# changelog

author: Yu Peng <yupeng@kylinos.cn> - 1:1.26.2-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: bond:avoid logging warning to set "ad_actor_system=00:00:00:00:00:00".


author: jiangjixiang <jiangjixiang@kylinos.cn> - 1:1.26.2-18
changelog:
  - Type:CVE
  - CVE:CVE-2025-9615
  - SUG:NA
  - DESC:fix the issue of function call parameter errors in cve-2025-9615 patch.


author: yixiangzhike <yixiangzhike007@163.com> - 2.2.53-14
changelog:
  - Fix CVE-2026-54369 CVE-2026-54370
  - New API acl_get_file_at, acl_set_file_at, acl_extended_file_at, acl_delete_def_file_at
  - New provided symbol LIBACL_1_3 for new API in libacl
  - The change that commands like 'getfacl -P symlink' or 'setfacl -P symlink' will fail now


author: openEuler Buildteam <buildteam@openeuler.org> -20190730-2
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Increase the ability to provide adobe-mappings-cmap-deprecated


author: wanglu <wanglu210@huawei.com> - 33.19-33
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert "Set default entry to the BLS id instead of the entry index"


author: yueyuankun <yueyuankun@kylinos.cn> - 33.19-34
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Solve the problem that sometimes the circular loading progress bar does not rotate


author: sunhai <sunhai10@huawei.com> - 33.19-36
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:dracut handle compressed kernel modules
         network use separate main conext for NM-client in threads


author: sunhai <sunhai10@huaqei.com> - 33.19-40
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Don't set LC_ALL for live installations
         Do not crash on network --device link with wireless device
         Do not modify boot order on UEFI if asked


author: Linux_zhang <zhangruifang@h-partners.com> - 3.1.23-7
changelog:
  - Type：update
  - ID：NA
  - SUG:NA
  - DESC: Modify the license to SPDX format
          Delete MIT and Public Domain license because it no longer appears in the upstream source


author: yixiangzhike <yixiangzhike007@163.com> - 5.0-22
changelog:
  - sync patches from bash community:
     fix default file descriptor for <> redirection when printing command
     update BASH_COMMAND for subshells
     fix potential file descriptor leak in here document pipes


author: fuanan <fuanan3@h-partners.com> - 5.0-23
changelog:
  - sync patches from bash community
    add backport-documentation-updates-fix-for-null-commands-with-red.patch
    add backport-fix-for-readline-redisplay-issue-in-C-locale-fix-for.patch


author: yuejiayan<yuejiayan@huawei.com> - 1:2.8-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:completions/Makefile: Fix check-local in VPATH builds
         __load_completion: Avoid bad array subscript on "commands" ending wit…
         _xspecs: Declare as global on bash >= 4.2
         completions/Makefile.am: Use install-data-hook, not install-data-local
         man: Fix completion when failglob option is enabled (#225)
         _longopt: don't complete --no-* with file/dirname arg


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 32:9.11.21-23
changelog:
  - Type:CVE
  - CVE:CVE-2026-1519
  - SUG:NA
  - DESC:fix CVE-2026-1519: excessive NSEC3 iterations CPU exhaustion


author: tangce1 <tangce1@h-partners.com> - 32:9.11.21-24
changelog:
  - Type:CVE
  - CVE:CVE-2026-3039,CVE-2026-3592,CVE-2026-5946
  - SUG:NA
  - DESC:fix CVE-2026-3039,CVE-2026-3592,CVE-2026-5946


author: tangce <tangce1@huawei.com> - 32:9.11.21-25
changelog:
  - Type:CVE
  - CVE:CVE-2026-13321,CVE-2026-11721,CVE-2026-10723,CVE-2026-13204,CVE-2026-11622
  - SUG:NA
  - DESC:fix CVE-2026-13321,CVE-2026-11721,CVE-2026-10723,CVE-2026-13204,CVE-2026-11622


author: panxiaohe <panxiaohe@huawei.com> - 3.6.4-2
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:use make macros to run check in parallel;
         fix a concurrent build issue in examples


author: wangxiao <wangxiao184@h-partners.com> - 1.2.0-27
changelog:
  - DESC: backport upstream patches
    blkparse skip check_cpu_map with pipe input
    blkparse fix incorrectly sized memset in check_cpu_map
    fix hang when BLKTRACESETUP fails and "-o -" is used


author: zhangyiru <zhangyiru3@huawei.com> - 1.73.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:increase used_block_count when use put_mem_block
    Disallow repeating a case-change group


author: zhangyiru <zhangyiru3@huawei.com> - 1.73.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Correct stack unwinding inside recursions when seeing (*SKIP).


author: huwentao <huwentao19@h-partners.com> - 4.19.90-2606.3.0.0376
changelog:
  - !23663 Fix CVE-2026-46259
  - !23552  mm: slab: fix double destroy of kmem_cache
  - !23514  backport some zram bugfixes
  - procfs: fix missing RCU protection when reading real_parent in do_task_stat()
  - !23637  *** revert CVE-2026-31527 ***
  - Revert "driver core: generalize driver_override in struct device"
  - Revert "driver core: platform: use generic driver_override infrastructure"
  - Revert "driver/core: Fix kabi broken of platform_device/device/bus_type"
  - mm: slab: fix double destroy of kmem_cache
  - !23533  RDMA/rxe: Fix double free in rxe_srq_from_init
  - !23502  drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs()
  - !23494  ipmi: Add limits to event and receive message requests
  - !23523  ipv6: prevent possible UaF in addrconf_permanent_addr()
  - RDMA/rxe: Fix double free in rxe_srq_from_init
  - !23492  bonding: alb: fix UAF in rlb_arp_recv during bond up/down
  - !23429 Fix HWPSIRT-2026-70484
  - !23339 Fix CVE-2026-45843
  - !23407  net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs
  - ipv6: prevent possible UaF in addrconf_permanent_addr()
  - !23461  netfilter: x_tables: ensure names are nul-terminated
  - !23470  netfilter: nf_conntrack_helper: pass helper to expect cleanup
  - !23453  netfilter: nft_ct: fix use-after-free in timeout object destroy
  - !23404  net/sched: Enforce that teql can only be used as root qdisc
  - !23399  ipvs: fix ipv4 null-ptr-deref in route error path
  - mm/page_io: use pr_alert_ratelimited for swap read/write errors
  - drivers/block/zram/zram_drv.c: do not keep dangling zcomp pointer after zram reset
  - zram: do not lookup algorithm in backends table
  - zram: avoid race between zram_remove and disksize_store
  - zram: don't fail to remove zram during unloading module
  - zram: fix race between zram_reset_device() and disksize_store()
  - zsmalloc: account the number of compacted pages correctly
  - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs()
  - !22992 Fix CVE-2026-43194
  - !23297 Fix CVE-2026-43383
  - !23286  netfilter: nft_ct: drop pending enqueued packets on removal
  - !23307  netfilter: x_tables: guard option walkers against 1-byte tail reads
  - !23292  netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()
  - !23042 Fix CVE-2026-43499
  - ipmi: Add limits to event and receive message requests
  - bonding: alb: fix UAF in rlb_arp_recv during bond up/down
  - xfrm: esp: restore combined single-frag length gate
  - slip: bound decode() reads against the compressed packet length
  - netfilter: nf_conntrack_helper: pass helper to expect cleanup
  - !23393  CVE-2026-46043
  - netfilter: x_tables: ensure names are nul-terminated
  - netfilter: nft_ct: fix use-after-free in timeout object destroy
  - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs
  - net/sched: Enforce that teql can only be used as root qdisc
  - ipvs: fix ipv4 null-ptr-deref in route error path
  - RDMA/rxe: Reject unknown opcodes before ICRC processing
  - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv
  - netfilter: x_tables: guard option walkers against 1-byte tail reads
  - net/tcp-md5: Fix MAC comparison to be constant-time
  - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()
  - netfilter: nft_ct: drop pending enqueued packets on removal
  - rtmutex: Use waiter::task instead of current in remove_waiter()
  - net: consume xmit errors of GSO frames


author: huwentao <huwentao19@h-partners.com> - 4.19.90-2606.4.0.0377
changelog:
  - !23944  hugetlbfs: prevent filesystem stacking of hugetlbfs
  - hugetlbfs: prevent filesystem stacking of hugetlbfs
  - !23900  dm: fix a buffer overflow in ioctl processing
  - dm: fix a buffer overflow in ioctl processing


author: huwentao <huwentao19@h-partners.com> - 4.19.90-2606.5.0.0378
changelog:
  - !24076 [openEuler 1.0-LTS] CVE-2026-46331
  - net/sched: fix pedit partial COW leading to page cache corruption
  - net/sched: act_pedit: sanitize shift argument before usage
  - net/sched: act_pedit: really ensure the skb is writable


author: huwentao <huwentao19@h-partners.com> - 4.19.90-2607.1.0.0379
changelog:
  - !24384  RDMA/umem: Fix truncation for block sizes >= 4G
  - !24380  IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN
  - RDMA/umem: Fix truncation for block sizes >= 4G
  - !24373  USB: serial: kl5kusb105: fix bulk-out buffer overflow
  - !24361  ipc: limit next_id allocation to the valid ID range
  - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN
  - USB: serial: kl5kusb105: fix bulk-out buffer overflow
  - ipc: limit next_id allocation to the valid ID range


author: huwentao <huwentao19@h-partners.com> - 4.19.90-2607.2.0.0380
changelog:
  - !24729 Fix CVE-2026-53266
  - netfilter: bridge: make ebt_snat ARP rewrite writable
  - netfilter: ebtables: Fixes dropping of small packets in bridge nat
  - netfilter: bridge: convert skb_make_writable to skb_ensure_writable
  - !24620 Fix CVE-2026-53075
  - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls


author: huwentao <huwentao19@h-partners.com> - 4.19.90-2607.3.0.0381
changelog:
  - !23913 [openEuler-1.0-LTS] Fix CVE-2026-46022
  - !20919 修复CVE-2025-71237
  - !23678 dmaengine: omap-dma: fix dma_pool resource leak in error paths
  - !23664 [openEuler-1.0-LTS] Fix CVE-2026-46098
  - !22606 [openEuler-1.0-LTS] Fix CVE-2026-31598
  - !22590 [openEuler-1.0-LTS] Fix CVE-2026-31597
  - !23493 [openEuler-1.0-LTS] Fix CVE-2026-23064
  - !22392 [openEuler-1.0-LTS] Fix CVE-2025-71199
  - !22669 [openEuler-1.0-LTS] Fix CVE-2026-31607
  - !22718 [openEuler-1.0-LTS] Fix CVE-2026-31618
  - !22848 [openEuler-1.0-LTS] Fix CVE-2026-23098
  - !22724 [openEuler-1.0-LTS] Fix  CVE-2026-31622
  - !23130 [openEuler-1.0-LTS] Fix CVE-2026-43226
  - !22761 [openEuler-1.0-LTS] Fix CVE-2026-43202
  - !23120 [openEuler-1.0-LTS] Fix CVE-2026-31464
  - !22744 [openEuler-1.0-LTS] Fix  CVE-2026-23073
  - !22223 [openEuler-1.0-LTS] Fix CVE-2025-68330
  - !22483 [openEuler-1.0-LTS] Fix CVE-2026-23176
  - misc: ibmasm: fix OOB MMIO read in ibmasm_handle_mouse_interrupt()
  - dmaengine: omap-dma: fix dma_pool resource leak in error paths
  - net: caif: clear client service pointer on teardown
  - net/sched: act_ife: avoid possible NULL deref
  - netrom: fix double-free in nr_route_frame()
  - net/rds: No shortcut out of RDS_CONN_ERROR
  - scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done()
  - fbdev: vt8500lcdfb: fix missing dma_free_coherent()
  - wifi: rsi: Fix memory corruption due to not set vif driver data size
  - NFC: digital: Bounds check NFC-A cascade depth in SDD response handler
  - fbdev: tdfxfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO
  - usbip: validate number_of_packets in usbip_pack_ret_submit()
  - ocfs2: fix possible deadlock between unlink and dio_end_io_write
  - ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY
  - platform/x86: toshiba_haps: Fix memory leaks in add/remove routines
  - iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver
  - iio: accel: bmc150: Fix irq assumption regression
  - nilfs2: Fix potential block overflow that cause system hang


author: huwentao <huwentao19@h-partners.com> - 4.19.90-2607.4.0.0382
changelog:
  - !25057  wifi: prevent A-MSDU attacks in mesh networks
  - wifi: prevent A-MSDU attacks in mesh networks
  - !25006 Fix CVE-2026-53309
  - !25026 v2  xfs: resample the data fork mapping after cycling ILOCK
  - !25027  security/keys: fix missed RCU read section on lookup
  - security/keys: fix missed RCU read section on lookup
  - xfs: resample the data fork mapping after cycling ILOCK
  - !25011  sctp: purge outqueue on stale COOKIE-ECHO handling
  - sctp: purge outqueue on stale COOKIE-ECHO handling
  - ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison
  - !24983 Fix CVE-2026-43071
  - !24982 Fix CVE-2026-43407
  - !24964  USB: serial: omninet: fix memory corruption with small endpoint
  - dcache: Limit the minimal number of bucket to two
  - libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply()
  - !24646  locking/rtmutex: Skip remove_waiter() when waiter is not enqueued
  - USB: serial: omninet: fix memory corruption with small endpoint
  - !22385 [openEuler-1.0-LTS] Fix CVE-2025-71192
  - !23136 [openEuler-1.0-LTS] Fix CVE-2026-23058
  - !24859 CVE-2025-10263 for 4.19
  - arm64/openeuler_defconfig: add CONFIG_NVIDIA_OLYMPUS_ERRATUM_TLBI to openeuler_defconfig
  - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued
  - can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak
  - ALSA: ac97: fix a double free in snd_ac97_controller_register()


author: huwentao <huwentao19@h-partners.com> - 4.19.90-2608.1.0.0383
changelog:
  - !25206  Fix CVE-2026-64378
  - !24986  RDMA/srp: bound SRP_RSP sense copy by the received length
  - !25038  scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf
  - !25039  scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()
  - !25037  fuse: re-lock request before replacing page cache folio
  - writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs()
  - writeback, cgroup: inode_switch_wbs() shouldn't give up on wb_switch_rwsem trylock fail
  - !24888 [openEuler-1.0-LTS] Fix CVE-2026-52920
  - !24853 inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP
  - !24911 netfilter: nf_log: validate MAC header was set before dumping it
  - !25072  sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing
  - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing
  - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()
  - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf
  - fuse: re-lock request before replacing page cache folio
  - RDMA/srp: bound SRP_RSP sense copy by the received length
  - netfilter: nf_log: validate MAC header was set before dumping it
  - netfilter: xt_policy: fix strict mode inbound policy matching
  - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP


author: huwentao <huwentao19@h-partners.com> - 4.19.90-2608.2.0.0384
changelog:
  - !25730 sctp: delete the nested flexible array peer_init
  - sctp: delete the nested flexible array peer_init
  - !25638  i2c: stub: Reject I2C block transfers with invalid length
  - !25360 Fix CVE-2026-64299
  - !25356 Fix CVE-2026-64374
  - i2c: stub: Reject I2C block transfers with invalid length
  - !25485  e1000e: Fix out-of-bounds MMIO access by validating BAR0 size
  - !25629  hwrng: virtio: clamp device-reported used.len at copy_data()
  - hwrng: virtio: clamp device-reported used.len at copy_data()
  - e1000e: Fix out-of-bounds MMIO access by validating BAR0 size
  - tracing: Prevent out-of-bounds read in glob matching
  - sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT


author: huwentao <huwentao19@h-partners.com> - 4.19.90-2608.3.0.0385
changelog:
  - !25788  smb/client: fix chown/chgrp with SMB3 POSIX Extensions
  - !25789  NFSv4/flexfiles: reject zero filehandle version count
  - NFSv4/flexfiles: reject zero filehandle version count
  - smb/client: fix chown/chgrp with SMB3 POSIX Extensions
  - !25733  nfsd: release layout stid on setlease failure
  - !25747  i2c: core: fix adapter registration race
  - !25732  fuse: re-lock request before returning from fuse_ref_folio()
  - i2c: core: fix adapter registration race
  - nfsd: release layout stid on setlease failure
  - fuse: re-lock request before returning from fuse_ref_folio()


author: lijian <lijian2@kylinos.cn> - 1:1.31.1-35
changelog:
  - Type:cves
  - ID:CVE-2026-38754
  - SUG:NA
  - DESC:re-fix CVE-2026-38754, clear stale IFS state on expansion error


author: wangjiang <wangjiang37@h-partners.com> - 2023.2.60-3
changelog:
  - remove expired and sync new certificates
    Removing:
      Security Communication Root CA
      Trustis FPS Root CA
    Adding:
      Atos TrustedRoot Root CA ECC G2 2020
      Atos TrustedRoot Root CA ECC TLS 2021
      Atos TrustedRoot Root CA RSA G2 2020
      Atos TrustedRoot Root CA RSA TLS 2021
      CommScope Public Trust ECC Root-01
      CommScope Public Trust ECC Root-02
      CommScope Public Trust RSA Root-01
      CommScope Public Trust RSA Root-02
      D-Trust SBR Root CA 1 2022
      D-Trust SBR Root CA 2 2022
      LAWtrust Root CA2 (4096)
      Sectigo Public Email Protection Root E46
      Sectigo Public Email Protection Root R46
      Sectigo Public Server Authentication Root E46
      Sectigo Public Server Authentication Root R46
      SSL.com Client ECC Root CA 2022
      SSL.com Client RSA Root CA 2022
      SSL.com TLS ECC Root CA 2022
      SSL.com TLS RSA Root CA 2022
      Telekom Security SMIME ECC Root 2021
      Telekom Security SMIME RSA Root 2023
      Telekom Security TLS ECC Root 2020
      Telekom Security TLS RSA Root 2023
      TrustAsia Global Root CA G3
      TrustAsia Global Root CA G4


author: wangjiang <app@cameyan.com> - 2023.2.60-4
changelog:
  - remove expired and sync new certificates
    Removing:
      Certificate "Explicitly Distrust DigiNotar Root CA"
      Certificate "Baltimore CyberTrust Root"
    Adding:
      Certificate "FIRMAPROFESIONAL CA ROOT-A WEB"
      Certificate "TWCA CYBER Root CA"
      Certificate "TWCA Global Root CA G2"
      Certificate "SecureSign Root CA12"
      Certificate "SecureSign Root CA14"
      Certificate "SecureSign Root CA15"
      Certificate "D-TRUST BR Root CA 2 2023"
      Certificate "D-TRUST EV Root CA 2 2023"


author: wjiang <cameyan@163.com> - 2023.2.60-6
changelog:
  - sync certificate from upstream
    Adding:
      Certificate "TrustAsia SMIME ECC Root CA"
      Certificate "TrustAsia SMIME RSA Root CA"
      Certificate "TrustAsia TLS ECC Root CA"
      Certificate "TrustAsia TLS RSA Root CA"
      Certificate "SwissSign RSA SMIME Root CA 2022 - 1"
      Certificate "SwissSign RSA TLS Root CA 2022 - 1"
      Certificate "OISTE Client Root ECC G1"
      Certificate "OISTE Client Root RSA G1"
      Certificate "OISTE Server Root ECC G1"
      Certificate "OISTE Server Root RSA G1"
      Certificate "e-Szigno TLS Root CA 2023"


author: chenyanpanHW <chenyanpan@huawei.com> - 0.10.10-8
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-cachefilesd-fix-abort-in-decant_cull_table.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: yanglu <yanglu60@huawei.com> - 1.15.14-5
changelog:
  - Type:cves
  - ID:CVE-2018-19876 CVE-2019-6461 CVE-2019-6462
  - SUG:NA
  - DESC: fix CVE-2018-19876 CVE-2019-6461 CVE-2019-6462


author: chenyanpanHW <chenyanpan@huawei.com> - 1.4.33-3
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-T0ProcACK-fix-a-potential-problem.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-CmdGetSlotStatus-fix-potential-read-of-uninitialized.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0003-ReadUSB-fix-potential-read-of-uninitialized-buffer.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0004-IFDHSetProtocolParameters-handle-ATR_GetConvention-e.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0005-PPS_Match-fix-potential-read-of-uninitialized-buffer.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0006-dw2i-fix-potential-integer-overflow.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: Liquor <lirui130@huawei.com> - 11-5
changelog:
  - Delete remaining references to the removed http pin
    Install cryptsetup and tpm2_pcrlist in the initramfs
    Add device TCTI library to the initramfs


author: Dan Walsh <dwalsh@fedoraproject.org> - 2.73-1
changelog:
  - Define spc_t as a container_domain, so that container_runtime will transition
  to spc_t even when setup with nosuid.


author: Jianmin <jianmin@iscas.ac.cn> - 1:1.1.0-13
changelog:
  - Type:bugfix
  - CVE:CVE-2023-39325 CVE-2023-44487 CVE-2025-27144
  - SUG:NA
  - DESC: fix CVE-2023-39325 CVE-2023-44487 CVE-2025-27144


author: wangjiang <app@cameyan.com> - 8.32-14
changelog:
  - sync patches from community
  - add backport-numfmt-don-t-require-a-suffix-with-from-iec-i.patch
        backport-sort-fix-debug-buffer-overrun.patch
        backport-tac-avoid-out-of-bounds-access.patch
        backport-yes-avoid-failure-on-CHERI-protected-systems.patch


author: Funda Wang <fundawang@yeah.net> - 8.32-17
changelog:
  - fix upstream bug#72445: Fill the ISAAC buffer instead of storing at most
    BYTES_BOUND bytes into it.


author: Qin Fandong <qinfandong@kylinos.cn> - 8.32-18
changelog:
  - Type:CVE
  - ID:CVE-2026-56392
  - SUG:NA
  - DESC:fix heap overflow in unexpand with large tab stop values


author: fuanan <fuanan3@h-partners.com> - 2.13-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert fix CVE-2015-1197 because it causes AT testcases problems


author: chenziyang <chenziyang4@huawei.com> - 2.13-7
changelog:
  - Type:CVE
  - ID:CVE-2015-1197
  - SUG:NA
  - DESC:Fix CVE-2015-1197, delete revert-CVE-2015-1197.patch because new patch
         will fix the problem brought by old-CVE-2015-1197.patch, so we delete 
         revert-CVE-2015-1197.patch


author: wangxiao <wangxiao184@h-partners.com> - 7.2.8-6
changelog:
  - arm64: fix again segfault in arm64_is_kernel_exception_frame
    arm64: fix a potential segfault when unwind frame


author: Tomáš Mráz <tmraz@redhat.com> - 20180921-1.git391ed9f
changelog:
  - OpenSSH: Generate policy for sign algorithms
  - Enable >= 255 bits EC curves in FUTURE policy
  - OpenSSH: Add group1 key exchanges in LEGACY policy
  - NSS: Add SHA224 to hash lists
  - Print warning when update-crypto-policies --set FIPS is used
  - fips-mode-setup: Kernel boot options are now modified with grubby


author: Tomáš Mráz <tmraz@redhat.com> - 20180925-1.git71ca85f
changelog:
  - Use Recommends instead of Requires for grubby
  - Revert setting of HostKeyAlgorithms for ssh client for now


author: yanglongkang <yanglongkang@huawei.com> - 2.3.3-4
changelog:
  - add buildrequire gcc
    add make check
    backport upstream patches to solve several problems -epoch2


author: chenyanpanHW <chenyanpan@huawei.com> - 2.3.3-5
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-cryptsetup-add-system-library-paths.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fix-compat-test.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0003-Check-segment-gaps-regardless-of-heap-space.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0004-Fix-posible-buffer-overflows-in-LUKS-conversion.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0005-Fix-a-memleak-in-blockwise-test.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0006-CVE-2021-4122.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: Funda Wang <fundawang@yeah.net> - 1:2.2.13-22
changelog:
  - fix CVE-2025-58060, CVE-2025-58364
  - move www files into main package due to requirement by web interface


author: gaihuiying <eaglegai@163.com> - 1:2.2.13-24
changelog:
  - fix CVE-2026-27447 CVE-2026-34978 CVE-2026-34979 CVE-2026-34980 CVE-2026-34990 CVE-2026-39314 CVE-2026-39316


author: gaihuiying <eaglegai@163.com> - 1:2.2.13-26
changelog:
  - fix handling of multiple PPD: keywords from filters related to CVE-2026-34980
    fix a regression in shared printing from non-local accounts related to CVE-2026-27447


author: xingwei <xingwei14@h-partners.com> - 7.71.1-41
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:altsvc: avoid integer overflow in expire calculation
         test391: verify --path-as-is with redirect
         urlapi: fix redirect to a new fragment or query (only)


author: xinghe <xinghe2@h-partners.com> - 7.71.1-42
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:curl_path: bring back support for SFTP path ending in /~
         curl_path: make SFTP handle a path like /~ properly


author: zhouyihang <zhouyihang3@h-partners.com> - 7.71.1-45
changelog:
  - Type:CVE
  - CVE:CVE-2025-14017 CVE-2025-14524 CVE-2025-15079 CVE-2025-15224
  - SUG:NA
  - DESC:fix CVE-2025-14017 CVE-2025-14524 CVE-2025-15079 CVE-2025-15224


author: zhouyihang <zhouyihang_z@163.com> - 7.71.1-46
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:formdata: validate callback is non-NULL before use
         tftp: correct the filename length check


author: zhouyihang <zhouyihang_z@163.com> - 7.71.1-47
changelog:
  - Type:CVE
  - CVE:CVE-2026-1965 CVE-2026-3783 CVE-2026-3784
  - SUG:NA
  - DESC:fix CVE-2026-1965 CVE-2026-3783 CVE-2026-3784


author: zhouyihang <zhouyihang_z@163.com> - 7.71.1-48
changelog:
  - Type:CVE
  - CVE:CVE-2026-4873 CVE-2026-5545 CVE-2026-5773 CVE-2026-6253 CVE-2026-6276 CVE-2026-6429 CVE-2026-7168
  - SUG:NA
  - DESC:fix CVE-2026-4873 CVE-2026-5545 CVE-2026-5773 CVE-2026-6253 CVE-2026-6276 CVE-2026-6429 CVE-2026-7168


author: zhouyihang <zhouyihang_z@163.com> - 7.71.1-50
changelog:
  - Type:CVE
  - CVE:CVE-2026-8286 CVE-2026-8924 CVE-2026-8927 CVE-2026-9547
  - SUG:NA
  - DESC:fix CVE-2026-8286 CVE-2026-8924 CVE-2026-8927 CVE-2026-9547


author: wangkai <13474090681@163.com> - 1.11.23-54
changelog:
  - Add patches from fedora, improve C compatibility and fix build failures caused by higher gcc versions


author: hongjinghao <hongjinghao@huawei.com> - 1:1.12.16-23
changelog:
  - add backport-bus-dir-watch-Do-not-crash-with-128-dirs.patch	
  backport-Do-not-crash-when-reloading-configuration.patch


author: yueyuankun <yueyuankun@kylinos.cn> - 4.2.23-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:yum.misc.decompress() to handle uncompressed files
         update repo metadata cache pattern to include zstd
         fix typo


author: lingsheng <lingsheng1@h-partners.com> - 2.82-18
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Update DNS records after pruning DHCP leases
         Fix potential memory leak
         Fix possible SIGSEGV in bpf.c
         adapt bugfix allow binding mac with ipv6


author: luoguocui <luoguocui@h-partners.com> - 2.82-19
changelog:
  - Type:bugfix
  - CVE:
  - SUG:NA
  - DESC:Fix bad reply to DHCPCONFIRM messages (wrong message type)
         Fix reply confirm packet when binding-mac-with-ip6 on


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 2.82-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
    Fix bounds checking in check_ia
    Fix SEGV in Dbus code
    More fixes for DHCP ops in Dbus when DHCP not configured


author: zhaoyonghao10 <zhaoyonghao10@h-partners.com> - 2.82-21
changelog:
  - Type:CVE
  - CVE:CVE-2026-2291 CVE-2026-4890 CVE-2026-4891 CVE-2026-4892 CVE-2026-4893
  - SUG:NA
  - DESC:Fix buffer overflow in struct bigname (CVE-2026-2291)
         Fix NSEC bitmap parsing infinite loop (CVE-2026-4890)
         Verify rdlen field in RRSIG packets (CVE-2026-4891)
         Fix buffer overflow in helper with large CLIDs (CVE-2026-4892)
         Fix broken client subnet validation (CVE-2026-4893)


author: lifeifei<lifeifei@kylinos.cn> - 2.0.11-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix: if libvirt and ebtables are installed at the same time, ping the operation prompts "sendmsg: Operation not permitted".


author: xinghe <xinghe2@h-partners.com> - 2.0.11-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix ebtables-restore --noflush failed when ebtables is uninstall


author: taolinghongfei <taolinghongfei@h-partners.com> - 202002-34
changelog:
  - fix CVE-2026-22795,CVE-2026-22796
  - fix CVE-2025-69420
  - fix CVE-2025-69421
  - fix CVE-2025-68160
  - fix CVE-2025-69418
  - fix CVE-2025-69419


author: dillon chen <dillon.chen@gmail.com> - 2.4.5-5
changelog:
  - CVE-2020-18651,CVE-2020-18652
  - CVE-2021-36048,CVE-2021-39847,CVE-2021-42530,CVE-2021-36046,CVE-2021-36055
  - CVE-2021-40716,CVE-2018-12648,CVE-2021-36054,CVE-2021-36047,CVE-2021-36052
  - CVE-2021-36058,CVE-2021-36045,CVE-2021-42531,CVE-2021-36064,CVE-2021-42529
  - CVE-2021-42528,CVE-2021-36050,CVE-2021-40732
  - CVE-2021-36056,CVE-2021-42532,CVE-2021-36053,CVE-2021-36051


author: fly_fzc <2385803914@qq.com> - 2.2.9-28
changelog:
  - fix CVE-2026-56403 CVE-2026-56404 CVE-2026-56405 CVE-2026-56406 CVE-2026-56407
        CVE-2026-56408 CVE-2026-56409 CVE-2026-56410 CVE-2026-56411 CVE-2026-56412


author: openEuler Buildteam <buildteam@openeuler.org> - 2:4.7.0-4
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:Fix test failures ran as root and enable -xautofs and disable leaf opt


author: zhouyihang <zhouyihang3@h-partners.com> - 0.6.6-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:To reduce unnecessary loading of ebtables-related kernel modules
         fix(nm): release NM client after a timeout


author: yangzhuangzhuang<yangzhuangzhuang1@huawei.com> - 2.6.4-3
changelog:
  - The autoreconf command is used during compilation.
    Therefore,the automake and autoconf compilation dependencies need to added.


author: wangkai <13474090681@163.com> - 2:2.11.8-1
changelog:
  - Update to 2.11.8
  - Fix CVE-2026-22852, CVE-2026-22856, CVE-2026-22859, CVE-2026-23530, CVE-2026-23531,
    CVE-2026-23532, CVE-2026-23534, CVE-2026-24491, CVE-2026-24675, CVE-2026-24676,
    CVE-2026-24679, CVE-2026-24681, CVE-2026-24682, CVE-2026-24683, CVE-2026-24684,
    CVE-2026-25997, CVE-2026-26271, CVE-2026-26986, CVE-2026-27015, CVE-2026-25941,
    CVE-2026-22855, CVE-2026-22857, CVE-2026-23533, CVE-2026-23732, CVE-2026-23883,
    CVE-2026-23884


author: wangkai <13474090681@163.com> - 2:2.11.8-3
changelog:
  - Fix CVE-2026-26955, CVE-2026-26965, CVE-2026-31806, CVE-2026-31883, CVE-2026-31885,
    CVE-2026-33984, CVE-2026-33983


author: wangkai <13474090681@163.com> - 2:2.11.8-5
changelog:
  - Fix CVE-2026-25942, CVE-2026-25952, CVE-2026-25953, CVE-2026-25954, CVE-2026-27951,
    CVE-2026-29774, CVE-2026-29775, CVE-2026-31884, CVE-2026-33985


author: openEuler Buildteam <buildteam@openeuler.org> - 2.9.9-0
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:update fuse2 from 2.9.7 to 2.9.9,
         update fuse3 from 3.2.3 to 3.9.0


author: hugel <gengqihu2@h-partners.com> - 9.52-23
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Sync some patches from community
         backport-Fix-memory-leak-in-pdfwrite-device.patch
         backport-Fix-memory-leak-on-error-in-bitmap_paint-and-its-cal.patch
         backport-Fix-memory-leaks-in-tiffsep.patch


author: yaoxin <yao_xin001@hoperun.com> - 5.2.2-1
changelog:
  - Update to 5.2.2
    * Fixes for CVE-2023-48161 (bsc#1217390), CVE-2022-28506 (bsc#1198880)
    * Address SF issue #151: A heap-buffer-overflow in gif2rgb.c:294:45
    * Address SF issue #166: a read zero page leads segment fault in
      getarg.c and memory leaks in gif2rgb.c and gifmalloc.c


author: fuanan <fuanan3@h-partners.com> - 2.27.0-25
changelog:
  - Type:CVE
  - ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
  - SUG:NA 
  - DESC:Fix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835


author: fuanan <fuanan3@h-partners.com> - 2.27.0-26
changelog:
  - Type:CVE
  - ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
  - SUG:NA
  - DESC:refix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835


author: fuanan <fuanan3@h-partners.com> - 2.27.0-27
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:modify patch
         backport-CVE-2025-27613-CVE-2025-46334-CVE-2025-46835.patch


author: fly_fzc <2385803914@qq.com> - 2.27.0-29
changelog:
  - fix crash with find object outside repository
  - fix crash with run git-shortlog outside repository


author: zhusicong <zhusicong@h-partners> - 2.66.8-25
changelog:
  - fix CVE-2026-58010, CVE-2026-58011, CVE-2026-58013, CVE-2026-58014, CVE-2026-58015, CVE-2026-58016


author: panzhe <panzhe@kylinos.cn> - 2.28-120
changelog:
  - sync from glibc upstream for fix bugs
  - libio: Disable vtable validation for pre-2.1 interposed handles [BZ #25203]
  - x86: Assume --enable-cet if GCC defaults to CET [BZ #25225]
  - string: Define __CORRECT_ISO_CPP_STRING_H_PROTO for Clang [BZ #25232]


author: Qingqing Li <liqingqing3@huawei.com> - 2.28-124
changelog:
  - libio: Fix ungetwc operating on byte stream [BZ #33998] (CVE-2026-5928)
  - stdio-common: Fix buffer overflow in scanf %mc [BZ #34008] (CVE-2026-5450)


author: wanglimin<wanglimin@xfusion.com> - 3.30.1-4
changelog:
  - fix msg error in zh_CN.po for page files of index, a11y-*,
  - about-*,accounts-*,backup-*,bluetooth-*,clock-*,color-*,
  - contacts-*,disk-*


author: wanglimin<wanglimin@xfusion.com> - 3.30.1-5
changelog:
  - fix msg error in zh_CN.po for page files of :
  - files-*,gnome-*,hardware-*,help-*,keyboard-*,look-*,mouse-*


author: wanglimin<wanglimin@xfusion.com> - 3.30.1-7
changelog:
  - fix msg error in zh_CN.po for page files of :
  - power-*,prefs-*,printing-*,privacy-*,screen-*,session-*,sharing-*
  - shell-*,sound-*,status-*,tips-*,user-*,video-*,wacom-*
  - append some missing msg


author: Xu Raoqing <609179072@qq.com> - 3.6.14-22
changelog:
  - fix CVE-2026-42009
  - fix CVE-2026-42010
  - fix CVE-2026-42013
  - fix CVE-2026-42014
  - fix CVE-2026-5260
  - fix CVE-2026-42015
  - fix CVE-2026-3832


author: huzhangying <huzhangying@huawei.com> - 1.15.7-55
changelog:
  - Type:CVE
  - CVE:CVE-2025-58183, CVE-2025-58185, CVE-2025-61724
  - SUG:NA
  - DESC:fix CVE-2025-58183, CVE-2025-58185, CVE-2025-61724


author: huzhangying <huzhangying@huawei.com> - 1.15.7-59
changelog:
  - Type:CVE
  - CVE:CVE-2025-61732,CVE-2025-68119,CVE-2025-61731,CVE-2025-61726,CVE-2025-68121
  - SUG:NA
  - DESC:fix CVE-2025-61732,CVE-2025-68119,CVE-2025-61731,CVE-2025-61726,CVE-2025-68121


author: lvying <lvying6@huawei.com> - 2.7-3
changelog:
  - Type:enhancement
  - ID:NA
  - SUG: NA
  - DESC: peripheral package quality reinforcement: backport bugfix patches from community


author: gaihuiying <eaglegai@163.com> - 1.31.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix adjust to abseil-cpp 20210324,since it dont provides absl_dynamic_annotations library anymore


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.04-38
changelog:
  - Type:CVE
  - CVE:CVE-2024-1048
  - SUG:NA
  - DESC:grub-set-bootflag: Fix for CVE-2024-1048
         commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
         kern/acpi: Skip NULL entries in RSDT and XSDT
         util/grub-mount: Check file path sanity
         kern/acpi: Use xsdt_addr if present
         commands/acpi: Use xsdt_addrifpresent


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.04-40
changelog:
  - Type:CVE
  - CVE:CVE-2024-45781,CVE-2024-45782,CVE-2024-56737,CVE-2024-45780,CVE-2024-45783,CVE-2024-49504,CVE-2025-0624,CVE-20
  24-45774,CVE-2024-45775,CVE-2025-0622,CVE-2025-0622,CVE-2025-0622,CVE-2024-45776,CVE-2024-45777,CVE-2025-0690,CVE-20
  25-1118,CVE-2024-45778,CVE-2024-45779,CVE-2025-0677,CVE-2025-0684,CVE-2025-0685,CVE-2025-0686,CVE-2025-0689,CVE-2025
  -0678,CVE-2025-1125
  - SUG:NA
  - DESC:fix the vulnerabilities announced on February 18th, 2025


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1:2.04-42
changelog:
  - Type:CVE
  - CVE:CVE-2025-61661,CVE-2025-61662,CVE-2025-61663,CVE-2025-61664
  - SUG:NA
  - DESC:commands/usbtest: Ensure string length is sufficient in usb string processing
         commands/usbtest: Use correct string length field
         tests/lib/functional_test: Unregister commands on module unload
         normal/main: Unregister commands on module unload
         gettext/gettext: Unregister gettext command on module unload


author: yueyuankun <yueyuankun@kylinos.cn> - 1:2.04-43
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:protect grub2 packages
         protected: grub2-efi-aa64, grub2-efi-ia32, grub2-efi-x64, grub2-pc, grub2-tools-minimal


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.2.3-1
changelog:
  - Upgrade to 1.2.3
  - Update Version, Release, Source0, BuildRequires
  - Update stage 'build', 'install', 'check' and 'files'


author: Funda Wang <fundawang@yeah.net> - 1.16.2-6
changelog:
  - fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
    CVE-2024-47607, CVE-2024-47615, CVE-2024-47835


author: yaoxin <yaoxin30@h-parters.com> - 1.12.1-1
changelog:
  - Update to 1.12.1 and fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 2.4.43-31
changelog:
  - Type:CVE
  - CVE:CVE-2025-58098,CVE-2025-65082,CVE-2025-66200
  - SUG:NA
  - DESC:fix CVE-2025-58098,CVE-2025-65082,CVE-2025-66200


author: tangce <tangce1@h-partners.com> - 2.4.43-34
changelog:
  - Type:CVE
  - CVE:CVE-2026-24072,CVE-2026-29168,CVE-2026-29169,CVE-2026-33006,CVE-2026-34059
  - SUG:NA
  - DESC:fix CVE-2026-24072,CVE-2026-29168,CVE-2026-29169,CVE-2026-33006,CVE-2026-34059


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 2.4.43-35
changelog:
  - Type:CVE
  - CVE:CVE-2026-33007,CVE-2026-33523,CVE-2026-33857,CVE-2026-34032
  - SUG:NA
  - DESC:fix CVE-2026-33007,CVE-2026-33523,CVE-2026-33857,CVE-2026-34032


author: tangce <tangce1@h-partners.com> - 2.4.43-36
changelog:
  - Type:CVE
  - CVE:CVE-2026-29167,CVE-2026-42535,CVE-2026-44631
  - SUG:NA
  - DESC:fix CVE-2026-29167,CVE-2026-42535,CVE-2026-44631


author: tangce <tangce1@h-partners.com> - 2.4.43-37
changelog:
  - Type:CVE
  - CVE:CVE-2026-44186,CVE-2026-44185,CVE-2026-42536,CVE-2026-34356,CVE-2026-34355,CVE-2026-29170
  - SUG:NA
  - DESC:fix CVE-2026-44186,CVE-2026-44185,CVE-2026-42536,CVE-2026-34356,CVE-2026-34355,CVE-2026-29170


author: yangjiaqi <yangjiaqi16@huawei.com> - 2.0.18-15
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: keep the service status unchanged after iSulad service upgrade


author: gaoxingwang<gaoxingwang@huawei.com> - 10.04-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: ifup-eth: add a new PERSISTENT_DHCLIENT_IPV6 option for IPv6 dhclient daemon


author: zhangxingrong <zhangxingrong@uniontech.com> - 3.16-4
changelog:
  - iperf3 now builds correctly on architectures without native support for 64-bit atomic types, by linking with the libatomic library


author: wangkai <13474090681@163.com> - 3.17.1-1
changelog:
  - Update to 3.17.1
  - iperf3 no longer changes its current working directory in --daemon mode. This results in more 
    predictable behavior with relative paths, in particular finding key and credential files for authentication.
  - A new --json-stream option has been added to enable a streaming output format, consisting of 
    a series of JSON objects (for the start of the test, each measurement interval, and the end of the test) separated by newlines
  - UDP tests now work correctly between different endian hosts
  - The --fq-rate parameter now works for --reverse tests
  - The statistics reporting interval is now available in the --json start test object


author: xihaochen <xihaochen@huawei.com> - 1.8.18-17
changelog:
  - Type:requirement
  - ID:NA
  - SUG:NA
  - DESC:move exchange-bmc-os-info,bmc-snmp-proxy to separate subpackages from ipmitool


author: mengkanglai <mengkanglai2@huawei.com> - 1.8.18-18
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:lan channel fix set alert on off and lanplus realloc the msg if the payload_length gets update


author: yanglu <yanglu72@h-partners.com> - 5.5.0-19
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:lib:names:check calloc return value in db_names_alloc
         fix fd leak when playing with netns


author: sunhai <sunhai10@huawei.com> - 0.15-7
changelog:
  - Handle yet another out of memory condition
  - Fix issue 854 Set error json_tokener_error_memory in
  - Issue 857 fix a few places where json_tokener should
  - Handle NULL gracefully in json_tokener_free
  - Issue 881 don t allow json_tokener_new_ex with a dep


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 2.0.20-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix issue about iomem file that contains too many contens.As a result,the kdump service failed


author: snoweay <snoweay@163.com> - 2.0.20-15
changelog:
  - Add support for quick kexec
    kexec: Add quick kexec support
    arm64: Quick kexec implementation for arm64


author: caixiaomeng<caixiaomeng2@huawei.com> -1:0.9.1-23
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ignore sssnic module when building hotpatch to fix sssnic wrongly dependency of sssnic


author: zhangxiaoyu<zhangxiaoyu58@huawei.com> - 2.0.9-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix update cpu-rt period failed and fix layer size type as int64


author: jikai<jikai11@huawei.com> - 2.0.9-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix potential log error, empty pointer reference and overflow


author: lingsheng <lingsheng1@h-partners.com> - 3.4.3-10
changelog:
  - Type:CVE
  - ID:CVE-2025-5914,CVE-2025-5916,CVE-2025-5917,CVE-2025-5918
  - SUG:NA
  - DESC:fix CVE-2025-5914 CVE-2025-5916 CVE-2025-5917 CVE-2025-5918


author: cenhuilin <cenhuilin@kylinos.cn> - 2.35.2-24
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:lsblk: fix memory leak [coverity scan]
         lsblk: fix possible use-after-free


author: yixiangzhike <yixiangzhike007@163.com> - 2.35.2-26
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport community patches
          fix off-by-one in maximum last sector calculation


author: YangYunYi <yangyunyi2@huawei.com> - 2.35.2-31
changelog:
  - Type:feature
  - CVE:NA
  - SUG:NA
  - DESC:Add cpu model name display for arm Kunpeng 0xd02/0xd03/0xd06/0xd22
          lscpu does not show Model Name for Kunpeng part id 0xd02/0xd03/
          0xd06/0xd22. Add hisi_part entries for these ids and resolve the
          real name via bios_modelname; fall back to the default name
          ("Kunpeng 920" for 0xd02/0xd03/0xd22, "Kunpeng 950" for 0xd06)
          in virtual machines where bios_modelname is NULL or an unreliable
          hypervisor-generated string (e.g. "virt xxx").


author: lipengyu <lipengyu@kylinos.cn> - 2.35.2-33
changelog:
  - Type:feature
  - CVE:NA
  - SUG:NA
  - DESC:optimize the implementation of Kunpeng 920/950 model name handling


author: gaoyi <gaoyi15@huawei.com> - 0.1.8-15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:CVE for libcomps
         https://github.com/rpm-software-management/libcomps/commit/e3a5d056633677959ad924a51758876d415e7046


author: fly_fzc <2385803914@qq.com> - 2.1.12-7
changelog:
  - fix CVE-2026-63387 CVE-2026-63388 CVE-2026-63384 CVE-2026-63381
        CVE-2026-63385 CVE-2026-63382 CVE-2026-63379 CVE-2026-63383


author: Wenlong Ding <wenlong.ding@turbolinux.com.cn> - 2.6.4-22
changelog:
  - Remove /usr/lib64/libglade-2.0.so.* from libglade2-devel package which already exists in libglade2 package.


author: wangkai <13474090681@163.com> - 2.5.18-5
changelog:
  - Fix CVE-2026-40334, CVE-2026-40334, CVE-2026-40338, CVE-2026-40339,
    CVE-2026-40340, CVE-2026-40341


author: wangxiao <wangxiao184@qq.com> - 1.15.6-5
changelog:
  - add fix patch for CVE-2026-50292
  - CVE-2026-50265 is an invalid CVE, so delete the related information.


author: zengwefeng <zwfeng@huawei.com> - 3.5.0-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add missing check for NULL return from allocate_rfd
         add include netlink private nl-auto-h header
         use proper int type for id attributes
         add RTNL_LINK_REASM_OVERLAPS stat
         check for null pointer in macvlan
         fix leaking in link msg parser
         fix NLE_NOMEM handling in parse multipath


author: xinghe <xinghe2@h-partners.com> - 2:1.6.37-2
changelog:
  - Type:cves
  - CVE:CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720
  - SUG:NA
  - DESC:fix CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720


author: yixiangzhike <yixiangzhike007@163.com> - 1.4.2-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:change the files order in patch file fix-doc-about-difok.patch


author: luhuaxin <luhuaxin@huawei.com> - 0.9.4-15
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC: move AUTHORS and COPYING files to license folder, fix requires


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 3.1-3
changelog:
  - fix heap-use-after-free in cil_yy_switch_to_buffer
  - fix heap-use-after-free in __class_reset_perm_values()
  - fix heap-buffer-overflow in cil_print_recursive_blockinherit


author: xinghe <xingheyd@163.com> - 4.11.12-38
changelog:
  - Type:cves
  - CVE:CVE-2026-3238 CVE-2026-4480 CVE-2026-4408
  - SUG:NA
  - DESC:fix CVE-2026-3238 CVE-2026-4480 CVE-2026-4408


author: xinghe <xingheyd@163.com> - 4.11.12-39
changelog:
  - Type:cves
  - ID:CVE-2026-6949 CVE-2026-58224 CVE-2026-58216 CVE-2026-58218 CVE-2026-58221 CVE-2026-58222
  - SUG:NA
  - DESC:fix CVE-2026-6949 CVE-2026-58224 CVE-2026-58216 CVE-2026-58218 CVE-2026-58221 CVE-2026-58222


author: nickyang <nickyang228@163.com> - 2.71.0-11
changelog:
  - Type:cves
  - ID:CVE-2026-1539 CVE-2026-1467 CVE-2026-1761 CVE-2026-0716
  - SUG:NA
  - DESC:fix CVE-2026-1539 CVE-2026-1467 CVE-2026-1761 CVE-2026-0716


author: nickyang <nickyang228@163.com> - 2.71.0-12
changelog:
  - Type:cves
  - ID:CVE-2026-1760 CVE-2026-1801 CVE-2026-2369
  - SUG:NA
  - DESC:fix CVE-2026-1760 CVE-2026-1801 CVE-2026-2369


author: zhangbinqin <zhangbinqin@h-partners.com> - 0.9.4-15
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:fix CVE-2026-0968 CVE-2026-0967 CVE-2026-0966 CVE-2026-0965 CVE-2026-0964 CVE-2025-14821


author: zhangbinqin <zhangbinqin@h-partners.com> - 1.9.0-10
changelog:
  - Type:CVE
  - CVE:CVE-2026-7598
  - SUG:NA
  - DESC:add username_len bounds checking to fix CVE-2026-7598


author: gaoyi<gaoyi15@huawei.com> - 2.1.14-2.h1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: backport patches from https://github.com/samba-team/samba
  - Package init


author: chenziyang <chenziyang4@huawei.com> - 2:1.3.1-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch to fix failed run-ptrace-mapper testcase


author: jiangjiacheng <jiangjiacheng@huawei.com>
changelog:
  - util: keep track of full GSource object not source ID number
  - rpc: mark source returned by virEventGLibAddSocketWatch as unused
  - rpc: ensure temporary GSource is removed from client event loop (CVE-2024-4418)


author: ZixinLi <lizixin10@h-partners.com> - 6.2.0-26
changelog:
  - Fix CVE-2025-12748 CVE-2025-13193
  - conf: split out virDomainDefParseIDs (CVE-2025-12748)
  - conf: Add virDomainDefIDsParseString (CVE-2025-12748)
  - bhyve: Check ACLs before parsing the whole domain XML (CVE-2025-12748)
  - libxl: Check ACLs before parsing the whole domain XML (CVE-2025-12748)
  - lxc: Check ACLs before parsing the whole domain XML (CVE-2025-12748)
  - vz: Check ACLs before parsing the whole domain XML (CVE-2025-12748)
  - qemu: Check ACLs before parsing the whole domain XML (CVE-2025-12748)
  - qemu: snapshot: Set umask for 'qemu-img' when creating external inactive snapshots (CVE-2025-13193)


author: chengguipeng<chengguipeng1@huawei.com> - 0.8.4-4
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC:solve the issue which dispaly could not resolve keysym XF86FullScreen


author: fuanan <fuanan3@h-partners.com> - 1.1.34-9
changelog:
  - fix xsltCleanupSourceDoc function:
    Clean up attributes in source doc
    Avoid null deref on documents without root


author: bzhaoop<bzhaojyathousandy@gmail.com> - 3:10.3.35-1
changelog:
  - Bump version to 10.3.35 for resolving CVEs as below
  - CVE-2022-27379
  - CVE-2022-27386
  - CVE-2022-27447
  - CVE-2022-27448
  - CVE-2022-27449
  - CVE-2022-27445
  - CVE-2022-27456
  - CVE-2022-27458
  - CVE-2022-27452
  - CVE-2022-27376
  - CVE-2022-27378
  - CVE-2022-27377
  - CVE-2022-27381
  - CVE-2022-27383
  - CVE-2022-27380
  - CVE-2022-27384
  - CVE-2022-27387


author: yanglu <yanglu72@h-partners.com> - 2:0.93-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Change UDP and ICMP sockets binding to accept a source IP from the -a CLI option


author: yaoxin <1024769339@qq.com> - 8.0.41-1
changelog:
  - Update to 8.0.41 for fix CVEs(CVE-2025-21490,CVE-2025-21491,CVE-2025-21495,
    CVE-2025-21497,CVE-2025-21500,CVE-2025-21501,CVE-2025-21503,CVE-2025-21505,
    CVE-2025-21518,CVE-2025-21519,CVE-2025-21520,CVE-2025-21522,CVE-2025-21523,
    CVE-2025-21529,CVE-2025-21531,CVE-2025-21540,CVE-2025-21543,CVE-2025-21546,
    CVE-2025-21555,CVE-2025-21559)


author: yaoxin <1024769339@qq.com> - 8.0.42-1
changelog:
  - Update to 8.0.42 for fix CVEs(CVE-2025-21574,CVE-2025-21575,CVE-2025-21577,
    CVE-2025-21580,CVE-2025-21581,CVE-2025-21584,CVE-2025-21585,CVE-2025-30681,
    CVE-2025-30682,CVE-2025-30683,CVE-2025-30684,CVE-2025-30685,CVE-2025-30687,
    CVE-2025-30688,CVE-2025-30689,CVE-2025-30693,CVE-2025-30695,CVE-2025-30696,
    CVE-2025-30699,CVE-2025-30703,CVE-2025-30704,CVE-2025-30705,CVE-2025-30710,
    CVE-2025-30715,CVE-2025-30721,CVE-2025-30722


author: yaoxin <1024769339@qq.com> - 8.0.43-1
changelog:
  - Update to 8.4.6 for fix CVEs (CVE-2025-50068,CVE-2025-50077,CVE-2025-50078,
    CVE-2025-50079,CVE-2025-50080,CVE-2025-50081,CVE-2025-50082,CVE-2025-50083,
    CVE-2025-50084,CVE-2025-50085,CVE-2025-50086,CVE-2025-50087,CVE-2025-50091,
    CVE-2025-50092,CVE-2025-50093,CVE-2025-50094,CVE-2025-50096,CVE-2025-50097,
    CVE-2025-50098,CVE-2025-50099,CVE-2025-50100,CVE-2025-50101,CVE-2025-50102,
    CVE-2025-50104,CVE-2025-53023)


author: wangkai <13474090681@163.com> - 8.0.44-1
changelog:
  - Update to 8.0.44 for fix CVEs (CVE-2025-53069,CVE-2025-53062,CVE-2025-53054,
    CVE-2025-53053,CVE-2025-53045,CVE-2025-53044,CVE-2025-53042,CVE-2025-53040)


author: yaoxin <1024769339@qq.com> - 8.0.45-1
changelog:
  - Update to 8.0.45 for fix CVEs (CVE-2026-21936,CVE-2026-21937,
    CVE-2026-21941,CVE-2026-21948,CVE-2026-21964,CVE-2026-21968)


author: wangkai <13474090681@163.com> - 8.0.46-1
changelog:
  - Update to 8.0.46 for fix CVEs (CVE-2026-21998, CVE-2026-22001, CVE-2026-22002,
    CVE-2026-22004, CVE-2026-22005, CVE-2026-22009, CVE-2026-22015, CVE-2026-22017,
    CVE-2026-34267, CVE-2026-34270, CVE-2026-34271, CVE-2026-34276, CVE-2026-34278,
    CVE-2026-34293, CVE-2026-34303, CVE-2026-34304, CVE-2026-34308, CVE-2026-35236,
    CVE-2026-35237, CVE-2026-35238, CVE-2026-35239, CVE-2026-35240)


author: yaoxin <yao_xin001@hoperun.com> - 8.0-1
changelog:
  - Update to 8.0
    * CVE-2024-5742: Avoid privilege escalations via symlink attacks
      on emergency save file (boo#1226099)
    * By default ^F is bound to starting a forward search, and ^B to
      starting a backward search, while M-F and M-B repeat the search
      in the corresponding direction. (See the documentation if you
      want the old bindings back.)
    * Command-line option --modernbindings (-/) makes ^Q quit, ^X cut,
      ^C copy, ^V paste, ^Z undo, ^Y redo, ^O open a file, ^W write a file,
      ^R replace, ^G find again, ^D find again backwards, ^A set the mark,
      ^T jump to a line, ^P show the position, and ^E execute.
    * For easier access, M-" is bound to placing/removing an anchor,
      and M-' to jumping to the next anchor.


author: xingwei <xingwei14@h-partners.com> - 1:5.9-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Sync upstream patches to fix Buffer overflow
         Disable T200snmpv2cwalkall_simple test to fix make check fail


author: huangyu <huangyu106@huawei.com> - 1:0.9.6-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:parser_json fix device parsing in netdev family
  src don't parse string as verdict in map


author: yixiangzhike <yixiangzhike007@163.com> - 0.9.11-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:Move temporary files from /var/run to /run to delete warning in installing


author: openEuler Buildteam <buildteam@openeuler.org> - 1.5.1-24
changelog:
  - Type:cves
  - ID:CVE-2016-10506 CVE-2016-7445
  - SUG:restart
  - DESC:fix CVE-2018-15173 and CVE-2016-7445


author: Funda Wang <fundawang@yeah.net> - 0.20.0-15
changelog:
  - fix CVE-2024-8443, CVE-2024-45615, CVE-2024-45616,
    CVE-2024-45617, CVE-2024-45618, CVE-2024-45619, CVE-2024-45620


author: xingwei <xingwei14@h-partners.com> - 2.0.0-26
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Introduce epoch command to slove package upgrade failure problem


author: zhangbinqin<zhangbinqin@h-partners.com> - 8.2p1-32
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix the missing member of the struct Authmethod method_gsskeyex


author: zhangbinqin<zhangbinqin@h-partners.com> - 8.2p1-35
changelog:
  - Type:CVE
  - CVE:CVE-2026-35414 CVE-2026-35385 CVE-2026-35386 CVE-2026-35387 CVE-2026-35388
  - SUG:NA
  - DESC:fix CVE-2026-35414 CVE-2026-35385 CVE-2026-35386 CVE-2026-35387 CVE-2026-35388


author: fly_fzc <2385803914@qq.com> - 1:1.1.1f-41
changelog:
  - fix CVE-2025-68160 CVE-2026-22796 CVE-2026-22795 CVE-2025-69418 CVE-2025-69421 CVE-2025-69419 CVE-2025-69420


author: wulei <wulei80@huawei.com> - 2020.4-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Do not run testcase test-libarchive-import, because selinux is off.


author: chenyanpanHW <chenyanpan@huawei.com> - 1.9.0-3
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0000-pcsc-lite-change-to-use-python3-for-pcsc-spy.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-Do-not-possibly-lock-a-reader-if-allocating-hCard-fa.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-Fix-a-hang-in-SCardTransmit.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0003-ATRDecodeAtr-always-initialize-the-return-values.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0004-EHUnregisterClientForEvent-correctly-handle-EHTryToU.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: shenyangyang<shenyangyang4@huawei.com> - 1:2.081-7
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:restart
  - DESC:add build requires of perl-devel and add Epoch for updating


author: wangxiao<wangxiao65@huawei.com> - 1.58-3.h1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:Handle unknown op in DBD SQLite VirtualTable PerlData
         added a boilerplace for test
         fixed for older DBI
  - Package init


author: wangjiang <app@cameyan.com> - 2.068-2
changelog:
  - Passing NO_NETWORK_TESTING=1 as an environment variable
    solves the interactive issue required for using rpmbuild locally


author: shenyangyang <shenyangyang4@huawei.com> - 0.35-420
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:delete unneeded build requires of perl(Test::Portability::Files) 
         and perl(Test::Pod::Coverage)


author: shenyangyang <shenyangyang4@huawei.com> - 0.625-14
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:delete unneeded build requires of perl(IO::Scalar) and perl(Test::Pod::Coverage)


author: shenyangyang <shenyangyang4@huawei.com> - 2.29-398
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:delete unneeded build requires of perl(BSD::Resource) 
         perl(Import::Into) >= 1.002004 and perl(Sub::Identify)


author: openEuler Buildteam <buildteam@openeuler.org> - 0.4.9-4
changelog:
  -Type:enhancement
  -Id:NA
  -SUG:NA
  -DESC:Increase the ability of encoding files for use with libpoppler


author: gaihuiying <eaglegai@163.com> - 2.4.8-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream
         Fixing up parsing in radiusclient.conf


author: zhengxiaoxiao <zhengxiaoxiao2@huawei.com> - 3.14.0-9
changelog:
  - Type:CVE
  - ID:CVE-2026-0994
  - SUG:NA
  - DESC:Fix Any recursion depth bypass in Python json_format.ParseDict


author: Qin Fandong <qinfandong@kylinos.cn> - 3.7.9-57
changelog:
  - Type:CVE
  - ID:CVE-2026-6879
  - SUG:NA
  - DESC:fix CVE-2026-6879: avoid quadratic behavior in xml.etree.ElementPath index predicates


author: shenyangyang<shenyangyang4@huawei.com> - 1.11.5-8
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:optimize the method to provide default version of python-name


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 1:1.16.5-8
changelog:
  - remove f2py form python3-numpy package. It is in python3-numpy-f2py
         Do not pack open-source test case files


author: gaihuiying <eaglegai@163.com> - 1.11.0-21
changelog:
  - Type:CVE
  - CVE:CVE-2025-11411
  - SUG:NA
  - DESC:Additional fix for CVE-2025-11411 to include YXDOMAIN and non-referral nodata answers in the mitigation


author: gaihuiying <eaglegai@163.com> - 1.11.0-22
changelog:
  - Type:cves
  - CVE:CVE-2026-33278,CVE-2026-41292,CVE-2026-42959,CVE-2026-42960
  - SUG:NA
  - DESC:fix CVE-2026-33278,CVE-2026-41292,CVE-2026-42959,CVE-2026-42960


author: gaihuiying <eaglegai@163.com> - 1.11.0-23
changelog:
  - Type:cves
  - CVE:CVE-2026-32792,CVE-2026-42923,CVE-2026-40622,CVE-2026-42534,CVE-2026-44390
  - SUG:NA
  - DESC:fix CVE-2026-32792,CVE-2026-42923,CVE-2026-40622,CVE-2026-42534,CVE-2026-44390


author: gaihuiying <eaglegai@163.com> - 1.11.0-25
changelog:
  - Type:CVE
  - CVE:CVE-2026-46582,CVE-2026-44621,CVE-2026-44690,CVE-2026-50243,CVE-2026-50248,CVE-2026-50251,CVE-2026-55708,CVE-2026-55717,CVE-2026-55990,CVE-2026-56416
  - SUG:NA
  - DESC:fix CVE-2026-46582,CVE-2026-44621,CVE-2026-44690,CVE-2026-50243,CVE-2026-50248,CVE-2026-50251,CVE-2026-55708,CVE-2026-55717,CVE-2026-55990,CVE-2026-56416


author: Jiabo Feng <fengjiabo1@huawei.com>
changelog:
  - hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs(CVE-2024-3446)
  - hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs(CVE-2024-3446)
  - hw/display/virtio-gpu: Protect from DMA re-entrancy bugs(CVE-2024-3446)
  - hw/virtio: Introduce virtio_bh_new_guarded() helper
  - hw: replace most qemu_bh_new calls with qemu_bh_new_guarded
  - checkpatch: add qemu_bh_new/aio_bh_new checks
  - async: avoid use-after-free on re-entrancy guard
  - async: Add an optional reentrancy guard to the BH API
  - util/async: add a human-readable name to BHs for debugging
  - hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set
  - Include sysemu/sysemu.h a lot less


author: Jiabo Feng <fengjiabo1@huawei.com>
changelog:
  - tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fix CVE-2023-5088)
  - hw/ide: reset: cancel async DMA operation before resetting state (Fix CVE-2023-5088)


author: Jiabo Feng <fengjiabo1@huawei.com>
changelog:
  - block: Parse filenames only when explicitly requested (CVE-2024-4467)
  - block: introduce bdrv_open_file_child() helper
  - qcow2: Don't open data_file with BDRV_O_NO_IO (CVE-2024-4467)
  - qcow2: Do not reopen data_file in invalidate_cache


author: Jiabo Feng <fengjiabo1@huawei.com> - 10:4.1.0-86
changelog:
  - nbd/server: CVE-2024-7409: Close stray clients at server-stop
  - main-loop.h: introduce qemu_in_main_thread()
  - aio-wait.h: introduce AIO_WAIT_WHILE_UNLOCKED
  - nbd/server: CVE-2024-7409: Drop non-negotiating clients
  - nbd/server: CVE-2024-7409: Cap default max-connections to 100
  - nbd: Add max-connections to nbd-server-start
  - nbd/server: Plumb in new args to nbd_client_add()
  - nbd: Minor style and typo fixes


author: Jiabo Feng <fengjiabo1@huawei.com> - 10:4.1.0-88
changelog:
  - mac_dbdma: Remove leftover `dma_memory_unmap` calls(CVE-2024-8612)
  - softmmu: Support concurrent bounce buffers(CVE-2024-8612)
  - qdev-properties: add size32 property type
  - system/physmem: Per-AddressSpace bounce buffering
  - system/physmem: Propagate AddressSpace to MapClient helpers


author: Pengrui Zhang <zhangpengrui@huawei.com> - 10:4.1.0-92
changelog:
  - io: release active GSource in TLS channel finalizer
  - io: move websock resource release to close method
  - io: fix use after free in websocket handshake code(CVE-2025-11234)
  - sphinx: change default language to 'en'
  - curl: Check curl_multi_add_handle()'s return code
  - block/curl.c: Check error return from curl_easy_setopt()
  - block: Handle curl 7.55.0, 7.85.0 version changes
  - block/vpc: Make vpc_open() read the full dynamic header
  - net/eth: Use correct in6_address offset in _eth_get_rss_ex_dst_addr()
  - net/eth: Simplify _eth_get_rss_ex_dst_addr()
  - net/eth: Better describe _eth_get_rss_ex_dst_addr's offset argument
  - net/eth: Check size earlier in _eth_get_rss_ex_dst_addr()
  - net/eth: Check iovec has enough data earlier
  - net/eth: Read ip6_ext_hdr_routing buffer before accessing it
  - net/eth: Add an assert() and invert if() statement to simplify code
  - pc-bios/optionrom: compile with -Wno-array-bounds
  - amd_iommu: fix uninitialized error
  - tests/unit/test-block-iothread: fix maybe-uninitialized error on GCC 11
  - scripts: improve message when TAP based tests fail
  - make check-unit: use after free in test-opts-visitor
  - crypto: use a stronger private key for tests


author: openEuler Buildteam <buildteam@openeuler.org> - 5.11.1-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Delete the dependency include qt5-qt3d qt5-qtenginio-devel qt5-qtwebkit-devel


author: xingwei <xingwei14@h-partners.com> - 2.18-5
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Add the socket option IPV6_MULTICAST_LOOP to prevent the interface from autocon
  figuring using RA messages sent by itself.


author: Shiju Jose<shiju.jose@huawei.com> - 0.6.7-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:
    1. Fix return value type issue of read/write function from unistd.h.
    2. Fix issue of signed and unsigned integer comparison.
    3. Remove redundant header file and do some cleaup.
    4. Add support for create/open the vendor error tables at rasdaemon startup.
    5. Make changes in the HiSilicon error handling code for the same.
    6. Add four modules supported by HiSilicon common section.


author: yanglongkang <yanglongkang@h-partners.com> - 0.6.7-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport libtraceevent patch to adapt to kernel ftrace ring buffer change


author: zhangnan <zhangnan134@huawei.com> - 0.6.7-13
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ras-events:quit loop in read_ras_event when kbuf data is broken


author: caixiaomeng <caixiaomeng2@huawei.com> - 0.6.7-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add-dynamic-switch-of-ras-events-support-and-disable-block-rq-complete


author: wangjiang <app@cameyan.com> - 0.6.7-16
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix ras-mc-ctl --summary failed
         Add some improvements and add new modules to HiSilicon common section


author: liyangyang <liyangyang20@huawei.com> - 35.0-1
changelog:
  - DESC: Currently 28.1 is not commercially available and need to be modified to 35.0 with more complete features


author: tangchengchang <tangchengchang@huawei.com> - 35.0-4
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: Rename the previous patch to facilitate subsequent management


author: shixuantong<shixuantong@huawei.com> - 3.7.6-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add python3-Cython and python3-devel to BuildRequires for check fail


author: gaihuiying <gaihuiying1@huawei.com> - 1.2.5-5
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:sync sp1 commits and rebuild 1.2.5-5:
         fix uninstall package warning info
         remove config rmtcall and disable rpcbind.service default


author: yixiangzhike <yixiangzhike007@163.com> - 2.15-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:avoid truncate trailer space and do not escape backslash when read filename


author: yixiangzhike <yixiangzhike007@163.com> - 2.15-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:revert "avoid truncate trailer space and do not escape backslash when read filename"


author: beta <beta@yfqm.date> - 3.14.2-82
changelog:
  - backport some upstream patches
    backport-Label-etc-redis-as-redis_conf_t.patch
    backport-Relabel-usr-sbin-charon-systemd-as-ipsec_exec_t.patch


author: yanglu <yanglu72@h-partners.com> - 8.16.1-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Add require procmail, Fix send mail error which no procmail command


author: yanglu<yanglu72@h-partners.com> - 8.16.1-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix newaliases command error and postfix service start execption after sendmail install


author: chenyanpanHW <chenyanpan@huawei.com> - 4.4-4
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-Fix-typos-update-URLs-in-squashfs-tools-Makefile.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-Support-creating-sockets-in-unsquashfs.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0003-squashfs-tools-fix-build-failure-against-gcc-10.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0004-xattr-Initialize-header-to-avoid-valgrind-warning.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0005-CVE-2021-40153.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0006-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0007-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0008-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0009-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0010-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: xinghe <xinghe2@h-partners.com> - 7:4.9-25
changelog:
  - Type:cves
  - ID:CVE-2023-49288 CVE-2025-54574 CVE-2023-5824 CVE-2025-62168
  - SUG:NA
  - DESC:fix CVE-2023-49288 CVE-2025-54574 CVE-2023-5824 CVE-2025-62168


author: XuFei <xufei30@huawei.com> - 0.3.0-3
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC:modify docs,modify testcases and clear clippy warnings for updating rust 1.51.0


author: huanghaitao <huanghaitao8@huawei.com> - 1.4.0-3
changelog:
  - Add Requires: python2-gobject-base libnotify >= 0.7.7
  - fix command subunit-notify subunit2gtk --help error
  - fix command subunit-notify warning


author: yixiangzhike <yixiangzhike007@163.com> - 1.9.2-20
changelog:
  - apply 2 patches: backport-sudo_rfc1938_setup--fix-out-of-bounds-read-if-the-.patch, backport-sudo_auth_init--Fix-setting-FLAG_ONEANDONLY-if-onl.patch


author: chenyanpanHW <chenyanpan@huawei.com> - 2.1.0-32
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-Fix-issue-with-sysfs-name-comparisons.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-sysfsutils-2.1.0-get_link.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0003-sysfsutils-2.1.0-manpages.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0004-sysfsutils-aarch64.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0005-sysutils-modify-GPL-path-written-in-COPYING.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0006-fix-of-FUNC_TABLE_SIZE-mentioned-in-prev-commit.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0007-Fix-compiler-complain-about-multiple-defs-of-my_stdo.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0008-Use-stat-not-lstat-to-find-link-target.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0009-path_is_file-should-call-stat-not-lstat.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0010-lib-Fixed-a-memory-leak-in-lib-sysfs_driver.c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0011-lib-Fixed-memory-leaks-in-lib-sysfs_device.c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0012-lib-Fixed-memory-leaks-in-lib-sysfs_attr.c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: lingsheng <lingsheng1@h-partners.com> - 6.04-14
changelog:
  - update libpng 1.6.36 to fix CVE-2011-2501 CVE-2011-2690 CVE-2011-2691
  - CVE-2011-2692 CVE-2011-3045 CVE-2011-3048 CVE-2012-3425 CVE-2015-7981
  - CVE-2015-8126 CVE-2015-8472 CVE-2015-8540 CVE-2016-10087 CVE-2017-12652


author: zhangyao <zhangyao108@huawei.com> - 243-82
changelog:
  - sync community patches
    add backport-pid1-set-SYSTEMD_NSS_DYNAMIC_BYPASS-1-env-var-for-db.patch
        backport-pid1-lookup-owning-PID-of-BusName-name-of-services-a.patch
        backport-pid1-watch-bus-name-always-when-we-have-it.patch


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-83
changelog:
  - Enhance the logging function of the systemctl command
    Add process-util-log-more-information-when-runnin.patch


author: xujing <xujing125@huawei.com> - 243-86
changelog:
  - print the real reason for link update
  - run link_update() with increased retry count in second invocation


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 1:8.6.10-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:The "no acceptable C compiler found" error message is displayed during compilation.Therefore,add buildrequires gcc.


author: gaihuiying <eaglegai@163.com> - 1:0.17-78
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix telnet crashes on stack overflow due to infinite recursion.


author: Guoshuai Sun <sunguoshuai@huawe.com> - 8:2018-24
changelog:
  - Drop texlive-venturisadf texlive-wsuipa texlive-vntex, because those packages
    use utopia license may not be free for anyone


author: openEuler Buildteam <buildteam@openeuler.org> - 0.5.9
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC:Solve the problem of service cannot restart when upgrading


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 0.6-2
changelog:
  - The"cc:No such file or directroy"error message is displayed during compilation.Therefore,add buildrequires gcc.
    The macro unitdir is used.Therefore,add buildrequires systemd


author: Liu Chao <liuchao173@huawei.com> - 2.24.1-1
changelog:
  - Upgrade to 2.24.1:
    - fixed privileged execution of arbitrary scripts by active local user. (CVE-2024-52336)
    - added sanity checks for API methods parameters. (CVE-2024-52337)


author: langfei <langfei@huawei.com> - 2022a-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Aysén Region moves from -04/-03 to -03; new zone;
  -	Improve recent commentary for Chilean decrees.


author: Liu Chao <liuchao173@huawei.com> - 2022a-22
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Moldova has used EU transition times since 2022
  	Most of BC moves from PDT to Pacific Time on 03-09
  	Delay America/Vancouver tm_isdst transition


author: chenyanpanHW <chenyanpan@huawei.com> - 012-4
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-usbmisc-initialize-string-buffer-before-reading-from.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: yangzhuangzhuang<yangzhuangzhuang1@huawei.com> - 0.3.12-4
changelog:
  - The "no acceptable C compiler found" error message is displayed during compilation.Therefore,add buildrequires gcc.


author: mahailiang <mahailiang@uniontech.com> - 1.1.3-6
changelog:
  - xdg-email: Support for Deepin
  - Restore matching of older deepin names
  - Add new case for Deepin while detecting DE


author: Zhiqiang Liu <liuzhiqiang26@huawei.com> - 5.6.0-3
changelog:
  - mkfs.xfs: fix ASSERT on to-small device with stripe geometry.
    Fix issue: https://gitee.com/src-openeuler/xfsprogs/issues/I4RZKQ


author: Funda Wang <fundawang@yeah.net> - 1.20.8-32
changelog:
  - fix CVE-2025-26594, CVE-2025-26595, CVE-2025-26596,
    CVE-2025-26597, CVE-2025-26598, CVE-2025-26599
    CVE-2025-26600, CVE-2025-26601


author: lingsheng <ultra_planet@qq.com> - 1.20.8-35
changelog:
  - fix CVE-2022-49737 CVE-2025-49175 CVE-2025-49176 CVE-2025-49178 CVE-2025-49179 CVE-2025-49180 CVE-2025-62229 CVE-2025-62230 CVE-2025-62231


author: lingsheng <ultra_planet@qq.com> - 1.20.8-38
changelog:
  - fix CVE-2026-50256 CVE-2026-50257 CVE-2026-50258 CVE-2026-50259 CVE-2026-50260 CVE-2026-50261 CVE-2026-50262 CVE-2026-50263 CVE-2026-50264


author: luhuaxin <luhuaxin@huawei.com> - 1.3-39
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC: move gxvattr to main package, move AUTHORS to license folder


author: kouwenqi <kouwenqi@kylinos.cn> - 5.2.5-4
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC:Add overflow check for Unpadded size in lzma_index_append


author: luckky <guodashun1@huawei.com> - 1.4.5-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:The libzsta.a library should be packaged to access advanced experimental features


