# changelog

author: yaoxin <yao_xin001@hoperun.com> - 3.1.1-1
changelog:
  - Update to 3.1.1
    * Security fix for CVE-2024-6237,CVE-2024-5953,CVE-2024-3657,CVE-2024-2199
    * Issue 6172 - RFE: improve the performance of evaluation of filter component 
      when tested against a large valueset (like group members) #6173
    * Issue 6181 - RFE - Allow system to manage uid/gid at startup
    * Issue 6238 - RFE - add option to write audit log in JSON format
    * Issue 6241 - Add support for CRYPT-YESCRYPT #6242
    * Issue 5772 - ONE LEVEL search fails to return sub-suffixes #6219
    * Issue 6123 - Allow DNA plugin to reuse global config for bind method and connection protocol #6124
    * Issue 6155 - ldap-agent fails to start because of permission error #6179
    * Issue 6170 - audit log buffering doesn’t handle large updates
    * Issue 6175 - Referential integrity plugin - in referint_thread_func does not handle null from ldap_utf8strtok #6168
    * Issue 6183 - Slow ldif2db import on a newly created BDB backend #6208
    * Issue 6199 - unprotected search query during certificate based authentication #6205
    * Issue 6224 - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes #6225
    * Issue 6229 - After an initial failure, subsequent online backups fail #6230
    * Issue 6254 - Enabling replication for a sub suffix crashes browser #6255
    * Issue 6256 - nsslapd-numlisteners limit is not enforced
    * Issue 6265 - lmdb - missing entries in range searches #6266
    * Please see log - https://www.port389.org/docs/389ds/releases/release-3-1-1


author: Xiong Zhou <xiongzhou4@huawei.com> - v1.0-4
changelog:
  - Type:Sync
  - ID:NA
  - SUG:NA
  - DESC:Sync patches from openeuler/A-FOT
         Add reboot action to fasten the second compilation,
         fix bugs and format codes.
  	   Reuse calcsum, delay pre-reboot operations and fixs typos.


author: li-miaomiao_zhr<mmlidc@isoftstone.com> - 1.0.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix wrong file name referenced in spec file causing build failure,remove spec file from the source package


author: yaoxin <yaoxin30@huawei.com> 2.4.3-5
changelog:
  - This package depends on log4j. After the log4j vulnerability CVE-2021-44228 is fixed, the version needs to be rebuild.


author: yaoxin <yaoxin30@huawei.com> 2.4.3-6
changelog:
  - This package depends on log4j. After the log4j vulnerability CVE-2021-45105 is fixed, the version needs to be rebuild.


author: liyuanrong<liyuanrong1@huawei.com> - 1.0.8-6
changelog:
  - Type:requirement
  - CVE:NA
  - SUG:restart
  - DESC:add KubeOS image creation docs with ignition and fstab support


author: dongchen<dongchen20@h-partners.com> - 1.0.8-8
changelog:
  - Type:requirement
  - CVE:NA
  - SUG:restart
  - DESC:Fix the issue of probabilistic mounting failure in fstab


author: dongchen<dongchen20@h-partners.com> - 1.0.8-13
changelog:
  - Type:requirement
  - CVE:NA
  - SUG:restart
  - DESC:kbimg: use overlayfs for /var instead of bind mount


author: wangkai <13474090681@163.com> - 0.22.1-1
changelog:
  - Update to 0.22.1
  - Fix CVE-2026-20884, CVE-2026-20889, CVE-2026-20911, CVE-2026-21413,
    CVE-2026-24450, CVE-2026-24660, CVE-2026-5318, CVE-2026-5342


author: panchenbo <panchenbo@kylinsec.com.cn> - 1.22.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix build error: add missing BuildRequires:pkgconfig(polkit-gobject-1)


author: liuzhilin <liuzhilin@uniontech.com> - 1:1.44.2-2
changelog:
  - add NM to support wifi6(fix dde-network-core build error)
  - Type:requirement
  - CVE:NA
  - SUG:NA
  - DESC:Support wireless networks connecting WIFI6 encryption methods,
         so this demand is achieved in NetworkManager, KF5-NetworkManager-QT,
         DDE-Network-Core software package


author: qinxue <qinxue6@h-partners.com> - 1:1.44.2-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:mptcp fix error handling rp_filter when kernel don't support mptcp


author: yaoxin <yao_xin001@hoperun.com> - 1.2.24-1
changelog:
  - Update to 1.2.24:
    * Fixed formatting of ipsec.conf snippet. This is a security
    issue with severity of "Important." (CVE-2024-9050)
    * Added support for "require-id-on-certificate" setting.
    * Updated Georgian, Slovenian and Ukrainian translations.


author: zhouyihang <zhouyihang3@h-partners.com> - 1.2.8-2
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: pkcon: Use appropriate callbacks for client / task async calls


author: lingsheng <lingsheng1@h-partners.com> - 1.2.8-3
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: Revert PkClient: Replace the GSimpleAsyncResult with the GTask API


author: Funda Wang <fundawang@yeah.net> - 1.2.8-4
changelog:
  - move dbus interface to main package
  - split out gtk module from devel sub package
  - cleanup buildrequires


author: yinsist <jianhui.oerv@isrc.iscas.ac.cn> - 4.0.5-4
changelog:
  - Valgrind does not support certain architectures like RISC-V, Before depending on Valgrind, first check if Valgrind supports the architecture


author: shixuantong <shixuantong1@h-partners.com> - 1.0.3-36
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix error log for task stop function
         fix integer overflow rish in QueryEvents
         fix potential fd leak issue
         fix the infinite loop for cleanup_thread-thread


author: shixuantong <shixuantong1@h-partners.com> - 1.0.3-39
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:change os name in service desc
         delete sensitive information content


author: shixuantong <shixuantong1@h-partners.com> - 1.0.3-43
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix(xalarm): fix service stop timeout and PID lock release issues


author: yixiangzhike <yixiangzhike007@163.com> - 0.18.6-3
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: backport upstream patch to fix parsing of lowercase group names


author: yixiangzhike <yixiangzhike007@163.com> - 0.18.6-4
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: backport upstream patch to fix concurrent reading of extended attributes


author: Wenlong Zhang <zhangwenlong@loongson.cn> - 36.16.5-52
changelog:
  - Type:bugfix
   - ID:NA
   - SUG:NA
   - DESC:Fixed the issue of "D_isable root account" not being translated

   * Fri Feb 27 2026 zhaoyognhao <zhaoyonghao10@h-partners.com> - 36.16.5-51
   - Type:feature
   - ID:NA
   - SUG:NA
   - DESC: enable ssh login checkbox


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 36.16.5-54
changelog:
  - Type:feature
  - ID:NA
  - SUG:NA
  - DESC: add kernel 64k page size and kernel options Chinese translation support

   * Mon Mar 9 2026 zhaoyonghao <zhaoyognhao10@h-partners.com> - 36.16.5-53
   - Type:requirement
   - ID:NA
   - SUG:NA
   - DESC:Port GUI kernel switcher for ARM 64k


author: yueyuankun <yueyuankun@kylinos.cn> - 36.16.5-55
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix permissions of the ssh config created by Anaconda
          fix(users): ensure SSH config directory exists before writing


author: Funda Wang <fundawang@yeah.net> - 5.3.1-10
changelog:
  - Type:CVE
  - CVE:CVE-2025-2751 CVE-2025-3158 CVE-2025-3196
  - SUG:NA
  - DESC:fix CVE-2025-2751 CVE-2025-3158 CVE-2025-3196


author: mapengyuan <mapengyuan@xfusion.com> - 5.3.1-16
changelog:
  - Type:CVE
  - CVE:CVE-2025-2754 CVE-2025-2756 CVE-2025-5200
  - SUG:NA
  - DESC:fix CVE-2025-2754 CVE-2025-2756 CVE-2025-5200


author: majianhan <majianhan@kylinos.cn> - 5.3.1-17
changelog:
  - Type:CVE
  - CVE:CVE-2025-2752 CVE-2025-2755 CVE-2025-5201 CVE-2025-5202 CVE-2025-5203 CVE-2025-5204
  - SUG:NA
  - DESC:fix CVE-2025-2752 CVE-2025-2755 CVE-2025-5201 CVE-2025-5202 CVE-2025-5203 CVE-2025-5204


author: yanglongkang<yanglongkang@h-partners.com> - 3.2.2-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Adding Patching Operations
         provides relibility and self-healing capabilities for service


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 3.2.5-2
changelog:
  - Type：update
  - ID：NA
  - SUG:NA
  - DESC: Modify the license to SPDX format
          Delete MIT and Public Domain license because it no longer appears in the upstream source


author: zhangpan <zhangpan103@h-partners.com> - 2.51.0-5
changelog:
  - add macros to control if need /usr/bin/xprop
  - at-spi2-core-help package provided at-spi2-atk-help


author: baizhonggui <baizhonggui@huawei.com> - 0.2.92-3
changelog:
  - Fix building error: File must begin with "/": /usr/lib/systemd/system/attest_ra_server.service
  - Add systemd in BuildRequires


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 1:3.1.2-12
changelog:
  - backport patches for fixing Wimplicit-function-declaration, Wbuiltin-declaration-mismatch when building with newer compilers


author: Ge Wang <wang__ge@126.com> - 1.0-0.34
changelog:
  - Replace buildrequire kde-filesystem with kde4-filesystem due to kde-filesytem updated to version 5-1


author: wangkai <wangkai385@huawei.com> - 0:4.3-23
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-44228 is fixed,the version needs to be rebuild.


author: yaoxin <yaoxin30@huawei.com> - 0:4.3-24
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-45105 is fixed,the version needs to be rebuild.


author: wangyuhang <wangyuhang27@huawei.com> -5.2.15-13
changelog:
  - remove the log message for failing to open cmdline,
    and ensure that the mayexec function does not modify the value of errno.


author: yixiangzhike <yixiangzhike007@163.com> - 5.2.15-16
changelog:
  - sync patches from bash community:
     fix default file descriptor for <> redirection when printing command
     update BASH_COMMAND for subshells
     fix potential file descriptor leak in here document pipes


author: yaoxin <yao_xin001@hoperun.com> - 1.17-1
changelog:
  - Update to 1.17 for fix CVE-2022-38398,CVE-2022-38648,CVE-2022-40146,CVE-2022-44729 and CVE-2022-44730


author: liequan che <cheliequan@inspur.com> - 1.1-4
changelog:
  - add bcache-export-cached to export CACHED_UUID and CACHED_LABEL,so that 69-bcache.rules
  udev rules can correctly create uuid and label links for bcache devices


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-3
changelog:
  - Type:CVE
  - CVE:CVE-2024-0760,CVE-2024-1737,CVE-2024-1975,CVE-2024-4076
  - SUG:NA
  - DESC:fix CVE-2024-0760,CVE-2024-1737,CVE-2024-1975,CVE-2024-4076


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-4
changelog:
  - Type:CVE
  - CVE:CVE-2024-11187,CVE-2024-12705
  - SUG:NA
  - DESC:fix CVE-2024-111878 and CVE-2024-12705


author: tangce<tangce1@huawei.com> - 32:9.18.21-5
changelog:
  - Type:CVE
  - CVE:CVE-2025-8677,CVE-2025-40778,CVE-2025-40780
  - SUG:NA
  - DESC:fix CVE-2025-8677,CVE-2025-40778,CVE-2025-40780


author: tangce <tangce1@h-partners.com> - 32:9.20.21-2
changelog:
  - Type:CVE
  - CVE:CVE-2026-3039,CVE-2026-3593,CVE-2026-3593,CVE-2026-5946,CVE-2026-5947
  ,CVE-2026-5950
  - SUG:NA
  - DESC:fix CVE-2026-3039,CVE-2026-3593,CVE-2026-3593,CVE-2026-5946,CVE-2026-5947,CVE-2026-5950


author: yueyuankun <yueyuankun@kylinos.cn> - 3.8.2-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix syntax error on SymbolKind.toString method
         fix interface syntax error


author: sunhai<sunhai10@huawei.com> - 1:3.8.2-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix expected exception type when activating devices in populor


author: Huang Yang <huangyang@loongson.cn> - 1.8.18-22
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Resolve malloc aborted error raised when executing ipmitool fru.


author: lingsheng <lingsheng1@h-partners.com> - 3.7.1-7
changelog:
  - Type:CVE
  - ID:CVE-2025-5914,CVE-2025-5915,CVE-2025-5916,CVE-2025-5917,CVE-2025-5918
  - SUG:NA
  - DESC:fix CVE-2025-5914 CVE-2025-5915 CVE-2025-5916 CVE-2025-5917 CVE-2025-5918


author: liuh <liuhuan01@kylinos.cn> - 6.6.3-12
changelog:
  - btrfs-progs: convert: insert a dummy inode item before inode ref for ext2/4
  - btrfs-progs: convert: for ext2, fix possible tree-checker error when converting a large fs


author: liuh <liuhuan01@kylinos.cn> - 6.6.3-17
changelog:
  - sync patch from community
    btrfs-progs: fix the wrong size from device_get_partition_size_sysfs()


author: liuh <liuhuan01@kylinos.cn> - 6.6.3-19
changelog:
  - sync patch from community
    btrfs-progs: subvolume: fix a bug that leads to unnecessary error message


author: yaoxin <1024769339@qq.com> - 20250113-1
changelog:
  - Update to 20250113:
    * Parse unknown timezones as UTC
    * Apk (Alpine Linux) format support added
    * Implement default value in parameter expansion
    * Also support supplements that use & as "and"
    * Add workaround for skopeo's argument parser
    * add cap-htm=off on power9
    * Fixed usage of chown calls
    * Remove leading `go` from `purl` locators


author: jianmin <jianmin@iscas.ac.cn> - 1.34.1-5
changelog:
  - Type:cve
  - CVE:CVE-2024-3727 CVE-2024-24791
  - SUG:NA
  - DESC: fix CVE-2024-3727 and Rebuild to fix CVE-2024-24791


author: wangjiang <wangjiang37@h-partners.com> - 2023.2.64-2
changelog:
  - remove expired and sync new certificates
    Removing:
      Security Communication Root CA
    Adding:
      D-Trust SBR Root CA 1 2022
      D-Trust SBR Root CA 2 2022
      Telekom Security SMIME ECC Root 2021
      Telekom Security SMIME RSA Root 2023
      Telekom Security TLS ECC Root 2020
      Telekom Security TLS RSA Root 2023


author: wangjiang <app@cameyan.com> - 2023.2.64-4
changelog:
  - remove expired and sync new certificates
    Removing:
      Certificate "Explicitly Distrust DigiNotar Root CA"
      Certificate "Baltimore CyberTrust Root"
    Adding:
      Certificate "FIRMAPROFESIONAL CA ROOT-A WEB"
      Certificate "TWCA CYBER Root CA"
      Certificate "TWCA Global Root CA G2"
      Certificate "SecureSign Root CA12"
      Certificate "SecureSign Root CA14"
      Certificate "SecureSign Root CA15"
      Certificate "D-TRUST BR Root CA 2 2023"
      Certificate "D-TRUST EV Root CA 2 2023"


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1.18.0-2
changelog:
  - Type:CVE
  - ID:CVE-2025-50422
  - SUG:NA
  - DESC:Fix a NULL access in active_edges_to_traps()
         Add unlikely() to test for x == INT32_MAX for the NULL reference


author: yyjeqhc <jialin.oerv@isrc.iscas.ac.cn> - 1.0.1-6
changelog:
  - Add select local image to build.
  - Add support for setting target architecture during local builds.


author: yangyun <yangyun50@huawei.com> - 1.5.5-1
changelog:
  - update to 1.5.5 version
  	- add support of readers (see README.md)
  	- configure.ac: disable the use of --disabele-usbdropdir
  	- parse: create output.bin file
  	- udev: Disable USB-persist for CCID devices
  	- configure: fail if flex is not found
  	- some other minor improvments


author: zhoupengcheng <zhoupengcheng11@huawei.com> - 0.2.4-4
changelog:
  - packing chatglm_convert.py file
  - install python models for chatglm_convert.py int dockerfile
  - update long-term yum.repo in dockerfile


author: openeuler_bot <infra@openeuler.sh> - 0.6.2.4-1
changelog:
  - fix memory leak in ECDH-ES JWE encryption/decryption (version:0.6.2.4).
  - fix rsa_q = NULL initialization in _RSA_private_fields (version:0.6.2.4).
  - fix memory allocation check (typo) in jwk.c (version:0.6.2.4).
  - fix gcc10 errors for -Werror=ignored-qualifiers and remove unused includes (version:0.6.2.4).
  - re-generate automake/autoconf files with automake v1.17 and libtool v2.5.4 (version:0.6.2.4).


author: liyunfei <liyunfei33@huawei.com> - 17.0.6-56
changelog:
  - update to llvm-for-oe-17.0.6-2512.0.2
  - release-note https://gitee.com/openeuler/llvm-project/releases/tag/llvm-for-oE-17.0.6-2512.0.2


author: liyufnei <liyunfei33@huawei.com> - 17.0.6-57
changelog:
  - update to llvm-for-oe-17.0.6-2512.0.3
  - release-note https://gitee.com/openeuler/llvm-project/releases/tag/llvm-for-oE-17.0.6-2512.0.3


author: liyufnei <liyunfei33@huawei.com> - 17.0.6-58
changelog:
  - update to llvm-for-oe-17.0.6-2603.0.1
  - release-note https://gitcode.com/openeuler/llvm-project/releases/llvm-for-oE-17.0.6-2603.0.1


author: liyufnei <liyunfei33@huawei.com> - 17.0.6-60
changelog:
  - update to llvm-for-oe-17.0.6-2603.0.2
  - release-note https://gitcode.com/openeuler/llvm-project/releases/llvm-for-oE-17.0.6-2603.0.2


author: eastb233 <xiezhiheng@huawei.com> - 17.0.6-64
changelog:
  - update to llvm-for-oe-17.0.6-2606.0.1
  - release-note https://atomgit.com/openeuler/llvm-project/releases/llvm-for-oE-17.0.6-2606.0.1


author: dongyuzhen <dongyuzhen@h-partners.com> - 23.4.1-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix(net): klibc ipconfig PROTO compatibility
         fix(openstack): Fix bond mac_address


author: shixuantong <shixuantong1@huawei.com> - 23.4.1-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:chore: set recursive=False for ensure_dir if parent path is "/"
         test(openstack): Test bond mac address
         fix: Ensure properties for bonded interfaces are properly translated


author: shixuantong <shixuantong1@huawei.com> - 23.4.1-13
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:net/sysconfig: do not remove all existing settings of /etc/sysconfig/network
         fix: typing for rsyslog, ubuntu_pro, power_state_change


author: shixuantong <shixuantong1@huawei.com> - 23.4.1-16
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: fix: Add get_connection_with_tls_context() for requests 2.32.2+


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 3.27.9-5
changelog:
  - Support 
    /usr/bin/cmake --build "x86_64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/cmake-3.31.12-1.oe2403sp4.x86_64" /usr/bin/cmake --install "x86_64-openEuler-linux-gnu".


author: fuanan <fuanan3@h-partners.com> - 3.27.9-6
changelog:
  - remove the architecture judgment in the patches section;
  - include all patches in the source package.


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 309-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: remove incorrect provides cockpit-machines and cockpit-machines-ovirt
          remove require libvirt and libvirt-client


author: yueyuankun <yueyuankun@kylinos.cn> - 34.1-9
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC:Remove redundant ifarch blocks and obsolete patches
         Improve maintainability with architecture-agnostic configuration


author: lijian <lijian2@kylinos.cn> - 2:2.230.0-1
changelog:
  - Update container-selinux to v2.230.0
  - Allow containers to unmount file systems
  - Add buildah as a container_runtime_exec_t label
  - Additional rules for container_user_t
  - Add some MLS rules to policy
  - Add container_file_t and container_ro_file_t as user_home_type


author: dongyuzhen <dongyuzhen@h-partners.com> - 1.6.22-20
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:delete task asynchronously to avoid containerd be killed when delete is blocking


author: Yu Peng <yupeng@kylinos.cn> - 1.6.22-23
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix ctr snapshot mount produce invalid mount command for empty option.


author: hugel <gengqihu2@h-partners.com> - 9.4-12
changelog:
  - sync patches from community
  - add backport-numfmt-don-t-require-a-suffix-with-from-iec-i.patch
        backport-sort-fix-debug-buffer-overrun.patch
        backport-tac-avoid-out-of-bounds-access.patch
        backport-yes-avoid-failure-on-CHERI-protected-systems.patch


author: fuanan <fuanan3@h-partners.com> - 2.13-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert fix CVE-2015-1197 because it causes AT testcases problems


author: Peng Fan <fanpeng@loongson.cn> - 12.3.1-110
changelog:
  - Type: BUGFIX
  - DESC:
  - LoongArch: sync fix from upstream.
  - Adjusting the sequence number and name of the patches


author: yixiangzhike <yixiangzhike007@163.com> - 1.17.0-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix the failure of testcase when building with python-setuptools>=66.0.0


author: wangxiao <wangxiao184@h-partners.com> - 8.0.4-15
changelog:
  - remove the arch judgment, include all patches in the src package
  - use patch command to apply patches for consistency in context


author: lijian1 <lijian1@kylinos.cn> - 8.0.4-17
changelog:
  - fix loongarch64 support so file extension error for elf64 lack the branch while elf32 do not need.


author: lijian <lijian2@kylinos.cn> - 1.8.7-1
changelog:
  - update to 1.8.7
  - crun: new command "crun features".
  - linux: support io_priority from the OCI specs.
  - cgroup: allow setting swap to 0.
  - cgroup, systemd: set the memory limit on the system scope.


author: yixiangzhike <yixiangzhike007@163.com> - 20230614-1.git5f3458e
changelog:
  - update version to 20230614
    - DEFAULT policy drop DH<2048bits,TLS1.0,TLS1.1,SHA-1
    - Remove the CBC ciphers from DEFAULT policy in openssh
    - FIPS policy drop the CBC ciphersuites
    - Enable RSA-PSK algorithms in DEFAULT and LEGACY policies
    - Add the diffie-hellman-group14-sha256 to libssh
    - Add --check option to update-crypto-policies
    - Add AES-192 algorithms support
    - Use allowlisting config for gnutls
    - Enable SHAKE algorithms for gnutls,java and nss
    - Openssl disable SHA-1 signatures in FUTURE policy
    - Openssh add HostbasedAcceptedAlgorithms and RequiresRSASize config options


author: xinghe <xingheyd@163.com> - 4.19.3-9
changelog:
  - Type:cves
  - ID:CVE-2026-3238 CVE-2026-3012 CVE-2026-4480 CVE-2026-4408
  - SUG:NA
  - DESC:fix CVE-2026-3238 CVE-2026-3012 CVE-2026-4480 CVE-2026-4408


author: Funda Wang <fundawang@yeah.net> - 1:2.4.7-7
changelog:
  - fix CVE-2025-58060, CVE-2025-58364
  - move www files into main package due to requirement by web interface


author: chenyanpan <chenyanpan@xfusion.com> - 1:2.4.7-13
changelog:
  - Fix CVE-2026-34979: Heap overflow in get_options()
  - Fix CVE-2026-34980: Filter control characters from option values


author: gaihuiying <eaglegai@163.com> - 1:2.4.7-16
changelog:
  - fix handling of multiple PPD: keywords from filters related to CVE-2026-34980
    fix a regression in shared printing from non-local accounts related to CVE-2026-27447


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-24
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:libssh: fix readdir issues
         h3: fix query of concurrent streams
         noproxy: fix the IPV6 network mask pattern match
         krb5_gssapi: fix memory leak on error path
         openldap: fix memory-leak in error path
         conn: fix hostname move on connection reuse 
         pop3: fix CAPA response termination detection
         libssh: properly free sftp_attributes
         openssl: fix a potential memory leak of params.cert


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-25
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:urlapi: avoid null deref if setting blank host to url
         urlapi: skip appending NULL pointer query


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-26
changelog:
  - Type:CVE
  - CVE:CVE-2025-14017 CVE-2025-14524 CVE-2025-14819 CVE-2025-15079 CVE-2025-15224
  - SUG:NA
  - DESC:fix CVE-2025-14017 CVE-2025-14524 CVE-2025-14819 CVE-2025-15079 CVE-2025-15224


author: zhouyihang <zhouyihang_z@163.com> - 8.4.0-27
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:formdata: validate callback is non-NULL before use
         tftp: correct the filename length check


author: zhouyihang <zhouyihang_z@163.com> - 8.4.0-28
changelog:
  - Type:CVE
  - CVE:CVE-2026-1965 CVE-2026-3783 CVE-2026-3784
  - SUG:NA
  - DESC:fix CVE-2026-1965 CVE-2026-3783 CVE-2026-3784


author: zhouyihang <zhouyihang_z@163.com> - 8.4.0-29
changelog:
  - Type:CVE
  - CVE:CVE-2026-4873 CVE-2026-5545 CVE-2026-5773 CVE-2026-6253 CVE-2026-6276 CVE-2026-6429 CVE-2026-7168
  - SUG:NA
  - DESC:fix CVE-2026-4873 CVE-2026-5545 CVE-2026-5773 CVE-2026-6253 CVE-2026-6276 CVE-2026-6429 CVE-2026-7168


author: zhouyihang <zhouyihang_z@163.com> - 8.4.0-30
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:http1: fix potential NULL dereference in Curl_h1_req_parse_read
         mqtt: fix EOF handling


author: senlin <xiasenlin1@huawei.com> - 1.0.0-19
changelog:
  - Type: Correction of bad behavior
  - ID: NA
  - SUG: NA
  - DESC: Specify the specific sudo commands for abuild users


author: xu_ping <xuping33@h-partners.com> - 1.0.0-20
changelog:
  - Type: fix warning
  - ID: NA
  - SUG: NA
  - DESC: fix install custom_build_tool warning due to new rpm-build not provides find-debuginfo.sh


author: wangkai <13474090681@163.com> - 1.11.23-54
changelog:
  - Add patches from fedora, improve C compatibility and fix build failures caused by higher gcc versions


author: wuyifeng <wuyifeng10@huawei.com> - 78-1
changelog:
  - upgrade to version 78:
  	-incorporate up to 6.5 kernel
  	-add new cxl commands
  	-fix some bugs detail see:github.com/pmem/ndctl


author: yaoxin <yaoxin30@huawei.com> - 3.2.15-4
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-44832 is fixed,the version needs to be rebuild.


author: hongjinghao <hongjinghao@huawei.com> - 1:1.14.8-3
changelog:
  - sync patch from upstream
  	backport-bus-Don-t-crash-if-bus_context_create_client_policy-.patch
  	backport-bus-When-failing-to-reload-client-policy-continue-it.patch
  	backport-test-Add-a-targeted-test-for-_dbus_unix_groups_from_.patch
  	backport-userdb-Add-proper-error-reporting-when-getting-group.patch


author: liuyumeng <liuyumeng5@huawei.com> - 0.40.0-2
changelog:
  - add patch:dconf read random contents of memory causing discrepancy,initialize memory to eliminate discrepancy


author: Miroslav Suchý <msuchy@redhat.com> 1.82-1
changelog:
  - move symlink of fedora-rawhide to fedora-39
  - add openEuler new key
  - update copr keys
  - add fedora 40 gpg key


author: Miroslav Suchý <msuchy@redhat.com> 1.84-1
changelog:
  - add tumbleweed key
  - Added RPM Fusion keys for Fedora 39.
  - update copr keys
  - add elastic gpg key


author: Miroslav Suchý <msuchy@redhat.com> 1.86-1
changelog:
  - update copr keys
  - Add Jenkins 2023
  - Add keys for Bacula & Baculum
  - Add keys for Google Cloud
  - Add VeraCrypt keys
  - add Element keys


author: hanhuihui <hanhuihui5@huawei.com> - 4.16.2-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dnf:Remove --duplicates and --oldinstallonly exit with 0 when nothing to remove and Add all candidates for reinstall to solver


author: LuWu <2398491106@qq.com> - 4.16.2-5
changelog:
  - Limit queries to nevra forms when provided by command and Update the man page entry for the countme option


author: majianhan <majianhan@kylinos.cn> - 4.16.2-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix dnf-automatic service to apply security updates the same way as dnf tool


author: chenhaixing <chenhaixing@huawei.com> - 4.3.1-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dnf-plugins-core:download plugin:respect install_weak_deps option value


author: lingsheng <lingsheng1@h-partners.com> - 2.90-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Update DNS records after pruning DHCP leases
         cache: Fix potential NULL deref in arcane situations.
         Fix potential memory leak
         Fix possible SIGSEGV in bpf.c
         allow binding mac with ip6


author: Liu Qingtao <liu.qingtao2@zte.com.cn> - 2.90-5
changelog:
  - Type:bugfix
  - CVE:
  - SUG:NA
  - DESC:Ignore Wincompatible-pointer-types error when compiling with gcc-14.3


author: luoguocui <luoguouci@h-partners.com> - 2.90-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix bounds checking in check_ia()
         Fix SEGV in Dbus code
         More fixes for DHCP ops in Dbus when DHCP not configured


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 2.90-9
changelog:
  - Type:CVE
  - CVE:CVE-2026-4890 CVE-2026-4891 CVE-2026-4892 CVE-2026-4893 CVE-2026-5172
  - SUG:NA
  - DESC:Fix NSEC bitmap parsing infinite loop
         Verify rdlen field in RRSIG packets
         Fix buffer overflow in helper.c with large CLIDs
         Fix broken client subnet validation
         Fix buffer overflow vulnerability in extract_addresses()


author: zhongjiawei<zhongjiawei1@huawei.com> - 2:18.09.0-347
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:delete redundant characters to prevent make failure in golang 1.24


author: jade_t<yzd50036@gmail.com> - 2:18.09.0-351
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix the installation conflict between docker-engine and containerd


author: wangkai <13474090681@163.com> - 1:2.3.20-4
changelog:
  - Fix CVE-2025-59031, CVE-2025-59032, CVE-2026-27855, CVE-2026-27856,
    CVE-2026-27857, CVE-2026-27858, CVE-2026-27859, CVE-2026-0394


author: bixiaoyan <bixiaoyan@kylinos.cn> - 2.0.8-2
changelog:
  - Change assert in ringbuffer to a return code
    Community Patch Link:
    https://github.com/ClusterLabs/libqb/pull/492/commits/88d3eeacc64a059fcb8e2d329ddeafa63b24edfb


author: zouzhimin <zouzhimin@kylinos.cn> - 2.0.8-5
changelog:
  - Check returns from setsockopt() calls, also fix doxygen comment for qb_util_timespec_from_epoch_get()


author: litenglong <litenglong@kylinos.cn> - 2.0.8-6
changelog:
  - Fix file conflicts among the help package, main package, and devel package by deleting the duplicated content during upgrades.


author: huangdengdui <huangdengui@huawei.com> - 23.11-33
changelog:
  Sync some bugfixes for hns3 pmd and modifications are as follow:
   - net/hns3: fix Rx packet without CRC data
   - net/hns3: fix CRC data segment
   - net/hns3: check requirement for hardware GRO
   - net/hns3: allow use of Tx vector when fast free not enabled
   - net/hns3: allow use of Rx vector mode with VLAN filter


author: huangdengdui <huangdengui@huawei.com> - 23.11-34
changelog:
  Sync some patches about support TSO for packets with
   IPv6 extension header and modifications are as follow:
   - net: add tunnel packet type parsing
   - app/testpmd: use packet type parsing API
   - app/testpmd: fix VLAN parsing in checksum engine
   - net: fix offset in GENEVE packet parsing
   - app/testpmd: fix packet type parsing
   - net: fix GTP packet parsing
   - net: add tunnel length in UDP tunnel parsing
   - app/testpmd: fix tunnel inner info


author: huangdonghua <huangdonghua3@h-partners.com> - 23.11-36
changelog:
  Unify locks, fix Rx path and resource release:
   - net/hns3: fix inconsistent lock
   - net/hns3: fix overwrite mbuf in vector path
   - net/hns3: fix unrelease VLAN resource when init fail


author: huangdonghua <huangdonghua3@h-partners.com> - 23.11-37
changelog:
  Fix unrelease VLAN resource and L4 protocol retrieval from L3 header:
   - net/hns3: fix unrelease VLAN resource when init fail
   - app/testpmd: fix L4 protocol retrieval from L3 header


author: huangdonghua <huangdonghua3@h-partners.com> - 23.11-38
changelog:
  Upload some patches of VF multiple TC and others:
   - app/testpmd: handle IEEE1588 init failure
   - examples/l3fwd: add option to set Rx burst size
   - examples/eventdev: fix queue crash with generic pipeline
   - examples/l3fwd: add Tx burst size configuration option
   - net/hns3: remove duplicate struct field
   - net/hns3: refactor DCB module
   - net/hns3: parse max TC number for VF
   - net/hns3: support multi-TCs capability for VF
   - net/hns3: fix queue TC configuration on VF
   - net/hns3: support multi-TCs configuration for VF
   - app/testpmd: avoid crash in DCB config
   - app/testpmd: show all DCB priority TC map
   - app/testpmd: relax number of TCs in DCB command
   - app/testpmd: reuse RSS config when configuring DCB
   - app/testpmd: add prio-tc map in DCB command
   - app/testpmd: add queue restriction in DCB command
   - app/testpmd: add command to disable DCB
   - examples/l3fwd: force link speed
   - examples/l3fwd-power: force link speed
   - net/hns3: log invalid MAC address from firmware
   - config/arm: add HiSilicon HIP12
   - app/testpmd: fix DCB Tx port
   - app/testpmd: fix DCB Rx queues
   - app/testpmd: set DCB forwarding TCs
   - app/testpmd: support multi-cores process one TC
   - app/testpmd: fix inner UDP checksum offload fail


author: huangdonghua <huangdonghua3@h-partners.com> - 23.11-39
changelog:
  fix L2 length for GRE packets:
   - net: fix L2 length for GRE packets
   - net/hns3: fix outer UDP checksum fail with simple BD


author: huangdonghua <huangdonghua3@h-partners.com> - 23.11-40
changelog:
  testpmd DCB Forwarding Enhancements and hns3 Tunnel Checksum Fix:
   - app/testpmd: check start for DCB forwarding TC commands
   - app/testpmd: show DCB forwarding TC list and cores
   - net/hns3: fix L4 checksum incorrect for tunnel packets


author: qianrong <qianr@yunsilicon.com> - 23.11-41
changelog:
  Sync some bugfixes for xsc pmd and modifications are as follow:
   - net/xsc: optimize RSS queue creation
   - net/xsc: optimize QP and CQ memory allocation
   - net/xsc: optimize Rx path
   - net/xsc: optimize stop and close
   - net/xsc: fix uninitialized value
   - net/xsc: improve interrupt uninstall
   - net/xsc: support compressed PCI BAR
   - net/xsc: fix stale packet length from incomplete CQE


author: queyanwen<queyanwen@huawei.com> - 1.0.1-2
changelog:
  - Optimize the accuracy of non-steady-state data prediction and training.
  - The anbient temperature check is added befor the collection is started. If the temperature is
  - greater than 28°C, the collection will not be started.


author: queyanwen<queyanwen@huawei.com> - 1.0.1-3
changelog:
  - The current condition for determining whether the system enters the stable state is that
  - the difference between the maximum temperature and the minimum temperature within 60s is less than 0.2 degrees.
  - This judgment is too strict and needs to be changed to 2 degrees.
  - In addition, the average fuzzy processing in five windows is used to prevent data jitter.
  - When the entire system can obtain the CPU power consumption data, the obtained CPU power consumption
  - is directly used during training, instead of obtaining the CPU power consumption by inferring.


author: heppen<hepeng68@huawei.com> - 1.1.0-3
changelog:
  - Bug fix: Ctrl Auth request on main thread, but release on socket thread.
  - Bug fix: Modify policy file but do not take effect.
  - Bug fix: IsNumStr returns false when the input string is a negative number.
  - Add instructions to the config file.


author: jinye<jinye10@huawei.com> - 1.1.0-4
changelog:
  - Bug fix: Default policy can't restore after stop eagle service
  - Bug fix: Some spell bugs
  - Bug fix: Modify watt_sched_enable don't take effect
  - Bug fix: Set watt_sched_enable as zero SetWattFirstDomain return error
  - Reconstruct eagle init and load part


author: xinghe <xinghe2@h-partners.com> - 2.0.11-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix ebtables-restore --noflush failed when ebtables is uninstall


author: chenchen <chen_aka_jan@163.com> - 1:4.11-4
changelog:
  - switch to the new httpclient45 ECF provider
  - remove ECF httpclient dependency from p2 test
  - build failed with compilation failure in org.eclipse.test


author: liyanan <liyanan32@h-partners.com> - 1:4.11-8
changelog:
  - Add security compile options pie, relro and -fstack-protector-strong
  - Add glassfish-jsp and glassfish-servlet-api and glassfish-el-api version limit


author: Zhiguang Ni <nizhiguang@hygon.cn> - 202308-31
changelog:
  - Support OvmfPkg/AmdSevX64.dsc build to generate OVMF.fd with CSV3 RTMR (based on CC_MEASUREMENT) capability


author: taolinghongfei <taolinghongfei@h-partners.com> - 202308-33
changelog:
  - fix CVE-2026-22795,CVE-2026-22796
  - fix CVE-2025-69420
  - fix CVE-2025-69421
  - fix CVE-2025-68160
  - fix CVE-2025-69418


author: Xianglai Li <lixianglai@loongson.cn> - 202308-40
changelog:
  - revert the patch "0201-BaseTools-Scripts-GccBase-Align-.text-and-.data-to-4.patch" on loongarch
  - Fix the issue of failing to parse the serial port base address on loongarch


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 18-4
changelog:
  - Fix segfault when passed --index is greater than current boot order size
    Add missing short option handling for --index (-I)


author: zhangxingrong <zhangxingrong@uniontech.com> - 18-5
changelog:
  - Fix the incorrect long parameter in help messages
  - efibootmgr: delete_bootnext is just a boolean, not an entry id


author: lifeifei <lifeifei@kylinos.cn> - 0.190-3
changelog:
  - Type:requirement
  - CVE:NA
  - SUG:NA
  - DESC:add noreplace to /usr/lib/sysctl.d/10-default-yama-scope.conf


author: wangqiang <wangqiang1@kylinos.cn> - 0.190-4
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: Fix handling of corefiles with non-contiguous .so segments


author: shixuantong <shixuantong1@huawei.com> - 0.190-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:move /usr/lib64/libdebuginfod.so from debuginfod-client-devel to debuginfod-client


author: yuanchicheng <chicheng.oerv@isrc.iscas.ac.cn> - 0.190-10
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: backport-fix-riscv64-return-value-location-retrieval-implementation.patch


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 3.3.0-30
changelog:
  - Type:requirement
  - CVE:NA
  - SUG:NA
  - DESC:add kernel-64k and related software packages to edge_aarch64


author: Wenlong Zhang <zhangwenlong@loongson.cn> - 3.3.0-31
changelog:
  - Type:requirement
  - CVE:NA
  - SUG:NA
  - DESC: modify rpmlist.xml on loongarch64 for openEuler-24.03-LTS-SP4


author: lvxiangcong <lvxiangcong@kylinos.cn> - 3.4.14-16
changelog:
  - Type:CVES
  - ID:CVE-2024-24791 CVE-2023-45288 CVE-2024-24783 CVE-2024-24785 CVE-2023-45290
       CVE-2023-39326
  - SUG:NA
  - DESC:Batch fix cves through rebuild


author: yanglu <yanglu72@h-partners.com> - 2:6.6-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:ethtool:hibmcge:fix wrong register address in pretty print of ethtool -d command


author: andy <liuyang01@kylinos.cn> - 2:6.6-6
changelog:
  - Type:requirement
  - Id:NA
  - SUG:NA
  - DESC:ethtool: Fix SFF-8472 transceiver module identification
          ethtool: Add default branch to sff8636_show_all_ioctl switch
          qsfp: Better handling of Page 03h netlink read failure
          module-eeprom: treat zero arguments like any other arguments for hex dump
          qsf: Better handling of Page A2h netlink read failure


author: zhangyaqi <zhangyaqi@kylinos.cn> - 2:6.6-7
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:add NULL check before jsonw_string_field() in print_string()
         netlink: add NULL check for get_string() in features.c


author: Fengyan Mu <mufengyan@huawei.com> - 2:6.6-8
changelog:
  - Type:requirement
  - Id:NA
  - SUG:NA
  - DESC:ethtool: Add support the printer for the registers of unic driver
         through the command -d


author: laokz <zhangkai@iscas.ac.cn> - 1.6.2-2
changelog:
  - Let valgrind BuildRequire following system i386 i486 i586 i686 pentium3 pentium4 athlon geode x86_64 armv3l armv4b armv4l armv4tl armv5tl armv5tel armv5tejl armv6l armv6hl armv7l armv7hl armv7hnl armv8l armv8hl armv8hnl armv8hcnl aarch64 loongarch64 powerpc64le ppc64le sw_64


author: liupei <liupei@kylinos.cn> - 4.12.1-8
changelog:
  - fence_scsi: Automatically detect devices for shared VGs
  - fence_scsi: Add support for space-separated devices and update in meta-data


author: liupei <liupei@kylinos.cn> - 4.12.1-9
changelog:
  - fence_azure_arm:add stack cloud support
  - azure_fence: use correct credential_scope and profile for stack hub


author: liupei <liupei@kylinos.cn> - 4.12.1-11
changelog:
  - fence_aliyun: support filter for list-action
  - fence_aliyun: add credentials file support
  - fence_aliyun: update order for new parameters


author: Funda Wang <fundawang@yeah.net> - 140.7.0-1
changelog:
  - update to 140.7.0
    * fix CVE-2026-0877, CVE-2026-0878, CVE-2026-0879, CVE-2026-0880,
      CVE-2026-0882, CVE-2025-14327, CVE-2026-0883, CVE-2026-0884,
      CVE-2026-0885, CVE-2026-0886, CVE-2026-0887, CVE-2026-0890,
      CVE-2026-0891


author: zhouyihang <zhouyihang3@h-partners.com> - 1.2.6-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:chore nftables add delete table helper
         fix nftables always flush main table on start


author: zhouyihang <zhouyihang3@h-partners.com> - 1.2.6-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Firewall startup is to set CleanupModuleOnxit=yes to unload related ko when stopping firewalld service
         To reduce unnecessary loading of ebtables-related kernel modules
         fix(nm): release NM client after a timeout


author: zhouyihang <zhouyihang3@h-partners.com> - 1.2.6-8
changelog:
  - Type:bugfix
  - CVE:NA   
  - SUG:NA   
  - DESC:fix(icmp): fix check_icmpv6_name() to use correct IPv6 names
         fix(ipset): fix configuring IP range for ipsets with nftables
         fix(ipset): fix configuring "timeout","maxelem" values for
         fix(rich): validate service name of rich rule
         fix(rich): fix range check for large rule limit
         fix(nftables): use current pkttype keywords


author: zhangxingrong <zhangxingrong@uniontech.cn> - 1.4.3-3
changelog:
  - Limit the number of clock() calls
  - Documentation (man/flac.md); fix typo 
  - flac: foreign_metadata: fix -Walloc-size
  - Fix format ending up with wrong subformat


author: Dingli Zhang <dingli@iscas.ac.cn> - 1.17.1-4
changelog:
  - Remove riscv64 prebuilded files
  - Build protoc, protoc-jar and protoc-jar-maven-plugin in prep state for riscv64


author: wangkai <13474090681@163.com> - 2:2.11.8-1
changelog:
  - Update to 2.11.8
  - Fix CVE-2026-22852, CVE-2026-22856, CVE-2026-22859, CVE-2026-23530, CVE-2026-23531,
    CVE-2026-23532, CVE-2026-23534, CVE-2026-24491, CVE-2026-24675, CVE-2026-24676,
    CVE-2026-24679, CVE-2026-24681, CVE-2026-24682, CVE-2026-24683, CVE-2026-24684,
    CVE-2026-25997, CVE-2026-26271, CVE-2026-26986, CVE-2026-27015, CVE-2026-25941,
    CVE-2026-22855, CVE-2026-22857, CVE-2026-23533, CVE-2026-23732, CVE-2026-23883,
    CVE-2026-23884


author: wangkai <13474090681@163.com> - 2:2.11.8-3
changelog:
  - Fix CVE-2026-26955, CVE-2026-26965, CVE-2026-31806, CVE-2026-31883, CVE-2026-31885,
    CVE-2026-33984, CVE-2026-33983


author: wangkai <13474090681@163.com> - 2:2.11.8-5
changelog:
  - Fix CVE-2026-25942, CVE-2026-25952, CVE-2026-25953, CVE-2026-25954, CVE-2026-27951,
    CVE-2026-29774, CVE-2026-29775, CVE-2026-31884, CVE-2026-33985


author: yangyun <yangyun50@huawei.com> -3.16.2-1
changelog:
  - upgrade to 3.16.2
  	- fix some issues (see: https://github.com/libfuse/libfuse/releases) 
  	- improved support for some less common systems (32bit, alternative libcs)
  	- unsupported mount options are no longer silently accepted
  	- auto_unmount is now compatible with allow_other
  	- readdir kernel cache can be enabled from high-level API


author: Qin Fandong <qinfandong@kylinos.cn> - 1.8.17-9
changelog:
  - Remove build requires protobuf-c* and disable plugin logitech-bulkcontroller
    which to upgrade the firmware on Logitech Video Collaboration products.


author: Chenzhen <chenzhen126@huawei.com> - 2.0.2-4
changelog:
  - fix restart thread block by resetting probe pid
    fix service failed when cmd server thread starts late
    fix OOB write when getting proc cmdline
    fix restart gopher failed for check gopher pid multi times
    fix run sig hander core for probe mng create later
    fix potential nullptr dereference in libevent openssl cb
    ipc: reset probe_flags to 0 when restarting probes
    tcpprobe: do not flush snooped procs to avoid deleting tcp link by accident
    fix buffer overflow in sscanf
    fix buffer overflow and ret value of sscanf
    snooper: enlarge channel map and shorten poll timeout to ease event loss
    system_infos: fix oob of arrays and double free
    Refactor to reduce memory usage of metric record
    bugfix: path parsing error when gala-gopher running in container
    fix strdup relative error
    tcpprobe: fix incorret struct type of tracepoint event
    fix UAF of probe bin after parsing invalid config
    snooper: fix opposite judgment logic of container info


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-79
changelog:
  - cfg: notify that it's unsupported, when stack_num > 1
  - fix errno == ETIMEFOUT
  - fix epoll and recv threads blocked on the same semaphore. data cannot be read in recv thread.
  - fix rpc pool leak, when thread exits
  - remove app_bind_numa check from exclude_cpus
  - openGauss: fix connection attempt failed
  - openGauss: fix gs_ctl switchover failed


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-80
changelog:
  - Connect: execute lwip connect if dst_ip and host_ip are in the same network.
  - kernerl bind: add ipv6 add check
  - openGauss unsupport_tcp_optname
  - fix a contention issue when rpc pools are added to rpc_pool_array


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-82
changelog:
  - DUMP: fix abnomal printing in the dump process.
  - SIGNAL: Adjust hijack sigal table to hijack SIGABRT SIGQUIT and delet SIGKILL
  - SIGNAL: Adjust sigaction function to keep lstack signal function executed successfully.


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-83
changelog:
  - SIGNAL: block SIGSEGV during exit process
  - Stack: unset stack_stop, while stacks exit by rpc message.
  - fix the memory leak when using strdup


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-84
changelog:
  - update gazelle max numa nodes 8
  - Protocal: fixing deathlock between protocol threads and app thread
  - Connect: fix benchmark_dws connect failed
  - RTC-mode: fix gazellectl can't print connenct info
  - add xdp tx checksum/tso offload


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-85
changelog:
  - sockio: fix rpc_send coredump after RPC_MSG_EXIT
  - sockio: fix tcp_write not remove EPOLLOUT
  - fix 20.03-LTS build failed
  - sk_wait: igonre mem_thread flush signal
  - sockio: fix sendmbox full return EWOULDBLOCK
  - sockio: fix callback_tcp_send output too many at once
  - mempool: increase MEM_THREAD_MANAGER_FREE_S to avoid poll
  - sockctl: fix rtw broadcast close and shutdown
  - poll: fix do_lwip_connected_callback not delete poll kernel fd
  - sk_event: fix rtw epoll wrong event notify and remove
  - sockio: fix rtw_stack_tcp_write wrong copied_total after append
  - epoll: fix do_lwip_connected_callback
  - sk_wait: fix lwip_wait_foreach_notify coredump at startup
  - socket: fix stack_udp_readmsg return len
  - sk_wait: fix sock_wait_common_free socket: simplify calling free_count in rtw_stack_tcp_write
  - mbox: fix mbox_ring_common_free coredump when rte_ring_create failed
  - sk_wait: fix lwip_tcp_allow_send coredump
  - mempool: stop using cache when too many threads
  - mempool: fix pthread_tryjoin_np coredump when mysqld shutdown
  - mempool: mem_get_rpc add reserve limit
  - mempool: fix mbox_ring free not call recv_finish_burst
  - mempool: modify mbuf num and rpc_msg num
  - socket: fix sk_wait cannot be interrupted by signals
  - socket: fix tcp closed
  - tcp: add GAZELLE_TCP_ASYNC_RECVD      fix mbuf OOM caused by untimely sockio_peek_recv_free
  - socket: fix stack_tcp_read do not recv_finish_burst
  - socket: fix connect blocking
  - mempool: fix copy_mbuf_private
  - dfx: support sk_wait stat
  - mempool: add mem_thread_cache_flush          fix PBUF_POOL_PREINIT
  - cfg: add mem_async_mode
  - cfg: add mem_cache_max and change default rpc_msg_max
  - socket: adapt to tcp and udp
  - socket: refactor tcp and udp
  - socket: adapt to sock_event
  - socket: refactor sock_event
  - cleancode: remove get_stack_tid DPDK_PKT_BURST_SIZE PACKET_READ_SIZE
  - cleancode: remove gazelle_light_ring
  - cleancode: add GAZELLE_SAME_NODE
  - RTC: fixing program stuck while gazelle exit in multi-threads envirement


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 3.7.3-1
changelog:
  - Update to 3.7.3
    CheckDependentLibraries.cmake: don't use libjpeg if disabled
    frmts/mrf/CMakeLists.txt: ignore HAVE_JPEGTURBO_DUAL_MODE_8_12 if GDAL_USE_JPEG is OFF
    FindPostgreSQL.cmake: Update the list of released PgSQL versions
    Add support for PoDoFo >= 0.10.0
    Add support for TileDB 2.17
    Fix build with -DRENAME_INTERNAL_SHAPELIB_SYMBOLS=OFF


author: tangjie02 <tangjie02@kylinos.com.cn> - 1.0.1-1.ky3
changelog:
  - KYOS-F: Modify the python3-jinja2 to Requires from BuildRequires.
  - KYOS-F: Remove gdbus_codegen.glibmm*egg-info directory after install.


author: yaoxin <yao_xin001@hoperun.com> - 0.4.50-1
changelog:
  - Update to 0.4.50:
  - Core:
    * Better Gobject Introspection annotation coverage.
    * Improved error handling for gegl chain processing.
    * Added accessors for pad meta-data, to be able to show names and descriptions in UIs.
    * GeglColor: more lax parameters for g_arapm_values_cmp
    * exr-save: store 16bpc files as half, fixing gimp#10778
    * ff-load, ff-save: fix build with FFmpeg 7
    * dither: do processing in linear when all levels==2


author: Funda Wang <fundawang@yeah.net> - 9.56.1-14
changelog:
  - Type:CVE
  - ID:NA
  - SUG:NA
  - DECS: Fix CVE-2025-27830, CVE-2025-27832, CVE-2025-27833, CVE-2025-27834, CVE-2025-27835, CVE-2025-27836


author: hdliu <dev03108@linx-info.com> - 9.56.1-15
changelog:
  - Add font mappings so that the PS interpreter can rasterize Chinese content using the two fonts STKaiti-Regular and STheiti-Regular.


author: yaoxin <yao_xin001@hoperun.com> - 5.2.2-1
changelog:
  - Update to 5.2.2
    * Fixes for CVE-2023-48161 (bsc#1217390), CVE-2022-28506 (bsc#1198880)
    * Address SF issue #151: A heap-buffer-overflow in gif2rgb.c:294:45
    * Address SF issue #166: a read zero page leads segment fault in
      getarg.c and memory leaks in gif2rgb.c and gifmalloc.c


author: fuanan <fuanan3@h-partners.com> - 2.43.0-7
changelog:
  - Type:CVE
  - ID:CVE-2025-48384 CVE-2025-48385 CVE-2025-48386
  - SUG:NA
  - DESC:Fix CVE-2025-48384 CVE-2025-48385 CVE-2025-48386


author: fuanan <fuanan3@h-partners.com> - 2.43.0-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix malformed patch:
         backport-CVE-2025-48385-bundle-uri-fix-arbitrary-file-writes-via-parameter-i.patch


author: fuanan <fuanan3@h-partners.com> - 2.43.0-9
changelog:
  - Type:CVE
  - ID:CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835
  - SUG:NA
  - DESC:Fix CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835


author: fuanan <fuanan3@h-partners.com> - 2.43.0-10
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch
         config.mak.uname: set CSPRNG_METHOD to getrandom on Linux


author: Xinwei Hu <shinwell_hu@openeuler.sh> - 3.6.0-1
changelog:
  - Upgrade to 3.6.0
    - Support multi-stage authentication with Git credential helpers and relative worktree paths
    - New object transfer batch size configuration option
    - More POSIX-compliant hook scripts


author: Funda Wang <fundawang@yeah.net> - 3.6.1-1
changelog:
  - Upgrade to 3.6.1
    - fix CVE-2024-53263: Git LFS permits retrieval of credentials via crafted HTTP URLs


author: Funda Wang <fundawang@yeah.net> - 1.76.3-1
changelog:
  - update to 1.76.3
  - disable Regress test for now as it failed with:
    TypeError: can't redefine non-configurable property "name_conflict" in testRegress.js (line 923)


author: zhaoyonghao10 <zhaoyonghao10@h-partners.com> - 2.78.3-16
changelog:
  - apply 3 patches: backport-Fix-a-buffer-leak-when-finishing-connecting.patch, backport-Add-thread-pool-stress-test-to-task-c.patch, backport-Cleanup-trailing-spaces-task-c.patch


author: Qingqing Li <liqingqing3@huawei.com> - 2.38-98
changelog:
  - iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module
  - posix: Run tst-wordexp-reuse-mem test
  - elf: parse /proc/self/maps as the last resort to find the gap for tst-link-map-contiguous-ldso


author: Qingqing Li <liqingqing3@huawei.com> - 2.38-101
changelog:
  - Use pending character state in IBM1390, IBM1399 character sets (CVE-2026-4046)
  - Document CVE-2026-4046


author: Qingqing Li <liqingqing3@huawei.com> - 2.38-103
changelog:
  - include: isolate __O_CLOEXEC flag for sys/mount.h and fcntl.h
  - Linux: Only define OPEN_TREE_* macros in <sys/mount.h> if undefined (bug 33921)

   * Fri Apr 24 2026 zhangjian <mszjaas@qq.com> - 2.38-102
   - fix-cve-2026-5450
   - fix-CVE-2026-5928


author: Qingqing Li <liqingqing3@huawei.com> - 2.38-104
changelog:
  - libio: Fix ungetwc operating on byte stream [BZ #33998] (CVE-2026-5928)
  - stdio-common: Fix buffer overflow in scanf %mc [BZ #34008] (CVE-2026-5450)


author: panzhe <panzhe@kylinos.cn> - 2.38-107
changelog:
  - Sw64: Fix getpriority error

   * Fri May 29 2026 zhongxuan2 <zhongxuan2@h-partners.com> - 2.38-106
   - fix-cve-2026-5435
   - fix-CVE-2026-6238


author: wuguanghao <wuguanghao3@huawei.com> - 11.1-1
changelog:
  - upgrade to 11.1
    - add simple-quota xattr to afr and ec ignore list
    - fix asan use-after-free bug
    - fix error not supported for ipv6
    - support OpenSSL 3.0
    - drop libglusterd
    - O_PATH support over protocol
    - Enable AES cipher for SSL by default
    - glusterd: add stripe_count in volume info
    - snapshots: Support for ZFS Snapshots
    - gfapi: Add support for 'AT_EMPTY_PATH' and 'AT_REMOVEDIR' flag


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 11.1-2
changelog:
  - fix upgrade error that {_mandir}/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.


author: Linux_zhang <244695981@qq.com> - 3.8.2-13
changelog:
  - fix CVE-2026-33846,CVE-2026-3833,CVE-2026-42009,CVE-2026-42010,CVE-2026-42014,CVE-2026-42015,CVE-2026-5260.


author: Julian Zhu <julian.oerv@isrc.iscas.ac.cn> - 1.21.4-40
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Fix the bootstrap failure caused by the backport of RISC-V RVA23 support


author: huang-xiaoquan <huangxiaoquan1@huawei.com> - 1.21.4-42
changelog:
  - Type:Feature
  - CVE:NA
  - SUG:NA
  - DESC: [stepopt2] Add goexperiment.StepOpt2 for optimized step function in runtime


author: huzhangying <huzhangying@huawei.com> - 1.21.4-43
changelog:
  - Type:CVE
  - CVE:CVE-2025-58183,CVE-2025-58189,CVE-2025-61724,CVE-2025-58188,CVE-2025-58185,CVE-2025-58187,CVE-2025-61723,CVE-2025-47912,CVE-2025-58186
  - SUG:NA
  - DESC:fix CVE-2025-58183,CVE-2025-58189,CVE-2025-61724,CVE-2025-58188,CVE-2025-58185,CVE-2025-58187,CVE-2025-61723,CVE-2025-47912,CVE-2025-58186


author: huzhangying <huzhangying@huawei.com> - 1.21.4-45
changelog:
  - Type:CVE
  - CVE:fix CVE-2025-61732,CVE-2025-68119,CVE-2025-61731,CVE-2025-61728,CVE-2025-68121,CVE-2025-61723
  - SUG:NA
  - DESC:fix CVE-2025-61732,CVE-2025-68119,CVE-2025-61731,CVE-2025-61728,CVE-2025-68121,CVE-2025-61723


author: huzhangying <huzhangying@huawei.com> - 1.21.4-46
changelog:
  - Type:CVE
  - CVE:CVE-2026-27139,CVE-2026-27142,CVE-2026-25679
  - SUG:NA
  - DESC:fix CVE-2026-27139,CVE-2026-27142,CVE-2026-25679


author: huzhangying <huzhangying@huawei.com> - 1.21.4-48
changelog:
  - Type:CVE
  - CVE:CVE-2026-27143,CVE-2026-27144,CVE-2026-32288,CVE-2026-27140
  - SUG:NA
  - DESC:fix CVE-2026-27143,CVE-2026-27144,CVE-2026-32288,CVE-2026-27140


author: shupiaoyang <shupiaoyang1@huawei.com> - 1.24.6-2
changelog:
  - internal/runtime/maps: Add intrinsic implementation for ctrlGroupMatchH2 to avoid false-positive match
  - internal/sync: Add support for wide trie in sync.HashTrieMap
  - hash/crc32c: adjust the machine code to assembly instructions
  - hash/crc32c: adjust vmov and eor to fmovd and eorw instruction


author: rfwang07 <wangrufeng5@huawei.com> - 1.24.6-3
changelog:
  - runtime: add StepOpt experiment to optimize step function
  - internal/runtime/maps: revert a commit causing performance regression
  - internal/sync: fix panics in HashTrieMap on hash collision at almost full depth
  - runtime/pprof,net/http/pprof: add PMU and BRBE collection in go pprof
  - cmd/compile: optimize slice bounds checking with SUB/SUBconst comparisons and NEG(SUB)
  - runtime: add ClearSpan experiment to clear spans on first allocation
  - cmd/compile: add Kunpeng forceinline optimization
  - runtime: add PageShift14 experiment to optimize memory page allocation locality
  - runtime: change gcBackgroundUtilization optional
  - runtime: bugfix for pageshift14
  - reflect: add RLock fast path in initFuncTypes gated by GOEXPERIMENT=reflectrwlock
  - runtime: add tinysize experiment
  - cmd/compile: replace conditions to CCMP instructions on ARM64
  - cmd/compile: improve loopRotate to handle nested loops
  - runtime: add Kunpeng atomic write-barrier optimization
  - runtime: add Kunpeng malloc prefetch optimization
  - cmd/asm: add SVE instructions for ARM64
  - cmd/compile: convert []byte(string([]byte)) to makeslicecopy
  - add Kunpeng memory layout optimization
  - runtime: fix pageshift14 build and add DT for PageNum/PageShift14


author: wd-gitcode <wangding16@huawei.com> - 1.24.6-4
changelog:
  - runtime: memmove: use 128-bit Quad registers with FLDPQ/FSTPQ
  - runtime: add goschedIfBusy to bgsweep to prevent livelock after inlining
  - cmd/compile: support multiple levels of inlining using PGO
  - [rprfm] add Kunpeng arm64 memmove range prefetch optimization
  - cmd/compile: AArch64 LdSt optimization on Prog
  - cmd/compile: improve store-to-load forwarding with compatible types
  - cmd/compile: schedule block with predicted branch
  - cmd/internal/obj/arm64, cmd/compile, internal/runtime/atomic: add LDAPR for rcpc
  - cmd/compile: Prove dead bound checks in mallocgc


author: rfwang07 <wangrufeng5@huawei.com> - 1.24.6-5
changelog:
  - internal/bytealg: optimize Count/CountString on arm64
  - runtime: fix vector destination variant for ZUADDV instruction
  - cmd/link/internal/ld: introduce -funcalign=N option


author: rfwang07 <wangrufeng5@huawei.com> - 1.24.6-6
changelog:
  - Revert "Add SVE instructions ZSADDV and ZUADDV for ARM64" to restore the scalar ZSADDV/ZUADDV destination encoding


author: laokz <zhangkai@iscas.ac.cn> - 2.15-2
changelog:
  - riscv64: force --enable-frame-pointers due to unsupported
    -momit-leaf-frame-pointer compile option until gcc14


author: Funda Wang <fundawang@yeah.net> - 8.0.32-27.5
changelog:
  - greatsql-mysql-config was removed previously, my.cnf was moved
    into greatsql-server package without conflicts and obsoletes


author: yixiangzhike <yixiangzhike007@163.com> - 1.23.0-4
changelog:
  - Delete duplicate files between groff and groff-x11
  - Detete Obsoletes and Provides about groff-x11 from groff


author: LeoLiu-oc <leoliu-oc@zhaoxin.com> - 1:2.12-43
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:i386: Check for cpuid family when flush cache only on VIA CPUs
         i386: Reduce the time of set VESA mode by clearing FB directly for Zhaoxin/Glenfly card


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1:2.12-44
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fs/btrfs: Fix memory leaks
         fs/zfs: Fix a number of memory leaks in ZFS code
         term/ns8250-spcr: Return if redirection is disabled
         loader/i386/linux: Fix resource leak
         lib/reloacator: Fix memory leaks
         disk/ldm: Fix memory leaks
         fs/ntfs: Fix NULL pointer dereference and possible infinite loop
         net/drivers/ieee1275/ofnet: Add missing grub_malloc()
         kern/partition: Unbreak support for nested partitions
         script/execute: Don't let trailing blank lines determine the return code
         commands/file: Fix NULL dereference in the knetbsd tests
         i386/tsc: The GRUB menu gets stuck due to unserialized rdtsc
         kern/i386/tsc_pmtimer: The GRUB menu gets stuck due to failed calibration


author: yechao-w <wang.yechao255@zte.com.cn> - 1:2.12-45
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: kern/riscv/efi/init: Use time register in grub_efi_get_time_ms()


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1:2.12-47
changelog:
  - Type:CVE
  - CVE:CVE-2025-61661,CVE-2025-61662,CVE-2025-54771,CVE-2025-54770,CVE-2025-61663,CVE-2025-61664
  - SUG:NA
  - DESC:commands/usbtest: Ensure string length is sufficient in usb string processing
         commands/usbtest: Use correct string length field
         tests/lib/functional_test: Unregister commands on module unload
         normal/main: Unregister commands on module unload
         gettext/gettext: Unregister gettext command on module unload
         net/net: Unregister net_set_vlan command on unload
         kern/file: Call grub_dl_unref() after fs->fs_close()
         commands/test: Fix error in recursion depth calculation


author: Han Gao <gaohan@iscas.ac.cn> - 1:2.12-48
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:configure: Add -mno-relax on riscv*
         configure: Defer check for -mcmodel=large until PIC/PIE checks are done


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 1:2.12-50
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: workaround the BuildRequires mis-preinstallation issue on build systems


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1:2.12-51
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:loader/i386/pc/linux: Fix resource leak
         Revert "lzma: Make sure we don't dereference past array
         loader/efi/linux: Correctly terminate load_options member
         loader/efi/linux: Use sizeof() instead of constant
         loader/efi/linux: Use proper type for len variable
         loader/efi/linux: Do not pass excessive size for source string
         loader/efi/linux: Remove useless assignment
         loader/efi/linux: Reuse len variable
         loader/efi/linux: Unload previous Linux kernel/initrd before updating kernel size
         normal/charset: Fix underflow and overflow in loop init
         lib/LzmaEnc: Validate len before subtracting
         osdep/unix/hostdisk: Fix signed integer overflow
         fs/zfs: Fix another memory leak in ZFS code
         fs/xfs: Fix large extent counters incompat feature support


author: Funda Wang <fundawang@yeah.net> - 1.22.5-2
changelog:
  - fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
    CVE-2024-47607, CVE-2024-47615, CVE-2024-47835


author: yaoxin <yao_xin001@hoperun.com> - 1.20.3-3
changelog:
  - Fix cves:
    CVE-2024-47606,CVE-2024-47599,CVE-2024-47613,CVE-2024-47775
    CVE-2024-47776,CVE-2024-47777,CVE-2024-47778,CVE-2024-47774
    CVE-2024-47540,CVE-2024-47602,CVE-2024-47601,CVE-2024-47603
    CVE-2024-47834,CVE-2024-47537,CVE-2024-47597,CVE-2024-47543
    CVE-2024-47596,CVE-2024-47539,CVE-2024-47546,CVE-2024-47598


author: lin zhang <lin.zhang@turbolinux.com.cn> - 3.24.7-1
changelog:
  - Update to 3.24.7

  -* Mon Jun 20 2022 liukuo <liukuo@kylinos.cn> - 3.24.6-2
  -- License compliance rectification


author: Dingli Zhang <dingli@iscas.ac.cn> - 3.3.6-3
changelog:
  - Fix build on riscv64
  - Upgrade os-maven-plugin to 1.7.1
  - Remove settings.xml and use ${HOME}/.m2/repository as maven repo


author: Liu Wang <1823363429@qq.com> - 6.6.0-120.0.0.98
changelog:
  - Split kernel modules into kernel-extra-modules subpackage
  - Prioritizes core kmod (networking/drm/block/modesetting) in main kernel package
  - All extra modules and their dependencies are isolated to kernel-extra-modules
  - Added module-filelist generation scripts for both packages
  - Updated post-install scripts to handle extra modules dependency


author: Li Nan <linan122@huawei.com> - 6.6.0-122.0.0.99
changelog:
  - !19317 ub: ubase: Remove useless character '+'
  - ub: ubase: Remove useless character '+'
  - !18870 add sentry kmod
  - drivers/ub/sentry: add sentry_remote_reporter module
  - drivers/ub/sentry: add sentry_uvb_comm module
  - drivers/ub/sentry: add sentry_urma_comm module
  - drivers/ub/sentry: add sentry_reporter and sentry_msg_help
  - !19306  net: Netdev use RCU protection
  - !19290 urma: bugfix the issue of urma stream generation failure
  - !19292  blk-ioinf: accumulate total latency properly across sampling periods
  - !19230  drm/vmwgfx: Fix Use-after-free in validation
  - !19291  usbnet: Fix using smp_processor_id() in preemptible code warnings
  - net: use dst_dev_rcu() in sk_setup_caps()
  - ipv4: use RCU protection in ip_dst_mtu_maybe_forward()
  - ipv6: use RCU in ip6_output()
  - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().
  - net: dst: Fix kabi-breakage for struct dst_entry
  - ipv6: use RCU in ip6_xmit()
  - ipv4: start using dst_dev_rcu()
  - tcp_metrics: use dst_dev_net_rcu()
  - net: dst: introduce dst->dev_rcu
  - net: Add locking to protect skb->dev access in ip_output
  - net: dst: add four helpers to annotate data-races around dst->dev
  - !19191  Fix CVE-2025-40200
  - urma: bugfix the issue of urma stream generation failure
  - acpi: provides acpi power notifier chain
  - !19303  pid: Add a judgment for ns null in pid_nr_ns
  - !19282  fix cves
  - !19211  ACPI: video: Fix use-after-free in acpi_video_switch_brightness()
  - !19175 [OLK-6.6] Fix CVE-2025-38666
  - !18496 [OLK-6.6] Fix CVE-2025-22107
  - !18029 [OLK-6.6] Fix CVE-2025-37892
  - !19151 [OLK-6.6] Fix CVE-2025-40055
  - !19131 [OLK-6.6] Fix CVE-2025-40012
  - !19125 [OLK-6.6] Fix CVE-2025-39692
  - !19124 [OLK-6.6] Fix CVE-2025-39694
  - !19133 [OLK-6.6] Fix CVE-2025-40082
  - !19118 [OLK-6.6] Fix CVE-2025-39703
  - !19113 [OLK-6.6] Fix CVE-2025-39938
  - !19111 [OLK-6.6] Fix CVE-2025-40043
  - !19100 obmm: Ownership Based Memory Management framework
  - pid: Add a judgment for ns null in pid_nr_ns
  - !19285  xsched: XCU Partition
  - !19293  sched/rt: Fix race in push_rt_task
  - !19294  dm-stripe: fix a possible integer overflow
  - !19278 ub: ubase: Improve performance and fix some bug
  - dm-stripe: fix a possible integer overflow
  - sched/rt: Fix race in push_rt_task
  - blk-ioinf: accumulate total latency properly across sampling periods
  - usbnet: Fix using smp_processor_id() in preemptible code warnings
  - xsched: move stream_lock into xsched_vsm_add_tail() to avoid sleeping in atomic context
  - xsched: rename vstream->id to vstream->sq_id
  - xsched: add null check for sched in xsched_xse_set_class
  - xsched: modify the logic for inc and dec the count value
  - xsched: replace hard-coded numeric values
  - xsched: unify root detection logic for cgroups
  - xsched: remove parent->lock and rely on cgroup_mutex for shares update
  - xsched: avoid sleeping while holding spinlock in xcu_move_task()
  - xsched: add missing spin_unlock() in xcu_move_task() error path
  - xsched: enforce valid xsched scheduler config dependencies
  - xsched: unify log prefix format and remove duplicated prefix macros
  - mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead()
  - mm: zswap: move allocations during CPU init outside the lock
  - mm: zswap: properly synchronize freeing resources during CPU hotunplug
  - mm/zswap: change per-cpu mutex and buffer to per-acomp_ctx
  - mm/hugetlb: unshare page tables during VMA split, not before
  - !19194  ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping
  - !19195  iommu/vt-d: debugfs: Fix legacy mode page table dump logic
  - !19273  net/ip6_tunnel: Prevent perpetual tunnel growth
  - !19272  tls: wait for pending async decryptions if tls_strp_msg_hold fails
  - !19274  netfilter: nft_objref: validate objref and objrefmap expressions
  - !19052  arm64/mpam: Add build dependencies for CONFIG_RESCTRL_IOMMU
  - !19182  ALSA: ump: Fix buffer overflow at UMP SysEx message conversion
  - !19179  x86/iopl: Cure TIF_IO_BITMAP inconsistencies
  - !19178  fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var
  - !19177  ACPICA: fix acpi parse and parseext cache leaks
  - !19176  crypto: ccp - Fix crash when rebind ccp device for ccp.ko
  - ub: ubase: change cmdq/mbx timeout val & fix spell error
  - ub: ubase: adapt to response message structure change for ctrlq sl query
  - net: unic: Fix UE deactivate message cleaning
  - net: unic: Use copy instead of ummu map in tx
  - netfilter: nft_objref: validate objref and objrefmap expressions
  - net/ip6_tunnel: Prevent perpetual tunnel growth
  - tls: wait for pending async decryptions if tls_strp_msg_hold fails
  - !19257  init/Kconfig: Move ARCH_SUPPORTS_SCHED_SOFT_QUOTA to drop CGROUPS dependency
  - obmm: Add resource management support for imported memory
  - obmm: Add sysfs interface for configuration and monitoring
  - obmm: Add low memory management support
  - obmm: Add ownership management and transfer mechanisms
  - obmm: Add mmap support for shared memory regions
  - obmm: Add shared memory device interface
  - obmm: Add pre-import support for performance optimization
  - obmm: Add memory region import functionality
  - obmm: Add address validation and checking
  - obmm: Add user address export support
  - obmm: Add memory region export functionality
  - obmm: Implement memory pool allocator
  - obmm: Add continuous memory allocator for OBMM framework
  - obmm: Add cache maintenance helpers for inter-node consistency
  - obmm: Add region definitions and core data structures
  - obmm: Add Ownership Based Memory Management framework
  - ub:hisi-ubus: Support for ub memory decoder ras handle
  - ub:hisi-ubus: Support for UB Memory Decoder Initialization
  - ub:ubus: Support for UB Memory Decoder general layer implementation
  - !19227  bpf: Avoid RCU context warning when unpinning htab with internal structs
  - !18830  mm: swap: check for stable address space before operating on the VMA
  - init/Kconfig: Move ARCH_SUPPORTS_SCHED_SOFT_QUOTA to drop CGROUPS dependency
  - !19165 Documentation: Add opensource document for ubase&unic&ubl
  - !19243 Revert "net: hns3: add support for queue bonding mode of flow director"
  - !19115  nvmet-fc: move lsop put work to nvmet_fc_ls_req_op
  - !19222  sctp: Fix MAC comparison to be constant-time
  - !19223  net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce()
  - !19224  bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}
  - !19226  sunrpc: fix null pointer dereference on zero-length checksum
  - Revert "net: hns3: add support for queue bonding mode of flow director"
  - Revert "net: hns3: add queue bonding mode support for VF"
  - Revert "net: hns3: refactor the debugfs for dumping FD tcam"
  - Revert "net: hns3: correct the logic of hclge_sync_vf_qb_mode()"
  - Revert "net: hns3: allocate fd counter for queue bonding"
  - !19166 [OLK-6.6][linux-6.6.y sync] Backport 6.6.89-6.6.90 LTS Patches
  - !19116 Fix SPI registration failure logging level
  - !19216  net: usb: asix: hold PM usage ref to avoid PM/MDIO + RTNL deadlock
  - drm/vmwgfx: Fix Use-after-free in validation
  - Fix SPI registration failure logging level
  - !19072 [OLK-6.6] Fix CVE-2025-39827
  - !18647 [OLK-6.6] Fix CVE-2025-38729
  - !19117 [OLK-6.6] Fix CVE-2025-40088
  - !19114 [OLK-6.6] Fix CVE-2025-40084
  - !19048 [OLK-6.6] Fix CVE-2025-39839
  - !18615 [OLK-6.6] Fix CVE-2025-39737
  - !18791 【OLK-6.6】fix CVE-2025-39736
  - !18644 [OLK-6.6] Fix CVE-2025-38717
  - !18653 [OLK-6.6] Fix CVE-2025-38705
  - !18780 【OLK-6.6】fix  CVE-2025-38712
  - !18613 [OLK-6.6] Fix CVE-2025-38713
  - !18632 [OLK-6.6] Fix CVE-2025-38714
  - !18861 [OLK-6.6] Fix CVE-2025-38697
  - !18345 [OLK-6.6] Fix CVE-2025-38663
  - !18948 [OLK-6.6] Fix CVE-2025-38105
  - !18661 [OLK-6.6] Fix CVE-2025-39790
  - !18867 [OLK-6.6] Fix CVE-2025-39766
  - !18636 [OLK-6.6]Fix CVE-2025-39751
  - !19110  CVE-2025-40198
  - !19212  CVE-2025-40179
  - !19057  blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx
  - !19213  Fix CVE-2025-39964
  - !19189  KVM: arm64: ipiv: change declaration argument
  - bpf: Avoid RCU context warning when unpinning htab with internal structs
  - sunrpc: fix null pointer dereference on zero-length checksum
  - bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}
  - net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce()
  - sctp: Fix MAC comparison to be constant-time
  - !19214 ub: udma: recent bugfix for udma.
  - !19209  Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak
  - !19193  crypto: af_alg - Set merge to zero early in af_alg_sendmsg
  - !19206  net: dlink: handle copy_thresh allocation failure
  - !19207  net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast
  - net: usb: asix: hold PM usage ref to avoid PM/MDIO + RTNL deadlock
  - ub: ubase: Introduces the functions and data structures exposed by the ubase driver
  - ub: ubase: Add ubase opensource document
  - net: unic: Add a doc for unic driver
  - ub: udma: Resolve issues related to stream logout and interrupt lock.
  - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx
  - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg
  - ext4: align max orphan file size with e2fsprogs limit
  - ext4: free orphan info with kvfree
  - ext4: verify orphan file size is not too big
  - ext4: use kmalloc_array() for array space allocation
  - ub: udma: reset and segment permission issues are resolved.
  - !19203  Fix CVE-2025-40202
  - ACPI: video: Fix use-after-free in acpi_video_switch_brightness()
  - Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak
  - net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast
  - net: dlink: handle copy_thresh allocation failure
  - spi: tegra114: Use value to check for invalid delays
  - platform/x86/amd: pmc: Clear metrics table at start of cycle
  - dm: fix copying after src array boundaries
  - iommu/arm-smmu-v3: Fix iommu_device_probe bug due to duplicated stream ids
  - drivers: base: handle module_kobject creation
  - kernel: globalize lookup_or_create_module_kobject()
  - kernel: param: rename locate_module_kobject
  - xhci: split free interrupter into separate remove and free parts
  - xhci: Clean up stale comment on ERST_SIZE macro
  - xhci: Use more than one Event Ring segment
  - xhci: Set DESI bits in ERDP register correctly
  - Revert "drm/meson: vclk: fix calculation of 59.94 fractional rates"
  - arm64: dts: st: Use 128kB size for aliased GIC400 register access on stm32mp25 SoCs
  - arm64: dts: st: Adjust interrupt-controller for stm32mp25 SoCs
  - ARM: dts: opos6ul: add ksz8081 phy properties
  - firmware: arm_ffa: Skip Rx buffer ownership release if not acquired
  - firmware: arm_scmi: Balance device refcount when destroying devices
  - sch_htb: make htb_qlen_notify() idempotent
  - ASoC: soc-core: Stop using of_property_read_bool() for non-boolean properties
  - ASoC: Use of_property_read_bool()
  - net: vertexcom: mse102x: Fix RX error handling
  - net: vertexcom: mse102x: Add range check for CMD_RTS
  - net: vertexcom: mse102x: Fix LEN_MASK
  - net: vertexcom: mse102x: Fix possible stuck of SPI interrupt
  - net: fec: ERR007885 Workaround for conventional TX
  - net: ipv6: fix UDPv6 GSO segmentation with NAT
  - net: dsa: felix: fix broken taprio gate states after clock jump
  - net: mdio: mux-meson-gxl: set reversed bit when using internal phy
  - net: dlink: Correct endianness handling of led_mode
  - nvme-pci: fix queue unquiesce check on slot_reset
  - ALSA: ump: Fix buffer overflow at UMP SysEx message conversion
  - pds_core: make pdsc_auxbus_dev_del() void
  - pds_core: delete VF dev on reset
  - pds_core: check health in devcmd wait
  - net: ethernet: mtk-star-emac: rearm interrupts in rx_poll only when advised
  - net: mscc: ocelot: delete PVID VLAN when readding it as non-PVID
  - net: mscc: ocelot: treat 802.1ad tagged traffic as 802.1Q-untagged
  - !19190  Revert "ipmi: fix msg stack when IPMI is disconnected"
  - !19167  drm/vmwgfx: Fix a null-ptr access in the cursor snooper
  - ipmi: Fix handling of messages with provided receive message pointer
  - ipmi: Rework user message limit handling
  - !19134  Bluetooth: ISO: Fix possible UAF on iso_conn_free
  - !19119  dm: fix NULL pointer dereference in __dm_suspend()
  - !19137  ext4: guard against EA inode refcount underflow in xattr update
  - iommu/vt-d: debugfs: Fix legacy mode page table dump logic
  - ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping
  - crypto: af_alg - Set merge to zero early in af_alg_sendmsg
  - Bluetooth: btusb: avoid NULL pointer dereference in skb_dequeue()
  - net/mlx5: E-switch, Fix error handling for enabling roce
  - net/mlx5: E-Switch, Initialize MAC Address for Default GID
  - powerpc/boot: Fix dash warning
  - drm/i915/pxp: fix undefined reference to `intel_pxp_gsccs_is_ready_for_sessions'
  - powerpc/boot: Check for ld-option support
  - ASoC: soc-pcm: Fix hw_params() and DAPM widget sequence
  - Squashfs: reject negative file sizes in squashfs_read_inode()
  - Squashfs: add additional inode sanity checking
  - Revert "ipmi: fix msg stack when IPMI is disconnected"
  - KVM: arm64: ipiv: change declaration argument
  - !19030  cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()
  - ALSA: ump: Fix buffer overflow at UMP SysEx message conversion
  - !19045 net: fix the compile problem introduced by AF_UB
  - x86/iopl: Cure TIF_IO_BITMAP inconsistencies
  - fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var
  - ACPICA: fix acpi parse and parseext cache leaks
  - crypto: ccp - Fix crash when rebind ccp device for ccp.ko
  - net: appletalk: Fix use-after-free in AARP proxy probe
  - net: ubl: Add a doc for ubl module
  - !19161 uburma: add tp_type in urma ioctl operation.
  - drm/vmwgfx: Fix a null-ptr access in the cursor snooper
  - PCI: imx6: Skip controller_id generation logic for i.MX7D
  - Revert "PCI: imx6: Skip controller_id generation logic for i.MX7D"
  - selftests/bpf: extend changes_pkt_data with cases w/o subprograms
  - selftests/bpf: validate that tail call invalidates packet pointers
  - selftests/bpf: freplace tests for tracking of changes_packet_data
  - cpufreq: Fix setting policy limits when frequency tables are used
  - cpufreq: Avoid using inconsistent policy->min and policy->max
  - smb: client: fix zero length for mkdir POSIX create context
  - platform/x86/intel-uncore-freq: Fix missing uncore sysfs during CPU hotplug
  - platform/x86/amd: pmc: Require at least 2.5 seconds between HW sleep cycles
  - iommu/vt-d: Apply quirk_iommu_igfx for 8086:0044 (QM57/QS57)
  - iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid
  - dm: always update the array size in realloc_argv on success
  - dm-integrity: fix a warning on invalid table line
  - dm-bufio: don't schedule in atomic context
  - tracing: Do not take trace_event_sem in print_event_fields()
  - spi: tegra114: Don't fail set_cs_timing when delays are zero
  - mmc: renesas_sdhi: Fix error handling in renesas_sdhi_probe
  - mm/memblock: repeat setting reserved region nid if array is doubled
  - mm/memblock: pass size instead of end to memblock_set_node()
  - amd-xgbe: Fix to ensure dependent features are toggled with RX checksum offload
  - i2c: imx-lpi2c: Fix clock count when probe defers
  - EDAC/altera: Set DDR and SDMMC interrupt mask before registration
  - EDAC/altera: Test the correct error reg offset
  - drm/fdinfo: Protect against driver unbind
  - btrfs: fix COW handling in run_delalloc_nocow()
  - ALSA: usb-audio: Add second USB ID for Jabra Evolve 65 headset
  - ALSA: usb-audio: Add retry on -EPROTO from usb_set_interface()
  - !19143 [OLK-6.6][linux-6.6.y sync] Backport 6.6.88-6.6.89 LTS Patches
  - uburma: add tp_type in urma ioctl operation.
  - !19132  IPIV: fix bug in live migration
  - ocfs2: fix double free in user_cluster_connect()
  - !17056 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.68-6.6.69 LTS Conflicts Patches
  - !18479 [OLK-6.6] xhci: fix memory leak regression when freeing xhci vdev devices depth first
  - !19007  uio_hv_generic: Let userspace take care of interrupt mask
  - ACPI: PPTT: Fix processor subtable walk
  - scsi: pm80xx: Fix array-index-out-of-of-bounds on rmmod
  - cifs: Query EA $LXMOD in cifs_query_path_info() for WSL reparse points
  - dmaengine: Revert "dmaengine: dmatest: Fix dmatest waiting less when interrupted"
  - Revert "usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running"
  - ata: libata-scsi: Fix CDL control
  - net: fix the compile problem introduced by AF_UB
  - objtool: Silence more KCOV warnings, part 2
  - objtool: Ignore end-of-section jumps for KCOV/GCOV
  - nvme: fixup scan failure for non-ANA multipath controllers
  - MIPS: cm: Fix warning if MIPS_CM is disabled
  - net: dsa: mv88e6xxx: enable STU methods for 6320 family
  - net: dsa: mv88e6xxx: enable .port_set_policy() for 6320 family
  - net: dsa: mv88e6xxx: enable PVT for 6321 switch
  - net: dsa: mv88e6xxx: fix atu_move_port_mask for 6341 family
  - comedi: jr3_pci: Fix synchronous deletion of timer
  - driver core: introduce device_set_driver() helper
  - x86/pvh: Call C code via the kernel virtual mapping
  - md/raid1: Add check for missing source disk in process_checks()
  - x86/cpu: Add CPU model number for Bartlett Lake CPUs with Raptor Cove cores
  - ubsan: Fix panic from test_ubsan_out_of_bounds
  - spi: tegra210-quad: add rate limiting and simplify timeout error message
  - spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts
  - loop: aio inherit the ioprio of original request
  - riscv: Provide all alternative macros all the time
  - iomap: skip unnecessary ifs_block_is_uptodate check
  - x86/i8253: Call clockevent_i8253_disable() with interrupts disabled
  - scsi: pm80xx: Set phy_attached to zero when device is gone
  - scsi: ufs: exynos: Ensure pre_link() executes before exynos_ufs_phy_init()
  - ext4: make block validity check resistent to sb bh corruption
  - cifs: Fix querying of WSL CHR and BLK reparse points over SMB1
  - timekeeping: Add a lockdep override in tick_freeze()
  - cifs: Fix encoding of SMB1 Session Setup Kerberos Request in non-UNICODE mode
  - nvmet-fc: put ref when assoc->del_work is already scheduled
  - nvmet-fc: take tgtport reference only once
  - x86/bugs: Don't fill RSB on context switch with eIBRS
  - x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
  - x86/bugs: Use SBPB in write_ibpb() if applicable
  - selftests/mincore: Allow read-ahead pages to reach the end of the file
  - gpiolib: of: Move Atmel HSMCI quirk up out of the regulator comment
  - objtool: Stop UNRET validation on UD2
  - nvme: multipath: fix return value of nvme_available_path
  - nvme: re-read ANA log page after ns scan completes
  - ACPI PPTT: Fix coding mistakes in a couple of sizeof() calls
  - ACPI: EC: Set ec_no_wakeup for Lenovo Go S
  - nvme: requeue namespace scan on missed AENs
  - xen: Change xen-acpi-processor dom0 dependency
  - selftests: ublk: fix test_stripe_04
  - udmabuf: fix a buf size overflow issue during udmabuf creation
  - KVM: s390: Don't use %pK through debug printing
  - KVM: s390: Don't use %pK through tracepoints
  - sched/isolation: Make CONFIG_CPU_ISOLATION depend on CONFIG_SMP
  - io_uring: always do atomic put from iowq
  - rtc: pcf85063: do a SW reset if POR failed
  - ntb_hw_amd: Add NTB PCI ID for new gen CPU
  - ntb: reduce stack usage in idt_scan_mws
  - objtool, lkdtm: Obfuscate the do_nothing() pointer
  - objtool, regulator: rk808: Remove potential undefined behavior in rk806_set_mode_dcdc()
  - objtool, ASoC: codecs: wcd934x: Remove potential undefined behavior in wcd934x_slim_irq_handler()
  - objtool, panic: Disable SMAP in __stack_chk_fail()
  - objtool: Silence more KCOV warnings
  - thunderbolt: Scan retimers after device router has been enumerated
  - usb: host: xhci-plat: mvebu: use ->quirks instead of ->init_quirk() func
  - usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev()
  - usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running
  - dmaengine: dmatest: Fix dmatest waiting less when interrupted
  - sound/virtio: Fix cancel_sync warnings on uninitialized work_structs
  - usb: dwc3: gadget: Avoid using reserved endpoints on Intel Merrifield
  - usb: dwc3: gadget: Refactor loop to avoid NULL endpoints
  - fs/ntfs3: Fix WARNING in ntfs_extend_initialized_size
  - usb: host: max3421-hcd: Add missing spi_device_id table
  - bpf: Reject attaching fexit/fmod_ret to __noreturn functions
  - bpf: Only fails the busy counter check in bpf_cgrp_storage_get if it creates storage
  - bpf: bpftool: Setting error code in do_loader()
  - s390/tty: Fix a potential memory leak bug
  - s390/sclp: Add check for get_zeroed_page()
  - parisc: PDT: Fix missing prototype warning
  - clk: check for disabled clock-provider in of_clk_get_hw_from_clkspec()
  - crypto: ccp - Add support for PCI device 0x1134
  - MIPS: cm: Detect CM quirks from device tree
  - pinctrl: renesas: rza2: Fix potential NULL pointer dereference
  - USB: wdm: add annotation
  - USB: wdm: wdm_wwan_port_tx_complete mutex in atomic context
  - USB: wdm: close race between wdm_open and wdm_wwan_port_stop
  - USB: wdm: handle IO errors in wdm_wwan_port_start
  - USB: VLI disk crashes if LPM is used
  - usb: quirks: Add delay init quirk for SanDisk 3.2Gen1 Flash Drive
  - usb: quirks: add DELAY_INIT quirk for Silicon Motion Flash Drive
  - usb: dwc3: xilinx: Prevent spike in reset signal
  - USB: OHCI: Add quirk for LS7A OHCI controller (rev 0x02)
  - usb: chipidea: ci_hdrc_imx: implement usb_phy_init() error handling
  - usb: chipidea: ci_hdrc_imx: fix call balance of regulator routines
  - usb: cdns3: Fix deadlock when using NCM gadget
  - USB: serial: simple: add OWON HDS200 series oscilloscope support
  - USB: serial: option: add Sierra Wireless EM9291
  - USB: serial: ftdi_sio: add support for Abacus Electrics Optical Probe
  - serial: sifive: lock port in startup()/shutdown() callbacks
  - serial: msm: Configure correct working mode before starting earlycon
  - misc: microchip: pci1xxxx: Fix incorrect IRQ status handling during ack
  - misc: microchip: pci1xxxx: Fix Kernel panic during IRQ handler registration
  - char: misc: register chrdev region with all possible minors
  - KVM: x86: Explicitly treat routing entry type changes as changes
  - mei: me: add panther lake H DID
  - scsi: Improve CDL control
  - USB: storage: quirk for ADATA Portable HDD CH94
  - ata: libata-scsi: Fix ata_msense_control_ata_feature()
  - ata: libata-scsi: Fix ata_mselect_control_ata_feature() return type
  - ata: libata-scsi: Improve CDL control
  - cxl/core/regs.c: Skip Memory Space Enable check for RCD and RCH Ports
  - KVM: SVM: Allocate IR data using atomic allocation
  - io_uring: fix 'sync' handling of io_fallback_tw()
  - LoongArch: Remove a bogus reference to ZONE_DMA
  - drm/amd/display: Force full update in gpu reset
  - drm/amd/display: Fix gpu reset in multidisplay config
  - net: phy: microchip: force IRQ polling mode for lan88xx
  - net: selftests: initialize TCP header and skb payload with zero
  - crypto: atmel-sha204a - Set hwrng quality to lowest possible
  - virtio_console: fix missing byte order handling for cols and rows
  - LoongArch: Make do_xyz() exception handlers more robust
  - LoongArch: Make regs_irqs_disabled() more clear
  - LoongArch: Select ARCH_USE_MEMTEST
  - splice: remove duplicate noinline from pipe_clear_nowait
  - iommu/amd: Return an error if vCPU affinity is set for non-vCPU IRTE
  - pds_core: Remove unnecessary check in pds_client_adminq_cmd()
  - net: dsa: mt7530: sync driver-specific behavior of MT7531 variants
  - net: ethernet: mtk_eth_soc: net: revise NETSYSv3 hardware configuration
  - scsi: core: Clear flags for scsi_cmnd that did not complete
  - btrfs: avoid page_lockend underflow in btrfs_punch_hole_lock_range()
  - cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate()
  - dma/contiguous: avoid warning about unused size_bytes
  - ceph: Fix incorrect flush end position calculation
  - scsi: ufs: qcom: fix dev reference leaked through of_qcom_ice_get
  - of: resolver: Fix device node refcount leakage in of_resolve_phandles()
  - of: resolver: Simplify of_resolve_phandles() using __free()
  - clk: renesas: r9a07g043: Fix HP clock source for RZ/Five
  - clk: renesas: r9a07g04[34]: Fix typo for sel_shdi variable
  - clk: renesas: r9a07g04[34]: Use SEL_SDHI1_STS status configuration for SD1 mux
  - clk: renesas: rzg2l: Refactor SD mux driver
  - clk: renesas: rzg2l: Remove CPG_SDHI_DSEL from generic header
  - clk: renesas: rzg2l: Add struct clk_hw_data
  - clk: renesas: rzg2l: Use u32 for flag and mux_flags
  - arm64: tegra: Remove the Orin NX/Nano suspend key
  - iio: adc: ad7768-1: Fix conversion result sign
  - iio: adc: ad7768-1: Move setting of val a bit later to avoid unnecessary return value check
  - ASoC: q6apm-dai: make use of q6apm_get_hw_pointer
  - ASoC: qcom: Fix trivial code style issues
  - ASoC: qcom: lpass: Make asoc_qcom_lpass_cpu_platform_remove() return void
  - ASoC: q6apm-dai: schedule all available frames to avoid dsp under-runs
  - ASoC: qcom: q6apm-dai: drop unused 'q6apm_dai_rtd' fields
  - net: dsa: mv88e6xxx: fix VTU methods for 6320 family
  - net: dsa: mv88e6xxx: fix internal PHYs for 6320 family
  - auxdisplay: hd44780: Fix an API misuse in hd44780.c
  - auxdisplay: hd44780: Convert to platform remove callback returning void
  - mmc: sdhci-msm: fix dev reference leaked through of_qcom_ice_get
  - soc: qcom: ice: introduce devm_of_qcom_ice_get
  - module: sign with sha512 instead of sha1 by default
  - !18797 [OLK-6.6] Fix CVE-2025-38331
  - !18978 [OLK-6.6][linux-6.6.y sync] Backport 6.6.87-6.6.88 LTS Patches
  - !19141  crash: fix crashkernel resource shrink
  - !19136  ext4: detect invalid INLINE_DATA + EXTENTS flag combination
  - crash: fix crashkernel resource shrink
  - ext4: guard against EA inode refcount underflow in xattr update
  - ext4: detect invalid INLINE_DATA + EXTENTS flag combination
  - net: rose: fix a typo in rose_clear_routes()
  - Bluetooth: ISO: Fix possible UAF on iso_conn_free
  - net: nfc: nci: Add parameter validation for packet data
  - KVM: arm64: ipiv: fix bug in live migration
  - KVM: arm64: ipiv: Change parameter from vcpu to kvm
  - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
  - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
  - net/smc: fix warning in smc_rx_splice() when calling get_page()
  - smb: server: split ksmbd_rdma_stop_listening() out of ksmbd_rdma_destroy()
  - s390/sclp: Fix SCCB present check
  - net: rose: include node references in rose_neigh refcount
  - net: rose: convert 'use' field to refcount_t
  - net: rose: split remove and free operations in rose_remove_neigh()
  - dm: fix NULL pointer dereference in __dm_suspend()
  - net, hsr: reject HSR frame if skb can't hold tag
  - hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp()
  - nvmet-fc: move lsop put work to nvmet_fc_ls_req_op
  - ksmbd: transport_ipc: validate payload size before reading handle
  - ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed
  - ext4: fix string copying in parse_apply_sb_mount_options()
  - ext4: avoid potential buffer over-read in parse_apply_sb_mount_options()
  - blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx
  - arm64/mpam: Add build dependencies for CONFIG_RESCTRL_IOMMU
  - batman-adv: fix OOB read/write in network-coding decode
  - cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()
  - md/md-bitmap: fix GPF in bitmap_get_stats()
  - igc: fix lock order in igc_ptp_reset
  - Reapply "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()"
  - xen/x86: fix initial memory balloon target
  - pwm: mediatek: Ensure to disable clocks in error path
  - ALSA: hda/realtek: Fix built-in mic on another ASUS VivoBook model
  - drm/tests: Build KMS helpers when DRM_KUNIT_TEST_HELPERS is enabled
  - btrfs: fix the length of reserved qgroup to free
  - MIPS: ds1287: Match ds1287_set_base_clock() function types
  - MIPS: cevt-ds1287: Add missing ds1287.h include
  - MIPS: dec: Declare which_prom() as static
  - sign-file,extract-cert: use pkcs11 provider for OPENSSL MAJOR >= 3
  - sign-file,extract-cert: avoid using deprecated ERR_get_error_line()
  - sign-file,extract-cert: move common SSL helper functions to a header
  - nvmet-fc: Remove unused functions
  - landlock: Add the errata interface
  - wifi: rtw89: pci: disable PCIE wake bit when PCIE deinit
  - wifi: rtw89: pci: add pre_deinit to be called after probe complete
  - LoongArch: Eliminate superfluous get_numa_distances_cnt()
  - x86/split_lock: Fix the delayed detection logic
  - x86/xen: fix memblock_reserve() usage on PVH
  - x86/xen: move xen_reserve_extra_memory()
  - Fix mmu notifiers for range-based invalidates
  - misc: pci_endpoint_test: Fix 'irq_type' to convey the correct type
  - misc: pci_endpoint_test: Fix displaying 'irq_type' after 'request_irq' error
  - kbuild: Add '-fno-builtin-wcslen'
  - cpufreq: Reference count policy in cpufreq_update_limits()
  - io_uring/net: fix accept multishot handling
  - drm/i915/gvt: fix unterminated-string-initialization warning
  - drm/sti: remove duplicate object names
  - drm/amdgpu/dma_buf: fix page_link check
  - drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero
  - drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero
  - drm/amd/pm/smu11: Prevent division by zero
  - drm/amd/pm/powerplay: Prevent division by zero
  - drm/amd/pm: Prevent division by zero
  - drm/amd: Handle being compiled without SI or CIK support better
  - drm/msm/a6xx: Fix stale rpmh votes from GPU
  - drm/repaper: fix integer overflows in repeat functions
  - perf/x86/intel/uncore: Fix the scale of IIO free running counters on SPR
  - perf/x86/intel/uncore: Fix the scale of IIO free running counters on ICX
  - perf/x86/intel/uncore: Fix the scale of IIO free running counters on SNR
  - perf/x86/intel: Allow to update user space GPRs from PEBS records
  - scsi: ufs: exynos: Ensure consistent phy reference counts
  - scsi: megaraid_sas: Block zero-length ATA VPD inquiry
  - x86/boot/sev: Avoid shared GHCB page for early memory acceptance
  - x86/cpu/amd: Fix workaround for erratum 1054
  - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches
  - string: Add load_unaligned_zeropad() code path to sized_strscpy()
  - smb3 client: fix open hardlink on deferred close file error
  - selftests/mm: generate a temporary mountpoint for cgroup filesystem
  - riscv: Avoid fortify warning in syscall_get_arguments()
  - ksmbd: fix the warning from __kernel_write_iter
  - ksmbd: Prevent integer overflow in calculation of deadtime
  - ksmbd: fix use-after-free in smb_break_all_levII_oplock()
  - ovl: don't allow datadir only
  - mm: fix apply_to_existing_page_range()
  - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable()
  - loop: LOOP_SET_FD: send uevents for partitions
  - loop: properly send KOBJ_CHANGED uevent for disk device
  - crypto: caam/qi - Fix drv_ctx refcount bug
  - btrfs: correctly escape subvol in btrfs_show_options()
  - Bluetooth: vhci: Avoid needless snprintf() calls
  - Bluetooth: l2cap: Process valid commands in too long frame
  - ftrace: fix incorrect hash size in register_ftrace_direct()
  - i2c: atr: Fix wrong include
  - nfs: add missing selections of CONFIG_CRC32
  - asus-laptop: Fix an uninitialized variable
  - ASoC: codecs:lpass-wsa-macro: Fix logic of enabling vi channels
  - ASoC: codecs:lpass-wsa-macro: Fix vi feedback rate
  - writeback: fix false warning in inode_to_wb()
  - cpufreq/sched: Fix the usage of CPUFREQ_NEED_UPDATE_LIMITS
  - riscv: KGDB: Remove ".option norvc/.option rvc" for kgdb_compiled_break
  - riscv: KGDB: Do not inline arch_kgdb_breakpoint()
  - kunit: qemu_configs: SH: Respect kunit cmdline
  - riscv: Properly export reserved regions in /proc/iomem
  - net: ethernet: mtk_eth_soc: revise QDMA packet scheduler settings
  - net: ethernet: mtk_eth_soc: correct the max weight of the queue limit for 100Mbps
  - ptp: ocp: fix start time alignment in ptp_ocp_signal_set
  - net: dsa: avoid refcount warnings when ds->ops->tag_8021q_vlan_del() fails
  - net: bridge: switchdev: do not notify new brentries as changed
  - net: b53: enable BPDU reception for management port
  - netlink: specs: rt-link: adjust mctp attribute naming
  - netlink: specs: rt-link: add an attr layer around alt-ifname
  - ata: libata-sata: Save all fields from sense data descriptor
  - net: ethernet: ti: am65-cpsw: fix port_np reference counting
  - net: ethernet: ti: am65-cpsw-nuss: rename phy_node -> port_np
  - pds_core: fix memory leak in pdsc_debugfs_add_qcq()
  - test suite: use %zu to print size_t
  - igc: add lock preventing multiple simultaneous PTM transactions
  - igc: cleanup PTP module if probe fails
  - igc: handle the IGC_PTP_ENABLED flag correctly
  - igc: move ktime snapshot into PTM retry loop
  - igc: increase wait time before retrying PTM
  - Revert "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()"
  - Bluetooth: hci_event: Fix sending MGMT_EV_DEVICE_FOUND for invalid address
  - ASoC: cs42l43: Reset clamp override on jack removal
  - RDMA/usnic: Fix passing zero to PTR_ERR in usnic_ib_pci_probe()
  - ovl: remove unused forward declaration
  - ASoC: Intel: avs: Fix null-ptr-deref in avs_component_probe()
  - ASoC: dwc: always enable/disable i2s irqs
  - md/md-bitmap: fix stats collection for external bitmaps
  - md/raid10: fix missing discard IO accounting
  - scsi: iscsi: Fix missing scsi_host_put() in error path
  - wifi: wl1251: fix memory leak in wl1251_tx_work
  - wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()
  - Bluetooth: hci_uart: Fix another race during initialization
  - media: mediatek: vcodec: mark vdec_vp9_slice_map_counts_eob_coef noinline
  - x86/e820: Fix handling of subpage regions when calculating nosave ranges in e820__register_nosave_regions()
  - ACPI: platform-profile: Fix CFI violation when accessing sysfs files
  - selftests: mptcp: fix incorrect fd checks in main_loop
  - selftests: mptcp: close fd_in before returning in main_loop
  - pinctrl: qcom: Clear latched interrupt status when changing IRQ type
  - phy: freescale: imx8m-pcie: assert phy reset and perst in power off
  - PCI: Fix reference leak in pci_alloc_child_bus()
  - PCI: brcmstb: Fix missing of_node_put() in brcm_pcie_probe()
  - of/irq: Fix device node refcount leakages in of_irq_init()
  - of/irq: Fix device node refcount leakage in API irq_of_parse_and_map()
  - of/irq: Fix device node refcount leakages in of_irq_count()
  - of/irq: Fix device node refcount leakage in API of_irq_parse_raw()
  - of/irq: Fix device node refcount leakage in API of_irq_parse_one()
  - ntb: use 64-bit arithmetic for the MSI doorbell mask
  - KVM: x86: Explicitly zero-initialize on-stack CPUID unions
  - gve: handle overflow when reporting TX consumed descriptors
  - gpio: zynq: Fix wakeup source leaks on device unbind
  - gpio: tegra186: fix resource handling in ACPI probe path
  - dt-bindings: coresight: qcom,coresight-tpdm: Fix too many 'reg'
  - dt-bindings: coresight: qcom,coresight-tpda: Fix too many 'reg'
  - dm-verity: fix prefetch-vs-suspend race
  - dm-integrity: set ti->error on memory allocation failure
  - dm-ebs: fix prefetch-vs-suspend race
  - crypto: ccp - Fix check for the primary ASP device
  - clk: qcom: gdsc: Set retain_ff before moving to HW CTRL
  - clk: qcom: gdsc: Capture pm_genpd_add_subdomain result code
  - clk: qcom: gdsc: Release pm subdomains in reverse add order
  - clk: qcom: clk-branch: Fix invert halt status bit check for votable clocks
  - cifs: fix integer overflow in match_server()
  - cifs: avoid NULL pointer dereference in dbg call
  - thermal/drivers/rockchip: Add missing rk3328 mapping entry
  - x86/xen: fix balloon target initialization for PVH dom0
  - mm/hugetlb: move hugetlb_sysctl_init() to the __init section
  - mm/userfaultfd: fix release hang over concurrent GUP
  - ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free
  - ALSA: usb-audio: Kill timer properly at removal
  - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
  - uio_hv_generic: Let userspace take care of interrupt mask
  - mm/mremap: correctly handle partial mremap() of VMA starting at 0
  - mm: fix lazy mmu docs and usage
  - mm: make page_mapped_in_vma() hugetlb walk aware
  - mm/rmap: reject hugetlb folios in folio_make_device_exclusive()
  - sparc/mm: avoid calling arch_enter/leave_lazy_mmu() in set_ptes
  - sparc/mm: disable preemption in lazy mmu mode
  - iommufd: Fix uninitialized rc in iommufd_access_rw()
  - btrfs: zoned: fix zone finishing with missing devices
  - btrfs: zoned: fix zone activation with missing devices
  - btrfs: fix non-empty delayed iputs list on unmount due to compressed write workers
  - arm64: dts: mediatek: mt8173: Fix disp-pwm compatible string
  - arm64: mm: Correct the update of max_pfn
  - mtd: rawnand: Add status chack in r852_ready()
  - mtd: inftlcore: Add error check for inftl_read_oob()
  - mptcp: only inc MPJoinAckHMacFailure for HMAC failures
  - lib: scatterlist: fix sg_split_phys to preserve original scatterlist offsets
  - locking/lockdep: Decrease nr_unused_locks if lock unused in zap_class()
  - mailbox: tegra-hsp: Define dimensioning masks in SoC data
  - leds: rgb: leds-qcom-lpg: Fix calculation of best period Hi-Res PWMs
  - leds: rgb: leds-qcom-lpg: Fix pwm resolution max for Hi-Res PWMs
  - jbd2: remove wrong sb->s_sequence check
  - i3c: Add NULL pointer check in i3c_master_queue_ibi()
  - i3c: master: svc: Use readsb helper for reading MDB
  - smb311 client: fix missing tcon check when mounting with linux/posix extensions
  - udf: Fix inode_getblk() return value
  - vdpa/mlx5: Fix oversized null mkey longer than 32bit
  - f2fs: fix to avoid atomicity corruption of atomic file
  - ext4: fix off-by-one error in do_split
  - ASoC: qdsp6: q6asm-dai: fix q6asm_dai_compr_set_params error path
  - ASoC: qdsp6: q6apm-dai: fix capture pipeline overruns.
  - ASoC: qdsp6: q6apm-dai: set 10 ms period and buffer alignment.
  - ASoC: q6apm: add q6apm_get_hw_pointer helper
  - io_uring/kbuf: reject zero sized provided buffers
  - wifi: mac80211: fix integer overflow in hwmp_route_info_get()
  - wifi: mt76: Add check for devm_kstrdup()
  - clocksource/drivers/stm32-lptimer: Use wakeup capable instead of init wakeup
  - mtd: Replace kcalloc() with devm_kcalloc()
  - net: dsa: mv88e6xxx: workaround RGMII transmit delay erratum for 6320 family
  - mtd: Add check for devm_kcalloc()
  - mptcp: sockopt: fix getting IPV6_V6ONLY
  - media: i2c: imx219: Rectify runtime PM handling in probe and remove
  - media: venus: hfi_parser: add check to avoid out of bound access
  - media: i2c: ov7251: Introduce 1 ms delay between regulators and en GPIO
  - media: i2c: ov7251: Set enable GPIO low in probe
  - media: i2c: ccs: Set the device's runtime PM status correctly in probe
  - media: i2c: ccs: Set the device's runtime PM status correctly in remove
  - media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf()
  - media: platform: stm32: Add check for clk_enable()
  - media: visl: Fix ERANGE error when setting enum controls
  - media: streamzap: prevent processing IR data on URB failure
  - tpm, tpm_tis: Fix timeout handling when waiting for TPM status
  - spi: cadence-qspi: Fix probe on AM62A LP SK
  - xenfs/xensyms: respect hypervisor's "next" indication
  - media: siano: Fix error handling in smsdvb_module_init()
  - media: vim2m: print device name after registering device
  - media: venus: hfi: add check to handle incorrect queue size
  - media: venus: hfi: add a check to handle OOB in sfr region
  - media: i2c: adv748x: Fix test pattern selection mask
  - media: mtk-vcodec: venc: avoid -Wenum-compare-conditional warning
  - media: mediatek: vcodec: Fix a resource leak related to the scp device in FW initialization
  - dt-bindings: media: st,stmipid02: correct lane-polarities maxItems
  - ext4: don't treat fhandle lookup of ea_inode as FS corruption
  - bpf: support SKF_NET_OFF and SKF_LL_OFF on skb frags
  - pwm: fsl-ftm: Handle clk_get_rate() returning 0
  - pwm: rcar: Improve register calculation
  - pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config()
  - tpm, tpm_tis: Workaround failed command reception on Infineon devices
  - ktest: Fix Test Failures Due to Missing LOG_FILE Directories
  - drm/amdgpu: grab an additional reference on the gang fence v2
  - drm/mediatek: mtk_dpi: Explicitly manage TVD clock in power on/off
  - drm/mediatek: mtk_dpi: Move the input_2p_en bit to platform data
  - drm/amdkfd: debugfs hang_hws skip GPU with MES
  - drm/amdkfd: Fix pqm_destroy_queue race with GPU reset
  - drm/amdkfd: clamp queue size to minimum
  - drivers: base: devres: Allow to release group on device release
  - drm/bridge: panel: forbid initializing a panel with unknown connector type
  - drm: panel-orientation-quirks: Add quirk for OneXPlayer Mini (Intel)
  - drm: panel-orientation-quirks: Add new quirk for GPD Win 2
  - drm: panel-orientation-quirks: Add quirk for AYA NEO Slide
  - drm: panel-orientation-quirks: Add quirks for AYA NEO Flip DS and KB
  - drm: panel-orientation-quirks: Add support for AYANEO 2S
  - drm/amd/display: add workaround flag to link to force FFE preset
  - drm/amd/display: Update Cursor request mode to the beginning prefetch always
  - drm: allow encoder mode_set even when connectors change for crtc
  - Bluetooth: qca: simplify WCN399x NVM loading
  - Bluetooth: hci_uart: fix race during initialization
  - tracing: fix return value in __ftrace_event_enable_disable for TRACE_REG_UNREGISTER
  - net: vlan: don't propagate flags on open
  - wifi: mt76: mt76x2u: add TP-Link TL-WDN6200 ID to device table
  - cdc_ether|r8152: ThinkPad Hybrid USB-C/A Dock quirk
  - Revert "f2fs: rebuild nat_bits during umount"
  - ext4: protect ext4_release_dquot against freezing
  - ahci: add PCI ID for Marvell 88SE9215 SATA Controller
  - net: sfp: add quirk for 2.5G OEM BX SFP
  - ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode
  - jfs: add sanity check for agwidth in dbMount
  - fs/jfs: cast inactags to s64 to prevent potential overflow
  - net: usb: asix_devices: add FiberGecko DeviceID
  - scsi: target: spc: Fix RSOC parameter data header size
  - f2fs: don't retry IO for corrupted data scenario
  - wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process
  - ASoC: amd: yc: update quirk data for new Lenovo model
  - ASoC: amd: Add DMI quirk for ACP6X mic support
  - ALSA: usb-audio: Fix CME quirk for UF series keyboards
  - mmc: dw_mmc: add a quirk for accessing 64-bit FIFOs in two halves
  - media: uvcvideo: Add quirk for Actions UVC05
  - ASoC: fsl_audmix: register card device depends on 'dais' property
  - ALSA: hda: intel: Add Lenovo IdeaPad Z570 to probe denylist
  - ALSA: hda: intel: Fix Optimus when GPU has no sound
  - HID: pidff: Add FIX_WHEEL_DIRECTION quirk
  - HID: pidff: Add hid_pidff_init_with_quirks and export as GPL symbol
  - HID: pidff: Add PERMISSIVE_CONTROL quirk
  - HID: pidff: Add MISSING_PBO quirk and its detection
  - HID: pidff: Add MISSING_DELAY quirk and its detection
  - HID: pidff: Do not send effect envelope if it's empty
  - HID: pidff: Convert infinite length from Linux API to PID standard
  - ASoC: SOF: topology: Use krealloc_array() to replace krealloc()
  - zstd: Increase DYNAMIC_BMI2 GCC version cutoff from 4.8 to 11.0 to work around compiler segfault
  - xen/mcelog: Add __nonstring annotations for unterminated strings
  - arm64: cputype: Add QCOM_CPU_PART_KRYO_3XX_GOLD
  - x86/cpu: Don't clear X86_FEATURE_LAHF_LM flag in init_amd_k8() on AMD when running in a virtual machine
  - x86/ia32: Leave NULL selector values 0~3 unchanged
  - x86/mm: Clear _PAGE_DIRTY for kernel mappings when we clear _PAGE_RW
  - pm: cpupower: bench: Prevent NULL dereference on malloc failure
  - umount: Allow superblock owners to force umount
  - iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group
  - nft_set_pipapo: fix incorrect avx2 match of 5th field octet
  - nvmet-fcloop: swap list_add_tail arguments
  - ata: sata_sx4: Add error handling in pdc20621_i2c_read()
  - drm/tests: probe-helper: Fix drm_display_mode memory leak
  - drm/tests: modes: Fix drm_display_mode memory leak
  - drm/tests: cmdline: Fix drm_display_mode memory leak
  - drm/tests: helpers: Create kunit helper to destroy a drm_display_mode
  - drm/tests: helpers: Fix compiler warning
  - drm/tests: helpers: Add helper for drm_display_mode_from_cea_vic()
  - drm/tests: Add helper to create mock crtc
  - drm/tests: Add helper to create mock plane
  - drm/tests: helpers: Add atomic helpers
  - drm/tests: modeset: Fix drm_display_mode memory leak
  - net: ethtool: Don't call .cleanup_data when prepare_data fails
  - tc: Ensure we have enough buffer space when sending filter netlink notifications
  - net/sched: cls_api: conditional notification of events
  - rtnl: add helper to check if a notification is needed
  - rtnl: add helper to check if rtnl group has listeners
  - octeontx2-pf: qos: fix VF root node parent queue index
  - net: tls: explicitly disallow disconnect
  - objtool: Fix INSN_CONTEXT_SWITCH handling in validate_unret()
  - ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe()
  - drm/i915: Disable RPG during live selftest
  - drm/i915/dg2: wait for HuC load completion before running selftests
  - drm/i915/xelpg: Extend driver code of Xe_LPG to Xe_LPG+
  - drm/i915/mocs: use to_gt() instead of direct &i915->gt
  - selftests/futex: futex_waitv wouldblock test should fail
  - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit
  - jfs: upper bound check of tree index in dbAllocAG
  - mm: swap: check for stable address space before operating on the VMA
  - net: ethernet: cortina: Use TOE/TSO on all TCP
  - mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock
  - hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file()
  - bus: mhi: host: Detect events pointing to unexpected TREs
  - drm/amd/pm: fix null pointer access
  - ALSA: usb-audio: Validate UAC3 power domain descriptors, too
  - net: kcm: Fix race condition in kcm_unattach()
  - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control
  - hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read()
  - mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup()
  - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
  - xhci: fix memory leak regression when freeing xhci vdev devices depth first
  - usb: xhci: Fix slot_id resource race conflict
  - net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry()
  - nilfs2: reject invalid file types when reading inodes
  - mtd: inftlcore: Add error check for inftl_read_oob()
  - freezer, sched: Report frozen tasks as 'D' instead of 'R'
  - io_uring/sqpoll: fix sqpoll error handling races
  - i2c: microchip-core: actually use repeated sends
  - PCI/MSI: Handle lack of irqdomain gracefully
  - i2c: imx: add imx7d compatible string for applying erratum ERR007805
  - i2c: microchip-core: fix "ghost" detections


author: Li Nan <linan122@huawei.com> - 6.6.0-123.0.0.100
changelog:
  - !19327 ub: ub_fwctl: add ub_fwctl driver-api documentation description
  - !19338 iommu/ummu: Fix UMMU documentation error
  - !19287 net: unic: Add support for uboe and ethernet related tools
  - !19337 ub: udma: Support retrieving the migr field.
  - ub: ub_fwctl: add ub_fwctl driver-api documentation description
  - iommu/ummu: Fix UMMU documentation error
  - !19332 ub: udma: add requirement about document and tp attr.
  - !19330 iommu/ummu: Add UMMU documentation description
  - ub: udma: Support retrieving the migr field.
  - !18794 【OLK-6.6】fix CVE-2025-39801
  - ub: udma: Support eid and guid updates.
  - ub: udma: bugfix for set and get tp attr.
  - !18453 [OLK-6.6] ALSA: HDA: Add Zhaoxin HDMI Controller and Codec support
  - !18483 [OLK-6.6] x86/hpet: Set dynamic IRQ feature for HPET for KH-50000
  - iommu/ummu: Add UMMU-PMU devicetree file
  - iommu/ummu: Add UMMU devicetree file
  - iommu/ummu: Add UMMU documentation description
  - ub: udma: mask jetty context addr info.
  - ub: udma: add udma driver module doc.
  - ub: ubase: Remove non-cluster mode code
  - net: unic: Add support for uboe reset
  - net: unic: Add support for MAC statistics
  - net: unic: Add pause frame support.
  - net: unic: Add Priority Flow Control (PFC) support
  - net: unic: Add debugfs support for dumping MAC tables.
  - net: unic: Supports MAC filter, and allows users to add and delete MAC
  - net: unic: Add debugfs support for dumping vlan table
  - net: unic: Integrate valn filtering features with network device operations.
  - net: unic: Add valn filtering support.
  - net: unic: Add support for querying link diagnosis status
  - net: unic: Extend loopback test support to include external loopback modes
  - net: unic: Extend loopback test support to include serdes loopback modes.
  - net: unic: Add loopback test support.
  - net: unic: Add debugfs support for dumping hardware MAC tables.
  - net: unic: Add support for setting link speed, duplex, and autonegotiation via ethtool.
  - !19328 ub:hisi-ubus: Adding compatibility Interfaces for ub memory
  - !19264 ub: cdma: add CDMA userspace-api documentation description
  - ub:hisi-ubus: Adding compatibility Interfaces for ub memory
  - ub: cdma: add CDMA userspace-api documentation description
  - ub: cdma: add CDMA kernel driver design document specification
  - ub: cdma: add CDMA driver-api documentation description
  - !19305 ub:ubus: Add ubus and ubfi opensource document
  - !19320 urma: added functions for getting and setting TP attribute fields.
  - ub:ubus: Add ubus devicetree file
  - urma: added functions for getting and setting TP attribute fields.
  - ub:ubus: Add ubus and ubfi opensource document
  - usb: dwc3: Remove WARN_ON for device endpoint command timeouts
  - ALSA: HDA: Add Zhaoxin HDMI Controller and Codec support
  - x86/hpet: Set dynamic IRQ feature for HPET for KH-50000
  - ALSA: HDA: Roll back the old version for consistency with the mainline


author: Li Nan <linan122@huawei.com> - 6.6.0-124.0.0.101
changelog:
  - !19152  Fix CVE-2025-39810 fix CVE-2025-39810
  - !19359 ub: hisi-ubus: Fix ub memory decoder create
  - !19346  sched: Fix race between yield_to() and try_to_wake_up()
  - ub: hisi-ubus: Fix ub memory decoder create
  - !19341 v7  bugfix for xcall2.0
  - sched: Fix race between yield_to() and try_to_wake_up()
  - !17661 kvm: Only enable shadow mode for ioeventfd and Align the lifecycle of …
  - !19334  bpf: Sync pending IRQ work before freeing ring buffer
  - xcall2.0: prefetch: introduce struct prefetch_mm_data
  - xcall2.0: Fix mem leak in proc_xcall_command
  - xcall2.0: add xcall_subdir_create help to create subdir below /proc/xcall
  - xcall2.0: prefetch: keep prefetch module name same with file name
  - xcall2.0: prefetch: fix value name typos in __do_sys_epoll_pwait
  - !19339  zcopy: Fix context switch within RCU read-side
  - !19300  Add Support for Disabling Hugetlb in soft_offline_page
  - zcopy: Fix context switch within RCU read-side error
  - bpf: Sync pending IRQ work before freeing ring buffer
  - kvm: Only enable shadow mode for ioeventfd and Align the lifecycle of KVM shadow with KVM
  - mm/memory-failure: support disabling soft offline for HugeTLB pages
  - mm/memory-failure: userspace controls soft-offlining pages
  - bnxt_en: Fix memory corruption when FW resources change during ifdown
  - bnxt_en: Fix possible crash after creating sw mqprio TCs


author: Li Nan <linan122@huawei.com> - 6.6.0-126.0.0.102
changelog:
  - !19468 urma: Bugfix for ubcore_get_route_list implement
  - urma: Bugfix for ubcore_get_route_list implement
  - !19329 hisi_acc_vfio_pci: adapt to new migration configuration
  - !19435 crypto: hisilicon/qm - fix incorrect judgment in qm_get_complete_eqe_num()
  - !19383 [OLK-6.6] backport important bugfix for Broadcom NIC driver from upstream linux-6.6.y
  - !19460  xsched: XCU Partition
  - !19316  Fix cves CVE-2025-40040 & CVE-2025-40058
  - !19447 net: hns3: remove VF multi-TC compat bit
  - xsched: add throttling statistics for xsched groups
  - xsched: fix task stall when quota is disabled
  - xsched: suppress excessive error logs during cgroup file retry
  - xsched: fix shares misaccounting when multiple tasks run in one cgroup
  - xsched: switch xcu cgroup subsystem from domain mode to thread mode
  - !19439 obmm: remove redundant code and fix log issues
  - !18481 [OLK-6.6] Add platform-specific quirks for ZX-200 device
  - !19085 scsi: mpi3mr: Add support for status reply descriptor
  - !19078 scsi: mpi3mr: Split off bus_reset function from host_reset
  - !19416  kernfs: Fix UAF in polling when open file is released
  - !19415  smb: client: fix race with concurrent opens in rename(2)
  - !19446  net/mlx5: Fix ECVF vports unload on shutdown flow
  - obmm: remove redundant code and fix log issues
  - !19441  rv: Use strings in da monitors tracepoints
  - !19411  CVE-2025-39697
  - !19442  CVE-2025-22022
  - net: hns3: remove VF multi-TC compat bit
  - net/mlx5: Fix ECVF vports unload on shutdown flow
  - usb: xhci: Apply the link chain quirk on NEC isoc endpoints
  - usb: xhci: move link chain bit quirk checks into one helper function.
  - !19429  net/sched: Abort __tc_modify_qdisc if parent class does not exist
  - rv: Use strings in da monitors tracepoints
  - !19438  drm/scheduler: signal scheduled fence when kill job
  - !19410  Fix CVE-2025-39994
  - !17888 [OLK-6.6] Fix CVE-2025-37777
  - drm/scheduler: signal scheduled fence when kill job
  - !19371  RDMA/rxe: Fix race in do_task() when draining
  - !19393  usb: typec: ucsi: displayport: Fix NULL pointer access
  - obmm: set up default mem allocator granule
  - !19377 [OLK-6.6] Fix CVE-2025-23133
  - !18704 [OLK-6.6] Fix CVE-2024-58095
  - !19401  smb: client: fix crypto buffers in non-linear memory
  - !19323  nfsd: don't ignore the return code of svc_proc_register()
  - crypto: hisilicon/qm - fix incorrect judgment in qm_get_complete_eqe_num()
  - crypto: hisilicon/qm - add missing default in switch in qm_vft_data_cfg
  - crypto: hisilicon/sgl - remove unnecessary checks for curr_hw_sgl error
  - crypto: hisilicon/qm - add concurrency protection for variable err_threshold
  - crypto: hisilicon/qm - add the save operation of eqe and aeqe
  - crypto: hisilicon/qm - restore original qos values
  - crypto: hisilicon/qm - Fix device reference leak in qm_get_qos_value
  - !19386  x86/mm: Check return value from memblock_phys_alloc_range()
  - !19433 urma: bugfix ubagg drivers refent error
  - urma: bugfix ubagg drivers refent error
  - !19391 urma: fixing ubcore hash table initialization failure.
  - !19263 [OLK-6.6]Fix CVE-2025-37861
  - !19253 [OLK-6.6] Fix CVE-2025-37973
  - !19252 [OLK-6.6] Fix CVE-2025-37972
  - !19251 [OLK-6.6] Fix CVE-2025-37956
  - !19374 [OLK-6.6] Fix CVE-2025-37899
  - net/sched: Abort __tc_modify_qdisc if parent class does not exist
  - kernfs: Fix UAF in polling when open file is released
  - !19402  sched: Fix incorrect cluster mask
  - smb: client: fix race with concurrent opens in rename(2)
  - !19414  xsched: fix compile error when CONFIG_XCU_SCHEDULER is disabled
  - !19398 v2  bugfix for xcall2.0
  - !19412  sunrpc: fix handling of server side tls alerts
  - !19409  smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().
  - !19405 [OLK-6.6]:update patches for sw64 architecture
  - xsched: fix compile error when CONFIG_XCU_SCHEDULER is disabled
  - !19266  __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock
  - !19358  Fix CVE-2025-40016
  - sunrpc: fix handling of server side tls alerts
  - NFS: Fix a race when updating an existing write
  - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests
  - media: tuner: xc5000: Fix use-after-free in xc5000_release
  - media: tunner: xc5000: Refactor firmware load
  - urma: fixing ubcore hash table initialization failure.
  - smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().
  - !19365  net/mlx5e: Harden uplink netdev access against device unbind
  - sw64: config: add initial openeuler_defconfig for sw64
  - sw64: fix compile error of pte_pgprot()
  - sw64: add missing definition of MAP_PEER_SHARED
  - sched: Fix incorrect cluster mask
  - smb: client: fix crypto buffers in non-linear memory
  - !19392  Fixes and cleanup of page cache limit
  - !18760  CVE-2025-38501
  - !19390 v3  xsched: add xsched_{set,get}attr syscall
  - xcall2.0: fix panic while detaching xcall found in DT case
  - xcall2.0: prefetch: fix access NULL ptr in __do_sys_epoll_pwait()
  - xcall2.0: prefetch: get prefetch_mm_data once in get_pfi()
  - !19311  nbd: fix uaf in nbd_genl_connect() error path
  - !19310  fs: writeback: fix use-after-free in __mark_inode_dirty()
  - !19256  efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
  - !19237  nfsd: provide locking for v4_end_grace
  - !19247  dmaengine: ti: k3-udma: Add missing locking
  - !19220  NFSv4: Fix deadlock during the running of state manager
  - !19248  nfsd: Initialize ssc before laundromat_work to prevent NULL dereference
  - usb: typec: ucsi: displayport: Fix NULL pointer access
  - !19378 net: hibmcge: add support for pagepool on rx
  - mm: Add page cache limit check before queueing shrink worker
  - mm: Move vm_cache_limit_mbytes check to page_cache_over_limit()
  - mm: Replace deferrable timer with delay timer for shrink worker
  - !19388 [sync] PR-19363:  Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed"
  - !19368  net/sched: Fix backlog accounting in qdisc_dequeue_internal
  - !19367  net/sched: sch_qfq: Fix CVE-2025-38477
  - !19366  i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path
  - !19364  ixgbevf: Fix CVE-2025-40104
  - xsched: add xsched_{set,get}attr syscall
  - Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed"
  - x86/mm: Check return value from memblock_phys_alloc_range()
  - bnxt_en: Fix a possible memory leak in bnxt_ptp_init
  - net: hibmcge: add support for pagepool on rx
  - net: hibmcge: reduce packet drop under stress testing
  - net: hibmcge: add support for tracepoint to dump some fields of rx_desc
  - Revert "net: hibmcge: reduce packet drop under stress testing"
  - Revert "net: hibmcge: support pagepool for rx"
  - wifi: ath11k: update channel list in reg notifier instead reg worker
  - !18451 RDMA/bnxt_re: Fix budget handling of notification queue
  - ksmbd: fix use-after-free in session logoff
  - !18837  CVE-2025-37997
  - !19361  media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove
  - RDMA/rxe: Fix race in do_task() when draining
  - !19353 ubcore: fix query route list by eid pair.
  - ubcore: fix query route list by eid pair.
  - net/sched: Fix backlog accounting in qdisc_dequeue_internal
  - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class
  - net/sched: sch_qfq: Fix race condition on qfq_aggregate
  - i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path
  - net/mlx5e: Harden uplink netdev access against device unbind
  - ixgbevf: fix mailbox API compatibility by negotiating supported features
  - ixgbevf: fix getting link speed data for E610 devices
  - ixgbevf: Add support for Intel(R) E610 device
  - PCI: Add PCI_VDEVICE_SUB helper macro
  - media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove
  - media: uvcvideo: Use heuristic to find stream entity
  - media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID
  - hisi_acc_vfio_pci: adapt to new migration configuration
  - crypto: hisilicon - qm updates BAR configuration
  - hisi_acc_vfio_pci: Fix reference leak in hisi_acc_vfio_debug_init
  - Revert "migration: update BAR space size"
  - Revert "migration: qm updates BAR configuration"
  - Revert "migration: adapt to new migration configuration"
  - nfsd: don't ignore the return code of svc_proc_register()
  - iommu/vt-d: Disallow dirty tracking if incoherent page walk
  - mm/ksm: fix flag-dropping behavior in ksm_madvise
  - nbd: fix uaf in nbd_genl_connect() error path
  - fs: writeback: fix use-after-free in __mark_inode_dirty()
  - RDMA/bnxt_re: Remove unusable nq variable
  - RDMA/bnxt_re: Fix budget handling of notification queue
  - __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock
  - scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue
  - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
  - wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentation
  - Input: mtk-pmic-keys - fix possible null pointer dereference
  - ksmbd: prevent rename with empty string
  - ksmbd: move leading slash check to smb2_get_name()
  - nfsd: Initialize ssc before laundromat_work to prevent NULL dereference
  - dmaengine: ti: k3-udma: Add missing locking
  - nfsd: provide locking for v4_end_grace
  - NFSv4: Fix deadlock during the running of state manager
  - scsi: mpi3mr: Add support for status reply descriptor
  - scsi: mpi3mr: Split off bus_reset function from host_reset
  - netfilter: ipset: Remove unused htable_bits in macro ahash_region
  - netfilter: ipset: fix region locking in hash types
  - Add platform-specific quirks for ZX-200 device
  - ksmbd: add max ip connections parameter
  - ksmbd: extend the connection limiting mechanism to support IPv6
  - ksmbd: limit repeated connections from clients with the same IP
  - jfs: add check read-only before txBeginAnon() call
  - ksmbd: add free_transport ops in ksmbd connection
  - ksmbd: fix use-after-free in __smb2_lease_break_noti()


author: Mingzheng Xing <xingmingzheng@iscas.ac.cn> - 6.6.0-126.0.0.103
changelog:
  - RISC-V kernel upgrade to 6.6.0-126.0.0
  - Add support for LRW, DP1000
  - Add IOMMU related support
  - Backport mainline RISC-V features.


author: laokz <zhangkai@iscas.ac.cn> - 6.6.0-126.0.0.105
changelog:
  - remove unsupported arches in ExclusiveArch:
    - haoc-kernel: remove riscv64, ppc64le, loongarch64 (no current support)
    This change prevents unnecessary builds on unsupported architectures.


author: xinghe <xinghe2@h-partners.com> - 2.9.5-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:stream: Prevent mux upgrades if client connection is no longer ready


author: yanglu <yanglu72@h-partners.com> - 2.9.5-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:queues:Do not use pendconn_grab_from_px
         queues:Make sure we call process_srv_queue when leaving
         queue:Make process_srv_queue return the number of streams


author: xinghe <xinghe2@h-partners.com> - 2.9.5-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:haproxy: only tid 0 must not sleep if got signal
         server/addr: fix tune.events.max-events-at-once event miss and leak


author: yaoxin <yao_xin001@hoperun.com> - 1.14.5-1
changelog:
  - Update to 1.14.5:
    * Added signed Windows msi binary and signed Apple dmg binary files.
    * Moved examples to the HDF5Examples folder in the source tree.
    * Added support for using zlib-ng package as the zlib library
    * Disable CMake UNITY_BUILD for hdf5
    * Removed "function/code stack" debugging configuration option
    * Added configure options for enabling/disabling non-standard programming language features
    * Added the CMake variable HDF5_ENABLE_ROS3_VFD to the HDF5 CMake config
      file hdf5-config.cmake. This allows it to easily detect if the library
      has been built with or without read-only S3 functionality.
    * Fixed many CVE:
      CVE-2024-29157,CVE-2024-29158,CVE-2024-29159,CVE-2024-29160,CVE-2024-29161,CVE-2024-29162
      CVE-2024-29163,CVE-2024-29164,CVE-2024-29165,CVE-2024-29166,CVE-2024-32605,CVE-2024-32606
      CVE-2024-32607,CVE-2024-32608,CVE-2024-32609,CVE-2024-32610,CVE-2024-32611,CVE-2024-32612
      CVE-2024-32613,CVE-2024-32614,CVE-2024-32615,CVE-2024-32616,CVE-2024-32617,CVE-2024-32618
      CVE-2024-32619,CVE-2024-32620,CVE-2024-32621,CVE-2024-32622,CVE-2024-32623,CVE-2024-32624
      CVE-2024-33873,CVE-2024-33874,CVE-2024-33875,CVE-2024-33876,CVE-2024-33877,CVE-2018-13871
      CVE-2018-13875,CVE-2018-14034


author: Funda Wang <fundawang@yeah.net> - 1.14.5-2
changelog:
  - add patches from azure linux for fixing CVE-2025-2153, CVE-2025-2310,
    CVE-2025-2914, CVE-2025-2926, CVE-2025-6816, CVE-2025-2925,
    CVE-2025-2924, CVE-2025-44905, CVE-2025-6269, CVE-2025-6750,
    CVE-2025-6857, CVE-2025-7067, CVE-2025-7068, CVE-2025-6858,
    CVE-2025-2923, CVE-2025-2913, CVE-2025-6516, CVE-2025-6818,
    CVE-2025-6817, CVE-2025-6856, CVE-2025-7069


author: baizhonggui <baizhonggui@huawei.com> - 540.1.linux3-18
changelog:
  - Fix building error: make[1]: cc: No such file or directory
  - Add gcc in BuildRequires 
  - Add hfsplus-tools-sysctl.patch


author: yixiangzhike <yixiangzhike007@163.com> - 3.3.0-1
changelog:
  - Update version to 3.3.0
    - htop add '-n/--max-itrations' option
    - implement zswap support
    - add IRQ PSI meter
    - refactor /proc/<pid>/status parsing
    - add option to shadow path prefixes
    - fix linux Platform_getProcessLocks() for file-description locks
    - fix format specifier warning on 32 bit
    - prevent null pointer dereference on ealy error


author: xingwei <xingwei14@h-partners.com> - 2.4.58-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:mod_log_config: Fix LogFormat directive merging
         Fix X509 leak and Increase MAX_CONCURRENCY hard limit
         mod_proxy_balancer: Fix the handling of the stickysession
         mod_cache_socache: Fix possible crash on error path
         mod_ssl: Check SSL_CTX_new() return value
         core: Report invalid Options argument when parsing AllowOverride directives


author: yanglu <yanglu72@h-partners.com> - 2.4.58-10
changelog:
  - Type:CVE
  - CVE:CVE-2025-49812,CVE-2025-23048,CVE-2024-47252,CVE-2024-43204,CVE-2024-42516
  - SUG:NA
  - DESC:fix CVE-2025-49812 CVE-2025-23048 CVE-2024-47252 CVE-2024-43204 CVE-2024-42516
         mod_lua: Fix memory handling in output filters.
         Fix a regression that caused stickysession keys
         avoid ap_set_content_type when processing a _Request_Header
         set_cookie_name: ensure correct format


author: tangce <tangce1@h-partners.com> - 2.4.58-11
changelog:
  - Type:CVE
  - CVE:CVE-2025-58098,CVE-2025-65082,CVE-2025-66200
  - SUG:NA
  - DESC:fix CVE-2025-58098,CVE-2025-65082,CVE-2025-66200


author: tangce <tangce1@h-partners.com> - 2.4.58-14
changelog:
  - Type:CVE
  - CVE:CVE-2026-24072,CVE-2026-29168,CVE-2026-29169,CVE-2026-33006,CVE-2026-34059
  - SUG:NA
  - DESC:fix CVE-2026-24072,CVE-2026-29168,CVE-2026-29169,CVE-2026-33006,CVE-2026-34059


author: tangce <tangce1@h-partners.com> - 2.4.58-15
changelog:
  - Type:CVE
  - CVE:CVE-2026-33007,CVE-2026-33523,CVE-2026-33857,CVE-2026-34032
  - SUG:NA
  - DESC:fix CVE-2026-33007,CVE-2026-33523,CVE-2026-33857,CVE-2026-34032


author: tangce <tangce1@h-partners.com> - 2.4.58-17
changelog:
  - Type:CVE
  - CVE:CVE-2026-29167,CVE-2026-42535,CVE-2026-44631
  - SUG:NA
  - DESC:fix CVE-2026-29167,CVE-2026-42535,CVE-2026-44631


author: chengyechun <chengyechun1@huawei.com> - 2.22.8-1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Update i40e version to 2.22.8 to fix kernel-6.1 based build error


author: chengyechun <chengyechun1@huawei.com> - 2.22.8-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Remove the obsolte u64_stats_fetch_*_irq() users
         use mul_u64_u64_div_u64 and convert .adjfreq to .adjfine


author: chengyechun <chengyechun1@huawei.com> - 2.24.6-1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:update i40e version to 2.24.6 to fix kernel-6.6 based build error


author: wujichao <wujichao1@huawei.com> - 2.1.5-12
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: combine ten similar submissions into one(0125-fix-clang-build-error.patch) and Upgrade from upstream


author: jingxiaolu<lujingxiao@huawei.com> - 2.1.5-18
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: sync patches from upstream for refactoring sandbox and bugfixing


author: yanglu <yanglu72@h-partners.com> - 4.7.0-1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Update iavf version to 4.7.0 to fix kernel-6.1 based build error


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1.2-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:after executing hook scripts, remove their executable permission
         of non root users


author: zhangxingrong <zhangxingrong@uniontech.com> - 3.16-4
changelog:
  - iperf3 now builds correctly on architectures without native support for 64-bit atomic types, by linking with the libatomic library


author: wangkai <13474090681@163.com> - 3.17.1-1
changelog:
  - Update to 3.17.1
  - iperf3 no longer changes its current working directory in --daemon mode. This results in more 
    predictable behavior with relative paths, in particular finding key and credential files for authentication.
  - A new --json-stream option has been added to enable a streaming output format, consisting of 
    a series of JSON objects (for the start of the test, each measurement interval, and the end of the test) separated by newlines
  - UDP tests now work correctly between different endian hosts
  - The --fq-rate parameter now works for --reverse tests
  - The statistics reporting interval is now available in the --json start test object


author: xinghe <xinghe2@h-partners.com> - 1:6.6.0-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ss: fix expired time format of timer
         route: filter by interface on multipath routes
         lib: names: check calloc return value in db_names_alloc
         remove redundant patches


author: mufengyan <mufengyan@huawei.com> - 1:6.6.0-10
changelog:
  - Type:feature
  - ID:NA
  - SUG:NA
  - DESC:This patch adds ARPHRD_UB for iproute2 and support name
         parse for it and deletes the display of vf address
         information in the pf


author: liweigang <liweiganga@uniontech.com> - 1.8.9-5
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: libxtables: Fix memleak of matches' udata
          xshared: Fix parsing of empty string arg in '-c' option


author: yanglu <yanglu72@h-partners.com> - 1.8.9-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:extensions:recent:Fix format string for unsigned values
         nft:cmd:Init struct nft_cmd::head early


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:1.21.1-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:[pci] Ensure that pci_read_config() initialises all fields
         [image] Do not clear current working URI when executing embedded image
         [uri] Retain original encodings for path, query, and fragment fields
         [uri] Allow for relative URIs that include colons within the path


author: Liu Chao <liuchao173@huawei.com> - 3:1.9.2-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC: use hint->name in get_usr_irq_policy to reduce the time spent on obtaining interrupt names when use --rulesconfig


author: daisicheng <daisicheng@huawei.com> - 0.9.6-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix the problem that isula-build service did not stop after it removed


author: luofeng <luofeng13@huawei.com> - 0.9.6-22
changelog:
  - Type: bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix the problem that it failed when applying patches in RISCV architecture


author: Ge Wang <wangge20@huawei.com> - 5.0.0-2
changelog:
  - Fix install confilict with glassfish-servlet-api due to provides same file glassfish-servlet-api.jar


author: kuenking111_admin <wangkun49@huawei.com> -1:1.8.0.492.b09-2
changelog:
  - add Add-HashCode-intrinsic-for-aarch64.patch
  - add Add-UTF-Conversion-Intrinsics-for-aarch64.patch
  - add Use-Stlr-for-DMB.patch
  - add Add-Dynamic-heap-Size-for-PSGC-CMS-And-Out-Of-heap.patch
  - add AArch64-improve-itable-stub.patch
  - add fix-dynamic-max-heap-size-due-to-gcc12-build-error.patch


author: jvm_xu <2395635654@qq.com> -1:1.8.0.492.b09-2
changelog:
  - add Adjusting-LSE-policy-on-HiSilion-Platform.patch
  - add gzip-guard-KAE-property-parsing-during-static-init.patch
  - add heapredactor-close-redact-map-fd-after-read.patch
  - add jprofilecache-open-replay-cache-in-read-only-mode.patch


author: jvm_xu <2395635654@qq.com> -1:1.8.0.492.b09-3
changelog:
  - add support-for-Hisilicon-cpu.patch
  - add Optimize-MemNode-infinite-loops.patch
  - add JProfilecache-fix-fastdebug-asserts.patch


author: Benshuai5D <benshuai5d@163.com> -1:1.8.0.492.b09-5
changelog:
  - add C2-restrict-store-after-loop-motion-to-loop-invariant-values.patch
  - add 8158854-Ensure-release_store-is-paired-with-load_acquire-in-lock-free-code.patch


author: yangyingqing <yangyingqing@h-partners.com> -1:11.0.31.11-0
changelog:
  - update to 11.0.31+11(GA)
  - modify G1-interate-region-by-bitmap-rather-than-obj-size-in.patch
  - delete fix-libpng-API-allow-reading-up-to-1012-bytes-beyond-the-png-sRGB-bbase-array-bug.patch
  - delete fix-libpng-CVE-2026-22695.patch
  - delete 8373476-tz-Update-Timezone-Data-to-2025c.patch
  - delete fix-libpng-CVE-2026-25646.patch
  - add Use-stlr-for-putOrdered.patch


author: wulongyao <wulongyao1@huawei.com> - 1:17.0.19.10-0
changelog:
  - update to jdk17.0.19-ga
  - modified 8264805-Backport-Ahead-of-Time-Compiler.patch
  - modified 8264806-Backport-Graal-Compiler.patch
  - deleted 8373476-tz-Update-Timezone-Data-to-2025c.patch
  - deleted Backport-7036144-GZIPInputStream-readTrailer-uses-faulty-avai.patch
  - modified add-version-txt.patch
  - modified fix-gitee.com-problem.patch
  - deleted fix-libpng-API-allow-reading-up-to-1012-bytes-beyond-the-png-sRGB-bbase-array-bug.patch
  - deleted fix-libpng-CVE-2026-22695.patch
  - deleted fix-libpng-CVE-2026-25646.patch
  - deleted fix-zlib-CVE-2026-27171.patch
  - add Use-stlr-for-putOrdered.patch


author: jvm_xu <2395635654@qq.com> - 1:17.0.19.10-2
changelog:
  - add jprofilecache-open-replay-cache-in-read-only-mode.patch
  - add fix-memory-leak-in-jBolt.patch
  - add HashCode-intrinsic-for-aarch64.patch
  - add Add-UTF-Conversion-Intrinsics-for-aarch64.patch
  - add Use-Stlr-for-DMB.patch
  - add Add-Dynamic-Heap-Size.patch
  - add Add-Aggresive-CDS-and-bugfix.patch
  - add fix-dynamic-max-heap-size-due-to-gcc12-build-error.patch


author: jvm_xu <2395635654@qq.com> - 1:17.0.19.10-4
changelog:
  - add Add-lost-ResourceMark-and-fix-delete-in-jBolt.patch
  - add support-for-Hisilicon-cpu.patch
  - add fix-test-failures-caused-by-the-Rename-createJavaPro.patch
  - add JProfilecache-remove-redundant-assert.patch


author: jvm_xu <2395635654@qq.com> - 1:17.0.19.10-6
changelog:
  - add JDK-8342238-Test-javax-crypto-CryptoPermissions-Inco.patch
  - add Keep-deflation-test-valid-with-compact-headers.patch


author: wulongyao <wulongyao1@huawei.com> - 1:21.0.11.10-0
changelog:
  - update to jdk21.0.11-ga
  - add Enhance-NUMANodesRandom.patch
  - deleted 8373476-tz-Update-Timezone-Data-to-2025c.patch
  - modified Fix-kae-testcat-and-EATest-testcast-bug-and-fix-cve-.patch
  - modified add-version.txt.patch
  - modified backport-openjdk-8339036-8354145-8300148-8322149-833.patch
  - modified fix-gitee.com-problem.patch
  - deleted fix-libpng-API-allow-reading-up-to-1012-bytes-beyond-the-png-sRGB-bbase-array-bug.patch
  - deleted fix-libpng-CVE-2026-22695.patch
  - deleted fix-libpng-CVE-2026-25646.patch
  - deleted fix-zlib-CVE-2026-27171.patch
  - add Use-stlr-for-putOrdered.patch


author: jvm_xu <2395635654@qq.com> - 1:21.0.11.10-2
changelog:
  - add 8375294-fs-Files.copy-can-fail-with-EOPNOTSUPP-when-.patch
  - add 8375571-Compiler-crash-when-using-record-pattern-mat.patch
  - add 8314029-Add-file-name-parameter-to-Compiler.perfmap.patch
  - add 8332124-Jcmd-should-recognise-options-that-look-like.patch
  - add fix-AbortVMOnException-option-support-matching-multiple-.patch
  - add 8319948-jcmd-man-page-needs-to-be-updated.patch
  - add jcmd-nmt-add-start-time-and-end-time.patch
  - add Print-class-loading-details-when-enable-TraceClassLo.patch
  - add Enhance-errlog-information-for-DFX.patch
  - add 8371783-Refactor-GCCause-in-VM_CollectForMetadataAll.patch
  - add 8372380-Make-hs_err-reporting-more-robust-for-unatta.patch
  - add jprofilecache-open-replay-cache-in-read-only-mode.patch
  - add 8366062-ubsan-add-non-zero-offset-to-nullptr-in-cds-.patch
  - add fix-memory-leak-in-jBolt.patch
  - add optimize-jmap-F-dump-xxx-to-speed-up-the-dump-proces.patch
  - add Add-UTF-Conversion-Intrinsics-for-aarch64.patch
  - add Prefetch-for-LSE.patch
  - add Add-Aggresive-CDS-and-bugfix.patch
  - add 8325536-JVM-crash-during-CDS-archive-creation-with-X.patch
  - add 8346457-AOT-cache-creation-crashes-with-assert-pair_.patch
  - add fix-aggressive-cds-bug-due-to-unsafe-high-arity-Lamd.patch
  - add Compilecommand-support-dontprediction.patch
  - add fix-memory-leak-in-whitebox-testcase-ParserTest.java.patch
  - add 8350621-Code-Cache-stops-scheduling-GC.patch
  - add 8334492-DiagnosticCommands-jcmd-should-accept-p-in-o.patch


author: jvm_xu <2395635654@qq.com> - 1:21.0.11.10-4
changelog:
  - add JProfilecache-remove-redundant-assert.patch
  - add Add-lost-RsourceMark-in-jBoltManager.patch
  - add support-for-Hisilicon-cpu.patch


author: laokz <zhangkai@iscas.ac.cn> - 1:25.0.1.11-1
changelog:
  - Change java-lastest to java-25 as dependent and only apply for no-bootjdk arches, like riscv64
  - riscv64: Disable full docs


author: yaoxin <yao_xin001@hoperun.com> - 1.5.4-1
changelog:
  - Upgrade to 1.5.4 for fix cves: CVE-2022-40149,CVE-2022-40150,
    CVE-2022-45685,CVE-2022-45693 and CVE-2023-1436


author: chenyanpanHW <chenyanpan@huawei.com> - 1.1.15-17
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/jfsutils-1.1.15-linux-headers.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/jfsutils_sysmacros.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/backport-fix-building-against-gcc-10.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/jfsutils-reslove-build-error.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


author: yaoxin <1024769339@qq.com> - 1.8.0-4
changelog:
  - Fix CVE-2026-40612,CVE-2026-41256,CVE-2026-41257,CVE-2026-43894,
    CVE-2026-43895,CVE-2026-43896 and CVE-2026-44777


author: liweigang <liweiganga@uniontech.com> - 0.17-3
changelog:
  - add backport-Handle-yet-another-out-of-memory-condition.patch
  - add backport-Issue-857-fix-a-few-places-where-json_tokener-should.patch


author: yueyuankun <yueyuankun@kylinos.cn> - 0.17-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Disallow control characters in strict mode
          Fix the expected output for test_parse
          Fix causing the strict-mode control characters check to incorrectly trigger


author: sunhai <sunhai10@huawei.com> - 0.17-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix the apps/json_parse "-s" (strict) option so it actually does something, and default to non-strict.


author: sunhai <sunhai10@huawei.com> - 0.17-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Handle NULL gracefully in json_tokener_free
          Issue 881 don t allow json_tokener_new_ex with a dep


author: sundapeng <sundapeng_yewu@cmss.chinamobile.com> - 2.8.2-17
changelog:
  - log clean relative index range check of group consider empty log segment to avoid too many empty log segment left


author: dongyuzhen <dongyuzhen@h-partners.com> - 3.2.0-13
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix the problem of missing kata-containers source code in the src package


author: jade_t <yzd50036@gmail.com> - 3.2.0-19
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:modify the git clone download address in kata_integration_clone


author: jade_t <yzd50036@gmail.com> - 3.2.0-20
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix the problem of self-compilation failure in the kata-containers source package


author: dongyuzhen <dongyuzhen@h-partners.com> - 1.11.1-28
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix the problem of missing kata-containers-go source code in the src package


author: zhangbowei<zhangbowei@kylinos.cn> - 1.0.0-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: modify kernel config for supporting shared_fs:virtio-fs option


author: yanglu <yanglu72@h-partners.com> - 006-2
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC:Add crashkernel auto for Arm 
         enable kdump and set default reserve memory 512MB
         fix test failed due to default value change


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-156.0.0.146.20260609.c1fb4bef6ed7
changelog:
  - !23518 x86/cpu/hygon: Adjust the die_id and logical_die_id for Hygon models 0x4-0x8
  - !23750  irqchip/gic-v3: Fix ALLINT masking logic by decoupling from GIC NMI support
  - !23743 urma: remove the redundant update of the tx_ring in error branch
  - !23738 virtcca huk-based data key interface
  - !22962 Fix CVE-2026-43089
  - !22990  netfilter: ctnetlink: ensure safe access to master conntrack
  - virtcca huk-based key encryption
  - !23686  CVE-2026-46065
  - irqchip/gic-v3: Fix ALLINT masking logic by decoupling from GIC NMI support
  - Revert "irqchip/gic-v3: Fix ALLINT masking logic by decoupling from GIC NMI support"
  - !23477  xfs: fix possible bugon in xfs_trans_unreserve_and_mod_sb()
  - !23728  iommu/vt-d: Clear Present bit before tearing down PASID entry
  - urma: remove the redundant update of the tx_ring in error branch
  - !23700  Fix PMD sharing disabled by missing SPLIT_PMD_PTLOCKS
  - !23632 Fix CVE-2026-43465
  - !23688 urma: fix cm payload and async bind callback
  - !23701  spi: spidev: fix lock inversion between spi_lock and buf_lock
  - !23692 ub: udma: modify the UDMA document.
  - !23667 udma: optimizing the scheme for separating page
  - !23712 Fix CVE-2026-43198
  - !23722 8021q: use RCU for egress QoS mappings
  - !23412 Fix CVE-2026-43088
  - !23706  vhost: move vdpa group bound check to vhost_vdpa
  - iommu/vt-d: Clear Present bit before tearing down PASID entry
  - 8021q: delete cleared egress QoS mappings
  - 8021q: use RCU for egress QoS mappings
  - tcp: restore kABI for syn_recv_sock() backport
  - !23419 Fix CVE-2026-43073
  - vhost: move vdpa group bound check to vhost_vdpa
  - spi: spidev: fix lock inversion between spi_lock and buf_lock
  - mm: make SPLIT_PTE_PTLOCKS depend on SMP
  - powerpc/8xx: document and enforce that split PT locks are not used
  - mm: turn USE_SPLIT_PTE_PTLOCKS / USE_SPLIT_PTE_PTLOCKS into Kconfig options
  - ub: udma: modify the UDMA document.
  - ub: udma: optimizing the scheme for separating page
  - urma: fix cm payload and async bind callback
  - fbdev: defio: Remove unused variable 'fbdefio' to fix build warning
  - fbdev: defio: fix KABI breakage in struct fb_deferred_io and struct fb_info
  - fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info
  - fbdev/deferred-io: Always call get_page() for framebuffer pages
  - fbdev/deferred-io: Clean up pageref on lastclose
  - x86/cpu/hygon: Adjust the die_id and logical_die_id for Hygon models 0x4-0x8
  - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ
  - tcp: fix potential race in tcp_v6_syn_recv_sock()
  - xfs: fix possible bugon in xfs_trans_unreserve_and_mod_sb()
  - x86-64: rename misleadingly named '__copy_user_nocache()' function
  - net: af_key: zero aligned sockaddr tail in PF_KEY exports
  - netfilter: ctnetlink: ensure safe access to master conntrack
  - xfrm_user: fix info leak in build_mapping()


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-157.0.0.147
changelog:
  - !23816  netfilter: x_tables: ensure names are nul-terminated
  - !23812  bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs
  - netfilter: x_tables: ensure names are nul-terminated
  - !23804  mm/ksm: fix incorrect KSM counter handling in mm_struct during fork
  - !23323 iommu/ummu: Enable separated SVA page table by default
  - bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs
  - !22670 [OLK-6.6]  Fix CVE-2026-31607
  - !22632 [OLK-6.6] Fix CVE-2026-31606
  - !23792 urma: fix dev cap struct length by reserved
  - !23725 urma: publish ipourma eid after setup
  - mm/ksm: fix incorrect KSM counter handling in mm_struct during fork
  - urma: fix dev cap struct length by reserved
  - !23769 ub:ubus: Fix the calculation of the total_ues for MUE in VDM registration
  - !23787 crypto: hisilicon - add backlog support
  - !23772 ub:ubus: Using activate mutex to prevent reset and activate/deactivate occuring concurrently
  - !23753  iommu/vt-d: Clear Present bit before tearing down context entry
  - ub:ubus: Fix the calculation of the total_ues for MUE in VDM registration
  - !22947 Fix CVE-2026-43024
  - !22884 Fix CVE-2026-43107
  - !23742 LoongArch: KVM: Revert "LoongArch: KVM: Add paravirt preempt feature in hypervisor side"
  - !23690 mm/filemap: fix filemap_alloc_folio_local() return NULL with GFP_NOFAIL
  - !23634  backport cpufreq patches from linux mainline.
  - crypto: hisilicon/hpre: implement full backlog support for hpre driver
  - crypto: hisilicon/sec2 - restore iv for ctr mode
  - crypto: hisilicon/sec2 - fix resource leakage issues in non-backlog mode
  - crypto: hisilicon/sec2 - fix UAF in sec_alg_send_backlog
  - crypto: hisilicon/zip - add backlog support for zip
  - !22664 update rnpgbe driver to version 1.0.10
  - !23651  cpufreq: Documentation: fix sampling_down_factor documentation range
  - !23764  Fix livepatch and kretprobe conflict warning
  - !23763 virtcca inclusion: add msk_encrypted field
  - ub:ubus: Using activate mutex to prevent reset and activate/deactivate occuring concurrently
  - !23760 Fix CVE-2026-46243
  - bug fix for virtcca huk-based key encryption
  - rethook: Use tsk->on_cpu to check task execution state
  - rethook: Remove warning messages printed for finding return address of a frame.
  - smb: client: reject userspace cifs.spnego descriptions
  - urma: fix ipourma eid setup ordering
  - iommu/vt-d: Clear Present bit before tearing down context entry
  - drivers/iommu: Revise IOMMU memory reservation interface call timing
  - LoongArch: KVM: Revert "LoongArch: KVM: Add paravirt preempt feature in hypervisor side"
  - LoongArch: KVM: Revert "LoongArch: KVM: Add paravirt vcpu_is_preempted() support in guest side"
  - LoongArch: KVM: Revert "LoongArch: KVM: Make vcpu_is_preempted() as a macro rather than function"
  - mm/filemap: fix filemap_alloc_folio_local() return NULL with GFP_NOFAIL
  - cpufreq: Documentation: fix freq_step description
  - cpufreq: Documentation: fix sampling_down_factor documentation range
  - cpufreq: conservative: Simplify frequency limit handling
  - cpufreq: Avoid redundant target() calls for unchanged limits
  - cpufreq: Fix typo in comment
  - arm64: smp: Do not mark secondary CPUs possible under nosmp
  - iommu/ummu: Enable separated SVA page table by default
  - rnpgbe: update rnpgbe driver to version 1.0.10
  - netfilter: nf_tables: reject immediate NF_QUEUE verdict
  - xfrm: account XFRMA_IF_ID in aevent size calculation
  - usbip: validate number_of_packets in usbip_pack_ret_submit()
  - usb: gadget: f_hid: don't call cdev_init while cdev in use


author: Mingzheng Xing <xingmingzheng@iscas.ac.cn> - 6.6.0-157.0.0.148
changelog:
  - The RISC-V kernel patch upgrade to 6.6.0-157.0.0
    For more details, refer to the rvck-olk repository.


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-157.0.0.148.20260612.1ba379218f1a
changelog:
  - !23864 urma: add command to query TP information
  - !23849 iommu/ummu: Fix TLB invalidation flow in map/unmap
  - !23859 ub: cdma: refactor naming conventions and code cleanup
  - !23865 drivers/ub/sentry: fix memory leak and use-after-free in smh_message_get()
  - !23814 ub:ubus: Eliminate some compilation warnings on the code review platform
  - urma: add command to query TP information
  - !23863 urma: fix target_reuse_tpid connect waiting times
  - urma: fix target_reuse_tpid connect waiting times
  - drivers/ub/sentry: fix memory leak and use-after-free in smh_message_get()
  - vfio:ubus: Corrected the English errors of vfio
  - ub:ubfi: Corrected the English errors of ubfi
  - ub:ubus: Corrected the English errors of ubus
  - ub:ubus: add module_version for udev modules
  - ub:ubus: Eliminate some compilation warnings on the code review platform
  - !23554 Add Hygon NB driver support and update the interface used by other driver
  - ub: cdma: refactor naming conventions and code cleanup
  - !23838 urma: fix tpid reuse start up link error and ref cnt
  - urma: fix tpid reuse start up link error and ref cnt
  - iommu/ummu: Fix TLB invalidation flow in map/unmap
  - !23212 urma: add eid sharing mode
  - urma: add eid sharing mode
  - !23832 ub: cdma: fix some code errors detected by AI in the kernel cdma
  - !23773 obmm: fix vma access check for PROT_WRITE-only mappings
  - obmm: fix vma access check for PROT_WRITE-only mappings
  - !23762 urma: change the enum in ubcore_cmd.h for netlink msg_type
  - !23813  netconsole: avoid OOB reads, msg is not nul-terminated
  - ub: cdma: fix some code errors detected by AI in the kernel cdma
  - !23829  CVE-2026-31588
  - !23799  scsi/hiraid: Support new RAID features and bug fixes
  - !23828 RDMA/hns: Return actual error code instead of fixed EINVAL
  - !23724 urma: validate ubcore message version for compatibility
  - !23765 【OLK-6.6】urma: fix panic issue when ifconfig up/down ipourma device
  - fix "KVM: x86: Use scratch field in MMIO fragment to hold small write values" KABI CRC break issue
  - KVM: x86: Use scratch field in MMIO fragment to hold small write values
  - RDMA/hns: Return actual error code instead of fixed EINVAL
  - RDMA/hns: Fix RoCEv1 failure due to DSCP
  - urma: validate ubcore message version for compatibility
  - netconsole: avoid OOB reads, msg is not nul-terminated
  - scsi/hiraid: Support new RAID features and bug fixes
  - urma: change the enum in ubcore_cmd.h for netlink msg_type
  - urma: fix panic issue when ifconfig up/down ipourma device
  - EDAC/amd64:Update the SMN and nb interface used by Hygon processors in EDAC
  - hwmon/k10temp: Update the SMN interface used by Hygon processors in k10temp
  - x86/hygon_nb: Add Hygon Northbridge driver support via PCI enumeration


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-157.0.0.149.20260612.5ba33eb06623
changelog:
  - !23899 ub:ubus: Resolve the issue of msgq consuming CPU resources
  - !23893  netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent
  - !23839  xfrm: Fix CVE-2026-43091 RCU use-after-free in policy netns exit
  - !23822  bpf: Fix bpf_xdp_store_bytes proto for read-only arg
  - !23855 ub:udma:fix the bug in the eid update process.
  - !23867 urma: add set_share_topo host EID programming path
  - !23845 [OLK-6.6][linux-6.6.y sync] Backport 6.6.127-6.6.128 LTS conflict Patches-p1
  - urma: add set_share_topo host EID programming path
  - ub: udma: fix the bug in the eid update process.
  - ub:ubus: Resolve the issue of msgq consuming CPU resources
  - !23640 [OLK-6.6] Fix CVE-2026-46103
  - !23333 ntfs3: fix circular locking dependency in run_unpack_ex
  - !23347 ksmbd: close durable scavenger races against m_fp_list lookups
  - !23719 [OLK-6.6] Fix CVE-2026-31580
  - !23630 [OLK-6.6] Fix CVE-2026-31725
  - !20853 [OLK-6.6] Fix CVE-2025-39932
  - !23611 [OLK-6.6] Fix CVE-2026-43295
  - !23604 [OLK-6.6] Fix CVE-2026-43296
  - !23315 [OLK-6.6] Fix CVE-2025-71272
  - !23588 net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer
  - !22397 [OLK-6.6] Fix CVE-2025-71203
  - !23713 ubcore: Add host info lookup trie for CTP reuse
  - !23844 urma: add dfx for ns mode
  - !23882 ub: udma: resolve the issue of false verification.
  - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent
  - !23875 ub:ubus: Add new chip information into ubus_error_table
  - !23874 CVE-2026-46322
  - ub: udma: resolve the issue of false verification.
  - !23868 [OLK-6.6] ub: ubase: 5 related changes
  - ub:ubus: Add new chip information into ubus_error_table
  - ub:ubus: ras adapter of the new chips
  - urma: Add host info lookup trie for CTP reuse
  - urma: add dfx for ns mode
  - tun: free page on build_skb failure in tun_xdp_one()
  - !23869 ub: udma: resolve issues of create ccu_jetty.
  - ub: udma: resolve issues of create ccu_jetty.
  - ub: udma: set the jetty type by id
  - ASoC: nau8821: Cancel delayed work on component remove
  - ASoC: nau8821: Cancel pending work before suspend
  - octeon_ep: initialise control mbox tasks before using APIs
  - octeon_ep: ensure dbell BADDR updation
  - octeon_ep: set backpressure watermark for RX queues
  - octeon_ep: disable per ring interrupts
  - octeon_ep: support Octeon CN10K devices
  - octeon_ep: restructured interrupt handlers
  - octeon_ep: support to fetch firmware info
  - ASoC: nau8821: Fixup nau8821_enable_jack_detect()
  - ASoC: nau8821: Avoid unnecessary blocking in IRQ handler
  - ASoC: nau8821: Consistently clear interrupts before unmasking
  - bpf: Fix bpf_xdp_store_bytes proto for read-only arg
  - bpf, sockmap: Fix incorrect copied_seq calculation
  - xfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit
  - xfrm: Wait for RCU readers during policy netns exit
  - most: core: fix leak on early registration failure
  - most: core: fix resource leak in most_register_interface error paths
  - most: remove usage of the deprecated ida_simple_xx() API
  - bpf: Fix bpf_xdp_store_bytes proto for read-only arg
  - MAINTAINERS: remove Jerin Jacob from Marvell OcteonTX2
  - bcache: fix uninitialized closure object
  - bcache: fix cached_dev.sb_bio use-after-free and crash
  - can: ucan: fix devres lifetime
  - ksmbd: close durable scavenger races against m_fp_list lookups
  - ksmbd: validate owner of durable handle on reconnect
  - ksmbd: add durable scavenger timer
  - ksmbd: avoid reclaiming expired durable opens by the client
  - usb: gadget: f_ecm: Fix net_device lifecycle with device_move
  - rapidio: replace rio_free_net() with kfree() in rio_scan_alloc_net()
  - octeontx2-af: Workaround SQM/PSE stalls by disabling sticky
  - net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer
  - ntfs3: fix circular locking dependency in run_unpack_ex
  - net: unic: Fix JFC context domain segment fields and
  - net: unic: Add statistics on abnormal cqe
  - ub:ubase:anti-attack feature adaptation
  - ub: ubase: Add execution statistics for the software
  - ub: ubase: Add retry when ctrlq e2e msg send fail during
  - riscv: Sanitize syscall table indexing under speculation
  - smb: client: let smbd_destroy() call disable_work_sync(&info->post_send_credits_work)


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-157.0.0.149.20260613.6e2f4a7f3c6f
changelog:
  - !23911 iommu/ummu: Fix the UB_UMMU_BYPASSEID dependency error
  - !23906 [OLK-6.6] ub: ubase & unic: 6 related fixes
  - !23910 iommu/ummu: Fix null pointer problem during permission table expansion
  - iommu/ummu: Fix the UB_UMMU_BYPASSEID dependency error
  - iommu/ummu: Fix null pointer problem during permission table expansion
  - ub: ubase: optimize activate dev request handling in
  - ub: ubase: process change for querying SL through the
  - ub: ubase: set the delay processing time for ctrlq crq to
  - net: unic: resolve environment panic caused by alloc page
  - ub: ubase: increase reset task scheduling delay to avoid
  - ub: ubase: adapt to the API of alloc memory of ummu


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-157.0.0.149.20260614.ba6ab2982f30
changelog:
  - !23924 [OLK-6.6] ub: unic: separate DSCP-TC and prio-TC mapping configuration
  - !23907 urma: fix log error print wrong place
  - !23914 ub: ub_fwctl: Modify the method of obtaining link status in the port_link command.
  - !23923 urma: refactor ubagg connect and message handling
  - urma: refactor ubagg connect and message handling
  - ub: ub_fwctl: Modify the method of obtaining link status in the port_link command.
  - !23696 urma: enable shared-CTP
  - urma: ubcore enable shared-ctp
  - urma: fix log error print wrong place
  - ub: unic: separate DSCP-TC and prio-TC mapping configuration


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-159.4.1.151
changelog:
  - !23994 urma：sync  bugfix from OLK-6.6 from aece31cb793f to 9903e03cdae5
  - urma: ubcore add CNA-level shared-CTP
  - urma: move topo query api from ubcore to ubagg
  - urma: fix post send failure when msn cfg is different
  - urma: add multi-transport types,FLUSH_DMA opcode,device config extensions
  - urma: Fix the issue of DFX functionality missing some header files during compilation
  - !23991 [sync] PR-23978: iommu/ummu: Fix the problem of the shared identity page
  - !23981 [sync] PR-23935: iommu/ummu: Mask the impact of the iommu.passthrough=1 configuration
  - !23980 [sync] PR-23979: iommu/ummu: Add dedicated Kconfig for GFP_HIGHUSER_MOVABLE support
  - !23990 [sync] PR-23966: ub:ubus: modify ub virt notify
  - !23973 [sync] PR-23932:ub: ub_fwctl: Modify TA layer to obtain WQE delay related registers.
  - urma: ubagg add GET_RJETTY and GET_SEG_CTX ioctl handlers
  - urma: fix err log to info and change query to create
  - urma: Optimize the adaptability of the ubagg NL commands
  - urma: move v2p resource query api from ubcore to ubagg
  - urma: Optimize the adaptability of the NL commands
  - urma: remove uvs_get_route_list and standardize uvs tlv formats
  - iommu/ummu: Fix the problem of the shared identity page
  - iommu/ummu: Fix the adapt disable DVM issue
  - urma: change the enum in ubcore_cmd.h for set_sl and genl_pid
  - !23977 [sync] PR-23936: iommu/ummu: Improve code quality and fix potential issues
  - !23971 [sync] PR-23934: iommu/ummu: Add the tect cache synchronization operation
  - !23968 ub: udma: fix issues of safe mode
  - ub:ubus: modify ub virt notify
  - iommu/ummu: Improve code quality and fix potential issues
  - iommu/ummu: Add the tect cache synchronization operation
  - ub: udma: Optimize the duplicate registration
  - ub: udma: fix issues of safe mode
  - iommu/ummu: Mask the impact of the iommu.passthrough=1 configuration
  - iommu/ummu: Add dedicated Kconfig for GFP_HIGHUSER_MOVABLE support
  - ub: ub_fwctl: Modify TA layer to obtain WQE delay related registers.


author: Funda Wang <fundawang@yeah.net> - 30-63
changelog:
  - do not generate index file at all
  - add requirement on gen_digest_lists for /usr/lib/rpm/brp-digest-list
  - add shell completion macros


author: Funda Wang <fundawang@yeah.net> - 30-64
changelog:
  - enhance perl related macros
    * remove useless perl .packlist, empty .bs files and wrongly updated perllocal.pod
    * add helper macro for cpan projects
    * move perl relative macros into macros.perl


author: Funda Wang <fundawang@yeah.net> - 2.0.26-20
changelog:
  - sync all branches
  - update makedumpfile to 1.7.9
  - reorder arch-dependent patches
  - cherry picked MR:
    * https://atomgit.com/src-openeuler/kexec-tools/pull/121
    * https://atomgit.com/src-openeuler/kexec-tools/pull/148
    * https://atomgit.com/src-openeuler/kexec-tools/pull/150
    * https://atomgit.com/src-openeuler/kexec-tools/pull/163


author: Liu Chao <liuchao173@huawei.com> - 30-7
changelog:
  - disable make test because cannot find /lib/modules/`uname -r`/build
  - add extramodules to depmod search path


author: Build System <tangzhengliang1@huawei.com> - 1.0.0-1
changelog:
  - Initial package build
  - Provide libknet_core.so, libknet_frame.so, libdpstack.so
  - Include knet_mp_daemon binary
  - Add configuration files for knet communication, rsyslog, and logrotate


author: Build System <tangzhengliang1@huawei.com> - 1.0.0-2
changelog:
  - resolve cjson, dpdk, libboundscheck dependency automatically.
  - and based on tag knet-26.0.rc1-0331 adapting dpdk23


author: Build System <tangzhengliang1@huawei.com> - 1.0.0-3
changelog:
  - [fix] newest os output syslog without ident of openlog parameter, prefix libknet to solve it
  - and based on "more accurate prefix to match" commit of openEuler/knet


author: jinsaihang <jinsaihang@h-partners.com> - 1:0.9.9-13
changelog:
  - Type:bugfix
  - CVE:NA  
  - SUG:NA  
  - DESC:check whether the directory is a user source code directory


author: fuanan <fuanan3@h-partners.com> - 1:0.9.9-19
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patch
         backport-lookup-fix-local-bind-check.patch


author: qujingling <qujingling@huawei.com> - 1:0.9.9-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:remove __find_parent_obj_in_dir_for_oot and support link in changed_obj


author: Linux_zhang <244695981@qq.com> - 2:1.0.8-2
changelog:
  - fix CHILD_MAX at build time to prevent BEP discrepancies caused by varying CHILD_MAX values across repeated builds


author: wangli <3214053332@qq.com> - 1.1.0-1
changelog:
  -   add some test files
  -   prepare corresponding script for ras\rac\rahub to deploy config file respectively
  -   update part of file paths
  -   update to 1.1.0


author: gwei3 <11015100@qq.com> - 1.1.2-1
changelog:
  -   update to 1.1.2
  -   add slice length checks to avoid buffer overflow while extracting and verifying
  -   update integration test data to meet restapi parameter check requirement
  -   modify raagent/main.go file, change log to logger, os.Exit returns different values based on diff errors
  -   close RAS restapi server in signal handler
  -   Add parameter format checking for pcr/bios/ima in POST {id}/newbasevalue API
  -   Fix bugs in v1.1.1
      bug 1: hostintegritytool.sh can only add the 2nd part of ima policy into /etc/ima/ima-policy.
      bug 2: running hostintegritytool.sh multiple times will add duplicated linux cmdlines in /etc/default/grub.
      bug 3: rahub config path was assigned wrong values, which is caused by copy/paste
  -   fix the issue that Makefile not sync vendor
  -   modify readme file


author: gwei3 <11015100@qq.com> - 1.1.2-2
changelog:
  -   update BuildRequires & Requires to replace openssl* with compat-openssl11* to adapt to latest Mainline
  -   remove redundent clean label in spec file


author: leezhenxiang <1172294056@qq.com> - 2.0.0-1
changelog:
  -   update to 2.0.0
  -   add qcaserver, attester, and tas packages
  -   add BuildRequires itrustee_sdk-devel, cjson-devel and Requires itrustee_sdk, cjson
  -   modify makefile to adapt to different architectures
  -   specify the build requires in rac and attester package


author: zouzhimin <zouzhimin@kylinos.cn> - 4.13.0-13
changelog:
  - nfsserver: fix "server scope" functionality for both potentially other dropins AND multiple ExecStart


author: zouzhimin <zouzhimin@kylinos.cn> - 4.15.1-1
changelog:
  - update to 4.15.1
  - IPaddr2: dont fail with "IPv4 does not support lvs_ipv6_addrlabel"
    error, as the parameter is not used in IPv4 scenarioes


author: xuxuepeng <xuxuepeng1@huawei.com> - 0.0.1-8
changelog:
  - Type:Enhancement
  - ID:NA
  - SUG:NA
  - DESC: Simplify Store api, remove unnecessary validation
          Check if a path is abstract before connection
          Add vsock support.


author: Wenlong Zhang <zhangwenlong@loongson.cn> - 0.0.1-12
changelog:
  - Type:Fix
  - ID:NA
  - SUG:NA
  - DESC:just use vendor on loongarch64
         add loongarch64 support for nix


author: wujie <wujie@nj.iscas.ac.cn> - 1.0.13-3
changelog:
  - Add riscv64 support from http://fedora.riscv.rocks/koji/buildinfo?buildID=24988
    Author is David Abdurachmanov <david.abdurachmanov@gmail.com>


author: liliguang <liliguang@baidu.com> - 2.9-1
changelog:
  - update to 2.9
  - dwarf-reader: Avoid adding declarations-only global vars to IR
  - libxml-utils: Pass paramater to xml_char_sptr_to_string by reference
  - ctf-reader: Fix memory leak in lookup_symbol_in_ctf_archive


author: Weifeng Su <suweifeng1@huawei.com> - 7.8.2-1
changelog:
  - upgrade to version 7.8.2:
    -Resolve warning in GCC11
    -Fix comparison warning in add_chunk_as
    -Address Clang 16 AO_pt_lock issue
    -Handle Mingw64-GCC _atomic_errors
    -Fix linker errors in OpenBSD build
    -Update get_chunk for mmap placement
    -Correct typos in names/comments
    -Update CMake version to 3.5


author: cenhuilin <cenhuilin@kylinos.cn> - 2.39.1-29
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:lsblk: fix memory leak [coverity scan]
         lsblk: fix possible use-after-free


author: yixiangzhike <yixiangzhike007@163.com> - 2.39.1-31
changelog:
  - backport community patches
      fix columns reduction
      fix memory leak issue in read_Subid_range
      fix off-by-one in maximum last sector calculation
      fix memory corruption in size calculation
      fix memory corruption in read buffers


author: wangzhiqiang <swangzhiqiang95@huawei.com> - 3.0.4-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Add BDPluginSpec constructor and use it in plugin_specs_from_names


author: tianmuyang <tianmuyang@huawei.com> 2:1.2.2-11
changelog:
  - Adaption for sched type eBPF program:
    backport-libbpf-Adaption-for-sched-type-eBPF-program.patch


author: yaoxin <yao_xin001@hoperun.com> - 1.27.4-1
changelog:
  - Update to 1.27.4 for fix CVE-2024-6381 and CVE-2024-6383
  - libbson Fixes:
    * Fix build with Visual Studio 2013.
    * Fix parsing of colon in timezone.
    * Error on failure to init subdocument in bson_iter_visit_all.
    * Fix string handling in bson_string_new and bson_string_append.
    * Fix iteration in bson_strfreev.
    * Use aligned alloc for bson_array_builder_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Fix conversion warning with GCC 12.
    * Fixes to some format strings in trace logs.
    * Allow mongoc_buffer_t to be larger than INT_MAX.
    * Add bson_array_builder_t.
  - libmongoc Fixes:
    * Fix possible crash reading malformed wire protocol message.
    * Upgraded bundled Zlib from 1.2.3 to 1.3.1
    * Close leftover connections to removed servers.
    * Fix possible crash when client is configured with empty password.
    * Fix possible hang if mongoc_gridfs_file_readv is called with a corrupt chunk with incomplete data.
    * Fix 32-bit compile with 64-bit time_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Disable shared libmongoc targets if ENABLE_SHARED=OFF
    * Fix documentation build with Python 3.9.
    * Fix data race in mongoc_cursor_get_host.
    * Add back support for BUILD_VERSION CMake option. BUILD_VERSION was unintentionally removed in 1.25.0.
    * Send recoveryToken in transactions when connected to a load balancer.


author: yezengruan <yezengruan@huawei.com> 1.0.0-12
changelog:
  - kpatch_process: fix possible double free.
  - ptrace: fix NULL pointer access problem
  - fix patched process crashing when acccess the global var
  - fix probably restore cc symbol link fail when kill patch building uncourteous
  - optimize: Remove unnecessary comparison code


author: chenyanpanHW <chenyanpan@huawei.com> - 2.1.0-3
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/backport-correct-realpath-test-failure.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0001-fix-Werror-format-security.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 3.21.0.27-1
changelog:
  - Update package to version 3.21.0.27
    Added libdap::Array::rename_dim() for HK-247
    Added new Direct I/O support so that modules written using libdap can pass compressed data buffers
    Fix handling of libtirpc pkg-config files with -L flags
    Moved the functionality of is_dap4_projected() into libdap4
    Added support for 64-bit sized arrays


author: laokz <zhangkai@iscas.ac.cn> - 3.21.0.27-2
changelog:
  - let BuildRequire valgrind depend on system i386 i486 i586 i686 pentium3 pentium4 athlon geode x86_64 armv3l armv4b armv4l armv4tl armv5tl armv5tel armv5tejl armv6l armv6hl armv7l armv7hl armv7hnl armv8l armv8hl armv8hnl armv8hcnl aarch64 loongarch64 powerpc64le ppc64le sw_64


author: zhaoyonghao10 <zhaoyonghao10@h-partners.com> - 0.70.2-7
changelog:
  - apply 2 patches: backport-Mark-all-protected-packages-as-user-installed-for-.patch, backport-fix--compare-RPMItem-in-transaction-with-rpmvercmp.patch


author: liujing <liujing144@huawei.com> - 1.0.0-30
changelog:
  - update patches from https://code.foxkit.us/adelie/aports-old/blob/50de7d785d5500a14ed00fa12e483e8ceaf4f06a/main/libdv


author: doupengda <doupengda@loongson.cn> 1.0.1-7
changelog:
  - update config.guess and config.sub
  - fix SOURCE1 file autoconf.h '__loongarch64__' to '__loongarch64'


author: yuanchao <1050706328@qq.com> - 2.1.12-13
changelog:
  - Fix function undeclared,incompatible pointer and parameter lack in 'add-testcases-for-event.c-apis.patch',support clang build


author: andy <liuyang01@kylinos.cn> - 2.1.12-14
changelog:
  - Fix leak in evbuffer_add_file() on empty files
  - evthread: fix NULL dereference in evthread_setup_global_lock_()
  - Fix potential null dereference in http-server


author: shixuantong <shixuantong1@h-partners.com> - 2.1.12-15
changelog:
  - fix: arc4_getword integer overflow, detected by -fsanitize=undefined
  - Fix divide-by-zero in ev_token_bucket_get_tick_
  - fixed missing check for null after strdup in evutil_inet_pton_scope
  - Fix integer-overflow in ev_token_bucket_cfg_new
  - Fix integer overflow in HTTP version
  - Fix potential Null pointer dereference in bufferevent_openssl.c
  - Fix potential Null pointer dereference in dns-example.c
  - Fix potential Null pointer dereference in event-read-fifo.c
  - Fix unlikely (for libevent) UB in HT_GROW()


author: Funda Wang <fundawang@yeah.net> - 2.1.12-16
changelog:
  - Don't use deprecated functions when building against OpenSSL 3.0
  - fix linkage of shared libraries


author: yanglongkang <yanglongkang@h-partners.com> - 3.4.4-5
changelog:
  - Fix x86/ffi64 calls with 6 gp and some sse registers
    Robustify floating point comparison in test
    Fix floating point compare


author: Wenlong Ding <wenlong.ding@turbolinux.com.cn> - 2.6.4-22
changelog:
  - Remove /usr/lib64/libglade-2.0.so.* from libglade2-devel package which already exists in libglade2 package.


author: Yang Yanchao <yangyanchao6@huawei.com> - 0.1-3
changelog:
  - Check the return ptr of the malloc[#I7YV2X]
    add hnid in gmemPrefetch [#I7XQMW]
    free userData in stream to avoid async operations accessing illeagal address[#I7Z2RF]


author: wangkai <13474090681@163.com> - 2.5.31-3
changelog:
  - Fix CVE-2026-40334, CVE-2026-40334, CVE-2026-40338, CVE-2026-40339,
    CVE-2026-40340, CVE-2026-40341


author: Kai Liu <kai.liu@windriver.com> - 1:1.49.5-5
changelog:
  - Replace patch support_OPENEULER_to_configure.patch by backport-support-openEuler.patch
    which is backported from upstream, fix issue of detecting openEuler.
  - Add provide-openEuler-appliance-package-list.patch after correctly detected openEuler.
    It was using REDHAT list before.


author: yanglu <yanglu72@h-partners.com> - 3.0.17-2
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:avoid crashing in icalcomponent_normalize
         fix a memleak in icalcomponent_normalize


author: wangxiao <wangxiao184@qq.com> - 1.24.0-4
changelog:
  - add fix patch for CVE-2026-50292
  - CVE-2026-50265 is an invalid CVE, so delete the related information.


author: Xu Raoqing <609179072@qq.com> - 2.9.4-19
changelog:
  - oidc_child: fix wrong usage of printf format (a2bd434)
  - ad: use right memory context in GPO code (723a30b)
  - Responder: fix passkey auth when user-verification is off (4c6c010)
  - KRB5: fix mem leak in authenticate_stored_users (8b452b3)
  - KCM: fix use-after-free in kcm_read_options (50ae35f)
  - NSS: Fix wrong condition invalidating an optimization (6d71291)


author: liuchao <liuchao173@huawei.com> - 2.1-1
changelog:
  - Upgrade to 2.1:
    - a new tool 'ptseg' for finding the PSB segment for a given offset.
    - a new layer 'evt' representing the trace as a list of events.
    - event tracing (cfe and evd packets).
    - C11 threads, if available.
    - Bug fixes and support for latest processors.


author: Funda Wang <fundawang@yeah.net> - 1.5.8-2
changelog:
  - backport upstream patches
    * Bug fix: iso_image_set_ignore_aclea() inverted the setting
      for reading the XFS-style project id from disk files
    * Silenced error messages about ioctl(FS_IOC_FSGETXATTR)


author: yixiangzhike <yixiangzhike007@163.com> - 1.4.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:refix the failure of building with cppcheck>=2.11 by using upstream patch


author: yixiangzhike <yixiangzhike007@163.com> - 1.6.4-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch to fix possible uninitialized variable


author: xinghe <xinghe2@h-partners.com> - 8.17.2-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:extending the certificate validate period
         remove redundant patches


author: shechenglong <shechenglong@xfusion.com> - 25.0.3-46
changelog:
  - libcontainerd: change the digest used when restoring
  - backport builder/dockerfile: ADD with best-effort xattrs
  - man/docker-build.1: typo in parameter variable: CID => IID
  - Restore INC iptables rules on firewalld reload
  - fix TestPassthrough
  - fix issue where node promotion could fail
  - libnetwork/drivers/overlay: fix naked returns, output variables
  - libnetwork: fix flaky Swarm service DNS
  - volume/local: use t.TempDir
  - libnetwork/drivers/bridge: fix non-constant format string in call (govet)
  - volume/service: rename interface that collided with vars
  - plugin: fix naked returns, output vars


author: wuguanghao <wuguanghao3@huawei.com> - 5.0.2-1
changelog:
  - upgrade to 5.0.2:
    - fix double free in nfs3_pread_mcb()
    - Multithread support for Linux and Windows
    - fix NFS4 behavior of chmod/chown/utimes
    - Add nfs_umount() to NFSv3
    - Add nfs_statvfs64()
    - NFSv4 fix for directory handling
    - NFSv4 support
    - lockf() support(NFSv4 only)
    - fcntl() support (FNSv4 only)
    - Added nfs-fh: a simple utility to print the filehandle for a nfs file


author: chengyechun <chengyechun1@huawei.com> - 3.7.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:prevent segfault in af_request_type
         fix bridge info parsing


author: Weifeng Su <suweifeng1@huawe.com> - 1.8-1
changelog:
  - Upgrade to version 1.8
    -Support added for Flexible Data Placement(TP4146)
    -Add support for Persistent Discovery Controllers
    -Replaced the libsystemd dependency with libdbus
    -A parser for the NBFT table
    -Ignoring fabric connect attempts if the execution context doesn't match
    -support for TP8018
    -use sysfs only for topology scan
    -auto cleanup for resources
    -buf fixed and clean code


author: xinghe <xinghe2@h-partners.com> - 2:1.6.40-2
changelog:
  - Type:cves
  - CVE:CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720
  - SUG:NA
  - DESC:fix CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720


author: yixiangzhike <yixiangzhike007@163.com> - 1.4.5-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch to remove redundant inclusion of libintl.h


author: chenyanpanHW <chenyanpan@huawei.com> - 0.9.4-19
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/libquvi-0.9.4-lua-5.2.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yixiangzhike <yixiangzhike007@163.com> - 1.15.2-3
changelog:
  - backport patches from upstream
      Fix a memory leak of the glib slist
      Add missing end callback for already downloaded zchunk files
      Fix memory leak of repo and repomd
      Fix a crash when the gnupghomedir is NULL or not specified on Python API


author: yuanchao <1050706328@qq.com> - 0.20.5-3
changelog:
  - fix `incompatible function pointer types passing`errors in test-vala-unstable.vala and test-vala-lang.vala


author: wangqingsan<wangqingsan@huawei.com> - 2.19-4
changelog:
  - fix CVE-2023-0464,CVE-2023-0465,CVE-2023-0466,CVE-2023-2650,CVE-2023-3446,CVE-2023-3817,CVE-2023-5678.


author: nickyang <nickyang228@163.com> - 2.74.3-12
changelog:
  - Type:cves
  - ID:CVE-2026-1539 CVE-2026-1467 CVE-2026-1761 CVE-2026-0716
  - SUG:NA
  - DESC:fix CVE-2026-1539 CVE-2026-1467 CVE-2026-1761 CVE-2026-0716


author: nickyang <nickyang228@163.com> - 2.74.3-13
changelog:
  - Type:cves
  - ID:CVE-2026-1760 CVE-2026-1801 CVE-2026-2369
  - SUG:NA
  - DESC:fix CVE-2026-1760 CVE-2026-1801 CVE-2026-2369


author: zhangbinqin <zhangbinqin@h-partners.com> - 0.10.5-5
changelog:
  - Type:CVE
  - Id:CVE-2025-4877 CVE-2025-4878 CVE-2025-5351 CVE-2025-5987 CVE-2025-5372
  - SUG:NA
  - DESC:fix CVE-2025-4877CVE-2025-4878CVE-2025-5351CVE-2025-5987CVE-2025-5372


author: zhangbinqin <zhangbinqin@h-partners.com> - 0.10.5-9
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:fix CVE-2026-0968 CVE-2026-0967 CVE-2026-0966 CVE-2026-0965 CVE-2026-0964 CVE-2025-14821


author: zhangbinqin <zhangbinqin@h-partners.com> - 1.11.0-6
changelog:
  - Type:CVE
  - CVE:CVE-2026-7598
  - SUG:NA
  - DESC:add username_len bounds checking to fix CVE-2026-7598


author: laokz <zhangkai@iscas.ac.cn> - 1.9.6-2
changelog:
  - make with_mem_leak_test option following i386 i486 i586 i686 pentium3 pentium4 athlon geode x86_64 armv3l armv4b armv4l armv4tl armv5tl armv5tel armv5tejl armv6l armv6hl armv7l armv7hl armv7hnl armv8l armv8hl armv8hnl armv8hcnl aarch64 loongarch64 powerpc64le ppc64le sw_64


author: chenyanpanHW <chenyanpan@huawei.com> - 1.2.20-20
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/libtar-1.2.11-missing-protos.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/libtar-1.2.11-mem-deref.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/libtar-1.2.20-fix-resource-leaks.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/libtar-1.2.11-bz729009.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/libtar-1.2.20-no-static-buffer.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/CVE-2013-4420.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/openEuler-CVE-2021-33643-CVE-2021-33644.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/openEuler-CVE-2021-33645-CVE-2021-33646.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/CVE-2021-33640-fix-memory-leak-and-use-after-free-bugs.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Funda Wang <fundawang@yeah.net> - 1.5-2
changelog:
  - add upstream patch supporting tracing for AV1 picture info
  - requires x11 as pkgconfig private, since vdpau_x11.h refers X11/Xlib.h
  - cleanup spec


author: PengruiZhang <zhangpengrui@huawei.com> - 9.10.0-26
changelog:
  - vdpa: Add the count of vdpa devices when calculating Max locked memory
  - virDomainDeviceIsUSB: Handle all USB devices and simplify the code
  - add TengyunS5000C cpu info to cpu map
  - qemu:Implement the RAS feature for aarch64


author: PengruiZhang <zhangpengrui@huawei.com> - 9.10.0-28
changelog:
  - virshFindDisk: fix NULL-dereference of xmlCopyNode() result
  - vir-qemu-sev-validate: Use string() method in xpath
  - network: convert virFileLinkPointsTo to return bool
  - security_util: fix log in virSecurityMoveRememberedLabel
  - Skip the UEFI check for CCA
  - conf: fix integer overflow in virDomainControllerDefParseXML
  - qemu: Replace the deprecated short-formed option "unix"
  - ch_driver: fix condition in virCHDomainRemoveInactive()
  - remote: DeserializeDomainDiskErrors: remove dead code


author: Pengrui Zhang <zhangpengrui@huawei.com> - 9.10.0-29
changelog:
  - cpu_map: add kunpeng-920-V1 cpu map
  - cpu_map: add kunpeng-920-V2 cpu map
  - cpu_map: add kunpeng-950-V1 cpu map
  - Migration/urma: tune and restore rcu_expedited around URMA migration
  - Migration/urma: enable ONECOPY capability for destination


author: Pengrui Zhang <zhangpengrui@huawei.com> - 9.10.0-30
changelog:
  - qemu_command: Remove unused iommufd variable in qemuBuildPCIHostdevDevProps
  - qemu_command: Don't open code virPCIDeviceAddressAsString()
  - meson: Stop looking for passt at build time
  - qemu: Move memory device coldplug into a separate function
  - Migration/urma:enable RCU expedited tuning for HCOM Protocol


author: Pengrui Zhang <zhangpengrui@huawei.com> - 9.10.0-31
changelog:
  - ub: ub device management infrastructure
  - ub: support get ub device list
  - ub: support delete missing ub devs
  - ub: add detailed code for prepare and bind driver code
  - ub: support ub dev bind to stub driver
  - ub: support get guidAddress from devNum
  - ub: more detailed code for bind and unbind driver code
  - ub: detailed code for reattach ub dev process
  - ub: check if hostdev ub is prepared
  - ub: check vfio-ub info when ub hostdev is configed
  - ub: switch fclose(FILE) to VIR_FORCE_FCLOSE(FILE)


author: Pengrui Zhang <zhangpengrui@huawei.com> - 9.10.0-33
changelog:
  - conf: Fix error message in virNetworkForwardDefParseXML
  - qemu: Fix guest-sync response time in qga command
  - virthreadpool: create threads from the newly expanded workers
  - qemu: Use g_autoptr in qemuProcessInit
  - qemu: Add kvm-vtimer-status support for AArch64 KVM guests


author: Pengrui Zhang <zhangpengrui@huawei.com> - 9.10.0-34
changelog:
  - qemu_driver: Don't handle the EOF event if vm get restarted
  - conf: add the hugepage allocation option
  - qemu: cgroup: Add /dev/ubmempfd to default device ACL


author: liujie-answer <liujie5@linkdatatechnology.com> - 20260410-2
changelog:
  - add linux-firmware-linkdata sub-package
  - This configuration file is from Linkdata, supporting Linkdata Ethernet Controller advanced feature configuration.


author: wangyu <wangyu283@huawei.com> - 2.11-7
changelog:
  - kernel 5.10 backport kernel 5.11 sgx driver patch, disables sgx feature flag for non-FLC platforms
  - use cpuid instead of boot_cpu_has to check cpu features


author: eastb233 <xiezhiheng@huawei.com> 17.0.6-7
changelog:
  - Type: cherry-pick
  - ID:NA
  - SUG:NA
  - DESC: cherry-pick
  -    Add toolchain_clang build support
  -    Part of adopt to new cmake macro
  -    build with clang


author: eastb233 <xiezhiheng@huawei.com> 17.0.6-8
changelog:
  - Type: Update
  - ID:NA
  - SUG:NA
  - DESC: Update https://gitee.com/openeuler/llvm-project/archive/refs/tags/llvm-for-oE-17.0.6-2509.0.1.tar.gz


author: eastb233 <xiezhiheng@huawei.com> 17.0.6-9
changelog:
  - Update https://gitee.com/openeuler/llvm-project/archive/refs/tags/llvm-for-oE-17.0.6-2509.0.2.tar.gz


author: liyunfei <liyunfei33@huawei.com> - 19.1.7-11
changelog:
  - update to llvm-for-oE-19.1.7-2506.0.2
  - release note: https://gitee.com/openeuler/llvm-project/releases/tag/llvm-for-oE-19.1.7-2506.0.2


author: liyunfei <liyunfei33@huawei.com> - 19.1.7-17
changelog:
  - update to llvm-for-oE-19.1.7-2512.0.1
  - release note: https://gitee.com/openeuler/llvm-project/releases/tag/llvm-for-oE-19.1.7-2512.0.1


author: liyunfei <liyunfei33@huawei.com> - 19.1.7-19
changelog:
  - update to llvm-for-oE-19.1.7-2512.0.2
  - release note: https://gitee.com/openeuler/llvm-project/releases/tag/llvm-for-oE-19.1.7-2512.0.2


author: eastb233 <xiezhiheng@huawei.com> - 20.1.8-8
changelog:
  - update to llvm-for-oE-20.1.8-2606.0.2
  - release note: https://atomgit.com/openeuler/llvm-project/releases/llvm-for-oE-20.1.8-2606.0.2


author: Funda Wang <fundawang@yeah.net> - 4.99.6-1
changelog:
  - update to 4.99.6
  - switch to autotools based build system per suggested by upstream
   - new devel sub package, due to switching to autotools
   - add two security-related build switches from archlinux:
     - only allow root to list all open files
     - allow anyone to list anyone else's socket files


author: liuchao <liuchao173@huawei.com> - 2.13.7-1
changelog:
  - Update to 2.13.7:
    - fix: invoke MKDIR_P before changing directories
    - fix: -Wsingle-bit-bitfield-constant-conversion with clang16
    - fix: clean java inner class files in examples
    - Introduce sync vs unsync enablers
    - Fix: misaligned urcu reader accesses
    - ustfork: Fix warning about volatile qualifier
    - ustfork: Fix possible race conditions
    - Fix: tracepoint: Remove trailing \ at the end of macro
    - fix: python agent: use stdlib distutils when setuptools is installed
    - fix: python agent: install on Debian python >= 3.10
    - fix: python agent: Add a dependency on generated files
    - python: use setuptools with python >= 3.12


author: Dingli Zhang <dingli@iscas.ac.cn> - 0:7.7.0-2
changelog:
  - Update spec for RISCV64 due to OOM compilation error
  - Add Requires of several packages to resolve conflicts during installation


author: yuanchao <1050706328@qq.com> - 5.0.2-16
changelog:
  - Type: bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix error of cc.compiles in meson.build on aarch cased by '-fstack-clash-protection' and '-Werror'


author: wujichao <wujichao1@huawei.com> - 0.3-36
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:bugfix: Information in cpu directory is overwritten after lxcfs restart


author: Liu Qingtao <liu.qingtao2@zte.com.cn> - 1.9.4-3
changelog:
  - Add patch riscv_zicclsm_lz4_force_mem_access_2.patch to configure LZ4_FORCE_MEMORY_ACCESS=2 for RISC-V with Zicclsm extension


author: chenyanpanHW <chenyanpan@huawei.com> - 12.5-33
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/nail-11.25-config.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.3-pager.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-lzw.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-fname-null.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-collect.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-usage.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-man-page-fixes.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-outof-Introduce-expandaddr-flag.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-fio.c-Unconditionally-require-wordexp-support.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-globname-Invoke-wordexp-with-WRDE_NOCMD-CVE-2004-277.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-unpack-Disable-option-processing-for-email-addresses.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-empty-from.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-nss-hostname-matching.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-encsplit.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-openssl.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/backport-mailx-12.5-no-SSLv3.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/set-mail-defualt-did-not-record-failsend.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Funda Wang <fundawang@yeah.net> - 20250211-1
changelog:
  - update to 2025021 for fix CVE-2024-28047, CVE-2024-31157, CVE-2024-39279,
    CVE-2024-28127, CVE-2024-29214, CVE-2024-24582, CVE-2023-34440, CVE-2024-37020,
    CVE-2024-39355, CVE-2023-43758, CVE-2024-36293, CVE-2024-31068


author: Funda Wang <fundawang@yeah.net> - 20250512-1
changelog:
  - update to 20250512 to fix CVE-2024-28956, CVE-2025-24495, CVE-2025-20012,
    CVE-2024-45332, CVE-2025-20623, CVE-2024-43420, CVE-2025-20054, CVE-2025-20103


author: Funda Wang <fundawang@yeah.net> - 20250812-1
changelog:
  - update to 20250812 to fix CVE-2025-20053, CVE-2025-20109, CVE-2025-21090,
    CVE-2025-22839, CVE-2025-22840, CVE-2025-22889, CVE-2025-24305, CVE-2025-26403,
    CVE-2025-32086


author: yaoxin <1024769339@qq.com> - 2.4.16.6-1
changelog:
  - Update to 2.4.16.6:
    * metadata: fix caching of JWKs from jwks_uri when using the default expiry setting
    * info: fix requests to the info hook with extend_session=false
    * cookie: OIDCCookieSameSite default behaviour Lax
    * cookie: apply OIDCCookieSameSite Off/None properly to state cookies instead of always setting Lax
    * cache: avoid segfault and improve error reporting in case apr_temp_dir_get fails when a temp directory
      cannot be found on the system upon initaliizing cache mutexes and the file cache
    * metadata: allow plain HTTP URLs in metadata elements jwks_uri and signed_jwks_uri to ensure backwards
      compatibility with <=2.4.15.7 and to support private/test deployments
    * code: address warnings from static code analysis tool CodeChecker


author: Funda Wang <fundawang@yeah.net> - 102.9.0-9
changelog:
  - set CC and CXX so that clang won't be selected automatically
  - fix compilation errors in sw_64 support


author: yanglu <yanglu72@h-partners.com> - 2:0.95-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Change UDP and ICMP sockets binding to accept a source IP from the -a CLI option


author: zhangxingrong <zhangxingrong@uniontech.com> - 5:2.2.12-3
changelog:
  - Fix smtp client to respect $use_envelope_from option.
  - Fix smtp client $envelope_from_address possible dangling pointer.


author: yaoxin <yao_xin001@hoperun.com> - 1.2.2-1
changelog:
  - Update to 1.2.2:
    * XML declaration must produce a START_DOCUMENT event.
    * Fix processing of PIs.
    * Unit test with subsequent dashes in a PI.
    * Replace project license Indiana 1.1.1 with explicit license 1.2 of MXParser.


author: wangkai <13474090681@163.com> - 8.0.40-1
changelog:
  - Update to 8.0.40 for fix CVEs(CVE-2024-21218,CVE-2024-21196,CVE-2024-21207,
    CVE-2024-21198,CVE-2024-21203,CVE-2024-21213,CVE-2024-21239,CVE-2024-21199,
    CVE-2024-21197,CVE-2024-21247,CVE-2024-21193,CVE-2024-21212,CVE-2024-21241,
    CVE-2024-21230,CVE-2024-21236,CVE-2024-21194,CVE-2024-21238,CVE-2024-21237,
    CVE-2024-21201,CVE-2024-21231,CVE-2024-21219,CVE-2024-21185)


author: yaoxin <1024769339@qq.com> - 8.0.41-1
changelog:
  - Update to 8.0.41 for fix CVEs(CVE-2025-21490,CVE-2025-21491,CVE-2025-21495,
    CVE-2025-21497,CVE-2025-21500,CVE-2025-21501,CVE-2025-21503,CVE-2025-21505,
    CVE-2025-21518,CVE-2025-21519,CVE-2025-21520,CVE-2025-21522,CVE-2025-21523,
    CVE-2025-21529,CVE-2025-21531,CVE-2025-21540,CVE-2025-21543,CVE-2025-21546,
    CVE-2025-21555,CVE-2025-21559)


author: yaoxin <1024769339@qq.com> - 8.0.42-1
changelog:
  - Update to 8.0.42 for fix CVEs(CVE-2025-21574,CVE-2025-21575,CVE-2025-21577,
    CVE-2025-21580,CVE-2025-21581,CVE-2025-21584,CVE-2025-21585,CVE-2025-30681,
    CVE-2025-30682,CVE-2025-30683,CVE-2025-30684,CVE-2025-30685,CVE-2025-30687,
    CVE-2025-30688,CVE-2025-30689,CVE-2025-30693,CVE-2025-30695,CVE-2025-30696,
    CVE-2025-30699,CVE-2025-30703,CVE-2025-30704,CVE-2025-30705,CVE-2025-30710,
    CVE-2025-30715,CVE-2025-30721,CVE-2025-30722


author: yaoxin <1024769339@qq.com> - 8.0.43-1
changelog:
  - Update to 8.4.6 for fix CVEs (CVE-2025-50068,CVE-2025-50077,CVE-2025-50078,
    CVE-2025-50079,CVE-2025-50080,CVE-2025-50081,CVE-2025-50082,CVE-2025-50083,
    CVE-2025-50084,CVE-2025-50085,CVE-2025-50086,CVE-2025-50087,CVE-2025-50091,
    CVE-2025-50092,CVE-2025-50093,CVE-2025-50094,CVE-2025-50096,CVE-2025-50097,
    CVE-2025-50098,CVE-2025-50099,CVE-2025-50100,CVE-2025-50101,CVE-2025-50102,
    CVE-2025-50104,CVE-2025-53023)


author: wangkai <13474090681@163.com> - 8.0.44-1
changelog:
  - Update to 8.0.44 for fix CVEs (CVE-2025-53069,CVE-2025-53062,CVE-2025-53054,
    CVE-2025-53053,CVE-2025-53045,CVE-2025-53044,CVE-2025-53042,CVE-2025-53040)


author: yaoxin <1024769339@qq.com> - 8.0.45-1
changelog:
  - Update to 8.0.45 for fix CVEs (CVE-2026-21936,CVE-2026-21937,
    CVE-2026-21941,CVE-2026-21948,CVE-2026-21964,CVE-2026-21968)


author: wangkai <13474090681@163.com> - 8.0.46-1
changelog:
  - Update to 8.0.46 for fix CVEs (CVE-2026-21998, CVE-2026-22001, CVE-2026-22002,
    CVE-2026-22004, CVE-2026-22005, CVE-2026-22009, CVE-2026-22015, CVE-2026-22017,
    CVE-2026-34267, CVE-2026-34270, CVE-2026-34271, CVE-2026-34276, CVE-2026-34278,
    CVE-2026-34293, CVE-2026-34303, CVE-2026-34304, CVE-2026-34308, CVE-2026-35236,
    CVE-2026-35237, CVE-2026-35238, CVE-2026-35239, CVE-2026-35240)


author: yaoxin <yao_xin001@hoperun.com> - 8.0-1
changelog:
  - Update to 8.0
    * CVE-2024-5742: Avoid privilege escalations via symlink attacks
      on emergency save file (boo#1226099)
    * By default ^F is bound to starting a forward search, and ^B to
      starting a backward search, while M-F and M-B repeat the search
      in the corresponding direction. (See the documentation if you
      want the old bindings back.)
    * Command-line option --modernbindings (-/) makes ^Q quit, ^X cut,
      ^C copy, ^V paste, ^Z undo, ^Y redo, ^O open a file, ^W write a file,
      ^R replace, ^G find again, ^D find again backwards, ^A set the mark,
      ^T jump to a line, ^P show the position, and ^E execute.
    * For easier access, M-" is bound to placing/removing an anchor,
      and M-' to jumping to the next anchor.


author: gaihuiying <eaglegai@163.com> - 1:5.9.3-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Customized the anti-attacki/reset-last_engineTime function for IdeaUI
         change the permissions of passtest


author: xingwei <xingwei14@h-partners.com> - 1:5.9.3-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Migration patch from upstream, add compatibility to parse
  Linux 6.7 Ip header while keep support for previous versions.


author: chenyanpanHW <chenyanpan@huawei.com> - 0.2.8-19
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0000-netcf-call-aug_load-at-most-once-per-second.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0001-netcf-optimize-aug_match-query-for-all-ifcfg-files-related.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0002-netcf-linux-include-bond-element-for-bonds-with-no-slaves.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0003-netcf-Properly-classify-bond-devices-with-no-slaves.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Fix-memory-leak-in-aug-match-mac.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: lingsheng <lingsheng1@h-partners.com> - 1:1.0.8-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:datatype: don't return a const string from cgroupv2_get_path()
  datatype: fix leak and cleanup reference counting for struct datatype
  datatype: initialize TYPE_CT_EVENTBIT slot in datatype array
  datatype: initialize TYPE_CT_LABEL slot in datatype array
  evaluate: do not remove anonymous set with protocol flags and single element
  evaluate: don't crash if object map does not refer to a value
  evaluate: error out when expression has no datatype
  evaluate: error out when store needs more than one 128bit register of align fixup
  evaluate: fix check for truncation in stmt_evaluate_log_prefix()
  evaluate: fix double free on dtype release
  evaluate: fix memleak in prefix evaluation with wildcard interface name
  evaluate: reject set in concatenation
  evaluate: revisit anonymous set with single element optimization
  evaluate: skip anonymous set optimization for concatenations
  evaluate: stmt_nat: set reference must point to a map
  evaluate: tproxy: move range error checks after arg evaluation
  evaluate: validate chain max length
  evaluate: validate maximum log statement prefix length
  exthdr: prefer raw_type instead of desc->type
  json: expose dynamic flag
  json: fix use after free in table_flags_json()
  libnftables: Drop cache in -c/--check mode
  meta: fix tc classid parsing out-of-bounds access
  netlink: don't crash if prefix for < byte is requested
  netlink: fix leaking typeof_expr_data/typeof_expr_key in netlink_delinearize_set()
  netlink: handle invalid etype in set_make_key()
  parser_bison: fix ct scope underflow if ct helper section is duplicated
  parser_bison: fix memleak in meta set error handling
  parser_bison: make sure obj_free releases timeout policies
  parser_json: Catch nonsense ops in match statement
  parser_json: Default meter size to zero
  parser_json: Fix flowtable prio value parsing
  parser_json: Fix synproxy object mss/wscale parsing
  parser_json: Fix typo in json_parse_cmd_add_object()
  parser_json: Proper ct expectation attribute parsing
  parser_json: Wrong check in json_parse_ct_timeout_policy()
  py: fix exception during cleanup of half-initialized Nftables
  rule: fix sym refcount assertion


author: liweigang <liweiganga@uniontech.com> - 1:1.0.8-4
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: evaluate: guard against NULL basetype
  evaluate: error out if basetypes are different
  evaluate: reject attempt to update a set
  evaluate: release mpz type in expr_evaluate_list() error path
  expression: missing line in describe command with invalid expression
  evaluate: handle invalid mapping expressions in stateful object statements gracefully


author: gaihuiying <eaglegai@163.com> - 1:1.0.8-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         evaluate: disable meta set with ranges
         src: reject large raw payload and concat expressions
         evaluate: fix stack overflow with huge priority string
         tcpopt: don't create exthdr expression without datatype
         src: do not allow to chain more than 16 binops
         rule: fix ASAN errors in chain priority to textual names
         tests: shell: add regression test for double-free crash bug
         evaluate: handle invalid mapping expressions in stateful object
         evaluate: Fix incorrect checking the `base` variable in case of IPV6


author: gaihuiying <eaglegai@163.com> - 1:1.0.8-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:ct expectation: fix 'list object x' vs. 'list objects in table' confusion
         tests: shell: connect chains to hook point


author: gaihuiying <eaglegai@163.com> - 1:1.0.8-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         parser_json: release buffer returned by json_dumps
         parser_json: fix crash in json_parse_set_stmt_list
         parser_json: fix handle memleak from error path
         parser_json: fix several expression memleaks from error path
         libnftables: Zero ctx->vars after freeing it


author: eaglegai <eaglegai@163.com> - 1:1.0.8-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         evaluate: don't allow nat map with specified protocol
         rule: return error if table does not exist
         json: make sure timeout list is initialised
         evaluate: don't update cache for anonymous chains
         json: return error if table does not exist
         json: don't BUG when asked to list synproxies
         evaluate: compact STMT_F_STATEFUL checks
         evaluate: only allow stateful statements in set and map definitions
         optimize: expand expression list when merging into concatenation
         netlink: fix stack overflow due to erroneous rounding
         netlink: bogus concatenated set ranges with netlink message overrun
         netlink: fix crash when ops doesn't support udata
         netlink: Catch unknown types when deserializing objects
         netlink: Avoid potential NULL-ptr deref parsing set elem expressions
         netlink: Avoid crash upon missing NFTNL_OBJ_CT_TIMEOUT_ARRAY
         evaluate: don't BUG on unexpected base datatype
         src: BASECHAIN flag no longer implies presence of priority expression
         parser_bison: only reset by name is supported by now


author: gaihuiying <eaglegai@163.com> - 1:1.0.8-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         segtree: fix string data initialisation
         src: netlink: netlink_delinearize_table() may return NULL
         src: ensure chain policy evaluation when specified
         src: fix memory leak in anon chain error handling
         mnl: silence compiler warning
         datatype: Increase symbolic constant printer robustness
         evaluate: follow prefix expression recursively if needed


author: yaoxin <yao_xin001@hoperun.com> - 1:20.12.1-1
changelog:
  - Update to 20.12.1:
    * CVE-2024-27983 - Assertion failed in node::http2::Http2Session::~Http2Session()
      leads to HTTP/2 server crash- (High)
    * CVE-2024-27982 - HTTP Request Smuggling via Content Length Obfuscation - (Medium)
    * llhttp version 9.2.1
    * undici version 5.28.4


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 1:20.12.1-2
changelog:
  - fix building w/ clang: only apply '-fno-ipa-icf' for gcc && disable LTO for clang + ld.bfd
  - improve the handling of trilling whitespaces in C/CXXFLAGS


author: Ge Wang <wang__ge@126.com> - 1:20.12.1-3
changelog:
  - CVE-2023-45853 - Reject overflows of zip header fields in minizip
  - CVE-2024-5274 - Using FunctionParsingScope for parsing class static
  - CVE-2024-5535 - Fix SSL_select_next_proto
  - CVE-2024-7971 - Spill all loop inputs before entering loop


author: wangkai <13474090681@163.com> - 1:20.18.2-1
changelog:
  - Update to 20.18.2
  - Fix CVE-2025-23083 CVE-2025-23085 CVE-2025-23084 CVE-2024-36137
    CVE-2024-22018 CVE-2024-22020


author: wangkai <13474090681@163.com> - 1:20.18.2-5
changelog:
  - Fix CVE-2025-55130, CVE-2025-55131, CVE-2025-55132,
    CVE-2025-59465, CVE-2025-59466, CVE-2026-21637


author: wangkai <13474090681@163.com> - 1:20.18.2-7
changelog:
  - Followup fix CVE-2026-21637 and fix CVE-2026-21710, CVE-2026-21713,
    CVE-2026-21714, CVE-2026-21715, CVE-2026-21716, CVE-2026-21717


author: leiju <leiju4@huawei.com> - 0.1.3-2
changelog:
  - delete ExclusiveArch:i386 i486 i586 i686 pentium3 pentium4 athlon geode x86_64 armv3l armv4b armv4l armv4tl armv5tl armv5tel armv5tejl armv6l armv6hl armv7l armv7hl armv7hnl armv8l armv8hl armv8hnl armv8hcnl noarch


author: yyjeqhc <jialin.oerv@isrc.iscas.ac.cn> - 0.2.17-3
changelog:
  - Migrated legacy `import pango` and `pangocairo` usage to modern PyGObject (`gi.repository.Pango`, `PangoCairo`)
  - Replaced all legacy constants (`pango.STRETCH_...`) with `Pango.Stretch.XXX` enums


author: yixiangzhike <yixiangzhike007@163.com> - 0.9.12-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Move temporary files from /var/run to /run to delete warning in installing


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p15-8
changelog:
  - Type:CVE
  - ID:CVE-2023-26551
  - SUG:NA
  - DESC:make sure the buffer has enough room for the input extra characters


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p15-10
changelog:
  - Type:CVE
  - ID:CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26554,CVE-2023-26555
  - SUG:NA
  - DESC:change the patch of CVE-2023-26551 and fix CVE-2023-26555


author: andy <liuyang01@kylinos.cn> - 2.0.16-12
changelog:
  - backport patches from upstream
  - libnuma: Make numa_available respect EPERM
  - libnuma: fix nodemask allocation size for get_mempolicy


author: Ruozhu Li <liruozhu@huawei.com> - 1.00.029-1
changelog:
  - Added the function of sending a notification message to the switch when the software starts, and the switch sending domain members to the host, improving the reliability of software upgrade scenarios.
  - Add more connection parameter support, consistent with nvme cli.
  - Bond ports can join the domain and automatically establish a connection.


author: Ge Wang <wangge20@h-partners.com> 2.10.15-1
changelog:
  - Fix build failure due tu ruby updated to version 3.1.3
  - Modify version to match version of obs-server


author: yanglongkang <yanglongkang@h-partners.com> - 0.34.7-4
changelog:
  - Replace SELinux deprecated functions
  - Replace deprecated libxml2 calls
  - Fix implicit cast from const to non const


author: LHesperus <liuchanggeng@huawei.com> -v2.1.0-1
changelog:
  - remove the logger.h interface and add TRACE interface, increase safe_queue wait time to 5s
  - support reload log-level online
  - adapt analysis on riscv
  - add load base sched instance
  - v2.0.6-3 add adapt dynamicsmt analysis if smt is not enable
  - fix code check
  - add trace log and change level intf and delete logger
  - smc-d analysis fix inconsistency in the display of zero connection
  - v2.0.6-2 add realtime compile macro
  - v2.0.6-1 add smc_acc.yaml check and some logs
  - add net_hardirq_tune_data.h
  - fux binary coredump
  - v2.0.5-3 fix xcall analysis issues
  - v2.0.5-2 improve some output format
  - add xcall prefetch
  - network interface plugin : adapt same nic with different ifindex
  - v2.0.5-1 fix issues
  - v2.0.4-1 add docker coordination burst tune
  - add multi net path tune and analysis
  - add error log and params check
  - v2.0.3-3 oeaware-sdk enhances user permissions
  - v2.0.3-2 Fixed memory leak issues:
    - Fixed unsubscribeHandler topic deserialize memory leak
    - Fixed analysis module memory leak
  - Enhanced eBPF functionality:
    - Set memory lock limit to infinity for eBPF
    - Used eBPF to collect thread information
  - Network improvements:
    - Fixed ntoh port error
    - Added support for attaching all network interfaces
    - Used tcp-set-state to adapt k8s docker
  - New features:
    - Added xcall parameters
    - Added support for docker coordination burst analysis
    - Added parameter validation
    - Added NUMA parallel scheduler tuning support
  - Other improvements:
    - Fixed header files and added CI test
  - v2.0.3-1: Refactored and enhanced the analysis module:
    - Added scenario-aware analysis for multiple optimization plugins
    - Introduced command-line result viewing capability
    - Implemented Markdown format output support
  - Add new plugin: smt,binary,hirq


author: fly_1997 <flylove7@outlook.com> -v2.1.1-1
changelog:
  - add hwprobe_analysis for RISC-V
  - fix error logger info
  - support kernel cluster scheduler
  - adapt for kylin-v10-sp3
  - realtime tune add new tuning item
  - fix smc insmod err
  - realtime tune skip grubby update
  - add hwprobe_tune hwprobe_ext_zbb_tune for RISC-V
  - add high_load value check


author: wangshuai <wangshuai321@huawei.com> - 1.1.6-3
changelog:
  - Update the pci.ids file
  - Remove unused variable in cdrom test suite
  - Update test_guide doc
  - Unify the location for downloading kernel source RPMs
  - Optimize kabiwhitelist and system test


author: xiaochn <xiaochuannan@inspur.com> - 1.1.7-1
changelog:
  - Add KylinSec 3.5.3 support
  - Fix the problem of disk size calculation
  - Fix bcm57414 nic test failed issue
  - Change the format of date
  - Fixed a bug where a non-existent logger level was used
  - Update README.md
  - Fix vgpu testing issue


author: hewanhan <hewanhan@h-partners.com> - 1.1.10-0
changelog:
  - Add kernel support of openeEuler 24.03 LTS SP4
  - Fix false positives in the system testsuite on x86


author: liuqingtao <liu.qingtao2@zte.com.cn> - 1.1.10-1
changelog:
  - cherry picked from openeuler/oec-hardware PR#325 commit:24e6c49b
  - Modify ipmi item to support more common BMC detection scenarios


author: JofDiamonds <kwb0523@163.com> - 1.1-5
changelog:
  - fix some review issues:
    1.fix segment fault triggered by unsupported command operations
    2.fix incorrect use of securec function parameters
    3.remove redundant cmd option 'V'


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 1.0-5.7
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC:add riscv64 subarch specific changes

   * Tue Oct 14 2025 yangchaohao <yangchaohao@huawei.com> - 1.0-5.6
   	 - Type:NA
   	 - ID:NA
   	 - SUG:NA
   	 - DESC:modify repo for openEuler-24.03-LTS-SP4


author: yangchaohao <yangchaohao@huawei.com> - 1.0-5.9
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC:fix wrong metalink url of update-source

   * Thu Dec 25 2025 jchzhou <zhoujiacheng@iscas.ac.cn> - 1.0-5.8
   - Type:NA
   - ID:NA
   - SUG:NA
   - DESC:add riscv64 metalink fixes


author: Kai Liu <kai.liu@windriver.com> - 0.3.25-5
changelog:
  - Don't run make tasks in background sub-shell, as this causes
    severe issue. Use the _smp_mflags macro instead. See issue
    IB3EV0 for more detail.


author: xu_ping <707078654@qq.com> - 3.24.0-1
changelog:
  - Upgrade version to 3.24.0
    * Add support for FIPS-session mode
    * Updates to harden against RSA timing attacks
    * Add option to show the master key verification patterns of secure keys
    * Add support for exporting a key or certificate as URI-PEM file
    * Performance improvements for attribute retrieval
    * Add support for SHA-2 mechanisms
    * Experimental support for IBM Dilithium via OpenSSL OQS provider
    * Support live guest relocation for protected key (PKEY) operations
    * Add support for CKA_ALWAYS_AUTHENTICATE
    * Add support for CKD_*_SP800 KDFs for ECDH
    * Add support for SHA based key derivation mechanisms
    * Add support for PKCS#11 v3.0 SHA3 mechanisms
    * Add support for building Opencryptoki on the IBM AIX platform
    * Add support for the CCA token on non-IBM Z platforms (x86_64, ppc64)
    * Add support for protecting tokens with a token specific user group
    * Add support for combined CKA_EXTRACTABLE and CKA_IBM_PROTKEY_EXTRACTABLE
    * Add support for Koblitz curve secp256k1. Requires CCA v7.2 or later


author: zhang_wenyu <zhang_wenyu@hoperun.com> - 3.25.0-1
changelog:
  - Upgrade version to 3.25.0
    * Add support for PKCS#11 v3.0 SHAKE key derivation
    * Add support for PKCS#11 v3.0 SHA3 and SHA3-HMAC mechanisms
    * Add support for PKCS#11 v3.0 SHA3 mechanisms and MGFs for RSA-OAEP
    * Add support for PKCS#11 v3.0 SHA3 variants of RSA-PKCS and ECDSA mechanisms
    * Add support for CCA AES CIPHER secure key types
    * Add support for the CKM_ECDH1_DERIVE mechanism
    * Add support for the CKM_AES_KEY_WRAP[_*] mechanisms
    * Add support for the CKM_RSA_AES_KEY_WRAP mechanism
    * Add support for the CKM_ECDH_AES_KEY_WRAP mechanism
    * Add a tool for import and exporting PKCS#11 keys to a KMIP server
    * Add support for opaque secure key blob import via C_CreateObject
    * Add support for key wrapping with AES-GCM
    * Add support for newer CCA versions on s390x and non-s390x platforms
    * Add support for CKM_AES_GCM (single-part operations only)


author: Funda Wang <fundawang@yeah.net> - 0.23.0-7
changelog:
  - fix CVE-2024-8443, CVE-2024-45615, CVE-2024-45616,
    CVE-2024-45617, CVE-2024-45618, CVE-2024-45619, CVE-2024-45620


author: chenyanpanHW <chenyanpan@huawei.com> - 2.0.0-26
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-multicast-set.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-notify-systemd-of-start-up.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-null-pointer-deref.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-openssl-1.1-fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-cve-2016-7567.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-cve-2017-17833.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/CVE-2012-4428-fix-handling-of-string-list-in-slp_common-c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Fix-slp_iface-c-comma-expression-so-it-works-as-designed.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Daemon-sends-wrong-service-reply-when-security-is-enabled.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Fix-DAAddresses-hostname-resolution-issue.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Change-default-slpreg-connection-from-UDP-to-TCP.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Fix-interface-parsing-code-to-look-for-null-ifc-addrs.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Fix-broadcast-functionality.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Properly-initialize-xcastsocks-for-error-exit.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Fix-xrealloc-to-properly-free-original-pointer-on-resize.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/CVE-2019-5544.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: xingwei <xingwei14@h-partners.com> - 2.0.0-27
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Introduce epoch command to slove package upgrade failure problem


author: zhangbinqin<zhangbinqin@h-partners.com> - 9.6p1-13
changelog:
  - Type:CVE
  - CVE:CVE-2026-35414 CVE-2026-35385 CVE-2026-35386 CVE-2026-35387 CVE-2026-35388 
  - SUG:NA
  - DESC:fix CVE-2026-35414 CVE-2026-35385 CVE-2026-35386 CVE-2026-35387 CVE-2026-35388


author: baiguo <baiguo@kylinos.cn> - 0.4.34-2
changelog:
  - Use vasprintf() if available for error messages and otherwise vsnprintf();orccompiler, orcparse: Use secure UCRT printing functions on Windows


author: jiangchuangang <jiangchuangang@huawei.com> - 2022.7-1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:update to 2022.7
    add skip-if-etc-mtab-is-not-a-symlink-of-proc-self-mounts.patch for test failed


author: chenyanpanHW <chenyanpan@huawei.com> - 2.4.13-14
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0001-Drop-module-long-test.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: liweigang <liweiganga@uniontech.com> - 3.6-2
changelog:
  - remove patch support gpt_sync_mbr
  - file: huawei-bugfix-add-support-of-gpt_sync_mbr.patch
  - file: add support for gpt_sync_mbr and fix failure of it.


author: wangkai <13474090681@163.com> - 6.2.2-4
changelog:
  - Fix CVE-2024-45769,CVE-2024-45770
  - Fix buffer sizing checks in pmstore PDU handling (RHEL-57805)
  - Guard against symlink attacks in pmpost program (RHEL-57810)
  - Fix libpcp_web webgroup slow request refcounting (RHEL-58306)
  - Updated pmdahacluster for newer crm_mon versions (RHEL-50693)


author: hugel <gengqihu2@h-partners.com> - 10.42-12
changelog:
  - DESC:sync patches from upstream
         backport-Further-ASCII-tests-and-minor-bugfix-plus-ChangeLog-.patch
         backport-avoid-inconsistency-between-d-and-digit-when-using-a.patch
         backport-Fix-the-lookahead-after-d-or-posix-to-skip-whitespac.patch
         backport-Improve-error-offsets-for-character-classes-548.patch
         backport-Non-recursive-scan-prefix-in-JIT-560.patch


author: zouzhimin <zouzhimin@kylinos.cn> - 0.11.7-13
changelog:
  - fix: Support for other distributions and delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/do-not-support-cluster-setup-with-udp-u-transport.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Support-for-openEuler.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/fix-do-not-put-empty-uid-gid-options-to-an-uidgid-fi.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/fix-stonith-level-validation.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Fix-pcsd-ruby.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/update-crm_mon-schemas-for-tests.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/add-dtos-and-converting-functions-for-resources-stat.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/fixes-after-review.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/store-clone-instance-id-in-resource-status-dtos.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/increase-a-timeout-in-a-test.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Export-rule-constraints-in-a-non-deprecated-way.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/backport-fix-stdout-wrapping-to-terminal-width.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/backport-fix-booth-destroy-for-arbitrators.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/fix-tests-for-tornado-6.5.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


author: zouzhimin <zouzhimin@kylinos.cn> - 0.11.7-14
changelog:
  - fix stdout wrapping to terminal width and modify spec file, sed command to replace "patch3" with "patch1"


author: tangyuchen <tangyuchen5@huawei.com> - 2.0.0-1
changelog:
  - update to 2.0.0
    - Adjust USB drivers path at run-time via environment variable PCSCLITE_HP_DROPDIR
    - Add '--disable-polkit' option
    - Reset eventCounter when a reader is removed
    - Add "polkit" in "pcscd -v" output if enabled
    - Doxygen: document SCARD_E_INVALID_VALUE for some functions
    - use secure_getenv(3) if available
    - Some other minor improvements


author: Guofeng Yue <yueguofeng@h-partners.com> - 4.5-12
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: modify "--source_ip" to "--bind_source_ip" to fix init connection establishment with specific interface


author: Funda Wang <fundawang@yeah.net> - 4:5.38.0-11
changelog:
  - split out patch adding link to libperl.so into two separated patches,
    and sync it with mageia, which is a better version than fedora
  - disable cleaning empty perl directories
  - use git lfs storage


author: chenyanpanHW <chenyanpan@huawei.com> - 4.050-2
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/backport-DBD-mysql-4.050-Remove-a-useless-shebang-from-DBD-mysql.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: sqfu <dev01203@linx-info.com> - 1.647-1
changelog:
  - update version to 1.647
  - Fix Makefile rules for Changes
  - Another example to bind columns 
  - Fix fetchall_arrayref for undefined NAME


author: Funda Wang <fundawang@yeah.net> - 1:0.280236-2
changelog:
  - Link XS modules to libperl.so with EU::CBuilder on Linux
  - drop useless perl(:MODULE_COMPAT) requirement


author: dongyuzhen <dongyuzhen@h-partners.com> - 2:3.51-1
changelog:
  - upgrade vertion to 3.51:
    - fix OVERLOAD and FALLBACK handling
    - fix ExtUtils::ParseXS compatibility with perl < 5.8.8
    - add support for elifdef and elifndef
    - allow symbolic alias of default function
    - better support for duplicate ALIASes
    - make versions in ExtUtils-ParseXS consistent


author: pengjian <pengjian23@mails.ucas.ac.cn> - 1:0.82-3
changelog:
  - Introduced environment variable-controlled polling timeouts 
  for the close and connection-keeping functions in the os_unix.c file.


author: dongyuzhen <dongyuzhen@h-partners.com> - 1:2.57-1
changelog:
  - upgrade version to 2.57:
    - fix long standing bug that duplicate options were not detected when the options differ in case while ignore_case is in effect
    - allow periods in option names
    - move Getopt::Long::Parser to a separate module and add documentation
    - do not use Getopt::Long to establish Getopt::Long::Parser version
    - adapt tests for perl core


author: lichaoran <pkwarcraft@hotmail.com> 1.3293-3
changelog:
  - add buildRequires: add gcc as we using it to compile
  - and perl-generators to auto-generate perl module provides


author: dongyuzhen <dongyuzhen@h-partners.com> - 0.42-1
changelog:
  - upgrade version to 0.42:
    - updated for Perl v5.14 - use `package NAME VERSION` syntax
    - fix typo 'behvior'
    - fix for DragonflyBSD and IPV6_V6ONLY from core perl


author: dongyuzhen <dongyuzhen@h-partners.com> - 2.084-1
changelog:
  - upgrade version to 2.084:
    - various fixes for edge cases
    - update documentation to reflect default SSL_version


author: Wenlong Zhang <zhangwenlong@loongson.cn> - 2.084-2
changelog:
  - Passing NO_NETWORK_TESTING=1 as an environment variable
    solves the interactive issue required for using rpmbuild locally


author: YangengLiu <dev01202@linx-info.com> - 2.098-1
changelog:
  - update version to 2.098
  - upgrading from plain socket (no object) by using correct fdopen mode +< instead of <+.
  - make sure that an unblessed sockets gets blessed in place instead of using new_from_fd.


author: Funda Wang <fundawang@yeah.net> - 0.68-4
changelog:
  - use perl-generators to scan META.json for requirements
  - Drop perl(t::common.pl) requires
  - drop useless perl(:MODULE_COMPAT) requirement


author: chenyanpanHW <chenyanpan@huawei.com> - 6.07-8
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/LWP-Protocol-https-6.06-Debian-746576-don-t-disale-verification-if-only-host.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/LWP-Protocol-https-6.06-Debian-746576-fix-test-make-it-workable-for-Crypt-SS.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: woody2918 <wudi1@uniontech.com> - 0.29-1
changelog:
  - Update version to 0.29
  - Fixed numeric zero and empty string argument handling in translit() & translit_reverse().


author: zhangyao <zhangyao108@huawei.com> - 0.047-1
changelog:
  - Upgrade version to 0.047
  - Filter out script documentation from scripts
  - Don't manify podless modules/scripts 
  - Compile all .c files in src/
  - Add module sharedirs
  - Add src/ to include paths


author: zhangyao <zhangyao108@huawei.com> - 1:20231213-1
changelog:
  - Upgrade version to 20231213
  - Update certificates
  - Stop installing mk-ca-bundle.pl script
  - Switched tests from Test to Test::More


author: woody2918 <wudi1@uniontech.com> - 0.45-1
changelog:
  - update version to 0.45
  - Make sure to stringify versions so that they are quoted when they are encoded in JSON
  - Allow to parse class|role NAME VERSION


author: wujie <wujie@nj.iscas.ac.cn> - 0.61-20
changelog:
  - Add riscv64 support from http://fedora.riscv.rocks/koji/buildinfo?buildID=186681
    Author is David Abdurachmanov <david.abdurachmanov@sifive.com>


author: woody2918 <wudi1@uniontech.com> 0.242-1
changelog:
  - update version to 0.242
  - Corrected test dependencies
  - Packaging fix to stop installing boilerplate.pl


author: huyubiao <huyubiao@huawei.com> - 2:3.48-1
changelog:
  - update version to 3.48
    - Accept TAP version 14
    - Fix HARNESS_PERL_SWITCHES=-I handling in TAP::Harness::Env
    - Color the "ok"s as well.
    - Skip symlink tests on msys2
    - Use use absolute path for executable tests
    - Space-quote executable if has spaces
    - Avoid using Errno::EINTR directly for platforms without it
    - stop calling import on App::Prove plugins


author: Funda Wang <fundawang@yeah.net> - 1.16-8
changelog:
  - force stdin of analysor script
  - merge two META.json/yml analysors for runtime and buildtime into one
  - correctly dump content of META.yml files
  - dump build requires also
  - provide perlmeta_buildrequires script
  - use perl-generators to scan META.json for requirements
  - add perl_from_meta from mageia so that dependencies could be
    fetched from META.json/yml
  - update to 1.16
    * Squash multiple perl(:VERSION) symbols into one
    * Remove perl dependencies that are provided in the same file
    * Fix broken call to perl.prov when filenames contain spaces
    * Add perltest.attr to generate dependencies for tests sub-packages


author: zhangyao <zhangyao108@huawei.com> - 2:2.36-1
changelog:
  - DESC: Upgrade version to 2.36, test code modify, build optimization, avoid the use of magic numbers, deal compilation warning


author: gaihuiying <eaglegai@163.com> - 0.9.5-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add macros to control if need libdrm, pango, libpng and if need to exclude bootlog


author: shiptux <shiptux@gmail.com> - 1.12.5p2-2
changelog:
  - Backport upstream b33e02d2 (issue #4347): use 96-bit IV in testEncryptDecryptGCM
    so it passes under OpenSSL 3


author: duyiwei <duyiwei@kylinos.cn> - 1:4.9.4-10
changelog:
  - Type:bugfix
  - CVE:CVE-2024-9355、CVE-2019-9514、CVE-2024-24791、CVE-2022-32189、CVE-2022-41715、CVE-2022-2880、CVE-2022-1962、CVE-2023-45290、CVE-2024-24783、CVE-2024-24785
  - SUG:NA
  - DESC: Optimize spec files and fix CVE in batches through rebuild


author: duyiwei <duyiwei@kylinos.cn> - 1:4.9.4-11
changelog:
  - Type:bugfix
  - CVE:CVE-2024-9676,CVE-2024-9675, CVE-2024-9407,CVE-2024-9341
  - SUG:NA
  - DESC: fix CVE-2024-9676,CVE-2024-9675, CVE-2024-9407, and CVE-2024-9341


author: zhangxingrong <zhangxingrong@uniontech.cn> - 1.19-4
changelog:
  - Fix poptCallbackType documentation
  - Fix multiple typos in comments
  - Fix potential double-free in test3.c


author: Chenxi Mao <chenxi.mao@suse.com> - 13.01.0000-3
changelog:
  - Add libpq-devel version dependency.
  - Bump version release to 3, because previous change didn't bump release number.


author: heppen <hepeng68@huawei.com> - 1.1.0-3
changelog:
  - Bug fix: fix build warning.
  - Bug fix: export PWR_SYS_GetRtPowerInfo.
  - Bug fix: data collection task intercept invalid task type.


author: heppen <hepeng68@huawei.com> - 1.1.0-4
changelog:
  - Bug fix: memcpy null pointer, array out of bounds, struct align.
  - Bug fix: get watt state will failed at the first time.
  - Bug fix: use process name to query pid but return all pids.
  - Bug fix: mismatch fopen/pclose and popen/fclose, useless if statement.


author: heppen <hepeng68@huawei.com> - 1.1.0-5
changelog:
  - Bug fix: SIGPIPE cause powerapi server exit.
  - Bug fix: pstree command is too slow to get all pid.
  - Bug fix: set smart grid state failed.
  - Bug fix: get watt attr and task list is not correct.


author: Zihao Xue <xuezihao@huawei.com> - 1.1.0-6
changelog:
  - Bug fix: heap buffer overflow caused by sending incomplete strings.
  - Bug fix: too long strings into QueryProcs causes services broke down.


author: Funda Wang <fundawang@yeah.net> - 2.15-2
changelog:
  - fix build with latest gettext
  - harden systemd service file from openSUSE
  - add patch regarding risc-v arch support


author: gaihuiying <eaglegai@163.com> - 2.5.0-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:pre-created upstream default lock dir
         Openssl engine API is deprecated for a while thus disable it


author: gaihuiying <eaglegai@163.com> - 2.5.0-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream
         Fixing up parsing in radiusclient.conf
         Add configure check to see if we have struct sockaddr_ll


author: chenyanpanHW <chenyanpan@huawei.com> - 3.22-52
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/procmail-3.24-rhconfig.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/procmail-3.15.1-man.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/procmail-3.22-truncate.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/procmail-3.24-ipv6.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Zhu Jin <zhujin18@huawei.com> - 4.0.4-8
changelog:
  - library: address a potential race resulting in a fault and avoid strdup() calls in sd2proc() if possible


author: shenzhongwei <shenzhongwei@kylinos.cn> - 1.3.8b-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix: %patchN is deprecated (7 usages found), use %patch N (or %patch -P N)


author: wangkai <13474090681@163.com> - 1.3.9a-1
changelog:
  - Update to 1.3.9a for fix CVE-2026-42167
  - Add 'proxy' sub-package with unbundled mod_proxy
  - Use libsodium to provide ed25519 key support for mod_sftp
  - Update logrotate snippet to use try-reload-or-restart rather than reload
    for distributions with systemd 229 or later


author: dongyuzhen <dongyuzhen@h-partners.com> - 25.1-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: distinguish between statically and dynamically compiled pc files and cmake dir to prevent BEP binary differences


author: Funda Wang <fundawang@yeah.net> - 25.1-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: fix build with wrong permission
  - DESC: fix conflicts with protobuf2
  - DESC: revert:distinguish between statically and dynamically compiled pc files and cmake dir to prevent BEP binary differences


author: zhengxiaoxiao <zhengxiaoxiao2@huawei.com> - 25.1-13
changelog:
  - Type:CVE
  - CVE:CVE-2026-0994
  - SUG:NA
  - DESC:Fix Any recursion depth bypass in Python json_format.ParseDict


author: liuchao <liuchao173.huawei.com> - 1.5.0-1
changelog:
  - upgrade to 1.5.0:
    - Makefile.am: change link order
    - GitHub actions fail on Windows due to missing unzip command
    - Export and install CMake targets
    - Use CMAKE_CURRENT_BINARY_DIR instead of CMAKE_BINARY_DIR
    - remove deprecated functionality
    - Avoid "unused variable" compiler warning
    - Update autotools
    - Support for new Google protobuf 22.x, 23.x releases
    - Miscellaneous fixes
    - Remove protobuf 2.x support
    - Silence some compiler diagnostics
    - Fixing MSVC build for Msbuild and Makefile generators


author: Funda Wang <fundawang@yeah.net> - 17.0-2
changelog:
  - add upstream patch fixing running tests with impossible alignments
  - move language files into lib package
  - cleanup spec


author: yixiangzhike <yixiangzhike007@163.com> - 3.1.1-1
changelog:
  - update version to 3.1.1
    - Fixed bug in NotAny where expr parse action was not being run
    - Fix regex matching for Python quoted strings
    - Make create_diagram() code compatible with latest version of railroad-diagrams
    - Support Python 3.12
    - Small perf optimization for `expr | ""` mapping to `Optional(expr)`
    - Redo QuotedString '\' escape handling as a state machine
    - Add ParseResults.deepcopy()
    - Remove ^ and $ tags from pp.common.url regex
    - Added DelimitedList class, for better handling of naming and diagramming
    - Deprecate ParserElement.validate()
    - Added new class method ParserElement.using_each
    - Fix bug in delimited_list
    - Added python_quoted_string; fixed exception messages for ParseElementEnhance subclasses
    - Enable packrat in verilogParse.py by default
    - Add embed argument to create_diagram
    - Add support for slice in expr[] notation
    - Fixed bug in srange
    - Added Lox language parser


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 7.4.4-1
changelog:
  - Update package with version 7.4.4
    Fix non-string constants at the top of file being detected as docstrings on Python>=3.8.
    Removed unhelpful error message from assertion rewrite mechanism
    Updated documentation to refer to hyphenated options
    Markers are now considered in the reverse mro order to ensure base class markers are considered first
    Improved disclaimer on pytest plugin reference page to better indicate this is an automated
    Added ExceptionInfo.from_exception() <pytest.ExceptionInfo.from_exception>


author: wangkai <13474090681@163.com> - 3.13.5-1
changelog:
  - Update to 3.13.5
    * Fix CVE-2026-22815, CVE-2026-34513, CVE-2026-34514, CVE-2026-34516,
      CVE-2026-34517, CVE-2026-34518, CVE-2026-34519, CVE-2026-34520, CVE-2026-34525


author: Yu Peng <yupeng@kylinos.cn> - 1.4.0-1
changelog:
  - Upgrade to 1.4.0.
    Added decorator functionality to Signal as a convenient way to add a callback 
    Improved type safety by allowing callback parameters to be type checked


author: zhangxingrong <zhangxingrong@uniontech.com> - 1.4.6-1
changelog:
  - Update to version 1.4.6
    - Nothing in the library's logic. Just a fix in one of the test cases.
      And some changes to prevent same situation from happening again.
    - Fixed incorrect handling of newlines.
    - STARTTLS is now fully enforced if used.


author: jiangxinyu <jiangxinyu@kylinos.cn> - 1.13.1-1
changelog:
  - Update package to version 1.13.1
    Improve re-writer implementation, fixing chain and adding support to callables


author: yueyuankun <yueyuankun@kylinos.cn> - 23.1.0-1
changelog:
  - Update to 23.1.0
  - The InvalidHash exception is deprecated in favor of InvalidHashError
  - argon2.hash_password(), argon2.hash_password_raw(), and argon2.verify_password() that have been soft-deprecated since 2016 are now hard-deprecated
  - Official support for Python 3.11 and 3.12
  - Python 3.6 is not supported anymore
  - argon2.exceptions.InvalidHashError as a replacement for InvalidHash
  - salt parameter to argon2.PasswordHasher.hash() to allow for custom salts


author: jiangxinyu <jiangxinyu@kylinos.cn> - 1.0.5-1
changelog:
  - Update package to version 1.0.5
  - fix error handling that might result in null exception
    cleanups of exception handling : errors must now have an exception
    Handling NameError is not working


author: yaoxin <1024769339@qq.com> - 1.0.6-1
changelog:
  - Update to 1.0.6:
    * drop testing and support for Python3.8, add Python 3.13, change document to reflect this.
    * implement safe_getattr and safe_format functions; fix bugs in UNSAFE_ATTRS and UNSAFE_ATTRS_DTYPES usage
    * make all procedure attributes private to curb access to AST nodes, which can be exploited
    * improvements to error messages, including use ast functions to construct better error messages
    * remove import of numpy.linalg, as documented
    * update doc description for security advisory


author: GuoCe <guoce@kylinso.cn> - 1.34.79-1
changelog:
  - update to version 1.34.79
  - A lot of functions have been updated, 
  - such as adding IAMIdentityCenterInstanceArn parameter to CreateAccountSubscription.


author: xu_ping <707078654@qq.com> - 7.0.0-1
changelog:
  - Upgrade version to 7.0.0
  - Python 3.12 support and python 3.7 no longer supported
  - Add support bind mount propagation.


author: xu_ping <707078654@qq.com> - 1.3.0-1
changelog:
  - Update package to version 1.3.0
  - Python 3.12 support.
  - fix some bugfix
  - Update internally pinned pytest-flask to 1.3.0 for Flask >=3.0.0 support


author: xigaoxinyan <xigaoxinyan@huawei.com> - 18.0.0-11
changelog:
  - Drop docs package: sphinx Update make docs build error and Fix build error caused by py3.10+ wildcard


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 8.22.1-1
changelog:
  - Update package to version 8.22.1
    Use check_same_thread=False by default for history sqlite db
    Use prompt_toolkit.application.create_app_session for debugger prompt
    Provide and easier way to generate magics and pre-post hooks
    Refuse to install event loop hooks when not using prompt_toolkit
    Add hack to change traceback syntax highlighting


author: xuchenchen <xuchenchen@kylinos.cn> - 3.1.3-2
changelog:
  - Type: CVE
  - CVE: CVE-2024-34064
  - SUG: NA
  - DESC: fix disallow invalid characters in keys to xmlattr filter


author: fuanan <fuanan3@h-partners.com> - 3.17.3-1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:update version to 3.17.3
         drop python 2 support
         datatime fixes
         Remove ancient pathlib requirement for python3. It is part of the stdlib since Python 3.4


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 5.7.1-1
changelog:
  - Update package with version 5.7.1
    Derive JupyterAsyncApp from JupyterApp
    Modernize event loop behavior
    Enable async JupyterApp
    Clean up lint and add downstream checks
    Add python 3.12 support and update typings for traitlets 5.11


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 0.9.0-1
changelog:
  - Update package with version 0.9.0
    Clean up linting and fix a bug that was found
    Adopt ruff format
    Normalize "jsonschema[format-nongpl]" in pyproject.toml


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 0.5.2-1
changelog:
  - Update package with version 0.5.2
    Set terminals_available to False when not enabled
    Update ruff config


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 0.5.3-1
changelog:
  - Update package with version 0.5.3
    Drop support for Python 3.7
    Add direct dependency on ipykernel
    Adapt to level config to match other Jupyter repos


author: xuhe <xuhe@kylinos.cn> - 2.27.3-1
changelog:
  - Update to 2.27.3
  - Fix test util typings.
  - Use json5 typings.
  - Use updated releaser workflows.
  - Ignore pageconfig file if JSON is zero-length.
  - For v2 extensions parse entrypoint data.
  - Add util to get consolidated page_config from higher levels.
  - Move ENV_CONFIG_PATH import back into _get_config_manager.
  - Load overrides once, rather than in each settings handler.
  - Run docs on ubuntu.
  - Fix handling language packs for pseudo language.


author: chenhuihan <chenhuihan@huawei.com> - 2.8.0-1
changelog:
  - Update package to version 2.8.0:
    - export PyJWKClientConnectionError class
    - pre-autoupdate mirrors-mypy blacken-docs black
    - allows passing of ssl.SSLContext to PyJWKClient


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 1.5.3-1
changelog:
  - Update package to version 1.5.3
    Fix mkdocs serve sometimes locking up all browser tabs when navigating quickly
    Add many new supported languages for "search" plugin - update lunr-languages to 1.12.0
    Built-in themes now also support Chinese (Traditional, Taiwan) language


author: dongyuzhen <dongyuzhen@h-partners.com> - 3.2.1-1
changelog:
  - upgrade version to 3.2.1:
    - add Tadpole graph
    - fix listing of release notes on Releases page
    - fix syntax warning from bad escape sequence
    - fix triangles to avoid using is to compare nodes
    - fix error message for nx.mycielski_graph(0)
    - disallow negative number of nodes in complete_multipartite_graph
    - fix names of small graphs
    - fix extendability function name in bipartite.rst
    - improve error messages for misconfigured backend treatment


author: Shinwell Hu <micromotive@qq.com> - 1.11.1.1-4
changelog:
  - Python-ninja should never obsolate ninja-build.
  - Rename /usr/bin/ninja shipped in this package to /usr/bin/python-ninja


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 23.2-1
changelog:
  - Update package with version 23.2
    Add python 3.12 support.
    Add types for packaging.version._Version.
    Add platform tag support for LoongArch.
    Update pyupgrade to Python 3.7+
    Support enriched metadata.


author: kaijie Gu <jiekgu@foxmail.com> - 24.1-1
changelog:
  - Update package with version 24.1
    Add support for Python 3.13
    Fix typo in _parser docstring
    Modernise type annotations using FA rules from ruff
    Document markers.default_environment()


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 3.0.43-1
changelog:
  - Update package to version 3.0.43
    Make formatted_text.split_lines() accept an iterable instead of lists only.
    Disable the IPython workaround (from 3.0.41) for IPython >= 8.18.
    Restore signal.SIGINT handler between prompts.


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 3.7.0-1
changelog:
  - Update version to 3.7.0
    Drop GIL during long-running proj database calls
    Add is_deprecated and get_non_deprecated() to CRS
    Add runtime & compiled PROJ versions
    Add Windows system path to delvewheel add-path
    Adds codespell to pre-commit hooks


author: yaoxin <yao_xin001@hoperun.com> - 5.1.0-1
changelog:
  - Update to 5.1.0
  - Bug Fixes:
    * Handle RESP3 sets as Python lists (#3324)
    * Prevent async ClusterPipeline instances from becoming "false-y" (#3068)
    * Add hostname field to _parse_node_line (#3343)
    * More docs fixes (#3326)
    * Delete the first-defined (and thus "duplicate") Script class (#3333)
    * Catch a known DeprecationWarning when calling .close() (#3335)
    * Add missed redismod at test_commands.py (#3369)
  - Breaking Changes:
    * Timeseries insertion filters for close samples (#3228)
    * Enhanced classes string representation (#3001)
    * Partial clean up of Python 3.7 compatibility (#2928)


author: lixiaoyong <lixiaoyong@kylinos.cn> - 5.2.0-1
changelog:
  - Upgrade version to 5.2.0
    Extend AggregateRequest with scorer argument
    Pin pytest-profiling version


author: jiangxinyu <jiangxinyu@kylinos.cn> - 0.18.6-1
changelog:
  - Update package to version 0.18.6
  - Fix issue with multiple document intermixing YAML 1.2 and YAML 1.1, the VersionedResolver now resets


author: guochao <guochao@kylinos.cn> - 1.10.2-1
changelog:
  - Update package to version 1.10.2
  - bump pypa/cibuildwheel from 2.19.2 to 2.20.0
  - fix handling of unset --debug flag


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 1.11.1-1
changelog:
  - Update package to version 1.11.1
    Fix finding cargo artifacts when filenames are empty
    Drop support for Python 3.8
    Support free-threaded Python
    Support adding custom env vars


author: liutao <liutao1@kylinos.cn> - 1.13.3-1
changelog:
  - upgrade to 1.13.3-1
  - Handle matrices of zero columns correctly in the Matrix constructor
  - NumPy numbers can be used with clebsch_gordan


author: fuanan <fuanan3@h-partners.com> - 1.8.1-1
changelog:
  - update version to 1.8.1
  - bump http-proxy from 1.17.0 to 1.8.1
  - fix broken link
  - add chunked inference
  - fix attrs in custom predict fn for tensorboard
  - fixing infer edge case issue
  - explicitly require bash(Change /bin/sh to /bin/bash in build_pip_package.sh)
  - add support for witwidget for JupyterLab 3.x.


author: yaoxin <yao_xin001@hoperun.com> - 6.4.1-1
changelog:
  - Update to 6.4.1
    * Parsing of the ``Transfer-Encoding`` header is now stricter.
    * Handling of whitespace in headers now matches the RFC more closely.
    * ``tornado.curl_httpclient`` now prohibits carriage return and linefeed headers in HTTP headers
    (matching the behavior of ``simple_httpclient``).


author: liuzhilin <liuzhilin@kylinos.cn> - 0.25.1-1
changelog:
  - Upgrade package 0.25.1
  - Fix crash when importing trio in embedded Python on Windows, and other installs that remove docstrings.


author: caiyuxin <caiyuxin@kylinos.cn> - 2024.10.21.16-1
changelog:
  - Update package to version 2024.10.21.16
    * update calver to include hour
    * Add Django trove classifiers for 5 and upcoming 5.2 release.


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 2025.5.9.12-1
changelog:
  - Update package to version 2025.5.9.12 and fix build error for setuptools 78.1.1
    Add trove classifier for GraalPython
    feat: add free-threading classifiers
    refactor: add numbers to force correct sort
    Add several missing languages
    Add Trove classifier for Python 3.15
    Don't assume basename of sys.executable is "python"
    Add entry point to enable installing with pipx or uvx
    Add classifier for Wagtail 7
    add __all__ to declare public API
    Add Pyodide framework
    Remove unused and "Voluntarily retired" licenses
    Add upcoming django CMS version
    Fix out-of-order placement of "quantum computing"


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 4.10.0-1
changelog:
  - Update package with version 4.10.0
    Add support for PEP 728, PEP 742
    Drop runtime error when a read-only TypedDict item overrides a mutable one.
    Speedup issubclass() checks against simple runtime-checkable protocols by around 6%.
    Add support for PEP 705, adding typing_extensions.ReadOnly.
    Drop support for Python 3.7 (including PyPy-3.7).


author: zeng liwen <zengliwen@kylinos.cn> - 4.12.2-1
changelog:
  - Update to 4.12.2
  - Fix the runtime behavior of type parameters with defaults (PEP 696)
  - Fix AttributeError when using typing_extensions.runtime_checkable in combination with typing.Protocol on Python 3.12.2 or newer
  - Fix Protocol tests on Python 3.13.0a6 and newer
  - Improve the implementation of type parameter defaults (PEP 696)
  - Add typing_extensions.get_annotations, a backport of inspect.get_annotations that adds features specified by PEP 649
  - Fix regression in v4.12.0 where specialization of certain generics with an overridden __eq__ method would raise errors


author: wangjunqi <wangjunqi@kylinos.cn> - 5.2-1
changelog:
  - Update package to version 5.2
    Added a pre-commit config
    Updated python versions [hugovk]
    Added type hints for the public functions
    Moved to using pyproject.toml for project config.


author: jiangxinyu <jiangxinyu@kylinos.cn> - 4.3.0-1
changelog:
  - Update package to version 4.3.0
    Fixed inability to pass total_tokens as a keyword argument on trio


author: liuzhilin <liuzhilin@kylinos.cn> - 4.4.0-1
changelog:
  - Update package to version 4.4.0
  - Added __slots__ to AsyncResource so that child classes can use __slots__.
  - Fixed the entire task group being cancelled if a TaskGroup.start() call gets cancelled.
  - Fixed MemoryObjectStream dropping an item if the item is delivered to a recipient that is waiting to receive an item but has a cancellation pending.
  - Fixed erroneous TypedAttributeLookupError if a typed attribute getter raises KeyError.


author: jiangxinyu <jiangxinyu@kylinos.cn> - 4.6.1-1
changelog:
  - Update package to version 4.6.1
  - Bugfix: Fixed feed_data after feed_eof assertion errors on asyncio
    Bugfix: Fixed missing or inconsistent error when acquiring already owned Lock


author: yaoxin <yaoxin30@huawei.com> - 1.4.4-3
changelog:
  - Modified the build and install phases to adapt to the compilation and installation modes of Python 3.10


author: chenyanpanHW <chenyanpan@huawei.com> - 1.11.0-2
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/beaker-use-system-paste.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Weifeng Su <suweifeng1@huawei.com> - 5.0.8-1
changelog:
  - upgrade to 5.0.8
    -fix a regression error in 5.0.7
    -update testing to validate against python version 2.7 and 3.5-3.11
    -update broken links / no-existent services and references


author: Liu Wang <1823363429@qq.com> -1.25.0-1
changelog:
  - update package to version 1.25.0
  - Added commit_prefix option to Version.serialize() to insert a prefix when serializing commit IDs.
  - Added escape_with option to Version.serialize() to customize how branch names are escaped.
  - Fixed: Deprecation warning from re.sub() using Python 3.13+.


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 24.1.0-1
changelog:
  - Update package with version 24.1.0
    Added a default to an internal API that is used by scikit-build-core.


author: lixiaoyong <lixiaoyong@kylinos.cn> - 1.25.0-1
changelog:
  - Upgrade package version to 1.25.0
    Add .venv to the list of directories that cannot be traversed
    Output from the core Application utility now writes to stderr


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 1.0.4-1
changelog:
  - Upgrade package with version 1.0.4
    Add support for HTTPS proxies.
    Handle sni_hostname extension with SOCKS proxy.
    Handle HTTP/1.1 half-closed connections gracefully.
    Add support for Python 3.12 and drop Python 3.7 support.
    Async support becomes fully optional.
    Add support for synchronous TLS-in-TLS streams.


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 0.27.0-1
changelog:
  - Upgrade package with version 0.27.0
    Support HTTPS proxies.
    Drop support for Python 3.7 and Add support for Python 3.12.
    Add support for httpcore 1.0.
    Respect the http1 argument while configuring proxy transports.
    Fix RFC 2069 mode digest authentication.


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 1.0.0-1
changelog:
  - Update package with version 1.0.0
    Fix tests for nbclient v0.8
    Remove caps & bump Python for SPEC 0


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 8.6.0-1
changelog:
  - Update package with version 8.6.0
    Update typing for traitlets 5.13
    Enable strict typing
    Test on python 3.12


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 2.2.4-1
changelog:
  - Update package with version 2.2.4
    Fix websocket handler incorrectly inheriting from APIHandler rather than JupyterHandler
    Remove unused notebook config entry point
    Support latest version of typescript-language-server


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 2.13.0-1
changelog:
  - Update package with version 2.13.0
    Add an option to have authentication enabled for all endpoints by default
    Websockets: add configurations for ping interval and timeout
    Log extension import time at debug level unless it's actually slow
    Add support for async Authorizers
    Support get file(notebook) md5
    Update kernel env to reflect changes in session
    Support external kernels


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 4.1.2-1
changelog:
  - Upgrade package with version 4.1.2
    Fix highlight sequencing when replacing text in code cells
    Restore notebook scrolling on dragging a cell to the viewport edge
    Fix typing in editable elements inside of open shadow DOM
    Correct Alt + number keyboard shortcuts command map
    Update jupyter-collaboration for the Binder environment
    Add virtual scrollbar component to windowed lists.
    Load custom CSS functionality and documentation
    Add plugin manager and extension locks


author: zhaojingyu <zhaojingyu@kylinos.cn> - 4.1.6-1
changelog:
  - Upgrade package with version 4.1.6
  - Fix outputarea collapse expand
    Disable placeholder for password input


author: muxiaohui <muxiaohui@kylinos.cn> - 4.3.0-1
changelog:
  - Update version to 4.3.0
    Add setting to enable single-click navigation in file browser.
    Adds command to toggle cell outputs.
    Add kernel selection to Galata notebook creation.


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 4.3.5-1
changelog:
  - Upgrade package with version 4.3.5
    Fix scrolling and selection restoration on undo/redo
    Fix windowing crash due to out-of-bounds access
    Increase color contrast of operators in code editor
    Fix jupyverse installation instructions
    Use Zulip for instant messaging


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 0.3.0-1
changelog:
  - Update package with version 0.3.0
    Upgrade extension to work with jupyterlab4
    Delete lock file and rerun jlpm install
    Remove dev dependencies and auto generated hatch file
    Make build work with python 3.12
    Remove package-lock.json from git tracking


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 1.2.0-1
changelog:
  - Upgrade package with version 1.2.0
    Support running LibCST on Python 3.12 and drop support for running it on 3.8
    Allow Element::codegen to be used by external users
    Fix parsing list matchers without explicit brackets
    Fix filepathprovider generic type


author: xu_ping <707078654@qq.com> - 0.46.2-1
changelog:
  - Update to 0.46.2:
    * M2Crypto closes SSL connection on closing HTTPS Connection, and
      some other related issues
    * Modernize C API by eliminating use of deprecated
      PyBytes_AsStringAndSize and related functions with Python
      Buffer Protocol
    * Add logging support to C extension code sending messages to the
      Python logging
    * Reverted removal of demo/ subdirectory
    * Correct license to BSD-2-Clause and update references
    * Specify in setup.cfg that we require Python >= 3.6


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 1.0.1-1
changelog:
  - Update package with version 1.0.1
    Don't import MkDocsConfig (does not exist on MkDocs 1.3-)
    Add Markdown anchors and aliases
    Preserve HTML data attributes (from spans to anchors)
    Support [`identifier`][] with pymdownx.inlinehilite enabled
    Recognize links with multi-line text


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 2.3.0-1
changelog:
  - Update package with version 2.3.0
    Change excluded file log level to INFO
    Add source attribute to authors. Aims to support GitHub and GitLab in mkdocs material.
    Add support for GitLab


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 6.0.4-1
changelog:
  - Update package with version 6.0.4
    Add mkdocs>=1.4 as dependency.
    Dropped Python upper version requirement bound.
    Fixed some warnings not shown when missing start and end delimiters in some contexts


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 0.6.1-1
changelog:
  - Update package with version 0.6.1
    Fix compatibility with MkDocs 1.5+
    Fix when markdown extensions is set to None


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 1.3.1-1
changelog:
  - Update package to version 1.3.1
    Add official support for Python 3.11 and 3.12.
    Remove support for Python 3.7.
    FIX: Better deprecation warning.


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 0.8.0-1
changelog:
  - Update package with version 0.8.0
    Remove python 3.7 support and upgrade setup-python action
    Upgrade setup-python action to v5


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 7.16.6-1
changelog:
  - Update package with version 7.16.6
    Prevent leading whitespace in markdown code blocks from being stripped
    Update base.tex.j2 for macro compatibility with newer versions of Pandoc
    Allow including text/x-rst outputs in rst conversion, transition away from text/restructuredtext
    Add support for mistune 3.1.0
    [HTMLExporter] Initialize resources before widget filtering
    Add a toggle to skip the svg encoding of images
    Support configureable width and height of reveal presentations
    Convert coalescese_streams function to CoalesceStreamsPreprocessor


author: openeuler_bot <infra@openeuler.sh> - 7.17.0-1
changelog:
  - Add support for arbitrary browser arguments (version:7.17.0).
  - Fix QtPNGExporter returning empty bytes on macOS (version:7.17.0).
  - Fix CVE-2025-53000: Secure Inkscape Windows path (registry first + block CWD) (version:7.17.0).
  - Drop support for Python 3.8, fix the CI tests (version:7.17.0).


author: YangengLiu <dev01202@linx-info.com> - 7.17.1-1
changelog:
  - update version to 7.17.1
    * Allow configureable WebPDF JavaScript processing timeout.
    * Fix when checking template paths on shared filesystems.
    * Tweak webpdf template logic to fix duplicate extension problem.


author: shixuantong <shixuantong1@huawei.com> - 1:1.24.3-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:remove f2py form python3-numpy package. It is in python3-numpy-f2py
         Do not pack open-source test case files


author: zhaojingyu <zhaojingyu@kylinos.cn> - 2.2.2-1
changelog:
  - Update to 2.2.2
  - Avoid issuing a spurious DeprecationWarning when a custom DataFrame or Series subclass method is called


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 2.1.8-1
changelog:
  - Update package with version 2.1.8
    Bugfix: Can't include nested data files in built wheel.
    Rename tag-pattern to tag_regex in the docs.
    Copytree handle existing dirs.
    Normalize the dist info name in the wheel.
    Path to uri expansion in dependency string.


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 1.0.0-1
changelog:
  - Update package to version 1.0.0
    Rewrite the entire library using dataclasses.
    Add more rigorous testing.


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 2.10.6-1
changelog:
  - Update package to version 2.10.6
    Remove Cython & Move to pyproject.toml
    Move settings to pydantic-settings
    Add hooky config to pyproject.toml
    Add github token to cherry-pick
    Add strict option to BaseConfig


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 2.27.2-1
changelog:
  - Update package to version 2.27.2
    Fix linux PGO wheel build
    Forward default_value calls to the underlying schema for DefinitionRefValidator
    Include JSON Schema input core schema in function schemas


author: jiangxinyu <jiangxinyu@kylinos.cn> - 2024.2-1
changelog:
  - Update package to version 2024.2
    Update sklearn.neighbors hook to account for removed hidden import


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 10.7-1
changelog:
  - Update package to version 10.7
    Allow configuring custom repository providers based off the existing providers.
    Admonitions and Details now allow configuring custom block classes and default titles.
    Ensure that Keys does not parse base64 encoded URLs.
    Allow PathLike objects for base_path to better support interactions with MkDocs.
    Officially support Python 3.12 and drop Python 3.7 support.
    Add new combine_header_slug option in legacy Tabbed extension and new Block Tab extension


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 0.9.0-1
changelog:
  - Update package with version 0.9.0
    Update event loop handling
    Allow passing request_timeout to client_fetch
    Update ruff and typings


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 3.15.0-1
changelog:
  - Update package with version 3.15.0
    Make requirements compile disable pip's require-virtualenv flag always
    Update setuptools config
    Add dependabot configuration for GitHub Actions
    Bump actions/setup-python from 3 to 4
    Activate numpy tests on Python 3.11
    Add setup-cfg-fmt to pre-commit


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 1.3.1-1
changelog:
  - Update package with version 1.3.1
    Update workflows and tests.
    Use trusted publishing and configure Renovate.
    Drop 3.7 support and do sys path hack.


author: Funda Wang <fundawang@yeah.net> - 4.18.2-34
changelog:
  - disable automatic maintenance when autopatching with git
    https://github.com/git/git/commit/1942d48380fec53f76361e9adebef15b5db9628a
  - sync patches within branches


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 0.7.0-1
changelog:
  - Update package to version 0.7.0
    Add support for extensionless Python files for server
    Fix configuration inheritance for configurations specified in the LSP settings
    Fix placement of inline parameter comments
    Add a subcommand to generate dependency graphs
    Add Python version support to ruff analyze CLI
    Add exclude support to ruff analyze
    Fix parentheses around return type annotations
    Fix codeblock dynamic line length calculation for indented docstring examples
    Refurb implement hardcoded-string-charset
    Refurb Count codepoints not bytes for slice-to-remove-prefix-or-suffix


author: zhangxianting <zhangxianting@uniontech.com> - 3.19.2-1
changelog:
  - Update to 3.19.2:
  - Updated test & build matrix to include Python 3.12 and use GitHub Actions as a Trusted Publisher (OIDC) https://github.com/simplejson/simplejson/pull/317


author: wangkai <13474090681@163.com> - 3.19.2-2
changelog:
  - Fixed the packaging process does not include __pycache__ tests
  - Obsoletes empty package python-simplejson-help


author: jiangxinyu <jiangxinyu@kylinos.cn> - 1.0.0-1
changelog:
  - Update package to version 1.0.0
  - Dependencies: use pip-tools + GH Action to keep dependencies updated


author: jiangxinyu <jiangxinyu@kylinos.cn> - 1.0.8-1
changelog:
  - Update package to version 1.0.8
  - Fix multiple term matching when word appears in both title and document


author: zhangxianting <zhangxianting@unionech.com> - 2.12.1-1
changelog:
  - Increase the upper limit version of typing_extensions to fix install, typing_extensions>=3.6.6,<4.6.0 to typing_extensions>=3.6.6,<=4.10.0


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 2.13.0-1
changelog:
  - Update package to version 2.13.0
    Add support for datetime.timedelta to time_machine.travel().
    Add shift() method to the time_machine pytest fixture.
    Fix documentation about using local time for naive date(time) strings.


author: Liu Wang <1823363429@qq.com> - 0.13.3-1
changelog:
  - Update package to version 0.13.3
    fix: register encoder's doc incorrectly mentions TypeError
    feat: add .item() method to retrieve the item object
    Fix: Inconsistent newlines on Windows
    Replace pytest's legacy tmpdir fixture with tmp_path
    Prevent repeated whitespace items in arrays
    Aot setitem not implemented fix
    Fix removal of items from Arrays
    Fix: reject single keys that aren't strings
    fix: Invalid serialization when overwriting out-of-order table key
    fix: Dumping a subelement of a parsed toml fails starting on 4rd level of nesting
    fix: ensure unique table indices when adding items to out-of-order tables
    fix: add newline indentation after existing items in Container class
    fix: Missing newline at end of file with multiple array of tables can corrupt during dumping


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 5.14.1-1
changelog:
  - Upgrade package with version 5.14.1
    Add option to load traitlets values from environement.
    Cleanup after remove Python 2 support.
    Add more project URLs, trove classifiers.
    Added type hints to HasTraits.observe() and friends.


author: gaihuiying <eaglegai@163.com> - 1.17.1-15
changelog:
  - Type:CVE
  - CVE:CVE-2025-11411
  - SUG:NA
  - DESC:Additional fix for CVE-2025-11411 to include YXDOMAIN and non-referral nodata answers in the mitigation


author: gaihuiying <eaglegai@163.com> - 1.17.1-16
changelog:
  - Type:cves
  - CVE:CVE-2026-33278,CVE-2026-42944,CVE-2026-41292,CVE-2026-42959,CVE-2026-42960
  - SUG:NA
  - DESC:fix CVE-2026-33278,CVE-2026-42944,CVE-2026-41292,CVE-2026-42959,CVE-2026-42960


author: gaihuiying <eaglegai@163.com> - 1.17.1-17
changelog:
  - Type:cves
  - CVE:CVE-2026-32792,CVE-2026-42923,CVE-2026-40622,CVE-2026-42534,CVE-2026-44390,CVE-2026-44608
  - SUG:NA
  - DESC:fix CVE-2026-32792,CVE-2026-42923,CVE-2026-40622,CVE-2026-42534,CVE-2026-44390,CVE-2026-44608


author: chengyechun <chengyechun1@huawei.com> - 1.26.18-2
changelog:
  - Type:CVE
  - CVE:CVE-2024-37891
  - SUG:NA
  - DESC:fix CVE-2024-37891 Strip Proxy-Authorizatioin header on redirects


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 1.26.18-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Prevent issue in HTTPResponse().read() when decoded_content is True and then False


author: yangzhuangzhuang<yangzhuangzhuang1@huawei.com> - 0.3.12-3
changelog:
  - The "no acceptable C compiler found" error message is displayed during compilation.Therefore,add buildrequires gcc.


author: wangqiang <wangqiang1@kylinos.cn> - 8.5.1-1
changelog:
  - Update to 8.5.1
  - NEW: Formally support Python 3.11 (no change).
  - NEW: Add support for Python 3.12 (pathlib changes).
  - NEW: Drop Python 3.7 support.
  - FIX: Fix handling of current directory when magic and non-magic patterns are mixed in glob pattern list.
  - FIX: Fix issue with type check failure in wcmatch.glob.


author: lixiaoyong <lixiaoyong@kylinos.cn> - 0.14.1-1
changelog:
  - Upgrade package to version 0.14.1
    - Drop support for Python older than 3.6
    - Additional ruff/Pyflakes/codespell fixes


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-69
changelog:
  - Migration/urma:reduce plflash update time
  - Migration/urma:avoid clearing remote dirty bitmap after migration completes
  - Migration/urma:add detailed downtime statistics for live migration
  - Migration/urma:support jfr post list mode over URMA
  - Migration/urma:move registration and unregistration ram to thread
  - Migration/urma:Fix VM crash due to packet loss during URMA-based memory migration
  - target/i386: csv: Enhance get/release logic for shared memory region of CSV3 VM
  - target/i386: csv: Remove all nodes within dma unmapping addr range
  - vfio/container: unregister csv3 mmio listener in vfio_disconnect_container()
  - system/physmem: Try to use 2M THP if CSV3 guest RAM backend is memfd
  - target/i386: csv: Support issuing the LAUNCH_FINISH_EX API with host-data for CSV3 guest
  - target/i386: csv: Introduce host-data=str option
  - arm/vfio: provide a vfio-platform device type that supports passthrough of mmcd(MAMI config device) into virtual machines.
  - Migration/urma:fix memory leak caused by hashmap in urma migration
  - bugfix: add PAS_EXPANSION config to support mmcd device
  - ub: fix ub ers map failed 
  - ub: fix vm reset core when config vfio-ub device


author: fanmingzhan <fanmingzhan@h-partners.com> - 11:8.2.0-70
changelog:
  - vfio: fix tpm test case, align the hignmem_platform_bus parameter, and modify the pas_expansion assignment


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-71
changelog:
  - Revert "target/arm/kvm-rme: Add DMA remapping for the shared memory region"
  - arm/kvm-rme: Add support for hisi-cca huge page mapping method
  - arm/kvm-rme: Add device assignment method for cca realm vm
  - arm/kvm-rme: fix qom definition and update KVM_EXIT_ARM_RME_DEV value


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-72
changelog:
  - ub: don't check ers addr size is power of 2
  - ub: support process msg code exch
  - ub: replace malloc with g_malloc0
  - Migration/urma:explicitly set URMA JFS tp_type to URMA_CTP
  - MAINTAINERS: add me as maintainer to virtio-snd
  - virtio-snd: remove TODO comments
  - virtio-snd: handle 5.14.6.2 for PCM_INFO properly(CVE-2026-3196)
  - virtio-snd: fix max_size bounds check in input cb(CVE-2026-3195)
  - virtio-snd: tighten read amount in in_cb(CVE-2026-3195)
  - hw/arm: Close unreleased out_fault_fd
  - pci: avoid the info qtree crash caused by arm-smmuv3-accel


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-73
changelog:
  - target/arm: add kunpeng 920 V1 support
  - target/arm: add kunpeng 950 V1 support
  - target/arm: add kunpeng 920 V2 support
  - hw/virtio/virtio-crypto: verify asym request size(CVE-2025-14876)
  - cryptodev-builtin: Limit the maximum size(CVE-2025-14876)
  - block/vmdk: fix OOB read in vmdk_read_extent()(CVE-2026-2243)
  - lsi53c895a: keep a reference to the device while SCRIPTS execute(CVE-2024-6519)


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-74
changelog:
  - virtio-blk: avoid using ioeventfd state in irqfd conditional
  - machine: Use error handling when CPU type is checked
  - hw/core/cpu: Update description of CPUState::node
  - hw/cpu/core: Cleanup unused included header in core.c
  - hw/cpu/cluster: Cleanup unused included header in cluster.c
  - hw/arm/bcm2836: Simplify use of reset-cbar property
  - hw/arm/bcm2836: Use ARM_CPU mp-affinity property
  - hw: Simplify accesses to the CPUState::start-powered-off property
  - hw/ppc/xive2_regs: Remove unnecessary cpu.h inclusion
  - hw/mips: Inline bios.h definitions
  - docs: use "buses" rather than "busses"
  - hw/ppc/spapr_cpu_core: Access QDev properties with proper API
  - hw/vfio: fix iteration over global VFIODevice list
  - vfio/iommufd: Remove the use of stat() to check file existence
  - vfio/container: Rename vfio_init_container to vfio_set_iommu
  - target/sparc: Simplify qemu_irq_ack
  - tests/avocado: add a simple i386 replay kernel test
  - tests/avocado: modernise the drive args for replay_linux
  - block: Fix crash when loading snapshot on inactive node
  - roms/efi: clean up edk2 build config
  - roms/efi: exclude efi shell from secure boot builds
  - Migration/urma:Avoid polling jfc timeouts resulting from hardware failures.
  - hyperv/syndbg: check length returned by cpu_physical_memory_map()(CVE-2026-3842)
  - ub: fix ers update error
  - kvm/arm/virt: Implement kvm-vtimer-status
  - hw/arm/virt: Implement timer early inject PV support
  - Migration/urma: replace ulseep with usleep in poll_jfc_wait


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-76
changelog:
  - target/arm: Conditionally add KVM writable properties based on RME
  - Migration/urma:adapt urma to use udma device to process iterative migration
  - Migration/urma: drop unused index in qemu_urma_init_ram_blocks
  - ub_ummu: default uninstall all tecte when cfgi all invalidate and free vdev when tecte uninstall
  - ub ummu: realize mapt_cmdq_ctxt_attr regster process
  - vfio ub: support config fd for vfio-ub device
  - hw/core/machine-smp: Deprecate unsupported "parameter=1" SMP configurations
  - hw/core/machine-smp: Calculate total CPUs once in machine_parse_smp_config()
  - hw/core/machine: Introduce the module as a CPU topology level
  - hw/core/machine: Support modules in -smp
  - hw/core: Introduce module-id as the topology subindex
  - hw/core: Support module-id in numa configuration
  - hw/i386: split x86.c in multiple parts
  - i386/cpu: Fix i/d-cache topology to core level for Intel CPU
  - i386/cpu: Use APIC ID info to encode cache topo in CPUID[4]
  - i386/cpu: Use APIC ID info get NumSharingCache for CPUID[0x8000001D].EAX[bits 25:14]
  - i386/cpu: Consolidate the use of topo_info in cpu_x86_cpuid()
  - i386/cpu: Introduce bitmap to cache available CPU topology levels
  - i386: Split topology types of CPUID[0x1F] from the definitions of CPUID[0xB]
  - i386/cpu: Decouple CPUID[0x1F] subleaf with specific topology level
  - i386: Introduce module level cpu topology to CPUX86State
  - i386: Support modules_per_die in X86CPUTopoInfo
  - i386: Expose module level in CPUID[0x1F]
  - i386: Support module_id in X86CPUTopoIDs
  - i386/cpu: Introduce module-id to X86CPU
  - tests: Add test case of APIC ID for module level parsing
  - hw/i386/pc: Support smp.modules for x86 PC machine
  - i386: Add cache topology info in CPUCacheInfo
  - i386/cpu: Use CPUCacheInfo.share_level to encode CPUID[4]
  - i386/cpu: Use CPUCacheInfo.share_level to encode CPUID[0x8000001D].EAX[bits 25:14]
  - i386: Add support for SUCCOR feature
  - i386/cpu: fixup number of addressable IDs for processor cores in the physical package
  - kvm: Allow kvm_arch_get/put_registers to accept Error**
  - i386/cpu: Don't enumerate the "invalid" CPU topology level
  - hw/core: Make CPU topology enumeration arch-agnostic
  - qapi/qom: Define cache enumeration and properties for machine
  - hw/core: Check smp cache topology support for machine
  - hw/core: Add a helper to check the cache topology level
  - hw/core/machine-smp: Initialize caches_bitmap before reading
  - hw/core/machine-smp: Fix error message parameter
  - i386/cpu: Extract a common fucntion to setup value of MSR_CORE_THREAD_COUNT
  - i386/cpu: Drop the variable smp_cores and smp_threads in x86_cpu_pre_plug()
  - i386/cpu: Drop cores_per_pkg in cpu_x86_cpuid()
  - i386/topology: Update the comment of x86_apicid_from_topo_ids()
  - i386/topology: Introduce helpers for various topology info of different level
  - target/i386/cpu: Consolidate the use of warn_report_once()
  - i386/cpu: Track a X86CPUTopoInfo directly in CPUX86State
  - i386/cpu: Hoist check of CPUID_EXT3_TOPOEXT against threads_per_core
  - cpu: Remove nr_cores from struct CPUState
  - i386/cpu: Set up CPUID_HT in x86_cpu_expand_features() instead of cpu_x86_cpuid()
  - i386/cpu: Set and track CPUID_EXT3_CMP_LEG in env->features[FEAT_8000_0001_ECX]
  - hw/core/machine: Reject thread level cache
  - i386/cpu: Support module level cache topology
  - i386/cpu: Update cache topology with machine's configuration
  - i386/pc: Support cache topology in -machine for PC machine
  - i386/cpu: add has_caches flag to check smp_cache configuration
  - i386/cpu: Introduce enable_cpuid_0x1f to force exposing CPUID 0x1f
  - i386/cpu: Move adjustment of CPUID_EXT_PDCM before feature_dependencies[] check
  - i386/cpu: Rename enable_cpuid_0x1f to force_cpuid_0x1f
  - i386/cpu: Refine comment of CPUID2CacheDescriptorInfo
  - i386/cpu: Add descriptor 0x49 for CPUID 0x2 encoding
  - i386/cpu: Add default cache model for Intel CPUs with level < 4
  - i386/cpu: Present same cache model in CPUID 0x2 & 0x4
  - i386/cpu: Consolidate CPUID 0x4 leaf
  - i386/cpu: Drop CPUID 0x2 specific cache info in X86CPUState
  - i386/cpu: Add x-vendor-cpuid-only-v2 option for compatibility
  - i386/cpu: Mark CPUID[0x80000005] as reserved for Intel
  - i386/cpu: Rename AMD_ENC_ASSOC to X86_ENC_ASSOC
  - i386/cpu: Fix CPUID[0x80000006] for Intel CPU
  - i386/cpu: Add legacy_intel_cache_info cache model
  - i386/cpu: Add legacy_amd_cache_info cache model
  - i386/cpu: Select legacy cache model based on vendor in CPUID 0x2
  - i386/cpu: Select legacy cache model based on vendor in CPUID 0x4
  - i386/cpu: Select legacy cache model based on vendor in CPUID 0x80000005
  - i386/cpu: Select legacy cache model based on vendor in CPUID 0x80000006
  - i386/cpu: Select legacy cache model based on vendor in CPUID 0x8000001D
  - i386/cpu: Use a unified cache_info in X86CPUState
  - i386/cpu: Introduce cache model for SierraForest
  - i386/cpu: Introduce cache model for GraniteRapids
  - i386/cpu: Introduce cache model for SapphireRapids
  - i386/cpu: Add a "x-force-cpuid-0x1f" property
  - i386/cpu: Enable 0x1f leaf for SierraForest by default
  - i386/cpu: Enable 0x1f leaf for SierraForest by default
  - i386/cpu: Enable 0x1f leaf for GraniteRapids by default
  - i386/cpu: Enable 0x1f leaf for SapphireRapids by default
  - i386/cpu: Mark EBX/ECX/EDX in CPUID 0x80000000 leaf as reserved for Intel
  - i386/cpu: Mark CPUID 0x80000007[EBX] as reserved for Intel
  - i386/cpu: Mark CPUID 0x80000008 ECX bits[0:7] & [12:15] as reserved for Intel/Zhaoxin
  - i386/cpu: Reorder CPUID leaves in cpu_x86_cpuid()
  - i386/cpu: Fix number of addressable IDs field for CPUID.01H.EBX[23:16]
  - i386/cpu: Fix cpu number overflow in CPUID.01H.EBX[23:16]
  - i386/cpu: Honor maximum value for CPUID.8000001DH.EAX[25:14]
  - hw/core: allow parameter=1 for SMP topology on any machine
  - docs/deprecated: Remove undeprecated SMP description
  - i386/tcg: Make CPUID_HT and CPUID_EXT3_CMP_LEG supported
  - i386/hvf: Make CPUID_HT supported
  - target/i386/cpu: Move addressable ID encoding out of compat property in CPUID[0x1]
  - target/i386: add compatibility property for pdcm feature


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-77
changelog:
  - system/physmem: Fix possible double free when destroy cpu address space
  - Migration: add virtcca secure CVM live migration support
  - Migration: add virtcca secure CVM live migration support
  - virtcca migration: bugfix, meson option 'virtcca_migration' default value set to disabled
  - ub: update VFIO UB IRQ index enum definitions
  - ub: add VFIO_UB_REINIT_IRQ_INDEX for reinit interrupt support
  - ub: return error code to vm
  - ub: fix passthrough errno to vm
  - ub: reinit irq set failed don't stop vm
  - migration/cgs: fix some function name spell error
  - migration/cgs: Fix mismatched allocator in write_numa_info_to_sysfs
  - ub: fix fill_rq_cq not checking fill_cq return value
  - ub: fix ub cq depth
  - ub: pass ub feature to guest os
  - migration/cgs: bugfix, adding poison ignore CONFIG_VIRTCCA_MIGRATION when building non-aarch64 target to avoid error


author: Fei Xu <xufei30@huawei.com> - 11:8.2.0-78
changelog:
  - 'system/physmem: disable guest RAM core dump for cca'
  - 'vhost: Remove unused log_fd variable in vhost_dev_log_resize()'
  - 'i386/cpu: Allow cache to be shared at thread level'
  - 'hw/vfio: Allow multiple vfio devices migration if none support P2P_MIGRATION


author: Jingwiw <wangjingwei@iscas.ac.cn> - 5.2.0+git6.3-1
changelog:
  - Init package from openSUSE: https://build.opensuse.org/package/show/home:neochapay:nemo:mw/qt5-qtfeedback


author: panchenbo <panchenbo@kylinsec.com.cn> - 5.15.10-5
changelog:
  - Backport ffmpeg: avcodec/x86/mathops: clip constants used with shift instructions within inline assembly


author: lifeifei <lifeifei@kylinos.cn> - 2.19-3
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Add the socket option IPV6_MULTICAST_LOOP to prevent the interface from autoconfiguring using RA messages sent by itself.


author: andy <liuyang01@kylinos.cn> - 0.8.0-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patches
         Use the right dev_t decoding for diskerror handler


author: shixuantong <shixuantong1@huawei.com> - 8.2-4
changelog:
  - Add shell command to switch bracketed-paste mode from on to off to keep consistent with realine-8.0


author: wangkai <13474090681@163.com> - 7.2.7-1
changelog:
  - Update to 7.2.7
  - Fix CVE-2021-32626 CVE-2021-32627 CVE-2021-32762 CVE-2021-32675
    CVE-2021-41099 CVE-2021-32628 CVE-2021-32687 CVE-2022-24735
    CVE-2022-24736 CVE-2022-3647 CVE-2022-3734 CVE-2022-35977
    CVE-2023-25155 CVE-2024-46981


author: zhouyihang <zhouyihang3@h-partners.com> - 0.9.1-4
changelog:
  - Type:requirements
  - Id:NA
  - SUG:NA
  - DESC:use libsoup2 instead of libsoup3 for build when no libsoup3 provided


author: sunsuwan <sunsuwan3@huawei.com> - 1.2.6-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:add a user directory when the rpc user directory does not exist


author: wangyueliang <wangyueliang@kylinos.cn> - 2022.16-4
changelog:
  - merge feature from branch openEuler-22.03-LTS-SP1：
  - DESC: add loongarch64 and sw_64 support
  - AUTHOR: panchenbo <panchenbo@kylinsec.com.cn>


author: dongyuzhen <dongyuzhen@h-partners.com> - 2.18-5
changelog:
  - revert: remove the require to rpm-build.For consistency with other community-released dependencies


author: Funda Wang <fundawang@yeah.net> - 3.2.7-6
changelog:
  - fix CVE-2024-12084, CVE-2024-12085, CVE-2024-12086, CVE-2024-12087,
    CVE-2024-12088, CVE-2024-12747


author: zhangyaqi <zhangyaqi@kylinos.cn> - 8.2312.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memory leak in omazureeventhubs on accepted PN_DELIVERY event


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 8.2312.0-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix passing the value to EscapeChar
         Do not free the uninitialized cstring
         Keep original free pattern
         network subsystem: improve connection failure error message
         Fix runConf NULL pointer refence
         rainerscript: do not try to call a function if it does not exist
         nsd_ptcp regression fix: remove debugging messages emited to stderr
         Fix legacy $ActionQueueDiscardMark parameter


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 8.2312.0-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:gnutls bugfix: Avoid blocking sockets during TLS handshake
         gnutls bugfix: Add timeout to GnuTLS handshake
         core: fix potential NULL ptr access on HUP in very early startup phase
         omfwd: fix segfault in UDP freeaddrinfo
         gnutls TLS driver: fix small memory leak
         rsyslog startup bugfix: cosmetic memory leak
         core: fix potential misadressing in sigmask
         covscan: remove defect type of RESOURCE_LEAK
         Fix a buffer overflow when the argument to replace is empty


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 8.2312.0-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:omusrmsg bugfix: potential null pointer dereference causes segfault
         omusrmsg bugfix: potential double free, which can cause segfault
         imjournal: fix double sd_journal_close() during thread cancellation
         imuxsock: Add statistics counter for discarded messages
         omjournal: Fix priority value
         fix stringop-overread warning in omusrmsg
         fix hashtable realloc memset range
         fix off-by-one buffer overflow


author: qujingling <qujingling@huawei.com> - 8.2312.0-10
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:imjournal: initialize instance fields to avoid invalid free
         imjournal: fix vulnerability in state file creation


author: woody2918 <wudi1@uniontech.com> - 1.15.0-1
changelog:
  - Upgrade to 1.15.0
  - Update reference to MiniTest -> Minitest
  - Add test (and fix support for) for Rack v2.1.x.


author: Ge Wang <wang__ge@126.com> - 0.19.1-1
changelog:
  - update to version 0.19.1
  - No more warnings triggered by enable_for_subprocesses.
  - Avoid trying to patch Process.fork when it isn't available.
  - Dropped support for Ruby 2.4, it reached EOL


author: ouyangminxiang <ouyangminxiang@kylinsec.com.cn> - 1.1.0-2
changelog:
  - add BuildRequires: rubygem-bigdecimal rubygem-io-console rubygem-openssl rubygem-psych 
    to resolve koji build error during check


author: liyanan <liyanan61@h-partners.com> - 1.4.0-1
changelog:
  - Update to 1.4.0
  - Faraday adapter exceptions namespace compatibility with Faraday v1
  - Add global config option `Typhoeus::Config.proxy`
  - Add cache adapters for Dails,Rails, and Redis


author: SPYFAMILY <xiexiunian@h-partners.com> - 0.1.68-11
changelog:
  - fix: KubeOS STIG rules bug (baseline text sync, SCE cleanup, new rule EC-261270, fix C-261396, baseline ID fixes)


author: xiefangqi <xiefangqi2@huawei.com> - 0.1.92.6
changelog:
  - Fix split_digits support to SentencepieceTrainer spec parser
  - Add sentencepiece.pc install
  - Add spm_train --help option
  - Fix FTBFS problem on armel/mips/powerpc/m68k/sh4
  - Fix endian problem on android plarform
  - Fix pb protobuf header file can't find problem
  - Restore the sentence boundary


author: zhengxiaoxiao <zhengxiaoxiao2@huawei.com> - 2:4.14.3-1
changelog:
  - update version to 4.14.3
    -Avoid null pointer dereference
    -Update utmp at an initial login
    -Merge libshadow and libmisc into a single libshadow
    -Adding the userdel and groupdel hooks to release tarball


author: yueyuankun <yueyuankun@kylinos.cn> - 15.7-21
changelog:
  - spec: Remove debugsource requirement from debuginfo
  - Allow debuginfo to be installed alone without pulling in the debugsource package.


author: wjiang <app@cameyan.com> -15.7-22
changelog:
  - Backport bugfix patches from upstream
  - Fix build with binutils 2.46 (c4665d2)
  - Fix memory leak on TPM log error in mirror_one_mok_variable (92630f2)


author: Keqian Zhu <zhukeqian1@huawei.com> - 1.0.0-4
changelog:
  - guestinfo: Take another VM stop reason to account
  - cpu_qos: Add aditional setting for cpu QOS
  - cachembw_qos: Add a job to sync VM pids to resctrl


author: Dongxu Sun <sundongxu3@huawei.com> - 1.0.0-6
changelog:
  - cpu_qos: Register reset_domain_bandwidth as exit func after adding power_qos job
  - power_qos/cachembw_qos: Add type check for environment variables


author: Dongxu Sun <sundongxu3@huawei.com> - 1.0.0-7
changelog:
  - docs-Use-chinese-description-instead-of-English-in-R.patch
  - Makefile-Use-strip-option-in-gcc.patch


author: liuqingtao <liu.qingtao2@zte.com.cn> -1.1.10-3
changelog:
  - optimized-RV-FindMatchLength-improving-compress-speed--upstream-accepted
  - DESC:Use-high-performance-FindMatchLength-to-Optimize for RV


author: zhengziyang <zheng.ziyang@zte.com.cn> -1.1.10-5
changelog:
  - backport：add rvv support for MemCopy64，upstream accepted
  - DESC:This PR add RVV to  optimize Memcopy64 function , improving compression speed


author: zhengziyang <zheng.ziyang@zte.com.cn> -1.1.10-6
changelog:
  - backport：gate__builtin_ctzll-behind-Zbb-to-avoid-10
  - DESC:RISC-V: use __builtin_ctzll only when Zbb is present


author: yaqiangchen <chenyaqiang@huawei.com> - 14.4.2.0-29
changelog:
  - Fix CVE-2021-33844,CVE-2023-32627,CVE-2021-23159,CVE-2023-34432
  - CVE-2023-34318,CVE-2021-23172,CVE-2021-3643,CVE-2021-23210
  - CVE-2022-31650,CVE-2023-26590,CVE-2022-31651,CVE-2023-32627
  - CVE-2017-18189


author: Dingli Zhang <dingli@iscas.ac.cn> - 1.1.10-2
changelog:
  - Fix errors due to wrong path in sqljet-build.xml
  - Add -Xconversiontimeout to avoid timeout errors for riscv64.


author: xinghe <xingheyd@163.com> - 7:6.6-8
changelog:
  - Type:cves
  - ID:CVE-2026-33526 CVE-2026-33515 CVE-2026-32748
  - SUG:NA
  - DESC:fix CVE-2026-33526 CVE-2026-33515 CVE-2026-32748


author: chenyanpanHW <chenyanpan@huawei.com> - 1.7.7-12
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0001-fix-maven-compiler-plugin-release-flag.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yixiangzhike <yixiangzhike007@163.com> - 1.9.15p5-7
changelog:
  - apply 2 patches: backport-sudo_rfc1938_setup--fix-out-of-bounds-read-if-the-.patch, backport-sudo_auth_init--Fix-setting-FLAG_ONEANDONLY-if-onl.patch


author: renoseven<dev@renoseven.net> - 1.2.2-4
changelog:
  - bugfix: fix rust 1.84 compile failure
  - bugfix: fix cannot find working directory
  - bugfix: fix set signal handler failure
  - bugfix: fix active accepted patch failure


author: renoseven<dev@renoseven.net> - 1.2.2-5
changelog:
  - feature: support riscv64
  - feature: support 'syscare rescan' command
  - feature: support patch blacklist / blocklist
  - feature: support custom kernel config
  - feature: support log config
  - feature: add metadata viewer
  - feature: add metadata generator
  - bugfix: supress rpm signature warnings
  - bugfix: remove build id check
  - bugfix: ignore useless sections
  - bugfix: fix attach non-exist process failure
  - bugfix: fix remote mmap failure
  - bugfix: fix some symbol resolving issue
  - bugfix: remove upatch failure process list
  - bugfix: remove root permission check


author: renoseven<dev@renoseven.net> - 1.2.2-6
changelog:
  - feature: upatch supports overridding line macros
  - bugfix: fix upatch id parsing error
  - bugfix: fix upatch object linker detection failure
  - bugfix: fix kernel module build failure
  - bugfix: fix kernel patch name length limitation
  - bugfix: fix multiple upatch-diff issues
  - bugfix: fix multiple upatch-manage issues
  - rpm: extract vendor from syscare-1.2.2.tar.gz to vendor.tar.gz


author: renoseven<dev@renoseven.net> - 1.2.2-7
changelog:
  - change: add debuginfo package version verification in syscare-build
  - change: rename "--keep-line-macros" to "--override-line-macros" in syscare-build
  - change: rename "--keep-line-macros" to "--override-line-macros" in upatch-build
  - bugfix: fix special section correlation failure
  - bugfix: fix compilation command misdetection
  - bugfix: fix incorrect upatch object lookup when upatch ID conflicts
  - bugfix: fix patch file disorder when building cumulative patches
  - bugfix: fix abnormal syscare CLI return value when external command failure
  - bugfix: fix stack check false warnings under boundary conditions
  - bugfix: fix build failure under Rust 1.89


author: zhangxianting <zhangxianting@uniontech.com> - 0.9-64
changelog:
  - Type:patch
  - CVE:NA
  - SUG:NA
  - DESC:patch hunk FAILED bacause of the arch judgement of sw_64 and loongarch64


author: laokz <zhangkai@iscas.ac.cn> - 0.9-67
changelog:
  - Type:fix
  - CVE:NA
  - SUG:NA
  - DESC:riscv64: reverse -static-pie patch due to unsupported tool-chains


author: lingsheng <lingsheng1@h-partners.com> - 6.04-16
changelog:
  - update libpng 1.6.36 to fix CVE-2011-2501 CVE-2011-2690 CVE-2011-2691
  - CVE-2011-2692 CVE-2011-3045 CVE-2011-3048 CVE-2012-3425 CVE-2015-7981
  - CVE-2015-8126 CVE-2015-8472 CVE-2015-8540 CVE-2016-10087 CVE-2017-12652


author: wjiang <app@cameyan.com> - 255-52
changelog:
  - backport community patches and skip bios_version test:
        backport-login-user-runtime-dir-free-ignored-sd_bus_error-avo.patch
        backport-login-user-runtime-dir-use-STRLEN-where-appropriate.patch
        backport-systemctl-gracefully-adjust-bus-transport-and-runtim.patch
        backport-journal-do-not-rotate-journal-when-MaxRetentionSec-i.patch
        backport-nspawn-use-strv_extend-and-friends-to-build-director.patch
        backport-nspawn-only-remount-usr-with-idmap-when-volatile-yes.patch
        backport-nspawn-mount-var-after-remount_idmap-when-volatile-s.patch
        backport-compress-avoid-a-bunch-of-div-by-zeroes.patch


author: Linux_zhang <244695981@qq.com> - 255-53
changelog:
  - sync community patches
    backport-journal-use-EBADMSG-for-invalid-data-in-file-mmap.patch
    backport-journal-replace-a-bunch-of-assert-with-friendlier-ch.patch


author: wulinfeng <wulinfeng@xfusion.com> - 255-55
changelog:
  - fix coredump generation when systemd-resolved and systemd-networkd service is started then uninstalled


author: langfei<langfei@huawei.com> - 4.5-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Resolve stap-exporter.service chenge to disable when upgraded systemtap-stap-exporter package


author: langfei<langfei@huawei.com> - 4.5-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix some test cases fail to be executed, Resolve the sc2168 warning detected by the shellcheck tool.


author: liuchao <liuchao173@huawei.com> - 5.0-1
changelog:
  - Upgrade to 5.0:
    - Performance improvements in uprobe registration and module startup.
    - More probe point process details are printed in "-L" list mode with more "-v".
    - For the case where newer kernels may break systemtap runtime APIs, better pass-4 failure diagnostics are printed.
    - Tapset function print_ubacktrace_fileline() now understands DWARF5.
    - The target(s) of process probes may be specified by path name globs,  as located selected debuginfod servers.
    - The kernel-user message transport system added framing codes, making the transport more reliable, but becoming incompatible across pre-5.0 versions. Use matching versions of stap and staprun.
    - The testsuite Makefile has been simplified to remove concurrency, so "parallel" and "resume" modes are gone.
    - New runtime macro STP_TIMING_NSECS is now supported for reporting probe timing stats in nsecs instead of cycles.  This may become default later.
    - Add new runtime macro STP_FORCE_STDOUT_TTY to override STP_STDOUT_NOT_ATTY.


author: panxiaohe<panxh.life@foxmail.com> - 1:1.10.2-1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:update version to 1.10.2
         add perl to BuildRequires


author: Funda Wang <fundawang@yeah.net> - 0.8.2-15
changelog:
  - move glib schemas into main package
  - drop static lib as it was not used by any other packages
  - drop uselss scriptlets as they are handled by rpm file trigger already


author: Yu Peng <yupeng@kylinos.cn> - 1:0.17-81
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix telnet crashes on stack overflow due to infinite recursion.


author: chenyanpanHW <chenyanpan@huawei.com> - 5.0-15
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/texi2html-5.0-Do-not-install-Unicode-EastAsianWidth-if-external-is.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/texi2html-5.0-Do-not-install-libintl-perl-if-external-is-used.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Guoshuai Sun <sunguoshuai@huawe.com> - 8:2018-24
changelog:
  - Drop texlive-venturisadf texlive-wsuipa texlive-vntex, because those packages
    use utopia license may not be free for anyone


author: misaka00251 <liuxin@iscas.ac.cn> - 9:2021-1
changelog:
  - Upgrade texlive version to 2021
  - The following packages no longer exist: updmap-map, wasy2-ps
  - Add texlive-vntex back, because texlive#I29Y5F is false. See the
  - first paragraph of https://tug.org/fonts/utopia/LICENSE-utopia.txt


author: misaka00251 <liuxin@iscas.ac.cn> - 9:2021-1
changelog:
  - Upgrade texlive version to 2021
  - The following packages no longer exist: tkz-linknodes, tkz-kiviat
  - tkz-doc-doc


author: xu_ping <707078654@qq.com> - 9:2021-3
changelog:
  - License compliance rectification.
  - remove package texlive-cm-unicode-doc due to license Non-compliance.


author: misaka00251 <liuxin@iscas.ac.cn> - 9:2021-1
changelog:
  - Upgrade texlive version to 2021
  - The following packages no longer exist: einfuehrung-doc, einfuehrung2-doc


author: misaka00251 <liuxin@iscas.ac.cn> - 9:2021-1
changelog:
  - Upgrade texlive version to 2021
  - The following packages no longer exist: ifetex, ifluatex, ifxetex,
  - hyperxmp


author: misaka00251 <liuxin@iscas.ac.cn> - 9:2021-1
changelog:
  - Upgrade texlive version to 2021
  - The following packages no longer exist: latex-bib-ex-doc, latex-bib2-ex.doc,
  - latex-referenz, latex-tabellen, latex-tds, ltxindex


author: misaka00251 <liuxin@iscas.ac.cn> - 9:2021-1
changelog:
  - Upgrade texlive version to 2021
  - The following packages no longer exist: math-e-doc, mbenotes
  - mathalfa was renamed to mathalpha


author: misaka00251 <liuxin@iscas.ac.cn> - 9:2021-1
changelog:
  - Upgrade texlive version to 2021
  - The following packages no longer exist: presentations, pst-spirograph,
  - pst-vue3d, psu-thesis


author: misaka00251 <liuxin@iscas.ac.cn> - 9:2021-1
changelog:
  - Upgrade texlive version to 2021
  - The following packages no longer exist: texlive-docindex, tabulars-e-doc


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com>- 0.6-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:The "cc:No such file or directroy" error message is displayed during compilation.Therefore,add buildrequires gcc.
         The macro unitdir is used.Therefore,add buildrequires systemd


author: yaoxin <1024769339@qq.com> - 1:9.0.117-1
changelog:
  - Update to 9.0.117 for fix CVEs: CVE-2026-24880, CVE-2026-25854,
    CVE-2026-29129, CVE-2026-29145, CVE-2026-29146, CVE-2026-32990,
    CVE-2026-34483, CVE-2026-34486, CVE-2026-34487, CVE-2026-34500


author: yaoxin <1024769339@qq.com> - 1:9.0.118-1
changelog:
  - Update to 9.0.118 for fix CVEs: CVE-2026-41284, CVE-2026-41293,
    CVE-2026-42498, CVE-2026-43512, CVE-2026-43513, CVE-2026-43514,
    CVE-2026-43515
  - Fix tomcat-jsvc stop failed


author: chench <chench@hygon.cn> - 4.0.1-5
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:add SM4 algorithm support
    - Add support for udev to create tcm devices
    - add ecc encrypt/decrypt support
    - add bootstrap file from upstream


author: lizhuo <lizhuo@xfusion.com> - 4.0.1-6
changelog:
  - FAPI: Fix missing scanf checks.
    In several cases the return value of scanf was not checked.
    Thus afterwards acces to variables not initialized was possible.


author: lizhuo <lizhuo@xfusion.com> - 4.0.1-7
changelog:
  - FAPI: TCTI Device: Fix using of C string for byte array.
    On arch linux gcc did produce an error because a null terminator
    was added.


author: liuchao <liuchao173@huawei.com> - 2.21.0-1
changelog:
  - upgrade to 2.21.0:
    - api: fixed stop method not to require any parameter
    - plugin_scheduler: fix perf fd leaks
    - allow skipping rollback when restarting TuneD or switching profile
    - function_calc_isolated_cores: no errors for offline CPUs
    - sap-hana: new profile sap-hana-kvm-guest
    - serialized SIGHUP handler to prevent possible bootcmdline corruption
    - fixed possible traceback on SIGHUP
    - updated manual pages to be consistent
    - tuned-adm: better error message for unauthorized switch_profile
    - plugin_sysctl: report reapplied sysctls only on different values
    - plugin_cpu: added support for pm_qos_resume_latency_us
    - plugin_cpu: added support for intel_pstate scaling driver
    - plugin_scheduler: do not leak FDs from the perf
    - profiles: new cpu-partitioning-powersave profile
    - profiles: new profile for AWS EC2
    - throughput-performance: set net.core.somaxconn to at least 2048
    - API: added support for moving devices between instances
    - added support for the API access through the Unix Domain Socket
    - D-Bus: send tracebacks through D-Bus only in debug mode
    - Makefile: added fix for python-3.12
    - do not exit on duplicate config lines


author: ZhaoYu Jiang <jiangzhaoyu@kylinos.cn> - 2.24.1-1
changelog:
  - Upgrade to 2.24.1:
    - fixed privileged execution of arbitrary scripts by active local user. (CVE-2024-52336)
    - added sanity checks for API methods parameters. (CVE-2024-52337)
    - tuned-ppd: fixed controller init to correctly set_on_battery


author: tianmuyang <tianmuyang@huawei.com> - 2.24.1-4
changelog:
  - profiles: add programmable scheduling based on eBPF
  - package:  change package tuned to architecture-dependent


author: langfei <langfei@huawei.com> - 2024a-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Aysén Region moves from -04/-03 to -03; new zone;
  -	Improve recent commentary for Chilean decrees;
  -	No need for America/Coyhaique in zonenow.tab.


author: Liu Chao <liuchao173@huawei.com> - 2024a-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Moldova has used EU transition times since 2022
  	Most of BC moves from PDT to Pacific Time on 03-09
  	Delay America/Vancouver tm_isdst transition


author: renmingshuai <renmingshuai@huawei.com> - 4.4.2-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:add a test case for PXE to support ipv6
         support lease time config for ipv6


author: liuchao <liuchao173@huawei.com> - 1.90.2-1
changelog:
  - Update to 1.90.2:
    - Fix wireless devices not disappearing from Settings when disconnected
    - Require a newer libgudev to avoid bugs related to newline stripping when reading sysfs attributes
    - Add installed-tests files for use with gnome-desktop-testing
    - Fix integration test to work with system installed upower binary and under jhbuild
    - Detect headsets with kernel batteries such as Logitech and Steelseries headsets, and make them automatically disappear if the headset is turned off (if the kernel driver supports the wireless_status attribute)
    - Hide duplicate Logitech Bluetooth devices (Bolt-compatible devices connected through Bluetooth would show as 2 batteries)
    - Hide duplicate Logitech wireless devices when they get connected through USB as well
    - Fix Bluetooth device names not synchronising, and use user-chosen names when available
    - Handle the "present" sysfs attribute changing
    - Fix iDevices not appearing
    - Fix reading capacity_level with newer libgudev
    - Fix OpenBSD backend
    - Refactor internal battery handling into separate classes
    - Guess charging/discharging state based on energy rate (#196)
    - Fix polling after resume (#198)
    - Fix battery state guessing (#146)
    - Reload history when battery ID changes
    - Test fixes
    - Move state guessing into DisplayDevice
    - Always use 90% threshold to consider a battery full
    - Various test improvements
    - Fix mice showing up as keyboards (#189)
    - Allow unit test inspector to fail (#187)
    - Fix test cases when daemon shuts down too slowly (#188)
    - Remove broken wakeup DBus API
    - Tag UPS hid devices using hwdb and update list from upstream
    - Only permit Refresh method when in debug mode
    - Refactor device polling
    - Refactor udev device discovery and sibling detection
    - Improved testing and CI
    - Handle SIGTERM to trigger a clean shutdown
    - Improve polling of batteries after line-power "online" status change
    - Multiple wacom tablet detection fixes
    - Fix updates after a BT hid power supply moves in sysfs
    - Fix enumeration of "Whats Up!" devices on startup
    - Accept USB power supplies without warning
    - Allow building without gtk-doc


author: yaoxin <1024769339@qq.com> - 0.9.9-1
changelog:
  - Update to 0.9.9:
    * Changed: Require CMake >=3.10.0
    * Fixed: Dissolve undefined behavior in parsing of URIs
    * Fixed: Normalized percent-encoded octets should have uppercase letters
      in the host
    * Fixed: Fix macros URI_VER_SUFFIX_UNICODE and URI_VER_UNICODE
    * Improved: CMake: Compile with -std=c90 by default
    * Improved: Convert remaining DOS (CR/LF) newlines to Unix newlines


author: zhanghongtao <zhanghongtao22@huawei.com> - 017-1
changelog:
  - update package to usbutils-017
  - lsusb: add fallback names for 'lsusb -v' output
  - Honor system libdir and includedir
  - usbutils: lsusb-t: print entries for devices with no interfaces
  - lsusb -t: sort in bus order, not reverse order
  - susb-t: if a driver is not bound to an interface, report "[none]"
  - Generate usbutils.pc pkgconfig file
  - usbreset: Allow idProduct and idVendor to be 0
  - susb: Add function that sorts the output by device ID.
  - lsusb: Additional sorting by bus number.
  - lsusb: This is a more compact implementation of the device list sort implemented within this pull request. The output remains the same as the one demonstrated in the previous commit.


author: liuchao <liuchao173@huawei.com> - 0.14.0-1
changelog:
  - upgrade to 0.14.0:
    - Fix: urcu-bp: only teardown call-rcu worker in destructor
    - Fix: rculfhash: urcu_die() takes positive error value
    - Fix: call_rcu: teardown default call_rcu worker on application exit
    - Fix: join worker thread in call_rcu_data_free
    - Docs: clarify grace period polling API
    - Document grace period polling in rcu-api.md
    - Implement poll rcu stress test in rcutorture
    - urcu-memb,mb,signal: Implement grace period polling
    - Fix: auto-resize hash table destroy deadlock
    - Fix building on MSYS2
    - rculfhash: Include rculfhash-internal.h from local directory
    - Remove "Darwin" from "should also work on list"
    - Merge branch 'adah1972-improve-md'
    - Add semicolons at the end of function prototypes
    - Wrap a file name in backticks
    - Wrap command-line options in backticks
    - Fix a wrong format
    - Wrap URLs in angle brackets
    - Fix Markdown issues
    - Fix: Always check pthread_create for failures
    - Disable signals in URCU background threads
    - Fix: futex.h: include headers outside extern C
    - Fix: add missing unused attribute to _rcu_dereference
    - Fix: change method used by _rcu_dereference to strip type constness
    - Fix: remove type constness in URCU_FORCE_CAST's C++ version
    - Move extern "C" down in include/urcu/urcu-bp.h
    - fix: ifdef linux specific cpu count compat
    - Add unit tests for possible_cpus_array_len
    - fix: sysconf(_SC_NPROCESSORS_CONF) can be less than max cpu id
    - Fix: revise obsolete command in README.md
    - Fix: workqueue: remove unused variable "ret"
    - Fix: urcu-qsbr: futex wait: handle spurious futex wakeups
    - Fix: urcu: futex wait: handle spurious futex wakeups
    - Fix: urcu-wait: futex wait: handle spurious futex wakeups
    - Fix: defer_rcu: futex wait: handle spurious futex wakeups
    - Fix: call_rcu: futex wait: handle spurious futex wakeups
    - Fix: workqueue: futex wait: handle spurious futex wakeups
    - Fix: Use %lu rather than %ld to print count
    - Update ABI definition files
    - Bump version current and age
    - alpha: allocate membarrier system call number
    - Bump version to 0.14.0-pre
    - Improved test framework
    - rculfhash: introduce cds_lfht_node_init_deleted
    - Fix: changelog: v0.13.0 was released in 2021
    - cleanup: i386 arch detection
    - fix: properly detect 'cmpxchg' on x86-32
    - fix: use urcu-tls compat with c++ compiler
    - Fix typo
    - fix: remove autoconf features default value in help message
    - fix: add missing pkgconfig file for memb flavour lib
    - Cleanup: Tests: Remove useless pre-C99 compatibility code from tap.h
    - Document C99 and C++11 requirement in README.md
    - Always use '__thread' for Thread local storage except on MSVC
    - Fix: powerpc32: transparent unions alter calling convention
    - fix: don't use C++ thread_local on MacOs
    - wfcqueue API: implement overloaded wrappers with templates
    - wfcqueue: combine C++ API cds_wfcq_head_cast with overloading
    - wfstack C++ API: implement overloaded wrappers with templates
    - lfstack C++ API: implement overloaded wrappers with templates
    - wfstack: combine C++ API cds_wfs_stack_cast with overloading
    - lfstack: combine C++ API cds_lfs_stack_cast with overloading
    - fix: test_build tap plan
    - Test C++ build of list head init
    - Fix order of initializers in CDS_LIST_HEAD_INIT
    - unit tests: test wfcqueue, wfstack, lfstack empty check functions in C++
    - wfcqueue: implement C++ API based on function overloading
    - wfstack: implement C++ API based on function overloading
    - lfstack: implement C++ API based on function overloading
    - Fix tap.h: remove extra semicolon in pass/fail macros
    - Add C++ build tests
    - Build and run regression and unit tests as C++ programs
    - Add --enable-Werror configure switch
    - Add `urcu_posix_assert()` as `assert()` replacement
    - Rename `urcu_assert()` to `urcu_assert_debug()`
    - cleanup: spelling fixes in comments
    - Make temporary variable in _rcu_dereference non-const
    - (tls-ie2) Fix: x86 and s390: uatomic __hp() macro C++ support
    - Fix: x86 and s390: uatomic __hp() macro clang support
    - Fix: x86 and s390 uatomic: __hp() macro warning with gcc 11


author: yueyuankun <yueyuankun@kylinos.cn> - 0.14.0-3
changelog:
  - Type: compile
  - ID: NA
  - SUG: NA
  - DESC: Fix compilation errors in loongarch architecture
          Replace setup with autosetup


author: yanjianqing <yanjianqing@kylinos.cn> - 4.1.0-7
changelog:
  - tests: testdriver: Add filesystem socket example
  - cli: Drop unnecessary --disk prop aliases
  - fsdetails: Fix an error with source.socket of virtiofs
  - tests: cli: Fix test output after previous commit
  - cli: --disk: Add driver.metadata_cache options


author: yanjianqing <yanjianqing@kylinos.cn> - 4.1.0-8
changelog:
  - diskbackend: Drop support for sheepdog
  - cli: support --boot loader.stateless=
  - virt-install: Reuse cli.fail_conflicting
  - virt-install: --unattended and --cloud-init conflict
  - cloner: Sync and system uuid
  - virt-install: --help required options are wrong
  - cli: --cpu: Add maxphysaddr.{mode,bits} options
  - tests: Add a compat check for linux2020 in amd-sev test case
  - virtinstall: fix regression with --boot and no install method
  - virtinstall: split no_install conditional apart to track code coverage


author: lutong <lutong14@huawei.com> - 1.1-9
changelog:
  - bugfix:fixed display error caused by missing signal_exits & revert change method of getting domain id


author: John W. Linville <linville@redhat.com> - 2019.06.03-5
changelog:
  - Remove patch preventing install of regulatory.bin.5 man page
  - Include regulatory.bin.5 man page in distributed files


author: zhengziyang <zheng.ziyang@zte.com.cn> - 0.164-4.20231001git31e19f92_bootstrap
changelog:
  - riscv64:Add RVV-optimized weight functions for motion compensation. These functions improve weighted prediction performance.


author: liliguang <liliguang@baidu.com> - 1.4.30-1
changelog:
  - update to 1.4.30
  - Fix compiler warnings in testsuite when building on AIX.
  - The API docs still said DatabaseError was thrown for operations on a closed
    database, but since 1.4.10 we throw its subclass DatabaseClosedError instead.


author: mahailiang <mahailiang@uniontech.com> - 1.1.3-6
changelog:
  - xdg-email: Support for Deepin
  - Restore matching of older deepin names
  - Add new case for Deepin while detecting DE


author: Funda Wang <fundawang@yeah.net> - 1.2.42-1
changelog:
  - update to 1.2.42
  - disable md5 and ripemd160 per upstream
  - disable gcrypt backend per upstream
    (https://github.com/lsh123/xmlsec/pull/848)


author: xihaochen <xihaochen@huawei.com> - 2.5.0-1
changelog:
  - Type:requirements                                                                                                                                  
  - Id:NA
  - SUG:NA
  - DESC:update xorg-x11-drv-vesa to 2.5.0


author: Funda Wang <fundawang@yeah.net> - 1.20.11-37
changelog:
  - fix CVE-2025-26594, CVE-2025-26595, CVE-2025-26596,
    CVE-2025-26597, CVE-2025-26598, CVE-2025-26599
    CVE-2025-26600, CVE-2025-26601


author: Wang Kui <wangkui35@h-partners.com> - 1.20.11-41
changelog:
  - Fix CVE-2025-49176 CVE-2025-49179 CVE-2025-49180 CVE-2022-49737
    CVE-2025-62229 CVE-2025-62230 CVE-2025-62231


author: lingsheng <ultra_planet@qq.com> - 1.20.11-42
changelog:
  - fix CVE-2022-49737 CVE-2025-49175 CVE-2025-49176 CVE-2025-49178 CVE-2025-49179 CVE-2025-49180 CVE-2025-62229 CVE-2025-62230 CVE-2025-62231


author: lingsheng <ultra_planet@qq.com> - 1.20.11-45
changelog:
  - fix CVE-2026-50256 CVE-2026-50257 CVE-2026-50258 CVE-2026-50259 CVE-2026-50260 CVE-2026-50261 CVE-2026-50262 CVE-2026-50263 CVE-2026-50264


author: xingwei <xingwei14@h-partners.com> - 4.2.3-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add haveged requires and optimize random number function replacement patch


author: yanglu <yanglu72@huawei.com> - 4.1-6
changelog:
  - DESC:delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-2.5-nfsnobody2.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-2.13-ypxfr-zeroresp.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-2.13-nonedomain.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-2.19-slp-warning.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-4.0-manfix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-2.24-aliases.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-2.27-confpost.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-2.31-netgrprecur.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-4.0-headers.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-4.0-selinux-context.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  ,and delete BuildRequires git


author: yuanchao <1050706328@qq.com> - 0.13.72-4
changelog:
  - backport:disable zzip_use_file_header_zip64_offset,and fix wrong format in changelog,to support clang build


