# changelog

author: panchenbo <panchenbo@kylinsec.com.cn> - 1.22.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix build error: add missing BuildRequires:pkgconfig(polkit-gobject-1)


author: liuzhilin <liuzhilin@uniontech.com> - 1:1.44.2-2
changelog:
  - add NM to support wifi6(fix dde-network-core build error)
  - Type:requirement
  - CVE:NA
  - SUG:NA
  - DESC:Support wireless networks connecting WIFI6 encryption methods,
         so this demand is achieved in NetworkManager, KF5-NetworkManager-QT,
         DDE-Network-Core software package


author: qinxue <qinxue6@h-partners.com> - 1:1.44.2-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:mptcp fix error handling rp_filter when kernel don't support mptcp


author: chenyanpanHW <chenyanpan@huawei.com> - 2.14.19-25
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ORBit2-2.14.3-multilib.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ORBit2-2.14.3-ref-leaks.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ORBit2-make-j-safety.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ORBit2-allow-deprecated.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0005-Fix-link_protocol_is_local_ipv46-for-ipv4-on-some-ip.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0014-Commit-patch-from-bug-662623-to-fix-connection-failu.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0016-bug-732274-fix-parallel-build-failure.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: zhouyihang <zhouyihang3@h-partners.com> - 1.2.8-2
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: pkcon: Use appropriate callbacks for client / task async calls


author: lingsheng <lingsheng1@h-partners.com> - 1.2.8-3
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: Revert PkClient: Replace the GSimpleAsyncResult with the GTask API


author: yixiangzhike <yixiangzhike007@163.com> - 0.18.6-3
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: backport upstream patch to fix parsing of lowercase group names


author: yixiangzhike <yixiangzhike007@163.com> - 0.18.6-4
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: backport upstream patch to fix concurrent reading of extended attributes


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 36.16.5-41
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: backport & adjust upstream patch for fixing building issues with clang
  - run autoreconf before building


author: yanglongkang<yanglongkang@h-partners.com> - 3.2.2-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Adding Patching Operations
         provides relibility and self-healing capabilities for service


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 3.2.5-2
changelog:
  - Type：update
  - ID：NA
  - SUG:NA
  - DESC: Modify the license to SPDX format
          Delete MIT and Public Domain license because it no longer appears in the upstream source


author: zhangpan <zhangpan103@h-partners.com> - 2.51.0-5
changelog:
  - add macros to control if need /usr/bin/xprop
  - at-spi2-core-help package provided at-spi2-atk-help


author: jchzhou <zhoujiacheng@iscas.ac.cn>- 1:3.1.2-12
changelog:
  - backport patches for fixing Wimplicit-function-declaration, Wbuiltin-declaration-mismatch when building with newer compilers


author: wangyuhang <wangyuhang27@huawei.com> -5.2.15-13
changelog:
  - remove the log message for failing to open cmdline,
    and ensure that the mayexec function does not modify the value of errno.


author: yixiangzhike <yixiangzhike007@163.com> - 5.2.15-16
changelog:
  - sync patches from bash community:
     fix default file descriptor for <> redirection when printing command
     update BASH_COMMAND for subshells
     fix potential file descriptor leak in here document pipes


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-2
changelog:
  - Type:CVE
  - CVE:CVE-2023-4408 CVE-2023-5517 CVE-2023-5679 CVE-2023-50387 CVE-2023-50868
  - SUG:NA
  - DESC:fix CVE-2023-4408 CVE-2023-5517 CVE-2023-5679 CVE-2023-50387 CVE-2023-50868


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-3
changelog:
  - Type:CVE
  - CVE:CVE-2024-0760,CVE-2024-1737,CVE-2024-1975,CVE-2024-4076
  - SUG:NA
  - DESC:fix CVE-2024-0760,CVE-2024-1737,CVE-2024-1975,CVE-2024-4076


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-4
changelog:
  - Type:CVE
  - CVE:CVE-2024-11187,CVE-2024-12705
  - SUG:NA
  - DESC:fix CVE-2024-111878 and CVE-2024-12705


author: tangce<tangce1@huawei.com> - 32:9.18.21-5
changelog:
  - Type:CVE
  - CVE:CVE-2025-8677,CVE-2025-40778,CVE-2025-40780
  - SUG:NA
  - DESC:fix CVE-2025-8677,CVE-2025-40778,CVE-2025-40780


author: yueyuankun <yueyuankun@kylinos.cn> - 3.8.2-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix syntax error on SymbolKind.toString method
         fix interface syntax error


author: sunhai<sunhai10@huawei.com> - 1:3.8.2-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix expected exception type when activating devices in populor


author: liuh <liuhuan01@kylinos.cn> - 6.6.3-12
changelog:
  - btrfs-progs: convert: insert a dummy inode item before inode ref for ext2/4
  - btrfs-progs: convert: for ext2, fix possible tree-checker error when converting a large fs


author: liuh <liuhuan01@kylinos.cn> - 6.6.3-17
changelog:
  - sync patch from community
    btrfs-progs: fix the wrong size from device_get_partition_size_sysfs()


author: liuh <liuhuan01@kylinos.cn> - 6.6.3-19
changelog:
  - sync patch from community
    btrfs-progs: subvolume: fix a bug that leads to unnecessary error message


author: liuxu <liuxu156@huawei.com> - 1:1.36.1-6
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363


author: xinghe <xinghe2@h-partners.com> - 1.18.1-5
changelog:
  - Type:CVE
  - CVE:CVE-2023-32067 CVE-2023-31130
  - SUG:restart
  - DESC:fix CVE-2023-32067 CVE-2023-31130


author: wangjiang <wangjiang37@h-partners.com> - 2023.2.64-2
changelog:
  - remove expired and sync new certificates
    Removing:
      Security Communication Root CA
    Adding:
      D-Trust SBR Root CA 1 2022
      D-Trust SBR Root CA 2 2022
      Telekom Security SMIME ECC Root 2021
      Telekom Security SMIME RSA Root 2023
      Telekom Security TLS ECC Root 2020
      Telekom Security TLS RSA Root 2023


author: wangjiang <app@cameyan.com> - 2023.2.64-4
changelog:
  - remove expired and sync new certificates
    Removing:
      Certificate "Explicitly Distrust DigiNotar Root CA"
      Certificate "Baltimore CyberTrust Root"
    Adding:
      Certificate "FIRMAPROFESIONAL CA ROOT-A WEB"
      Certificate "TWCA CYBER Root CA"
      Certificate "TWCA Global Root CA G2"
      Certificate "SecureSign Root CA12"
      Certificate "SecureSign Root CA14"
      Certificate "SecureSign Root CA15"
      Certificate "D-TRUST BR Root CA 2 2023"
      Certificate "D-TRUST EV Root CA 2 2023"


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1.18.0-2
changelog:
  - Type:CVE
  - ID:CVE-2025-50422
  - SUG:NA
  - DESC:Fix a NULL access in active_edges_to_traps()
         Add unlikely() to test for x == INT32_MAX for the NULL reference


author: yangyun <yangyun50@huawei.com> - 1.5.5-1
changelog:
  - update to 1.5.5 version
  	- add support of readers (see README.md)
  	- configure.ac: disable the use of --disabele-usbdropdir
  	- parse: create output.bin file
  	- udev: Disable USB-persist for CCID devices
  	- configure: fail if flex is not found
  	- some other minor improvments


author: liyunfei <liyunfei33@huawei.com> - 17.0.6-50
changelog:
  - update to llvm-for-oe-17.0.6-2509.0.2
  - release-note https://gitee.com/openeuler/llvm-project/releases/tag/llvm-for-oE-17.0.6-2509.0.2


author: liyunfei <liyunfei33@huawei.com> - 17.0.6-54
changelog:
  - update to llvm-for-oe-17.0.6-2512.0.1
  - release-note https://gitee.com/openeuler/llvm-project/releases/tag/llvm-for-oE-17.0.6-2512.0.1


author: liyunfei <liyunfei33@huawei.com> - 17.0.6-56
changelog:
  - update to llvm-for-oe-17.0.6-2512.0.2
  - release-note https://gitee.com/openeuler/llvm-project/releases/tag/llvm-for-oE-17.0.6-2512.0.2


author: liyufnei <liyunfei33@huawei.com> - 17.0.6-57
changelog:
  - update to llvm-for-oe-17.0.6-2512.0.3
  - release-note https://gitee.com/openeuler/llvm-project/releases/tag/llvm-for-oE-17.0.6-2512.0.3


author: dongyuzhen <dongyuzhen@h-partners.com> - 23.4.1-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix(net): klibc ipconfig PROTO compatibility
         fix(openstack): Fix bond mac_address


author: shixuantong <shixuantong1@huawei.com> - 23.4.1-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:chore: set recursive=False for ensure_dir if parent path is "/"
         test(openstack): Test bond mac address
         fix: Ensure properties for bonded interfaces are properly translated


author: shixuantong <shixuantong1@huawei.com> - 23.4.1-13
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:net/sysconfig: do not remove all existing settings of /etc/sysconfig/network
         fix: typing for rsyslog, ubuntu_pro, power_state_change


author: shixuantong <shixuantong1@huawei.com> - 23.4.1-16
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: fix: Add get_connection_with_tls_context() for requests 2.32.2+


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 3.27.9-5
changelog:
  - Support 
    /usr/bin/cmake --build "loongarch64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/cmake-3.27.9-8.oe2403sp3.loongarch64" /usr/bin/cmake --install "loongarch64-openEuler-linux-gnu".


author: fuanan <fuanan3@h-partners.com> - 3.27.9-6
changelog:
  - remove the architecture judgment in the patches section;
  - include all patches in the source package.


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 309-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: remove incorrect provides cockpit-machines and cockpit-machines-ovirt
          remove require libvirt and libvirt-client


author: lijian <lijian2@kylinos.cn> - 2:2.230.0-1
changelog:
  - Update container-selinux to v2.230.0
  - Allow containers to unmount file systems
  - Add buildah as a container_runtime_exec_t label
  - Additional rules for container_user_t
  - Add some MLS rules to policy
  - Add container_file_t and container_ro_file_t as user_home_type


author: hugel <gengqihu2@h-partners.com> - 9.4-12
changelog:
  - sync patches from community
  - add backport-numfmt-don-t-require-a-suffix-with-from-iec-i.patch
        backport-sort-fix-debug-buffer-overrun.patch
        backport-tac-avoid-out-of-bounds-access.patch
        backport-yes-avoid-failure-on-CHERI-protected-systems.patch


author: fuanan <fuanan3@h-partners.com> - 2.13-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert fix CVE-2015-1197 because it causes AT testcases problems


author: yixiangzhike <yixiangzhike007@163.com> - 1.17.0-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix the failure of testcase when building with python-setuptools>=66.0.0


author: wangxiao <wangxiao184@h-partners.com> - 8.0.4-15
changelog:
  - remove the arch judgment, include all patches in the src package
  - use patch command to apply patches for consistency in context


author: lijian1 <lijian1@kylinos.cn> - 8.0.4-17
changelog:
  - fix loongarch64 support so file extension error for elf64 lack the branch while elf32 do not need.


author: lijian <lijian2@kylinos.cn> - 1.8.7-1
changelog:
  - update to 1.8.7
  - crun: new command "crun features".
  - linux: support io_priority from the OCI specs.
  - cgroup: allow setting swap to 0.
  - cgroup, systemd: set the memory limit on the system scope.


author: yixiangzhike <yixiangzhike007@163.com> - 20230614-1.git5f3458e
changelog:
  - update version to 20230614
    - DEFAULT policy drop DH<2048bits,TLS1.0,TLS1.1,SHA-1
    - Remove the CBC ciphers from DEFAULT policy in openssh
    - FIPS policy drop the CBC ciphersuites
    - Enable RSA-PSK algorithms in DEFAULT and LEGACY policies
    - Add the diffie-hellman-group14-sha256 to libssh
    - Add --check option to update-crypto-policies
    - Add AES-192 algorithms support
    - Use allowlisting config for gnutls
    - Enable SHAKE algorithms for gnutls,java and nss
    - Openssl disable SHA-1 signatures in FUTURE policy
    - Openssh add HostbasedAcceptedAlgorithms and RequiresRSASize config options


author: Funda Wang <fundawang@yeah.net> - 1:2.4.7-7
changelog:
  - fix CVE-2025-58060, CVE-2025-58364
  - move www files into main package due to requirement by web interface


author: xingwei <xingwei14@h-partners.com> - 8.4.0-16
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:altsvc: avoid integer overflow in expire calculation
         urlapi: fix redirect to a new fragment or query (only)
         tool_getparam: clear sensitive arguments better


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:libssh: fix freeing of resources in disconnect
         openssl: fix crash on missing cert password


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-24
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:libssh: fix readdir issues
         h3: fix query of concurrent streams
         noproxy: fix the IPV6 network mask pattern match
         krb5_gssapi: fix memory leak on error path
         openldap: fix memory-leak in error path
         conn: fix hostname move on connection reuse 
         pop3: fix CAPA response termination detection
         libssh: properly free sftp_attributes
         openssl: fix a potential memory leak of params.cert


author: wangkai <13474090681@163.com> - 1.11.23-54
changelog:
  - Add patches from fedora, improve C compatibility and fix build failures caused by higher gcc versions


author: wuyifeng <wuyifeng10@huawei.com> - 78-1
changelog:
  - upgrade to version 78:
  	-incorporate up to 6.5 kernel
  	-add new cxl commands
  	-fix some bugs detail see:github.com/pmem/ndctl


author: hongjinghao <hongjinghao@huawei.com> - 1:1.14.8-3
changelog:
  - sync patch from upstream
  	backport-bus-Don-t-crash-if-bus_context_create_client_policy-.patch
  	backport-bus-When-failing-to-reload-client-policy-continue-it.patch
  	backport-test-Add-a-targeted-test-for-_dbus_unix_groups_from_.patch
  	backport-userdb-Add-proper-error-reporting-when-getting-group.patch


author: liuyumeng <liuyumeng5@huawei.com> - 0.40.0-2
changelog:
  - add patch:dconf read random contents of memory causing discrepancy,initialize memory to eliminate discrepancy


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.3-5
changelog:
  - Type:CVE
  - ID:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
  - SUG:restart
  - DESC:fix CVE-2022-2795,CVE-2022-38177 and CVE-2022-38178


author: hanhuihui <hanhuihui5@huawei.com> - 4.16.2-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dnf:Remove --duplicates and --oldinstallonly exit with 0 when nothing to remove and Add all candidates for reinstall to solver


author: LuWu <2398491106@qq.com> - 4.16.2-5
changelog:
  - Limit queries to nevra forms when provided by command and Update the man page entry for the countme option


author: majianhan <majianhan@kylinos.cn> - 4.16.2-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix dnf-automatic service to apply security updates the same way as dnf tool


author: chenhaixing <chenhaixing@huawei.com> - 4.3.1-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dnf-plugins-core:download plugin:respect install_weak_deps option value


author: renmingshuai <renmingshuai@huawei.com> - 2.89-2
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Fix memory leak when using --dhcp-optsfile with DHCPv6 options


author: lingsheng <lingsheng1@h-partners.com> - 2.90-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Update DNS records after pruning DHCP leases
         cache: Fix potential NULL deref in arcane situations.
         Fix potential memory leak
         Fix possible SIGSEGV in bpf.c
         allow binding mac with ip6


author: Liu Qingtao <liu.qingtao2@zte.com.cn> - 2.90-5
changelog:
  - Type:bugfix
  - CVE:
  - SUG:NA
  - DESC:Ignore Wincompatible-pointer-types error when compiling with gcc-14.3


author: suoxiaocong <suoxiaocong@kylinos.cn> - 18.09.0-337
changelog:
  - Type:BUG
  - CVE:NA
  - SUG:NA
  - DESC:remove ifarch condition check when addding source, this causes src.rpm missing files


author: yanglongkang <yanglongkang@h-partners.com> - 7.5.2-1
changelog:
  - Update package to version 7.5.2
  - Dos2unix can print info about the line break type of the last line, or indicate there is none.
  - Updated documentation about the ASCII conversion mode.
  - Fixed problem of converting a symbolic link target that is on another file system.
  - Updated Chinese and Serbian translations.


author: huangdengdui <huangdengui@huawei.com> - 23.11-30
changelog:
  Sync some patchs from upstreaming for hns3 pmd and modifications
   are as follow:
   - net/hns3: fix unrelease some resources on reset case
   - net/hns3: fix divide by zero
   - net/hns3: fix incorrect failed rollback
   - net/hns3: fix memory leakage for indirect action
   - net/hns3: fix extra waiting for link up
   - net/hns3: fix variable overflow
   - net/hns3: fix memory leakage in failure path
   - net/hns3: remove weak symbols
   - net/hns3: fix reset timeout
   - net/hns3: fix copper port initialization
   - net/hns3: rename RAS module
   - net/hns3: remove PVID info dump for VF
   - net/hns3: fix mbuf freeing in simple Tx path
   In addition, sync a bugfix for devtools:
   - devtools: fix symbol listing


author: huangdengdui <huangdengui@huawei.com> - 23.11-33
changelog:
  Sync some bugfixes for hns3 pmd and modifications are as follow:
   - net/hns3: fix Rx packet without CRC data
   - net/hns3: fix CRC data segment
   - net/hns3: check requirement for hardware GRO
   - net/hns3: allow use of Tx vector when fast free not enabled
   - net/hns3: allow use of Rx vector mode with VLAN filter


author: huangdengdui <huangdengui@huawei.com> - 23.11-34
changelog:
  Sync some patches about support TSO for packets with
   IPv6 extension header and modifications are as follow:
   - net: add tunnel packet type parsing
   - app/testpmd: use packet type parsing API
   - app/testpmd: fix VLAN parsing in checksum engine
   - net: fix offset in GENEVE packet parsing
   - app/testpmd: fix packet type parsing
   - net: fix GTP packet parsing
   - net: add tunnel length in UDP tunnel parsing
   - app/testpmd: fix tunnel inner info


author: huangdonghua <huangdonghua3@h-partners.com> - 23.11-36
changelog:
  Unify locks, fix Rx path and resource release:
   - net/hns3: fix inconsistent lock
   - net/hns3: fix overwrite mbuf in vector path
   - net/hns3: fix unrelease VLAN resource when init fail


author: huangdonghua <huangdonghua3@h-partners.com> - 23.11-37
changelog:
  Fix unrelease VLAN resource and L4 protocol retrieval from L3 header:
   - net/hns3: fix unrelease VLAN resource when init fail
   - app/testpmd: fix L4 protocol retrieval from L3 header


author: huangdonghua <huangdonghua3@h-partners.com> - 23.11-38
changelog:
  Upload some patches of VF multiple TC and others:
   - app/testpmd: handle IEEE1588 init failure
   - examples/l3fwd: add option to set Rx burst size
   - examples/eventdev: fix queue crash with generic pipeline
   - examples/l3fwd: add Tx burst size configuration option
   - net/hns3: remove duplicate struct field
   - net/hns3: refactor DCB module
   - net/hns3: parse max TC number for VF
   - net/hns3: support multi-TCs capability for VF
   - net/hns3: fix queue TC configuration on VF
   - net/hns3: support multi-TCs configuration for VF
   - app/testpmd: avoid crash in DCB config
   - app/testpmd: show all DCB priority TC map
   - app/testpmd: relax number of TCs in DCB command
   - app/testpmd: reuse RSS config when configuring DCB
   - app/testpmd: add prio-tc map in DCB command
   - app/testpmd: add queue restriction in DCB command
   - app/testpmd: add command to disable DCB
   - examples/l3fwd: force link speed
   - examples/l3fwd-power: force link speed
   - net/hns3: log invalid MAC address from firmware
   - config/arm: add HiSilicon HIP12
   - app/testpmd: fix DCB Tx port
   - app/testpmd: fix DCB Rx queues
   - app/testpmd: set DCB forwarding TCs
   - app/testpmd: support multi-cores process one TC
   - app/testpmd: fix inner UDP checksum offload fail


author: huangdonghua <huangdonghua3@h-partners.com> - 23.11-39
changelog:
  fix L2 length for GRE packets:
   - net: fix L2 length for GRE packets
   - net/hns3: fix outer UDP checksum fail with simple BD


author: xinghe <xinghe2@h-partners.com> - 2.0.11-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix ebtables-restore --noflush failed when ebtables is uninstall


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 18-4
changelog:
  - Fix segfault when passed --index is greater than current boot order size
    Add missing short option handling for --index (-I)


author: zhangxingrong <zhangxingrong@uniontech.com> - 18-5
changelog:
  - Fix the incorrect long parameter in help messages
  - efibootmgr: delete_bootnext is just a boolean, not an entry id


author: lifeifei <lifeifei@kylinos.cn> - 0.190-3
changelog:
  - Type:requirement
  - CVE:NA
  - SUG:NA
  - DESC:add noreplace to /usr/lib/sysctl.d/10-default-yama-scope.conf


author: wangqiang <wangqiang1@kylinos.cn> - 0.190-4
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: Fix handling of corefiles with non-contiguous .so segments


author: shixuantong <shixuantong1@huawei.com> - 0.190-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:move /usr/lib64/libdebuginfod.so from debuginfod-client-devel to debuginfod-client


author: yuanchicheng <chicheng.oerv@isrc.iscas.ac.cn> - 0.190-10
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: backport-fix-riscv64-return-value-location-retrieval-implementation.patch


author: yanglu <yanglu72@h-partners.com> - 2:6.6-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:ethtool:hibmcge:fix wrong register address in pretty print of ethtool -d command


author: andy <liuyang01@kylinos.cn> - 2:6.6-6
changelog:
  - Type:requirement
  - Id:NA
  - SUG:NA
  - DESC:ethtool: Fix SFF-8472 transceiver module identification
          ethtool: Add default branch to sff8636_show_all_ioctl switch
          qsfp: Better handling of Page 03h netlink read failure
          module-eeprom: treat zero arguments like any other arguments for hex dump
          qsf: Better handling of Page A2h netlink read failure


author: Fengyan Mu <mufengyan@huawei.com> - 2:6.6-7
changelog:
  - Type:requirement
  - Id:NA
  - SUG:NA
  - DESC:ethtool: Add support the printer for the registers of unic driver
          through the command -d


author: zhouyihang <zhouyihang3@h-partners.com> - 1.2.6-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:chore nftables add delete table helper
         fix nftables always flush main table on start


author: zhouyihang <zhouyihang3@h-partners.com> - 1.2.6-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Firewall startup is to set CleanupModuleOnxit=yes to unload related ko when stopping firewalld service
         To reduce unnecessary loading of ebtables-related kernel modules
         fix(nm): release NM client after a timeout


author: zhouyihang <zhouyihang3@h-partners.com> - 1.2.6-8
changelog:
  - Type:bugfix
  - CVE:NA   
  - SUG:NA   
  - DESC:fix(icmp): fix check_icmpv6_name() to use correct IPv6 names
         fix(ipset): fix configuring IP range for ipsets with nftables
         fix(ipset): fix configuring "timeout","maxelem" values for
         fix(rich): validate service name of rich rule
         fix(rich): fix range check for large rule limit
         fix(nftables): use current pkttype keywords


author: zhangxingrong <zhangxingrong@uniontech.cn> - 1.4.3-3
changelog:
  - Limit the number of clock() calls
  - Documentation (man/flac.md); fix typo 
  - flac: foreign_metadata: fix -Walloc-size
  - Fix format ending up with wrong subformat


author: liyuxiang <liyuxiang@ncti-gba.cn> - 2:2.8.1-2
changelog:
  - Fix CVE-2022-39316
  - Fix CVE-2022-39318
  - Fix CVE-2022-39319
  - Fix CVE-2022-39347
  - Fix CVE-2022-41877


author: wangkai <13474090681@163.com> - 2:2.11.7-1
changelog:
  - Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
    CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
    CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660


author: yangyun <yangyun50@huawei.com> -3.16.2-1
changelog:
  - upgrade to 3.16.2
  	- fix some issues (see: https://github.com/libfuse/libfuse/releases) 
  	- improved support for some less common systems (32bit, alternative libcs)
  	- unsupported mount options are no longer silently accepted
  	- auto_unmount is now compatible with allow_other
  	- readdir kernel cache can be enabled from high-level API


author: Funda Wang <fundawang@yeah.net> - 9.56.1-14
changelog:
  - Type:CVE
  - ID:NA
  - SUG:NA
  - DECS: Fix CVE-2025-27830, CVE-2025-27832, CVE-2025-27833, CVE-2025-27834, CVE-2025-27835, CVE-2025-27836


author: hdliu <dev03108@linx-info.com> - 9.56.1-15
changelog:
  - Add font mappings so that the PS interpreter can rasterize Chinese content using the two fonts STKaiti-Regular and STheiti-Regular.


author: fuanan <fuanan3@h-partners.com> - 2.43.0-4
changelog:
  - Type:CVE
  - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
  - SUG:NA
  - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465


author: fuanan <fuanan3@h-partners.com> - 2.43.0-7
changelog:
  - Type:CVE
  - ID:CVE-2025-48384 CVE-2025-48385 CVE-2025-48386
  - SUG:NA
  - DESC:Fix CVE-2025-48384 CVE-2025-48385 CVE-2025-48386


author: fuanan <fuanan3@h-partners.com> - 2.43.0-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix malformed patch:
         backport-CVE-2025-48385-bundle-uri-fix-arbitrary-file-writes-via-parameter-i.patch


author: fuanan <fuanan3@h-partners.com> - 2.43.0-9
changelog:
  - Type:CVE
  - ID:CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835
  - SUG:NA
  - DESC:Fix CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835


author: fuanan <fuanan3@h-partners.com> - 2.43.0-10
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch
         config.mak.uname: set CSPRNG_METHOD to getrandom on Linux


author: yanglu <yanglu72@h-partners.com> - 2.78.0-1
changelog:
  - update glib-networking version to 2.78.0:
    - disable PKCS#11 tests when GNuTLS is built without PKCS#11 support
    - fix connection tests on 32-bit systems with 64-bit time_t
    - updated translations


author: zhangzikang <zhangzikang@kylinos.cn> - 2.78.3-3
changelog:
  - backport patch:
      backport-gdbusmessage-Clean-the-cached-arg0-when-setting-the-message-body.patch
      backport-gsocketclient-Fix-a-use-after-free-in-g_socket_client_connected_callback.patch
      backport-gcontextspecificgroup-Wait-until-stop_func-is-done.patch
      backport-gresources-fix-memory-leak-from-libelf.patch


author: jinshuaiyu <jinshuaiyu@kylinos.cn> - 2.38-75
changelog:
  - Backport patches from glibc upstream 2.38 branch
  - Free dynarray buffer after parsing nsswitch.conf


author: wuguanghao <wuguanghao3@huawei.com> - 11.1-1
changelog:
  - upgrade to 11.1
    - add simple-quota xattr to afr and ec ignore list
    - fix asan use-after-free bug
    - fix error not supported for ipv6
    - support OpenSSL 3.0
    - drop libglusterd
    - O_PATH support over protocol
    - Enable AES cipher for SSL by default
    - glusterd: add stripe_count in volume info
    - snapshots: Support for ZFS Snapshots
    - gfapi: Add support for 'AT_EMPTY_PATH' and 'AT_REMOVEDIR' flag


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 11.1-2
changelog:
  - fix upgrade error that {_mandir}/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.


author: xuraoqing <xuraoqing@huawei.com> - 3.8.2-1
changelog:
  - update to 3.8.2
  - some API and ABI modifications, see NEWS for details
  - New option --attime to specify current time
  - libgnutls: Add a mechanism to control whether to enforce extended master secret (RFC 7627)
  - libgnutls: Add additional PBKDF limit checks in FIPS mode as defined in SP 800-132
  - libgnutls: %GNUTLS_NO_EXTENSIONS has been renamed to %GNUTLS_NO_DEFAULT_EXTENSIONS.
  - libgnutls: Add support for RFC 9258 external PSK importer.
  - libgnutls: ClientHello extensions are randomized by default,
               To make fingerprinting harder, TLS extensions in ClientHello messages are shuffled.
  - gnutls-cli: New option --starttls-name.
  - libgnutls: transparent KTLS support is extended to FreeBSD kernel.
  - libgnutls: Added support for AES-GCM-SIV ciphers (RFC 8452).
  - libgnutls: Add API functions to perform ECDH and DH key agreement.
  - libgnutls: Fix timing side-channel inside RSA-PSK key exchange(CVE-2023-5981).


author: Julian Zhu <julian.oerv@isrc.iscas.ac.cn> - 1.21.4-40
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Fix the bootstrap failure caused by the backport of RISC-V RVA23 support


author: huang-xiaoquan <huangxiaoquan1@huawei.com> - 1.21.4-42
changelog:
  - Type:Feature
  - CVE:NA
  - SUG:NA
  - DESC: [stepopt2] Add goexperiment.StepOpt2 for optimized step function in runtime


author: huzhangying <huzhangying@huawei.com> - 1.21.4-43
changelog:
  - Type:CVE
  - CVE:CVE-2025-58183,CVE-2025-58189,CVE-2025-61724,CVE-2025-58188,CVE-2025-58185,CVE-2025-58187,CVE-2025-61723,CVE-2025-47912,CVE-2025-58186
  - SUG:NA
  - DESC:fix CVE-2025-58183,CVE-2025-58189,CVE-2025-61724,CVE-2025-58188,CVE-2025-58185,CVE-2025-58187,CVE-2025-61723,CVE-2025-47912,CVE-2025-58186


author: laokz <zhangkai@iscas.ac.cn> - 2.15-2
changelog:
  - riscv64: force --enable-frame-pointers due to unsupported
    -momit-leaf-frame-pointer compile option until gcc14


author: Funda Wang <fundawang@yeah.net> - 1:2.12-40
changelog:
  - requirement
  - CVE:NA
  - SUG:NA
  - DESC: Disable the .package_note awfulness
  - DESC: drop duplicate list of locale files


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1:2.12-42
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Revert 'grub-install: bailout root device probing'
         Revert 'Workaround volatile efi boot variable'
         Revert 'Unify the check to enable btrfs relative path'


author: LeoLiu-oc <leoliu-oc@zhaoxin.com> - 1:2.12-43
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:i386: Check for cpuid family when flush cache only on VIA CPUs
         i386: Reduce the time of set VESA mode by clearing FB directly for Zhaoxin/Glenfly card


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1:2.12-44
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fs/btrfs: Fix memory leaks
         fs/zfs: Fix a number of memory leaks in ZFS code
         term/ns8250-spcr: Return if redirection is disabled
         loader/i386/linux: Fix resource leak
         lib/reloacator: Fix memory leaks
         disk/ldm: Fix memory leaks
         fs/ntfs: Fix NULL pointer dereference and possible infinite loop
         net/drivers/ieee1275/ofnet: Add missing grub_malloc()
         kern/partition: Unbreak support for nested partitions
         script/execute: Don't let trailing blank lines determine the return code
         commands/file: Fix NULL dereference in the knetbsd tests
         i386/tsc: The GRUB menu gets stuck due to unserialized rdtsc
         kern/i386/tsc_pmtimer: The GRUB menu gets stuck due to failed calibration


author: yechao-w <wang.yechao255@zte.com.cn> - 1:2.12-45
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: kern/riscv/efi/init: Use time register in grub_efi_get_time_ms()


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1:2.12-47
changelog:
  - Type:CVE
  - CVE:CVE-2025-61661,CVE-2025-61662,CVE-2025-54771,CVE-2025-54770,CVE-2025-61663,CVE-2025-61664
  - SUG:NA
  - DESC:commands/usbtest: Ensure string length is sufficient in usb string processing
         commands/usbtest: Use correct string length field
         tests/lib/functional_test: Unregister commands on module unload
         normal/main: Unregister commands on module unload
         gettext/gettext: Unregister gettext command on module unload
         net/net: Unregister net_set_vlan command on unload
         kern/file: Call grub_dl_unref() after fs->fs_close()
         commands/test: Fix error in recursion depth calculation


author: Funda Wang <fundawang@yeah.net> - 1.22.5-2
changelog:
  - fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
    CVE-2024-47607, CVE-2024-47615, CVE-2024-47835


author: chengyechun <chengyechun1@huaiwe.com> - 2.4.58-2
changelog:
  - Type:CVE
  - ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
  - SUG:NA
  - DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream


author: zhangyaqi <zhagnyaqi@kylinos.cn> - 2.4.58-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:allocate a heap buffer if the configured size is greater than the stack-allocated buffer.


author: chengyechun <chengyechun1@huawei.com> - 2.4.58-6
changelog:
  - Type:CVE
  - ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
  - SUG:NA
  - DSEC:fix some CVEs


author: xingwei <xingwei14@h-partners.com> - 2.4.58-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:mod_log_config: Fix LogFormat directive merging
         Fix X509 leak and Increase MAX_CONCURRENCY hard limit
         mod_proxy_balancer: Fix the handling of the stickysession
         mod_cache_socache: Fix possible crash on error path
         mod_ssl: Check SSL_CTX_new() return value
         core: Report invalid Options argument when parsing AllowOverride directives


author: yanglu <yanglu72@h-partners.com> - 2.4.58-10
changelog:
  - Type:CVE
  - CVE:CVE-2025-49812,CVE-2025-23048,CVE-2024-47252,CVE-2024-43204,CVE-2024-42516
  - SUG:NA
  - DESC:fix CVE-2025-49812 CVE-2025-23048 CVE-2024-47252 CVE-2024-43204 CVE-2024-42516
         mod_lua: Fix memory handling in output filters.
         Fix a regression that caused stickysession keys
         avoid ap_set_content_type when processing a _Request_Header
         set_cookie_name: ensure correct format


author: tangce <tangce1@h-partners.com> - 2.4.58-11
changelog:
  - Type:CVE
  - CVE:CVE-2025-58098,CVE-2025-65082,CVE-2025-66200
  - SUG:NA
  - DESC:fix CVE-2025-58098,CVE-2025-65082,CVE-2025-66200


author: wujichao <wujichao1@huawei.com> - 2.1.5-12
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: combine ten similar submissions into one(0125-fix-clang-build-error.patch) and Upgrade from upstream


author: jingxiaolu<lujingxiao@huawei.com> - 2.1.5-18
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: sync patches from upstream for refactoring sandbox and bugfixing


author: Donghua Huang <huangdonghua3@h-partners.com> - 50.0-32
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: libhns: Increase input parameter checks and adjust inline data size.


author: Donghua Huang <huangdonghua3@h-partners.com> - 50.0-36
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: libhns: Fix wrong WQE data in new post send API when QP wraps around


author: zhangxingrong <zhangxingrong@uniontech.com> - 3.16-4
changelog:
  - iperf3 now builds correctly on architectures without native support for 64-bit atomic types, by linking with the libatomic library


author: wangkai <13474090681@163.com> - 3.17.1-1
changelog:
  - Update to 3.17.1
  - iperf3 no longer changes its current working directory in --daemon mode. This results in more 
    predictable behavior with relative paths, in particular finding key and credential files for authentication.
  - A new --json-stream option has been added to enable a streaming output format, consisting of 
    a series of JSON objects (for the start of the test, each measurement interval, and the end of the test) separated by newlines
  - UDP tests now work correctly between different endian hosts
  - The --fq-rate parameter now works for --reverse tests
  - The statistics reporting interval is now available in the --json start test object


author: Huang Yang <huangyang@loongson.cn> - 1.8.18-22
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Resolve malloc aborted error raised when executing ipmitool fru.


author: xinghe <xinghe2@h-partners.com> - 1:6.6.0-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ss: fix expired time format of timer
         route: filter by interface on multipath routes
         lib: names: check calloc return value in db_names_alloc
         remove redundant patches


author: mufengyan <mufengyan@huawei.com> - 1:6.6.0-10
changelog:
  - Type:feature
  - ID:NA
  - SUG:NA
  - DESC:This patch adds ARPHRD_UB for iproute2 and support name
         parse for it and deletes the display of vf address
         information in the pf


author: yanglu <yanglu72@h-partners.com> - 1.8.9-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ebtables translate Print flush command after parsing is finished
         fix crash when opts isn't reallocated
         Fix handling of non-existent chains
         nft: Special casing for among match in compare_matches
         extensions: libipt_icmp: Fix confusion between 255/255 and any
         Revert libiptc: fix wrong maptype of base chain counters on restore
         extensions: Fix checking of conntrack --ctproto 0
         libxtables: xtoptions: Fix for non-CIDR-compatible hostmasks
         libxtables: xtoptions: Prevent XTOPT_PUT with XTTYPE_HOSTMASK
         libiptc: Fix for another segfault due to chain index NULL pointer


author: liweigang <liweiganga@uniontech.com> - 1.8.9-5
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: libxtables: Fix memleak of matches' udata
          xshared: Fix parsing of empty string arg in '-c' option


author: yanglu <yanglu72@h-partners.com> - 1.8.9-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:extensions:recent:Fix format string for unsigned values
         nft:cmd:Init struct nft_cmd::head early


author: langfei <langfei@huawei.com> - 3:1.9.2-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC: Fix socket API being blocked for 10s;
  -	Flush file brfore closing;
  -	Check fflush() return value.


author: Benshuai5D <benshuai5d@163.com> -1:1.8.0.462.b08-5
changelog:
  - add 8287432-C2-assert-tn-in-0-__null-failed-must-have-li.patch
  - add 8210389-C2-assert-n-outcnt-0-C-top-n-n-is_Proj-faile.patch


author: DXwangg <wangjiawei80@huawei.com> -1:1.8.0.472.b08-0
changelog:
  - update to 8u472
  - add 8268366-C1-Incorrect-calculation-of-has_fpu_register.patch
  - deleted 8312065-Socket.connect-does-not-timeout-when-profili.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - modified add-missing-test-case.patch


author: liweigang <liweiganga@uniontech.com> - 0.17-3
changelog:
  - add backport-Handle-yet-another-out-of-memory-condition.patch
  - add backport-Issue-857-fix-a-few-places-where-json_tokener-should.patch


author: yueyuankun <yueyuankun@kylinos.cn> - 0.17-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Disallow control characters in strict mode
          Fix the expected output for test_parse
          Fix causing the strict-mode control characters check to incorrectly trigger


author: sunhai <sunhai10@huawei.com> - 0.17-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix the apps/json_parse "-s" (strict) option so it actually does something, and default to non-strict.


author: sunhai <sunhai10@huawei.com> - 0.17-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Handle NULL gracefully in json_tokener_free
          Issue 881 don t allow json_tokener_new_ex with a dep


author: yanglu <yanglu72@h-partners.com> - 006-2
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC:Add crashkernel auto for Arm 
         enable kdump and set default reserve memory 512MB
         fix test failed due to default value change


author: Li Nan <linan122@huawei.com> - 6.6.0-124.0.0.101
changelog:
  - !19152  Fix CVE-2025-39810 fix CVE-2025-39810
  - !19359 ub: hisi-ubus: Fix ub memory decoder create
  - !19346  sched: Fix race between yield_to() and try_to_wake_up()
  - ub: hisi-ubus: Fix ub memory decoder create
  - !19341 v7  bugfix for xcall2.0
  - sched: Fix race between yield_to() and try_to_wake_up()
  - !17661 kvm: Only enable shadow mode for ioeventfd and Align the lifecycle of …
  - !19334  bpf: Sync pending IRQ work before freeing ring buffer
  - xcall2.0: prefetch: introduce struct prefetch_mm_data
  - xcall2.0: Fix mem leak in proc_xcall_command
  - xcall2.0: add xcall_subdir_create help to create subdir below /proc/xcall
  - xcall2.0: prefetch: keep prefetch module name same with file name
  - xcall2.0: prefetch: fix value name typos in __do_sys_epoll_pwait
  - !19339  zcopy: Fix context switch within RCU read-side
  - !19300  Add Support for Disabling Hugetlb in soft_offline_page
  - zcopy: Fix context switch within RCU read-side error
  - bpf: Sync pending IRQ work before freeing ring buffer
  - kvm: Only enable shadow mode for ioeventfd and Align the lifecycle of KVM shadow with KVM
  - mm/memory-failure: support disabling soft offline for HugeTLB pages
  - mm/memory-failure: userspace controls soft-offlining pages
  - bnxt_en: Fix memory corruption when FW resources change during ifdown
  - bnxt_en: Fix possible crash after creating sw mqprio TCs


author: Li Nan <linan122@huawei.com> - 6.6.0-126.0.0.102
changelog:
  - !19468 urma: Bugfix for ubcore_get_route_list implement
  - urma: Bugfix for ubcore_get_route_list implement
  - !19329 hisi_acc_vfio_pci: adapt to new migration configuration
  - !19435 crypto: hisilicon/qm - fix incorrect judgment in qm_get_complete_eqe_num()
  - !19383 [OLK-6.6] backport important bugfix for Broadcom NIC driver from upstream linux-6.6.y
  - !19460  xsched: XCU Partition
  - !19316  Fix cves CVE-2025-40040 & CVE-2025-40058
  - !19447 net: hns3: remove VF multi-TC compat bit
  - xsched: add throttling statistics for xsched groups
  - xsched: fix task stall when quota is disabled
  - xsched: suppress excessive error logs during cgroup file retry
  - xsched: fix shares misaccounting when multiple tasks run in one cgroup
  - xsched: switch xcu cgroup subsystem from domain mode to thread mode
  - !19439 obmm: remove redundant code and fix log issues
  - !18481 [OLK-6.6] Add platform-specific quirks for ZX-200 device
  - !19085 scsi: mpi3mr: Add support for status reply descriptor
  - !19078 scsi: mpi3mr: Split off bus_reset function from host_reset
  - !19416  kernfs: Fix UAF in polling when open file is released
  - !19415  smb: client: fix race with concurrent opens in rename(2)
  - !19446  net/mlx5: Fix ECVF vports unload on shutdown flow
  - obmm: remove redundant code and fix log issues
  - !19441  rv: Use strings in da monitors tracepoints
  - !19411  CVE-2025-39697
  - !19442  CVE-2025-22022
  - net: hns3: remove VF multi-TC compat bit
  - net/mlx5: Fix ECVF vports unload on shutdown flow
  - usb: xhci: Apply the link chain quirk on NEC isoc endpoints
  - usb: xhci: move link chain bit quirk checks into one helper function.
  - !19429  net/sched: Abort __tc_modify_qdisc if parent class does not exist
  - rv: Use strings in da monitors tracepoints
  - !19438  drm/scheduler: signal scheduled fence when kill job
  - !19410  Fix CVE-2025-39994
  - !17888 [OLK-6.6] Fix CVE-2025-37777
  - drm/scheduler: signal scheduled fence when kill job
  - !19371  RDMA/rxe: Fix race in do_task() when draining
  - !19393  usb: typec: ucsi: displayport: Fix NULL pointer access
  - obmm: set up default mem allocator granule
  - !19377 [OLK-6.6] Fix CVE-2025-23133
  - !18704 [OLK-6.6] Fix CVE-2024-58095
  - !19401  smb: client: fix crypto buffers in non-linear memory
  - !19323  nfsd: don't ignore the return code of svc_proc_register()
  - crypto: hisilicon/qm - fix incorrect judgment in qm_get_complete_eqe_num()
  - crypto: hisilicon/qm - add missing default in switch in qm_vft_data_cfg
  - crypto: hisilicon/sgl - remove unnecessary checks for curr_hw_sgl error
  - crypto: hisilicon/qm - add concurrency protection for variable err_threshold
  - crypto: hisilicon/qm - add the save operation of eqe and aeqe
  - crypto: hisilicon/qm - restore original qos values
  - crypto: hisilicon/qm - Fix device reference leak in qm_get_qos_value
  - !19386  x86/mm: Check return value from memblock_phys_alloc_range()
  - !19433 urma: bugfix ubagg drivers refent error
  - urma: bugfix ubagg drivers refent error
  - !19391 urma: fixing ubcore hash table initialization failure.
  - !19263 [OLK-6.6]Fix CVE-2025-37861
  - !19253 [OLK-6.6] Fix CVE-2025-37973
  - !19252 [OLK-6.6] Fix CVE-2025-37972
  - !19251 [OLK-6.6] Fix CVE-2025-37956
  - !19374 [OLK-6.6] Fix CVE-2025-37899
  - net/sched: Abort __tc_modify_qdisc if parent class does not exist
  - kernfs: Fix UAF in polling when open file is released
  - !19402  sched: Fix incorrect cluster mask
  - smb: client: fix race with concurrent opens in rename(2)
  - !19414  xsched: fix compile error when CONFIG_XCU_SCHEDULER is disabled
  - !19398 v2  bugfix for xcall2.0
  - !19412  sunrpc: fix handling of server side tls alerts
  - !19409  smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().
  - !19405 [OLK-6.6]:update patches for sw64 architecture
  - xsched: fix compile error when CONFIG_XCU_SCHEDULER is disabled
  - !19266  __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock
  - !19358  Fix CVE-2025-40016
  - sunrpc: fix handling of server side tls alerts
  - NFS: Fix a race when updating an existing write
  - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests
  - media: tuner: xc5000: Fix use-after-free in xc5000_release
  - media: tunner: xc5000: Refactor firmware load
  - urma: fixing ubcore hash table initialization failure.
  - smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().
  - !19365  net/mlx5e: Harden uplink netdev access against device unbind
  - sw64: config: add initial openeuler_defconfig for sw64
  - sw64: fix compile error of pte_pgprot()
  - sw64: add missing definition of MAP_PEER_SHARED
  - sched: Fix incorrect cluster mask
  - smb: client: fix crypto buffers in non-linear memory
  - !19392  Fixes and cleanup of page cache limit
  - !18760  CVE-2025-38501
  - !19390 v3  xsched: add xsched_{set,get}attr syscall
  - xcall2.0: fix panic while detaching xcall found in DT case
  - xcall2.0: prefetch: fix access NULL ptr in __do_sys_epoll_pwait()
  - xcall2.0: prefetch: get prefetch_mm_data once in get_pfi()
  - !19311  nbd: fix uaf in nbd_genl_connect() error path
  - !19310  fs: writeback: fix use-after-free in __mark_inode_dirty()
  - !19256  efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
  - !19237  nfsd: provide locking for v4_end_grace
  - !19247  dmaengine: ti: k3-udma: Add missing locking
  - !19220  NFSv4: Fix deadlock during the running of state manager
  - !19248  nfsd: Initialize ssc before laundromat_work to prevent NULL dereference
  - usb: typec: ucsi: displayport: Fix NULL pointer access
  - !19378 net: hibmcge: add support for pagepool on rx
  - mm: Add page cache limit check before queueing shrink worker
  - mm: Move vm_cache_limit_mbytes check to page_cache_over_limit()
  - mm: Replace deferrable timer with delay timer for shrink worker
  - !19388 [sync] PR-19363:  Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed"
  - !19368  net/sched: Fix backlog accounting in qdisc_dequeue_internal
  - !19367  net/sched: sch_qfq: Fix CVE-2025-38477
  - !19366  i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path
  - !19364  ixgbevf: Fix CVE-2025-40104
  - xsched: add xsched_{set,get}attr syscall
  - Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed"
  - x86/mm: Check return value from memblock_phys_alloc_range()
  - bnxt_en: Fix a possible memory leak in bnxt_ptp_init
  - net: hibmcge: add support for pagepool on rx
  - net: hibmcge: reduce packet drop under stress testing
  - net: hibmcge: add support for tracepoint to dump some fields of rx_desc
  - Revert "net: hibmcge: reduce packet drop under stress testing"
  - Revert "net: hibmcge: support pagepool for rx"
  - wifi: ath11k: update channel list in reg notifier instead reg worker
  - !18451 RDMA/bnxt_re: Fix budget handling of notification queue
  - ksmbd: fix use-after-free in session logoff
  - !18837  CVE-2025-37997
  - !19361  media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove
  - RDMA/rxe: Fix race in do_task() when draining
  - !19353 ubcore: fix query route list by eid pair.
  - ubcore: fix query route list by eid pair.
  - net/sched: Fix backlog accounting in qdisc_dequeue_internal
  - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class
  - net/sched: sch_qfq: Fix race condition on qfq_aggregate
  - i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path
  - net/mlx5e: Harden uplink netdev access against device unbind
  - ixgbevf: fix mailbox API compatibility by negotiating supported features
  - ixgbevf: fix getting link speed data for E610 devices
  - ixgbevf: Add support for Intel(R) E610 device
  - PCI: Add PCI_VDEVICE_SUB helper macro
  - media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove
  - media: uvcvideo: Use heuristic to find stream entity
  - media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID
  - hisi_acc_vfio_pci: adapt to new migration configuration
  - crypto: hisilicon - qm updates BAR configuration
  - hisi_acc_vfio_pci: Fix reference leak in hisi_acc_vfio_debug_init
  - Revert "migration: update BAR space size"
  - Revert "migration: qm updates BAR configuration"
  - Revert "migration: adapt to new migration configuration"
  - nfsd: don't ignore the return code of svc_proc_register()
  - iommu/vt-d: Disallow dirty tracking if incoherent page walk
  - mm/ksm: fix flag-dropping behavior in ksm_madvise
  - nbd: fix uaf in nbd_genl_connect() error path
  - fs: writeback: fix use-after-free in __mark_inode_dirty()
  - RDMA/bnxt_re: Remove unusable nq variable
  - RDMA/bnxt_re: Fix budget handling of notification queue
  - __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock
  - scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue
  - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
  - wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentation
  - Input: mtk-pmic-keys - fix possible null pointer dereference
  - ksmbd: prevent rename with empty string
  - ksmbd: move leading slash check to smb2_get_name()
  - nfsd: Initialize ssc before laundromat_work to prevent NULL dereference
  - dmaengine: ti: k3-udma: Add missing locking
  - nfsd: provide locking for v4_end_grace
  - NFSv4: Fix deadlock during the running of state manager
  - scsi: mpi3mr: Add support for status reply descriptor
  - scsi: mpi3mr: Split off bus_reset function from host_reset
  - netfilter: ipset: Remove unused htable_bits in macro ahash_region
  - netfilter: ipset: fix region locking in hash types
  - Add platform-specific quirks for ZX-200 device
  - ksmbd: add max ip connections parameter
  - ksmbd: extend the connection limiting mechanism to support IPv6
  - ksmbd: limit repeated connections from clients with the same IP
  - jfs: add check read-only before txBeginAnon() call
  - ksmbd: add free_transport ops in ksmbd connection
  - ksmbd: fix use-after-free in __smb2_lease_break_noti()


author: Mingzheng Xing <xingmingzheng@iscas.ac.cn> - 6.6.0-126.0.0.103
changelog:
  - RISC-V kernel upgrade to 6.6.0-126.0.0
  - Add support for LRW, DP1000
  - Add IOMMU related support
  - Backport mainline RISC-V features.


author: Mingzheng Xing <xingmingzheng@iscas.ac.cn> - 6.6.0-126.0.0.104
changelog:
  - Bugfix: Fix duplicate RISC-V SBI firmware event name
  - Add lrw core JSON file with metric support
  - Add support for Spacemit K3


author: Li Nan <linan122@huawei.com> - 6.6.0-128.0.0.105
changelog:
  - !19097 scsi: mpi3mr: Clear ioctl blocking flag for an unresponsive controller
  - !19095 scsi: mpi3mr: Set MPI request flags appropriately
  - !19092 scsi: mpi3mr: Replace deprecated strncpy() with assignments
  - !19086 scsi: mpi3mr: Fetch correct device dev handle for status reply descriptor
  - !19636  Some bugfixes for interference
  - !19639 ub: ubase: Fix spell error of month
  - ub: ubase: Fix spell error of month
  - !19637 ub: udma: bugfix related to print location.
  - !19637 ub: udma: bugfix related to print location.
  - !19638 ub:ubus: bugfix port reset in cluster mode
  - !19623 iommu/ummu: Fix the issue of uninitialized resources in logic_ummu_viommu
  - ub:ubus: bugfix port reset in cluster mode
  - ub:ubus: add hotplug capability check
  - ub:ubus: bugfix calltrace of killing qemu when rmmod hisi_ubus
  - ub: udma: bugfix related to print location.
  - iommu/ummu: Remove redundant CONFIG_UB_UBRT_PLAT_DEV and code
  - interference: Add version compatibility check between subsystem and cgroup
  - interference: Fix missing interference.stat file in v1 hierarchy
  - interference: Add fallback to sched_clock when TSC is unavailable
  - interference: Add dependency on CONFIG_SCHED_INFO to avoid build error
  - interference: Resolve arm32 build error by restricting IFS to x86/arm64
  - interference: Avoid null pointer dereference in cgroup_ifs_add_files
  - iommu/ummu-core: Duplicate EID are not allowed
  - iommu/ummu: Move tid_type attr to logic ummu
  - iommu/ummu: Fixing the issue of uninitialized resources in logic_ummu_viommu
  - !19634 crypto: hisilicon - some bugfix
  - !19628 ub:ubfi: Fix UBFI memory leak issue
  - !19616 ub: ubase&unic: Fix some bug finding in running the driver
  - !19553 perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12
  - crypto: hisilicon - lower priority for hisilicon crypto implementations
  - crypto: hisilicon/zip - remove redundant callback validation and invocation in crypto_wait_req
  - crypto: hisilicon/zip - add algorithm check before soft tfm allocation
  - crypto: hisilicon/zip - fix a callback problem
  - crypto: hisilicon/qm - place the interrupt status interface after the PM usage counter
  - crypto: hisilicon/qm - increment PM usage counter when handling the aeq interrupt
  - crypto: hisilicon/sgl - fix inconsistent map/unmap direction issue
  - crypto: hisilicon/hpre - support curve25519 fallback for hardware queue unavailable
  - crypto: hisilicon - mask all error type when uninit
  - net: unic: Fixed the call trace issue triggered internally by the completion event interrupt
  - !19624  xsched: XCU Partition
  - !19621 ubagg: fix mismatched spin unlock.
  - iommu/ummu: Optimize chip generational compatibility feature
  - iommu/ummu: Fix VM multi-instance problem
  - !19620 iommufd: Prevent ALIGN() overflow
  - ubagg: fix mismatched spin unlock.
  - net: unic: Restore tx and rx stats when setting coalesce parameters
  - ub: ubase: obtain rc_max_cnt from MAMI
  - ub: ubase: fix a issue of udma device's eid deleted when stop rx stream and reset concurrently
  - ub: ubase: add opcode to query ub port_bitmap.
  - net: unic: Restore default queue count per tc when tc number changes.
  - ub: ubase: Fix the issue of mismatch between the ubase aeqe structure and the protocol.
  - ub: ubase: add ip_over_urma API for udma.
  - ub: ubase: optimize print format of fw_ver in debugfs.
  - ub: ubase: Fix the issue of deadlock by quantities of log in the ctrlq crq task.
  - ub: ubase: Remove non-cluster mode code.
  - net: unic: Resolve the bandwidth jitter problem
  - ub:ubfi: Fix UBFI memory leak issue
  - ub:ubus: Matt and MMIO judgments are not performed in cluster
  - ub:ubus: Delete ubc cfg0 config during cluster mode
  - ub:hisi-ubus: Fix ue reg/unreg without lock bug
  - xsched: fix infinite loop caused by invalid CFS group vruntime update
  - xsched: prevent race between enqueue_ctx and xsched_task_free
  - xsched: DEBUG log cleanup
  - xsched: fix divide-by-zero caused by u64 overflow in CFS shares weight calculation
  - xsched: prevent NULL deref by refcounting css and tracking offline state
  - xsched: fix hung_task caused by cgroup_file_show and xcg_mutex deadlock
  - xsched: fix concurrent modification NULL pointer dereference in xcu.sched_class
  - xsched: fix NULL pointer risk on attach entry allocation
  - xsched: refactor CFS per-XCU rq init/deinit paths
  - !19608 ub: ub_fwctl: Modify TP/TA/SCC register query process.
  - !18634 [OLK-6.6]Fix CVE-2025-38706
  - iommufd: Prevent ALIGN() overflow
  - !19400  smb: client: fix mid_q_entry memleak leak with per-mid locking
  - iommu/ummu: NO plbi for grant, config permq need dma_wmb
  - iommu/ummu: Fix compilation option configuration about CONFIG_ACPI
  - iommu/ummu: UMMU doesn't send tect sync after delete eid
  - iommu/ummu: Delete unnecessary commands
  - !19601  net/packet: fix a race in packet_set_ring() and packet_notifier()
  - !19598  ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
  - !19597  ipv6: prevent infinite loop in rt6_nlmsg_size()
  - !19354 [OLK-6.6] Fix CVE-2025-37822
  - !19355 [OLK-6.6] Fix CVE-2025-38361
  - !19563 ub: cdma: fix the timing issue during flow-based deregistration.
  - !19585 crypto: hisilicon/trng - Fix the issue where TRNG cannot be used by multiple threads.
  - !19610 perf: Fix lastup for multi-CPU PG
  - !19609 urma: fixed process exiting uburma driver's private memory UAF
  - !19592  Fix incorrect use of cpuhp_remove_multi_state parameter
  - perf: Fix lastup for multi-CPU PG
  - urma: fixed process exiting uburma driver's private memory UAF
  - !19607 Revert "RDMA/hns: Fix mismatch exception rollback"
  - ub: cdma: modify the compatibility field according to the Linux KABI specification
  - ub: cdma: fix the timing issue during flow-based deregistration.
  - ub: cdma: fix kasan cdma jfae uaf
  - ub: cdma: modify log level about en information
  - ub: ub_fwctl: Modify TP/TA/SCC register query process.
  - Revert "RDMA/hns: Fix mismatch exception rollback"
  - !18664 [OLK-6.6] Fix CVE-2025-22039
  - net/packet: fix a race in packet_set_ring() and packet_notifier()
  - ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
  - ipv6: prevent infinite loop in rt6_nlmsg_size()
  - !19558 obmm: sync obmm default params value to sysfs.
  - !19560 obmm: set MAX Numa Distance to 255
  - !19589 ub:ubus: add active_mutex in ub_entity
  - soc cache: Add compilation config for hisi_soc_l3c
  - soc cache: Don't poll before removing all locks
  - soc cache: Drop redundant vm_pgoff
  - soc cache: fix walk page parameter and drop incorrect check
  - soc cache: Check address while walking pages
  - soc_cache: Fix component removal order to avoid race condition
  - soc cache: cleanup: Remove the redundant check of vm_pgoff
  - soc cache: cleanup: Change type of mnt_type
  - soc cache: cleanup: avoid tag addr from interfering range validation
  - soc cache: cleanup: move judgement of soc cache dev into lock protection
  - soc cache: cleanup: fix memory leakage on error path
  - soc_cache: Fix error code returning from hisi_soc_l3c_do_lock
  - soc_cache: Fix incorrect use of cpuhp_remove_multi_state parameter
  - soc cache: cleanup: replace dynamically allocated param with local variable
  - ub:ubus: add active_mutex in ub_entity
  - !19576  Bugfix for two issues
  - crypto: hisilicon/trng - support tfms sharing the device
  - crypto: hisilicon/trng - use DEFINE_MUTEX() and LIST_HEAD()
  - Revert "crypto: hisilicon/trng - support to obtain random numbers from soft algorithm"
  - Revert "crypto: hisilicon/trng - use DEFINE_MUTEX() for mutex lock"
  - !19557  Fix UAF issue for mfs
  - !19555 ub: bugfix of port, decoder and vfio
  - !19561 obmm: fix granu checking in mmap
  - zcopy: Fix softlockup while attach PUD-SIZE page
  - zcopy: Fix NULL pointer dereference while attach conflict with free
  - ub:unic Adaptation of the port reset interface
  - !19521 uvb: change dir name
  - !19532 net: hns3: add VLAN id validation before using
  - !19271  Squashfs: fix uninit-value in squashfs_get_parent
  - !19269  media: venus: Add a check for packet size after reading from shared memory
  - !19268  eventpoll: Fix semi-unbounded recursion
  - !19267  kernfs: Relax constraint in draining guard
  - !19552  KVM: arm64: Check the untrusted offset in FF-A memory share
  - !19551 add check ack_dono flag for reboot event
  - obmm: sync obmm default params value to module sysfs.
  - obmm: set MAX Numa Distance to 255
  - obmm: fix granu checking in mmap
  - ub:ubus adapt port local ras
  - vfio:ubus vfio-ub support ub entity enable
  - mfs: Fix UAF problem on event object when enable tracepoint
  - ub:ubus: fix bug of msg workqueue null
  - ub:hisi-ubus ub:hisi-ubus: Move the decoder's page table operations to hisi-ubus
  - add check ack_dono flag for reboot event
  - !19517 gmem: fix several issues
  - !19519  arm64/mpam: Reset mbwu_state while creating new monitor group
  - perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12
  - perf arm-spe: Backport perf_cpu_map__new_online_cpus()
  - perf arm-spe: Save per CPU information in metadata
  - perf arm-spe: Calculate meta data size
  - perf arm-spe: Define metadata header version 2
  - perf arm-spe: Prepare for adding data source packet implementations for other cores
  - perf arm-spe: Use old behavior when opening old SPE files
  - perf arm-spe: Set sample.addr to target address for instruction sample
  - perf color: Add printf format checking and resolve issues
  - perf arm-spe: Add Cortex CPUs to common data source encoding list
  - perf arm-spe: Add Neoverse-V2 to common data source encoding list
  - perf arm-spe: Remove the unused 'midr' field
  - perf arm-spe: Use metadata to decide the data source feature
  - perf arm-spe: Introduce arm_spe__is_homogeneous()
  - perf arm-spe: Dump metadata with version 2
  - perf arm-spe: Support metadata version 2
  - perf arm-spe: Rename the common data source encoding
  - perf arm-spe: Rename arm_spe__synth_data_source_generic()
  - KVM: arm64: Check the untrusted offset in FF-A memory share
  - !19530  Fix unexpected behavior in resctrl mounting
  - Revert "perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12"
  - !19520 ub: udma: bugfix related to init xa flags.
  - !19205 [OLK-6.6] Fix CVE-2025-39732
  - !19156 [OLK-6.6] Fix CVE-2025-39684
  - !19157 [OLK-6.6] Fix CVE-2025-39675
  - net: hns3: add VLAN id validation before using
  - !19526  mm/numa_remote: fix wild-memory-access in numa_remote_hugetlb_nowatermark
  - fs/resctrl: Prevent mounting with unsupported options
  - fs/resctrl: Fix resctrl mount options display in mount list
  - ub: udma: bugfix related to init xa flags.
  - ub: udma: bugfix for rx close.
  - mm/numa_remote: fix wild-memory-access in numa_remote_hugetlb_nowatermark
  - uvb: change dir name
  - !19507  Fix some memory policy bugfix
  - arm64/mpam: Need to reset MPAM component when umounting resctrl
  - arm64/mpam: Remove the redundant prev_val member variable
  - arm64/mpam: Reset mbwu_state while creating new monitor group
  - !19508 ub: ub_fwctl: Modify the problem of incorret data when querying entry
  - !19513  zcopy: fix two issues
  - zcopy: Fix Bad rss-counter state while non-mapping pages attach
  - zcopy: Fix null pointer dereference while attach transhugepage twice to same addr
  - ub: ub_fwctl: Modify the problem of incorret data when querying entry information
  - !19357 ubios_uvb: add msleep in poll thread
  - ubios_uvb: add check for uvb window buffer size
  - !19494  crypto: hisilicon - add reference counting to queues for tfm kernel reuse
  - !19475  task_work: Fix NMI race condition
  - mempolicy: restrict smart grid scheduling to vma_alloc_folio path
  - mempolicy: fix missing mmap_read_unlock() in error path
  - ubios_uvb: add check for cis message and senderid
  - !19486 [OLK-6.6] fix possible crash caused by null pointer when hct get page.
  - crypto: hisilicon/sec2 - support skcipher/aead fallback for hardware queue unavailable
  - crypto: hisilicon/hpre - support the hpre algorithm fallback
  - crypto: hisilicon/zip - support fallback for zip
  - crypto: hisilicon/qm - optimize device selection priority based on queue ref count and NUMA distance
  - crypto: hisilicon/qm - add reference counting to queues for tfm kernel reuse
  - crypto: hisilicon - consolidate qp creation and start in hisi_qm_alloc_qps_node
  - crypto: hisilicon/qm - centralize the sending locks of each module into qm
  - crypto: hisilicon/qm - enhance the configuration of req_type in queue attributes
  - Revert "crypto: hisilicon/hpre - support the hpre algorithm fallback"
  - crypto: hisilicon/hpre: extend tag field to 64 bits for better performance
  - crypto: hisilicon/sec - move backlog management to qp and store sqe in qp for callback
  - crypto: hisilicon/zip - adjust the way to obtain the req in the callback function
  - ubios_uvb: add msleep in poll thread
  - ccp/hct: fix possible crash caused by null pointer when hct get page.
  - task_work: Fix NMI race condition
  - scsi: mpi3mr: Clear ioctl blocking flag for an unresponsive controller
  - scsi: mpi3mr: Set MPI request flags appropriately
  - scsi: mpi3mr: Replace deprecated strncpy() with assignments
  - scsi: mpi3mr: Fetch correct device dev handle for status reply descriptor
  - smb: client: fix mid_q_entry memleak leak with per-mid locking
  - drm/amd/display: Check dce_hwseq before dereferencing it
  - riscv: uprobes: Add missing fence.i after building the XOL buffer
  - Squashfs: fix uninit-value in squashfs_get_parent
  - media: venus: Add a check for packet size after reading from shared memory
  - eventpoll: Fix semi-unbounded recursion
  - kernfs: Relax constraint in draining guard
  - ksmbd: fix overflow in dacloffset bounds check
  - wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask()
  - drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session()
  - comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl()
  - comedi: Fix initialization of data for instructions that write to subdevice
  - gmem: remove reduntant interfaces and use proper mmap flag
  - gmem: gmem_reserve_vma should use vma_flag_clear to remove flag
  - gmem: remove inpropre BUG_ON in do_peer_shared_anonymous_page
  - gmem: hmemcpy should use dma for phy addr
  - ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()


author: Mingzheng Xing <xingmingzheng@iscas.ac.cn> - 6.6.0-128.0.0.106
changelog:
  - RISC-V kernel upgrade to 6.6.0-128.0.0
  - Update Spacemit K3 DTS
  - Fix LTP test on TH1520
  - Enable CONFIG_ACPI_APEI


author: Li Nan <linan122@huawei.com> - 6.6.0-130.0.0.107
changelog:
  - !19680 LoongArch: Mask all interrupts during kexec/kdump
  - !19682 Loongarch: Enable CONFIG_RANDOMIZE_BASE default
  - !19738  xsched: move xsched types to user-accessible headers
  - !19717 obmm: Race condition fix, mmap rollback fix and export_user flag check.
  - xsched: move xsched types to user-accessible headers
  - obmm: Add FAST flag check for obmm_export_from_user
  - obmm: Rollback mmap_granu when mmap failed
  - !19735 add check ack msg and do sleep
  - add check ack msg and do sleep
  - !18003 [OLK-6.6] PCI: phytium: Add hotplug and hotreset workaround patch for phytium SoCs
  - Loongarch: Enable CONFIG_RANDOMIZE_BASE default
  - LoongArch: Mask all interrupts during kexec/kdump
  - !19714 drm/hisilicon/hibmc: fix PCIe 64-bit bar support
  - obmm: Fix race condition of region release and device release
  - !19688 ub: ubase: CtrlQ retry message uses the same seq
  - !19687 ub: udma: Bugfix related to crq event unregister.
  - !19641 ub:hisi-ubus: fix MUE unreg msg rsp time
  - !19677 ub: libcdma: add eid upi update response
  - drm/hisilicon/hibmc: fix PCIe 64-bit bar support
  - !19709  mm: try skipping pinned page before unmapping in migration
  - mm: try skipping pinned page before unmapping in migration
  - !19657 xsched: simplify logging macros by removing redundant pr_fmt usage
  - !19702  XSched: List Corruption
  - !19617  Handling Kunpeng Chip ARM Spectre-BHB (CVE-2022-23960) Issue
  - xsched/cgroup: move list_del from css_free to css_offline to prevent corruption
  - xsched: protect group member list with xcu_lock to prevent corruption
  - !19696  i40e: remove read access to debugfs files
  - i40e: remove read access to debugfs files
  - ub: udma: Bugfix related to crq event unregister.
  - !19674 obmm: bugfixes of log and race condition
  - !19644 obmm: suppport unaligned PMD mapping
  - ub:ubus: Change create device irq domain debug info
  - !19683  xsched: prevent linked list corruption in RT priority updates
  - ub: ubase: CtrlQ retry message uses the same seq
  - net: unic: Fix the calltrace caused by modifying queue parameters in the MUE scenario
  - xsched: prevent linked list corruption in RT priority updates
  - ub: cdma: add eid upi update response
  - obmm: Remove log pringts of physical address and kernelspace virtual address
  - obmm: Fix race condition between unexport and addr_query_by_pa
  - !19659 ubcore: fix route_list when no full match.
  - !19661 Packet throughput decreases with multiple jetty streams
  - xsched: simplify logging macros by removing redundant pr_fmt usage
  - xsched: Fix compilation by adding xsched_attr to syscalls.h
  - !19562 [OLK-6.6] virtcca: fix incorrect use of the percpu declare
  - ubcore: fix route_list when no full match.
  - obmm: display mmaped region's Pagesize
  - obmm: fix for PMD mapping
  - Packet throughput decreases with multiple jetty streams
  - virtcca: Add missing includes for DECLARE_PER_CPU
  - arm64: Add missing includes for mem_encrypt
  - !19647  fbdev: bitblit: bound-check glyph index in bit_putcs*
  - fbdev: bitblit: bound-check glyph index in bit_putcs*
  - ub:hisi-ubus: fix MUE unreg msg rsp time
  - config: Disable unprivileged BPF syscall by default
  - arm64: Add support for TSV110 Spectre-BHB mitigation
  - PCI: phytium: Add hotplug and hotreset workaround patch for phytium SoCs


author: Li Nan <linan122@huawei.com> - 6.6.0-131.0.0.108
changelog:
  - !19760 ub:ubfi:skipped address of subtable 0 in ubrt
  - !19758 ub: udma: bugfix related to rx close.
  - !19759 ub: ubase: fix ubase activate/deactivate resp timeout
  - ub:ubfi:skipped address of subtable 0 in ubrt
  - ub: ubase: fix ubase activate/deactivate resp timeout
  - ub: udma: bugfix related to rx close.
  - !19752 Repair driver reset work-q uaf
  - !19755 obmm: Register resource for every memdev
  - !19756 ub:ubus delete undefined class code
  - !19754 ub:ubus: Move the decoder's queue operations to hisi-ubus
  - !19757 ub: cdma: add ioctl logs and error codes
  - !19750 ub: udma: Bugfix related to 2M hugepage.
  - !19749 ub: unic & ubase: Fix ethtool configuration error issue and resolve mailbox timeout
  - !19697  iomap: fix dirty range tracking in iomap_folio_mkwrite_iter
  - ub: cdma: add ioctl logs and error codes
  - ub:ubus delete undefined class code
  - obmm: Register resource for every memdev
  - Repair driver reset work-q uaf
  - ub:ubus: fix ub_get_bus_controller getting null
  - ub:ubus: Move the decoder's queue operations to hisi-ubus
  - ub:ubus: hi_msg_sync_wait first pull cq
  - ub: udma: Bugfix related to 2M hugepage.
  - net: unic: Fix ethtool configuration error issue.
  - ub: ubase: Resolve mailbox timeout issue.
  - 删除文件 .本项目已经正式迁移至AtomGit平台/README.md
  - update README.
  - add migrate not
  - iomap: fix dirty range tracking in iomap_folio_mkwrite_iter


author: Li Nan <linan122@huawei.com> - 6.6.0-132.0.0.109
changelog:
  - !19477 iommu: set the default iommu-dma mode as non-strict
  - iommu: set the default iommu-dma mode as non-strict


author: Mingzheng Xing <xingmingzheng@iscas.ac.cn> - 6.6.0-132.0.0.110
changelog:
  - riscv kernel upgrade to 6.6.0-132.0.0
  - Bugfix: iommu/riscv: Fix inconsistencies with the latest spec revision
  - Bugfix: riscv: acpi: avoid errors caused by probing DT devices when ACPI is used
  - Bugfix: Revert "drivers: Add ACPI support for thead-c900-aclint-sswi"


author: Liu Chao <liuchao173@huawei.com> - 30-7
changelog:
  - disable make test because cannot find /lib/modules/`uname -r`/build
  - add extramodules to depmod search path


author: xuxuepeng <xuxuepeng1@huawei.com> - 0.0.1-8
changelog:
  - Type:Enhancement
  - ID:NA
  - SUG:NA
  - DESC: Simplify Store api, remove unnecessary validation
          Check if a path is abstract before connection
          Add vsock support.


author: Wenlong Zhang <zhangwenlong@loongson.cn> - 0.0.1-12
changelog:
  - Type:Fix
  - ID:NA
  - SUG:NA
  - DESC:just use vendor on loongarch64
         add loongarch64 support for nix


author: lingsheng <lingsheng1@h-partners.com> - 3.7.1-7
changelog:
  - Type:CVE
  - ID:CVE-2025-5914,CVE-2025-5915,CVE-2025-5916,CVE-2025-5917,CVE-2025-5918
  - SUG:NA
  - DESC:fix CVE-2025-5914 CVE-2025-5915 CVE-2025-5916 CVE-2025-5917 CVE-2025-5918


author: Linux_zhang <zhangruifang@h-partners.com> - 2.39.1-25
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: revert libblkid ext add checksum support, the disk cannot be mounted because the checksum may fail.
          [add] backport-revert-libblkid-ext-add-checksum-support.patch


author: cenhuilin <cenhuilin@kylinos.cn> - 2.39.1-29
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:lsblk: fix memory leak [coverity scan]
         lsblk: fix possible use-after-free


author: yixiangzhike <yixiangzhike007@163.com> - 2.39.1-31
changelog:
  - backport community patches
      fix columns reduction
      fix memory leak issue in read_Subid_range
      fix off-by-one in maximum last sector calculation
      fix memory corruption in size calculation
      fix memory corruption in read buffers


author: wangzhiqiang <swangzhiqiang95@huawei.com> - 3.0.4-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Add BDPluginSpec constructor and use it in plugin_specs_from_names


author: tianmuyang <tianmuyang@huawei.com> 2:1.2.2-11
changelog:
  - Adaption for sched type eBPF program:
    backport-libbpf-Adaption-for-sched-type-eBPF-program.patch


author: yanglongkang <yanglongkang@h-partners.com> - 2.69-3
changelog:
  - backport upstream patches:
    getpcaps: fix program name in help message
    Stop using _pam_overwrite() in pam_cap.c


author: chenhaixing <chenhaixing@huawei.com> - 0.70.2-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:libdnf:Avoid reinstalling installonly packages marked for ERASE
                Fix utimes error message in dnf-repo
                Do not download repository if our local cache is up to date in dnf-repo
                python bindings:Load all modules with RTLD_GLOBAL


author: doupengda <doupengda@loongson.cn> 1.0.1-7
changelog:
  - update config.guess and config.sub
  - fix SOURCE1 file autoconf.h '__loongarch64__' to '__loongarch64'


author: yuanchao <1050706328@qq.com> - 2.1.12-13
changelog:
  - Fix function undeclared,incompatible pointer and parameter lack in 'add-testcases-for-event.c-apis.patch',support clang build


author: andy <liuyang01@kylinos.cn> - 2.1.12-14
changelog:
  - Fix leak in evbuffer_add_file() on empty files
  - evthread: fix NULL dereference in evthread_setup_global_lock_()
  - Fix potential null dereference in http-server


author: shixuantong <shixuantong1@h-partners.com> - 2.1.12-15
changelog:
  - fix: arc4_getword integer overflow, detected by -fsanitize=undefined
  - Fix divide-by-zero in ev_token_bucket_get_tick_
  - fixed missing check for null after strdup in evutil_inet_pton_scope
  - Fix integer-overflow in ev_token_bucket_cfg_new
  - Fix integer overflow in HTTP version
  - Fix potential Null pointer dereference in bufferevent_openssl.c
  - Fix potential Null pointer dereference in dns-example.c
  - Fix potential Null pointer dereference in event-read-fifo.c
  - Fix unlikely (for libevent) UB in HT_GROW()


author: yanglongkang <yanglongkang@h-partners.com> - 3.4.4-5
changelog:
  - Fix x86/ffi64 calls with 6 gp and some sse registers
    Robustify floating point comparison in test
    Fix floating point compare


author: Yang Yanchao <yangyanchao6@huawei.com> - 0.1-3
changelog:
  - Check the return ptr of the malloc[#I7YV2X]
    add hnid in gmemPrefetch [#I7XQMW]
    free userData in stream to avoid async operations accessing illeagal address[#I7Z2RF]


author: yanglu <yanglu72@h-partners.com> - 3.0.17-2
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:avoid crashing in icalcomponent_normalize
         fix a memleak in icalcomponent_normalize


author: yixiangzhike <yixiangzhike007@163.com> - 1.4.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:refix the failure of building with cppcheck>=2.11 by using upstream patch


author: yixiangzhike <yixiangzhike007@163.com> - 1.6.4-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch to fix possible uninitialized variable


author: Hu Bin <hubin73@huawei.com> - 0.1.3-10
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:add libmetalink testcases for api and error handling, fix automake error


author: Hu Bin <hubin73@huawei.com> - 0.1.3-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport patches to fix NULL pointer dereference and memory leak bug


author: chengyechun <chengyechun1@huawei.com> - 3.7.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:prevent segfault in af_request_type
         fix bridge info parsing


author: Weifeng Su <suweifeng1@huawe.com> - 1.8-1
changelog:
  - Upgrade to version 1.8
    -Support added for Flexible Data Placement(TP4146)
    -Add support for Persistent Discovery Controllers
    -Replaced the libsystemd dependency with libdbus
    -A parser for the NBFT table
    -Ignoring fabric connect attempts if the execution context doesn't match
    -support for TP8018
    -use sysfs only for topology scan
    -auto cleanup for resources
    -buf fixed and clean code


author: xinghe <xinghe2@h-partners.com> - 2:1.6.40-2
changelog:
  - Type:cves
  - CVE:CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720
  - SUG:NA
  - DESC:fix CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720


author: yixiangzhike <yixiangzhike007@163.com> - 1.4.5-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch to remove redundant inclusion of libintl.h


author: yixiangzhike <yixiangzhike007@163.com> - 1.15.2-3
changelog:
  - backport patches from upstream
      Fix a memory leak of the glib slist
      Add missing end callback for already downloaded zchunk files
      Fix memory leak of repo and repomd
      Fix a crash when the gnupghomedir is NULL or not specified on Python API


author: yinsist <jianhui.oerv@isrc.iscas.ac.cn> - 0.20.5-2
changelog:
  - Valgrind does not support certain architectures like RISC-V, Before depending on Valgrind, first check if Valgrind supports the architecture


author: yuanchao <1050706328@qq.com> - 0.20.5-3
changelog:
  - fix `incompatible function pointer types passing`errors in test-vala-unstable.vala and test-vala-lang.vala


author: liying <liying_1@chinatelecom.cn> - 1.0.31-3
changelog:
  - Marked unimplemented dither enums in the header file as such.
  - Fix typo
  - Fix memory leak in caf_read_header


author: zhangjun<zhangjun@kylinos.cn> - 0.7.20-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memory leak when using testsolv to execute cases 
         Fix segfault on conflict resolution when using bindings


author: xinghe <xinghe2@h-partners.com> - 2.74.3-4
changelog:
  - Type:cves
  - ID:CVE-2024-52530 CVE-2024-52531 CVE-2024-52532
  - SUG:NA
  - DESC:fix CVE-2024-52530 CVE-2024-52531 CVE-2024-52532


author: zhangpan <zhangpan103@h-partners.com> - 2.74.3-5
changelog:
  - Type:cves
  - ID:CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784
  - SUG:NA
  - DESC:fix CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784


author: zhangpan <zhangpan103@h-partners.com> - 2.74.3-7
changelog:
  - Type:cves
  - ID:CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913
  - SUG:NA
  - DESC:fix CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913


author: zhangpan <zhangpan103@h-partners.com> - 2.74.3-10
changelog:
  - Type:cves
  - ID:CVE-2025-4476 CVE-2025-4948 CVE-2025-4969
  - SUG:NA
  - DESC:fix CVE-2025-4476 CVE-2025-4948 CVE-2025-4969


author: renmingshuai <renmingshuai@huawei.com> - 0.10.5-2
changelog:
  - Type:CVE
  - Id:CVE-2023-6004,CVE-2023-48795,CVE-2023-6918
  - SUG:NA
  - DESC:fix CVE-2023-6004,CVE-2023-48795 and CVE-2023-6918


author: zhangbinqin <zhangbinqin@h-partners.com> - 0.10.5-5
changelog:
  - Type:CVE
  - Id:CVE-2025-4877 CVE-2025-4878 CVE-2025-5351 CVE-2025-5987 CVE-2025-5372
  - SUG:NA
  - DESC:fix CVE-2025-4877CVE-2025-4878CVE-2025-5351CVE-2025-5987CVE-2025-5372


author: yueyuankun<yueyuankun@kylinos.cn> - 1.11.0-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add patch to work around strict permissions issues for sshd tests


author: laokz <zhangkai@iscas.ac.cn> - 1.9.6-2
changelog:
  - make with_mem_leak_test option following i386 i486 i586 i686 pentium3 pentium4 athlon geode x86_64 armv3l armv4b armv4l armv4tl armv5tl armv5tel armv5tejl armv6l armv6hl armv7l armv7hl armv7hnl armv8l armv8hl armv8hnl armv8hcnl aarch64 loongarch64 powerpc64le ppc64le sw_64


author: ZixinLi <lizixin10@h-partners.com> - 9.10.0-23
changelog:
  - Fix CVE-2025-12748 CVE-2025-13193
  - conf: Add virDomainDefIDsParseString
  - bhyve: Check ACLs before parsing the whole domain XML
  - libxl: Check ACLs before parsing the whole domain XML
  - lxc: Check ACLs before parsing the whole domain XML
  - vz: Check ACLs before parsing the whole domain XML
  - ch: Check ACLs before parsing the whole domain XML
  - qemu: Check ACLs before parsing the whole domain XML
  - qemu: snapshot: Set umask for 'qemu-img' when creating external inactive snapshots


author: liuchao <liuchao173@huawei.com> - 2.13.7-1
changelog:
  - Update to 2.13.7:
    - fix: invoke MKDIR_P before changing directories
    - fix: -Wsingle-bit-bitfield-constant-conversion with clang16
    - fix: clean java inner class files in examples
    - Introduce sync vs unsync enablers
    - Fix: misaligned urcu reader accesses
    - ustfork: Fix warning about volatile qualifier
    - ustfork: Fix possible race conditions
    - Fix: tracepoint: Remove trailing \ at the end of macro
    - fix: python agent: use stdlib distutils when setuptools is installed
    - fix: python agent: install on Debian python >= 3.10
    - fix: python agent: Add a dependency on generated files
    - python: use setuptools with python >= 3.12


author: zhangxiaoyu<zhangxiaoyu58@huawei.com> - 5.0.2-8
changelog:
  - Type: bugfix
  - ID:NA
  - SUG:NA
  - DESC: skip setup console if disable pty and fix syscontainer-hooks write devices rule useless


author: zhangxiaoyu<zhangxiaoyu58@huawei.com> - 5.0.2-9
changelog:
  - Type: bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix dev mount failed and skip send/recv devpts_fd if disable_pty


author: jikai<jikai11@huawei.com> - 5.0.2-13
changelog:
  - Type: bugfix
  - ID:NA
  - SUG:NA
  - DESC: unfreeze freezing container and bugfix for files.limit and syscontainer


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 5.0.2-14
changelog:
  - Type: bugfix
  - ID:NA
  - SUG:NA
  - DESC: update meson parameters for disabling LTO when building with clang & ld.bfd


author: yuanchao <1050706328@qq.com> - 5.0.2-16
changelog:
  - Type: bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix error of cc.compiles in meson.build on aarch cased by '-fstack-clash-protection' and '-Werror'


author: wujichao <wujichao1@huawei.com> - 0.3-36
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:bugfix: Information in cpu directory is overwritten after lxcfs restart


author: Liu Qingtao <liu.qingtao2@zte.com.cn> - 1.9.4-3
changelog:
  - Add patch riscv_zicclsm_lz4_force_mem_access_2.patch to configure LZ4_FORCE_MEMORY_ACCESS=2 for RISC-V with Zicclsm extension


author: chenyanpanHW <chenyanpan@huawei.com> - 12.5-33
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/nail-11.25-config.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.3-pager.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-lzw.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-fname-null.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-collect.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-usage.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-man-page-fixes.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-outof-Introduce-expandaddr-flag.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-fio.c-Unconditionally-require-wordexp-support.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-globname-Invoke-wordexp-with-WRDE_NOCMD-CVE-2004-277.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-unpack-Disable-option-processing-for-email-addresses.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-empty-from.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-nss-hostname-matching.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-encsplit.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-openssl.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/backport-mailx-12.5-no-SSLv3.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/set-mail-defualt-did-not-record-failsend.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: xiejing <xiejing@kylinos.cn> - 4:10.5.25-1
changelog:
  - Bump to 10.5.25 for resolving CVE-2024-21096
  - Fix version description in systemd service file
  - Add conflict with greatsql and change requires


author: Funda Wang <fundawang@yeah.net> - 102.9.0-9
changelog:
  - set CC and CXX so that clang won't be selected automatically
  - fix compilation errors in sw_64 support


author: yanglu <yanglu72@h-partners.com> - 2:0.95-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Change UDP and ICMP sockets binding to accept a source IP from the -a CLI option


author: yaoxin <yao_xin001@hoperun.com> - 8.0-1
changelog:
  - Update to 8.0
    * CVE-2024-5742: Avoid privilege escalations via symlink attacks
      on emergency save file (boo#1226099)
    * By default ^F is bound to starting a forward search, and ^B to
      starting a backward search, while M-F and M-B repeat the search
      in the corresponding direction. (See the documentation if you
      want the old bindings back.)
    * Command-line option --modernbindings (-/) makes ^Q quit, ^X cut,
      ^C copy, ^V paste, ^Z undo, ^Y redo, ^O open a file, ^W write a file,
      ^R replace, ^G find again, ^D find again backwards, ^A set the mark,
      ^T jump to a line, ^P show the position, and ^E execute.
    * For easier access, M-" is bound to placing/removing an anchor,
      and M-' to jumping to the next anchor.


author: gaihuiying <eaglegai@163.com> - 1:5.9.3-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Customized the anti-attacki/reset-last_engineTime function for IdeaUI
         change the permissions of passtest


author: xingwei <xingwei14@h-partners.com> - 1:5.9.3-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Migration patch from upstream, add compatibility to parse
  Linux 6.7 Ip header while keep support for previous versions.


author: chenyanpanHW <chenyanpan@huawei.com> - 0.2.8-19
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0000-netcf-call-aug_load-at-most-once-per-second.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0001-netcf-optimize-aug_match-query-for-all-ifcfg-files-related.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0002-netcf-linux-include-bond-element-for-bonds-with-no-slaves.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0003-netcf-Properly-classify-bond-devices-with-no-slaves.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Fix-memory-leak-in-aug-match-mac.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: lingsheng <lingsheng1@h-partners.com> - 1:1.0.8-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:datatype: don't return a const string from cgroupv2_get_path()
  datatype: fix leak and cleanup reference counting for struct datatype
  datatype: initialize TYPE_CT_EVENTBIT slot in datatype array
  datatype: initialize TYPE_CT_LABEL slot in datatype array
  evaluate: do not remove anonymous set with protocol flags and single element
  evaluate: don't crash if object map does not refer to a value
  evaluate: error out when expression has no datatype
  evaluate: error out when store needs more than one 128bit register of align fixup
  evaluate: fix check for truncation in stmt_evaluate_log_prefix()
  evaluate: fix double free on dtype release
  evaluate: fix memleak in prefix evaluation with wildcard interface name
  evaluate: reject set in concatenation
  evaluate: revisit anonymous set with single element optimization
  evaluate: skip anonymous set optimization for concatenations
  evaluate: stmt_nat: set reference must point to a map
  evaluate: tproxy: move range error checks after arg evaluation
  evaluate: validate chain max length
  evaluate: validate maximum log statement prefix length
  exthdr: prefer raw_type instead of desc->type
  json: expose dynamic flag
  json: fix use after free in table_flags_json()
  libnftables: Drop cache in -c/--check mode
  meta: fix tc classid parsing out-of-bounds access
  netlink: don't crash if prefix for < byte is requested
  netlink: fix leaking typeof_expr_data/typeof_expr_key in netlink_delinearize_set()
  netlink: handle invalid etype in set_make_key()
  parser_bison: fix ct scope underflow if ct helper section is duplicated
  parser_bison: fix memleak in meta set error handling
  parser_bison: make sure obj_free releases timeout policies
  parser_json: Catch nonsense ops in match statement
  parser_json: Default meter size to zero
  parser_json: Fix flowtable prio value parsing
  parser_json: Fix synproxy object mss/wscale parsing
  parser_json: Fix typo in json_parse_cmd_add_object()
  parser_json: Proper ct expectation attribute parsing
  parser_json: Wrong check in json_parse_ct_timeout_policy()
  py: fix exception during cleanup of half-initialized Nftables
  rule: fix sym refcount assertion


author: liweigang <liweiganga@uniontech.com> - 1:1.0.8-4
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: evaluate: guard against NULL basetype
  evaluate: error out if basetypes are different
  evaluate: reject attempt to update a set
  evaluate: release mpz type in expr_evaluate_list() error path
  expression: missing line in describe command with invalid expression
  evaluate: handle invalid mapping expressions in stateful object statements gracefully


author: gaihuiying <eaglegai@163.com> - 1:1.0.8-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         evaluate: disable meta set with ranges
         src: reject large raw payload and concat expressions
         evaluate: fix stack overflow with huge priority string
         tcpopt: don't create exthdr expression without datatype
         src: do not allow to chain more than 16 binops
         rule: fix ASAN errors in chain priority to textual names
         tests: shell: add regression test for double-free crash bug
         evaluate: handle invalid mapping expressions in stateful object
         evaluate: Fix incorrect checking the `base` variable in case of IPV6


author: gaihuiying <eaglegai@163.com> - 1:1.0.8-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:ct expectation: fix 'list object x' vs. 'list objects in table' confusion
         tests: shell: connect chains to hook point


author: gaihuiying <eaglegai@163.com> - 1:1.0.8-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         parser_json: release buffer returned by json_dumps
         parser_json: fix crash in json_parse_set_stmt_list
         parser_json: fix handle memleak from error path
         parser_json: fix several expression memleaks from error path
         libnftables: Zero ctx->vars after freeing it


author: eaglegai <eaglegai@163.com> - 1:1.0.8-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         evaluate: don't allow nat map with specified protocol
         rule: return error if table does not exist
         json: make sure timeout list is initialised
         evaluate: don't update cache for anonymous chains
         json: return error if table does not exist
         json: don't BUG when asked to list synproxies
         evaluate: compact STMT_F_STATEFUL checks
         evaluate: only allow stateful statements in set and map definitions
         optimize: expand expression list when merging into concatenation
         netlink: fix stack overflow due to erroneous rounding
         netlink: bogus concatenated set ranges with netlink message overrun
         netlink: fix crash when ops doesn't support udata
         netlink: Catch unknown types when deserializing objects
         netlink: Avoid potential NULL-ptr deref parsing set elem expressions
         netlink: Avoid crash upon missing NFTNL_OBJ_CT_TIMEOUT_ARRAY
         evaluate: don't BUG on unexpected base datatype
         src: BASECHAIN flag no longer implies presence of priority expression
         parser_bison: only reset by name is supported by now


author: gaihuiying <eaglegai@163.com> - 1:1.0.8-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         segtree: fix string data initialisation
         src: netlink: netlink_delinearize_table() may return NULL
         src: ensure chain policy evaluation when specified
         src: fix memory leak in anon chain error handling
         mnl: silence compiler warning
         datatype: Increase symbolic constant printer robustness
         evaluate: follow prefix expression recursively if needed


author: yixiangzhike <yixiangzhike007@163.com> - 0.9.12-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Move temporary files from /var/run to /run to delete warning in installing


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p15-8
changelog:
  - Type:CVE
  - ID:CVE-2023-26551
  - SUG:NA
  - DESC:make sure the buffer has enough room for the input extra characters


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p15-10
changelog:
  - Type:CVE
  - ID:CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26554,CVE-2023-26555
  - SUG:NA
  - DESC:change the patch of CVE-2023-26551 and fix CVE-2023-26555


author: andy <liuyang01@kylinos.cn> - 2.0.16-12
changelog:
  - backport patches from upstream
  - libnuma: Make numa_available respect EPERM
  - libnuma: fix nodemask allocation size for get_mempolicy


author: yanglongkang <yanglongkang@h-partners.com> - 0.34.7-4
changelog:
  - Replace SELinux deprecated functions
  - Replace deprecated libxml2 calls
  - Fix implicit cast from const to non const


author: Kai Liu <kai.liu@windriver.com> - 0.3.25-5
changelog:
  - Don't run make tasks in background sub-shell, as this causes
    severe issue. Use the _smp_mflags macro instead. See issue
    IB3EV0 for more detail.


author: Funda Wang <fundawang@yeah.net> - 0.23.0-7
changelog:
  - fix CVE-2024-8443, CVE-2024-45615, CVE-2024-45616,
    CVE-2024-45617, CVE-2024-45618, CVE-2024-45619, CVE-2024-45620


author: chenyanpanHW <chenyanpan@huawei.com> - 2.0.0-26
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-multicast-set.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-notify-systemd-of-start-up.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-null-pointer-deref.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-openssl-1.1-fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-cve-2016-7567.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-cve-2017-17833.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/CVE-2012-4428-fix-handling-of-string-list-in-slp_common-c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Fix-slp_iface-c-comma-expression-so-it-works-as-designed.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Daemon-sends-wrong-service-reply-when-security-is-enabled.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Fix-DAAddresses-hostname-resolution-issue.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Change-default-slpreg-connection-from-UDP-to-TCP.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Fix-interface-parsing-code-to-look-for-null-ifc-addrs.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Fix-broadcast-functionality.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Properly-initialize-xcastsocks-for-error-exit.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Fix-xrealloc-to-properly-free-original-pointer-on-resize.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/CVE-2019-5544.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: xingwei <xingwei14@h-partners.com> - 2.0.0-27
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Introduce epoch command to slove package upgrade failure problem


author: xulei <xulei@xfusion.com> - 2.17.5-2
changelog:
  - enhance some behavior: 
    1、add control group system-ovs.slice
    2、OVS_USER_ID change to root:root
    3、add user group openvswith and user openvswith


author: zhangpan <zhangpan103@h-partners.com> - 3.2.1-3
changelog:
  - fix openvswitch-ipsec servive failure when selinux is on
  - fix the problem that openvswitch-ipsec.service causes ipsec.service to fail when starting


author: baiguo <baiguo@kylinos.cn> - 0.4.34-2
changelog:
  - Use vasprintf() if available for error messages and otherwise vsnprintf();orccompiler, orcparse: Use secure UCRT printing functions on Windows


author: jiangchuangang <jiangchuangang@huawei.com> - 2022.7-1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:update to 2022.7
    add skip-if-etc-mtab-is-not-a-symlink-of-proc-self-mounts.patch for test failed


author: liweigang <liweiganga@uniontech.com> - 3.6-2
changelog:
  - remove patch support gpt_sync_mbr
  - file: huawei-bugfix-add-support-of-gpt_sync_mbr.patch
  - file: add support for gpt_sync_mbr and fix failure of it.


author: hugel <gengqihu2@h-partners.com> - 10.42-12
changelog:
  - DESC:sync patches from upstream
         backport-Further-ASCII-tests-and-minor-bugfix-plus-ChangeLog-.patch
         backport-avoid-inconsistency-between-d-and-digit-when-using-a.patch
         backport-Fix-the-lookahead-after-d-or-posix-to-skip-whitespac.patch
         backport-Improve-error-offsets-for-character-classes-548.patch
         backport-Non-recursive-scan-prefix-in-JIT-560.patch


author: tangyuchen <tangyuchen5@huawei.com> - 2.0.0-1
changelog:
  - update to 2.0.0
    - Adjust USB drivers path at run-time via environment variable PCSCLITE_HP_DROPDIR
    - Add '--disable-polkit' option
    - Reset eventCounter when a reader is removed
    - Add "polkit" in "pcscd -v" output if enabled
    - Doxygen: document SCARD_E_INVALID_VALUE for some functions
    - use secure_getenv(3) if available
    - Some other minor improvements


author: Guofeng Yue <yueguofeng@h-partners.com> - 4.5-12
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: modify "--source_ip" to "--bind_source_ip" to fix init connection establishment with specific interface


author: chenyanpanHW <chenyanpan@huawei.com> - 4.050-2
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/backport-DBD-mysql-4.050-Remove-a-useless-shebang-from-DBD-mysql.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: dongyuzhen <dongyuzhen@h-partners.com> - 2:3.51-1
changelog:
  - upgrade vertion to 3.51:
    - fix OVERLOAD and FALLBACK handling
    - fix ExtUtils::ParseXS compatibility with perl < 5.8.8
    - add support for elifdef and elifndef
    - allow symbolic alias of default function
    - better support for duplicate ALIASes
    - make versions in ExtUtils-ParseXS consistent


author: dongyuzhen <dongyuzhen@h-partners.com> - 1:2.57-1
changelog:
  - upgrade version to 2.57:
    - fix long standing bug that duplicate options were not detected when the options differ in case while ignore_case is in effect
    - allow periods in option names
    - move Getopt::Long::Parser to a separate module and add documentation
    - do not use Getopt::Long to establish Getopt::Long::Parser version
    - adapt tests for perl core


author: dongyuzhen <dongyuzhen@h-partners.com> - 2.206-1
changelog:
  - upgrade version to 2.206:
    - fix version checks to use correct method
    - drop rt.cpan from SUPPORT section


author: dongyuzhen <dongyuzhen@h-partners.com> - 0.42-1
changelog:
  - upgrade version to 0.42:
    - updated for Perl v5.14 - use `package NAME VERSION` syntax
    - fix typo 'behvior'
    - fix for DragonflyBSD and IPV6_V6ONLY from core perl


author: dongyuzhen <dongyuzhen@h-partners.com> - 2.084-1
changelog:
  - upgrade version to 2.084:
    - various fixes for edge cases
    - update documentation to reflect default SSL_version


author: Wenlong Zhang <zhangwenlong@loongson.cn> - 2.084-2
changelog:
  - Passing NO_NETWORK_TESTING=1 as an environment variable
    solves the interactive issue required for using rpmbuild locally


author: zhangyao <zhangyao108@huawei.com> - 1:20231213-1
changelog:
  - Upgrade version to 20231213
  - Update certificates
  - Stop installing mk-ca-bundle.pl script
  - Switched tests from Test to Test::More


author: woody2918 <wudi1@uniontech.com> - 1.94-1
changelog:
  - update version to 1.94
  - supports all stable releases of OpenSSL 3.1 and 3.2, and LibreSSL 3.5 - 3.8.
  - Enhancements to the API.


author: huyubiao <huyubiao@huawei.com> - 2:3.48-1
changelog:
  - update version to 3.48
    - Accept TAP version 14
    - Fix HARNESS_PERL_SWITCHES=-I handling in TAP::Harness::Env
    - Color the "ok"s as well.
    - Skip symlink tests on msys2
    - Use use absolute path for executable tests
    - Space-quote executable if has spaces
    - Avoid using Errno::EINTR directly for platforms without it
    - stop calling import on App::Prove plugins


author: zhangyao <zhangyao108@huawei.com> - 2:2.36-1
changelog:
  - DESC: Upgrade version to 2.36, test code modify, build optimization, avoid the use of magic numbers, deal compilation warning


author: gaihuiying <eaglegai@163.com> - 0.9.5-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add macros to control if need libdrm, pango, libpng and if need to exclude bootlog


author: wangyu <wangqingsan@huawei.com> - 123-1
changelog:
  - update to 123
    - duktape:prevent wrongful termination of runway thread
    - harden the security features of the systemd service
    - add packit build tool
    - systemd:set User/Group and don't change uid/gid if already set
    - stop installing /usr/share/polkit-1/rules.d as 700/polkitd
    - moving the 50-default.rules file location


author: zhangxingrong <zhangxingrong@uniontech.cn> - 1.19-4
changelog:
  - Fix poptCallbackType documentation
  - Fix multiple typos in comments
  - Fix potential double-free in test3.c


author: Funda Wang <fundawang@yeah.net> - 2.15-2
changelog:
  - fix build with latest gettext
  - harden systemd service file from openSUSE
  - add patch regarding risc-v arch support


author: gaihuiying <eaglegai@163.com> - 2.5.0-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:pre-created upstream default lock dir
         Openssl engine API is deprecated for a while thus disable it


author: gaihuiying <eaglegai@163.com> - 2.5.0-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream
         Fixing up parsing in radiusclient.conf
         Add configure check to see if we have struct sockaddr_ll


author: chenyanpanHW <chenyanpan@huawei.com> - 3.22-52
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/procmail-3.24-rhconfig.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/procmail-3.15.1-man.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/procmail-3.22-truncate.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/procmail-3.24-ipv6.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Zhu Jin <zhujin18@huawei.com> - 4.0.4-8
changelog:
  - library: address a potential race resulting in a fault and avoid strdup() calls in sd2proc() if possible


author: dongyuzhen <dongyuzhen@h-partners.com> - 25.1-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: distinguish between statically and dynamically compiled pc files and cmake dir to prevent BEP binary differences


author: Funda Wang <fundawang@yeah.net> - 25.1-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: fix build with wrong permission
  - DESC: fix conflicts with protobuf2
  - DESC: revert:distinguish between statically and dynamically compiled pc files and cmake dir to prevent BEP binary differences


author: liuchao <liuchao173.huawei.com> - 1.5.0-1
changelog:
  - upgrade to 1.5.0:
    - Makefile.am: change link order
    - GitHub actions fail on Windows due to missing unzip command
    - Export and install CMake targets
    - Use CMAKE_CURRENT_BINARY_DIR instead of CMAKE_BINARY_DIR
    - remove deprecated functionality
    - Avoid "unused variable" compiler warning
    - Update autotools
    - Support for new Google protobuf 22.x, 23.x releases
    - Miscellaneous fixes
    - Remove protobuf 2.x support
    - Silence some compiler diagnostics
    - Fixing MSVC build for Msbuild and Makefile generators


author: gengqihu <gengqihu2@h-partners.com> - 23.3.1-1
changelog:
  - update version to 23.3.1
  - Fix parallel pip cache downloads causing crash (#12364)
  - Upgrade urllib3 to 1.26.17 (#12343)
  - Fix zsh completion script (#12173)
  - Fix #12166
  - Move the setuptools settings into pyproject.toml
  - Use `-r=...` instead of `-r ...` for hg
  - Drop isort and flake8 settings from setup.cfg
  - Follow imports for more vendored dependencies
  - Enable mypy's strict equality checks (#12209)
  - Fixed argument name in docstring
  - Allow truststore to not import on Python 3.9 and earlier
  - Vendor truststore
  - Fix formatting, combine numbers not strings!
  - Remove uses of `utcnow` in non-vendored code (#12006)
  - Fix issues raised in code review
  - move test_download_metadata mock pypi index utilities to conftest.py
  - Use strict optional checking in req_install.py (#11379)
  - Fix 'force' remove file without write permissions
  - Dropped unused attribute
  - Fix Pytest --use-venv init
  - Limit the double download fix to wheels
  - Fix slowness on Python 3.11 when updating an existing large environment.
  - Fix `pip completion --zsh`


author: lipengyu <lipengyu@kylinos.cn> - 3.11.6-20
changelog:
  - Type:CVE
  - CVE:CVE-2025-13836 CVE-2025-13837 CVE-2025-12084
  - SUG:NA
  - DESC:fix CVE-2025-13836 CVE-2025-13837 CVE-2025-12084


author: Weifeng Su <suweifeng1@huawei.com> - 5.0.8-1
changelog:
  - upgrade to 5.0.8
    -fix a regression error in 5.0.7
    -update testing to validate against python version 2.7 and 3.5-3.11
    -update broken links / no-existent services and references


author: xu_ping <707078654@qq.com> - 7.0.0-1
changelog:
  - Upgrade version to 7.0.0
  - Python 3.12 support and python 3.7 no longer supported
  - Add support bind mount propagation.


author: xuchenchen <xuchenchen@kylinos.cn> - 3.1.3-2
changelog:
  - Type: CVE
  - CVE: CVE-2024-34064
  - SUG: NA
  - DESC: fix disallow invalid characters in keys to xmlattr filter


author: chenhuihan <chenhuihan@huawei.com> - 2.8.0-1
changelog:
  - Update package to version 2.8.0:
    - export PyJWKClientConnectionError class
    - pre-autoupdate mirrors-mypy blacken-docs black
    - allows passing of ssl.SSLContext to PyJWKClient


author: shixuantong <shixuantong1@huawei.com> - 1:1.24.3-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:remove f2py form python3-numpy package. It is in python3-numpy-f2py
         Do not pack open-source test case files


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 23.2-1
changelog:
  - Update package with version 23.2
    Add python 3.12 support.
    Add types for packaging.version._Version.
    Add platform tag support for LoongArch.
    Update pyupgrade to Python 3.7+
    Support enriched metadata.


author: kaijie Gu <jiekgu@foxmail.com> - 24.1-1
changelog:
  - Update package with version 24.1
    Add support for Python 3.13
    Fix typo in _parser docstring
    Modernise type annotations using FA rules from ruff
    Document markers.default_environment()


author: zhaojingyu <zhaojingyu@kylinos.cn> - 2.2.2-1
changelog:
  - Update to 2.2.2
  - Avoid issuing a spurious DeprecationWarning when a custom DataFrame or Series subclass method is called


author: zhengxiaoxiao<zhengxiaoxiao2@huawei.com> - 24.0.0-1
changelog:
  - Upgrade version to 24.0.0
    - Dropped support for Python 3.6.
    - The minimum cryptography version is now 41.0.5.
    - Removed OpenSSL.crypto.loads_pkcs7 and OpenSSL.crypto.loads_pkcs12 which had been deprecated for 3 years.
    - Added OpenSSL.SSL.OP_LEGACY_SERVER_CONNECT to allow legacy insecure renegotiation between OpenSSL and unpatched servers.
    - Deprecated OpenSSL.crypto.PKCS12,OpenSSL.crypto.NetscapeSPKI,OpenSSL.crypto.CRL,OpenSSL.crypto.Revoked,OpenSSL.crypto.load_crl,OpenSSL.crypto.dump_crl,OpenSSL.crypto.sign,OpenSSL.crypto.verify,OpenSSL.crypto.X509Extension
    - Changed OpenSSL.crypto.X509Store.add_crl to also accept cryptography's x509.CertificateRevocationList arguments in addition to the now deprecated OpenSSL.crypto.CRL arguments
    - Fixed test_set_default_verify_paths test so that it is skipped if no network connection is available
    - Add ``OpenSSL.SSL.Connection.get_selected_srtp_profile`` to determine which SRTP profile was negotiated


author: yixiangzhike <yixiangzhike007@163.com> - 3.1.1-1
changelog:
  - update version to 3.1.1
    - Fixed bug in NotAny where expr parse action was not being run
    - Fix regex matching for Python quoted strings
    - Make create_diagram() code compatible with latest version of railroad-diagrams
    - Support Python 3.12
    - Small perf optimization for `expr | ""` mapping to `Optional(expr)`
    - Redo QuotedString '\' escape handling as a state machine
    - Add ParseResults.deepcopy()
    - Remove ^ and $ tags from pp.common.url regex
    - Added DelimitedList class, for better handling of naming and diagramming
    - Deprecate ParserElement.validate()
    - Added new class method ParserElement.using_each
    - Fix bug in delimited_list
    - Added python_quoted_string; fixed exception messages for ParseElementEnhance subclasses
    - Enable packrat in verilogParse.py by default
    - Add embed argument to create_diagram
    - Add support for slice in expr[] notation
    - Fixed bug in srange
    - Added Lox language parser


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 7.4.4-1
changelog:
  - Update package with version 7.4.4
    Fix non-string constants at the top of file being detected as docstrings on Python>=3.8.
    Removed unhelpful error message from assertion rewrite mechanism
    Updated documentation to refer to hyphenated options
    Markers are now considered in the reverse mro order to ensure base class markers are considered first
    Improved disclaimer on pytest plugin reference page to better indicate this is an automated
    Added ExceptionInfo.from_exception() <pytest.ExceptionInfo.from_exception>


author: chengyechun <chengyechun1@huawei.com> - 1.26.18-2
changelog:
  - Type:CVE
  - CVE:CVE-2024-37891
  - SUG:NA
  - DESC:fix CVE-2024-37891 Strip Proxy-Authorizatioin header on redirects


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-32
changelog:
  - target/i386: csv: Release CSV3 shared pages after unmapping DMA
  - target/i386: Add new CPU model ClearwaterForest
  - target/i386: add sha512, sm3, sm4 feature bits
  - docs: Add GNR, SRF and CWF CPU models
  - target/i386: Export BHI_NO bit to guests
  - target/i386: Introduce SierraForest-v2 model
  - vdpa/iommufd:Implement DMA mapping through the iommufd interface
  - vdpa/iommufd:Introduce vdpa-iommufd module
  - vdpa/iommufd:support associating iommufd backend for vDPA devices
  - Kconfig/iommufd/VDPA: Update IOMMUFD module configuration dependencies The vDPA module can also use IOMMUFD like the VFIO module. 
  - backends/iommufd: Get rid of qemu_open_old()
  - backends/iommufd: Make iommufd_backend_*() return bool
  - backends/iommufd: Fix missing ERRP_GUARD() for error_prepend()
  - backends/iommufd: Remove mutex
  - backends/iommufd: Remove check on number of backend users
  - hw/intc: Add extioi ability of 256 vcpu interrupt routing
  - hw/rtc: Fixed loongson rtc emulation errors
  - hw/loongarch/boot: Adjust the loading position of the initrd
  - target/loongarch: Fix the cpu unplug resource leak
  - target/loongarch: fix vcpu reset command word issue
  - vdpa:Fix dirty page bitmap synchronization not done after suspend for vdpa devices


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-33
changelog:
  - arm: cvm: fix arm-softmmu build on x86 platform
  - arm: VirtCCA: fix arm-softmmu build on x86 platform
  - hw/arm/virt: HDBSS: fix arm-softmmu build on x86 platform
  - hw/arm/virt: decouple migrate_hdbss_buffer_size() with kvm_update_hdbss_cap()
  - hw/arm/virt: only support the HDBSS feature in aarch64
  - multifd: bugfix for incorrect migration data with qatzip compression
  - multifd: bugfix for incorrect migration data with QPL compression
  - multifd: bugfix for migration using compression methods
  - migration/multifd: Zero p->flags before starting filling a packet
  - migration/multifd: Ensure packet->ramblock is null-terminated
  - migration/multifd: Fix rb->receivedmap cleanup race
  - migration/multifd: Fix loop conditions in multifd_zstd_send_prepare and multifd_zstd_recv
  - tests/migration: Add integration test for 'qatzip' compression method
  - migration: Introduce 'qatzip' compression method
  - migration: Add migration parameters for QATzip
  - meson: Introduce 'qatzip' feature to the build system
  - docs/migration: add qatzip compression feature
  - migration/multifd: Fix p->iov leak in multifd-uadk.c
  - tests/migration-test: add uadk compression test
  - migration/multifd: Switch to no compression when no hardware support
  - migration/multifd: Add UADK based compression and decompression
  - migration/multifd: Add UADK initialization
  - migration/multifd: add uadk compression framework
  - configure: Add uadk option
  - docs/migration: add uadk compression feature
  - configure: add --enable-qpl build option
  - migration/multifd: implement qpl compression and decompression
  - migration/multifd: implement initialization of qpl compression
  - migration/multifd: include ram.h in multifd.h
  - migration/multifd: add qpl compression method
  - migration/multifd: put IOV initialization into compression method
  - docs/migration: add qpl compression feature
  - migration/multifd: solve zero page causing multiple page faults
  - migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page.
  - migration/multifd: Implement zero page transmission on the multifd thread
  - migration/multifd: Add new migration option zero-page-detection
  - migration/multifd: Allow multifd without packets
  - migration/multifd: Rename MultiFDSend|RecvParams::data to compress_data
  - migration/multifd: Cleanup multifd_recv_sync_main
  - tests/migration: Set compression level in migration tests
  - migration: Properly apply migration compression level parameters
  - migration/multifd: Drop unnecessary helper to destroy IOC
  - migration/multifd: Cleanup outgoing_args in state destroy
  - migration/multifd: Make multifd_channel_connect() return void
  - migration/multifd: Drop registered_yank
  - migration/multifd: Cleanup TLS iochannel referencing
  - migration/multifd: Release recv sem_sync earlier
  - migration/multifd: Remove p->quit from recv side
  - migration/multifd: Add a synchronization point for channel creation
  - migration/multifd: Unify multifd and TLS connection paths
  - migration/multifd: Move multifd_send_setup into migration thread
  - migration/multifd: Move multifd_send_setup error handling in to the function
  - migration/multifd: Remove p->running
  - migration/multifd: Join the TLS thread
  - migration: Fix logic of channels and transport compatibility check
  - migration/multifd: Optimize sender side to be lockless
  - migration/multifd: Stick with send/recv on function names
  - migration/multifd: Cleanup multifd_load_cleanup()
  - migration/multifd: Cleanup multifd_save_cleanup()
  - migration/multifd: Rewrite multifd_queue_page()
  - migration/multifd: Change retval of multifd_send_pages()
  - migration/multifd: Change retval of multifd_queue_page()
  - migration/multifd: Split multifd_send_terminate_threads()
  - migration/multifd: Forbid spurious wakeups
  - migration/multifd: Move header prepare/fill into send_prepare()
  - migration/multifd: Move trace_multifd_send|recv()
  - migration/multifd: Move total_normal_pages accounting
  - migration/multifd: Rename p->num_packets and clean it up
  - migration/multifd: Drop pages->num check in sender thread
  - migration/multifd: Simplify locking in sender thread
  - migration/multifd: Separate SYNC request with normal jobs
  - migration/multifd: Drop MultiFDSendParams.normal[] array
  - migration/multifd: Postpone reset of MultiFDPages_t
  - migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths
  - migration/multifd: multifd_send_kick_main()
  - migration/multifd: Drop stale comment for multifd zero copy
  - docs/migration: Further move virtio to be feature of migration
  - docs/migration: Further move vfio to be feature of migration
  - docs/migration: Organize "Postcopy" page
  - docs/migration: Split "dirty limit"
  - docs/migration: Split "Postcopy"
  - docs/migration: Split "Debugging" and "Firmware"
  - docs/migration: Split "Backwards compatibility" separately
  - docs/migration: Convert virtio.txt into rST
  - docs/migration: Create index page
  - docs/migration: Create migration/ directory
  - tests/qtest: Re-enable multifd cancel test
  - tests/qtest/migration: Use the new migration_test_add
  - tests/qtest/migration: Add a wrapper to print test names
  - tests/qtest/migration: Print migration incoming errors
  - migration: Report error in incoming migration
  - migration/multifd: Change multifd_pages_init argument
  - migration/multifd: Remove QEMUFile from where it is not needed
  - migration/multifd: Remove MultiFDPages_t::packet_num
  - migration/multifd: Remove unnecessary usage of local Error
  - migration: Fix migration_channel_read_peek() error path
  - migration/multifd: Remove error_setg() in migration_ioc_process_incoming()
  - migration/multifd: Fix leaking of Error in TLS error flow
  - migration/multifd: Simplify multifd_channel_connect() if else statement
  - migration/multifd: Fix error message in multifd_recv_initial_packet()
  - hw/arm/virt: support the HDBSS feature


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-34
changelog:
  - target/arm: support the IPIV feature
  - Revert "target/arm: Change arm_cpu_mp_affinity when enabled IPIV feature"
  - vdpa/iommufd: All vdpa devices perform only one log_sync each time.
  - memory:Optimize flatview ioeventfd processing
  - memory/eventfd:Introduce ioeventfd batch processing to reduce the time required to update ioeventfd
  - migration/memory:Optimize unnecessary memory region updates during live migration
  - migration:Extand the fdtable in the incoming phase of migration
  - virtio/irqfd: Batch processing of irqfd related operations during virtio device startup
  - kvm/msi: Mark whether there is an IRQ route table update through changes
  - virtio-pci:Batch processing of IRQFD mapping for multi queue Virtio devices


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-36
changelog:
  - Fix error in virtCCA CoDA scenario.
  - Revert "backends/iommufd: Make iommufd_backend_*() return bool"


author: Panhengchang <panhengchang@huawei.com> - 11:8.2.0-37
changelog:
  - Add stub function for 'tmm_get_kae_num' if 'CONFIG_KVM' is not set.
  - qapi/misc-target: Add KVM option to isolate virtcca detection interface.
  - qapi/misc-target: Add Virtcca capability struct and query command.


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-38
changelog:
  - sync header file from upstream
  - backends/tpm: Avoid using g_alloca()
  - hw/virtio/virtio-pci:Support shadow device for virtio-net/blk/scsi devices
  - smbios: add processor-family option
  - smbios: function to set default processor family
  - target/riscv: SMBIOS support for RISC-V virt machine
  - qemu-options: enable -smbios option on RISC-V
  - qemu-options.hx: correct formatting -smbios type=4
  - tests/unit/test-char: Avoid using g_alloca()
  - virtio processes indirect descriptors even if the respected


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-39
changelog:
  - hw/audio/cs4231a: fix assertion error in isa_bus_get_irq
  - block/blkio: Make s->mem_region_alignment be 64 bits
  - target/arm: Adjust and validate mtedesc sizem1
  - block/io: accept NULL qiov in bdrv_pad_request
  - target-arm: fix qemu-arm target build error
  - target/i386: Add new Hygon 'Chengdu' CPU model


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-40
changelog:
  - hw/acpi: Fix the memory leak issue
  - virtio-net: Fix num_buffers for version 1
  - hw/net/cadence_gem: fix register mask initialization
  - memory: Export a helper to get intersection of a MemoryRegionSection with a given range
  - memory: Change memory_region_set_ram_discard_manager() to return the result
  - memory: Unify the definiton of ReplayRamPopulate() and ReplayRamDiscard()
  - memory: Introduce generic state change parent class for RamDiscardManager
  - memory: Introduce PrivateSharedManager Interface as child of GenericStateManager
  - memory: Add the support for PrivateSharedManager Interface
  - vfio: Add the support for PrivateSharedManager Interface
  - memory: Change NotifyStateClear() definition to return the result
  - ram-block-attribute: Add priority listener support for PrivateSharedListener
  - linux-headers: Add KVM Arm RME definitions to Linux headers
  - kvm: Use kvm_vm_check_extension() where necessary
  - include/qom/object.h: New OBJECT_DEFINE_SIMPLE_TYPE{, _WITH_INTERFACES} macros
  - target/arm: Add confidential guest support
  - KVM: track whether guest state is encrypted
  - target/arm/kvm: Return immediately on error in kvm_arch_init()
  - target/arm/kvm: Split kvm_arch_get/put_registers
  - target/arm/kvm: Create scratch VM as Realm if necessary
  - hw/core/loader: Add ROM loader notifier
  - target/arm/kvm-rme: Initialize realm
  - target/arm/kvm-rme: Initialize vCPU
  - target/arm/kvm-rme: Initialize Realm memory
  - target/arm/kvm-rme: Add Realm Personalization Value parameter
  - target/arm/kvm-rme: Add measurement algorithm property
  - target/arm/cpu: Set number of breakpoints and watchpoints in KVM
  - target/arm/cpu: Set number of PMU counters in KVM
  - target/arm/cpu: Inform about reading confidential CPU registers
  - target/arm/kvm-rme: Initialize Realm memory
  - target/arm/kvm-rme: Add Realm Personalization Value parameter
  - target/arm/kvm-rme: Add measurement algorithm property
  - hw/arm/virt: Add support for Arm RME
  - hw/arm/virt: Disable DTB randomness for confidential VMs
  - hw/arm/virt: Reserve one bit of guest-physical address for RME
  - hw/arm/virt: Move virt_flash_create() to machvirt_init()
  - hw/arm/virt: Use RAM instead of flash for confidential guest firmware
  - hw/core/loader: Add ROM loader notifier
  - target/arm/kvm-rme: Initialize Realm memory
  - target/arm/kvm-rme: Add measurement algorithm property
  - target/arm/kvm-rme: Add Realm Personalization Value parameter
  - target/arm/kvm-rme: Initialize Realm memory
  - hw/arm/boot: Mark all guest memory as RIPAS_RAM.
  - target/arm/kvm-rme: Add DMA remapping for the shared memory region
  - hw/arm/virt: Move virt_flash_create() to machvirt_init()
  - hw/arm/virt: Use RAM instead of flash for confidential guest firmware
  - hw/core/loader: Add fields to RomLoaderNotify
  - docs/interop/firmware.json: Add arm-rme firmware feature
  - hw/arm/boot: Load DTB as is for confidential VMs
  - hw/arm/boot: Skip bootloader for confidential guests
  - hw/tpm: Add TPM event log
  - hw/core/loader: Add fields to RomLoaderNotify
  - hw/arm/virt: Use RAM instead of flash for confidential guest firmware
  - hw/arm/virt: Reserve one bit of guest-physical address for RME
  - hw/arm/virt: Disable DTB randomness for confidential VMs
  - hw/arm/virt: Add support for Arm RME
  - target/arm/cpu: Inform about reading confidential CPU registers
  - target/arm/cpu: Set number of PMU counters in KVM
  - target/arm/cpu: Set number of breakpoints and watchpoints in KVM
  - target/arm/kvm-rme: Add measurement algorithm property
  - target/arm/kvm-rme: Add Realm Personalization Value parameter
  - target/arm/kvm-rme: Initialize Realm memory
  - hw/core/loader: Add ROM loader notifier
  - target/arm/kvm: Create scratch VM as Realm if necessary
  - target/arm/kvm-rme: Initialize vCPU
  - target/arm/kvm: Split kvm_arch_get/put_registers
  - target/arm/kvm-rme: Initialize realm
  - KVM: track whether guest state is encrypted
  - target/arm/kvm: Return immediately on error in kvm_arch_init()
  - target/arm: Add confidential guest support
  - include/qom/object.h: New OBJECT_DEFINE_SIMPLE_TYPE{, _WITH_INTERFACES} macros
  - kvm: Use kvm_vm_check_extension() where necessary
  - linux-headers: Add KVM Arm RME definitions to Linux headers
  - docs/interop/firmware.json: Add arm-rme firmware feature
  - hw/arm/boot: Load DTB as is for confidential VMs
  - hw/arm/boot: Skip bootloader for confidential guests
  - hw/tpm: Add TPM event log
  - hw/core/loader: Add fields to RomLoaderNotify
  - hw/arm/virt: Use RAM instead of flash for confidential guest firmware
  - hw/arm/virt: Move virt_flash_create() to machvirt_init()
  - target/arm/kvm-rme: Add DMA remapping for the shared memory region
  - hw/arm/boot: Mark all guest memory as RIPAS_RAM.
  - hw/arm/virt: Reserve one bit of guest-physical address for RME
  - hw/arm/virt: Disable DTB randomness for confidential VMs
  - hw/arm/virt: Add support for Arm RME
  - target/arm/cpu: Inform about reading confidential CPU registers
  - target/arm/cpu: Set number of PMU counters in KVM
  - target/arm/cpu: Set number of breakpoints and watchpoints in KVM
  - target/arm/kvm-rme: Add measurement algorithm property
  - target/arm/kvm-rme: Add Realm Personalization Value parameter
  - target/arm/kvm-rme: Initialize Realm memory
  - hw/core/loader: Add ROM loader notifier
  - target/arm/kvm: Create scratch VM as Realm if necessary
  - target/arm/kvm-rme: Initialize vCPU
  - target/arm/kvm: Split kvm_arch_get/put_registers
  - target/arm/kvm-rme: Initialize realm
  - KVM: track whether guest state is encrypted
  - target/arm/kvm: Return immediately on error in kvm_arch_init()
  - target/arm: Add confidential guest support
  - include/qom/object.h: New OBJECT_DEFINE_SIMPLE_TYPE{, _WITH_INTERFACES} macros
  - kvm: Use kvm_vm_check_extension() where necessary
  - linux-headers: Add KVM Arm RME definitions to Linux headers
  - Bugfix: Fix compile error in aarch32.


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-41
changelog:
  - target/i386/kvm: Refine VMX controls setting for backward compatibility
  - Bugfix: Correctly set vms->bootinfo.confidential in virtCCA senarios.
  - hw/arm/virt-acpi-build.c: Migrate fw_cfg creation to common location
  - hw/arm/virt-acpi-build.c: Migrate virtio creation to common location
  - hw/i386/acpi-microvm.c: Use common function to add virtio in DSDT
  - hw/riscv: virt: Make few IMSIC macros and functions public
  - hw/riscv/virt-acpi-build.c: Add AIA support in RINTC
  - hw/riscv/virt-acpi-build.c: Add IMSIC in the MADT
  - hw/riscv/virt-acpi-build.c: Add APLIC in the MADT
  - hw/riscv/virt-acpi-build.c: Add CMO information in RHCT
  - hw/riscv/virt-acpi-build.c: Add MMU node in RHCT
  - hw/pci-host/gpex: Define properties for MMIO ranges
  - hw/riscv/virt: Update GPEX MMIO related properties
  - hw/riscv/virt-acpi-build.c: Add IO controllers and devices
  - hw/riscv/virt-acpi-build.c: Add PLIC in MADT
  - hw/riscv/virt.c: fix the interrupts-extended property format of PLIC
  - hw/riscv/virt-acpi-build.c: Add namespace devices for PLIC and APLIC
  - hw/riscv/virt-acpi-build.c: Update the HID of RISC-V UART
  - hw/riscv/virt-acpi-build.c: Generate SPCR table
  - hw/riscv/virt-acpi-build.c: Add SRAT and SLIT ACPI tables
  - plugins/loader: fix deadlock when resetting/uninstalling a plugin
  - smbios: Fix buffer overrun when using path= option


author: lifeifei <lifeifei@kylinos.cn> - 2.19-3
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Add the socket option IPV6_MULTICAST_LOOP to prevent the interface from autoconfiguring using RA messages sent by itself.


author: luoshengwei <luoshengwei@huawei.com> - 0.8.0-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix cpu isolate errors when some cpus are offline
    before the service started


author: andy <liuyang01@kylinos.cn> - 0.8.0-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patches
         Use the right dev_t decoding for diskerror handler


author: shixuantong <shixuantong1@huawei.com> - 8.2-4
changelog:
  - Add shell command to switch bracketed-paste mode from on to off to keep consistent with realine-8.0


author: sunsuwan <sunsuwan3@huawei.com> - 1.2.6-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:add a user directory when the rpc user directory does not exist


author: dongyuzhen <dongyuzhen@h-partners.com> - 2.18-5
changelog:
  - revert: remove the require to rpm-build.For consistency with other community-released dependencies


author: Funda Wang <fundawang@yeah.net> - 3.2.7-6
changelog:
  - fix CVE-2024-12084, CVE-2024-12085, CVE-2024-12086, CVE-2024-12087,
    CVE-2024-12088, CVE-2024-12747


author: zhangyaqi <zhangyaqi@kylinos.cn> - 8.2312.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memory leak in omazureeventhubs on accepted PN_DELIVERY event


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 8.2312.0-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix passing the value to EscapeChar
         Do not free the uninitialized cstring
         Keep original free pattern
         network subsystem: improve connection failure error message
         Fix runConf NULL pointer refence
         rainerscript: do not try to call a function if it does not exist
         nsd_ptcp regression fix: remove debugging messages emited to stderr
         Fix legacy $ActionQueueDiscardMark parameter


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 8.2312.0-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:gnutls bugfix: Avoid blocking sockets during TLS handshake
         gnutls bugfix: Add timeout to GnuTLS handshake
         core: fix potential NULL ptr access on HUP in very early startup phase
         omfwd: fix segfault in UDP freeaddrinfo
         gnutls TLS driver: fix small memory leak
         rsyslog startup bugfix: cosmetic memory leak
         core: fix potential misadressing in sigmask
         covscan: remove defect type of RESOURCE_LEAK
         Fix a buffer overflow when the argument to replace is empty


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 8.2312.0-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:omusrmsg bugfix: potential null pointer dereference causes segfault
         omusrmsg bugfix: potential double free, which can cause segfault
         imjournal: fix double sd_journal_close() during thread cancellation
         imuxsock: Add statistics counter for discarded messages
         omjournal: Fix priority value
         fix stringop-overread warning in omusrmsg
         fix hashtable realloc memset range
         fix off-by-one buffer overflow


author: jinlun<jinlun@huawei.com> - 40.7-1
changelog:
  - update version to 40.7
    - Allow chronyd-restricted read chronyd key files
    - Allow systemd-sleep set attributes of efivarfs files
    - Make name_zone_t and named_var_run_t a part of the mountpoint attribute
    - Update cifs interfaces to include fs_search_auto_mountpoints()
    - Allow map xserver_tmpfs_t files when xserver_clients_write_xshm is on
    - Add map_read map_write to kernel_prog_run_bpf
    - Add policy for nvme-stas
    - Make new virt drivers permissive
    - Allow named and ndc use the io_uring api
    - Allow sssd send SIGKILL to passket_child running in ipa_otpd_t


author: xinghe <xinghe2@h-partners.com> - 8.17.2-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:extending the certificate validate period
         remove redundant patches


author: zhengxiaoxiao <zhengxiaoxiao2@huawei.com> - 2:4.14.3-1
changelog:
  - update version to 4.14.3
    -Avoid null pointer dereference
    -Update utmp at an initial login
    -Merge libshadow and libmisc into a single libshadow
    -Adding the userdel and groupdel hooks to release tarball


author: liuqingtao <liu.qingtao2@zte.com.cn> -1.1.10-3
changelog:
  - optimized-RV-FindMatchLength-improving-compress-speed--upstream-accepted
  - DESC:Use-high-performance-FindMatchLength-to-Optimize for RV


author: yanglu <yanglu72@h-partners.com> - 7:6.1-2
changelog:
  - Type:cves
  - ID:CVE-2023-5824 CVE-2023-46846 CVE-2023-46847 CVE-2023-46848
  - SUG:NA
  - DESC:fix CVE-2023-5824 CVE-2023-46846 CVE-2023-46847 CVE-2023-46848


author: zhangxianting <zhangxianting@uniontech.com> - 0.9-64
changelog:
  - Type:patch
  - CVE:NA
  - SUG:NA
  - DESC:patch hunk FAILED bacause of the arch judgement of sw_64 and loongarch64


author: laokz <zhangkai@iscas.ac.cn> - 0.9-67
changelog:
  - Type:fix
  - CVE:NA
  - SUG:NA
  - DESC:riscv64: reverse -static-pie patch due to unsupported tool-chains


author: fuanan <fuanan3@h-partners.com> - 255-42
changelog:
  - backport: sync patches from systemd community
    add backport-run-pass-the-pty-slave-fd-to-transient-service.patch
        backport-run-do-not-pass-the-pty-slave-fd-to-transient-servic.patch


author: langfei<langfei@huawei.com> - 4.5-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Resolve stap-exporter.service chenge to disable when upgraded systemtap-stap-exporter package


author: langfei<langfei@huawei.com> - 4.5-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix some test cases fail to be executed, Resolve the sc2168 warning detected by the shellcheck tool.


author: liuchao <liuchao173@huawei.com> - 5.0-1
changelog:
  - Upgrade to 5.0:
    - Performance improvements in uprobe registration and module startup.
    - More probe point process details are printed in "-L" list mode with more "-v".
    - For the case where newer kernels may break systemtap runtime APIs, better pass-4 failure diagnostics are printed.
    - Tapset function print_ubacktrace_fileline() now understands DWARF5.
    - The target(s) of process probes may be specified by path name globs,  as located selected debuginfod servers.
    - The kernel-user message transport system added framing codes, making the transport more reliable, but becoming incompatible across pre-5.0 versions. Use matching versions of stap and staprun.
    - The testsuite Makefile has been simplified to remove concurrency, so "parallel" and "resume" modes are gone.
    - New runtime macro STP_TIMING_NSECS is now supported for reporting probe timing stats in nsecs instead of cycles.  This may become default later.
    - Add new runtime macro STP_FORCE_STDOUT_TTY to override STP_STDOUT_NOT_ATTY.


author: zhangqiang <zhangqiang@kylinos.cn> - 14:4.99.1-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Set SA_RESTART on non-lethal signals (REQ_INFO, FLUSH_PCAP) to avoid corrupting binary pcap output


author: Yu Peng <yupeng@kylinos.cn> - 1:0.17-81
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix telnet crashes on stack overflow due to infinite recursion.


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com>- 0.6-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:The "cc:No such file or directroy" error message is displayed during compilation.Therefore,add buildrequires gcc.
         The macro unitdir is used.Therefore,add buildrequires systemd


author: jinlun <jinlun@huawei.com> - 4.0.1-1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:update version to 4.0.1
    - Fix CVE-2023-22745
    - TPM version 1.59 support
    - libmu soname from 0:0:0 to 0:1:0.
    - tss2-sys soname from 1:0:0 to 1:1:0
    - FAPI ignores vendor properties on Fapi_GetInfo
    - FAPI Event Logging JSON format
    - Dead struct TPMS_ALGORITHM_DESCRIPTION
    - Dead field intelPttProperty from TPMU_CAPABLITIES
    - Dead code Tss2_MU_TPMS_ALGORITHM_DESCRIPTION_Marshal
    - Dead code Tss2_MU_TPMS_ALGORITHM_DESCRIPTION_Unmarshal


author: chench <chench@hygon.cn> - 4.0.1-5
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:add SM4 algorithm support
    - Add support for udev to create tcm devices
    - add ecc encrypt/decrypt support
    - add bootstrap file from upstream


author: liuchao <liuchao173@huawei.com> - 2.21.0-1
changelog:
  - upgrade to 2.21.0:
    - api: fixed stop method not to require any parameter
    - plugin_scheduler: fix perf fd leaks
    - allow skipping rollback when restarting TuneD or switching profile
    - function_calc_isolated_cores: no errors for offline CPUs
    - sap-hana: new profile sap-hana-kvm-guest
    - serialized SIGHUP handler to prevent possible bootcmdline corruption
    - fixed possible traceback on SIGHUP
    - updated manual pages to be consistent
    - tuned-adm: better error message for unauthorized switch_profile
    - plugin_sysctl: report reapplied sysctls only on different values
    - plugin_cpu: added support for pm_qos_resume_latency_us
    - plugin_cpu: added support for intel_pstate scaling driver
    - plugin_scheduler: do not leak FDs from the perf
    - profiles: new cpu-partitioning-powersave profile
    - profiles: new profile for AWS EC2
    - throughput-performance: set net.core.somaxconn to at least 2048
    - API: added support for moving devices between instances
    - added support for the API access through the Unix Domain Socket
    - D-Bus: send tracebacks through D-Bus only in debug mode
    - Makefile: added fix for python-3.12
    - do not exit on duplicate config lines


author: ZhaoYu Jiang <jiangzhaoyu@kylinos.cn> - 2.24.1-1
changelog:
  - Upgrade to 2.24.1:
    - fixed privileged execution of arbitrary scripts by active local user. (CVE-2024-52336)
    - added sanity checks for API methods parameters. (CVE-2024-52337)
    - tuned-ppd: fixed controller init to correctly set_on_battery


author: tianmuyang <tianmuyang@huawei.com> - 2.24.1-4
changelog:
  - profiles: add programmable scheduling based on eBPF
  - package:  change package tuned to architecture-dependent


author: langfei<langfei@huawei.com> - 2022g-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Fix Palestine predictions for 2072 through 2075; Ittoqqortoormiit (America/Scoresbysund) zone change.


author: langfei <langfei@huawei.com> - 2024a-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Aysén Region moves from -04/-03 to -03; new zone;
  -	Improve recent commentary for Chilean decrees;
  -	No need for America/Coyhaique in zonenow.tab.


author: liuchao <liuchao173@huawei.com> - 1.90.2-1
changelog:
  - Update to 1.90.2:
    - Fix wireless devices not disappearing from Settings when disconnected
    - Require a newer libgudev to avoid bugs related to newline stripping when reading sysfs attributes
    - Add installed-tests files for use with gnome-desktop-testing
    - Fix integration test to work with system installed upower binary and under jhbuild
    - Detect headsets with kernel batteries such as Logitech and Steelseries headsets, and make them automatically disappear if the headset is turned off (if the kernel driver supports the wireless_status attribute)
    - Hide duplicate Logitech Bluetooth devices (Bolt-compatible devices connected through Bluetooth would show as 2 batteries)
    - Hide duplicate Logitech wireless devices when they get connected through USB as well
    - Fix Bluetooth device names not synchronising, and use user-chosen names when available
    - Handle the "present" sysfs attribute changing
    - Fix iDevices not appearing
    - Fix reading capacity_level with newer libgudev
    - Fix OpenBSD backend
    - Refactor internal battery handling into separate classes
    - Guess charging/discharging state based on energy rate (#196)
    - Fix polling after resume (#198)
    - Fix battery state guessing (#146)
    - Reload history when battery ID changes
    - Test fixes
    - Move state guessing into DisplayDevice
    - Always use 90% threshold to consider a battery full
    - Various test improvements
    - Fix mice showing up as keyboards (#189)
    - Allow unit test inspector to fail (#187)
    - Fix test cases when daemon shuts down too slowly (#188)
    - Remove broken wakeup DBus API
    - Tag UPS hid devices using hwdb and update list from upstream
    - Only permit Refresh method when in debug mode
    - Refactor device polling
    - Refactor udev device discovery and sibling detection
    - Improved testing and CI
    - Handle SIGTERM to trigger a clean shutdown
    - Improve polling of batteries after line-power "online" status change
    - Multiple wacom tablet detection fixes
    - Fix updates after a BT hid power supply moves in sysfs
    - Fix enumeration of "Whats Up!" devices on startup
    - Accept USB power supplies without warning
    - Allow building without gtk-doc


author: zhanghongtao <zhanghongtao22@huawei.com> - 017-1
changelog:
  - update package to usbutils-017
  - lsusb: add fallback names for 'lsusb -v' output
  - Honor system libdir and includedir
  - usbutils: lsusb-t: print entries for devices with no interfaces
  - lsusb -t: sort in bus order, not reverse order
  - susb-t: if a driver is not bound to an interface, report "[none]"
  - Generate usbutils.pc pkgconfig file
  - usbreset: Allow idProduct and idVendor to be 0
  - susb: Add function that sorts the output by device ID.
  - lsusb: Additional sorting by bus number.
  - lsusb: This is a more compact implementation of the device list sort implemented within this pull request. The output remains the same as the one demonstrated in the previous commit.


author: liuchao <liuchao173@huawei.com> - 0.14.0-1
changelog:
  - upgrade to 0.14.0:
    - Fix: urcu-bp: only teardown call-rcu worker in destructor
    - Fix: rculfhash: urcu_die() takes positive error value
    - Fix: call_rcu: teardown default call_rcu worker on application exit
    - Fix: join worker thread in call_rcu_data_free
    - Docs: clarify grace period polling API
    - Document grace period polling in rcu-api.md
    - Implement poll rcu stress test in rcutorture
    - urcu-memb,mb,signal: Implement grace period polling
    - Fix: auto-resize hash table destroy deadlock
    - Fix building on MSYS2
    - rculfhash: Include rculfhash-internal.h from local directory
    - Remove "Darwin" from "should also work on list"
    - Merge branch 'adah1972-improve-md'
    - Add semicolons at the end of function prototypes
    - Wrap a file name in backticks
    - Wrap command-line options in backticks
    - Fix a wrong format
    - Wrap URLs in angle brackets
    - Fix Markdown issues
    - Fix: Always check pthread_create for failures
    - Disable signals in URCU background threads
    - Fix: futex.h: include headers outside extern C
    - Fix: add missing unused attribute to _rcu_dereference
    - Fix: change method used by _rcu_dereference to strip type constness
    - Fix: remove type constness in URCU_FORCE_CAST's C++ version
    - Move extern "C" down in include/urcu/urcu-bp.h
    - fix: ifdef linux specific cpu count compat
    - Add unit tests for possible_cpus_array_len
    - fix: sysconf(_SC_NPROCESSORS_CONF) can be less than max cpu id
    - Fix: revise obsolete command in README.md
    - Fix: workqueue: remove unused variable "ret"
    - Fix: urcu-qsbr: futex wait: handle spurious futex wakeups
    - Fix: urcu: futex wait: handle spurious futex wakeups
    - Fix: urcu-wait: futex wait: handle spurious futex wakeups
    - Fix: defer_rcu: futex wait: handle spurious futex wakeups
    - Fix: call_rcu: futex wait: handle spurious futex wakeups
    - Fix: workqueue: futex wait: handle spurious futex wakeups
    - Fix: Use %lu rather than %ld to print count
    - Update ABI definition files
    - Bump version current and age
    - alpha: allocate membarrier system call number
    - Bump version to 0.14.0-pre
    - Improved test framework
    - rculfhash: introduce cds_lfht_node_init_deleted
    - Fix: changelog: v0.13.0 was released in 2021
    - cleanup: i386 arch detection
    - fix: properly detect 'cmpxchg' on x86-32
    - fix: use urcu-tls compat with c++ compiler
    - Fix typo
    - fix: remove autoconf features default value in help message
    - fix: add missing pkgconfig file for memb flavour lib
    - Cleanup: Tests: Remove useless pre-C99 compatibility code from tap.h
    - Document C99 and C++11 requirement in README.md
    - Always use '__thread' for Thread local storage except on MSVC
    - Fix: powerpc32: transparent unions alter calling convention
    - fix: don't use C++ thread_local on MacOs
    - wfcqueue API: implement overloaded wrappers with templates
    - wfcqueue: combine C++ API cds_wfcq_head_cast with overloading
    - wfstack C++ API: implement overloaded wrappers with templates
    - lfstack C++ API: implement overloaded wrappers with templates
    - wfstack: combine C++ API cds_wfs_stack_cast with overloading
    - lfstack: combine C++ API cds_lfs_stack_cast with overloading
    - fix: test_build tap plan
    - Test C++ build of list head init
    - Fix order of initializers in CDS_LIST_HEAD_INIT
    - unit tests: test wfcqueue, wfstack, lfstack empty check functions in C++
    - wfcqueue: implement C++ API based on function overloading
    - wfstack: implement C++ API based on function overloading
    - lfstack: implement C++ API based on function overloading
    - Fix tap.h: remove extra semicolon in pass/fail macros
    - Add C++ build tests
    - Build and run regression and unit tests as C++ programs
    - Add --enable-Werror configure switch
    - Add `urcu_posix_assert()` as `assert()` replacement
    - Rename `urcu_assert()` to `urcu_assert_debug()`
    - cleanup: spelling fixes in comments
    - Make temporary variable in _rcu_dereference non-const
    - (tls-ie2) Fix: x86 and s390: uatomic __hp() macro C++ support
    - Fix: x86 and s390: uatomic __hp() macro clang support
    - Fix: x86 and s390 uatomic: __hp() macro warning with gcc 11


author: yueyuankun <yueyuankun@kylinos.cn> - 0.14.0-3
changelog:
  - Type: compile
  - ID: NA
  - SUG: NA
  - DESC: Fix compilation errors in loongarch architecture
          Replace setup with autosetup


author: yanjianqing <yanjianqing@kylinos.cn> - 4.1.0-7
changelog:
  - tests: testdriver: Add filesystem socket example
  - cli: Drop unnecessary --disk prop aliases
  - fsdetails: Fix an error with source.socket of virtiofs
  - tests: cli: Fix test output after previous commit
  - cli: --disk: Add driver.metadata_cache options


author: yanjianqing <yanjianqing@kylinos.cn> - 4.1.0-8
changelog:
  - diskbackend: Drop support for sheepdog
  - cli: support --boot loader.stateless=
  - virt-install: Reuse cli.fail_conflicting
  - virt-install: --unattended and --cloud-init conflict
  - cloner: Sync and system uuid
  - virt-install: --help required options are wrong
  - cli: --cpu: Add maxphysaddr.{mode,bits} options
  - tests: Add a compat check for linux2020 in amd-sev test case
  - virtinstall: fix regression with --boot and no install method
  - virtinstall: split no_install conditional apart to track code coverage


author: yangzhuangzhuang<yangzhuangzhuang1@huawei.com> - 0.3.12-3
changelog:
  - The "no acceptable C compiler found" error message is displayed during compilation.Therefore,add buildrequires gcc.


author: mahailiang <mahailiang@uniontech.com> - 1.1.3-6
changelog:
  - xdg-email: Support for Deepin
  - Restore matching of older deepin names
  - Add new case for Deepin while detecting DE


author: shuaijiakun <shuaijiakun1288@phytium.com.cn> -1.20.11-32
changelog:
  - Type:feature
  - CVE:NA
  - SUG:NA
  - DESC:fix display error for ps23xx when using ast and pe2201 bmc card.


author: Funda Wang <fundawang@yeah.net> - 1.20.11-37
changelog:
  - fix CVE-2025-26594, CVE-2025-26595, CVE-2025-26596,
    CVE-2025-26597, CVE-2025-26598, CVE-2025-26599
    CVE-2025-26600, CVE-2025-26601


author: Wang Kui <wangkui35@h-partners.com> - 1.20.11-41
changelog:
  - Fix CVE-2025-49176 CVE-2025-49179 CVE-2025-49180 CVE-2025-49737
    CVE-2025-62229 CVE-2025-62230 CVE-2025-62231


author: xingwei <xingwei14@h-partners.com> - 4.2.3-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add haveged requires and optimize random number function replacement patch


author: yanglu <yanglu72@huawei.com> - 4.1-6
changelog:
  - DESC:delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-2.5-nfsnobody2.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-2.13-ypxfr-zeroresp.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-2.13-nonedomain.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-2.19-slp-warning.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-4.0-manfix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-2.24-aliases.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-2.27-confpost.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-2.31-netgrprecur.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-4.0-headers.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-4.0-selinux-context.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  ,and delete BuildRequires git


author: zhoupengcheng <zhoupengcheng11@huawei.com> - 1.2.13-1
changelog:
  - update to zlib-1.2.13
  - remove openEuler uncompiled  patch : 0005-Accelerate-Adler32-using-arm64-SVE-instructions.patch


author: yuanchao <1050706328@qq.com> - 0.13.72-4
changelog:
  - backport:disable zzip_use_file_header_zip64_offset,and fix wrong format in changelog,to support clang build


