0


author: xuyan <xuyan1481@phytium.com> - 1.20.11-41
changelog:
  - Type:feature
  - CVE:NA
  - SUG:NA
  - DESC:Fix possible Xorg crashes for ps23xx when using  ast and pe2201 bmc card.


author: lingsheng <ultra_planet@qq.com> - 1.20.11-42
changelog:
  - fix CVE-2022-49737 CVE-2025-49175 CVE-2025-49176 CVE-2025-49178 CVE-2025-49179 CVE-2025-49180 CVE-2025-62229 CVE-2025-62230 CVE-2025-62231


author: lingsheng <ultra_planet@qq.com> - 1.20.11-44
changelog:
  - fix CVE-2026-50256 CVE-2026-50257 CVE-2026-50258 CVE-2026-50259 CVE-2026-50260 CVE-2026-50261 CVE-2026-50262 CVE-2026-50263 CVE-2026-50264


author: wangkerong <wangkerong@h-partners.com> - 7.8-1
changelog:
  - upgrade to setxkbmap-1.3.3
  - upgrade to xkbcomp-1.4.5
  - upgrade to xkbprint-1.0.6
  - upgrade to xkbutils-1.0.5


author: luhuaxin <luhuaxin@huawei.com> - 1.3-39
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC: move gxvattr to main package, move AUTHORS to license folder


author: xingwei <xingwei14@h-partners.com> - 4.2.3-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add haveged requires and optimize random number function replacement patch


author: yanglu <yanglu72@huawei.com> - 4.1-6
changelog:
  - DESC:delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ypserv-2.5-nfsnobody2.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ypserv-2.13-ypxfr-zeroresp.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ypserv-2.13-nonedomain.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ypserv-2.19-slp-warning.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ypserv-4.0-manfix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ypserv-2.24-aliases.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ypserv-2.27-confpost.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ypserv-2.31-netgrprecur.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ypserv-4.0-headers.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ypserv-4.0-selinux-context.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  ,and delete BuildRequires git


author: xu_ping <707078654@qq.com> - 0.2.44-2
changelog:
  - Remove redundant fc-cache scriptlets, fontconfig provides global %transfiletrigger 
    to refresh font cache automatically


