# changelog

author: yaoxin <yao_xin001@hoperun.com> - 3.1.1-1
changelog:
  - Update to 3.1.1
    * Security fix for CVE-2024-6237,CVE-2024-5953,CVE-2024-3657,CVE-2024-2199
    * Issue 6172 - RFE: improve the performance of evaluation of filter component 
      when tested against a large valueset (like group members) #6173
    * Issue 6181 - RFE - Allow system to manage uid/gid at startup
    * Issue 6238 - RFE - add option to write audit log in JSON format
    * Issue 6241 - Add support for CRYPT-YESCRYPT #6242
    * Issue 5772 - ONE LEVEL search fails to return sub-suffixes #6219
    * Issue 6123 - Allow DNA plugin to reuse global config for bind method and connection protocol #6124
    * Issue 6155 - ldap-agent fails to start because of permission error #6179
    * Issue 6170 - audit log buffering doesn’t handle large updates
    * Issue 6175 - Referential integrity plugin - in referint_thread_func does not handle null from ldap_utf8strtok #6168
    * Issue 6183 - Slow ldif2db import on a newly created BDB backend #6208
    * Issue 6199 - unprotected search query during certificate based authentication #6205
    * Issue 6224 - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes #6225
    * Issue 6229 - After an initial failure, subsequent online backups fail #6230
    * Issue 6254 - Enabling replication for a sub suffix crashes browser #6255
    * Issue 6256 - nsslapd-numlisteners limit is not enforced
    * Issue 6265 - lmdb - missing entries in range searches #6266
    * Please see log - https://www.port389.org/docs/389ds/releases/release-3-1-1


author: li-miaomiao_zhr<mmlidc@isoftstone.com> - 1.0.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix wrong file name referenced in spec file causing build failure,remove spec file from the source package


author: wangkai <13474090681@163.com> - 0.22.1-1
changelog:
  - Update to 0.22.1
  - Fix CVE-2026-20884, CVE-2026-20889, CVE-2026-20911, CVE-2026-21413,
    CVE-2026-24450, CVE-2026-24660, CVE-2026-5318, CVE-2026-5342


author: panchenbo <panchenbo@kylinsec.com.cn> - 1.22.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix build error: add missing BuildRequires:pkgconfig(polkit-gobject-1)


author: qinxue <qinxue6@h-partners.com> - 1:1.44.2-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:mptcp fix error handling rp_filter when kernel don't support mptcp


author: yaoxin <yao_xin001@hoperun.com> - 1.2.24-1
changelog:
  - Update to 1.2.24:
    * Fixed formatting of ipsec.conf snippet. This is a security
    issue with severity of "Important." (CVE-2024-9050)
    * Added support for "require-id-on-certificate" setting.
    * Updated Georgian, Slovenian and Ukrainian translations.


author: zhouyihang <zhouyihang3@h-partners.com> - 1.2.8-2
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: pkcon: Use appropriate callbacks for client / task async calls


author: lingsheng <lingsheng1@h-partners.com> - 1.2.8-3
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: Revert PkClient: Replace the GSimpleAsyncResult with the GTask API


author: Funda Wang <fundawang@yeah.net> - 1.2.8-4
changelog:
  - move dbus interface to main package
  - split out gtk module from devel sub package
  - cleanup buildrequires


author: yinsist <jianhui.oerv@isrc.iscas.ac.cn> - 4.0.5-4
changelog:
  - Valgrind does not support certain architectures like RISC-V, Before depending on Valgrind, first check if Valgrind supports the architecture


author: yixiangzhike <yixiangzhike007@163.com> - 2.3.1-7
changelog:
  - Fix CVE-2026-54369 CVE-2026-54370
  - New API acl_get_file_at, acl_set_file_at, acl_extended_file_at, acl_delete_def_file_at
  - New provided symbol LIBACL_1_3 for new API in libacl
  - The change that commands like 'getfacl -P symlink' or 'setfacl -P symlink' will fail now


author: yixiangzhike <yixiangzhike007@163.com> - 0.18.6-3
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: backport upstream patch to fix parsing of lowercase group names


author: yixiangzhike <yixiangzhike007@163.com> - 0.18.6-4
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: backport upstream patch to fix concurrent reading of extended attributes


author: Wenlong Zhang <zhangwenlong@loongson.cn> - 36.16.5-52
changelog:
  - Type:bugfix
   - ID:NA
   - SUG:NA
   - DESC:Fixed the issue of "D_isable root account" not being translated

   * Fri Feb 27 2026 zhaoyognhao <zhaoyonghao10@h-partners.com> - 36.16.5-51
   - Type:feature
   - ID:NA
   - SUG:NA
   - DESC: enable ssh login checkbox


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 36.16.5-54
changelog:
  - Type:feature
  - ID:NA
  - SUG:NA
  - DESC: add kernel 64k page size and kernel options Chinese translation support

   * Mon Mar 9 2026 zhaoyonghao <zhaoyognhao10@h-partners.com> - 36.16.5-53
   - Type:requirement
   - ID:NA
   - SUG:NA
   - DESC:Port GUI kernel switcher for ARM 64k


author: yueyuankun <yueyuankun@kylinos.cn> - 36.16.5-55
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix permissions of the ssh config created by Anaconda
          fix(users): ensure SSH config directory exists before writing


author: mapengyuan <mapengyuan@xfusion.com> - 5.3.1-16
changelog:
  - Type:CVE
  - CVE:CVE-2025-2754 CVE-2025-2756 CVE-2025-5200
  - SUG:NA
  - DESC:fix CVE-2025-2754 CVE-2025-2756 CVE-2025-5200


author: majianhan <majianhan@kylinos.cn> - 5.3.1-17
changelog:
  - Type:CVE
  - CVE:CVE-2025-2752 CVE-2025-2755 CVE-2025-5201 CVE-2025-5202 CVE-2025-5203 CVE-2025-5204
  - SUG:NA
  - DESC:fix CVE-2025-2752 CVE-2025-2755 CVE-2025-5201 CVE-2025-5202 CVE-2025-5203 CVE-2025-5204


author: yaoxin <1024769339@qq.com> - 5.3.1-20
changelog:
  - Fix some CVEs: CVE-2025-70067, CVE-2025-70069, CVE-2025-70070,
    CVE-2025-70071, CVE-2025-70072, CVE-2026-10200, CVE-2026-10232,
    CVE-2026-14610


author: yanglongkang<yanglongkang@h-partners.com> - 3.2.2-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Adding Patching Operations
         provides relibility and self-healing capabilities for service


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 3.2.5-2
changelog:
  - Type：update
  - ID：NA
  - SUG:NA
  - DESC: Modify the license to SPDX format
          Delete MIT and Public Domain license because it no longer appears in the upstream source


author: zhangpan <zhangpan103@h-partners.com> - 2.51.0-5
changelog:
  - add macros to control if need /usr/bin/xprop
  - at-spi2-core-help package provided at-spi2-atk-help


author: baizhonggui <baizhonggui@huawei.com> - 0.2.92-3
changelog:
  - Fix building error: File must begin with "/": /usr/lib/systemd/system/attest_ra_server.service
  - Add systemd in BuildRequires


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 1:3.1.2-12
changelog:
  - backport patches for fixing Wimplicit-function-declaration, Wbuiltin-declaration-mismatch when building with newer compilers


author: Ge Wang <wang__ge@126.com> - 1.0-0.34
changelog:
  - Replace buildrequire kde-filesystem with kde4-filesystem due to kde-filesytem updated to version 5-1


author: wangyuhang <wangyuhang27@huawei.com> -5.2.15-13
changelog:
  - remove the log message for failing to open cmdline,
    and ensure that the mayexec function does not modify the value of errno.


author: yixiangzhike <yixiangzhike007@163.com> - 5.2.15-16
changelog:
  - sync patches from bash community:
     fix default file descriptor for <> redirection when printing command
     update BASH_COMMAND for subshells
     fix potential file descriptor leak in here document pipes


author: liequan che <cheliequan@inspur.com> - 1.1-4
changelog:
  - add bcache-export-cached to export CACHED_UUID and CACHED_LABEL,so that 69-bcache.rules
  udev rules can correctly create uuid and label links for bcache devices


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-3
changelog:
  - Type:CVE
  - CVE:CVE-2024-0760,CVE-2024-1737,CVE-2024-1975,CVE-2024-4076
  - SUG:NA
  - DESC:fix CVE-2024-0760,CVE-2024-1737,CVE-2024-1975,CVE-2024-4076


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-4
changelog:
  - Type:CVE
  - CVE:CVE-2024-11187,CVE-2024-12705
  - SUG:NA
  - DESC:fix CVE-2024-111878 and CVE-2024-12705


author: tangce<tangce1@huawei.com> - 32:9.18.21-5
changelog:
  - Type:CVE
  - CVE:CVE-2025-8677,CVE-2025-40778,CVE-2025-40780
  - SUG:NA
  - DESC:fix CVE-2025-8677,CVE-2025-40778,CVE-2025-40780


author: tangce <tangce1@h-partners.com> - 32:9.20.21-2
changelog:
  - Type:CVE
  - CVE:CVE-2026-3039,CVE-2026-3593,CVE-2026-3593,CVE-2026-5946,CVE-2026-5947
  ,CVE-2026-5950
  - SUG:NA
  - DESC:fix CVE-2026-3039,CVE-2026-3593,CVE-2026-3593,CVE-2026-5946,CVE-2026-5947,CVE-2026-5950


author: yueyuankun <yueyuankun@kylinos.cn> - 3.8.2-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix syntax error on SymbolKind.toString method
         fix interface syntax error


author: liuh <liuhuan01@kylinos.cn> - 6.6.3-12
changelog:
  - btrfs-progs: convert: insert a dummy inode item before inode ref for ext2/4
  - btrfs-progs: convert: for ext2, fix possible tree-checker error when converting a large fs


author: liuh <liuhuan01@kylinos.cn> - 6.6.3-17
changelog:
  - sync patch from community
    btrfs-progs: fix the wrong size from device_get_partition_size_sysfs()


author: liuh <liuhuan01@kylinos.cn> - 6.6.3-19
changelog:
  - sync patch from community
    btrfs-progs: subvolume: fix a bug that leads to unnecessary error message


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1.18.0-2
changelog:
  - Type:CVE
  - ID:CVE-2025-50422
  - SUG:NA
  - DESC:Fix a NULL access in active_edges_to_traps()
         Add unlikely() to test for x == INT32_MAX for the NULL reference


author: lvgenggeng <lvgenggeng@uniontech.com> - 1.18.0-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix "out of memory" when using linear gradient
          Fix a memory leak


author: yangyun <yangyun50@huawei.com> - 1.5.5-1
changelog:
  - update to 1.5.5 version
  	- add support of readers (see README.md)
  	- configure.ac: disable the use of --disabele-usbdropdir
  	- parse: create output.bin file
  	- udev: Disable USB-persist for CCID devices
  	- configure: fail if flex is not found
  	- some other minor improvments


author: openeuler_bot <infra@openeuler.sh> - 0.6.2.4-1
changelog:
  - fix memory leak in ECDH-ES JWE encryption/decryption (version:0.6.2.4).
  - fix rsa_q = NULL initialization in _RSA_private_fields (version:0.6.2.4).
  - fix memory allocation check (typo) in jwk.c (version:0.6.2.4).
  - fix gcc10 errors for -Werror=ignored-qualifiers and remove unused includes (version:0.6.2.4).
  - re-generate automake/autoconf files with automake v1.17 and libtool v2.5.4 (version:0.6.2.4).


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 309-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: remove incorrect provides cockpit-machines and cockpit-machines-ovirt
          remove require libvirt and libvirt-client


author: shaojiansong <shaojiansong@kylinos.cn> - 309-8
changelog:
  - Fix networking: renaming of bridges and other groups (upstream fdba746e4, RHEL-131249, backport to openEuler-24.03-LTS-Next cockpit 309, keep member activation consistent when group name is changed.)


author: shaojiansong <shaojiansong@kylinos.cn> - 309-9
changelog:
  - Fix ws: only hand out the saved password to authorize messages once. Prevents account lockout via pam_faillock when sudo sends a 'Try again' prompt, by poisoning the password after the first use.


author: hugel <gengqihu2@h-partners.com> - 9.4-12
changelog:
  - sync patches from community
  - add backport-numfmt-don-t-require-a-suffix-with-from-iec-i.patch
        backport-sort-fix-debug-buffer-overrun.patch
        backport-tac-avoid-out-of-bounds-access.patch
        backport-yes-avoid-failure-on-CHERI-protected-systems.patch


author: fuanan <fuanan3@h-partners.com> - 2.13-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert fix CVE-2015-1197 because it causes AT testcases problems


author: shenzhongwei <shenzhongwei@kylinos.cn> - 8.0.4-10
changelog:
  - remove the architecture judgment in the patches section;
  - include all patches in the source package.


author: wangxiao <wangxiao184@h-partners.com> - 8.0.4-15
changelog:
  - remove the arch judgment, include all patches in the src package
  - use patch command to apply patches for consistency in context


author: lijian1 <lijian1@kylinos.cn> - 8.0.4-17
changelog:
  - fix loongarch64 support so file extension error for elf64 lack the branch while elf32 do not need.


author: lijian <lijian2@kylinos.cn> - 1.8.7-1
changelog:
  - update to 1.8.7
  - crun: new command "crun features".
  - linux: support io_priority from the OCI specs.
  - cgroup: allow setting swap to 0.
  - cgroup, systemd: set the memory limit on the system scope.


author: Funda Wang <fundawang@yeah.net> - 1:2.4.7-7
changelog:
  - fix CVE-2025-58060, CVE-2025-58364
  - move www files into main package due to requirement by web interface


author: chenyanpan <chenyanpan@xfusion.com> - 1:2.4.7-13
changelog:
  - Fix CVE-2026-34979: Heap overflow in get_options()
  - Fix CVE-2026-34980: Filter control characters from option values


author: gaihuiying <eaglegai@163.com> - 1:2.4.7-16
changelog:
  - fix handling of multiple PPD: keywords from filters related to CVE-2026-34980
    fix a regression in shared printing from non-local accounts related to CVE-2026-27447


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-24
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:libssh: fix readdir issues
         h3: fix query of concurrent streams
         noproxy: fix the IPV6 network mask pattern match
         krb5_gssapi: fix memory leak on error path
         openldap: fix memory-leak in error path
         conn: fix hostname move on connection reuse 
         pop3: fix CAPA response termination detection
         libssh: properly free sftp_attributes
         openssl: fix a potential memory leak of params.cert


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-25
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:urlapi: avoid null deref if setting blank host to url
         urlapi: skip appending NULL pointer query


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-26
changelog:
  - Type:CVE
  - CVE:CVE-2025-14017 CVE-2025-14524 CVE-2025-14819 CVE-2025-15079 CVE-2025-15224
  - SUG:NA
  - DESC:fix CVE-2025-14017 CVE-2025-14524 CVE-2025-14819 CVE-2025-15079 CVE-2025-15224


author: zhouyihang <zhouyihang_z@163.com> - 8.4.0-27
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:formdata: validate callback is non-NULL before use
         tftp: correct the filename length check


author: zhouyihang <zhouyihang_z@163.com> - 8.4.0-28
changelog:
  - Type:CVE
  - CVE:CVE-2026-1965 CVE-2026-3783 CVE-2026-3784
  - SUG:NA
  - DESC:fix CVE-2026-1965 CVE-2026-3783 CVE-2026-3784


author: zhouyihang <zhouyihang_z@163.com> - 8.4.0-29
changelog:
  - Type:CVE
  - CVE:CVE-2026-4873 CVE-2026-5545 CVE-2026-5773 CVE-2026-6253 CVE-2026-6276 CVE-2026-6429 CVE-2026-7168
  - SUG:NA
  - DESC:fix CVE-2026-4873 CVE-2026-5545 CVE-2026-5773 CVE-2026-6253 CVE-2026-6276 CVE-2026-6429 CVE-2026-7168


author: zhouyihang <zhouyihang_z@163.com> - 8.4.0-30
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:http1: fix potential NULL dereference in Curl_h1_req_parse_read
         mqtt: fix EOF handling


author: zhouyihang <zhouyihang_z@163.com> - 8.4.0-32
changelog:
  - Type:CVE
  - CVE:CVE-2026-8286 CVE-2026-8924 CVE-2026-8927 CVE-2026-9547 CVE-2026-10536 CVE-2026-12064
  - SUG:NA
  - DESC:fix CVE-2026-8286 CVE-2026-8924 CVE-2026-8927 CVE-2026-9547 CVE-2026-10536 CVE-2026-12064


author: wangkai <13474090681@163.com> - 1.11.23-54
changelog:
  - Add patches from fedora, improve C compatibility and fix build failures caused by higher gcc versions


author: hongjinghao <hongjinghao@huawei.com> - 1:1.14.8-3
changelog:
  - sync patch from upstream
  	backport-bus-Don-t-crash-if-bus_context_create_client_policy-.patch
  	backport-bus-When-failing-to-reload-client-policy-continue-it.patch
  	backport-test-Add-a-targeted-test-for-_dbus_unix_groups_from_.patch
  	backport-userdb-Add-proper-error-reporting-when-getting-group.patch


author: liuyumeng <liuyumeng5@huawei.com> - 0.40.0-2
changelog:
  - add patch:dconf read random contents of memory causing discrepancy,initialize memory to eliminate discrepancy


author: lingsheng <lingsheng1@h-partners.com> - 2.90-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Update DNS records after pruning DHCP leases
         cache: Fix potential NULL deref in arcane situations.
         Fix potential memory leak
         Fix possible SIGSEGV in bpf.c
         allow binding mac with ip6


author: Liu Qingtao <liu.qingtao2@zte.com.cn> - 2.90-5
changelog:
  - Type:bugfix
  - CVE:
  - SUG:NA
  - DESC:Ignore Wincompatible-pointer-types error when compiling with gcc-14.3


author: luoguocui <luoguouci@h-partners.com> - 2.90-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix bounds checking in check_ia()
         Fix SEGV in Dbus code
         More fixes for DHCP ops in Dbus when DHCP not configured


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 2.90-9
changelog:
  - Type:CVE
  - CVE:CVE-2026-4890 CVE-2026-4891 CVE-2026-4892 CVE-2026-4893 CVE-2026-5172
  - SUG:NA
  - DESC:Fix NSEC bitmap parsing infinite loop
         Verify rdlen field in RRSIG packets
         Fix buffer overflow in helper.c with large CLIDs
         Fix broken client subnet validation
         Fix buffer overflow vulnerability in extract_addresses()


author: zhongjiawei<zhongjiawei1@huawei.com> - 2:18.09.0-347
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:delete redundant characters to prevent make failure in golang 1.24


author: jade_t<yzd50036@gmail.com> - 2:18.09.0-351
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix the installation conflict between docker-engine and containerd


author: wangkai <13474090681@163.com> - 1:2.3.20-4
changelog:
  - Fix CVE-2025-59031, CVE-2025-59032, CVE-2026-27855, CVE-2026-27856,
    CVE-2026-27857, CVE-2026-27858, CVE-2026-27859, CVE-2026-0394


author: huangdengdui <huangdengui@huawei.com> - 23.11-33
changelog:
  Sync some bugfixes for hns3 pmd and modifications are as follow:
   - net/hns3: fix Rx packet without CRC data
   - net/hns3: fix CRC data segment
   - net/hns3: check requirement for hardware GRO
   - net/hns3: allow use of Tx vector when fast free not enabled
   - net/hns3: allow use of Rx vector mode with VLAN filter


author: huangdengdui <huangdengui@huawei.com> - 23.11-34
changelog:
  Sync some patches about support TSO for packets with
   IPv6 extension header and modifications are as follow:
   - net: add tunnel packet type parsing
   - app/testpmd: use packet type parsing API
   - app/testpmd: fix VLAN parsing in checksum engine
   - net: fix offset in GENEVE packet parsing
   - app/testpmd: fix packet type parsing
   - net: fix GTP packet parsing
   - net: add tunnel length in UDP tunnel parsing
   - app/testpmd: fix tunnel inner info


author: huangdonghua <huangdonghua3@h-partners.com> - 23.11-36
changelog:
  Unify locks, fix Rx path and resource release:
   - net/hns3: fix inconsistent lock
   - net/hns3: fix overwrite mbuf in vector path
   - net/hns3: fix unrelease VLAN resource when init fail


author: huangdonghua <huangdonghua3@h-partners.com> - 23.11-37
changelog:
  Fix unrelease VLAN resource and L4 protocol retrieval from L3 header:
   - net/hns3: fix unrelease VLAN resource when init fail
   - app/testpmd: fix L4 protocol retrieval from L3 header


author: huangdonghua <huangdonghua3@h-partners.com> - 23.11-38
changelog:
  Upload some patches of VF multiple TC and others:
   - app/testpmd: handle IEEE1588 init failure
   - examples/l3fwd: add option to set Rx burst size
   - examples/eventdev: fix queue crash with generic pipeline
   - examples/l3fwd: add Tx burst size configuration option
   - net/hns3: remove duplicate struct field
   - net/hns3: refactor DCB module
   - net/hns3: parse max TC number for VF
   - net/hns3: support multi-TCs capability for VF
   - net/hns3: fix queue TC configuration on VF
   - net/hns3: support multi-TCs configuration for VF
   - app/testpmd: avoid crash in DCB config
   - app/testpmd: show all DCB priority TC map
   - app/testpmd: relax number of TCs in DCB command
   - app/testpmd: reuse RSS config when configuring DCB
   - app/testpmd: add prio-tc map in DCB command
   - app/testpmd: add queue restriction in DCB command
   - app/testpmd: add command to disable DCB
   - examples/l3fwd: force link speed
   - examples/l3fwd-power: force link speed
   - net/hns3: log invalid MAC address from firmware
   - config/arm: add HiSilicon HIP12
   - app/testpmd: fix DCB Tx port
   - app/testpmd: fix DCB Rx queues
   - app/testpmd: set DCB forwarding TCs
   - app/testpmd: support multi-cores process one TC
   - app/testpmd: fix inner UDP checksum offload fail


author: huangdonghua <huangdonghua3@h-partners.com> - 23.11-39
changelog:
  fix L2 length for GRE packets:
   - net: fix L2 length for GRE packets
   - net/hns3: fix outer UDP checksum fail with simple BD


author: huangdonghua <huangdonghua3@h-partners.com> - 23.11-40
changelog:
  testpmd DCB Forwarding Enhancements and hns3 Tunnel Checksum Fix:
   - app/testpmd: check start for DCB forwarding TC commands
   - app/testpmd: show DCB forwarding TC list and cores
   - net/hns3: fix L4 checksum incorrect for tunnel packets


author: qianrong <qianr@yunsilicon.com> - 23.11-41
changelog:
  Sync some bugfixes for xsc pmd and modifications are as follow:
   - net/xsc: optimize RSS queue creation
   - net/xsc: optimize QP and CQ memory allocation
   - net/xsc: optimize Rx path
   - net/xsc: optimize stop and close
   - net/xsc: fix uninitialized value
   - net/xsc: improve interrupt uninstall
   - net/xsc: support compressed PCI BAR
   - net/xsc: fix stale packet length from incomplete CQE


author: xinghe <xinghe2@h-partners.com> - 2.0.11-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix ebtables-restore --noflush failed when ebtables is uninstall


author: chenchen <chen_aka_jan@163.com> - 1:4.11-4
changelog:
  - switch to the new httpclient45 ECF provider
  - remove ECF httpclient dependency from p2 test
  - build failed with compilation failure in org.eclipse.test


author: liyanan <liyanan32@h-partners.com> - 1:4.11-8
changelog:
  - Add security compile options pie, relro and -fstack-protector-strong
  - Add glassfish-jsp and glassfish-servlet-api and glassfish-el-api version limit


author: Xianglai Li <lixianglai@loongson.cn> - 202308-40
changelog:
  - revert the patch "0201-BaseTools-Scripts-GccBase-Align-.text-and-.data-to-4.patch" on loongarch
  - Fix the issue of failing to parse the serial port base address on loongarch


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 18-4
changelog:
  - Fix segfault when passed --index is greater than current boot order size
    Add missing short option handling for --index (-I)


author: zhangxingrong <zhangxingrong@uniontech.com> - 18-5
changelog:
  - Fix the incorrect long parameter in help messages
  - efibootmgr: delete_bootnext is just a boolean, not an entry id


author: shixuantong <shixuantong1@huawei.com> - 0.190-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:move /usr/lib64/libdebuginfod.so from debuginfod-client-devel to debuginfod-client


author: yuanchicheng <chicheng.oerv@isrc.iscas.ac.cn> - 0.190-10
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: backport-fix-riscv64-return-value-location-retrieval-implementation.patch


author: wangkai <13474090681@163.com> - 25.3.2.6-18
changelog:
  - Fix CVE-2026-48855, CVE-2026-48858, CVE-2026-49759, CVE-2026-49760, CVE-2026-53422,
    CVE-2026-54886, CVE-2026-54887, CVE-2026-54891, CVE-2026-55950, CVE-2026-55952


author: yanglu <yanglu72@h-partners.com> - 2:6.6-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:ethtool:hibmcge:fix wrong register address in pretty print of ethtool -d command


author: andy <liuyang01@kylinos.cn> - 2:6.6-6
changelog:
  - Type:requirement
  - Id:NA
  - SUG:NA
  - DESC:ethtool: Fix SFF-8472 transceiver module identification
          ethtool: Add default branch to sff8636_show_all_ioctl switch
          qsfp: Better handling of Page 03h netlink read failure
          module-eeprom: treat zero arguments like any other arguments for hex dump
          qsf: Better handling of Page A2h netlink read failure


author: zhangyaqi <zhangyaqi@kylinos.cn> - 2:6.6-7
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:add NULL check before jsonw_string_field() in print_string()
         netlink: add NULL check for get_string() in features.c


author: Fengyan Mu <mufengyan@huawei.com> - 2:6.6-8
changelog:
  - Type:requirement
  - Id:NA
  - SUG:NA
  - DESC:ethtool: Add support the printer for the registers of unic driver
         through the command -d


author: fly_fzc <2385803914@qq.com> - 2.8.1-4
changelog:
  - fix CVE-2026-56403 CVE-2026-56404 CVE-2026-56405 CVE-2026-56406 CVE-2026-56407
        CVE-2026-56408 CVE-2026-56409 CVE-2026-56410 CVE-2026-56411 CVE-2026-56412


author: laokz <zhangkai@iscas.ac.cn> - 1.6.2-2
changelog:
  - Let valgrind BuildRequire following system i386 i486 i586 i686 pentium3 pentium4 athlon geode x86_64 armv3l armv4b armv4l armv4tl armv5tl armv5tel armv5tejl armv6l armv6hl armv7l armv7hl armv7hnl armv8l armv8hl armv8hnl armv8hcnl aarch64 loongarch64 powerpc64le ppc64le sw_64


author: liupei <liupei@kylinos.cn> - 4.12.1-8
changelog:
  - fence_scsi: Automatically detect devices for shared VGs
  - fence_scsi: Add support for space-separated devices and update in meta-data


author: liupei <liupei@kylinos.cn> - 4.12.1-9
changelog:
  - fence_azure_arm:add stack cloud support
  - azure_fence: use correct credential_scope and profile for stack hub


author: liupei <liupei@kylinos.cn> - 4.12.1-11
changelog:
  - fence_aliyun: support filter for list-action
  - fence_aliyun: add credentials file support
  - fence_aliyun: update order for new parameters


author: Funda Wang <fundawang@yeah.net> - 140.7.0-1
changelog:
  - update to 140.7.0
    * fix CVE-2026-0877, CVE-2026-0878, CVE-2026-0879, CVE-2026-0880,
      CVE-2026-0882, CVE-2025-14327, CVE-2026-0883, CVE-2026-0884,
      CVE-2026-0885, CVE-2026-0886, CVE-2026-0887, CVE-2026-0890,
      CVE-2026-0891


author: zhangxingrong <zhangxingrong@uniontech.cn> - 1.4.3-3
changelog:
  - Limit the number of clock() calls
  - Documentation (man/flac.md); fix typo 
  - flac: foreign_metadata: fix -Walloc-size
  - Fix format ending up with wrong subformat


author: lvgenggeng <lvgenggeng@uniontech.com> - 1.4.3-5
changelog:
  - backport: Refind import cuesheet op after appending seekpoints
  - backport: Make UTF-8 decoder more restrictive
  - backport: Fix endless loop in foreign metadata handling
  - backport: Fix overflow when skipping over raw input


author: wangkai <13474090681@163.com> - 2:2.11.8-1
changelog:
  - Update to 2.11.8
  - Fix CVE-2026-22852, CVE-2026-22856, CVE-2026-22859, CVE-2026-23530, CVE-2026-23531,
    CVE-2026-23532, CVE-2026-23534, CVE-2026-24491, CVE-2026-24675, CVE-2026-24676,
    CVE-2026-24679, CVE-2026-24681, CVE-2026-24682, CVE-2026-24683, CVE-2026-24684,
    CVE-2026-25997, CVE-2026-26271, CVE-2026-26986, CVE-2026-27015, CVE-2026-25941,
    CVE-2026-22855, CVE-2026-22857, CVE-2026-23533, CVE-2026-23732, CVE-2026-23883,
    CVE-2026-23884


author: wangkai <13474090681@163.com> - 2:2.11.8-3
changelog:
  - Fix CVE-2026-26955, CVE-2026-26965, CVE-2026-31806, CVE-2026-31883, CVE-2026-31885,
    CVE-2026-33984, CVE-2026-33983


author: wangkai <13474090681@163.com> - 2:2.11.8-5
changelog:
  - Fix CVE-2026-25942, CVE-2026-25952, CVE-2026-25953, CVE-2026-25954, CVE-2026-27951,
    CVE-2026-29774, CVE-2026-29775, CVE-2026-31884, CVE-2026-33985


author: yangyun <yangyun50@huawei.com> -3.16.2-1
changelog:
  - upgrade to 3.16.2
  	- fix some issues (see: https://github.com/libfuse/libfuse/releases) 
  	- improved support for some less common systems (32bit, alternative libcs)
  	- unsupported mount options are no longer silently accepted
  	- auto_unmount is now compatible with allow_other
  	- readdir kernel cache can be enabled from high-level API


author: Qin Fandong <qinfandong@kylinos.cn> - 1.8.17-9
changelog:
  - Remove build requires protobuf-c* and disable plugin logitech-bulkcontroller
    which to upgrade the firmware on Logitech Video Collaboration products.


author: Chenzhen <chenzhen126@huawei.com> - 2.0.2-4
changelog:
  - fix restart thread block by resetting probe pid
    fix service failed when cmd server thread starts late
    fix OOB write when getting proc cmdline
    fix restart gopher failed for check gopher pid multi times
    fix run sig hander core for probe mng create later
    fix potential nullptr dereference in libevent openssl cb
    ipc: reset probe_flags to 0 when restarting probes
    tcpprobe: do not flush snooped procs to avoid deleting tcp link by accident
    fix buffer overflow in sscanf
    fix buffer overflow and ret value of sscanf
    snooper: enlarge channel map and shorten poll timeout to ease event loss
    system_infos: fix oob of arrays and double free
    Refactor to reduce memory usage of metric record
    bugfix: path parsing error when gala-gopher running in container
    fix strdup relative error
    tcpprobe: fix incorret struct type of tracepoint event
    fix UAF of probe bin after parsing invalid config
    snooper: fix opposite judgment logic of container info


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-79
changelog:
  - cfg: notify that it's unsupported, when stack_num > 1
  - fix errno == ETIMEFOUT
  - fix epoll and recv threads blocked on the same semaphore. data cannot be read in recv thread.
  - fix rpc pool leak, when thread exits
  - remove app_bind_numa check from exclude_cpus
  - openGauss: fix connection attempt failed
  - openGauss: fix gs_ctl switchover failed


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-80
changelog:
  - Connect: execute lwip connect if dst_ip and host_ip are in the same network.
  - kernerl bind: add ipv6 add check
  - openGauss unsupport_tcp_optname
  - fix a contention issue when rpc pools are added to rpc_pool_array


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-82
changelog:
  - DUMP: fix abnomal printing in the dump process.
  - SIGNAL: Adjust hijack sigal table to hijack SIGABRT SIGQUIT and delet SIGKILL
  - SIGNAL: Adjust sigaction function to keep lstack signal function executed successfully.


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-83
changelog:
  - SIGNAL: block SIGSEGV during exit process
  - Stack: unset stack_stop, while stacks exit by rpc message.
  - fix the memory leak when using strdup


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-84
changelog:
  - update gazelle max numa nodes 8
  - Protocal: fixing deathlock between protocol threads and app thread
  - Connect: fix benchmark_dws connect failed
  - RTC-mode: fix gazellectl can't print connenct info
  - add xdp tx checksum/tso offload


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-85
changelog:
  - sockio: fix rpc_send coredump after RPC_MSG_EXIT
  - sockio: fix tcp_write not remove EPOLLOUT
  - fix 20.03-LTS build failed
  - sk_wait: igonre mem_thread flush signal
  - sockio: fix sendmbox full return EWOULDBLOCK
  - sockio: fix callback_tcp_send output too many at once
  - mempool: increase MEM_THREAD_MANAGER_FREE_S to avoid poll
  - sockctl: fix rtw broadcast close and shutdown
  - poll: fix do_lwip_connected_callback not delete poll kernel fd
  - sk_event: fix rtw epoll wrong event notify and remove
  - sockio: fix rtw_stack_tcp_write wrong copied_total after append
  - epoll: fix do_lwip_connected_callback
  - sk_wait: fix lwip_wait_foreach_notify coredump at startup
  - socket: fix stack_udp_readmsg return len
  - sk_wait: fix sock_wait_common_free socket: simplify calling free_count in rtw_stack_tcp_write
  - mbox: fix mbox_ring_common_free coredump when rte_ring_create failed
  - sk_wait: fix lwip_tcp_allow_send coredump
  - mempool: stop using cache when too many threads
  - mempool: fix pthread_tryjoin_np coredump when mysqld shutdown
  - mempool: mem_get_rpc add reserve limit
  - mempool: fix mbox_ring free not call recv_finish_burst
  - mempool: modify mbuf num and rpc_msg num
  - socket: fix sk_wait cannot be interrupted by signals
  - socket: fix tcp closed
  - tcp: add GAZELLE_TCP_ASYNC_RECVD      fix mbuf OOM caused by untimely sockio_peek_recv_free
  - socket: fix stack_tcp_read do not recv_finish_burst
  - socket: fix connect blocking
  - mempool: fix copy_mbuf_private
  - dfx: support sk_wait stat
  - mempool: add mem_thread_cache_flush          fix PBUF_POOL_PREINIT
  - cfg: add mem_async_mode
  - cfg: add mem_cache_max and change default rpc_msg_max
  - socket: adapt to tcp and udp
  - socket: refactor tcp and udp
  - socket: adapt to sock_event
  - socket: refactor sock_event
  - cleancode: remove get_stack_tid DPDK_PKT_BURST_SIZE PACKET_READ_SIZE
  - cleancode: remove gazelle_light_ring
  - cleancode: add GAZELLE_SAME_NODE
  - RTC: fixing program stuck while gazelle exit in multi-threads envirement


author: Peng Fan <fanpeng@loongson.cn> - 12.3.1-110
changelog:
  - Type: BUGFIX
  - DESC:
  - LoongArch: sync fix from upstream.
  - Adjusting the sequence number and name of the patches


author: Peng Fan <fanpeng@loongson.cn> - 12.3.1-111
changelog:
  - Type: BUGFIX
  - DESC:
  - middle-end: extend the narrower shift amount before broadcasting it [PR 124250]


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 3.7.3-1
changelog:
  - Update to 3.7.3
    CheckDependentLibraries.cmake: don't use libjpeg if disabled
    frmts/mrf/CMakeLists.txt: ignore HAVE_JPEGTURBO_DUAL_MODE_8_12 if GDAL_USE_JPEG is OFF
    FindPostgreSQL.cmake: Update the list of released PgSQL versions
    Add support for PoDoFo >= 0.10.0
    Add support for TileDB 2.17
    Fix build with -DRENAME_INTERNAL_SHAPELIB_SYMBOLS=OFF


author: yaoxin <yao_xin001@hoperun.com> - 0.4.50-1
changelog:
  - Update to 0.4.50:
  - Core:
    * Better Gobject Introspection annotation coverage.
    * Improved error handling for gegl chain processing.
    * Added accessors for pad meta-data, to be able to show names and descriptions in UIs.
    * GeglColor: more lax parameters for g_arapm_values_cmp
    * exr-save: store 16bpc files as half, fixing gimp#10778
    * ff-load, ff-save: fix build with FFmpeg 7
    * dither: do processing in linear when all levels==2


author: Funda Wang <fundawang@yeah.net> - 9.56.1-14
changelog:
  - Type:CVE
  - ID:NA
  - SUG:NA
  - DECS: Fix CVE-2025-27830, CVE-2025-27832, CVE-2025-27833, CVE-2025-27834, CVE-2025-27835, CVE-2025-27836


author: hdliu <dev03108@linx-info.com> - 9.56.1-15
changelog:
  - Add font mappings so that the PS interpreter can rasterize Chinese content using the two fonts STKaiti-Regular and STheiti-Regular.


author: dillon chen <dillon.chen@gmail.com> - 9.56.1-20
changelog:
  - Type:CVE
  - ID:NA
  - SUG:NA
  - DESC:fix CVE-2025-7462
  - sync PR patch from Mon Mar 30 2026 majianhan <majianhan@kylinos.cn>


author: fuanan <fuanan3@h-partners.com> - 2.43.0-7
changelog:
  - Type:CVE
  - ID:CVE-2025-48384 CVE-2025-48385 CVE-2025-48386
  - SUG:NA
  - DESC:Fix CVE-2025-48384 CVE-2025-48385 CVE-2025-48386


author: fuanan <fuanan3@h-partners.com> - 2.43.0-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix malformed patch:
         backport-CVE-2025-48385-bundle-uri-fix-arbitrary-file-writes-via-parameter-i.patch


author: fuanan <fuanan3@h-partners.com> - 2.43.0-9
changelog:
  - Type:CVE
  - ID:CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835
  - SUG:NA
  - DESC:Fix CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835


author: fuanan <fuanan3@h-partners.com> - 2.43.0-10
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch
         config.mak.uname: set CSPRNG_METHOD to getrandom on Linux


author: Funda Wang <fundawang@yeah.net> - 1.76.3-1
changelog:
  - update to 1.76.3
  - disable Regress test for now as it failed with:
    TypeError: can't redefine non-configurable property "name_conflict" in testRegress.js (line 923)


author: zhaoyonghao10 <zhaoyonghao10@h-partners.com> - 2.78.3-16
changelog:
  - apply 3 patches: backport-Fix-a-buffer-leak-when-finishing-connecting.patch, backport-Add-thread-pool-stress-test-to-task-c.patch, backport-Cleanup-trailing-spaces-task-c.patch


author: zhusicong <zhusicong@h-partners> - 2.78.3-17
changelog:
  - fix CVE-2026-58010, CVE-2026-58011, CVE-2026-58012, CVE-2026-58013, CVE-2026-58014, CVE-2026-58015, CVE-2026-58016


author: Qingqing Li <liqingqing3@huawei.com> - 2.38-103
changelog:
  - include: isolate __O_CLOEXEC flag for sys/mount.h and fcntl.h
  - Linux: Only define OPEN_TREE_* macros in <sys/mount.h> if undefined (bug 33921)

   * Fri Apr 24 2026 zhangjian <mszjaas@qq.com> - 2.38-102
   - fix-cve-2026-5450
   - fix-CVE-2026-5928


author: Qingqing Li <liqingqing3@huawei.com> - 2.38-104
changelog:
  - libio: Fix ungetwc operating on byte stream [BZ #33998] (CVE-2026-5928)
  - stdio-common: Fix buffer overflow in scanf %mc [BZ #34008] (CVE-2026-5450)


author: panzhe <panzhe@kylinos.cn> - 2.38-107
changelog:
  - Sw64: Fix getpriority error

   * Fri May 29 2026 zhongxuan2 <zhongxuan2@h-partners.com> - 2.38-106
   - fix-cve-2026-5435
   - fix-CVE-2026-6238


author: wuguanghao <wuguanghao3@huawei.com> - 11.1-1
changelog:
  - upgrade to 11.1
    - add simple-quota xattr to afr and ec ignore list
    - fix asan use-after-free bug
    - fix error not supported for ipv6
    - support OpenSSL 3.0
    - drop libglusterd
    - O_PATH support over protocol
    - Enable AES cipher for SSL by default
    - glusterd: add stripe_count in volume info
    - snapshots: Support for ZFS Snapshots
    - gfapi: Add support for 'AT_EMPTY_PATH' and 'AT_REMOVEDIR' flag


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 11.1-2
changelog:
  - fix upgrade error that {_mandir}/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.


author: Linux_zhang <244695981@qq.com> - 3.8.2-13
changelog:
  - fix CVE-2026-33846,CVE-2026-3833,CVE-2026-42009,CVE-2026-42010,CVE-2026-42014,CVE-2026-42015,CVE-2026-5260.


author: Xu Raoqing <609179072@qq.com> - 3.8.2-16
changelog:
  - buffers: simplify and tighten parse_handshake_header checks
  - lib/auth/psk_passwd: limit the length of the comparison
  - x509/name_constraints: fix intersecting empty constraints
  - datum, mem, str: add helper functions to steal pointers
  - mem,str,datum: rename _steal_* to _take_*
  - x509/virt-san: a small OOM-correctness fix
  - x509: add bare-bones awareness of SRV virtual SAN
  - x509/hostname-verify: make URI/SRV SAN preclude CN fallback
  - fix CVE-2026-42012


author: laokz <zhangkai@iscas.ac.cn> - 2.15-2
changelog:
  - riscv64: force --enable-frame-pointers due to unsupported
    -momit-leaf-frame-pointer compile option until gcc14


author: yixiangzhike <yixiangzhike007@163.com> - 1.17.0-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix the failure of testcase when building with python-setuptools>=66.0.0


author: yixiangzhike <yixiangzhike007@163.com> - 1.23.0-4
changelog:
  - Delete duplicate files between groff and groff-x11
  - Detete Obsoletes and Provides about groff-x11 from groff


author: yechao-w <wang.yechao255@zte.com.cn> - 1:2.12-45
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: kern/riscv/efi/init: Use time register in grub_efi_get_time_ms()


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1:2.12-47
changelog:
  - Type:CVE
  - CVE:CVE-2025-61661,CVE-2025-61662,CVE-2025-54771,CVE-2025-54770,CVE-2025-61663,CVE-2025-61664
  - SUG:NA
  - DESC:commands/usbtest: Ensure string length is sufficient in usb string processing
         commands/usbtest: Use correct string length field
         tests/lib/functional_test: Unregister commands on module unload
         normal/main: Unregister commands on module unload
         gettext/gettext: Unregister gettext command on module unload
         net/net: Unregister net_set_vlan command on unload
         kern/file: Call grub_dl_unref() after fs->fs_close()
         commands/test: Fix error in recursion depth calculation


author: Han Gao <gaohan@iscas.ac.cn> - 1:2.12-48
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:configure: Add -mno-relax on riscv*
         configure: Defer check for -mcmodel=large until PIC/PIE checks are done


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 1:2.12-50
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: workaround the BuildRequires mis-preinstallation issue on build systems


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1:2.12-51
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:loader/i386/pc/linux: Fix resource leak
         Revert "lzma: Make sure we don't dereference past array
         loader/efi/linux: Correctly terminate load_options member
         loader/efi/linux: Use sizeof() instead of constant
         loader/efi/linux: Use proper type for len variable
         loader/efi/linux: Do not pass excessive size for source string
         loader/efi/linux: Remove useless assignment
         loader/efi/linux: Reuse len variable
         loader/efi/linux: Unload previous Linux kernel/initrd before updating kernel size
         normal/charset: Fix underflow and overflow in loop init
         lib/LzmaEnc: Validate len before subtracting
         osdep/unix/hostdisk: Fix signed integer overflow
         fs/zfs: Fix another memory leak in ZFS code
         fs/xfs: Fix large extent counters incompat feature support


author: lvgenggeng <lvgenggeng@uniontech.com> - 1:2.12-53
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: mmap/mmap: Add missing grub_malloc() failure check
          mmap/mmap: Fix resource leak
          mmap/mmap: Fix integer overflow in binary search


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1:2.12-54
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:grub-mkimage: Do not generate empty SBAT metadata
         efi: Fix several memory leaks of UEFI handles
         script/execute: Add a NULL check after grub_calloc() call
         normal/cmdline: Add grub_calloc() failure check and fix hist_lines state loss
         osdep/linux/ofpath: Add missing strdup() failure checks
         lib/relocator: Fix dereference after NULL check
         osdep/linux/getroot: Add missing strdup() failure checks
         script/execute: Add missing grub_strdup() failure check


author: lizhengde <lizhengde@xfusion.com> - 1.16.2-14
changelog:
  - Type:CVE
  - CVE:CVE-2026-53702
  - SUG:NA
  - DESC:Stack buffer overflow in GStreamer H.265 parser. Fix incorrect loop bound.


author: Funda Wang <fundawang@yeah.net> - 1.22.5-2
changelog:
  - fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
    CVE-2024-47607, CVE-2024-47615, CVE-2024-47835


author: yaoxin <yao_xin001@hoperun.com> - 1.20.3-3
changelog:
  - Fix cves:
    CVE-2024-47606,CVE-2024-47599,CVE-2024-47613,CVE-2024-47775
    CVE-2024-47776,CVE-2024-47777,CVE-2024-47778,CVE-2024-47774
    CVE-2024-47540,CVE-2024-47602,CVE-2024-47601,CVE-2024-47603
    CVE-2024-47834,CVE-2024-47537,CVE-2024-47597,CVE-2024-47543
    CVE-2024-47596,CVE-2024-47539,CVE-2024-47546,CVE-2024-47598


author: lin zhang <lin.zhang@turbolinux.com.cn> - 3.24.7-1
changelog:
  - Update to 3.24.7

  -* Mon Jun 20 2022 liukuo <liukuo@kylinos.cn> - 3.24.6-2
  -- License compliance rectification


author: Dingli Zhang <dingli@iscas.ac.cn> - 3.3.6-3
changelog:
  - Fix build on riscv64
  - Upgrade os-maven-plugin to 1.7.1
  - Remove settings.xml and use ${HOME}/.m2/repository as maven repo


author: xinghe <xinghe2@h-partners.com> - 2.9.5-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:stream: Prevent mux upgrades if client connection is no longer ready


author: yanglu <yanglu72@h-partners.com> - 2.9.5-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:queues:Do not use pendconn_grab_from_px
         queues:Make sure we call process_srv_queue when leaving
         queue:Make process_srv_queue return the number of streams


author: xinghe <xinghe2@h-partners.com> - 2.9.5-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:haproxy: only tid 0 must not sleep if got signal
         server/addr: fix tune.events.max-events-at-once event miss and leak


author: yaoxin <yao_xin001@hoperun.com> - 1.14.5-1
changelog:
  - Update to 1.14.5:
    * Added signed Windows msi binary and signed Apple dmg binary files.
    * Moved examples to the HDF5Examples folder in the source tree.
    * Added support for using zlib-ng package as the zlib library
    * Disable CMake UNITY_BUILD for hdf5
    * Removed "function/code stack" debugging configuration option
    * Added configure options for enabling/disabling non-standard programming language features
    * Added the CMake variable HDF5_ENABLE_ROS3_VFD to the HDF5 CMake config
      file hdf5-config.cmake. This allows it to easily detect if the library
      has been built with or without read-only S3 functionality.
    * Fixed many CVE:
      CVE-2024-29157,CVE-2024-29158,CVE-2024-29159,CVE-2024-29160,CVE-2024-29161,CVE-2024-29162
      CVE-2024-29163,CVE-2024-29164,CVE-2024-29165,CVE-2024-29166,CVE-2024-32605,CVE-2024-32606
      CVE-2024-32607,CVE-2024-32608,CVE-2024-32609,CVE-2024-32610,CVE-2024-32611,CVE-2024-32612
      CVE-2024-32613,CVE-2024-32614,CVE-2024-32615,CVE-2024-32616,CVE-2024-32617,CVE-2024-32618
      CVE-2024-32619,CVE-2024-32620,CVE-2024-32621,CVE-2024-32622,CVE-2024-32623,CVE-2024-32624
      CVE-2024-33873,CVE-2024-33874,CVE-2024-33875,CVE-2024-33876,CVE-2024-33877,CVE-2018-13871
      CVE-2018-13875,CVE-2018-14034


author: Funda Wang <fundawang@yeah.net> - 1.14.5-2
changelog:
  - add patches from azure linux for fixing CVE-2025-2153, CVE-2025-2310,
    CVE-2025-2914, CVE-2025-2926, CVE-2025-6816, CVE-2025-2925,
    CVE-2025-2924, CVE-2025-44905, CVE-2025-6269, CVE-2025-6750,
    CVE-2025-6857, CVE-2025-7067, CVE-2025-7068, CVE-2025-6858,
    CVE-2025-2923, CVE-2025-2913, CVE-2025-6516, CVE-2025-6818,
    CVE-2025-6817, CVE-2025-6856, CVE-2025-7069


author: baizhonggui <baizhonggui@huawei.com> - 540.1.linux3-18
changelog:
  - Fix building error: make[1]: cc: No such file or directory
  - Add gcc in BuildRequires 
  - Add hfsplus-tools-sysctl.patch


author: yixiangzhike <yixiangzhike007@163.com> - 3.3.0-1
changelog:
  - Update version to 3.3.0
    - htop add '-n/--max-itrations' option
    - implement zswap support
    - add IRQ PSI meter
    - refactor /proc/<pid>/status parsing
    - add option to shadow path prefixes
    - fix linux Platform_getProcessLocks() for file-description locks
    - fix format specifier warning on 32 bit
    - prevent null pointer dereference on ealy error


author: tangce <tangce1@h-partners.com> - 2.4.58-11
changelog:
  - Type:CVE
  - CVE:CVE-2025-58098,CVE-2025-65082,CVE-2025-66200
  - SUG:NA
  - DESC:fix CVE-2025-58098,CVE-2025-65082,CVE-2025-66200


author: tangce <tangce1@h-partners.com> - 2.4.58-14
changelog:
  - Type:CVE
  - CVE:CVE-2026-24072,CVE-2026-29168,CVE-2026-29169,CVE-2026-33006,CVE-2026-34059
  - SUG:NA
  - DESC:fix CVE-2026-24072,CVE-2026-29168,CVE-2026-29169,CVE-2026-33006,CVE-2026-34059


author: tangce <tangce1@h-partners.com> - 2.4.58-15
changelog:
  - Type:CVE
  - CVE:CVE-2026-33007,CVE-2026-33523,CVE-2026-33857,CVE-2026-34032
  - SUG:NA
  - DESC:fix CVE-2026-33007,CVE-2026-33523,CVE-2026-33857,CVE-2026-34032


author: tangce <tangce1@h-partners.com> - 2.4.58-17
changelog:
  - Type:CVE
  - CVE:CVE-2026-29167,CVE-2026-42535,CVE-2026-44631
  - SUG:NA
  - DESC:fix CVE-2026-29167,CVE-2026-42535,CVE-2026-44631


author: tangce <tangce1@h-partners.com> - 2.4.58-18
changelog:
  - Type:CVE
  - CVE:fix CVE-2026-48913,CVE-2026-44186,CVE-2026-44185,CVE-2026-44119,CVE-2026-43951
  - SUG:NA
  - DESC:fix CVE-2026-48913,CVE-2026-44186,CVE-2026-44185,CVE-2026-44119,CVE-2026-43951


author: tangce <tangce1@h-partners.com> - 2.4.58-19
changelog:
  - Type:CVE
  - CVE:fix CVE-2026-42536,CVE-2026-34356,CVE-2026-34355,CVE-2026-29170
  - SUG:NA
  - DESC:fix CVE-2026-42536,CVE-2026-34356,CVE-2026-34355,CVE-2026-29170


author: wujichao <wujichao1@huawei.com> - 2.1.5-12
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: combine ten similar submissions into one(0125-fix-clang-build-error.patch) and Upgrade from upstream


author: jingxiaolu<lujingxiao@huawei.com> - 2.1.5-18
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: sync patches from upstream for refactoring sandbox and bugfixing


author: zhangxingrong <zhangxingrong@uniontech.com> - 3.16-4
changelog:
  - iperf3 now builds correctly on architectures without native support for 64-bit atomic types, by linking with the libatomic library


author: wangkai <13474090681@163.com> - 3.17.1-1
changelog:
  - Update to 3.17.1
  - iperf3 no longer changes its current working directory in --daemon mode. This results in more 
    predictable behavior with relative paths, in particular finding key and credential files for authentication.
  - A new --json-stream option has been added to enable a streaming output format, consisting of 
    a series of JSON objects (for the start of the test, each measurement interval, and the end of the test) separated by newlines
  - UDP tests now work correctly between different endian hosts
  - The --fq-rate parameter now works for --reverse tests
  - The statistics reporting interval is now available in the --json start test object


author: Huang Yang <huangyang@loongson.cn> - 1.8.18-22
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Resolve malloc aborted error raised when executing ipmitool fru.


author: xinghe <xinghe2@h-partners.com> - 1:6.6.0-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ss: fix expired time format of timer
         route: filter by interface on multipath routes
         lib: names: check calloc return value in db_names_alloc
         remove redundant patches


author: mufengyan <mufengyan@huawei.com> - 1:6.6.0-10
changelog:
  - Type:feature
  - ID:NA
  - SUG:NA
  - DESC:This patch adds ARPHRD_UB for iproute2 and support name
         parse for it and deletes the display of vf address
         information in the pf


author: liweigang <liweiganga@uniontech.com> - 1.8.9-5
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: libxtables: Fix memleak of matches' udata
          xshared: Fix parsing of empty string arg in '-c' option


author: yanglu <yanglu72@h-partners.com> - 1.8.9-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:extensions:recent:Fix format string for unsigned values
         nft:cmd:Init struct nft_cmd::head early


author: Liu Chao <liuchao173@huawei.com> - 3:1.9.2-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC: use hint->name in get_usr_irq_policy to reduce the time spent on obtaining interrupt names when use --rulesconfig


author: daisicheng <daisicheng@huawei.com> - 0.9.6-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix the problem that isula-build service did not stop after it removed


author: luofeng <luofeng13@huawei.com> - 0.9.6-22
changelog:
  - Type: bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix the problem that it failed when applying patches in RISCV architecture


author: kuenking111_admin <wangkun49@huawei.com> -1:1.8.0.492.b09-2
changelog:
  - add Add-HashCode-intrinsic-for-aarch64.patch
  - add Add-UTF-Conversion-Intrinsics-for-aarch64.patch
  - add Use-Stlr-for-DMB.patch
  - add Add-Dynamic-heap-Size-for-PSGC-CMS-And-Out-Of-heap.patch
  - add AArch64-improve-itable-stub.patch
  - add fix-dynamic-max-heap-size-due-to-gcc12-build-error.patch


author: jvm_xu <2395635654@qq.com> -1:1.8.0.492.b09-2
changelog:
  - add Adjusting-LSE-policy-on-HiSilion-Platform.patch
  - add gzip-guard-KAE-property-parsing-during-static-init.patch
  - add heapredactor-close-redact-map-fd-after-read.patch
  - add jprofilecache-open-replay-cache-in-read-only-mode.patch


author: jvm_xu <2395635654@qq.com> -1:1.8.0.492.b09-3
changelog:
  - add support-for-Hisilicon-cpu.patch
  - add Optimize-MemNode-infinite-loops.patch
  - add JProfilecache-fix-fastdebug-asserts.patch


author: Benshuai5D <benshuai5d@163.com> -1:1.8.0.492.b09-5
changelog:
  - add C2-restrict-store-after-loop-motion-to-loop-invariant-values.patch
  - add 8158854-Ensure-release_store-is-paired-with-load_acquire-in-lock-free-code.patch


author: yangyingqing <yangyingqing@h-partners.com> -1:11.0.31.11-0
changelog:
  - update to 11.0.31+11(GA)
  - modify G1-interate-region-by-bitmap-rather-than-obj-size-in.patch
  - delete fix-libpng-API-allow-reading-up-to-1012-bytes-beyond-the-png-sRGB-bbase-array-bug.patch
  - delete fix-libpng-CVE-2026-22695.patch
  - delete 8373476-tz-Update-Timezone-Data-to-2025c.patch
  - delete fix-libpng-CVE-2026-25646.patch
  - add Use-stlr-for-putOrdered.patch


author: wulongyao <wulongyao1@huawei.com> - 1:17.0.19.10-0
changelog:
  - update to jdk17.0.19-ga
  - modified 8264805-Backport-Ahead-of-Time-Compiler.patch
  - modified 8264806-Backport-Graal-Compiler.patch
  - deleted 8373476-tz-Update-Timezone-Data-to-2025c.patch
  - deleted Backport-7036144-GZIPInputStream-readTrailer-uses-faulty-avai.patch
  - modified add-version-txt.patch
  - modified fix-gitee.com-problem.patch
  - deleted fix-libpng-API-allow-reading-up-to-1012-bytes-beyond-the-png-sRGB-bbase-array-bug.patch
  - deleted fix-libpng-CVE-2026-22695.patch
  - deleted fix-libpng-CVE-2026-25646.patch
  - deleted fix-zlib-CVE-2026-27171.patch
  - add Use-stlr-for-putOrdered.patch


author: jvm_xu <2395635654@qq.com> - 1:17.0.19.10-2
changelog:
  - add jprofilecache-open-replay-cache-in-read-only-mode.patch
  - add fix-memory-leak-in-jBolt.patch
  - add HashCode-intrinsic-for-aarch64.patch
  - add Add-UTF-Conversion-Intrinsics-for-aarch64.patch
  - add Use-Stlr-for-DMB.patch
  - add Add-Dynamic-Heap-Size.patch
  - add Add-Aggresive-CDS-and-bugfix.patch
  - add fix-dynamic-max-heap-size-due-to-gcc12-build-error.patch


author: jvm_xu <2395635654@qq.com> - 1:17.0.19.10-4
changelog:
  - add Add-lost-ResourceMark-and-fix-delete-in-jBolt.patch
  - add support-for-Hisilicon-cpu.patch
  - add fix-test-failures-caused-by-the-Rename-createJavaPro.patch
  - add JProfilecache-remove-redundant-assert.patch


author: jvm_xu <2395635654@qq.com> - 1:17.0.19.10-6
changelog:
  - add JDK-8342238-Test-javax-crypto-CryptoPermissions-Inco.patch
  - add Keep-deflation-test-valid-with-compact-headers.patch


author: chenyanpanHW <chenyanpan@huawei.com> - 1.1.15-17
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/jfsutils-1.1.15-linux-headers.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/jfsutils_sysmacros.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/backport-fix-building-against-gcc-10.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/jfsutils-reslove-build-error.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


author: yaoxin <1024769339@qq.com> - 1.8.0-4
changelog:
  - Fix CVE-2026-40612,CVE-2026-41256,CVE-2026-41257,CVE-2026-43894,
    CVE-2026-43895,CVE-2026-43896 and CVE-2026-44777


author: liweigang <liweiganga@uniontech.com> - 0.17-3
changelog:
  - add backport-Handle-yet-another-out-of-memory-condition.patch
  - add backport-Issue-857-fix-a-few-places-where-json_tokener-should.patch


author: yueyuankun <yueyuankun@kylinos.cn> - 0.17-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Disallow control characters in strict mode
          Fix the expected output for test_parse
          Fix causing the strict-mode control characters check to incorrectly trigger


author: sunhai <sunhai10@huawei.com> - 0.17-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix the apps/json_parse "-s" (strict) option so it actually does something, and default to non-strict.


author: sunhai <sunhai10@huawei.com> - 0.17-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Handle NULL gracefully in json_tokener_free
          Issue 881 don t allow json_tokener_new_ex with a dep


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-159.4.2.153.20260627.78b2f79ac1db
changelog:
  - !24260 [sync]urma: Support user mode to obtain statistical results of kernel interrupt times
  - urma: Support user mode to obtain statistical results of kernel interrupt times
  - urma: free vtpn after free tpid reuse
  - !24250 [sync]urma: delete whether head is null in select tpid
  - urma: delete whether head is null in select tpid


author: Liming An <anliming1@h-partners.com> - 6.6.0-159.4.2.153.20260627.c0e012b0953b
changelog:
  - !24279 [sync]iommu/ummu: Fix nested TLB invalidation commands
  - iommu/ummu: Fix nested TLB invalidation commands
  - iommu/ummu: Fix NULL pointer dereference in logic_ummu_tlb_inv_walk


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-159.4.4.155
changelog:
  - !24347 [sync]urma: fix urma ping server cleanup paths
  - urma: fix file lifetime race between open, close and device removal
  - urma: fix urma ping server cleanup paths
  - !24294 [sync]urma: fix call trace during JFR deletion
  - urma: fix call trace during JFR deletion


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-159.4.5.156
changelog:
  - !24560 [sync]urma: create resources in ubmad_post_send before the ack message returns
  - !24604 ub: udma: Optimize udma jetty id access logic.
  - ub: udma: Optimize udma jetty id access logic.
  - !24597 [sync]urma: fix workqueue use-after-free in ubagg_exit teardown sequence
  - urma: fix workqueue use-after-free in ubagg_exit teardown sequence
  - urma: kref_get in find_add_tpid_reuse
  - urma: create resources in ubmad_post_send before the ack message returns
  - urma: change log level to rl in ubagg_import_jetty and ubagg_import_seg
  - urma: fix nullptr in ubcore_remove_jetty_from_jetty_grp
  - !24536 [sync]iommu/ummu: Fix use-after-free in ummu_core_alloc_separate_tdev
  - iommu/ummu: Fix use-after-free in ummu_core_alloc_separate_tdev
  - !24492 ub: udma: Adjust the order of delete global variables.
  - ub: udma: Adjust the order of delete global variables.
  - !24393 [sync]urma: fix several tp state and adapter disconnect cleanup bugs
  - urma: fix several tp state and adapter disconnect cleanup bugs
  - urma: split tpid_reuse from vtpn to avoid use_after_free


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-159.4.6.157
changelog:
  * Fri Jul 10 2026 Zihang Luo <luozihang2@huawei.com> - 6.6.0-159.4.5.156.20260710.3b1ce153a752
  - !24749 [sync]urma: free jfe events outside lock
  - urma: reduce ubagg topo log noise
  - urma: drain jfe event lists in batches to avoid soft-lockup
  - urma: free jfe events outside lock
  - urma: free completion events outside jfe lock
  - !24745 urma: fix get tp list from ops to single group id
  - !24744 urma: free tpid by uobj
  - !24743 urma: Fix the issue of inaccurate timing for some functions in DFX
  - !24739 [sync]urma: fix UAF of accessing token_id in log.
  - urma: fix get tp list from ops to single group id
  - urma: free tpid by uobj
  - urma: fix UAF of accessing token_id in log.
  - urma: Fix the issue of inaccurate timing for some functions in DFX
  - !24735 [sync]urma: fix tpid_reuse attached to vtpn causes use_after_free
  - urma: fix tpid_reuse attached to vtpn causes use_after_free
  - !24703 [sync]urma: retry import jetty/jfr on EIO from tpid reuse failure
  - urma: retry import jetty/jfr on EIO from tpid reuse failure
  - urma: limit ubagg connect exchange logs
  - !24641 [sync]urma: limit ubcore logs in reuse paths
  - urma: limit ubcore logs in reuse paths


author: Zhengzhou Chen <chenzhengzhou@huawei.com> - 6.6.0-159.4.6.157.20260713.a4e2472763b2
changelog:
  - !24791 [sync]urma: fix UAF of accessing jfs/jetty in log.
  - urma: fix UAF of accessing jfs/jetty in log.
  - !24778 urma: fix tpid uobj used by ubcore_get_tp_list
  - !24775 [sync]urma: ratelimit import jetty/jfr error logs
  - urma: fix tpid uobj used by ubcore_get_tp_list
  - urma: ratelimit import jetty/jfr error logs


author: Mingzheng Xing <xingmingzheng@iscas.ac.cn> - 6.6.0-159.4.6.158
changelog:
  - The RISC-V architecture features have been updated.
    For more details, refer to the rvck-olk repository.


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-159.4.7.160
changelog:
  - !24854 [sync]urma: fix ubcore_import_jetty_ex not dec vtpn use cnt and create tpid
  - !24846 [sync]ub/ubdevshm: Support for acquiring va is a sub-range of registered va
  - [sync]urma: fix ubcore_import_jetty_ex not dec vtpn use cnt and create tpid
  - ub/ubdevshm: Support for acquiring va is a sub-range of registered va
  - !24823 [sync]urma: use xarray for ubagg/ubcore session lookup
  - urma: use xarray for ubagg/ubcore session lookup
  - !24818 [sync]urma: make ratelimit burst configurable for ubcore/uburma/ubagg
  - urma: make ratelimit burst configurable for ubcore/uburma/ubagg
  - !24803 [sync]urma: use vzalloc for ubmad tjetty and ini_rtbuffer
  - urma: use vzalloc for ubmad tjetty and ini_rtbuffer


author: Funda Wang <fundawang@yeah.net> - 2.0.26-20
changelog:
  - sync all branches
  - update makedumpfile to 1.7.9
  - reorder arch-dependent patches
  - cherry picked MR:
    * https://atomgit.com/src-openeuler/kexec-tools/pull/121
    * https://atomgit.com/src-openeuler/kexec-tools/pull/148
    * https://atomgit.com/src-openeuler/kexec-tools/pull/150
    * https://atomgit.com/src-openeuler/kexec-tools/pull/163


author: Liu Chao <liuchao173@huawei.com> - 30-7
changelog:
  - disable make test because cannot find /lib/modules/`uname -r`/build
  - add extramodules to depmod search path


author: jinsaihang <jinsaihang@h-partners.com> - 1:0.9.9-13
changelog:
  - Type:bugfix
  - CVE:NA  
  - SUG:NA  
  - DESC:check whether the directory is a user source code directory


author: fuanan <fuanan3@h-partners.com> - 1:0.9.9-19
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patch
         backport-lookup-fix-local-bind-check.patch


author: qujingling <qujingling@huawei.com> - 1:0.9.9-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:remove __find_parent_obj_in_dir_for_oot and support link in changed_obj


author: qujingling <qujingling@huawei.com> - 1:0.9.9-21
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:remove CONFIG_LIVEPATCH_PER_TASK_CONSISTENCY, which is not in 6.6 kernel anymore


author: Linux_zhang <244695981@qq.com> - 2:1.0.8-2
changelog:
  - fix CHILD_MAX at build time to prevent BEP discrepancies caused by varying CHILD_MAX values across repeated builds


author: wangli <3214053332@qq.com> - 1.1.0-1
changelog:
  -   add some test files
  -   prepare corresponding script for ras\rac\rahub to deploy config file respectively
  -   update part of file paths
  -   update to 1.1.0


author: gwei3 <11015100@qq.com> - 1.1.2-1
changelog:
  -   update to 1.1.2
  -   add slice length checks to avoid buffer overflow while extracting and verifying
  -   update integration test data to meet restapi parameter check requirement
  -   modify raagent/main.go file, change log to logger, os.Exit returns different values based on diff errors
  -   close RAS restapi server in signal handler
  -   Add parameter format checking for pcr/bios/ima in POST {id}/newbasevalue API
  -   Fix bugs in v1.1.1
      bug 1: hostintegritytool.sh can only add the 2nd part of ima policy into /etc/ima/ima-policy.
      bug 2: running hostintegritytool.sh multiple times will add duplicated linux cmdlines in /etc/default/grub.
      bug 3: rahub config path was assigned wrong values, which is caused by copy/paste
  -   fix the issue that Makefile not sync vendor
  -   modify readme file


author: gwei3 <11015100@qq.com> - 1.1.2-2
changelog:
  -   update BuildRequires & Requires to replace openssl* with compat-openssl11* to adapt to latest Mainline
  -   remove redundent clean label in spec file


author: leezhenxiang <1172294056@qq.com> - 2.0.0-1
changelog:
  -   update to 2.0.0
  -   add qcaserver, attester, and tas packages
  -   add BuildRequires itrustee_sdk-devel, cjson-devel and Requires itrustee_sdk, cjson
  -   modify makefile to adapt to different architectures
  -   specify the build requires in rac and attester package


author: wujie <wujie@nj.iscas.ac.cn> - 1.0.13-3
changelog:
  - Add riscv64 support from http://fedora.riscv.rocks/koji/buildinfo?buildID=24988
    Author is David Abdurachmanov <david.abdurachmanov@gmail.com>


author: liliguang <liliguang@baidu.com> - 2.9-1
changelog:
  - update to 2.9
  - dwarf-reader: Avoid adding declarations-only global vars to IR
  - libxml-utils: Pass paramater to xml_char_sptr_to_string by reference
  - ctf-reader: Fix memory leak in lookup_symbol_in_ctf_archive


author: lingsheng <lingsheng1@h-partners.com> - 3.7.1-7
changelog:
  - Type:CVE
  - ID:CVE-2025-5914,CVE-2025-5915,CVE-2025-5916,CVE-2025-5917,CVE-2025-5918
  - SUG:NA
  - DESC:fix CVE-2025-5914 CVE-2025-5915 CVE-2025-5916 CVE-2025-5917 CVE-2025-5918


author: Weifeng Su <suweifeng1@huawei.com> - 7.8.2-1
changelog:
  - upgrade to version 7.8.2:
    -Resolve warning in GCC11
    -Fix comparison warning in add_chunk_as
    -Address Clang 16 AO_pt_lock issue
    -Handle Mingw64-GCC _atomic_errors
    -Fix linker errors in OpenBSD build
    -Update get_chunk for mmap placement
    -Correct typos in names/comments
    -Update CMake version to 3.5


author: wangzhiqiang <swangzhiqiang95@huawei.com> - 3.0.4-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Add BDPluginSpec constructor and use it in plugin_specs_from_names


author: tianmuyang <tianmuyang@huawei.com> 2:1.2.2-11
changelog:
  - Adaption for sched type eBPF program:
    backport-libbpf-Adaption-for-sched-type-eBPF-program.patch


author: yezengruan <yezengruan@huawei.com> 1.0.0-12
changelog:
  - kpatch_process: fix possible double free.
  - ptrace: fix NULL pointer access problem
  - fix patched process crashing when acccess the global var
  - fix probably restore cc symbol link fail when kill patch building uncourteous
  - optimize: Remove unnecessary comparison code


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 3.21.0.27-1
changelog:
  - Update package to version 3.21.0.27
    Added libdap::Array::rename_dim() for HK-247
    Added new Direct I/O support so that modules written using libdap can pass compressed data buffers
    Fix handling of libtirpc pkg-config files with -L flags
    Moved the functionality of is_dap4_projected() into libdap4
    Added support for 64-bit sized arrays


author: laokz <zhangkai@iscas.ac.cn> - 3.21.0.27-2
changelog:
  - let BuildRequire valgrind depend on system i386 i486 i586 i686 pentium3 pentium4 athlon geode x86_64 armv3l armv4b armv4l armv4tl armv5tl armv5tel armv5tejl armv6l armv6hl armv7l armv7hl armv7hnl armv8l armv8hl armv8hnl armv8hcnl aarch64 loongarch64 powerpc64le ppc64le sw_64


author: zhaoyonghao10 <zhaoyonghao10@h-partners.com> - 0.70.2-7
changelog:
  - apply 2 patches: backport-Mark-all-protected-packages-as-user-installed-for-.patch, backport-fix--compare-RPMItem-in-transaction-with-rpmvercmp.patch


author: liujing <liujing144@huawei.com> - 1.0.0-30
changelog:
  - update patches from https://code.foxkit.us/adelie/aports-old/blob/50de7d785d5500a14ed00fa12e483e8ceaf4f06a/main/libdv


author: doupengda <doupengda@loongson.cn> 1.0.1-7
changelog:
  - update config.guess and config.sub
  - fix SOURCE1 file autoconf.h '__loongarch64__' to '__loongarch64'


author: yuanchao <1050706328@qq.com> - 2.1.12-13
changelog:
  - Fix function undeclared,incompatible pointer and parameter lack in 'add-testcases-for-event.c-apis.patch',support clang build


author: andy <liuyang01@kylinos.cn> - 2.1.12-14
changelog:
  - Fix leak in evbuffer_add_file() on empty files
  - evthread: fix NULL dereference in evthread_setup_global_lock_()
  - Fix potential null dereference in http-server


author: shixuantong <shixuantong1@h-partners.com> - 2.1.12-15
changelog:
  - fix: arc4_getword integer overflow, detected by -fsanitize=undefined
  - Fix divide-by-zero in ev_token_bucket_get_tick_
  - fixed missing check for null after strdup in evutil_inet_pton_scope
  - Fix integer-overflow in ev_token_bucket_cfg_new
  - Fix integer overflow in HTTP version
  - Fix potential Null pointer dereference in bufferevent_openssl.c
  - Fix potential Null pointer dereference in dns-example.c
  - Fix potential Null pointer dereference in event-read-fifo.c
  - Fix unlikely (for libevent) UB in HT_GROW()


author: Funda Wang <fundawang@yeah.net> - 2.1.12-16
changelog:
  - Don't use deprecated functions when building against OpenSSL 3.0
  - fix linkage of shared libraries


author: yanglongkang <yanglongkang@h-partners.com> - 3.4.4-5
changelog:
  - Fix x86/ffi64 calls with 6 gp and some sse registers
    Robustify floating point comparison in test
    Fix floating point compare


author: Wenlong Ding <wenlong.ding@turbolinux.com.cn> - 2.6.4-22
changelog:
  - Remove /usr/lib64/libglade-2.0.so.* from libglade2-devel package which already exists in libglade2 package.


author: wangkai <13474090681@163.com> - 2.5.31-3
changelog:
  - Fix CVE-2026-40334, CVE-2026-40334, CVE-2026-40338, CVE-2026-40339,
    CVE-2026-40340, CVE-2026-40341


author: Kai Liu <kai.liu@windriver.com> - 1:1.49.5-5
changelog:
  - Replace patch support_OPENEULER_to_configure.patch by backport-support-openEuler.patch
    which is backported from upstream, fix issue of detecting openEuler.
  - Add provide-openEuler-appliance-package-list.patch after correctly detected openEuler.
    It was using REDHAT list before.


author: yanglu <yanglu72@h-partners.com> - 3.0.17-2
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:avoid crashing in icalcomponent_normalize
         fix a memleak in icalcomponent_normalize


author: wangxiao <wangxiao184@qq.com> - 1.24.0-4
changelog:
  - add fix patch for CVE-2026-50292
  - CVE-2026-50265 is an invalid CVE, so delete the related information.


author: liuchao <liuchao173@huawei.com> - 2.1-1
changelog:
  - Upgrade to 2.1:
    - a new tool 'ptseg' for finding the PSB segment for a given offset.
    - a new layer 'evt' representing the trace as a list of events.
    - event tracing (cfe and evd packets).
    - C11 threads, if available.
    - Bug fixes and support for latest processors.


author: Funda Wang <fundawang@yeah.net> - 1.5.8-2
changelog:
  - backport upstream patches
    * Bug fix: iso_image_set_ignore_aclea() inverted the setting
      for reading the XFS-style project id from disk files
    * Silenced error messages about ioctl(FS_IOC_FSGETXATTR)


author: yixiangzhike <yixiangzhike007@163.com> - 1.4.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:refix the failure of building with cppcheck>=2.11 by using upstream patch


author: yixiangzhike <yixiangzhike007@163.com> - 1.6.4-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch to fix possible uninitialized variable


author: chengyechun <chengyechun1@huawei.com> - 3.7.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:prevent segfault in af_request_type
         fix bridge info parsing


author: Weifeng Su <suweifeng1@huawe.com> - 1.8-1
changelog:
  - Upgrade to version 1.8
    -Support added for Flexible Data Placement(TP4146)
    -Add support for Persistent Discovery Controllers
    -Replaced the libsystemd dependency with libdbus
    -A parser for the NBFT table
    -Ignoring fabric connect attempts if the execution context doesn't match
    -support for TP8018
    -use sysfs only for topology scan
    -auto cleanup for resources
    -buf fixed and clean code


author: xinghe <xinghe2@h-partners.com> - 2:1.6.40-2
changelog:
  - Type:cves
  - CVE:CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720
  - SUG:NA
  - DESC:fix CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720


author: yixiangzhike <yixiangzhike007@163.com> - 1.4.5-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch to remove redundant inclusion of libintl.h


author: bixiaoyan <bixiaoyan@kylinos.cn> - 2.0.8-2
changelog:
  - Change assert in ringbuffer to a return code
    Community Patch Link:
    https://github.com/ClusterLabs/libqb/pull/492/commits/88d3eeacc64a059fcb8e2d329ddeafa63b24edfb


author: zouzhimin <zouzhimin@kylinos.cn> - 2.0.8-5
changelog:
  - Check returns from setsockopt() calls, also fix doxygen comment for qb_util_timespec_from_epoch_get()


author: litenglong <litenglong@kylinos.cn> - 2.0.8-6
changelog:
  - Fix file conflicts among the help package, main package, and devel package by deleting the duplicated content during upgrades.


author: chenyanpanHW <chenyanpan@huawei.com> - 0.9.4-19
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/libquvi-0.9.4-lua-5.2.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yixiangzhike <yixiangzhike007@163.com> - 1.15.2-3
changelog:
  - backport patches from upstream
      Fix a memory leak of the glib slist
      Add missing end callback for already downloaded zchunk files
      Fix memory leak of repo and repomd
      Fix a crash when the gnupghomedir is NULL or not specified on Python API


author: yuanchao <1050706328@qq.com> - 0.20.5-3
changelog:
  - fix `incompatible function pointer types passing`errors in test-vala-unstable.vala and test-vala-lang.vala


author: nickyang <nickyang228@163.com> - 2.74.3-12
changelog:
  - Type:cves
  - ID:CVE-2026-1539 CVE-2026-1467 CVE-2026-1761 CVE-2026-0716
  - SUG:NA
  - DESC:fix CVE-2026-1539 CVE-2026-1467 CVE-2026-1761 CVE-2026-0716


author: nickyang <nickyang228@163.com> - 2.74.3-13
changelog:
  - Type:cves
  - ID:CVE-2026-1760 CVE-2026-1801 CVE-2026-2369
  - SUG:NA
  - DESC:fix CVE-2026-1760 CVE-2026-1801 CVE-2026-2369


author: zhangbinqin <zhangbinqin@h-partners.com> - 0.10.5-5
changelog:
  - Type:CVE
  - Id:CVE-2025-4877 CVE-2025-4878 CVE-2025-5351 CVE-2025-5987 CVE-2025-5372
  - SUG:NA
  - DESC:fix CVE-2025-4877CVE-2025-4878CVE-2025-5351CVE-2025-5987CVE-2025-5372


author: zhangbinqin <zhangbinqin@h-partners.com> - 0.10.5-9
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:fix CVE-2026-0968 CVE-2026-0967 CVE-2026-0966 CVE-2026-0965 CVE-2026-0964 CVE-2025-14821


author: zhangbinqin <zhangbinqin@h-partners.com> - 1.11.0-6
changelog:
  - Type:CVE
  - CVE:CVE-2026-7598
  - SUG:NA
  - DESC:add username_len bounds checking to fix CVE-2026-7598


author: laokz <zhangkai@iscas.ac.cn> - 1.9.6-2
changelog:
  - make with_mem_leak_test option following i386 i486 i586 i686 pentium3 pentium4 athlon geode x86_64 armv3l armv4b armv4l armv4tl armv5tl armv5tel armv5tejl armv6l armv6hl armv7l armv7hl armv7hnl armv8l armv8hl armv8hnl armv8hcnl aarch64 loongarch64 powerpc64le ppc64le sw_64


author: chenyanpanHW <chenyanpan@huawei.com> - 1.2.20-20
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/libtar-1.2.11-missing-protos.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/libtar-1.2.11-mem-deref.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/libtar-1.2.20-fix-resource-leaks.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/libtar-1.2.11-bz729009.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/libtar-1.2.20-no-static-buffer.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/CVE-2013-4420.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/openEuler-CVE-2021-33643-CVE-2021-33644.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/openEuler-CVE-2021-33645-CVE-2021-33646.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/CVE-2021-33640-fix-memory-leak-and-use-after-free-bugs.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Funda Wang <fundawang@yeah.net> - 1.5-2
changelog:
  - add upstream patch supporting tracing for AV1 picture info
  - requires x11 as pkgconfig private, since vdpau_x11.h refers X11/Xlib.h
  - cleanup spec


author: PengruiZhang <zhangpengrui@huawei.com> - 9.10.0-26
changelog:
  - vdpa: Add the count of vdpa devices when calculating Max locked memory
  - virDomainDeviceIsUSB: Handle all USB devices and simplify the code
  - add TengyunS5000C cpu info to cpu map
  - qemu:Implement the RAS feature for aarch64


author: PengruiZhang <zhangpengrui@huawei.com> - 9.10.0-28
changelog:
  - virshFindDisk: fix NULL-dereference of xmlCopyNode() result
  - vir-qemu-sev-validate: Use string() method in xpath
  - network: convert virFileLinkPointsTo to return bool
  - security_util: fix log in virSecurityMoveRememberedLabel
  - Skip the UEFI check for CCA
  - conf: fix integer overflow in virDomainControllerDefParseXML
  - qemu: Replace the deprecated short-formed option "unix"
  - ch_driver: fix condition in virCHDomainRemoveInactive()
  - remote: DeserializeDomainDiskErrors: remove dead code


author: Pengrui Zhang <zhangpengrui@huawei.com> - 9.10.0-29
changelog:
  - cpu_map: add kunpeng-920-V1 cpu map
  - cpu_map: add kunpeng-920-V2 cpu map
  - cpu_map: add kunpeng-950-V1 cpu map
  - Migration/urma: tune and restore rcu_expedited around URMA migration
  - Migration/urma: enable ONECOPY capability for destination


author: Pengrui Zhang <zhangpengrui@huawei.com> - 9.10.0-30
changelog:
  - qemu_command: Remove unused iommufd variable in qemuBuildPCIHostdevDevProps
  - qemu_command: Don't open code virPCIDeviceAddressAsString()
  - meson: Stop looking for passt at build time
  - qemu: Move memory device coldplug into a separate function
  - Migration/urma:enable RCU expedited tuning for HCOM Protocol


author: Pengrui Zhang <zhangpengrui@huawei.com> - 9.10.0-31
changelog:
  - ub: ub device management infrastructure
  - ub: support get ub device list
  - ub: support delete missing ub devs
  - ub: add detailed code for prepare and bind driver code
  - ub: support ub dev bind to stub driver
  - ub: support get guidAddress from devNum
  - ub: more detailed code for bind and unbind driver code
  - ub: detailed code for reattach ub dev process
  - ub: check if hostdev ub is prepared
  - ub: check vfio-ub info when ub hostdev is configed
  - ub: switch fclose(FILE) to VIR_FORCE_FCLOSE(FILE)


author: Pengrui Zhang <zhangpengrui@huawei.com> - 9.10.0-33
changelog:
  - conf: Fix error message in virNetworkForwardDefParseXML
  - qemu: Fix guest-sync response time in qga command
  - virthreadpool: create threads from the newly expanded workers
  - qemu: Use g_autoptr in qemuProcessInit
  - qemu: Add kvm-vtimer-status support for AArch64 KVM guests


author: Pengrui Zhang <zhangpengrui@huawei.com> - 9.10.0-34
changelog:
  - qemu_driver: Don't handle the EOF event if vm get restarted
  - conf: add the hugepage allocation option
  - qemu: cgroup: Add /dev/ubmempfd to default device ACL


author: wangqingsan<wangqingsan@huawei.com> - 2.19-4
changelog:
  - fix CVE-2023-0464,CVE-2023-0465,CVE-2023-0466,CVE-2023-2650,CVE-2023-3446,CVE-2023-3817,CVE-2023-5678.


author: wangyu <wangyu283@huawei.com> - 2.11-7
changelog:
  - kernel 5.10 backport kernel 5.11 sgx driver patch, disables sgx feature flag for non-FLC platforms
  - use cpuid instead of boot_cpu_has to check cpu features


author: eastb233 <xiezhiheng@huawei.com> 17.0.6-7
changelog:
  - Type: cherry-pick
  - ID:NA
  - SUG:NA
  - DESC: cherry-pick
  -    Add toolchain_clang build support
  -    Part of adopt to new cmake macro
  -    build with clang


author: eastb233 <xiezhiheng@huawei.com> 17.0.6-8
changelog:
  - Type: Update
  - ID:NA
  - SUG:NA
  - DESC: Update https://gitee.com/openeuler/llvm-project/archive/refs/tags/llvm-for-oE-17.0.6-2509.0.1.tar.gz


author: eastb233 <xiezhiheng@huawei.com> 17.0.6-9
changelog:
  - Update https://gitee.com/openeuler/llvm-project/archive/refs/tags/llvm-for-oE-17.0.6-2509.0.2.tar.gz


author: liyufnei <liyunfei33@huawei.com> - 17.0.6-58
changelog:
  - update to llvm-for-oe-17.0.6-2603.0.1
  - release-note https://gitcode.com/openeuler/llvm-project/releases/llvm-for-oE-17.0.6-2603.0.1


author: liyufnei <liyunfei33@huawei.com> - 17.0.6-60
changelog:
  - update to llvm-for-oe-17.0.6-2603.0.2
  - release-note https://gitcode.com/openeuler/llvm-project/releases/llvm-for-oE-17.0.6-2603.0.2


author: eastb233 <xiezhiheng@huawei.com> - 17.0.6-64
changelog:
  - update to llvm-for-oe-17.0.6-2606.0.1
  - release-note https://atomgit.com/openeuler/llvm-project/releases/llvm-for-oE-17.0.6-2606.0.1


author: liyunfei <liyunfei33@huawei.com> - 19.1.7-17
changelog:
  - update to llvm-for-oE-19.1.7-2512.0.1
  - release note: https://gitee.com/openeuler/llvm-project/releases/tag/llvm-for-oE-19.1.7-2512.0.1


author: liyunfei <liyunfei33@huawei.com> - 19.1.7-19
changelog:
  - update to llvm-for-oE-19.1.7-2512.0.2
  - release note: https://gitee.com/openeuler/llvm-project/releases/tag/llvm-for-oE-19.1.7-2512.0.2


author: eastb233 <xiezhiheng@huawei.com> - 20.1.8-8
changelog:
  - update to llvm-for-oE-20.1.8-2606.0.2
  - release note: https://atomgit.com/openeuler/llvm-project/releases/llvm-for-oE-20.1.8-2606.0.2


author: Funda Wang <fundawang@yeah.net> - 4.99.6-1
changelog:
  - update to 4.99.6
  - switch to autotools based build system per suggested by upstream
   - new devel sub package, due to switching to autotools
   - add two security-related build switches from archlinux:
     - only allow root to list all open files
     - allow anyone to list anyone else's socket files


author: liuchao <liuchao173@huawei.com> - 2.13.7-1
changelog:
  - Update to 2.13.7:
    - fix: invoke MKDIR_P before changing directories
    - fix: -Wsingle-bit-bitfield-constant-conversion with clang16
    - fix: clean java inner class files in examples
    - Introduce sync vs unsync enablers
    - Fix: misaligned urcu reader accesses
    - ustfork: Fix warning about volatile qualifier
    - ustfork: Fix possible race conditions
    - Fix: tracepoint: Remove trailing \ at the end of macro
    - fix: python agent: use stdlib distutils when setuptools is installed
    - fix: python agent: install on Debian python >= 3.10
    - fix: python agent: Add a dependency on generated files
    - python: use setuptools with python >= 3.12


author: yuanchao <1050706328@qq.com> - 5.0.2-16
changelog:
  - Type: bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix error of cc.compiles in meson.build on aarch cased by '-fstack-clash-protection' and '-Werror'


author: wujichao <wujichao1@huawei.com> - 0.3-36
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:bugfix: Information in cpu directory is overwritten after lxcfs restart


author: Liu Qingtao <liu.qingtao2@zte.com.cn> - 1.9.4-3
changelog:
  - Add patch riscv_zicclsm_lz4_force_mem_access_2.patch to configure LZ4_FORCE_MEMORY_ACCESS=2 for RISC-V with Zicclsm extension


author: xu_ping <707078654@qq.com> - 0.46.2-1
changelog:
  - Update to 0.46.2:
    * M2Crypto closes SSL connection on closing HTTPS Connection, and
      some other related issues
    * Modernize C API by eliminating use of deprecated
      PyBytes_AsStringAndSize and related functions with Python
      Buffer Protocol
    * Add logging support to C extension code sending messages to the
      Python logging
    * Reverted removal of demo/ subdirectory
    * Correct license to BSD-2-Clause and update references
    * Specify in setup.cfg that we require Python >= 3.6


author: chenyanpanHW <chenyanpan@huawei.com> - 12.5-33
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/nail-11.25-config.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.3-pager.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-lzw.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-fname-null.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-collect.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-usage.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-man-page-fixes.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-outof-Introduce-expandaddr-flag.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-fio.c-Unconditionally-require-wordexp-support.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-globname-Invoke-wordexp-with-WRDE_NOCMD-CVE-2004-277.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-unpack-Disable-option-processing-for-email-addresses.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-empty-from.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-nss-hostname-matching.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-encsplit.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-openssl.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/backport-mailx-12.5-no-SSLv3.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/set-mail-defualt-did-not-record-failsend.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: shechenglong <shechenglong@xfusion.com> - 25.0.3-46
changelog:
  - libcontainerd: change the digest used when restoring
  - backport builder/dockerfile: ADD with best-effort xattrs
  - man/docker-build.1: typo in parameter variable: CID => IID
  - Restore INC iptables rules on firewalld reload
  - fix TestPassthrough
  - fix issue where node promotion could fail
  - libnetwork/drivers/overlay: fix naked returns, output variables
  - libnetwork: fix flaky Swarm service DNS
  - volume/local: use t.TempDir
  - libnetwork/drivers/bridge: fix non-constant format string in call (govet)
  - volume/service: rename interface that collided with vars
  - plugin: fix naked returns, output vars


author: yaoxin <1024769339@qq.com> - 2.4.16.6-1
changelog:
  - Update to 2.4.16.6:
    * metadata: fix caching of JWKs from jwks_uri when using the default expiry setting
    * info: fix requests to the info hook with extend_session=false
    * cookie: OIDCCookieSameSite default behaviour Lax
    * cookie: apply OIDCCookieSameSite Off/None properly to state cookies instead of always setting Lax
    * cache: avoid segfault and improve error reporting in case apr_temp_dir_get fails when a temp directory
      cannot be found on the system upon initaliizing cache mutexes and the file cache
    * metadata: allow plain HTTP URLs in metadata elements jwks_uri and signed_jwks_uri to ensure backwards
      compatibility with <=2.4.15.7 and to support private/test deployments
    * code: address warnings from static code analysis tool CodeChecker


author: yaoxin <yao_xin001@hoperun.com> - 1.27.4-1
changelog:
  - Update to 1.27.4 for fix CVE-2024-6381 and CVE-2024-6383
  - libbson Fixes:
    * Fix build with Visual Studio 2013.
    * Fix parsing of colon in timezone.
    * Error on failure to init subdocument in bson_iter_visit_all.
    * Fix string handling in bson_string_new and bson_string_append.
    * Fix iteration in bson_strfreev.
    * Use aligned alloc for bson_array_builder_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Fix conversion warning with GCC 12.
    * Fixes to some format strings in trace logs.
    * Allow mongoc_buffer_t to be larger than INT_MAX.
    * Add bson_array_builder_t.
  - libmongoc Fixes:
    * Fix possible crash reading malformed wire protocol message.
    * Upgraded bundled Zlib from 1.2.3 to 1.3.1
    * Close leftover connections to removed servers.
    * Fix possible crash when client is configured with empty password.
    * Fix possible hang if mongoc_gridfs_file_readv is called with a corrupt chunk with incomplete data.
    * Fix 32-bit compile with 64-bit time_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Disable shared libmongoc targets if ENABLE_SHARED=OFF
    * Fix documentation build with Python 3.9.
    * Fix data race in mongoc_cursor_get_host.
    * Add back support for BUILD_VERSION CMake option. BUILD_VERSION was unintentionally removed in 1.25.0.
    * Send recoveryToken in transactions when connected to a load balancer.


author: Funda Wang <fundawang@yeah.net> - 102.9.0-9
changelog:
  - set CC and CXX so that clang won't be selected automatically
  - fix compilation errors in sw_64 support


author: yanglu <yanglu72@h-partners.com> - 2:0.95-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Change UDP and ICMP sockets binding to accept a source IP from the -a CLI option


author: zhangxingrong <zhangxingrong@uniontech.com> - 5:2.2.12-3
changelog:
  - Fix smtp client to respect $use_envelope_from option.
  - Fix smtp client $envelope_from_address possible dangling pointer.


author: wangkai <13474090681@163.com> - 8.0.40-1
changelog:
  - Update to 8.0.40 for fix CVEs(CVE-2024-21218,CVE-2024-21196,CVE-2024-21207,
    CVE-2024-21198,CVE-2024-21203,CVE-2024-21213,CVE-2024-21239,CVE-2024-21199,
    CVE-2024-21197,CVE-2024-21247,CVE-2024-21193,CVE-2024-21212,CVE-2024-21241,
    CVE-2024-21230,CVE-2024-21236,CVE-2024-21194,CVE-2024-21238,CVE-2024-21237,
    CVE-2024-21201,CVE-2024-21231,CVE-2024-21219,CVE-2024-21185)


author: yaoxin <1024769339@qq.com> - 8.0.41-1
changelog:
  - Update to 8.0.41 for fix CVEs(CVE-2025-21490,CVE-2025-21491,CVE-2025-21495,
    CVE-2025-21497,CVE-2025-21500,CVE-2025-21501,CVE-2025-21503,CVE-2025-21505,
    CVE-2025-21518,CVE-2025-21519,CVE-2025-21520,CVE-2025-21522,CVE-2025-21523,
    CVE-2025-21529,CVE-2025-21531,CVE-2025-21540,CVE-2025-21543,CVE-2025-21546,
    CVE-2025-21555,CVE-2025-21559)


author: yaoxin <1024769339@qq.com> - 8.0.42-1
changelog:
  - Update to 8.0.42 for fix CVEs(CVE-2025-21574,CVE-2025-21575,CVE-2025-21577,
    CVE-2025-21580,CVE-2025-21581,CVE-2025-21584,CVE-2025-21585,CVE-2025-30681,
    CVE-2025-30682,CVE-2025-30683,CVE-2025-30684,CVE-2025-30685,CVE-2025-30687,
    CVE-2025-30688,CVE-2025-30689,CVE-2025-30693,CVE-2025-30695,CVE-2025-30696,
    CVE-2025-30699,CVE-2025-30703,CVE-2025-30704,CVE-2025-30705,CVE-2025-30710,
    CVE-2025-30715,CVE-2025-30721,CVE-2025-30722


author: yaoxin <1024769339@qq.com> - 8.0.43-1
changelog:
  - Update to 8.4.6 for fix CVEs (CVE-2025-50068,CVE-2025-50077,CVE-2025-50078,
    CVE-2025-50079,CVE-2025-50080,CVE-2025-50081,CVE-2025-50082,CVE-2025-50083,
    CVE-2025-50084,CVE-2025-50085,CVE-2025-50086,CVE-2025-50087,CVE-2025-50091,
    CVE-2025-50092,CVE-2025-50093,CVE-2025-50094,CVE-2025-50096,CVE-2025-50097,
    CVE-2025-50098,CVE-2025-50099,CVE-2025-50100,CVE-2025-50101,CVE-2025-50102,
    CVE-2025-50104,CVE-2025-53023)


author: wangkai <13474090681@163.com> - 8.0.44-1
changelog:
  - Update to 8.0.44 for fix CVEs (CVE-2025-53069,CVE-2025-53062,CVE-2025-53054,
    CVE-2025-53053,CVE-2025-53045,CVE-2025-53044,CVE-2025-53042,CVE-2025-53040)


author: yaoxin <1024769339@qq.com> - 8.0.45-1
changelog:
  - Update to 8.0.45 for fix CVEs (CVE-2026-21936,CVE-2026-21937,
    CVE-2026-21941,CVE-2026-21948,CVE-2026-21964,CVE-2026-21968)


author: wangkai <13474090681@163.com> - 8.0.46-1
changelog:
  - Update to 8.0.46 for fix CVEs (CVE-2026-21998, CVE-2026-22001, CVE-2026-22002,
    CVE-2026-22004, CVE-2026-22005, CVE-2026-22009, CVE-2026-22015, CVE-2026-22017,
    CVE-2026-34267, CVE-2026-34270, CVE-2026-34271, CVE-2026-34276, CVE-2026-34278,
    CVE-2026-34293, CVE-2026-34303, CVE-2026-34304, CVE-2026-34308, CVE-2026-35236,
    CVE-2026-35237, CVE-2026-35238, CVE-2026-35239, CVE-2026-35240)


author: yaoxin <yao_xin001@hoperun.com> - 8.0-1
changelog:
  - Update to 8.0
    * CVE-2024-5742: Avoid privilege escalations via symlink attacks
      on emergency save file (boo#1226099)
    * By default ^F is bound to starting a forward search, and ^B to
      starting a backward search, while M-F and M-B repeat the search
      in the corresponding direction. (See the documentation if you
      want the old bindings back.)
    * Command-line option --modernbindings (-/) makes ^Q quit, ^X cut,
      ^C copy, ^V paste, ^Z undo, ^Y redo, ^O open a file, ^W write a file,
      ^R replace, ^G find again, ^D find again backwards, ^A set the mark,
      ^T jump to a line, ^P show the position, and ^E execute.
    * For easier access, M-" is bound to placing/removing an anchor,
      and M-' to jumping to the next anchor.


author: wuyifeng <wuyifeng10@huawei.com> - 78-1
changelog:
  - upgrade to version 78:
  	-incorporate up to 6.5 kernel
  	-add new cxl commands
  	-fix some bugs detail see:github.com/pmem/ndctl


author: gaihuiying <eaglegai@163.com> - 1:5.9.3-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Customized the anti-attacki/reset-last_engineTime function for IdeaUI
         change the permissions of passtest


author: xingwei <xingwei14@h-partners.com> - 1:5.9.3-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Migration patch from upstream, add compatibility to parse
  Linux 6.7 Ip header while keep support for previous versions.


author: chenyanpanHW <chenyanpan@huawei.com> - 0.2.8-19
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0000-netcf-call-aug_load-at-most-once-per-second.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0001-netcf-optimize-aug_match-query-for-all-ifcfg-files-related.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0002-netcf-linux-include-bond-element-for-bonds-with-no-slaves.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0003-netcf-Properly-classify-bond-devices-with-no-slaves.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Fix-memory-leak-in-aug-match-mac.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: lingsheng <lingsheng1@h-partners.com> - 1:1.0.8-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:datatype: don't return a const string from cgroupv2_get_path()
  datatype: fix leak and cleanup reference counting for struct datatype
  datatype: initialize TYPE_CT_EVENTBIT slot in datatype array
  datatype: initialize TYPE_CT_LABEL slot in datatype array
  evaluate: do not remove anonymous set with protocol flags and single element
  evaluate: don't crash if object map does not refer to a value
  evaluate: error out when expression has no datatype
  evaluate: error out when store needs more than one 128bit register of align fixup
  evaluate: fix check for truncation in stmt_evaluate_log_prefix()
  evaluate: fix double free on dtype release
  evaluate: fix memleak in prefix evaluation with wildcard interface name
  evaluate: reject set in concatenation
  evaluate: revisit anonymous set with single element optimization
  evaluate: skip anonymous set optimization for concatenations
  evaluate: stmt_nat: set reference must point to a map
  evaluate: tproxy: move range error checks after arg evaluation
  evaluate: validate chain max length
  evaluate: validate maximum log statement prefix length
  exthdr: prefer raw_type instead of desc->type
  json: expose dynamic flag
  json: fix use after free in table_flags_json()
  libnftables: Drop cache in -c/--check mode
  meta: fix tc classid parsing out-of-bounds access
  netlink: don't crash if prefix for < byte is requested
  netlink: fix leaking typeof_expr_data/typeof_expr_key in netlink_delinearize_set()
  netlink: handle invalid etype in set_make_key()
  parser_bison: fix ct scope underflow if ct helper section is duplicated
  parser_bison: fix memleak in meta set error handling
  parser_bison: make sure obj_free releases timeout policies
  parser_json: Catch nonsense ops in match statement
  parser_json: Default meter size to zero
  parser_json: Fix flowtable prio value parsing
  parser_json: Fix synproxy object mss/wscale parsing
  parser_json: Fix typo in json_parse_cmd_add_object()
  parser_json: Proper ct expectation attribute parsing
  parser_json: Wrong check in json_parse_ct_timeout_policy()
  py: fix exception during cleanup of half-initialized Nftables
  rule: fix sym refcount assertion


author: liweigang <liweiganga@uniontech.com> - 1:1.0.8-4
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: evaluate: guard against NULL basetype
  evaluate: error out if basetypes are different
  evaluate: reject attempt to update a set
  evaluate: release mpz type in expr_evaluate_list() error path
  expression: missing line in describe command with invalid expression
  evaluate: handle invalid mapping expressions in stateful object statements gracefully


author: gaihuiying <eaglegai@163.com> - 1:1.0.8-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         evaluate: disable meta set with ranges
         src: reject large raw payload and concat expressions
         evaluate: fix stack overflow with huge priority string
         tcpopt: don't create exthdr expression without datatype
         src: do not allow to chain more than 16 binops
         rule: fix ASAN errors in chain priority to textual names
         tests: shell: add regression test for double-free crash bug
         evaluate: handle invalid mapping expressions in stateful object
         evaluate: Fix incorrect checking the `base` variable in case of IPV6


author: gaihuiying <eaglegai@163.com> - 1:1.0.8-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:ct expectation: fix 'list object x' vs. 'list objects in table' confusion
         tests: shell: connect chains to hook point


author: gaihuiying <eaglegai@163.com> - 1:1.0.8-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         parser_json: release buffer returned by json_dumps
         parser_json: fix crash in json_parse_set_stmt_list
         parser_json: fix handle memleak from error path
         parser_json: fix several expression memleaks from error path
         libnftables: Zero ctx->vars after freeing it


author: eaglegai <eaglegai@163.com> - 1:1.0.8-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         evaluate: don't allow nat map with specified protocol
         rule: return error if table does not exist
         json: make sure timeout list is initialised
         evaluate: don't update cache for anonymous chains
         json: return error if table does not exist
         json: don't BUG when asked to list synproxies
         evaluate: compact STMT_F_STATEFUL checks
         evaluate: only allow stateful statements in set and map definitions
         optimize: expand expression list when merging into concatenation
         netlink: fix stack overflow due to erroneous rounding
         netlink: bogus concatenated set ranges with netlink message overrun
         netlink: fix crash when ops doesn't support udata
         netlink: Catch unknown types when deserializing objects
         netlink: Avoid potential NULL-ptr deref parsing set elem expressions
         netlink: Avoid crash upon missing NFTNL_OBJ_CT_TIMEOUT_ARRAY
         evaluate: don't BUG on unexpected base datatype
         src: BASECHAIN flag no longer implies presence of priority expression
         parser_bison: only reset by name is supported by now


author: gaihuiying <eaglegai@163.com> - 1:1.0.8-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         segtree: fix string data initialisation
         src: netlink: netlink_delinearize_table() may return NULL
         src: ensure chain policy evaluation when specified
         src: fix memory leak in anon chain error handling
         mnl: silence compiler warning
         datatype: Increase symbolic constant printer robustness
         evaluate: follow prefix expression recursively if needed


author: yaoxin <yao_xin001@hoperun.com> - 1:20.12.1-1
changelog:
  - Update to 20.12.1:
    * CVE-2024-27983 - Assertion failed in node::http2::Http2Session::~Http2Session()
      leads to HTTP/2 server crash- (High)
    * CVE-2024-27982 - HTTP Request Smuggling via Content Length Obfuscation - (Medium)
    * llhttp version 9.2.1
    * undici version 5.28.4


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 1:20.12.1-2
changelog:
  - fix building w/ clang: only apply '-fno-ipa-icf' for gcc && disable LTO for clang + ld.bfd
  - improve the handling of trilling whitespaces in C/CXXFLAGS


author: Ge Wang <wang__ge@126.com> - 1:20.12.1-3
changelog:
  - CVE-2023-45853 - Reject overflows of zip header fields in minizip
  - CVE-2024-5274 - Using FunctionParsingScope for parsing class static
  - CVE-2024-5535 - Fix SSL_select_next_proto
  - CVE-2024-7971 - Spill all loop inputs before entering loop


author: wangkai <13474090681@163.com> - 1:20.18.2-1
changelog:
  - Update to 20.18.2
  - Fix CVE-2025-23083 CVE-2025-23085 CVE-2025-23084 CVE-2024-36137
    CVE-2024-22018 CVE-2024-22020


author: wangkai <13474090681@163.com> - 1:20.18.2-5
changelog:
  - Fix CVE-2025-55130, CVE-2025-55131, CVE-2025-55132,
    CVE-2025-59465, CVE-2025-59466, CVE-2026-21637


author: wangkai <13474090681@163.com> - 1:20.18.2-7
changelog:
  - Followup fix CVE-2026-21637 and fix CVE-2026-21710, CVE-2026-21713,
    CVE-2026-21714, CVE-2026-21715, CVE-2026-21716, CVE-2026-21717


author: yixiangzhike <yixiangzhike007@163.com> - 0.9.12-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Move temporary files from /var/run to /run to delete warning in installing


author: wangkai <13474090681@163.com> - 2:2022.10.3-4
changelog:
  - Fix CVE-2026-42616, CVE-2026-42617, CVE-2026-42618, CVE-2026-46569,
    CVE-2026-46570, CVE-2026-46571, CVE-2026-46572, CVE-2026-56135, CVE-2026-56136


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p15-8
changelog:
  - Type:CVE
  - ID:CVE-2023-26551
  - SUG:NA
  - DESC:make sure the buffer has enough room for the input extra characters


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p15-10
changelog:
  - Type:CVE
  - ID:CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26554,CVE-2023-26555
  - SUG:NA
  - DESC:change the patch of CVE-2023-26551 and fix CVE-2023-26555


author: andy <liuyang01@kylinos.cn> - 2.0.16-12
changelog:
  - backport patches from upstream
  - libnuma: Make numa_available respect EPERM
  - libnuma: fix nodemask allocation size for get_mempolicy


author: shixuantong <shixuantong1@huawei.com> - 1:1.24.3-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:remove f2py form python3-numpy package. It is in python3-numpy-f2py
         Do not pack open-source test case files


author: HelloZ <3161422489@qq.com> - 1.00.029-5
changelog:
  - Add patch 0001-support-DSCP-and-higher-version-gcc-compilation-opti.patch
  - support DSCP and higher version gcc compilation options


author: yanglongkang <yanglongkang@h-partners.com> - 0.34.7-4
changelog:
  - Replace SELinux deprecated functions
  - Replace deprecated libxml2 calls
  - Fix implicit cast from const to non const


author: LHesperus <liuchanggeng@huawei.com> -v2.1.0-1
changelog:
  - remove the logger.h interface and add TRACE interface, increase safe_queue wait time to 5s
  - support reload log-level online
  - adapt analysis on riscv
  - add load base sched instance
  - v2.0.6-3 add adapt dynamicsmt analysis if smt is not enable
  - fix code check
  - add trace log and change level intf and delete logger
  - smc-d analysis fix inconsistency in the display of zero connection
  - v2.0.6-2 add realtime compile macro
  - v2.0.6-1 add smc_acc.yaml check and some logs
  - add net_hardirq_tune_data.h
  - fux binary coredump
  - v2.0.5-3 fix xcall analysis issues
  - v2.0.5-2 improve some output format
  - add xcall prefetch
  - network interface plugin : adapt same nic with different ifindex
  - v2.0.5-1 fix issues
  - v2.0.4-1 add docker coordination burst tune
  - add multi net path tune and analysis
  - add error log and params check
  - v2.0.3-3 oeaware-sdk enhances user permissions
  - v2.0.3-2 Fixed memory leak issues:
    - Fixed unsubscribeHandler topic deserialize memory leak
    - Fixed analysis module memory leak
  - Enhanced eBPF functionality:
    - Set memory lock limit to infinity for eBPF
    - Used eBPF to collect thread information
  - Network improvements:
    - Fixed ntoh port error
    - Added support for attaching all network interfaces
    - Used tcp-set-state to adapt k8s docker
  - New features:
    - Added xcall parameters
    - Added support for docker coordination burst analysis
    - Added parameter validation
    - Added NUMA parallel scheduler tuning support
  - Other improvements:
    - Fixed header files and added CI test
  - v2.0.3-1: Refactored and enhanced the analysis module:
    - Added scenario-aware analysis for multiple optimization plugins
    - Introduced command-line result viewing capability
    - Implemented Markdown format output support
  - Add new plugin: smt,binary,hirq


author: fly_1997 <flylove7@outlook.com> -v2.1.1-1
changelog:
  - add hwprobe_analysis for RISC-V
  - fix error logger info
  - support kernel cluster scheduler
  - adapt for kylin-v10-sp3
  - realtime tune add new tuning item
  - fix smc insmod err
  - realtime tune skip grubby update
  - add hwprobe_tune hwprobe_ext_zbb_tune for RISC-V
  - add high_load value check


author: wangshuai <wangshuai321@huawei.com> - 1.1.6-3
changelog:
  - Update the pci.ids file
  - Remove unused variable in cdrom test suite
  - Update test_guide doc
  - Unify the location for downloading kernel source RPMs
  - Optimize kabiwhitelist and system test


author: xiaochn <xiaochuannan@inspur.com> - 1.1.7-1
changelog:
  - Add KylinSec 3.5.3 support
  - Fix the problem of disk size calculation
  - Fix bcm57414 nic test failed issue
  - Change the format of date
  - Fixed a bug where a non-existent logger level was used
  - Update README.md
  - Fix vgpu testing issue


author: hewanhan <hewanhan@h-partners.com> - 1.1.10-0
changelog:
  - Add kernel support of openeEuler 24.03 LTS SP4
  - Fix false positives in the system testsuite on x86


author: liuqingtao <liu.qingtao2@zte.com.cn> - 1.1.10-1
changelog:
  - cherry picked from openeuler/oec-hardware PR#325 commit:24e6c49b
  - Modify ipmi item to support more common BMC detection scenarios


author: JofDiamonds <kwb0523@163.com> - 1.1-5
changelog:
  - fix some review issues:
    1.fix segment fault triggered by unsupported command operations
    2.fix incorrect use of securec function parameters
    3.remove redundant cmd option 'V'


author: Kai Liu <kai.liu@windriver.com> - 0.3.25-5
changelog:
  - Don't run make tasks in background sub-shell, as this causes
    severe issue. Use the _smp_mflags macro instead. See issue
    IB3EV0 for more detail.


author: xu_ping <707078654@qq.com> - 3.24.0-1
changelog:
  - Upgrade version to 3.24.0
    * Add support for FIPS-session mode
    * Updates to harden against RSA timing attacks
    * Add option to show the master key verification patterns of secure keys
    * Add support for exporting a key or certificate as URI-PEM file
    * Performance improvements for attribute retrieval
    * Add support for SHA-2 mechanisms
    * Experimental support for IBM Dilithium via OpenSSL OQS provider
    * Support live guest relocation for protected key (PKEY) operations
    * Add support for CKA_ALWAYS_AUTHENTICATE
    * Add support for CKD_*_SP800 KDFs for ECDH
    * Add support for SHA based key derivation mechanisms
    * Add support for PKCS#11 v3.0 SHA3 mechanisms
    * Add support for building Opencryptoki on the IBM AIX platform
    * Add support for the CCA token on non-IBM Z platforms (x86_64, ppc64)
    * Add support for protecting tokens with a token specific user group
    * Add support for combined CKA_EXTRACTABLE and CKA_IBM_PROTKEY_EXTRACTABLE
    * Add support for Koblitz curve secp256k1. Requires CCA v7.2 or later


author: zhang_wenyu <zhang_wenyu@hoperun.com> - 3.25.0-1
changelog:
  - Upgrade version to 3.25.0
    * Add support for PKCS#11 v3.0 SHAKE key derivation
    * Add support for PKCS#11 v3.0 SHA3 and SHA3-HMAC mechanisms
    * Add support for PKCS#11 v3.0 SHA3 mechanisms and MGFs for RSA-OAEP
    * Add support for PKCS#11 v3.0 SHA3 variants of RSA-PKCS and ECDSA mechanisms
    * Add support for CCA AES CIPHER secure key types
    * Add support for the CKM_ECDH1_DERIVE mechanism
    * Add support for the CKM_AES_KEY_WRAP[_*] mechanisms
    * Add support for the CKM_RSA_AES_KEY_WRAP mechanism
    * Add support for the CKM_ECDH_AES_KEY_WRAP mechanism
    * Add a tool for import and exporting PKCS#11 keys to a KMIP server
    * Add support for opaque secure key blob import via C_CreateObject
    * Add support for key wrapping with AES-GCM
    * Add support for newer CCA versions on s390x and non-s390x platforms
    * Add support for CKM_AES_GCM (single-part operations only)


author: Funda Wang <fundawang@yeah.net> - 0.23.0-7
changelog:
  - fix CVE-2024-8443, CVE-2024-45615, CVE-2024-45616,
    CVE-2024-45617, CVE-2024-45618, CVE-2024-45619, CVE-2024-45620


author: chenyanpanHW <chenyanpan@huawei.com> - 2.0.0-26
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-multicast-set.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-notify-systemd-of-start-up.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-null-pointer-deref.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-openssl-1.1-fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-cve-2016-7567.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-cve-2017-17833.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/CVE-2012-4428-fix-handling-of-string-list-in-slp_common-c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Fix-slp_iface-c-comma-expression-so-it-works-as-designed.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Daemon-sends-wrong-service-reply-when-security-is-enabled.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Fix-DAAddresses-hostname-resolution-issue.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Change-default-slpreg-connection-from-UDP-to-TCP.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Fix-interface-parsing-code-to-look-for-null-ifc-addrs.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Fix-broadcast-functionality.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Properly-initialize-xcastsocks-for-error-exit.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Fix-xrealloc-to-properly-free-original-pointer-on-resize.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/CVE-2019-5544.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: xingwei <xingwei14@h-partners.com> - 2.0.0-27
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Introduce epoch command to slove package upgrade failure problem


author: zhangbinqin<zhangbinqin@h-partners.com> - 9.6p1-13
changelog:
  - Type:CVE
  - CVE:CVE-2026-35414 CVE-2026-35385 CVE-2026-35386 CVE-2026-35387 CVE-2026-35388 
  - SUG:NA
  - DESC:fix CVE-2026-35414 CVE-2026-35385 CVE-2026-35386 CVE-2026-35387 CVE-2026-35388


author: wangkai <13474090681@163.com> - 2.6.9-8
changelog:
  - Fix CVE-2026-11771, CVE-2026-12932, CVE-2026-12996,
    CVE-2026-13117, CVE-2026-13122, CVE-2026-13698


author: baiguo <baiguo@kylinos.cn> - 0.4.34-2
changelog:
  - Use vasprintf() if available for error messages and otherwise vsnprintf();orccompiler, orcparse: Use secure UCRT printing functions on Windows


author: jiangchuangang <jiangchuangang@huawei.com> - 2022.7-1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:update to 2022.7
    add skip-if-etc-mtab-is-not-a-symlink-of-proc-self-mounts.patch for test failed


author: chenyanpanHW <chenyanpan@huawei.com> - 2.4.13-14
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0001-Drop-module-long-test.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: liweigang <liweiganga@uniontech.com> - 3.6-2
changelog:
  - remove patch support gpt_sync_mbr
  - file: huawei-bugfix-add-support-of-gpt_sync_mbr.patch
  - file: add support for gpt_sync_mbr and fix failure of it.


author: wangkai <13474090681@163.com> - 6.2.2-4
changelog:
  - Fix CVE-2024-45769,CVE-2024-45770
  - Fix buffer sizing checks in pmstore PDU handling (RHEL-57805)
  - Guard against symlink attacks in pmpost program (RHEL-57810)
  - Fix libpcp_web webgroup slow request refcounting (RHEL-58306)
  - Updated pmdahacluster for newer crm_mon versions (RHEL-50693)


author: hugel <gengqihu2@h-partners.com> - 10.42-12
changelog:
  - DESC:sync patches from upstream
         backport-Further-ASCII-tests-and-minor-bugfix-plus-ChangeLog-.patch
         backport-avoid-inconsistency-between-d-and-digit-when-using-a.patch
         backport-Fix-the-lookahead-after-d-or-posix-to-skip-whitespac.patch
         backport-Improve-error-offsets-for-character-classes-548.patch
         backport-Non-recursive-scan-prefix-in-JIT-560.patch


author: tangyuchen <tangyuchen5@huawei.com> - 2.0.0-1
changelog:
  - update to 2.0.0
    - Adjust USB drivers path at run-time via environment variable PCSCLITE_HP_DROPDIR
    - Add '--disable-polkit' option
    - Reset eventCounter when a reader is removed
    - Add "polkit" in "pcscd -v" output if enabled
    - Doxygen: document SCARD_E_INVALID_VALUE for some functions
    - use secure_getenv(3) if available
    - Some other minor improvements


author: Guofeng Yue <yueguofeng@h-partners.com> - 4.5-12
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: modify "--source_ip" to "--bind_source_ip" to fix init connection establishment with specific interface


author: chenyanpanHW <chenyanpan@huawei.com> - 4.050-2
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/backport-DBD-mysql-4.050-Remove-a-useless-shebang-from-DBD-mysql.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: sqfu <dev01203@linx-info.com> - 1.647-1
changelog:
  - update version to 1.647
  - Fix Makefile rules for Changes
  - Another example to bind columns 
  - Fix fetchall_arrayref for undefined NAME


author: pengjian <pengjian23@mails.ucas.ac.cn> - 1:0.82-3
changelog:
  - Introduced environment variable-controlled polling timeouts 
  for the close and connection-keeping functions in the os_unix.c file.


author: lichaoran <pkwarcraft@hotmail.com> 1.3293-3
changelog:
  - add buildRequires: add gcc as we using it to compile
  - and perl-generators to auto-generate perl module provides


author: wujie <wujie@nj.iscas.ac.cn> - 0.61-20
changelog:
  - Add riscv64 support from http://fedora.riscv.rocks/koji/buildinfo?buildID=186681
    Author is David Abdurachmanov <david.abdurachmanov@sifive.com>


author: Funda Wang <fundawang@yeah.net> - 4:5.38.0-11
changelog:
  - split out patch adding link to libperl.so into two separated patches,
    and sync it with mageia, which is a better version than fedora
  - disable cleaning empty perl directories
  - use git lfs storage


author: zhangyao <zhangyao108@huawei.com> - 2:2.36-1
changelog:
  - DESC: Upgrade version to 2.36, test code modify, build optimization, avoid the use of magic numbers, deal compilation warning


author: gaihuiying <eaglegai@163.com> - 0.9.5-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add macros to control if need libdrm, pango, libpng and if need to exclude bootlog


author: shiptux <shiptux@gmail.com> - 1.12.5p2-2
changelog:
  - Backport upstream b33e02d2 (issue #4347): use 96-bit IV in testEncryptDecryptGCM
    so it passes under OpenSSL 3


author: duyiwei <duyiwei@kylinos.cn> - 1:4.9.4-10
changelog:
  - Type:bugfix
  - CVE:CVE-2024-9355、CVE-2019-9514、CVE-2024-24791、CVE-2022-32189、CVE-2022-41715、CVE-2022-2880、CVE-2022-1962、CVE-2023-45290、CVE-2024-24783、CVE-2024-24785
  - SUG:NA
  - DESC: Optimize spec files and fix CVE in batches through rebuild


author: duyiwei <duyiwei@kylinos.cn> - 1:4.9.4-11
changelog:
  - Type:bugfix
  - CVE:CVE-2024-9676,CVE-2024-9675, CVE-2024-9407,CVE-2024-9341
  - SUG:NA
  - DESC: fix CVE-2024-9676,CVE-2024-9675, CVE-2024-9407, and CVE-2024-9341


author: zhangxingrong <zhangxingrong@uniontech.cn> - 1.19-4
changelog:
  - Fix poptCallbackType documentation
  - Fix multiple typos in comments
  - Fix potential double-free in test3.c


author: Chenxi Mao <chenxi.mao@suse.com> - 13.01.0000-3
changelog:
  - Add libpq-devel version dependency.
  - Bump version release to 3, because previous change didn't bump release number.


author: heppen <hepeng68@huawei.com> - 1.1.0-3
changelog:
  - Bug fix: fix build warning.
  - Bug fix: export PWR_SYS_GetRtPowerInfo.
  - Bug fix: data collection task intercept invalid task type.


author: heppen <hepeng68@huawei.com> - 1.1.0-4
changelog:
  - Bug fix: memcpy null pointer, array out of bounds, struct align.
  - Bug fix: get watt state will failed at the first time.
  - Bug fix: use process name to query pid but return all pids.
  - Bug fix: mismatch fopen/pclose and popen/fclose, useless if statement.


author: heppen <hepeng68@huawei.com> - 1.1.0-5
changelog:
  - Bug fix: SIGPIPE cause powerapi server exit.
  - Bug fix: pstree command is too slow to get all pid.
  - Bug fix: set smart grid state failed.
  - Bug fix: get watt attr and task list is not correct.


author: Zihao Xue <xuezihao@huawei.com> - 1.1.0-6
changelog:
  - Bug fix: heap buffer overflow caused by sending incomplete strings.
  - Bug fix: too long strings into QueryProcs causes services broke down.


author: Funda Wang <fundawang@yeah.net> - 2.15-2
changelog:
  - fix build with latest gettext
  - harden systemd service file from openSUSE
  - add patch regarding risc-v arch support


author: gaihuiying <eaglegai@163.com> - 2.5.0-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:pre-created upstream default lock dir
         Openssl engine API is deprecated for a while thus disable it


author: gaihuiying <eaglegai@163.com> - 2.5.0-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream
         Fixing up parsing in radiusclient.conf
         Add configure check to see if we have struct sockaddr_ll


author: chenyanpanHW <chenyanpan@huawei.com> - 3.22-52
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/procmail-3.24-rhconfig.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/procmail-3.15.1-man.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/procmail-3.22-truncate.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/procmail-3.24-ipv6.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Zhu Jin <zhujin18@huawei.com> - 4.0.4-8
changelog:
  - library: address a potential race resulting in a fault and avoid strdup() calls in sd2proc() if possible


author: shenzhongwei <shenzhongwei@kylinos.cn> - 1.3.8b-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix: %patchN is deprecated (7 usages found), use %patch N (or %patch -P N)


author: wangkai <13474090681@163.com> - 1.3.9a-1
changelog:
  - Update to 1.3.9a for fix CVE-2026-42167
  - Add 'proxy' sub-package with unbundled mod_proxy
  - Use libsodium to provide ed25519 key support for mod_sftp
  - Update logrotate snippet to use try-reload-or-restart rather than reload
    for distributions with systemd 229 or later


author: liuchao <liuchao173.huawei.com> - 1.5.0-1
changelog:
  - upgrade to 1.5.0:
    - Makefile.am: change link order
    - GitHub actions fail on Windows due to missing unzip command
    - Export and install CMake targets
    - Use CMAKE_CURRENT_BINARY_DIR instead of CMAKE_BINARY_DIR
    - remove deprecated functionality
    - Avoid "unused variable" compiler warning
    - Update autotools
    - Support for new Google protobuf 22.x, 23.x releases
    - Miscellaneous fixes
    - Remove protobuf 2.x support
    - Silence some compiler diagnostics
    - Fixing MSVC build for Msbuild and Makefile generators


author: dongyuzhen <dongyuzhen@h-partners.com> - 25.1-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: distinguish between statically and dynamically compiled pc files and cmake dir to prevent BEP binary differences


author: Funda Wang <fundawang@yeah.net> - 25.1-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: fix build with wrong permission
  - DESC: fix conflicts with protobuf2
  - DESC: revert:distinguish between statically and dynamically compiled pc files and cmake dir to prevent BEP binary differences


author: zhengxiaoxiao <zhengxiaoxiao2@huawei.com> - 25.1-13
changelog:
  - Type:CVE
  - CVE:CVE-2026-0994
  - SUG:NA
  - DESC:Fix Any recursion depth bypass in Python json_format.ParseDict


author: Funda Wang <fundawang@yeah.net> - 17.0-2
changelog:
  - add upstream patch fixing running tests with impossible alignments
  - move language files into lib package
  - cleanup spec


author: wangkai <13474090681@163.com> - 3.13.5-1
changelog:
  - Update to 3.13.5
    * Fix CVE-2026-22815, CVE-2026-34513, CVE-2026-34514, CVE-2026-34516,
      CVE-2026-34517, CVE-2026-34518, CVE-2026-34519, CVE-2026-34520, CVE-2026-34525


author: yaoxin <1024769339@qq.com> - 3.14.1-1
changelog:
  - Update to 3.14.1 for fix CVEs: CVE-2026-54273,CVE-2026-54274,CVE-2026-54275
    CVE-2026-54276,CVE-2026-54277,CVE-2026-54278,CVE-2026-54279,CVE-2026-54280


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 1.2.0-1
changelog:
  - Upgrade package with version 1.2.0
    Support running LibCST on Python 3.12 and drop support for running it on 3.8
    Allow Element::codegen to be used by external users
    Fix parsing list matchers without explicit brackets
    Fix filepathprovider generic type


author: Shinwell Hu <micromotive@qq.com> - 1.11.1.1-4
changelog:
  - Python-ninja should never obsolate ninja-build.
  - Rename /usr/bin/ninja shipped in this package to /usr/bin/python-ninja


author: zhaojingyu <zhaojingyu@kylinos.cn> - 2.2.2-1
changelog:
  - Update to 2.2.2
  - Avoid issuing a spurious DeprecationWarning when a custom DataFrame or Series subclass method is called


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 2.27.2-1
changelog:
  - Update package to version 2.27.2
    Fix linux PGO wheel build
    Forward default_value calls to the underlying schema for DefinitionRefValidator
    Include JSON Schema input core schema in function schemas


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 3.7.0-1
changelog:
  - Update version to 3.7.0
    Drop GIL during long-running proj database calls
    Add is_deprecated and get_non_deprecated() to CRS
    Add runtime & compiled PROJ versions
    Add Windows system path to delvewheel add-path
    Adds codespell to pre-commit hooks


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 0.7.0-1
changelog:
  - Update package to version 0.7.0
    Add support for extensionless Python files for server
    Fix configuration inheritance for configurations specified in the LSP settings
    Fix placement of inline parameter comments
    Add a subcommand to generate dependency graphs
    Add Python version support to ruff analyze CLI
    Add exclude support to ruff analyze
    Fix parentheses around return type annotations
    Fix codeblock dynamic line length calculation for indented docstring examples
    Refurb implement hardcoded-string-charset
    Refurb Count codepoints not bytes for slice-to-remove-prefix-or-suffix


author: zhangxianting <zhangxianting@uniontech.com> - 3.19.2-1
changelog:
  - Update to 3.19.2:
  - Updated test & build matrix to include Python 3.12 and use GitHub Actions as a Trusted Publisher (OIDC) https://github.com/simplejson/simplejson/pull/317


author: wangkai <13474090681@163.com> - 3.19.2-2
changelog:
  - Fixed the packaging process does not include __pycache__ tests
  - Obsoletes empty package python-simplejson-help


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 2.13.0-1
changelog:
  - Update package to version 2.13.0
    Add support for datetime.timedelta to time_machine.travel().
    Add shift() method to the time_machine pytest fixture.
    Fix documentation about using local time for naive date(time) strings.


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-72
changelog:
  - ub: don't check ers addr size is power of 2
  - ub: support process msg code exch
  - ub: replace malloc with g_malloc0
  - Migration/urma:explicitly set URMA JFS tp_type to URMA_CTP
  - MAINTAINERS: add me as maintainer to virtio-snd
  - virtio-snd: remove TODO comments
  - virtio-snd: handle 5.14.6.2 for PCM_INFO properly(CVE-2026-3196)
  - virtio-snd: fix max_size bounds check in input cb(CVE-2026-3195)
  - virtio-snd: tighten read amount in in_cb(CVE-2026-3195)
  - hw/arm: Close unreleased out_fault_fd
  - pci: avoid the info qtree crash caused by arm-smmuv3-accel


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-73
changelog:
  - target/arm: add kunpeng 920 V1 support
  - target/arm: add kunpeng 950 V1 support
  - target/arm: add kunpeng 920 V2 support
  - hw/virtio/virtio-crypto: verify asym request size(CVE-2025-14876)
  - cryptodev-builtin: Limit the maximum size(CVE-2025-14876)
  - block/vmdk: fix OOB read in vmdk_read_extent()(CVE-2026-2243)
  - lsi53c895a: keep a reference to the device while SCRIPTS execute(CVE-2024-6519)


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-74
changelog:
  - virtio-blk: avoid using ioeventfd state in irqfd conditional
  - machine: Use error handling when CPU type is checked
  - hw/core/cpu: Update description of CPUState::node
  - hw/cpu/core: Cleanup unused included header in core.c
  - hw/cpu/cluster: Cleanup unused included header in cluster.c
  - hw/arm/bcm2836: Simplify use of reset-cbar property
  - hw/arm/bcm2836: Use ARM_CPU mp-affinity property
  - hw: Simplify accesses to the CPUState::start-powered-off property
  - hw/ppc/xive2_regs: Remove unnecessary cpu.h inclusion
  - hw/mips: Inline bios.h definitions
  - docs: use "buses" rather than "busses"
  - hw/ppc/spapr_cpu_core: Access QDev properties with proper API
  - hw/vfio: fix iteration over global VFIODevice list
  - vfio/iommufd: Remove the use of stat() to check file existence
  - vfio/container: Rename vfio_init_container to vfio_set_iommu
  - target/sparc: Simplify qemu_irq_ack
  - tests/avocado: add a simple i386 replay kernel test
  - tests/avocado: modernise the drive args for replay_linux
  - block: Fix crash when loading snapshot on inactive node
  - roms/efi: clean up edk2 build config
  - roms/efi: exclude efi shell from secure boot builds
  - Migration/urma:Avoid polling jfc timeouts resulting from hardware failures.
  - hyperv/syndbg: check length returned by cpu_physical_memory_map()(CVE-2026-3842)
  - ub: fix ers update error
  - kvm/arm/virt: Implement kvm-vtimer-status
  - hw/arm/virt: Implement timer early inject PV support
  - Migration/urma: replace ulseep with usleep in poll_jfc_wait


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-76
changelog:
  - target/arm: Conditionally add KVM writable properties based on RME
  - Migration/urma:adapt urma to use udma device to process iterative migration
  - Migration/urma: drop unused index in qemu_urma_init_ram_blocks
  - ub_ummu: default uninstall all tecte when cfgi all invalidate and free vdev when tecte uninstall
  - ub ummu: realize mapt_cmdq_ctxt_attr regster process
  - vfio ub: support config fd for vfio-ub device
  - hw/core/machine-smp: Deprecate unsupported "parameter=1" SMP configurations
  - hw/core/machine-smp: Calculate total CPUs once in machine_parse_smp_config()
  - hw/core/machine: Introduce the module as a CPU topology level
  - hw/core/machine: Support modules in -smp
  - hw/core: Introduce module-id as the topology subindex
  - hw/core: Support module-id in numa configuration
  - hw/i386: split x86.c in multiple parts
  - i386/cpu: Fix i/d-cache topology to core level for Intel CPU
  - i386/cpu: Use APIC ID info to encode cache topo in CPUID[4]
  - i386/cpu: Use APIC ID info get NumSharingCache for CPUID[0x8000001D].EAX[bits 25:14]
  - i386/cpu: Consolidate the use of topo_info in cpu_x86_cpuid()
  - i386/cpu: Introduce bitmap to cache available CPU topology levels
  - i386: Split topology types of CPUID[0x1F] from the definitions of CPUID[0xB]
  - i386/cpu: Decouple CPUID[0x1F] subleaf with specific topology level
  - i386: Introduce module level cpu topology to CPUX86State
  - i386: Support modules_per_die in X86CPUTopoInfo
  - i386: Expose module level in CPUID[0x1F]
  - i386: Support module_id in X86CPUTopoIDs
  - i386/cpu: Introduce module-id to X86CPU
  - tests: Add test case of APIC ID for module level parsing
  - hw/i386/pc: Support smp.modules for x86 PC machine
  - i386: Add cache topology info in CPUCacheInfo
  - i386/cpu: Use CPUCacheInfo.share_level to encode CPUID[4]
  - i386/cpu: Use CPUCacheInfo.share_level to encode CPUID[0x8000001D].EAX[bits 25:14]
  - i386: Add support for SUCCOR feature
  - i386/cpu: fixup number of addressable IDs for processor cores in the physical package
  - kvm: Allow kvm_arch_get/put_registers to accept Error**
  - i386/cpu: Don't enumerate the "invalid" CPU topology level
  - hw/core: Make CPU topology enumeration arch-agnostic
  - qapi/qom: Define cache enumeration and properties for machine
  - hw/core: Check smp cache topology support for machine
  - hw/core: Add a helper to check the cache topology level
  - hw/core/machine-smp: Initialize caches_bitmap before reading
  - hw/core/machine-smp: Fix error message parameter
  - i386/cpu: Extract a common fucntion to setup value of MSR_CORE_THREAD_COUNT
  - i386/cpu: Drop the variable smp_cores and smp_threads in x86_cpu_pre_plug()
  - i386/cpu: Drop cores_per_pkg in cpu_x86_cpuid()
  - i386/topology: Update the comment of x86_apicid_from_topo_ids()
  - i386/topology: Introduce helpers for various topology info of different level
  - target/i386/cpu: Consolidate the use of warn_report_once()
  - i386/cpu: Track a X86CPUTopoInfo directly in CPUX86State
  - i386/cpu: Hoist check of CPUID_EXT3_TOPOEXT against threads_per_core
  - cpu: Remove nr_cores from struct CPUState
  - i386/cpu: Set up CPUID_HT in x86_cpu_expand_features() instead of cpu_x86_cpuid()
  - i386/cpu: Set and track CPUID_EXT3_CMP_LEG in env->features[FEAT_8000_0001_ECX]
  - hw/core/machine: Reject thread level cache
  - i386/cpu: Support module level cache topology
  - i386/cpu: Update cache topology with machine's configuration
  - i386/pc: Support cache topology in -machine for PC machine
  - i386/cpu: add has_caches flag to check smp_cache configuration
  - i386/cpu: Introduce enable_cpuid_0x1f to force exposing CPUID 0x1f
  - i386/cpu: Move adjustment of CPUID_EXT_PDCM before feature_dependencies[] check
  - i386/cpu: Rename enable_cpuid_0x1f to force_cpuid_0x1f
  - i386/cpu: Refine comment of CPUID2CacheDescriptorInfo
  - i386/cpu: Add descriptor 0x49 for CPUID 0x2 encoding
  - i386/cpu: Add default cache model for Intel CPUs with level < 4
  - i386/cpu: Present same cache model in CPUID 0x2 & 0x4
  - i386/cpu: Consolidate CPUID 0x4 leaf
  - i386/cpu: Drop CPUID 0x2 specific cache info in X86CPUState
  - i386/cpu: Add x-vendor-cpuid-only-v2 option for compatibility
  - i386/cpu: Mark CPUID[0x80000005] as reserved for Intel
  - i386/cpu: Rename AMD_ENC_ASSOC to X86_ENC_ASSOC
  - i386/cpu: Fix CPUID[0x80000006] for Intel CPU
  - i386/cpu: Add legacy_intel_cache_info cache model
  - i386/cpu: Add legacy_amd_cache_info cache model
  - i386/cpu: Select legacy cache model based on vendor in CPUID 0x2
  - i386/cpu: Select legacy cache model based on vendor in CPUID 0x4
  - i386/cpu: Select legacy cache model based on vendor in CPUID 0x80000005
  - i386/cpu: Select legacy cache model based on vendor in CPUID 0x80000006
  - i386/cpu: Select legacy cache model based on vendor in CPUID 0x8000001D
  - i386/cpu: Use a unified cache_info in X86CPUState
  - i386/cpu: Introduce cache model for SierraForest
  - i386/cpu: Introduce cache model for GraniteRapids
  - i386/cpu: Introduce cache model for SapphireRapids
  - i386/cpu: Add a "x-force-cpuid-0x1f" property
  - i386/cpu: Enable 0x1f leaf for SierraForest by default
  - i386/cpu: Enable 0x1f leaf for SierraForest by default
  - i386/cpu: Enable 0x1f leaf for GraniteRapids by default
  - i386/cpu: Enable 0x1f leaf for SapphireRapids by default
  - i386/cpu: Mark EBX/ECX/EDX in CPUID 0x80000000 leaf as reserved for Intel
  - i386/cpu: Mark CPUID 0x80000007[EBX] as reserved for Intel
  - i386/cpu: Mark CPUID 0x80000008 ECX bits[0:7] & [12:15] as reserved for Intel/Zhaoxin
  - i386/cpu: Reorder CPUID leaves in cpu_x86_cpuid()
  - i386/cpu: Fix number of addressable IDs field for CPUID.01H.EBX[23:16]
  - i386/cpu: Fix cpu number overflow in CPUID.01H.EBX[23:16]
  - i386/cpu: Honor maximum value for CPUID.8000001DH.EAX[25:14]
  - hw/core: allow parameter=1 for SMP topology on any machine
  - docs/deprecated: Remove undeprecated SMP description
  - i386/tcg: Make CPUID_HT and CPUID_EXT3_CMP_LEG supported
  - i386/hvf: Make CPUID_HT supported
  - target/i386/cpu: Move addressable ID encoding out of compat property in CPUID[0x1]
  - target/i386: add compatibility property for pdcm feature


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-77
changelog:
  - system/physmem: Fix possible double free when destroy cpu address space
  - Migration: add virtcca secure CVM live migration support
  - Migration: add virtcca secure CVM live migration support
  - virtcca migration: bugfix, meson option 'virtcca_migration' default value set to disabled
  - ub: update VFIO UB IRQ index enum definitions
  - ub: add VFIO_UB_REINIT_IRQ_INDEX for reinit interrupt support
  - ub: return error code to vm
  - ub: fix passthrough errno to vm
  - ub: reinit irq set failed don't stop vm
  - migration/cgs: fix some function name spell error
  - migration/cgs: Fix mismatched allocator in write_numa_info_to_sysfs
  - ub: fix fill_rq_cq not checking fill_cq return value
  - ub: fix ub cq depth
  - ub: pass ub feature to guest os
  - migration/cgs: bugfix, adding poison ignore CONFIG_VIRTCCA_MIGRATION when building non-aarch64 target to avoid error


author: Fei Xu <xufei30@huawei.com> - 11:8.2.0-78
changelog:
  - system/physmem: disable guest RAM core dump for cca
  - vhost: Remove unused log_fd variable in vhost_dev_log_resize()
  - i386/cpu: Allow cache to be shared at thread level
  - hw/vfio: Allow multiple vfio devices migration if none support P2P_MIGRATION


author: Fei Xu <xufei30@huawei.com> - 11:8.2.0-79
changelog:
  - virtio-gpu: fix overflow check when allocating 2d image (CVE-2026-3886)
  - ui/vnc: fix OOB read updating VNC update frequency stats(CVE-2026-48003)
  - virtio-blk: add missing VIRTIO_BLK_T_SCSI_CMD size check (CVE-2026-48914)


author: Fei Xu <xufei30@huawei.com> - 11:8.2.0-81
changelog:
  - hw/net/rocker_of_dpa: Check group ID pointers are not NULL(CVE-2022-36648)
  - hw/net/rocker_of_dpa: Avoid unaligned accesses in _of_dpa_flow_match()
  - ub_ummu: support CMD_TLBI_OS_ASID_U and CMD_TLBI_HYP_ASID_U command
  - virtio-scsi: pass the same cdb_size to virtio_scsi_pop_req and virtio_scsi_handle_cmd_req_prepare(CVE-2026-5763)


author: Jingwiw <wangjingwei@iscas.ac.cn> - 5.2.0+git6.3-1
changelog:
  - Init package from openSUSE: https://build.opensuse.org/package/show/home:neochapay:nemo:mw/qt5-qtfeedback


author: panchenbo <panchenbo@kylinsec.com.cn> - 5.15.10-5
changelog:
  - Backport ffmpeg: avcodec/x86/mathops: clip constants used with shift instructions within inline assembly


author: lifeifei <lifeifei@kylinos.cn> - 2.19-3
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Add the socket option IPV6_MULTICAST_LOOP to prevent the interface from autoconfiguring using RA messages sent by itself.


author: andy <liuyang01@kylinos.cn> - 0.8.0-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patches
         Use the right dev_t decoding for diskerror handler


author: shixuantong <shixuantong1@huawei.com> - 8.2-4
changelog:
  - Add shell command to switch bracketed-paste mode from on to off to keep consistent with realine-8.0


author: wangkai <13474090681@163.com> - 7.2.7-1
changelog:
  - Update to 7.2.7
  - Fix CVE-2021-32626 CVE-2021-32627 CVE-2021-32762 CVE-2021-32675
    CVE-2021-41099 CVE-2021-32628 CVE-2021-32687 CVE-2022-24735
    CVE-2022-24736 CVE-2022-3647 CVE-2022-3734 CVE-2022-35977
    CVE-2023-25155 CVE-2024-46981


author: zouzhimin <zouzhimin@kylinos.cn> - 4.13.0-13
changelog:
  - nfsserver: fix "server scope" functionality for both potentially other dropins AND multiple ExecStart


author: zouzhimin <zouzhimin@kylinos.cn> - 4.15.1-1
changelog:
  - update to 4.15.1
  - IPaddr2: dont fail with "IPv4 does not support lvs_ipv6_addrlabel"
    error, as the parameter is not used in IPv4 scenarioes


author: zhouyihang <zhouyihang3@h-partners.com> - 0.9.1-4
changelog:
  - Type:requirements
  - Id:NA
  - SUG:NA
  - DESC:use libsoup2 instead of libsoup3 for build when no libsoup3 provided


author: sunsuwan <sunsuwan3@huawei.com> - 1.2.6-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:add a user directory when the rpc user directory does not exist


author: Funda Wang <fundawang@yeah.net> - 4.18.2-34
changelog:
  - disable automatic maintenance when autopatching with git
    https://github.com/git/git/commit/1942d48380fec53f76361e9adebef15b5db9628a
  - sync patches within branches


author: Funda Wang <fundawang@yeah.net> - 3.2.7-6
changelog:
  - fix CVE-2024-12084, CVE-2024-12085, CVE-2024-12086, CVE-2024-12087,
    CVE-2024-12088, CVE-2024-12747


author: zhangyaqi <zhangyaqi@kylinos.cn> - 8.2312.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memory leak in omazureeventhubs on accepted PN_DELIVERY event


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 8.2312.0-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix passing the value to EscapeChar
         Do not free the uninitialized cstring
         Keep original free pattern
         network subsystem: improve connection failure error message
         Fix runConf NULL pointer refence
         rainerscript: do not try to call a function if it does not exist
         nsd_ptcp regression fix: remove debugging messages emited to stderr
         Fix legacy $ActionQueueDiscardMark parameter


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 8.2312.0-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:gnutls bugfix: Avoid blocking sockets during TLS handshake
         gnutls bugfix: Add timeout to GnuTLS handshake
         core: fix potential NULL ptr access on HUP in very early startup phase
         omfwd: fix segfault in UDP freeaddrinfo
         gnutls TLS driver: fix small memory leak
         rsyslog startup bugfix: cosmetic memory leak
         core: fix potential misadressing in sigmask
         covscan: remove defect type of RESOURCE_LEAK
         Fix a buffer overflow when the argument to replace is empty


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 8.2312.0-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:omusrmsg bugfix: potential null pointer dereference causes segfault
         omusrmsg bugfix: potential double free, which can cause segfault
         imjournal: fix double sd_journal_close() during thread cancellation
         imuxsock: Add statistics counter for discarded messages
         omjournal: Fix priority value
         fix stringop-overread warning in omusrmsg
         fix hashtable realloc memset range
         fix off-by-one buffer overflow


author: qujingling <qujingling@huawei.com> - 8.2312.0-10
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:imjournal: initialize instance fields to avoid invalid free
         imjournal: fix vulnerability in state file creation


author: xinghe <xingheyd@163.com> - 4.19.3-9
changelog:
  - Type:cves
  - ID:CVE-2026-3238 CVE-2026-3012 CVE-2026-4480 CVE-2026-4408
  - SUG:NA
  - DESC:fix CVE-2026-3238 CVE-2026-3012 CVE-2026-4480 CVE-2026-4408


author: xinghe <xinghe2@h-partners.com> - 8.17.2-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:extending the certificate validate period
         remove redundant patches


author: zhengxiaoxiao <zhengxiaoxiao2@huawei.com> - 2:4.14.3-1
changelog:
  - update version to 4.14.3
    -Avoid null pointer dereference
    -Update utmp at an initial login
    -Merge libshadow and libmisc into a single libshadow
    -Adding the userdel and groupdel hooks to release tarball


author: yueyuankun <yueyuankun@kylinos.cn> - 15.7-21
changelog:
  - spec: Remove debugsource requirement from debuginfo
  - Allow debuginfo to be installed alone without pulling in the debugsource package.


author: wjiang <app@cameyan.com> -15.7-22
changelog:
  - Backport bugfix patches from upstream
  - Fix build with binutils 2.46 (c4665d2)
  - Fix memory leak on TPM log error in mirror_one_mok_variable (92630f2)


author: liuqingtao <liu.qingtao2@zte.com.cn> -1.1.10-3
changelog:
  - optimized-RV-FindMatchLength-improving-compress-speed--upstream-accepted
  - DESC:Use-high-performance-FindMatchLength-to-Optimize for RV


author: zhengziyang <zheng.ziyang@zte.com.cn> -1.1.10-5
changelog:
  - backport：add rvv support for MemCopy64，upstream accepted
  - DESC:This PR add RVV to  optimize Memcopy64 function , improving compression speed


author: zhengziyang <zheng.ziyang@zte.com.cn> -1.1.10-6
changelog:
  - backport：gate__builtin_ctzll-behind-Zbb-to-avoid-10
  - DESC:RISC-V: use __builtin_ctzll only when Zbb is present


author: yaqiangchen <chenyaqiang@huawei.com> - 14.4.2.0-29
changelog:
  - Fix CVE-2021-33844,CVE-2023-32627,CVE-2021-23159,CVE-2023-34432
  - CVE-2023-34318,CVE-2021-23172,CVE-2021-3643,CVE-2021-23210
  - CVE-2022-31650,CVE-2023-26590,CVE-2022-31651,CVE-2023-32627
  - CVE-2017-18189


author: xinghe <xingheyd@163.com> - 7:6.6-8
changelog:
  - Type:cves
  - ID:CVE-2026-33526 CVE-2026-33515 CVE-2026-32748
  - SUG:NA
  - DESC:fix CVE-2026-33526 CVE-2026-33515 CVE-2026-32748


author: Xu Raoqing <609179072@qq.com> - 2.9.4-19
changelog:
  - oidc_child: fix wrong usage of printf format (a2bd434)
  - ad: use right memory context in GPO code (723a30b)
  - Responder: fix passkey auth when user-verification is off (4c6c010)
  - KRB5: fix mem leak in authenticate_stored_users (8b452b3)
  - KCM: fix use-after-free in kcm_read_options (50ae35f)
  - NSS: Fix wrong condition invalidating an optimization (6d71291)


author: Qin Fandong <qinfandong@kylinos.cn> - 2.9.4-22
changelog:
  - Type:CVE
  - ID:CVE-2026-14474
  - SUG:NA
  - DESC:fix CVE-2026-14474: warn when ldap_sudo_search_base falls back to root DN to prevent privilege escalation


author: yixiangzhike <yixiangzhike007@163.com> - 1.9.15p5-7
changelog:
  - apply 2 patches: backport-sudo_rfc1938_setup--fix-out-of-bounds-read-if-the-.patch, backport-sudo_auth_init--Fix-setting-FLAG_ONEANDONLY-if-onl.patch


author: shixuantong <shixuantong1@h-partners.com> - 1.0.3-43
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix(xalarm): fix service stop timeout and PID lock release issues


author: shixuantong <shixuantong1@h-partners.com> - 1.0.3-46
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix sysSentry service restart issues: PID lock release and socket init


author: shixuantong <shixuantong1@h-partners.com> - 1.0.3-47
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix event switch invalidation after sysSentry service restart
         verify event switch state by reading proc file before skipping re-open


author: shixuantong <sxt1001@qq.com> - 1.0.3-48
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix PYNAME define
         cleanup: uninstall log_utils.h file
         Fix the issue of missing security compilation options
         fix bmc_ras_sentry compile failed on old gcc
         fix(script): check if driver exists before removing it
         feat(sentry_msg_monitor): add kernel-driver version compatibility check on startup


author: shixuantong <sxt1001@qq.com> - 1.0.3-49
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix potential overflow in  xalarm_report_event()
         Fix CTL message length overflow when data exceeds 3 digits


author: renoseven<dev@renoseven.net> - 1.2.2-4
changelog:
  - bugfix: fix rust 1.84 compile failure
  - bugfix: fix cannot find working directory
  - bugfix: fix set signal handler failure
  - bugfix: fix active accepted patch failure


author: renoseven<dev@renoseven.net> - 1.2.2-5
changelog:
  - feature: support riscv64
  - feature: support 'syscare rescan' command
  - feature: support patch blacklist / blocklist
  - feature: support custom kernel config
  - feature: support log config
  - feature: add metadata viewer
  - feature: add metadata generator
  - bugfix: supress rpm signature warnings
  - bugfix: remove build id check
  - bugfix: ignore useless sections
  - bugfix: fix attach non-exist process failure
  - bugfix: fix remote mmap failure
  - bugfix: fix some symbol resolving issue
  - bugfix: remove upatch failure process list
  - bugfix: remove root permission check


author: renoseven<dev@renoseven.net> - 1.2.2-6
changelog:
  - feature: upatch supports overridding line macros
  - bugfix: fix upatch id parsing error
  - bugfix: fix upatch object linker detection failure
  - bugfix: fix kernel module build failure
  - bugfix: fix kernel patch name length limitation
  - bugfix: fix multiple upatch-diff issues
  - bugfix: fix multiple upatch-manage issues
  - rpm: extract vendor from syscare-1.2.2.tar.gz to vendor.tar.gz


author: renoseven<dev@renoseven.net> - 1.2.2-7
changelog:
  - change: add debuginfo package version verification in syscare-build
  - change: rename "--keep-line-macros" to "--override-line-macros" in syscare-build
  - change: rename "--keep-line-macros" to "--override-line-macros" in upatch-build
  - bugfix: fix special section correlation failure
  - bugfix: fix compilation command misdetection
  - bugfix: fix incorrect upatch object lookup when upatch ID conflicts
  - bugfix: fix patch file disorder when building cumulative patches
  - bugfix: fix abnormal syscare CLI return value when external command failure
  - bugfix: fix stack check false warnings under boundary conditions
  - bugfix: fix build failure under Rust 1.89


author: eshiner<zengfuliangjx@sina.cn> - 1.2.2-9
changelog:
  - change: rewrite parse_patches
  - bugfix: fix parse target version string error
  - bugfix: fix older compiler versions compatibility issue
  - bugfix: update Cargo.lock
  - bugfix: fix kernel configuration compatibility issue
  - bugfix: fix apply patch to source error
  - change: optimize compiler error display and add execution of clean-cmd
  - bugfix: fix override_line_macros scope and add auto-recovery
  - bugfix: fix read_stack segmentation fault
  - bugfix: fix wrong variable check in parse_section_metadata
  - change: implement lock-free patch manager
  - bugfix: fix patch monitor watch mapping and event handling edge cases
  - bugfix: add NULL check for sec->rela before dereferencing
  - bugfix: fix variable name errors in section info parsing
  - bugfix: fix symbol type filter inversion in resolve_rela_plt
  - change: move upatch_find_patch out of retry loop in upatch_unapply_prepare
  - bugfix: fix off-by-one buffer overflow in readlink


author: zhangxianting <zhangxianting@uniontech.com> - 0.9-64
changelog:
  - Type:patch
  - CVE:NA
  - SUG:NA
  - DESC:patch hunk FAILED bacause of the arch judgement of sw_64 and loongarch64


author: laokz <zhangkai@iscas.ac.cn> - 0.9-67
changelog:
  - Type:fix
  - CVE:NA
  - SUG:NA
  - DESC:riscv64: reverse -static-pie patch due to unsupported tool-chains


author: lingsheng <lingsheng1@h-partners.com> - 6.04-16
changelog:
  - update libpng 1.6.36 to fix CVE-2011-2501 CVE-2011-2690 CVE-2011-2691
  - CVE-2011-2692 CVE-2011-3045 CVE-2011-3048 CVE-2012-3425 CVE-2015-7981
  - CVE-2015-8126 CVE-2015-8472 CVE-2015-8540 CVE-2016-10087 CVE-2017-12652


author: wjiang <app@cameyan.com> - 255-52
changelog:
  - backport community patches and skip bios_version test:
        backport-login-user-runtime-dir-free-ignored-sd_bus_error-avo.patch
        backport-login-user-runtime-dir-use-STRLEN-where-appropriate.patch
        backport-systemctl-gracefully-adjust-bus-transport-and-runtim.patch
        backport-journal-do-not-rotate-journal-when-MaxRetentionSec-i.patch
        backport-nspawn-use-strv_extend-and-friends-to-build-director.patch
        backport-nspawn-only-remount-usr-with-idmap-when-volatile-yes.patch
        backport-nspawn-mount-var-after-remount_idmap-when-volatile-s.patch
        backport-compress-avoid-a-bunch-of-div-by-zeroes.patch


author: Linux_zhang <244695981@qq.com> - 255-53
changelog:
  - sync community patches
    backport-journal-use-EBADMSG-for-invalid-data-in-file-mmap.patch
    backport-journal-replace-a-bunch-of-assert-with-friendlier-ch.patch


author: wulinfeng <wulinfeng@xfusion.com> - 255-55
changelog:
  - fix coredump generation when systemd-resolved and systemd-networkd service is started then uninstalled


author: Yu Peng <yupeng@kylinos.cn> - 5.0-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Make autoconf-utrace-via-tracepoints.c work with struct folio.


author: panxiaohe<panxh.life@foxmail.com> - 1:1.10.2-1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:update version to 1.10.2
         add perl to BuildRequires


author: Funda Wang <fundawang@yeah.net> - 0.8.2-15
changelog:
  - move glib schemas into main package
  - drop static lib as it was not used by any other packages
  - drop uselss scriptlets as they are handled by rpm file trigger already


author: Yu Peng <yupeng@kylinos.cn> - 1:0.17-81
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix telnet crashes on stack overflow due to infinite recursion.


author: zhangxianting <zhangxianting@unionech.com> - 2.12.1-1
changelog:
  - Increase the upper limit version of typing_extensions to fix install, typing_extensions>=3.6.6,<4.6.0 to typing_extensions>=3.6.6,<=4.10.0


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com>- 0.6-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:The "cc:No such file or directroy" error message is displayed during compilation.Therefore,add buildrequires gcc.
         The macro unitdir is used.Therefore,add buildrequires systemd


author: chench <chench@hygon.cn> - 4.0.1-5
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:add SM4 algorithm support
    - Add support for udev to create tcm devices
    - add ecc encrypt/decrypt support
    - add bootstrap file from upstream


author: lizhuo <lizhuo@xfusion.com> - 4.0.1-6
changelog:
  - FAPI: Fix missing scanf checks.
    In several cases the return value of scanf was not checked.
    Thus afterwards acces to variables not initialized was possible.


author: lizhuo <lizhuo@xfusion.com> - 4.0.1-7
changelog:
  - FAPI: TCTI Device: Fix using of C string for byte array.
    On arch linux gcc did produce an error because a null terminator
    was added.


author: renmingshuai <renmingshuai@huawei.com> - 4.4.2-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:add a test case for PXE to support ipv6
         support lease time config for ipv6


author: gaihuiying <eaglegai@163.com> - 1.17.1-15
changelog:
  - Type:CVE
  - CVE:CVE-2025-11411
  - SUG:NA
  - DESC:Additional fix for CVE-2025-11411 to include YXDOMAIN and non-referral nodata answers in the mitigation


author: gaihuiying <eaglegai@163.com> - 1.17.1-16
changelog:
  - Type:cves
  - CVE:CVE-2026-33278,CVE-2026-42944,CVE-2026-41292,CVE-2026-42959,CVE-2026-42960
  - SUG:NA
  - DESC:fix CVE-2026-33278,CVE-2026-42944,CVE-2026-41292,CVE-2026-42959,CVE-2026-42960


author: gaihuiying <eaglegai@163.com> - 1.17.1-17
changelog:
  - Type:cves
  - CVE:CVE-2026-32792,CVE-2026-42923,CVE-2026-40622,CVE-2026-42534,CVE-2026-44390,CVE-2026-44608
  - SUG:NA
  - DESC:fix CVE-2026-32792,CVE-2026-42923,CVE-2026-40622,CVE-2026-42534,CVE-2026-44390,CVE-2026-44608


author: liuchao <liuchao173@huawei.com> - 1.90.2-1
changelog:
  - Update to 1.90.2:
    - Fix wireless devices not disappearing from Settings when disconnected
    - Require a newer libgudev to avoid bugs related to newline stripping when reading sysfs attributes
    - Add installed-tests files for use with gnome-desktop-testing
    - Fix integration test to work with system installed upower binary and under jhbuild
    - Detect headsets with kernel batteries such as Logitech and Steelseries headsets, and make them automatically disappear if the headset is turned off (if the kernel driver supports the wireless_status attribute)
    - Hide duplicate Logitech Bluetooth devices (Bolt-compatible devices connected through Bluetooth would show as 2 batteries)
    - Hide duplicate Logitech wireless devices when they get connected through USB as well
    - Fix Bluetooth device names not synchronising, and use user-chosen names when available
    - Handle the "present" sysfs attribute changing
    - Fix iDevices not appearing
    - Fix reading capacity_level with newer libgudev
    - Fix OpenBSD backend
    - Refactor internal battery handling into separate classes
    - Guess charging/discharging state based on energy rate (#196)
    - Fix polling after resume (#198)
    - Fix battery state guessing (#146)
    - Reload history when battery ID changes
    - Test fixes
    - Move state guessing into DisplayDevice
    - Always use 90% threshold to consider a battery full
    - Various test improvements
    - Fix mice showing up as keyboards (#189)
    - Allow unit test inspector to fail (#187)
    - Fix test cases when daemon shuts down too slowly (#188)
    - Remove broken wakeup DBus API
    - Tag UPS hid devices using hwdb and update list from upstream
    - Only permit Refresh method when in debug mode
    - Refactor device polling
    - Refactor udev device discovery and sibling detection
    - Improved testing and CI
    - Handle SIGTERM to trigger a clean shutdown
    - Improve polling of batteries after line-power "online" status change
    - Multiple wacom tablet detection fixes
    - Fix updates after a BT hid power supply moves in sysfs
    - Fix enumeration of "Whats Up!" devices on startup
    - Accept USB power supplies without warning
    - Allow building without gtk-doc


author: yaoxin <1024769339@qq.com> - 0.9.9-1
changelog:
  - Update to 0.9.9:
    * Changed: Require CMake >=3.10.0
    * Fixed: Dissolve undefined behavior in parsing of URIs
    * Fixed: Normalized percent-encoded octets should have uppercase letters
      in the host
    * Fixed: Fix macros URI_VER_SUFFIX_UNICODE and URI_VER_UNICODE
    * Improved: CMake: Compile with -std=c90 by default
    * Improved: Convert remaining DOS (CR/LF) newlines to Unix newlines


author: zhanghongtao <zhanghongtao22@huawei.com> - 017-1
changelog:
  - update package to usbutils-017
  - lsusb: add fallback names for 'lsusb -v' output
  - Honor system libdir and includedir
  - usbutils: lsusb-t: print entries for devices with no interfaces
  - lsusb -t: sort in bus order, not reverse order
  - susb-t: if a driver is not bound to an interface, report "[none]"
  - Generate usbutils.pc pkgconfig file
  - usbreset: Allow idProduct and idVendor to be 0
  - susb: Add function that sorts the output by device ID.
  - lsusb: Additional sorting by bus number.
  - lsusb: This is a more compact implementation of the device list sort implemented within this pull request. The output remains the same as the one demonstrated in the previous commit.


author: liuchao <liuchao173@huawei.com> - 0.14.0-1
changelog:
  - upgrade to 0.14.0:
    - Fix: urcu-bp: only teardown call-rcu worker in destructor
    - Fix: rculfhash: urcu_die() takes positive error value
    - Fix: call_rcu: teardown default call_rcu worker on application exit
    - Fix: join worker thread in call_rcu_data_free
    - Docs: clarify grace period polling API
    - Document grace period polling in rcu-api.md
    - Implement poll rcu stress test in rcutorture
    - urcu-memb,mb,signal: Implement grace period polling
    - Fix: auto-resize hash table destroy deadlock
    - Fix building on MSYS2
    - rculfhash: Include rculfhash-internal.h from local directory
    - Remove "Darwin" from "should also work on list"
    - Merge branch 'adah1972-improve-md'
    - Add semicolons at the end of function prototypes
    - Wrap a file name in backticks
    - Wrap command-line options in backticks
    - Fix a wrong format
    - Wrap URLs in angle brackets
    - Fix Markdown issues
    - Fix: Always check pthread_create for failures
    - Disable signals in URCU background threads
    - Fix: futex.h: include headers outside extern C
    - Fix: add missing unused attribute to _rcu_dereference
    - Fix: change method used by _rcu_dereference to strip type constness
    - Fix: remove type constness in URCU_FORCE_CAST's C++ version
    - Move extern "C" down in include/urcu/urcu-bp.h
    - fix: ifdef linux specific cpu count compat
    - Add unit tests for possible_cpus_array_len
    - fix: sysconf(_SC_NPROCESSORS_CONF) can be less than max cpu id
    - Fix: revise obsolete command in README.md
    - Fix: workqueue: remove unused variable "ret"
    - Fix: urcu-qsbr: futex wait: handle spurious futex wakeups
    - Fix: urcu: futex wait: handle spurious futex wakeups
    - Fix: urcu-wait: futex wait: handle spurious futex wakeups
    - Fix: defer_rcu: futex wait: handle spurious futex wakeups
    - Fix: call_rcu: futex wait: handle spurious futex wakeups
    - Fix: workqueue: futex wait: handle spurious futex wakeups
    - Fix: Use %lu rather than %ld to print count
    - Update ABI definition files
    - Bump version current and age
    - alpha: allocate membarrier system call number
    - Bump version to 0.14.0-pre
    - Improved test framework
    - rculfhash: introduce cds_lfht_node_init_deleted
    - Fix: changelog: v0.13.0 was released in 2021
    - cleanup: i386 arch detection
    - fix: properly detect 'cmpxchg' on x86-32
    - fix: use urcu-tls compat with c++ compiler
    - Fix typo
    - fix: remove autoconf features default value in help message
    - fix: add missing pkgconfig file for memb flavour lib
    - Cleanup: Tests: Remove useless pre-C99 compatibility code from tap.h
    - Document C99 and C++11 requirement in README.md
    - Always use '__thread' for Thread local storage except on MSVC
    - Fix: powerpc32: transparent unions alter calling convention
    - fix: don't use C++ thread_local on MacOs
    - wfcqueue API: implement overloaded wrappers with templates
    - wfcqueue: combine C++ API cds_wfcq_head_cast with overloading
    - wfstack C++ API: implement overloaded wrappers with templates
    - lfstack C++ API: implement overloaded wrappers with templates
    - wfstack: combine C++ API cds_wfs_stack_cast with overloading
    - lfstack: combine C++ API cds_lfs_stack_cast with overloading
    - fix: test_build tap plan
    - Test C++ build of list head init
    - Fix order of initializers in CDS_LIST_HEAD_INIT
    - unit tests: test wfcqueue, wfstack, lfstack empty check functions in C++
    - wfcqueue: implement C++ API based on function overloading
    - wfstack: implement C++ API based on function overloading
    - lfstack: implement C++ API based on function overloading
    - Fix tap.h: remove extra semicolon in pass/fail macros
    - Add C++ build tests
    - Build and run regression and unit tests as C++ programs
    - Add --enable-Werror configure switch
    - Add `urcu_posix_assert()` as `assert()` replacement
    - Rename `urcu_assert()` to `urcu_assert_debug()`
    - cleanup: spelling fixes in comments
    - Make temporary variable in _rcu_dereference non-const
    - (tls-ie2) Fix: x86 and s390: uatomic __hp() macro C++ support
    - Fix: x86 and s390: uatomic __hp() macro clang support
    - Fix: x86 and s390 uatomic: __hp() macro warning with gcc 11


author: yueyuankun <yueyuankun@kylinos.cn> - 0.14.0-3
changelog:
  - Type: compile
  - ID: NA
  - SUG: NA
  - DESC: Fix compilation errors in loongarch architecture
          Replace setup with autosetup


author: yixiangzhike <yixiangzhike007@163.com> - 2.39.1-31
changelog:
  - backport community patches
      fix columns reduction
      fix memory leak issue in read_Subid_range
      fix off-by-one in maximum last sector calculation
      fix memory corruption in size calculation
      fix memory corruption in read buffers


author: herengui <herengui@kylinsec.com.cn> - 7.4.3-5
changelog:
  - Fix CVE-2026-34475: Fix http/1.1 absolute form dissection edge case leading to cache poisoning or authentication bypass


author: lutong <lutong14@huawei.com> - 1.1-9
changelog:
  - bugfix:fixed display error caused by missing signal_exits & revert change method of getting domain id


author: yangzhuangzhuang<yangzhuangzhuang1@huawei.com> - 0.3.12-3
changelog:
  - The "no acceptable C compiler found" error message is displayed during compilation.Therefore,add buildrequires gcc.


author: chenyanpan <chenyanpan@xfusion.com> - 1.21.4-4
changelog:
  - Fix CVE-2026-15146
  - Fix CVE-2026-58469
  - Fix CVE-2026-58470
  - Fix CVE-2026-58471
  - Fix CVE-2026-58472


author: liyuanrong<liyuanrong1@huawei.com>- 1.0.2-3
changelog:
  - Type:requirement
  - CVE:NA
  - SUG:restart
  - DESC:output failure-mode-view-vis.html to the same log directory as failure_trace.log


author: zhengziyang <zheng.ziyang@zte.com.cn> - 0.164-4.20231001git31e19f92_bootstrap
changelog:
  - riscv64:Add RVV-optimized weight functions for motion compensation. These functions improve weighted prediction performance.


author: liliguang <liliguang@baidu.com> - 1.4.30-1
changelog:
  - update to 1.4.30
  - Fix compiler warnings in testsuite when building on AIX.
  - The API docs still said DatabaseError was thrown for operations on a closed
    database, but since 1.4.10 we throw its subclass DatabaseClosedError instead.


author: Funda Wang <fundawang@yeah.net> - 1.2.42-1
changelog:
  - update to 1.2.42
  - disable md5 and ripemd160 per upstream
  - disable gcrypt backend per upstream
    (https://github.com/lsh123/xmlsec/pull/848)


author: xihaochen <xihaochen@huawei.com> - 2.5.0-1
changelog:
  - Type:requirements                                                                                                                                  
  - Id:NA
  - SUG:NA
  - DESC:update xorg-x11-drv-vesa to 2.5.0


author: Funda Wang <fundawang@yeah.net> - 1.20.11-37
changelog:
  - fix CVE-2025-26594, CVE-2025-26595, CVE-2025-26596,
    CVE-2025-26597, CVE-2025-26598, CVE-2025-26599
    CVE-2025-26600, CVE-2025-26601


author: Wang Kui <wangkui35@h-partners.com> - 1.20.11-41
changelog:
  - Fix CVE-2025-49176 CVE-2025-49179 CVE-2025-49180 CVE-2022-49737
    CVE-2025-62229 CVE-2025-62230 CVE-2025-62231


author: lingsheng <ultra_planet@qq.com> - 1.20.11-42
changelog:
  - fix CVE-2022-49737 CVE-2025-49175 CVE-2025-49176 CVE-2025-49178 CVE-2025-49179 CVE-2025-49180 CVE-2025-62229 CVE-2025-62230 CVE-2025-62231


author: lingsheng <ultra_planet@qq.com> - 1.20.11-45
changelog:
  - fix CVE-2026-50256 CVE-2026-50257 CVE-2026-50258 CVE-2026-50259 CVE-2026-50260 CVE-2026-50261 CVE-2026-50262 CVE-2026-50263 CVE-2026-50264


author: xingwei <xingwei14@h-partners.com> - 4.2.3-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add haveged requires and optimize random number function replacement patch


author: yanglu <yanglu72@huawei.com> - 4.1-6
changelog:
  - DESC:delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-2.5-nfsnobody2.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-2.13-ypxfr-zeroresp.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-2.13-nonedomain.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-2.19-slp-warning.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-4.0-manfix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-2.24-aliases.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-2.27-confpost.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-2.31-netgrprecur.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-4.0-headers.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-4.0-selinux-context.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  ,and delete BuildRequires git


author: xu_ping <707078654@qq.com> - 0.2.44-2
changelog:
  - Remove redundant fc-cache scriptlets, fontconfig provides global %transfiletrigger 
    to refresh font cache automatically


author: yuanchao <1050706328@qq.com> - 0.13.72-4
changelog:
  - backport:disable zzip_use_file_header_zip64_offset,and fix wrong format in changelog,to support clang build


