# changelog

author: chenyanpanHW <chenyanpan@huawei.com> - 2.14.19-25
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ORBit2-2.14.3-multilib.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ORBit2-2.14.3-ref-leaks.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ORBit2-make-j-safety.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ORBit2-allow-deprecated.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0005-Fix-link_protocol_is_local_ipv46-for-ipv4-on-some-ip.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0014-Commit-patch-from-bug-662623-to-fix-connection-failu.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0016-bug-732274-fix-parallel-build-failure.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yixiangzhike <yixiangzhike007@163.com> - 0.17.4-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: backport upstream patch to use signal safe write function in signal handler


author: sunhai <sunhai10@huawei.com> - 36.16.5-23
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: revert "Set default entry to the BLS id instead of the entry index"


author: sunhai <sunhai10@huawei.com> - 36.16.5-24
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: config adjust
          revise hostname chinese  tip
  		fix custom storage chinese tip


author: shenyangyang<shenyangyang4@huawei.com> - 1.7.0-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Rebuild for openEuler-rpm-config moving /usr/lib/rpm/openEuler/xxxx
         to /usr/lib/xxxx


author: yanglongkang<yanglongkang@h-partners.com> - 3.2.2-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Adding Patching Operations
         provides relibility and self-heading capabilities for service


author: Linux_zhang <zhangruifang@h-partners.com> - 3.2.2-5
changelog:
  - Type：update
  - ID：NA
  - SUG:NA
  - DESC: Modify the license to SPDX format
          Delete MIT and Public Domain license because it no longer appears in the upstream source


author: fuanan <fuanan3@h-partners.com> - 2.71-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix Adapt signed-char check macro which lead to python3 testcase failure.


author: Funda Wang <fundawang@yeah.net> - 2.71-8
changelog:
  - fix AC_CHECK_LIB no longer works with g++ (debian bug#992981)
  - Fix testsuite failures with bash 5.2.15


author: wangyuhang <wangyuhang27@huawei.com> -5.1.8-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: add backport-fix-for-nofork-comsub-command-printing-fix-for-crash.patch
          backport-fix-small-memleak-in-globbing.patch
          backport-fix-for-leak-when-completing-command-word-with-glob-.patch
          del doesn't exist PATH dirs in bashrc


author: wangyuhang <wangyuhang27@huawei.com> -5.1.8-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: add backport-fix-for-E-transformation-fixes-for-failures-in-arith.patch
          backport-changes-for-quoting-special-and-multibyte-characters.patch
          backport-fixes-for-LINENO-in-multi-line-simple-commands-print.patch
          backport-changes-to-SIGINT-handler-while-waiting-for-a-child-.patch
          backport-renamed-several-functions-beginning-with-legal_-chan.patch


author: Zhao Mengmeng <zhaomengmeng@kylinos.cn> - 5.1.8-15
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Fix a performance regression while using large number of environment variables


author: yixiangzhike <yixiangzhike007@163.com> - 5.1.8-19
changelog:
  - sync patches from bash community:
     fix default file descriptor for <> redirection when printing command
     update BASH_COMMAND for subshells
     fix potential file descriptor leak in here document pipes


author: chengyechun <chengyechun1@huawei.com> - 32:9.16.23-23
changelog:
  - Type:CVE
  - CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
  - SUG:NA
  - DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737


author: chengyechun <chengyechun1@huawei.com> - 32:9.16.23-25
changelog:
  - Type:CVE
  - CVE:CVE-2024-1737
  - SUG:NA
  - DESC:add max-records-per-type and max-types-per-name for fix CVE-2024-1737
         The default value both of max-records-per-type and max-types-per-name is 5000


author: Funda Wang <fundawang@yeah.net> - 2.37-31
changelog:
  - Fix CVE-2024-57360: nm: Avoid potential segmentation fault when displaying
    symbols without version info.
  - Fix CVE-2025-0840: stack-buffer-overflow at objdump disassemble_bytes


author: yueyuankun <yueyuankun@kylinos.cn> - 3.8.2-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix syntax error on SymbolKind.toString method
         fix interface syntax error


author: liuxu <liuxu156@huawei.com> - 1:1.34.1-21
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363


author: wangjiang <wangjiang37@h-partners.com> - 2023.2.60-3
changelog:
  - remove expired and sync new certificates
    Removing:
      Security Communication Root CA
    Adding:
      Atos TrustedRoot Root CA ECC G2 2020
      Atos TrustedRoot Root CA ECC TLS 2021
      Atos TrustedRoot Root CA RSA G2 2020
      Atos TrustedRoot Root CA RSA TLS 2021
      CommScope Public Trust ECC Root-01
      CommScope Public Trust ECC Root-02
      CommScope Public Trust RSA Root-01
      CommScope Public Trust RSA Root-02
      D-Trust SBR Root CA 1 2022
      D-Trust SBR Root CA 2 2022
      LAWtrust Root CA2 (4096)
      Sectigo Public Email Protection Root E46
      Sectigo Public Email Protection Root R46
      Sectigo Public Server Authentication Root E46
      Sectigo Public Server Authentication Root R46
      SSL.com Client ECC Root CA 2022
      SSL.com Client RSA Root CA 2022
      SSL.com TLS ECC Root CA 2022
      SSL.com TLS RSA Root CA 2022
      Telekom Security SMIME ECC Root 2021
      Telekom Security SMIME RSA Root 2023
      Telekom Security TLS ECC Root 2020
      Telekom Security TLS RSA Root 2023
      TrustAsia Global Root CA G3
      TrustAsia Global Root CA G4


author: wangjiang <app@cameyan.com> - 2023.2.60-5
changelog:
  - remove expired and sync new certificates
    Removing:
      Certificate "Explicitly Distrust DigiNotar Root CA"
      Certificate "Baltimore CyberTrust Root"
    Adding:
      Certificate "FIRMAPROFESIONAL CA ROOT-A WEB"
      Certificate "TWCA CYBER Root CA"
      Certificate "TWCA Global Root CA G2"
      Certificate "SecureSign Root CA12"
      Certificate "SecureSign Root CA14"
      Certificate "SecureSign Root CA15"
      Certificate "D-TRUST BR Root CA 2 2023"
      Certificate "D-TRUST EV Root CA 2 2023"


author: sunhai<sunhai10@huawei.com> - 1.17.4-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:cairo_truetype_reverse_cmap detected memory leaks
         fix read memory access
         fix call get_unaligned_be32 heap buffer overflow
         fix heap buffer overflow in cairo_cff_parse_charstring


author: chenyanpanHW <chenyanpan@huawei.com> - 1.4.33-3
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-Fix-SafeNet-eToken-5110-SC-issue.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-Fix-SafeNet-eToken-5110-SC-issue-firmware-0.13.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: shixuantong <shixuantong1@huawei.com> - 21.4-28
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:disable use-dns for secondary nics
         Make duplicate route add succeed
         Fix predictable interface rename issue


author: dongyuzhen <dongyuzhen@h-partners.com> - 21.4-29
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix(net): klibc ipconfig PROTO compatibility
         fix(openstack): Fix bond mac_address


author: shixuantong <shixuantong1@huawei.com> - 21.4-32
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:chore: set recursive=False for ensure_dir if parent path is "/"
         test(openstack): Test bond mac address
         fix: Ensure properties for bonded interfaces are properly translated


author: Linux_zhang <zhangruifang@h-partners.com> - 21.4-33
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         skip some test if there are multiple NICs with the MAC address 'ee:ee:ee:ee:ee:ee'


author: shixuantong <shixuantong1@huawei.com> - 21.4-37
changelog:
  - Type:bugfix
  - CVE:
  - SUG:NA
  - DESC:fix: Add get_connection_with_tls_context() for requests 2.32.2+


author: fuanan <fuanan3@h-partners.com> - 3.22.0-10
changelog:
  - remove the architecture judgment in the patches section;
  - include all patches in the source package.


author: huyubiao <huyubiao@huawei.com> - 9.0-18
changelog:
  - sync patches from community
  - add backport-numfmt-don-t-require-a-suffix-with-from-iec-i.patch
        backport-sort-fix-debug-buffer-overrun.patch
        backport-tac-avoid-out-of-bounds-access.patch
        backport-yes-avoid-failure-on-CHERI-protected-systems.patch


author: huyubiao <huyubiaox@gmail.com> - 9.0-25
changelog:
  - sync patches from community
  - add backport-basenc-auto-pad-base32-and-base64-inputs-when-decodi.patch
        backport-basenc-fix-stripping-of-chars-in-some-encodings.patch
        backport-chcon-fix-memory-leak-in-error-path.patch
        backport-numfmt-fix-buffer-over-read-CWE-126.patch
        backport-regex-fix-parse_bracket_exp-double-free.patch
        backport-seq-be-more-accurate-with-large-integer-start-values.patch
        backport-unexpand-fix-heap-buffer-overflow-with-tabs-NUM.patch


author: fly_fzc <2385803914@qq.com> - 9.0-26
changelog:
  - sync patches from community
  - add backport-timeout-prioritize-timed-out-exit-status.patch
        backport-pinky-promptly-diagnose-write-errors.patch
        backport-numfmt-fix-dropped-custom-suffix-when-failing-to-par.patch
        backport-dd-don-t-continue-copying-when-ftruncate-fails-using.patch
        backport-cat-don-t-treat-copy_file_range-EFBIG-as-fatal.patch


author: fuanan <fuanan3@h-partners.com> - 2.13-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert fix CVE-2015-1197 because it causes AT testcases problems


author: chenziyang <chenziyang4@huawei.com> - 2.13-10
changelog:
  - Type:CVE
  - ID:CVE-2015-1197
  - SUG:NA
  - DESC:backport CVE-2015-1197, delete revert-CVE-2015-1197.patch and backport the following 2 bugfix patches


author: chenhaixiang <chenhaixiang3@huawei.com> - 8.0.2-2
changelog:
  - arm64: Fix again segfault in arm64_is_kernel_exception_frame()
    when corrupt stack pointer address is given


author: Hewenliang <hewenliang4@huawei.com> - 3.16.1-7
changelog:
  - fix the null pointer of get_tty_driver.
  - criu files Dont cache fd ids for device files.
  - pre dump call vmsplice with SPLICE_F_GIFT.


author: chenyanpanHW <chenyanpan@huawei.com> - 2.3.3-5
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-cryptsetup-add-system-library-paths.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fix-compat-test.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0003-add-test-case-for-sm4.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0004-Fix-CVE-2021-4122-LUKS2-reencryption-crash-recovery-.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0005-Fix-OpenSSL-2-crypto-backend-PBKDF2-possible-iterati.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0006-fix-potential-null-pointer-dereference.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0007-Update-file-cryptsetup-ssh.c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Funda Wang <fundawang@yeah.net> - 1:2.4.0-15
changelog:
  - fix CVE-2025-58060, CVE-2025-58364
  - move www files into main package due to requirement by web interface


author: gaihuiying <eaglegai@163.com> - 1:2.4.0-19
changelog:
  - fix CVE-2026-27447,CVE-2026-34978,CVE-2026-34979,CVE-2026-34980,CVE-2026-34990,CVE-2026-39314,CVE-2026-39316


author: zhouyihang <zhouyihang3@h-partners.com> - 7.79.1-39
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:libssh: fix freeing of resources in disconnect
         openssl: fix crash on missing cert password


author: zhouyihang <zhouyihang3@h-partners.com> - 7.79.1-45
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:libssh: fix readdir issues
         krb5_gssapi: fix memory leak on error path
         pop3: fix CAPA response termination detection
         libssh: properly free sftp_attributes


author: zhouyihang <zhouyihang3@h-partners.com> - 7.79.1-46
changelog:
  - Type:CVE
  - CVE:CVE-2025-14017 CVE-2025-14524 CVE-2025-15079 CVE-2025-15224
  - SUG:NA
  - DESC:fix CVE-2025-14017 CVE-2025-14524 CVE-2025-15079 CVE-2025-15224


author: zhouyihang <zhouyihang_z@163.com> - 7.79.1-47
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:formdata: validate callback is non-NULL before use
         tftp: correct the filename length check


author: zhouyihang <zhouyihang_z@163.com> - 7.79.1-48
changelog:
  - Type:CVE
  - CVE:CVE-2026-1965 CVE-2026-3783 CVE-2026-3784
  - SUG:NA
  - DESC:fix CVE-2026-1965 CVE-2026-3783 CVE-2026-3784


author: wangkai <13474090681@163.com> - 1.11.23-54
changelog:
  - Add patches from fedora, improve C compatibility and fix build failures caused by higher gcc versions


author: chenyanpanHW <chenyanpan@huawei.com> - 71.1-3
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-ndctl-test-Fix-device-dax-mremap-test.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-zero_info_block-skip-seed-devices.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: hongjinghao <hongjinghao@huawei.com> - 1:1.12.20-9
changelog:
  - add backport-bus-dir-watch-Do-not-crash-with-128-dirs.patch	
  backport-Do-not-crash-when-reloading-configuration.patch


author: liuyumeng <liuyumeng5@huawei.com> - 0.40.0-2
changelog:
  - add patch:dconf read random contents of memory causing discrepancy,initialize memory to eliminate discrepancy


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.3-5
changelog:
  - Type:CVE
  - ID:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
  - SUG:restart
  - DESC:fix CVE-2022-2795,CVE-2022-38177 and CVE-2022-38178


author: hanhuihui <hanhuihui5@huawei.com> - 4.14.0-19
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dnf:Remove --duplicates and --oldinstallonly exit with 0 when nothing to remove and Add all candidates for reinstall to solver


author: LuWu <2398491106@qq.com> - 4.14.0-20
changelog:
  - Limit queries to nevra forms when provided by command and Update the man page entry for the countme option


author: chenhaixing <chenhaixing@huawei.com> - 4.3.1-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dnf-plugins-core:download plugin:respect install_weak_deps option value


author: lingsheng <lingsheng1@h-partners.com> - 2.86-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Update DNS records after pruning DHCP leases
         Fix potential memory leak
         Fix possible SIGSEGV in bpf.c
         adapt bugfix allow binding mac with ipv6


author: luoguocui <luoguocui@h-partners.com> - 2.86-12
changelog:
  - Type:bugfix
  - CVE:
  - SUG:NA
  - DESC:Fix bad reply to DHCPCONFIRM messages (wrong message type)
         Fix reply confirm packet when binding-mac-with-ip6 on


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 2.86-13
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix bounds checking in check_ia()
         Fix SEGV in Dbus code
         More fixes for DHCP ops in Dbus when DHCP not configured


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 7.4.2-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:delete buildrequires perl,
         because the compilation dependency has been added to the basic project


author: xinghe <xinghe2@h-partners.com> - 2.0.11-10
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix: if libvirt and ebtables are installed at the same time, ping the operation prompts "sendmsg: Operation not permitted".


author: yanglu <yanglu72@h-partners.com> - 2.0.11-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:rebuild package to ensure that the upgrade between branches is normal


author: xinghe <xinghe2@h-partners.com> - 2.0.11-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix ebtables-restore --noflush failed when ebtables is uninstall


author: taolinghongfei <taolinghongfei@h-partners.com> - 202011-30
changelog:
  - fix CVE-2026-22795,CVE-2026-22796
  - fix CVE-2025-69420
  - fix CVE-2025-69421
  - fix CVE-2025-68160
  - fix CVE-2025-69418
  - fix CVE-2025-69419


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 18-4
changelog:
  - Fix segfault when passed --index is greater than current boot order size
    Add missing short option handling for --index (-I)


author: zhangxingrong <zhangxingrong@uniontech.com> - 18-5
changelog:
  - Fix the incorrect long parameter in help messages
  - efibootmgr: delete_bootnext is just a boolean, not an entry id


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.38.3-1
changelog:
  - Upgrade to 3.38.3
  - Update Version, Release, Source0, BuildRequires
  - Temporaryly disable libportal, because there isn't in cunrrent community


author: andy <liuyang01@kylinos.cn> - 2:5.15-8
changelog:
  - Type:requirement
  - Id:NA
  - SUG:NA
  - DESC:ethtool: Fix SFF-8472 transceiver module identification
          ethtool: Add default branch to sff8636_show_all_ioctl switch
          qsfp: Better handling of Page 03h netlink read failure
          module-eeprom: treat zero arguments like any other arguments for hex dump


author: zhangyaqi <zhangyaqi@kylinos.cn> - 2:5.15-9
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:add NULL check before jsonw_string_field() in print_string()
         netlink: add NULL check for get_string() in features.c


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.38.2-1
changelog:
  - Upgrade to 3.38.2
  - Delete 0001-Resolves-deb-762530-rhbz-1061177-add-man-pages.patch that
    existed in 3.38.2 version
  - Use meson rebuild, change 'SYNCTEX_CFLAGS' to 'CFLAGS'


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.38.4-1
changelog:
  - Upgrade to 3.38.4
  - Update Version, Release, Source, BuildRequires, Requires, Obsoletes
  - Update stage 'install', use sed delete one line that will cause fault


author: dillon chen <dillon.chen@gmail.com> - 2.5.2-4
changelog:
  - CVE-2021-36045, CVE-2021-36046, CVE-2021-36047, CVE-2021-36048,
  - CVE-2021-36050, CVE-2021-36051, CVE-2021-36052, CVE-2021-36053,
  - CVE-2021-36054, CVE-2021-36055, CVE-2021-36056, CVE-2021-36058,
  - CVE-2021-36064, CVE-2021-39847, CVE-2021-40716, CVE-2021-40732,
  - CVE-2021-42528, CVE-2021-42529, CVE-2021-42530, CVE-2021-42531,
  - CVE-2021-42532


author: zhouyihang <zhouyihang3@h-partners.com> - 1.0.2-8
changelog:
  - Type:requirement
  - ID:NA
  - SUG:NA
  - DESC:To reduce unnecessary loading of ebtables-related kernel modules


author: zhouyihang <zhouyihang3@h-partners.com> - 1.0.2-12
changelog:
  - Type:bugfix
  - CVE:NA   
  - SUG:NA   
  - DESC:fix(icmp): fix check_icmpv6_name() to use correct IPv6 names
         fix(ipset): fix configuring IP range for ipsets with nftables
         fix(ipset): fix configuring "timeout","maxelem" values for
         fix(rich): validate service name of rich rule
         fix(rich): fix range check for large rule limit
         fix(nftables): use current pkttype keywords


author: wangkai <13474090681@163.com> - 2:2.11.7-1
changelog:
  - Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
    CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
    CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660


author: wangkai <13474090681@163.com> - 2:2.11.8-1
changelog:
  - Update to 2.11.8
  - Fix CVE-2026-22852, CVE-2026-22856, CVE-2026-22859, CVE-2026-23530, CVE-2026-23531,
    CVE-2026-23532, CVE-2026-23534, CVE-2026-24491, CVE-2026-24675, CVE-2026-24676,
    CVE-2026-24679, CVE-2026-24681, CVE-2026-24682, CVE-2026-24683, CVE-2026-24684,
    CVE-2026-25997, CVE-2026-26271, CVE-2026-26986, CVE-2026-27015, CVE-2026-25941,
    CVE-2026-22855, CVE-2026-22857, CVE-2026-23533, CVE-2026-23732, CVE-2026-23883,
    CVE-2026-23884


author: wangkai <13474090681@163.com> - 2:2.11.8-3
changelog:
  - Fix CVE-2026-26955, CVE-2026-26965, CVE-2026-31806, CVE-2026-31883, CVE-2026-31885,
    CVE-2026-33984, CVE-2026-33983


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.38.2-1
changelog:
  - Upgrade to 3.38.2
  - Update Version, Release, Source0, BuildRequires
  - Use meson rebuild and install
  - Delete patches, delete pam.d related and other two files which not in 3.38.2
  - Add new file session.conf. modify /etc/gdm/custom.conf


author: Funda Wang <fundawang@yeah.net> - 9.55.0-18
changelog:
  - Type:CVE
  - ID:NA
  - SUG:NA
  - DECS: Fix CVE-2025-27830, CVE-2025-27832, CVE-2025-27834, CVE-2025-27835, CVE-2025-27836


author: hdliu <dev03108@linx-info.com> - 9.55.0-19
changelog:
  - Add font mappings so that the PS interpreter can rasterize Chinese content using the two fonts STKaiti-Regular and STheiti-Regular.


author: yaoxin <yao_xin001@hoperun.com> - 5.2.2-1
changelog:
  - Update to 5.2.2
    * Fixes for CVE-2023-48161 (bsc#1217390), CVE-2022-28506 (bsc#1198880)
    * Address SF issue #151: A heap-buffer-overflow in gif2rgb.c:294:45
    * Address SF issue #166: a read zero page leads segment fault in
      getarg.c and memory leaks in gif2rgb.c and gifmalloc.c


author: fuanan <fuanan3@h-partners.com> - 2.33.0-14
changelog:
  - Type:CVE
  - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
  - SUG:NA
  - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465


author: fuanan <fuanan3@h-partners.com> - 2.33.0-19
changelog:
  - Type:CVE
  - ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
  - SUG:NA 
  - DESC:Fix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835


author: fuanan <fuanan3@h-partners.com> - 2.33.0-20
changelog:
  - Type:CVE
  - ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
  - SUG:NA
  - DESC:refix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835


author: zhaoyonghao10 <zhaoyonghao10@h-partners.com> - 2.72.2-27
changelog:
  - apply 3 patches: backport-gsocks4aproxy-Fix-a-buffer-leak-when-finishing-con.patch, backport-tests-Add-thread-pool-stress-test-to-task-c.patch, backport-test-cleanup-trailing-spaces-task-c.patch


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.38.6-1
changelog:
  - Upgrade to 3.38.6
  - Update Version, Release, BuildRequires, stage 'files'
  - Delete 4 patches, modify the left 6 patches


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.38.5-1
changelog:
  - Upgrade to 3.38.5
  - Update Version, Release, Source0, BuildRequires, Requires, stage 'build', 'install', 'files'
  - Use meson rebuild, delete setup-shell.desktop, which doesn't existed in this version
  - Delete honor-firstboot-disabled.patch which existed in this version


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.36.0-1
changelog:
  - Upgrade to 3.36.0
  - Update Version, Release, Source0, stage 'build' and 'files'
  - Delete old patch that existed in new version, add new patch


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.38.0-1
changelog:
  - Upgrade to 3.38.0
  - Update Version, Release, Source0, Obsoletes
  - Modify patches, update stage 'files'


author: wangxiao<wangxia65@huawei.com> -3.30.1-6
changelog:
  - move the libcroco sources directly under src/st
    remove the libcroco dependency from the meson.build files


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.38.4-1
changelog:
  - Upgrade to 3.38.4
  - Update Version, Release, Source0, BuildRequires, Requires
  - Delete patches which existed in current version, modify one patch
  - Update stage 'build', 'check', 'files'


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.38.4-2
changelog:
  - Delete requires gdm-libs which gdm contains it
  - Use pipewire replace pipewire-gstreamer which pipewire contains it
  - Add xdg-desktop-portal-gtk for launching flatpak apps etc


author: chenyanpanHW <chenyanpan@huawei.com> - 3.38.4-3
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/gnome-shell-favourite-apps-firefox.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: huzhangying <huzhangying@huawei.com> - 1.17.3-43
changelog:
  - Type:CVE
  - CVE:CVE-2025-58183,CVE-2025-58185,CVE-2025-58189,CVE-2025-61724
  - SUG:NA
  - DESC:fix CVE-2025-58183,CVE-2025-58185,CVE-2025-58189,CVE-2025-61724


author: huzhangying <huzhangying@huawei.com> - 1.17.3-47
changelog:
  - Type:CVE
  - CVE:CVE-2025-61732,CVE-2025-68119,CVE-2025-61731,CVE-2025-61728,CVE-2025-61726,CVE-2025-68121
  - SUG:NA
  - DESC:fix CVE-2025-61732,CVE-2025-68119,CVE-2025-61731,CVE-2025-61728,CVE-2025-61726,CVE-2025-68121


author: huzhangying <huzhangying@huawei.com> - 1.17.3-49
changelog:
  - Type:CVE
  - CVE:CVE-2026-27140
  - SUG:NA
  - DESC:fix CVE-2026-27140 cmd/go disallow cgo trust boundary bypass
  - Type:CVE
  - CVE:CVE-2026-32288
  - SUG:NA
  - DESC:fix CVE-2026-32288 archive/tar limit sparse format entries


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-44
changelog:
  - Type:CVE
  - CVE:CVE-2024-1048
  - SUG:NA
  - DESC:grub-set-bootflag: Fix for CVE-2024-1048
         commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
         kern/acpi: Skip NULL entries in RSDT and XSDT
         util/grub-mount: Check file path sanity


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-46
changelog:
  - Type:CVE
  - CVE:CVE-2021-46848
  - SUG:NA
  - DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-47
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix log printing in tpcm_kunpeng moddule
         osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
         osdep: Introduce include/grub/osdep/major.h and use it
         disk/mdraid1x_linux: Prevent infinite recursion
         disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-49
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:commands/legacycfg: Avoid closing file twice
         disk/lvm: GRUB fails to detect LVM volumes due to an incorrect computation of mda_end


author: sunhai <sunhai10@huawei.com> - 1:2.06-51
changelog:
  - Type:CVE
  - CVE:CVE-2024-45781,CVE-2024-45782,CVE-2024-56737,CVE-2024-45780,CVE-2024-45783,CVE-2024-49504,CVE-2025-0624,CVE-20
  24-45774,CVE-2024-45775,CVE-2025-0622,CVE-2025-0622,CVE-2025-0622,CVE-2024-45776,CVE-2024-45777,CVE-2025-0690,CVE-20
  25-1118,CVE-2024-45778,CVE-2024-45779,CVE-2025-0677,CVE-2025-0684,CVE-2025-0685,CVE-2025-0686,CVE-2025-0689,CVE-2025
  -0678,CVE-2025-1125
  - SUG:NA
  - DESC:fix the vulnerabilities announced on February 18th, 2025


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1:2.06-53
changelog:
  - Type:CVE
  - CVE:CVE-2025-61661,CVE-2025-61662,CVE-2025-54771,CVE-2025-61663,CVE-2025-61664
  - SUG:NA
  - DESC:commands/usbtest: Ensure string length is sufficient in usb string processing
         commands/usbtest: Use correct string length field
         tests/lib/functional_test: Unregister commands on module unload
         normal/main: Unregister commands on module unload
         gettext/gettext: Unregister gettext command on module unload
         kern/file: Call grub_dl_unref() after fs->fs_close()
         commands/test: Fix error in recursion depth calculation


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.2.3-1
changelog:
  - Upgrade to 1.2.3
  - Update Version, Release, Source0, BuildRequires
  - Update stage 'build', 'install', 'check' and 'files'


author: Funda Wang <fundawang@yeah.net> - 1.18.4-8
changelog:
  - fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
    CVE-2024-47607, CVE-2024-47615, CVE-2024-47835


author: yaoxin <yao_xin001@hoperun.com> - 1.16.2-7
changelog:
  - Fix cves:
    CVE-2024-47606,CVE-2024-47613,CVE-2024-47775,CVE-2024-47776
    CVE-2024-47777,CVE-2024-47778,CVE-2024-47774,CVE-2024-47540
    CVE-2024-47602,CVE-2024-47601,CVE-2024-47834,CVE-2024-47537
    CVE-2024-47597,CVE-2024-47543,CVE-2024-47596,CVE-2024-47539
    CVE-2024-47546


author: Funda Wang <fundawang@yeah.net> - 1.16.2-12
changelog:
  - fix CVE-2026-1940, CVE-2026-3083, CVE-2026-3085
  - fix GStreamer-SA-2026-0002: Out-of-bounds read in MP4 demuxer


author: yangchenguang <yangchenguang@kylinsec.com.cn> - 3.24.30-8
changelog:
  - Fix the problem that the prompt information of network icon volume icon is not displayed
  - update xscreen size when x11 screen size change
  - always send the monitors changed signal when screen size change
  - Add function definition of gtk_image_set_from_pixbuf_with_scale


author: chenyanpanHW <chenyanpan@huawei.com> - 2.0.14-17
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/guile-multilib.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/guile-i18ntest.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/guile-threadstest.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/guile-2.0.14-gc_pkgconfig_private.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.2.4-1
changelog:
  - Upgrade to 1.2.4
  - Update Version, Release, Source0, BuildRequires
  - Delete sed operation which existed in this version
  - Add patch for fix CVE-2021-33516
  - Update stage 'prep', 'build', 'install', 'check', 'files'


author: yaoxin <yao_xin001@hoperun.com> - 1.14.5-1
changelog:
  - Update to 1.14.5:
    * Added signed Windows msi binary and signed Apple dmg binary files.
    * Moved examples to the HDF5Examples folder in the source tree.
    * Added support for using zlib-ng package as the zlib library
    * Disable CMake UNITY_BUILD for hdf5
    * Removed "function/code stack" debugging configuration option
    * Added configure options for enabling/disabling non-standard programming language features
    * Added the CMake variable HDF5_ENABLE_ROS3_VFD to the HDF5 CMake config
      file hdf5-config.cmake. This allows it to easily detect if the library
      has been built with or without read-only S3 functionality.
    * Fixed many CVE:
      CVE-2024-29157,CVE-2024-29158,CVE-2024-29159,CVE-2024-29160,CVE-2024-29161,CVE-2024-29162
      CVE-2024-29163,CVE-2024-29164,CVE-2024-29165,CVE-2024-29166,CVE-2024-32605,CVE-2024-32606
      CVE-2024-32607,CVE-2024-32608,CVE-2024-32609,CVE-2024-32610,CVE-2024-32611,CVE-2024-32612
      CVE-2024-32613,CVE-2024-32614,CVE-2024-32615,CVE-2024-32616,CVE-2024-32617,CVE-2024-32618
      CVE-2024-32619,CVE-2024-32620,CVE-2024-32621,CVE-2024-32622,CVE-2024-32623,CVE-2024-32624
      CVE-2024-33873,CVE-2024-33874,CVE-2024-33875,CVE-2024-33876,CVE-2024-33877,CVE-2018-13871
      CVE-2018-13875,CVE-2018-14034


author: Funda Wang <fundawang@yeah.net> - 1.14.5-2
changelog:
  - add patches from azure linux for fixing CVE-2025-2153, CVE-2025-2310,
    CVE-2025-2914, CVE-2025-2926, CVE-2025-6816, CVE-2025-2925,
    CVE-2025-2924, CVE-2025-44905, CVE-2025-6269, CVE-2025-6750,
    CVE-2025-6857, CVE-2025-7067, CVE-2025-7068, CVE-2025-6858,
    CVE-2025-2923, CVE-2025-2913, CVE-2025-6516, CVE-2025-6818,
    CVE-2025-6817, CVE-2025-6856, CVE-2025-7069


author: chenyanpanHW <chenyanpan@huawei.com> - 9.58-2
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-hdparm-fallocate-close-fd.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-hdparam-Remove-security_password-printing.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0003-hdparm-fix-fd-leak-in-sysfs_write_attr.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-22
changelog:
  - Type:CVE
  - ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
  - SUG:NA
  - DSEC:fix some CVEs


author: xingwei <xingwei14@h-partners.com> - 2.4.51-24
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:mod_log_config: Fix LogFormat directive merging
         Fix X509 leak and Increase MAX_CONCURRENCY hard limit
         mod_proxy_balancer: Fix the handling of the stickysession
         mod_cache_socache: Fix possible crash on error path
         mod_ssl: Check SSL_CTX_new() return value
         core: Report invalid Options argument when parsing AllowOverride directives


author: yanglu <yanglu72@h-partners.com> - 2.4.51-25
changelog:
  - Type:CVE
  - CVE:CVE-2025-49812,CVE-2025-23048,CVE-2024-47252,CVE-2024-43204,CVE-2024-42516
  - SUG:NA
  - DESC:fix CVE-2025-49812 CVE-2025-23048 CVE-2024-47252 CVE-2024-43204 CVE-2024-42516
         mod_lua: Fix memory handling in output filters.
         Fix a regression that caused stickysession keys
         avoid ap_set_content_type when processing a _Request_Header
         set_cookie_name: ensure correct format


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 2.4.51-26
changelog:
  - Type:bugfix
  - CVE:
  - SUG:NA
  - DESC:mod_proxy: SetEnv proxy-nohalfclose to disable half-close tunneling


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 2.4.51-27
changelog:
  - Type:CVE
  - CVE:CVE-2025-58098,CVE-2025-65082,CVE-2025-55753,CVE-2025-66200
  - SUG:NA
  - DESC:SSI request judgment
         Request header similarity detection
         fix mod_mod error retry delay calculation to not already doubling the wait on the first error.
         stop accepting "note" in RequestHeader.


author: tangce <tangce1@h-partners.com> - 2.4.51-29
changelog:
  - Type:CVE
  - CVE:CVE-2026-24072,CVE-2026-29168,CVE-2026-29169,CVE-2026-33006,CVE-2026-34059
  - SUG:NA
  - DESC:fix CVE-2026-24072,CVE-2026-29168,CVE-2026-29169,CVE-2026-33006,CVE-2026-34059


author: wujichao <wujichao1@huawei.com> - 2.1.5-12
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: combine ten similar submissions into one(0125-fix-clang-build-error.patch) and Upgrade from upstream


author: jingxiaolu<lujingxiao@huawei.com> - 2.1.5-18
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: sync patches from upstream for refactoring sandbox and bugfixing


author: gaoxingwang <gaoxingwang1@huawei.com> - 10.12-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:remove redundant provide for service cmd and delete unnecessary obseletes to fix upgrade problem


author: zhangxingrong <zhangxingrong@uniontech.com> - 3.16-4
changelog:
  - iperf3 now builds correctly on architectures without native support for 64-bit atomic types, by linking with the libatomic library


author: wangkai <13474090681@163.com> - 3.17.1-1
changelog:
  - Update to 3.17.1
  - iperf3 no longer changes its current working directory in --daemon mode. This results in more 
    predictable behavior with relative paths, in particular finding key and credential files for authentication.
  - A new --json-stream option has been added to enable a streaming output format, consisting of 
    a series of JSON objects (for the start of the test, each measurement interval, and the end of the test) separated by newlines
  - UDP tests now work correctly between different endian hosts
  - The --fq-rate parameter now works for --reverse tests
  - The statistics reporting interval is now available in the --json start test object


author: caokeming <caokeming@huawei.com> - 1:5.15.0-20
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ctrl: Fix fd leak in ctrl_list()
         ctrl: Fix fd leak in ctrl_listen()
         devlink: use snprintf instead of sprintf


author: xinghe <xinghe2@h-partners.com> - 1:5.15.0-22
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ss: fix expired time format of timer
         route: filter by interface on multipath routes
         lib: names: check calloc return value in db_names_alloc


author: yanglu <yanglu72@h-partners.com> - 1.8.7-15
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:libxtables：Fix memleak in xtopt_parse_hostmask
         nft：Avoid memleak in error path of nft_cmd_new
         exit if called by setuid executeable
         fix for non verbose check command
         use fully random so that nft can understand
         Use xtables_malloc in mnl_err_list_node_add
         nft: Special casing for among match in compare_matches
         extensions: libipt_icmp: Fix confusion between 255/255 and any
         Revert libiptc: fix wrong maptype of base chain counters on restore
         extensions: Fix checking of conntrack --ctproto 0
         libxtables: xtoptions: Fix for non-CIDR-compatible hostmasks
         libxtables: xtoptions: Prevent XTOPT_PUT with XTTYPE_HOSTMASK
         libiptc: Fix for another segfault due to chain index NULL pointer
         libiptc: Fix for segfault when renaming a chain


author: yanglu <yanglu72@h-partners.com> - 1.8.7-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:libxtables:Fix memleak of matches' udata
         Fix parsing of empty string arg in '-c' option


author: yanglu <yanglu72@h-partners.com> - 1.8.7-19
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:extensions:recent:Fix format string for unsigned values
         nft:cmd:Init struct nft_cmd::head early


author: langfei <langfei@huawei.com> - 3:1.8.0-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC: filter console only output when using journal mode;
  -	Slience ... rebalancing messages for unmigratable IRQs;
  -	Avoid repeated affinity checks when no change is necessary;
  -	activate_mapping:set errsave before first jump to the error label.


author: langfei <langfei@huawei.com> - 3:1.8.0-13
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC: Fix socket API being blocked for 10s;
  -	Flush file brfore closing;
  -	Check fflush() return value.


author: DXwangg <wangjiawei80@huawei.com> -1:1.8.0.482.b08-0
changelog:
  - update to 8u482
  - modified 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch
  - modified Fix-LineBuffer-vappend-when-buffer-too-small.patch
  - modified add-missing-test-case.patch
  - add Fix-KAEProvider-SM2-Code.patch


author: sunhai <sunhai10@huawei.com> - 0.16-4
changelog:
  - backport patch to Fix build with clang-15+
  - backport patch to Fix json_tokener_parse_ex: handle out of memory errors


author: sunhai <sunhai10@huawei.com> - 0.16-5
changelog:
  - Handle yet another out of memory condition
  - Fix issue 854 Set error json_tokener_error_memory in
  - Issue 857 fix a few places where json_tokener should
  - Handle NULL gracefully in json_tokener_free
  - Issue 881 don t allow json_tokener_new_ex with a dep


author: dongyuzhen <dongyuzhen@h-partners.com> - 1.11.1-30
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix the problem of missing kata-containers source code in the src package


author: jade_t <yzd50036@gmail.com> - 1.11.1-35
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix the problem of self-compilation failure in the kata-containers source package


author: yanglu <yanglu72@h-partners.com> - 006-2
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC:Add crashkernel auto for Arm 
         enable kdump and set default reserve memory 512MB
         fix test failed due to default value change


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-305.0.0.208
changelog:
  - !21262  arm64/mpam: Extending MPAM features and bugfix
  - arm64/mpam: Allow MBMIN to be set to 0
  - arm64/mpam: Add quirk for MPAM MSMON_MBWU monitor NRDY bit
  - arm64/mpam: Add quirk to shrink MATA PMG range
  - !21211  scsi: hisi_sas: Change the debugfs parameters dump count default value
  - scsi: hisi_sas: Change the debugfs parameters dump count default value
  - !21163  gic: Add hip09 support for HISILICON_ERRATUM_165010801
  - gic: Add hip09 support for HISILICON_ERRATUM_165010801


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-306.0.0.209
changelog:
  - !21336  arm64/mpam: Add nrdy latency to mbw_rdmon.
  - arm64/mpam: Add nrdy latency to mbw_rdmon.
  - !21243  fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds
  - !20753 [OLK-5.10] Fix the issue that vm can't access to host with virtio-net
  - !21301 [OLK-5.10]:update patches for sw64 architecture
  - !21274  l2tp: fix double dst_release() on sk_dst_cache race
  - !21215 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-6.6.y
  - sw64: fix the compilation error when CONFIG_DEBUG_VIRTUAL is enabled
  - sw64: add support for batched TLB flushing during unmap
  - sw64: fix the parameter passing logic of memblock_mark_nomap
  - sw64: add HUGE_VMAP support for c4
  - sw64: adjust the value of CONFIG_RELOCATION_TABLE_SIZE
  - sw64: define get_cycles macro
  - sw64: cpuidle: refine C6 state stability
  - sw64: fix mmap_base exceeding Java assertion address
  - sw64: add memb before/after atomic
  - sw64: add EDAC support with dynamic node and MC detection
  - sw64: fix: getcpu passed a null pointer error
  - sw64: add barriers and tlb flush for set_atc
  - sw64: adapt kernel page table for kdump
  - sw64: adapt kernel page table for memory hotplug
  - sw64: adjust the marking and definitions of some kernel mapping functions
  - sw64: adapt kernel page table for S4
  - sw64: iommu: refactor iommu v2 initialization
  - sw64: fix an inappropriate lock in __set_memory
  - sw64: cache: fix shared_cpu_map when PPTT is invalid
  - sw64: add alternative runtime patching
  - sw64: pci: fix IO_BASE if numa_off
  - sw64: use ioremap to map spaces for cpufreq and S3
  - sw64: add definitions for kernel-required CPU capabilities
  - sw64: pci: add sunway pci controller for Command Completed errata
  - sw64: kvm: add qemu-gdb watchpoint support
  - sw64: kvm: fix srcu lock leak in pv steal time
  - !21277  mm: make sure freeram is smaller than totalram
  - mm: make sure freeram is smaller than totalram
  - l2tp: fix double dst_release() on sk_dst_cache race
  - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds
  - nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready()
  - vhost: move smp_rmb() into vhost_get_avail_idx()
  - vhost: correct misleading printing information


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-307.0.0.210
changelog:
  - !21428  RDMA/umad: Reject negative data_len in ib_umad_write
  - !21420 v3  CVE-2026-23352
  - !21383  fat: avoid parent link count underflow in rmdir
  - !21435 Fix CVE-2026-23388
  - !21392  ext4: fix memory leak in ext4_ext_shift_extents()
  - !21385  ext4: fix dirtyclusters double decrement on fs shutdown
  - !21384  ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O
  - Squashfs: check metadata block offset is within range
  - RDMA/umad: Reject negative data_len in ib_umad_write
  - !21404  fix queue start/stop imbalance under race
  - x86/efi: efi_unmap_boot_services: fix calculation of ranges_to_free size
  - x86/efi: defer freeing of boot services memory
  - dm: fix queue start/stop imbalance under remove/resume races
  - dm: fix queue start/stop imbalance under suspend/load/resume races
  - ext4: fix memory leak in ext4_ext_shift_extents()
  - ext4: fix dirtyclusters double decrement on fs shutdown
  - ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O
  - fat: avoid parent link count underflow in rmdir
  - !21376 spi: hisi-kunpeng: Fixed the wrong debugfs node name in hisi_spi debugfs initialization
  - spi: hisi-kunpeng: Fixed the wrong debugfs node name in hisi_spi debugfs initialization
  - Revert "Fixed the wrong debugfs node name in hisi_spi debugfs initialization"
  - !21321  nfs: return EISDIR on nfs3_proc_create if d_alias is a dir
  - nfs: return EISDIR on nfs3_proc_create if d_alias is a dir


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-308.0.0.211
changelog:
  - !21578  apparmor: fix unprivileged local user can do privileged policy management
  - !21574  ksmbd: Compare MACs in constant time
  - apparmor: fix unprivileged local user can do privileged policy management
  - !21498  ALSA: usb-audio: Use correct version for UAC3 header validation
  - ksmbd: Compare MACs in constant time
  - !21232 [Hygon][5.10][Feature] spi: dw: Add device HID for Hygon SPI controller
  - !21518  KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE
  - !21489  cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_sample()
  - !21455  time/jiffies: Mark jiffies_64_to_clock_t() notrace
  - !21172 [OLK-5.10] Hygon: Update ccp-crypto driver, to support SM4-XTS/GCM and model 10h cpu
  - !21189 [Hygon][5.10][Feature] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 18h
  - !21201 [Hygon][5.10][Feature] hwmon/k10temp: Add support for Hygon family 18h model 18h
  - !21233 [Hygon][5.10][Feature]mmc: sdhci-pci: Add support for Hygon SD controller
  - !21202 [Hygon][5.10][Feature] iommu/hygon: Add support for Hygon family 18h model 18h IOAPIC
  - !21203 [Hygon][5.10][Feature] ALSA: hda: Add support for Hygon family 18h model 18h HD-Audio
  - !21204 [Hygon][5.10][Feature] EDAC/amd64: Add support for Hygon family 18h model 18h
  - !21186 [Hygon][5.10][Feature] x86/amd_nb: Add Hygon family 18h model 18h PCI IDs
  - !21234 [Hygon][5.10][Feature] mmc: sdhci-acpi: Add device HID for Hygon eMMC controller
  - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE
  - spi: dw: Add device HID for Hygon SPI controller
  - !21501 v2  net: usb: pegasus: validate USB endpoints
  - !21467  mm/huge_memory: fix folio isn't locked in softleaf_to_folio()
  - net: usb: pegasus: validate USB endpoints
  - EDAC/amd64: Add support for Hygon family 18h model 18h
  - ALSA: usb-audio: Use correct version for UAC3 header validation
  - cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_sample()
  - !21460  xfs: fix internal error from AGFL exhaustion
  - anolis: mmc: sdhci-acpi: Add device HID for Hygon eMMC controller
  - mmc: sdhci-pci: Add support for Hygon SD controller
  - ALSA: hda: Add support for Hygon family 18h model 18h HD-Audio
  - mm/huge_memory: fix folio isn't locked in softleaf_to_folio()
  - hwmon/k10temp: Add support for Hygon family 18h model 18h
  - iommu/hygon: Add support for Hygon family 18h model 18h IOAPIC
  - perf/x86/uncore: Add DF PMU support for Hygon family 18h model 18h
  - x86/amd_nb: Add Hygon family 18h model 18h PCI IDs
  - xfs: fix internal error from AGFL exhaustion
  - time/jiffies: Mark jiffies_64_to_clock_t() notrace
  - crypto: ccp: fix build issue like redefined RI_XXX_PRESENT
  - crypto: ccp: SM2 ccp encryption support Hygon model 10h
  - crypto: ccp: check if ccp supports sm4-xts/sm4-gcm
  - crypto: ccp: Optimize sm4-gcm algorithm for hygon ccp.
  - crypto: ccp: sm4-xts crypto support data not aligned to 16 bytes
  - crypto: ccp: Support SM4-XTS for hygon ccp
  - crypto: ccp: Support SM4-GCM for hygon ccp


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-309.0.0.212
changelog:
  - !20937 [OLK-5.10] Fix CVE-2025-39788
  - !20902 [OLK-5.10] Fix CVE-2023-53194
  - !20866 [OLK-5.10] Fix CVE-2025-39738
  - !20675 [OLK-5.10] Fix CVE-2025-40205
  - !20599 [OLK-5.10] fix CVE-2025-38476
  - !20611 【OLK-5.10】fix CVE-2025-39794
  - !20838 [OLK-5.10] fix CVE-2022-50518
  - !21749  fs: aio: set VMA_DONTCOPY_BIT in mmap to fix NULL-pointer-dereference error
  - fs: aio: set VMA_DONTCOPY_BIT in mmap to fix NULL-pointer-dereference error
  - !21724 RDMA/hns: Support setting GSI QP SL
  - !21590  x86/uprobes: Fix XOL allocation failure for 32-bit tasks
  - !21595  pstore/ram: fix buffer overflow in persistent_ram_save_old()
  - !21708  nfsd: provide locking for v4_end_grace
  - !21469 [Hygon][5.10][Feature]EDAC/amd64: Adjust the maximum number of memory controllers
  - !20238 Fix CVE-2025-68724
  - !21728  media: dvb-core: fix wrong reinitialization of ringbuffer on reopen
  - !21716  apparmor: validate DFA start states are in bounds in unpack_pdb
  - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id
  - media: dvb-core: fix wrong reinitialization of ringbuffer on reopen
  - apparmor: validate DFA start states are in bounds in unpack_pdb
  - nfsd: provide locking for v4_end_grace
  - !21700 RDMA/hns: Fix the panic caused by a large number of print
  - RDMA/hns: Support setting GSI QP SL
  - RDMA/hns: Fix missing CQE when UD QP use different SL
  - RDMA/hns: Fix hung task when drain qp failed.
  - RDMA/hns: Fix the panic caused by a large number of print
  - RDMA/hns: Delete unused bit_size param
  - !21601 Fix CVE-2026-31408
  - !21597 Fix CVE-2026-31393
  - !21673  apparmor: fix race between freeing data and fs accessing it
  - !21603  ice: Fix memory leak in ice_set_ringparam()
  - !21381  bonding: fix use-after-free due to enslave fail after slave array update
  - !21335 Fix CVE-2025-68813
  - apparmor: fix race between freeing data and fs accessing it
  - !21660  apparmor: fix race on rawdata dereference
  - !21647  CVE-2025-39955
  - !21642 Fix CVE-2026-23407
  - !21653  PM: runtime: Fix a race condition related to device removal
  - !21640 Fix CVE-2026-23406
  - !20550 [OLK-5.10] Fix CVE-2022-50300
  - !21620  Xen privcmd driver: restrict to target domain at boot when not in dom0 to fix secure boot issue
  - apparmor: fix race on rawdata dereference
  - !21497  bus: fsl-mc: fix use-after-free in driver_override_show()
  - !21631 Fix CVE-2026-23408
  - PM: runtime: Fix a race condition related to device removal
  - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold
  - !21614  apparmor: replace recursive profile removal with iterative approach
  - !21495  *** fix CVE-2026-23208 ***
  - !21615  apparmor: fix: limit the number of levels of policy namespaces
  - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request().
  - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().
  - apparmor: fix missing bounds check on DEFAULT table in verify_dfa()
  - apparmor: fix side-effect bug in match_char() macro usage
  - apparmor: Fix double free of ns_name in aa_replace_profiles()
  - xen/privcmd: add boot control for restricted usage in domU
  - xen/privcmd: unregister xenstore notifier on module exit
  - xen/privcmd: restrict usage in unprivileged domU
  - apparmor: fix: limit the number of levels of policy namespaces
  - apparmor: replace recursive profile removal with iterative approach
  - ice: Fix memory leak in ice_set_ringparam()
  - Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access
  - pstore/ram: fix buffer overflow in persistent_ram_save_old()
  - x86/uprobes: Fix XOL allocation failure for 32-bit tasks
  - EDAC/amd64: Adjust the maximum number of memory controllers per node to 1 for Hygon family 18h model 18h
  - bus: fsl-mc: fix use-after-free in driver_override_show()
  - ALSA: usb-audio: Use the right limit for PCM OOB check
  - ALSA: usb-audio: Prevent excessive number of frames
  - bonding: fix use-after-free due to enslave fail after slave array update
  - ipvs: fix ipv4 null-ptr-deref in route error path
  - scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE
  - parisc: Fix locking in pdc_iodc_print() firmware call
  - fs/ntfs3: Add length check in indx_get_root
  - btrfs: do not allow relocation of partially dropped subvolumes
  - btrfs: avoid potential out-of-bounds in btrfs_encode_fh()
  - ARM: tegra: Use I/O memcpy to write to IRAM
  - rpl: Fix use-after-free in rpl_do_srh_inline().
  - btrfs: fix extent map use-after-free when handling missing device in read_one_chunk


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-310.0.0.213
changelog:
  - !21832  smb: client: fix krb5 mount with username option
  - !21838  ACPI: EC: clean up handlers on probe failure in acpi_ec_setup()
  - ACPI: EC: clean up handlers on probe failure in acpi_ec_setup()
  - smb: client: fix krb5 mount with username option
  - !21801 Fix CVE-2026-23450
  - !21800 Fix CVE-2025-71078
  - !21505 crypto: hisilicon/qm - support querying the hardware fault status through VFs
  - !21811 RDMA/hns: Fix warning in poll cq direct mode
  - !21758  nfsd: fix heap overflow in NFSv4.0 LOCK replay cache
  - RDMA/hns: Fix warning in poll cq direct mode
  - net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock()
  - powerpc/64s/slb: Fix SLB multihit issue during SLB preload
  - !21766  Fix CVE-2026-23271
  - perf: Fix Wdeclaration-after-statement
  - perf: Fix __perf_event_overflow() vs perf_remove_from_context() race
  - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache
  - crypto: hisilicon/qm - support querying the hardware fault status through VFs
  - crypto: hisilicon/qm - add concurrency protection for variable err_threshold


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-311.0.0.214
changelog:
  - !22036 drivers:misc:sdma-dae: Write the CQ head pointer correctly.
  - drivers:misc:sdma-dae: Write the CQ head pointer correctly.
  - !21966  netfilter: nf_tables: unconditionally bump set->nelems before insertion
  - !21965  net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs
  - !21968  netfilter: xt_CT: drop pending enqueued packets on template removal
  - !21967  netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels
  - !21964  netfilter: Fix CVE-2026-23351
  - !21963 v2  bonding: limit BOND_MODE_8023AD to Ethernet devices
  - !21983 Fix CVE-2026-23383
  - bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing
  - netfilter: xt_CT: drop pending enqueued packets on template removal
  - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels
  - netfilter: nf_tables: unconditionally bump set->nelems before insertion
  - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs
  - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase
  - netfilter: nf_tables: de-constify set commit ops function argument
  - bonding: limit BOND_MODE_8023AD to Ethernet devices
  - !21936 drivers:misc:sdma-dae: Remove interference print.
  - drivers:misc:sdma-dae: Remove interference print.
  - !21901 [Hygon][5.10][bugfix] Fix switch_kernel_fpu_prepare in Hygon non-atomic NT copy path
  - !21896 driver/misc/sdma-dae:Resolve conflicts between NCOB and SDMA
  - drivers:misc:sdma-dae: Checking the address alignment
  - !21897 Fix CVE-2026-31473
  - x86/fpu: fix wrong thread_flag check in switch_kernel_fpu_prepare
  - x86/copy_user_avx2: add sfence before vzeroupper in fixup path
  - !21877 net: hns3: Clear the static alarm about 'implicit type conversion'
  - media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex
  - net: hns3: Clear the static alarm about 'implicit type conversion'
  - net: hns3: Clear the static alarm about 'no previous prototype'
  - net: hns3: Clear the static alarm about discarding the 'const' qualifier
  - net: hns3: set the freed pointer to NULL
  - net: hns3: fix wrong location of HCLGE_FD_AD_QID_H_B


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-312.0.0.215
changelog:
  - !22139  Fix CVE-2026-31431
  - crypto: algif_aead - Fix minimum RX size check for decryption
  - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
  - crypto: authencesn - Fix src offset when decrypting in-place
  - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
  - crypto: authenc - use memcpy_sglist() instead of null skcipher
  - crypto: algif_aead - snapshot IV for async AEAD requests
  - crypto: algif_aead - Revert to operating out-of-place
  - crypto: algif_aead - use memcpy_sglist() instead of null skcipher
  - crypto: scatterwalk - Backport memcpy_sglist()
  - crypto: doc - fix kernel-doc notation in chacha.c and af_alg.c
  - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec
  - !22064 CVE-2026-31504
  - !22058 CVE-2026-31515
  - !22007 Fix CVE-2026-31677
  - crypto: af_alg - limit RX SG extraction by receive buffer budget
  - net: fix fanout UAF in packet_release() via NETDEV_UP race
  - !21871 [Hygon][5.10][Feature] pwm: dwc: Add support for Hygon pwm controller
  - !21982 Backport the patch that fix whitespace in sev_cmd_buffer_len() from upstream.
  - af_key: validate families in pfkey_send_migrate()
  - crypto: ccp - Fix whitespace in sev_cmd_buffer_len()
  - pwm: dwc: Add support for Hygon pwm controller
  - openeuler_defconfig: Add CONFIG_PWM_DWC
  - pwm: Add DesignWare PWM Controller Driver


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-313.0.0.216
changelog:
  - !22057 Fix CVE-2026-31590
  - !21943 Fix CVE-2026-31450
  - !21988  Fix CVE-2026-31449
  - !21118 [OLK-5.10] Fix CVE-2025-68340
  - !22045  ALSA: ctxfi: Limit PTP to a single page
  - !22100  KVM: x86: Use scratch field in MMIO fragment to hold small write values
  - !21944  media: dvb-net: fix OOB access in ULE extension header tables
  - !22099 Fix CVE-2026-31678
  - !22070 CVE-2026-31673
  - !22068 CVE-2026-31674
  - !22067 CVE-2026-31680
  - !22065 CVE-2026-31682
  - !22073 CVE-2026-31570
  - KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION
  - KVM: x86: Use scratch field in MMIO fragment to hold small write values
  - openvswitch: defer tunnel netdev_put to RCU release
  - can: gw: fix OOB heap access in cgw_csum_crc8_rel()
  - af_unix: read UNIX_DIAG_VFS data under unix_state_lock
  - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check()
  - net: ipv6: flowlabel: defer exclusive option free until RCU teardown
  - bridge: br_nd_send: linearize skb before parsing ND options
  - ALSA: ctxfi: Limit PTP to a single page
  - ext4: validate p_idx bounds in ext4_ext_correct_indexes
  - ext4: prevent partial update of the extents path
  - ext4: refactor ext4_ext_rm_idx() to index 'path'
  - media: dvb-net: fix OOB access in ULE extension header tables
  - ext4: publish jinode after initialization
  - team: Move team device type change at the end of team_port_add


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-314.0.0.217
changelog:
  - !22409  CVE
  - !22408  *** fix CVE-2026-31527 ***
  - !22423  ALSA: ctxfi: Check the error for index mapping
  - ALSA: ctxfi: Check the error for index mapping
  - !22405  dmaengine: idxd: Fix not releasing workqueue on .release()
  - !22389  Fix CVE-2025-38680
  - !22373  fbdev: Fix vmalloc out-of-bounds write in fast_imageblit
  - HID: core: Mitigate potential OOB by removing bogus memset()
  - HID: core: Add printk_ratelimited variants to hid_warn() etc
  - HID: multitouch: Check to ensure report responses match the request
  - Bluetooth: MGMT: validate LTK enc_size on load
  - driver/core: Fix kabi broken of platform_device/device/bus_type
  - driver core: platform: use generic driver_override infrastructure
  - hwmon: axi-fan: don't use driver_override as IRQ name
  - driver core: generalize driver_override in struct device
  - !22299  ALSA: fireworks: bound device-supplied status before string array lookup
  - dmaengine: idxd: Fix not releasing workqueue on .release()
  - !22354  Bluetooth: SMP: derive legacy responder STK authentication from MITM state
  - !22337  HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure
  - media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format()
  - !22273  EFI/CPER: don't dump the entire memory region
  - !22366  Input: uinput - fix circular locking dependency with ff-core
  - !22344  rxrpc: proc: size address buffers for %pISpc output
  - !22357  dmaengine: idxd: Fix memory leak when a wq is reset
  - fbdev: Fix vmalloc out-of-bounds write in fast_imageblit
  - !22328  ALSA: caiaq: fix stack out-of-bounds read in init_card
  - !22279 Fix CVE-2026-31699
  - !22277  crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed
  - Input: uinput - fix circular locking dependency with ff-core
  - dmaengine: idxd: Fix memory leak when a wq is reset
  - Bluetooth: SMP: derive legacy responder STK authentication from MITM state
  - rxrpc: proc: size address buffers for %pISpc output
  - HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure
  - !22297 Fix CVE-2026-23317
  - !20491  scsi: leapraid: add RAID disk hide/show events and fix misc issues
  - ALSA: caiaq: fix stack out-of-bounds read in init_card
  - !22303  module: Fix kernel panic when a symbol st_shndx is out of bounds
  - !22318  drm/ioc32: stop speculation on the drm_compat_ioctl path
  - !22231 Revert "[cpufreq]Fix re-boost issue after hotplugging a CPU"
  - !22230  cpufreq: conservative: Reset requested_freq on limits change
  - drm/ioc32: stop speculation on the drm_compat_ioctl path
  - !22293 Fix CVE-2026-43407
  - module: Fix kernel panic when a symbol st_shndx is out of bounds
  - ALSA: fireworks: bound device-supplied status before string array lookup
  - drm/vmwgfx: Return the correct value in vmw_translate_ptr functions
  - libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply()
  - crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed
  - crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed
  - !22225  bpf: Fix regsafe() for pointers to packet
  - !22263 CVE-2026-31419
  - !22237 Fix CVE-2026-31697
  - EFI/CPER: don't dump the entire memory region
  - !21864 Backport the patch that add support for SEV attestation command
  - bonding: remove unused bond_is_first_slave and bond_is_last_slave macros
  - net: bonding: fix use-after-free in bond_xmit_broadcast()
  - bonding: do not set usable_slaves for broadcast mode
  - net: bonding: update the slave array for broadcast mode
  - !22132 Ethernet: Linkdata: Supports Linkdata ethernet Controllers
  - !22253 [OLK-5.10] Fix CVE-2026-43284
  - Ethernet: Linkdata: Supports Linkdata ethernet Controllers
  - xfrm: esp: avoid in-place decrypt on shared skb frags
  - crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed
  - Revert "[cpufreq]Fix re-boost issue after hotplugging a CPU"
  - cpufreq: conservative: Reset requested_freq on limits change
  - bpf: Fix regsafe() for pointers to packet
  - !22214  futex: Clear stale exiting pointer in futex_lock_pi() retry path
  - !22205  pstore: ram_core: fix incorrect success return when vmap() fails
  - !22207  perf/x86/intel/uncore: Skip discovery table for offline dies
  - !22211  usb: cdns3: gadget: fix state inconsistency on gadget init failure
  - !22216  x86/CPU: Fix FPDSS on Zen1
  - !22186 Fix CVE-2026-31679
  - x86/CPU: Fix FPDSS on Zen1
  - futex: Clear stale exiting pointer in futex_lock_pi() retry path
  - usb: cdns3: gadget: fix state inconsistency on gadget init failure
  - !22174 Fix CVE-2026-31592
  - !22094  NFSD: Defer sub-object cleanup in export put callbacks
  - !22102  NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd
  - !21933  ksmbd: do not expire session on binding failure
  - !21927  nvme-pci: ensure we're polling a polled queue
  - !21925  ext4: avoid infinite loops caused by residual data
  - !22169  xen/privcmd: fix double free via VMA splitting
  - !22168  Buffer overflow in drivers/xen/sys-hypervisor.c
  - !22163  spi: spi-dw-dma: fix print error log when wait finish transaction
  - perf/x86/intel/uncore: Skip discovery table for offline dies
  - pstore: ram_core: fix incorrect success return when vmap() fails
  - openvswitch: validate MPLS set/set_masked payload length
  - KVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm->lock
  - xen/privcmd: fix double free via VMA splitting
  - Buffer overflow in drivers/xen/sys-hypervisor.c
  - spi: spi-dw-dma: fix print error log when wait finish transaction
  - KVM/SVM: add support for SEV attestation command
  - NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd
  - NFSD: Defer sub-object cleanup in export put callbacks
  - ksmbd: do not expire session on binding failure
  - nvme-pci: ensure we're polling a polled queue
  - ext4: avoid infinite loops caused by residual data
  - scsi: leapraid: add RAID disk hide/show events and fix misc issues


author: shixin <shixin21@huawei.com> - 29-8
changelog:
  - libkmod: fix possible out-of-bounds memory access
    shared: avoid passing {NULL, 0} array to bsearch()


author: caixiaomeng <caixiaomeng2@huawei.com> - 1:0.9.5-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ignore sssnic module when building hotpatch to fix sssnic wrongly dependency of sssnic


author: caixiaomeng <caixiaomeng2@huawei.com> - 1:0.9.5-12
changelog:
  - Type:bugfix
  - ID:NA                                                                                                         
  - SUG:NA
  - DESC:adpat kpatch bundle symbols to kernel change


author: caixiaomeng <caixiaomeng2@huawei.com> - 1:0.9.5-13
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch and fix .rela.init.text section changed due to __BTF_id_ changed


author: fuanan <fuanan3@h-partners.com> - 1:0.9.5-15
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patch
         backport-lookup-fix-local-bind-check.patch


author: chenyanpanHW <chenyanpan@huawei.com> - .0-4
changelog:
  - DESC: delete -Sgit from 
  %setup -a 0      -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-fix-lapack-devel-build-error.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-Fix-out-of-bounds-read-in-slarrv.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Eibz-Chan <chenbingzhao@huawei.com> - 590-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:[add] backport patches from upstream
  	Fix-memory-leak-when-using-corrupt-lesshst-file.patch
  	Fix-crash-when-enter-invaid-pattern-in-command.patch


author: xihaochen <xihaochen@huawei.com> - 4.9.2-1
changelog:
  - Type:requirements                                                                                                                                            
  - Id:NA
  - SUG:NA
  - DESC:update lftp to 4.9.2


author: lingsheng <lingsheng1@h-partners.com> - 3.5.2-9
changelog:
  - Type:CVE
  - ID:CVE-2025-5914,CVE-2025-5916,CVE-2025-5917,CVE-2025-5918
  - SUG:NA
  - DESC:fix CVE-2025-5914 CVE-2025-5916 CVE-2025-5917 CVE-2025-5918


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-43
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:revert community patches
         [del] backport-libblkid-ext-add-checksum-support.patch
         backport-libblkid-fix-spurious-ext-superblock-checksum-mismat.patch


author: markeryang <yanglongkang@h-partners.com> - 2.37.2-44
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport community patches
         [add] backport-lslogins-remove-possible-memory-leaks-coverity-scan.patch
               backport-mkfs.bfs-fix-memory-leaks-and-weak-code.patch
               backport-cfdisk-fix-memory-leak-and-possible-NULL-dereference.patch
               backport-swapoff-clean-up-tag-resolution.patch
               backport-libblkid-befs-fix-underflow.patch


author: cenhuilin <cenhuilin@kylinos.cn> - 2.37.2-46
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:lsblk: fix memory leak [coverity scan]
         lsblk: fix possible use-after-free


author: yixiangzhike <yixiangzhike007@163.com> - 2.37.2-48
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport community patches
           fix off-by-one in maximum last sector calculation


author: zhangmingyi <zhangmingyi5@huawei.com> 2:0.8.1-12
changelog:
  - backport patches from upstream:
    backport-libbpf-Fix-NULL-pointer-dereference-in_bpf_object__c.patch
    backport-libbpf-Fix-str_has_sfxs-return-value.patch
    backport-libbpf-Initialize-err-in-probe_map_create.patch


author: jinzhiguang <jinzhiguang@kylinos.cn> - 2:0.8.1-13
changelog:
  - backport patch from upstream:
    backport-libbpf-Modify-the-function-name-in-libbpf.c-to-match.patch


author: xiesongyang <xiesongyang@huawei.com> - 2:0.8.1-14
changelog:
  - backport patch from upstream:
    backport-libbpf-Fix-an-error-in-64bit-relocation-value-comput.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:0.8.1-15
changelog:
  - backport patch from upstream:
    backport-libbpf-Avoid-uninitialized-value-in-BPF_CORE_READ_BI.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:0.8.1-16
changelog:
  - backport patch from upstream:
    backport-libbpf-Add-NULL-checks-to-bpf_object__prev_map,next_.patch
    backport-libbpf-Apply-map_set_def_max_entries-for-inner_maps-.patch
    backport-libbpf-Fix-uninitialized-warning-in-btf_dump_dump_ty.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:0.8.1-17
changelog:
  - backport patch from upstream:
    backport-libbpf-Dont-take-direct-pointers-into-BTF-data-from-.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:0.8.1-18
changelog:
  - backport patch from upstream:
    backport-libbpf-Do-not-resolve-size-on-duplicate-FUNCs.patch
    backport-libbpf-Fix-bpf_object__open_skeleton-s-mishandling-o.patch
    backport-libbpf-Fix-segfault-due-to-libelf-functions-not-sett.patch
    backport-libbpf-Fixed-getting-wrong-return-address-on-arm64-a.patch
    backport-libbpf-fix-sym_is_subprog-logic-for-weak-global-subp.patch
    backport-libbpf-move-global-data-mmap-ing-into-bpf_object__lo.patch


author: tianmuyang <tianmuyang@huawei.com> 2:0.8.1-19
changelog:
  - Adaption for sched type eBPF program:
    backport-libbpf-Adaption-for-sched-type-eBPF-program.patch


author: andy <liuyang01@kylinos.cn> 2:0.8.1-20
changelog:
  - backport patch from upstream:
    backport-libbpf-Fix-out-of-bound-read.patch
    backport-libbpf-fix-LDX_STX_ST-CO-RE-relocation-size-adjustment-logic.patch
    backport-libbpf-Fix-hypothetical-STT_SECTION-extern-NULL-deref-case.patch


author: tianmuyang <tianmuyang@huawei.com> 2:0.8.1-21
changelog:
  - Add bpf_cpumask_op API to support prefered cpu control in eBPF program:
    backport-libbpf-Add-bpf_cpumask_op-API-to-support-prefered-cp.patch


author: chenyanpanHW <chenyanpan@huawei.com> - 2.1.0-3
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-correct-realpath-test-failure.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-fix-Werror-format-security.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: hanhuihui <hanhuihui5@huawei.com> - 0.69.0-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix history rollback cmd not meet the expectation
         Fix memory leak in subject-py


author: zhaoyonghao10 <zhaoyonghao10@h-partners.com> - 0.69.0-12
changelog:
  - apply 2 patches: backport-Mark-all-protected-packages-as-user-installed-for-.patch, backport-fix--compare-RPMItem-in-transaction-with-rpmvercmp.patch


author: liujing <liujing144@huawei.com> - 1.0.0-30
changelog:
  - update patches from https://code.foxkit.us/adelie/aports-old/blob/50de7d785d5500a14ed00fa12e483e8ceaf4f06a/main/libdv


author: doupengda <doupengda@loongson.cn> 1.0.1-7
changelog:
  - update config.guess and config.sub
  - fix SOURCE1 file autoconf.h '__loongarch64__' to '__loongarch64'


author: shixuantong <shixuantong1@huawei.com> - 2.1.12-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:ssl: do not trigger EOF if some data had been successfully read


author: shixuantong <shixuantong1@huawei.com> - 3.4.2-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix x86/ffi64 calls with 6 gp and some sse registers
         Robustify floating point comparison in test
         Fix floating point compare


author: weijin deng <weijin.deng@turbolinux.com.cn> - 0.18.1-1
changelog:
  - Upgrade to 0.18.1
  - Update Version, Release, Source0, stage 'files'
  - Stage 'build' use meson build


author: Wenlong Ding <wenlong.ding@turbolinux.com.cn> - 2.6.4-22
changelog:
  - Remove /usr/lib64/libglade-2.0.so.* from libglade2-devel package which already exists in libglade2 package.


author: wangkai <13474090681@163.com> - 2.5.18-5
changelog:
  - Fix CVE-2026-40334, CVE-2026-40334, CVE-2026-40338, CVE-2026-40339,
    CVE-2026-40340, CVE-2026-40341


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.2.0-1
changelog:
  - Upgrade to 1.2.0
  - Update Version, URL, Source0. delete Patch0. update stage 'prep'
  - Add 'find_lang', update stage 'files'


author: yanglu <yanglu72@h-partners.com> - 3.0.11-2
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:avoid crashing in icalcomponent_normalize
         fix a memleak in icalcomponent_normalize


author: yangchenguang <yangchenguang@kylinsec.com.cn> - 72.1-7
changelog:
  - icu already supports loongarch64 architecture
  - Remove loongarch64 patch and modify sw_64 support patch to use all arch


author: chenyanpanHW <chenyanpan@huawei.com> - 1.16.4-2
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-evdev-strip-the-device-name-of-format-directives.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git-core


author: echo <2220386943@qq.com> - 1.2-2
changelog:
  - update version to 1.2-2
  - support new create thread
  - description of supplementary documents
  - support event grouping
  - add the mangleName in symbol.h


author: chengyechun <chengyechun1@huawei.com> - 3.7.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:prevent segfault in af_request_type
         fix bridge info parsing


author: chenyanpanHW <chenyanpan@huawei.com> - 0.16-2
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0000-libpciaccess-rom-size.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-libpciaccess-add-sw64.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.28.0-1
changelog:
  - Upgrade to 1.28.0
  - Update Version, Release, Source0, BuildRequires
  - Use meson rebuild, delete python3.8-fix.patch that for autoreconf


author: xinghe <xinghe2@h-partners.com> - 2:1.6.38-3
changelog:
  - Type:cves
  - CVE:CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720
  - SUG:NA
  - DESC:fix CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720


author: shixuantong <shixuantong1@huawei.com> - 0.21.1-7
changelog:
  - Fix write buffer overflow by 1 in domain_to_punycode()
  - Fix stack buffer overflow WRITE 1 in domain_to_punycode()
  - Avoid 8bit overflow in is_public_suffix()
  - Avoid 'NULL + 1' as it is UB


author: yixiangzhike <yixiangzhike007@163.com> - 1.4.4-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:change the files order in patch file fix-doc-about-difok.patch


author: yixiangzhike <yixiangzhike007@163.com> - 1.14.2-6
changelog:
  - backport patches from upstream
      Fix a memory leak of the glib slist
      Add missing end callback for already downloaded zchunk files
      Fix memory leak of repo and repomd
      Fix a crash when the gnupghomedir is NULL or not specified on Python API


author: zhangjun<zhangjun@kylinos.cn> - 0.7.20-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memory leak when using testsolv to execute cases 
         Fix segfault on conflict resolution when using bindings


author: zhangpan <zhangpan103@h-partners.com> - 2.74.2-7
changelog:
  - Type:cves
  - ID:CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913
  - SUG:NA
  - DESC:fix CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913


author: zhangpan <zhangpan103@h-partners.com> - 2.74.2-10
changelog:
  - Type:cves
  - ID:CVE-2025-4476 CVE-2025-4948 CVE-2025-4969
  - SUG:NA
  - DESC:fix CVE-2025-4476 CVE-2025-4948 CVE-2025-4969


author: nickyang <nickyang228@163.com> - 2.74.2-12
changelog:
  - Type:cves
  - ID:CVE-2026-1539 CVE-2026-1467 CVE-2026-1761 CVE-2026-0716
  - SUG:NA
  - DESC:fix CVE-2026-1539 CVE-2026-1467 CVE-2026-1761 CVE-2026-0716


author: nickyang <nickyang228@163.com> - 2.74.2-13
changelog:
  - Type:cves
  - ID:CVE-2026-1760 CVE-2026-1801 CVE-2026-2369
  - SUG:NA
  - DESC:fix CVE-2026-1760 CVE-2026-1801 CVE-2026-2369


author: gaihuiying <eaglegai@163.com> - 0.9.6-11
changelog:
  - Type:CVE
  - CVE:CVE-2025-4877 CVE-2025-4878 CVE-2025-5372
  - SUG:NA
  - DESC:fix CVE-2025-4877 CVE-2025-4878 CVE-2025-5372


author: zhangbinqin <zhangbinqin@h-partners.com> - 0.9.6-15
changelog:
  - Type:CVE
  - Id:CVE-2026-0968 CVE-2026-0967 CVE-2026-0966 CVE-2026-0965 CVE-2026-0964 CVE-2025-14821
  - SUG:NA
  - DESC:fix CVE-2026-0968 CVE-2026-0967 CVE-2026-0966 CVE-2026-0965 CVE-2026-0964 CVE-2025-14821


author: zhangbinqin <zhangbinqin@h-partners.com> - 1.10.0-8
changelog:
  - Type:CVE
  - CVE:CVE-2026-7598
  - SUG:NA
  - DESC:add username_len bounds checking to fix CVE-2026-7598


author: wangjiang <wangjiang37@h-partners.com> - 1.4.7-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:tdb: Do not pass non–null‐terminated strings to strcmp()
         python: Safely clear structure members


author: chenyanpanHW <chenyanpan@huawei.com> - 0.10.2-2
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-tevent-fix-CID-1437974-dereference-after-null-check.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: chenziyang <chenziyang4@huawei.com> - 2:1.6.2-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch to fix failed run-ptrace-mapper testcase


author: chenyanpanHW <chenyanpan@huawei.com> - 0.1.5-18
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0000-Link-with-znodelete-to-disallow-unloading.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-Revert-use-atexit-to-call-libusb_exit.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Jiabo Feng <fengjiabo1@huawei.com> - 6.2.0-67
changelog:
  - virt-host-validate: Fix IOMMU output on aarch64
  - cpu: revert: Modify virCPUarmCompare to perform compare actions
  - cpu: Modify virCPUarmCompare to perform compare actions
  - add phytium s5000c support on arm architecture for capability


author: Jiabo Feng <fengjiabo1@huawei.com> - 6.2.0-69
changelog:
  - migration: support vfio-pci device migration
  - libvirt: Support specifying the cache size presented to guest
  - util: fix success return for virProcessKillPainfullyDelay()
  - test: Fix testNodeGetFreePages
  - qemu: DomainGetGuestVcpusParams: reduce scope of tmp


author: ZixinLi <lizixin10@h-partners.com> - 6.2.0-70
changelog:
  - Fix CVE-2025-12748 CVE-2025-13193
  - conf: split out virDomainDefParseIDs (CVE-2025-12748)
  - conf: Add virDomainDefIDsParseString (CVE-2025-12748)
  - bhyve: Check ACLs before parsing the whole domain XML (CVE-2025-12748)
  - libxl: Check ACLs before parsing the whole domain XML (CVE-2025-12748)
  - lxc: Check ACLs before parsing the whole domain XML (CVE-2025-12748)
  - vz: Check ACLs before parsing the whole domain XML (CVE-2025-12748)
  - qemu: Check ACLs before parsing the whole domain XML (CVE-2025-12748)
  - qemu: snapshot: Set umask for 'qemu-img' when creating external inactive snapshots (CVE-2025-13193)


author: Funda Wang <fundawang@yeah.net> - 2.9.14-19
changelog:
  - Type:CVE
  - CVE:CVE-2025-49794
  - CVE:CVE-2025-49796
  - SUG:NA
  - DESC: fix CVE-2025-49794, CVE-2025-49796


author: fuanan <fuanan3@h-partners.com> - 1.1.37-4
changelog:
  - fix xsltCleanupSourceDoc function:
    Clean up attributes in source doc
    Avoid null deref on documents without root


author: yanglu <yanglu72@h-partners.com> - 33.6-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ensure that the src package contains the loongson and sw patches


author: wujichao <wujichao1@huawei.com> - 0.3-35
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:bugfix: Information in cpu directory is overwritten after lxcfs restart


author: xiejing <xiejing@kylinos.cn> - 1:10.5.25-1
changelog:
  - Bump to 10.5.25 for resolving CVE-2024-21096, CVE-2023-22084
  - Fix version description in systemd service file


author: openEuler Buildteam <buildteam@openeuler.org> - 20190618-1
changelog:
  - Type: enhancement
  - ID:   NA
  - SUG:  NA
  - DESC: Update to 20190618, add help package.

  - Type: enhancement
  - ID:   NA
  - SUG:  NA
  - DESC: Update to 20190116, add help package.


author: chenyanpanHW <chenyanpan@huawei.com> - 4.0.26-2
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-comment-invalid-info-in-conf-file.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yanglu <yanglu72@h-partners.com> - 2:0.95-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Change UDP and ICMP sockets binding to accept a source IP from the -a CLI option


author: yaoxin <1024769339@qq.com> - 8.0.41-1
changelog:
  - Update to 8.0.41 for fix CVEs(CVE-2025-21490,CVE-2025-21491,CVE-2025-21495,
    CVE-2025-21497,CVE-2025-21500,CVE-2025-21501,CVE-2025-21503,CVE-2025-21505,
    CVE-2025-21518,CVE-2025-21519,CVE-2025-21520,CVE-2025-21522,CVE-2025-21523,
    CVE-2025-21529,CVE-2025-21531,CVE-2025-21540,CVE-2025-21543,CVE-2025-21546,
    CVE-2025-21555,CVE-2025-21559)


author: yaoxin <1024769339@qq.com> - 8.0.42-1
changelog:
  - Update to 8.0.42 for fix CVEs(CVE-2025-21574,CVE-2025-21575,CVE-2025-21577,
    CVE-2025-21580,CVE-2025-21581,CVE-2025-21584,CVE-2025-21585,CVE-2025-30681,
    CVE-2025-30682,CVE-2025-30683,CVE-2025-30684,CVE-2025-30685,CVE-2025-30687,
    CVE-2025-30688,CVE-2025-30689,CVE-2025-30693,CVE-2025-30695,CVE-2025-30696,
    CVE-2025-30699,CVE-2025-30703,CVE-2025-30704,CVE-2025-30705,CVE-2025-30710,
    CVE-2025-30715,CVE-2025-30721,CVE-2025-30722


author: yaoxin <1024769339@qq.com> - 8.0.43-1
changelog:
  - Update to 8.4.6 for fix CVEs (CVE-2025-50068,CVE-2025-50077,CVE-2025-50078,
    CVE-2025-50079,CVE-2025-50080,CVE-2025-50081,CVE-2025-50082,CVE-2025-50083,
    CVE-2025-50084,CVE-2025-50085,CVE-2025-50086,CVE-2025-50087,CVE-2025-50091,
    CVE-2025-50092,CVE-2025-50093,CVE-2025-50094,CVE-2025-50096,CVE-2025-50097,
    CVE-2025-50098,CVE-2025-50099,CVE-2025-50100,CVE-2025-50101,CVE-2025-50102,
    CVE-2025-50104,CVE-2025-53023)


author: wangkai <13474090681@163.com> - 8.0.44-1
changelog:
  - Update to 8.0.44 for fix CVEs (CVE-2025-53069,CVE-2025-53062,CVE-2025-53054,
    CVE-2025-53053,CVE-2025-53045,CVE-2025-53044,CVE-2025-53042,CVE-2025-53040)


author: yaoxin <1024769339@qq.com> - 8.0.45-1
changelog:
  - Update to 8.0.45 for fix CVEs (CVE-2026-21936,CVE-2026-21937,
    CVE-2026-21941,CVE-2026-21948,CVE-2026-21964,CVE-2026-21968)


author: wangkai <13474090681@163.com> - 8.0.46-1
changelog:
  - Update to 8.0.46 for fix CVEs (CVE-2026-21998, CVE-2026-22001, CVE-2026-22002,
    CVE-2026-22004, CVE-2026-22005, CVE-2026-22009, CVE-2026-22015, CVE-2026-22017,
    CVE-2026-34267, CVE-2026-34270, CVE-2026-34271, CVE-2026-34276, CVE-2026-34278,
    CVE-2026-34293, CVE-2026-34303, CVE-2026-34304, CVE-2026-34308, CVE-2026-35236,
    CVE-2026-35237, CVE-2026-35238, CVE-2026-35239, CVE-2026-35240)


author: yaoxin <yao_xin001@hoperun.com> - 8.0-1
changelog:
  - Update to 8.0
    * CVE-2024-5742: Avoid privilege escalations via symlink attacks
      on emergency save file (boo#1226099)
    * By default ^F is bound to starting a forward search, and ^B to
      starting a backward search, while M-F and M-B repeat the search
      in the corresponding direction. (See the documentation if you
      want the old bindings back.)
    * Command-line option --modernbindings (-/) makes ^Q quit, ^X cut,
      ^C copy, ^V paste, ^Z undo, ^Y redo, ^O open a file, ^W write a file,
      ^R replace, ^G find again, ^D find again backwards, ^A set the mark,
      ^T jump to a line, ^P show the position, and ^E execute.
    * For easier access, M-" is bound to placing/removing an anchor,
      and M-' to jumping to the next anchor.


author: chenyanpanHW <chenyanpan@huawei.com> - 0.2.8-19
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0000-netcf-call-aug_load-at-most-once-per-second.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-netcf-optimize-aug_match-query-for-all-ifcfg-files-related.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-netcf-linux-include-bond-element-for-bonds-with-no-slaves.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0003-netcf-Properly-classify-bond-devices-with-no-slaves.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/Fix-memory-leak-in-aug-match-mac.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: gaihuiying <eaglegai@163.com> - 1:1.0.0-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         evaluate: error out if basetypes are different
         evaluate: guard against NULL basetype
         evaluate: handle invalid mapping expressions gracefully
         evaluate: reject attempt to update a set
         evaluate: release mpz type in expr_evaluate_list() error path
         expression: missing line in describe command with invalid expression

  Thu Apr 18 2024 lingsheng <lingsheng1@h-partners.com> - 1:1.0.0-10
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:datatype: don't return a const string from cgroupv2_get_path()
  datatype: fix leak and cleanup reference counting for struct datatype
  datatype: initialize TYPE_CT_EVENTBIT slot in datatype array
  datatype: initialize TYPE_CT_LABEL slot in datatype array
  evaluate: do not remove anonymous set with protocol flags and single element
  evaluate: don't crash if object map does not refer to a value
  evaluate: error out when expression has no datatype
  evaluate: error out when store needs more than one 128bit register of align fixup
  evaluate: fix check for truncation in stmt_evaluate_log_prefix()
  evaluate: fix double free on dtype release
  evaluate: fix memleak in prefix evaluation with wildcard interface name
  evaluate: reject set in concatenation
  evaluate: revisit anonymous set with single element optimization
  evaluate: skip anonymous set optimization for concatenations
  evaluate: stmt_nat: set reference must point to a map
  evaluate: tproxy: move range error checks after arg evaluation
  evaluate: validate chain max length
  evaluate: validate maximum log statement prefix length
  exthdr: fix tcpopt_find_template to use length after mask adjustment
  exthdr: prefer raw_type instead of desc->type
  json: expose dynamic flag
  json: fix use after free in table_flags_json()
  libnftables: Drop cache in -c/--check mode
  meta: fix tc classid parsing out-of-bounds access
  netlink: don't crash if prefix for < byte is requested
  netlink: fix leaking typeof_expr_data/typeof_expr_key in netlink_delinearize_set()
  netlink: handle invalid etype in set_make_key()
  parser_bison: fix ct scope underflow if ct helper section is duplicated
  parser_bison: fix memleak in meta set error handling
  parser_bison: make sure obj_free releases timeout policies
  parser_json: Catch nonsense ops in match statement
  parser_json: Default meter size to zero
  parser_json: Fix flowtable prio value parsing
  parser_json: Fix synproxy object mss/wscale parsing
  parser_json: Fix typo in json_parse_cmd_add_object()
  parser_json: Proper ct expectation attribute parsing
  parser_json: Wrong check in json_parse_ct_timeout_policy()
  py: fix exception during cleanup of half-initialized Nftables
  rule: fix sym refcount assertion


author: gaihuiying <eaglegai@163.com> - 1:1.0.0-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         evaluate: disable meta set with ranges
         src: reject large raw payload and concat expressions
         evaluate: fix stack overflow with huge priority string
         tcpopt: don't create exthdr expression without datatype
         src: do not allow to chain more than 16 binops
         rule: fix ASAN errors in chain priority to textual names
         tests: shell: add regression test for double-free crash bug
         evaluate: handle invalid mapping expressions in stateful object
         evaluate: Fix incorrect checking the `base` variable in case of IPV6
         netlink: reset temporary set element stmt list after list splice


author: gaihuiying <eaglegai@163.com> - 1:1.0.0-13
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:parser: split tcp option rules
         cache: prepare nft_cache_evaluate() to return error
         ct timeout: fix 'list object x' vs. 'list objects in table' confusion
         ct expectation: fix 'list object x' vs. 'list objects in table' confusion
         tests: shell: connect chains to hook point


author: gaihuiying <eaglegai@163.com> - 1:1.0.0-14
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         parser_json: release buffer returned by json_dumps
         parser_json: fix handle memleak from error path
         parser_json: fix several expression memleaks from error path
         libnftables: Zero ctx->vars after freeing it


author: gaihuiying <eaglegai@163.com> - 1:1.0.0-16
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         evaluate: don't allow nat map with specified protocol
         rule: return error if table does not exist
         json: make sure timeout list is initialised
         evaluate: don't update cache for anonymous chains
         json: don't BUG when asked to list synproxies
         evaluate: compact STMT_F_STATEFUL checks
         evaluate: only allow stateful statements in set and map definitions
         netlink: fix crash when ops doesn't support udata
         netlink: Catch unknown types when deserializing objects
         netlink: Avoid potential NULL-ptr deref parsing set elem expressions
         netlink: Avoid crash upon missing NFTNL_OBJ_CT_TIMEOUT_ARRAY


author: xingwei <xingwei14@h-partners.com> - 2:7.92-4
changelog:
  - Type:bugfix
  - CVE:
  - SUG:NA
  - DESC:decouple from PCRE because it has been End-of-life, use local libpcre to build instead


author: chenyanpanHW <chenyanpan@huawei.com> - 4.29.0-2
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/nspr-gcc-atomics.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yixiangzhike <yixiangzhike007@163.com> - 0.9.12-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:Move temporary files from /var/run to /run to delete warning in installing


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p15-7
changelog:
  - Type:CVE
  - ID:CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26554
  - SUG:NA
  - DESC:make sure the buffer has enough room for the input extra characters


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p15-13
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add restart and conflict to service
         run the bootstrap script to prevent build failures


author: xuchenchen <xuchenchen@kylinos.cn> - 2.0.16-11
changelog:
  - backport patches from upstream
  - libnuma: Make numa_available respect EPERM
  - libnuma: fix nodemask allocation size for get_mempolicy


author: yeyiyang <yeyiyang3@h-partners.com> -v2.0.6-3
changelog:
  - add adapt dynamicsmt analysis if smt is not enable
  - fix code check
  - add trace log and change level intf and delete logger
  - smc-d analysis fix inconsistency in the display of zero connection


author: LHesperus <liuchanggeng@huawei.com> -v2.1.0-1
changelog:
  - remove the logger.h interface and add TRACE interface, increase safe_queue wait time to 5s
  - support reload log-level online
  - adapt analysis on riscv
  - add load base sched instance


author: fly_1997 <flylove7@outlook.com> -v2.1.1-1
changelog:
  - add hwprobe_analysis for RISC-V
  - fix error logger info
  - support kernel cluster scheduler
  - adapt for kylin-v10-sp3
  - realtime tune add new tuning item
  - fix smc insmod err
  - realtime tune skip grubby update
  - add hwprobe_tune hwprobe_ext_zbb_tune for RISC-V
  - add high_load value check


author: xujing <xujing125@huawei.com> - 30-38
changelog:
  - add the scanning path of the rpath
    fix the ELF file cannot be found due to escape of '\'
    excute brp_chrpath before arch_install_post


author: Funda Wang <fundawang@yeah.net> - 0.21.0-11
changelog:
  - fix CVE-2024-8443, CVE-2024-45615, CVE-2024-45616,
    CVE-2024-45617, CVE-2024-45618, CVE-2024-45619, CVE-2024-45620


author: chenyanpanHW <chenyanpan@huawei.com> - 2.0.0-26
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-multicast-set.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-notify-systemd-of-start-up.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-null-pointer-deref.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-openssl-1.1-fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-cve-2016-7567.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-cve-2017-17833.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/CVE-2012-4428-fix-handling-of-string-list-in-slp_common-c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/Fix-slp_iface-c-comma-expression-so-it-works-as-designed.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/Daemon-sends-wrong-service-reply-when-security-is-enabled.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/Fix-DAAddresses-hostname-resolution-issue.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/Change-default-slpreg-connection-from-UDP-to-TCP.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/Fix-interface-parsing-code-to-look-for-null-ifc-addrs.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/Fix-broadcast-functionality.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/Properly-initialize-xcastsocks-for-error-exit.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/Fix-xrealloc-to-properly-free-original-pointer-on-resize.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/CVE-2019-5544.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: xingwei <xingwei14@h-partners.com> - 2.0.0-27
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Introduce epoch command to slove package upgrade failure problem


author: zhangbinqin<zhangbinqin@h-partners.com> - 8.8p1-36
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix the missing member of the struct Authmethod method_gsskeyex


author: zhangbinqin<zhangbinqin@h-partners.com> - 8.8p1-41
changelog:
  - Type:CVE
  - CVE:CVE-2026-35414 CVE-2026-35385 CVE-2026-35386 CVE-2026-35387 CVE-2026-35388
  - SUG:NA
  - DESC:fix CVE-2026-35414 CVE-2026-35385 CVE-2026-35386 CVE-2026-35387 CVE-2026-35388


author: fly_fzc <2385803914@qq.com> - 1:1.1.1wa-15
changelog:
  - fix CVE-2025-68160 CVE-2026-22796 CVE-2026-22795 CVE-2025-69418 CVE-2025-69421 CVE-2025-69419 CVE-2025-69420


author: wujie <wujie@nj.iscas.ac.cn> - 5.6.0-10
changelog:
  - add support for riscv64 from http://fedora.riscv.rocks/koji/buildinfo?buildID=31200
    Author is David Abdurachmanov <david.abdurachmanov@gmail.com>


author: wangkai <13474090681@163.com> - 5.3.7-6
changelog:
  - Fix CVE-2024-45769,CVE-2024-45770
  - Fix buffer sizing checks in pmstore PDU handling (RHEL-57805)
  - Guard against symlink attacks in pmpost program (RHEL-57810)
  - Fix libpcp_web webgroup slow request refcounting (RHEL-58306)
  - Updated pmdahacluster for newer crm_mon versions (RHEL-50693)
  - Fix invalid memory access in pmfind utility (BZ 2135314)


author: chenyanpanHW <chenyanpan@huawei.com> - 1.9.0-3
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-pcscdaemon.c-Fix-data-race-for-AraKiri-variable.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Guofeng Yue <yueguofeng@h-partners.com> - 4.5-12
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: modify "--source_ip" to "--bind_source_ip" to fix init connection establishment with specific interface


author: wuchaochao <wuchaochao4@huawei.com> - 0.41-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Modify the spec file ,solving the problem of the test probability failure


author: wangjiang <app@cameyan.com> - 2.072-3
changelog:
  - Passing NO_NETWORK_TESTING=1 as an environment variable
    solves the interactive issue required for using rpmbuild locally


author: huyubiao <huyubiao@huawei.com> - 1:1.07_01-1
changelog:
  - Upgrade version to 1.07_01

  Thu Jul 22 2021 Jiuyue Ma <majiuyue@huawei.com> - 1:1.07-420
  - fix conflict package file '/usr/share/perl5/vendor_perl/Pod'


author: weijin deng <weijin.deng@turbolinux.com.cn> - 0.3.15-1
changelog:
  - Upgrade to 0.3.15
  - Update Version, Source0, BuildRequires, Obsoletes
  - Update stage 'build', 'install' and 'files'
  - Correct uncorrect date, add one patch


author: gaihuiying <eaglegai@163.com> - 0.9.5-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add macros to control if need libdrm, pango, libpng and if need to exclude bootlog


author: openEuler Buildteam <buildteam@openeuler.org> - 0.4.9-4
changelog:
  -Type:enhancement
  -Id:NA
  -SUG:NA
  -DESC:Increase the ability of encoding files for use with libpoppler


author: gaihuiying <eaglegai@163.com> - 2.4.9-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream
         Fixing up parsing in radiusclient.conf


author: chenyanpanHW <chenyanpan@huawei.com> - 3.22-52
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/procmail-3.22-rhconfig.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/procmail-3.15.1-man.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/procmail_3.22-8.debian.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/procmail-3.22-truncate.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/procmail-3.22-ipv6.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/procmail-3.22-getline.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/procmail-3.22-CVE-2014-3618.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/procmail-3.22-crash-fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/procmail-3.22-CVE-2017-16844.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Zhu Jin <zhujin18@huawei.com> - 4.0.2-16
changelog:
  - library: address a potential race resulting in a fault and avoid strdup() calls in sd2proc() if possible


author: zhengxiaoxiao <zhengxiaoxiao2@huawei.com> - 3.14.0-11
changelog:
  - Type:CVE
  - CVE:CVE-2026-0994
  - SUG:NA
  - DESC:Fix Any recursion depth bypass in Python json_format.ParseDict


author: ouyangminxiang <ouyangminxiang@kylinsec.com.cn> - 15.0-7
changelog:
  - Fix mate-volume-control-status-icon doesn't work
  - Fix the problem that the muted function in mate-volume-control-status-icon doesn't work when the system is boot
  - Recompile systemd post scripts for pulseaudio


author: lipengyu <lipengyu@kylinos.cn> - 3.9.9-45
changelog:
  - Type:CVE
  - CVE:CVE-2025-4517 CVE-2025-4138 CVE-2024-12718 CVE-2025-4330 CVE-2025-4435
  - SUG:NA
  - DESC:fix CVE-2025-4517 CVE-2025-4138 CVE-2024-12718 CVE-2025-4330 CVE-2025-4435


author: fuanan <fuanan3@h-partners.com> - 3.9.9-50
changelog:
  - Type:CVE
  - CVE:CVE-2025-12084 CVE-2025-13836 CVE-2025-13837
  - SUG:NA
  - DESC:fix CVE-2025-12084 CVE-2025-13836 CVE-2025-13837


author: imxcc <xingchaochao@huawei.com> - 6.2.0-2
changelog:
  - setup: use pytest instead of nose to run the test suite
  - spec: use pytest instead of nose
  - Update readme to mention pytest instead of nose
  - Fix PY_SSIZE_T_CLEAN deprecation warning
  - Avoid use of thread function deprecated in 3.9
  - Replace deprecated PyEval_CallObject with PyObject_Call


author: shixuantong <shixuantong@huawei.com> - 7.43.0.6-2
changelog:
  - fix test fail for test_sslversion_options, test_failonerror and test_failonerror_status_line_invalid_utf8_python3


author: xihaochen <xihaochen@huawei.com> - 2020.5-1
changelog:
  - Type:requirements                                                                                                                                  
  - Id:NA
  - SUG:NA
  - DESC:update pytz to 2020.5


author: gaihuiying <eaglegai@163.com> - 1.13.2-21
changelog:
  - Type:CVE
  - CVE:CVE-2025-11411
  - SUG:NA
  - DESC:Additional fix for CVE-2025-11411 to include YXDOMAIN and non-referral nodata answers in the mitigation


author: <ganqixin@huawei.com> - 10:6.2.0-104
changelog:
  - intel_iommu: Add missed reserved bit check for IEC descriptor
  - 9pfs: fix crash on 'Treaddir' request
  - s390x/ap: fix missing subsystem reset registration
  - qemu/bswap: Undefine CPU_CONVERT() once done
  - linux-user: Add missing signals in strace output
  - linux-user: Add missing clock_gettime64() syscall strace


author: <alex.chen@huawei.com> - 10:6.2.0-105
changelog:
  - target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  - target/i386: Add VNMI and automatic IBRS feature bits
  - target/i386: Add missing feature bits in EPYC-Milan model
  - target/i386: Add feature bits for CPUID_Fn80000021_EAX
  - target/i386: Add a couple of feature bits in 8000_0008_EBX
  - target/i386: Add new EPYC CPU versions with updated cache_info
  - target/i386: allow versioned CPUs to specify new cache_info


author: <fengjiabo1@huawei.com> - 10:6.2.0-106
changelog:
  - hw/nvme: Remove redundant dma_blk_write
  - tests/avocado/machine_s390_ccw_virtio: Adapt test to new default resolution
  - edid: set default resolution to 1280x800 (WXGA)
  - iotests/308: Fix for CAP_DAC_OVERRIDE
  - hvf: remove unused but set variable
  - vvfat: Fix vvfat_write() for writes before the root directory
  - hw/misc/nrf51_rng: Don't use BIT_MASK() when we mean BIT()
  - hw/pci: Remove unused pci_irq_pulse() method
  - ui/gtk: fix leaks found wtih fuzzing
  - target/i386: fix size of EBP writeback in gen_enter()
  - tests/qtest/fuzz: fix memleak in qos_fuzz.c
  - hw/core/loader: gunzip(): fix memory leak on error path
  - migration: fix a typo
  - scsi: fetch unit attention when creating the request
  - raw-format: Fix error message for invalid offset/size
  - tcg: Reset data_gen_ptr correctly
  - Fix calculation of minimum in colo_compare_tcp
  - hw/intc: Don't clear pending bits on IRQ lowering
  - target/arm: Drop user-only special case in sve_stN_r
  - usb-hub: Fix handling port power control messages
  - target/ppc: Set ctx->opcode for decode_insn32()
  - linux-user: Add proper strace format strings for getdents()/getdents64()
  - linux-user: Fix TARGET_PROT_SEM for XTENSA
  - linux-user/hppa: Set TASK_UNMAPPED_BASE to 0xfa000000 for hppa arch
  - linux-user/hppa: Dump IIR on register dump
  - tests: Fix typo in check-help output
  - qdev-core.h: Fix wrongly named reference to TYPE_SPLIT_IRQ
  - hw/scsi/megasas: Simplify using the ldst API
  - gqa-win: get_pci_info: Clean dev_info if handle is valid
  - target/ppc: Fix 7448 support
  - vvfat: Fix size of temporary qcow file
  - docs: Correct 'vhost-user-blk' spelling
  - jackaudio: use ifdefs to hide unavailable functions
  - simplebench: Fix Python syntax error (reported by LGTM)
  - python: update type hints for mypy 0.930
  - Python/aqmp: fix type definitions for mypy 0.920
  - tcg: Allow top bit of SIMD_DATA_BITS to be set in simd_desc()
  - hw/ppc/e500: Prefer QOM cast
  - hw/ppc/e500: Remove unused "irqs" parameter
  - hw/ppc/e500: Add missing device tree properties to i2c controller node
  - linux-user: Show timespec on strace for futex()
  - linux-user: Add strace for clock_nanosleep()
  - linux-user: Fix strace of chmod() if mode == 0
  - linux-user: Log failing executable in EXCP_DUMP()
  - linux-user: Add pidfd_open(), pidfd_send_signal() and pidfd_getfd() syscalls


author: <fengjiabo1@huawei.com> - 10:6.2.0-107
changelog:
  - qemu: Support specifying the cache size presented to guest
  - hw/core/machine-smp: Initialize caches_bitmap before reading
  - qapi/qom: Define cache enumeration and properties for machine
  - linux-aio: fix unbalanced plugged counter in laio_io_unplug()


author: <fengjiabo1@huawei.com> - 10:6.2.0-109
changelog:
  - migration:Extand the fdtable in the incoming phase of migration
  - qemu6.2.0: Add trace to measure hot migrate downtime


author: Pengrui Zhang <zhangpengrui@huawei.com> - 10:6.2.0-111
changelog:
  - target/i386: Add Hygon Dhyana-v3 CPU model
  - target/i386: Add new Hygon 'Dharma' CPU model
  - migration: Don't sync volatile memory after migration completes
  - hw/display/framebuffer: Add cast to force 64x64 multiply
  - vmxcap: Add 5-level EPT bit
  - i386: Add Icelake-Server-v6 CPU model with 5-level EPT support
  - vmxcap: add tertiary execution controls
  - target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  - target/i386: enumerate bit 56 of MSR_IA32_VMX_BASIC
  - target/i386: fix feature dependency for WAITPKG
  - target/i386: add support for LAM in CPUID enumeration
  - target/i386: add control bits support for LAM
  - target/i386: add support for FRED in CPUID enumeration
  - target/i386: mark CR4.FRED not reserved
  - vmxcap: add support for VMX FRED controls
  - target/i386: enumerate VMX nested-exception support
  - target/i386: Add get/set/migrate support for FRED MSRs
  - target/i386: Delete duplicated macro definition CR4_FRED_MASK
  - target/i386: Add VMX control bits for nested FRED support
  - target/i386: Raise the highest index value used for any VMCS encoding
  - target/i386: Add more features enumerated by CPUID.7.2.EDX
  - target/i386: pass X86CPU to x86_cpu_get_supported_feature_word
  - i386/cpuid: Remove subleaf constraint on CPUID leaf 1F
  - target/i386: Don't construct a all-zero entry for CPUID[0xD 0x3f]
  - target/i386: Enable fdp-excptn-only and zero-fcs-fds
  - target/i386: Construct CPUID 2 as stateful iff times > 1
  - target/i386: Make invtsc migratable when user sets tsc-khz explicitly
  - target/i386/cpu: Fix notes for CPU models
  - target/i386: Introduce SierraForest-v2 model
  - target/i386: Export BHI_NO bit to guests
  - target/i386: Add new CPU model ClearwaterForest
  - docs: Add GNR, SRF and CWF CPU models
  - target/i386: add sha512, sm3, sm4 feature bits
  - target/i386: add avx-vnni-int16 feature
  - net: pad packets to minimum length in qemu_receive_packet()(CVE-2025-12464)
  - block-qdict: Fix-Werror=maybe-uninitialized build failure
  - block/curl.c: Check error return from curl_easy_setopt()
  - block: Handle curl 7.55.0..7.85.0 version changes
  - amd_iommu: fix uninitialized werror
  - io: release active GSource in TLS channel finalizer
  - io: move websocket resource release to close method
  - io: fix use after free in websocket handshake code(CVE-2025-11234)


author: Pengrui Zhang <zhangpengrui@huawei.com> - 10:6.2.0-113
changelog:
  - cryptodev-builtin: Limit the maximum size(CVE-2025-14876)
  - block/vmdk: fix OOB read in vmdk_read_extent()(CVE-2026-2243)
  - lsi53c895a: keep a reference to the device while SCRIPTS execute(CVE-2024-6519)


author: lifeifei <lifeifei@kylinos.cn> - 2.19-3
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Add the socket option IPV6_MULTICAST_LOOP to prevent the interface from autoconfiguring using RA messages sent by itself.


author: Bing Xia <xiabing12@h-partners.com> - 0.6.7-20
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix for vendor errors are not recorded in the SQLite database if 
         some cpus are offline at the system start


author: yangjunshuo <yangjunshuo@huawei.com> - 0.6.7-21
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix cpu isolate errors when some cpus are offline
    before the service started


author: Donghua Huang <huangdonghua3@h-partners.com> - 41.0-40
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: libhns: Fix wrong WQE data in new post send API when QP wraps around


author: Donghua Huang <huangdonghua3@h-partners.com> - 41.0-45
changelog:
  - Type: feature
  - ID: NA
  - SUG: NA
  - DESC: Add tracing support for libhns, including HNS RoCE I/O tracepoints and USDT support


author: Donghua Huang <huangdonghua3@h-partners.com> - 41.0-47
changelog:
  - Type: feature
  - ID: NA
  - SUG: NA
  - DESC: Fix missing CQE when UD QP uses different SL and zero-length message error


author: sunsuwan <sunsuwan3@huawei.com> - 1.2.6-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:add a user directory when the rpc user directory does not exist


author: dongyuzhen <dongyuzhen@h-partners.com> - 2.16-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix failure when recompiling noarch rpm and remove the require to rpm-build


author: dongyuzhen <dongyuzhen@h-partners.com> - 2.16-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:revert: remove the require to rpm-build.For consistency with other community-released dependencies


author: yixiangzhike <yixiangzhike007@163.com> - 2.16-13
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:avoid truncate trailer space and do not escape backslash when read filename


author: yixiangzhike <yixiangzhike007@163.com> - 2.16-14
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:revert "avoid truncate trailer space and do not escape backslash when read filename"


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 8.2210.0-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:tcp net subsystem: handle data race gracefully
         fix startup issue on modern systemd systems
         tcpflood bugfix: plain tcp send error not properly reported
         tcpflood bugfix: TCP sending was not implemented properly
         lookup tables: fix static analyzer issue
         lookup tables bugfix: reload on HUP did not work when backgrounded
         openssl: Replaced depreceated method SSLv23_method with TLS_method
         mmnormalize bugfix: if msg cannot be parsed, parser chain is stopped
         core bugfix: potential segfault on busy systems
         imfile: fix ext directory's fd leak in case of inotify on symlink
         imfile tests: ext directory's fd leak in case of inotify on symlink


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 8.2210.0-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:imfile: remove state file on file delete fix
         omfile: do not carry out actual action when writing to /dev/null
         core bugfix: rsyslog messages may not always have FQDN


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 8.2210.0-10
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:rainerscript: do not try to call a function if it does not exist
         gnutls bugfix: Avoid blocking sockets during TLS handshake
         gnutls bugfix: Add timeout to GnuTLS handshake
         core: fix potential NULL ptr access on HUP in very early startup phase
         omfwd: fix segfault in UDP freeaddrinfo
         gnutls TLS driver: fix small memory leak
         rsyslog startup bugfix: cosmetic memory leak
         core: fix potential misadressing in sigmask
         covscan: remove defect type of RESOURCE_LEAK
         Fix a buffer overflow when the argument to replace is empty
         Fix passing the value to EscapeChar
         Do not free the uninitialized cstring
         Keep original free pattern
         network subsystem: improve connection failure error message
         Fix runConf NULL pointer refence
         nsd_ptcp regression fix: remove debugging messages emited to stderr


author: zhongjiawei<zhongjiawei1@huawei.com> - 1.1.3-27
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Set temporary single CPU affinity before cgroup cpuset transition


author: wangjiang <wangjiang37@h-partners.com> - 35.5-17
changelog:
  - backport patch Allow virt_domain read device sysctls
                   Allow icecast rename its log files


author: yanglu<yanglu72@h-partners.com> - 8.17.1-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix newaliases command error and postfix service start execption after sendmail install


author: wjiang <app@cameyan.com> - 15.6-28
changelog:
  - backport bugfix patches from upstream
  - Fix build with binutils 2.46 (c4665d2)
  - Fix memory leak on TPM log error in mirror_one_mok_variable (92630f2)


author: chenyanpanHW <chenyanpan@huawei.com> - 4.4-4
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0003-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0004-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0005-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0006-pseudo-fix-possible-dereference-of-NULL-pointer.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: xinghe <xinghe2@h-partners.com> - 7:4.9-29
changelog:
  - Type:cves
  - ID:CVE-2023-49288 CVE-2025-54574 CVE-2023-5824 CVE-2025-62168
  - SUG:NA
  - DESC:fix CVE-2023-49288 CVE-2025-54574 CVE-2023-5824 CVE-2025-62168


author: Jie Yang <yangjieyj.yang@huawei.com> - 2.0.0-6
changelog:
  - docs: fix some statement
  - machine_manager: add autodeflate for balloon
  - migration: add dev_id into VirtioPciState when save and restore device state
  - machine: fix more than one pcie-root-ports with same id
  - migration: move function "transport_reset" to save state stage for vhost vsock device
  - vfio: adding ram device region to vfio bar region
  - machine_manager: move argument "serial" from -drive to -device virtio-blk-pci/device
  - machine_manager: add multifunction for devices
  - machine: add init_multifunction function to init multifunction
  - machine: add realization for multifunction


author: Jie Yang <yangjieyj.yang@huawei.com> - 2.1.0-1
changelog:
  - Add support for PCIe native hotplugging.
  - Reduce memory consumption of reading edk2 firmware files on aarch64.
  - Add support for booting from disk image directly.
  - Add support for VM reboot and VM shutdown.
  - Add support for guest memory preallocation.
  - Add more test cases.
  - Add and fix documentation.
  - Replace lazy_static crate with once_cell.
  - Performance enhancement for virtio-blk and virtio-net devices.
  - Add ftrace support.


author: Jie Yang <yangjieyj.yang@huawei.com> - 2.1.0-2
changelog:
  - Fix VFIO hotplugging failure caused by missing seccomp rules.
  - Fix booting failure from disk image on x86_64.
  - Update some documents.


author: Jie Yang <yangjieyj.yang@huawei.com> - 2.1.0-3
changelog:
  - Fix memory snapshot failure with hotplugged devices.
  - Fix address translation for virtio devices.
  - Add some test cases for microvm.
  - Update some documents.


author: yixiangzhike <yixiangzhike007@163.com> - 1.9.8p2-21
changelog:
  - apply 2 patches: backport-sudo_rfc1938_setup--fix-out-of-bounds-read-if-the-.patch, backport-sudo_auth_init--Fix-setting-FLAG_ONEANDONLY-if-onl.patch


author: yangjiaqi<yangjiaqi16@huawei.com> - 0.9-57
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:use file locks to avoid remounting the sharepath/master dir


author: yangjiaqi<yangjiaqi16@huawei.com> - 0.9-58
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:clean up run/syscontainer-tools/netns/container_id directory residues in the prestart phase


author: zhangxianting <zhangxianting@uniontech.com> - 0.9-64
changelog:
  - Type:patch
  - CVE:NA
  - SUG:NA
  - DESC:patch hunk FAILED bacause of the arch judgement of sw_64 and loongarch64


author: wjiang <app@cameyan.com> - 249-108
changelog:
  - backport community patches:
        backport-login-user-runtime-dir-free-ignored-sd_bus_error-avo.patch
        backport-login-user-runtime-dir-use-STRLEN-where-appropriate.patch
        backport-systemctl-gracefully-adjust-bus-transport-and-runtim.patch
        backport-journal-do-not-rotate-journal-when-MaxRetentionSec-i.patch
        backport-compress-avoid-a-bunch-of-div-by-zeroes.patch


author: yixiangzhike <yixiangzhike007@163.com> - 249-110
changelog:
  - fix coredump generation when systemd-resolved and systemd-networkd service is started then uninstalled


author: langfei<langfei@huawei.com> - 4.5-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Resolve stap-exporter.service chenge to disable when upgraded systemtap-stap-exporter package


author: yangzhuangzhuang <yangzhuangzhaung1@huawei.com> - 1:8.6.10-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:The "no acceptable C compiler found" error message is displayed during compilation.Therefore,add buildrequires gcc.


author: yixiangzhike <yixiangzhike007@163.com> - 1:8.6.12-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert "Change wrong Provides. Replace 1:8.6.10 to epoch:version"


author: Funda Wang <fundawang@yeah.net> - 0.8.2-15
changelog:
  - move glib schemas into main package
  - drop static lib as it was not used by any other packages
  - drop uselss scriptlets as they are handled by rpm file trigger already


author: gaihuiying <eaglegai@163.com> - 1:0.17-80
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix telnet crashes on stack overflow due to infinite recursion.


author: sunguoshuai <sunguoshuai@huawei.com> - 8:2018-26
changelog:
  - Remove texlive-collection-langother,texlive-scheme-full,texlive-scheme-tetex
    who requires texlive-vntex


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com>- 0.6-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:The "cc:No such file or directroy" error message is displayed during compilation.Therefore,add buildrequires gcc.
         The macro unitdir is used.Therefore,add buildrequires systemd


author: wangshuo <wangshuo@kylinos.cn> - 3.0.5-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix the SIGSYS coredump issue that occurs when executing
  -      the /usr/libexec/tracker-extract-3 command


author: Liu Chao <liuchao173@huawei.com> - 2.24.1-1
changelog:
  - Upgrade to 2.24.1:
    - fixed privileged execution of arbitrary scripts by active local user. (CVE-2024-52336)
    - added sanity checks for API methods parameters. (CVE-2024-52337)


author: tianmuyang <tianmuyang@huawei.com> - 2.24.1-3
changelog:
  - profiles: add programmable scheduling based on eBPF
  - package:  change package tuned to architecture-dependent


author: tianmuyang <tianmuyang@huawei.com> - 2.24.1-5
changelog:
  - tuned-ebpf: Add pid cache to avoid binding one process for multiple times
  - tuned-ebpf: Add "AND" logic of cpu mask in eBPF programmable schedule


author: langfei <langfei@huawei.com> - 2022a-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Aysén Region moves from -04/-03 to -03; new zone;
  -	Improve recent commentary for Chilean decrees.


author: Liu Chao <liuchao173@huawei.com> - 2022a-22
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Moldova has used EU transition times since 2022
  	Most of BC moves from PDT to Pacific Time on 03-09
  	Delay America/Vancouver tm_isdst transition


author: yueyuankun <yueyuankun@kylinos.cn> - 1:3.16.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:arm64: Handle sp, lr, fp as DwReg in CfiExpr
         sync arm64-Handle-sp-lr-fp-as-DwReg-in-CfiExpr.patch


author: yangzhuangzhuang<yangzhuangzhuang1@huawei.com> - 0.3.12-3
changelog:
  - The "no acceptable C compiler found" error message is displayed during compilation.Therefore,add buildrequires gcc.


author: mahailiang <mahailiang@uniontech.com> - 1.1.3-6
changelog:
  - xdg-email: Support for Deepin
  - Restore matching of older deepin names
  - Add new case for Deepin while detecting DE


author: liuh <liuhuan01@kylinos.cn> - 5.14.1-19
changelog:
  - sync patch from community
    xfs_repair: don't leak the rootdir inode when orphanage already exists


author: Funda Wang <fundawang@yeah.net> - 1.20.11-35
changelog:
  - fix CVE-2025-26594, CVE-2025-26595, CVE-2025-26596,
    CVE-2025-26597, CVE-2025-26598, CVE-2025-26599
    CVE-2025-26600, CVE-2025-26601


author: xuyan <xuyan1481@phytium.com> - 1.20.11-41
changelog:
  - Type:feature
  - CVE:NA
  - SUG:NA
  - DESC:Fix possible Xorg crashes for ps23xx when using  ast and pe2201 bmc card.


author: lingsheng <ultra_planet@qq.com> - 1.20.11-42
changelog:
  - fix CVE-2022-49737 CVE-2025-49175 CVE-2025-49176 CVE-2025-49178 CVE-2025-49179 CVE-2025-49180 CVE-2025-62229 CVE-2025-62230 CVE-2025-62231


author: wangkerong <wangkerong@h-partners.com> - 7.8-1
changelog:
  - upgrade to setxkbmap-1.3.3
  - upgrade to xkbcomp-1.4.5
  - upgrade to xkbprint-1.0.6
  - upgrade to xkbutils-1.0.5


author: luhuaxin <luhuaxin@huawei.com> - 1.3-39
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC: move gxvattr to main package, move AUTHORS to license folder


author: kouwenqi <kouwenqi@kylinos.cn> - 5.2.5-4
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC:Add overflow check for Unpadded size in lzma_index_append


author: xingwei <xingwei14@h-partners.com> - 4.2.3-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add haveged requires and optimize random number function replacement patch


author: yanglu <yanglu72@huawei.com> - 4.1-6
changelog:
  - DESC:delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ypserv-2.5-nfsnobody2.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ypserv-2.13-ypxfr-zeroresp.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ypserv-2.13-nonedomain.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ypserv-2.19-slp-warning.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ypserv-4.0-manfix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ypserv-2.24-aliases.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ypserv-2.27-confpost.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ypserv-2.31-netgrprecur.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ypserv-4.0-headers.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/ypserv-4.0-selinux-context.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  ,and delete BuildRequires git


