# changelog

author: panchenbo <panchenbo@kylinsec.com.cn> - 1.22.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix build error: add missing BuildRequires:pkgconfig(polkit-gobject-1)


author: gaoxingwang <gaoxingwang1@huawei.com> - 1:1.42.8-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:NetworkManager-dispatcher.service not enabled when installed due to systemd_units not defined


author: gaoxingwang <gaoxingwang1@huawei.com> - 1:1.42.8-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync bugfix patch: delete lease file when connection deleted and 
         update the way to get ppp version because patchlevel.h no more provided in  ppp-2.5.0


author: liuzhilin <liuzhilin@uniontech.com> - 1:1.44.2-2
changelog:
  - add NM to support wifi6(fix dde-network-core build error)
  - Type:requirement
  - CVE:NA
  - SUG:NA
  - DESC:Support wireless networks connecting WIFI6 encryption methods,
         so this demand is achieved in NetworkManager, KF5-NetworkManager-QT,
         DDE-Network-Core software package


author: chenyanpanHW <chenyanpan@huawei.com> - 2.14.19-25
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/ORBit2-2.14.3-multilib.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/ORBit2-2.14.3-ref-leaks.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/ORBit2-make-j-safety.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/ORBit2-allow-deprecated.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/0005-Fix-link_protocol_is_local_ipv46-for-ipv4-on-some-ip.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/0014-Commit-patch-from-bug-662623-to-fix-connection-failu.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/0016-bug-732274-fix-parallel-build-failure.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: zhouyihang <zhouyihang3@h-partners.com> - 1.2.8-2
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: pkcon: Use appropriate callbacks for client / task async calls


author: lingsheng <lingsheng1@h-partners.com> - 1.2.8-3
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: Revert PkClient: Replace the GSimpleAsyncResult with the GTask API


author: chenyanpanHW <chenyanpan@huawei.com> - 1.2.15-38
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/SDL-1.2.15-add_sdl_config_man.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/CVE-2019-7637.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/CVE-2019-7636.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/CVE-2019-7635_1.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/CVE-2019-7635_2.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/CVE-2019-7573_CVE-2019-7576.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/CVE-2019-7578.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/CVE-2019-7577.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/SDL-1.2.10-GrabNotViewable.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/SDL-1.2.15-const_XData32.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/SDL-1.2.15-ignore_insane_joystick_axis.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/SDL-1.2.15-no-default-backing-store.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/SDL-1.2.15-SDL_EnableUNICODE_drops_keyboard_events.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/SDL-1.2.15-vec_perm-ppc64le.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/CVE-2019-13616.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/backport-CVE-2019-7572-Fix-a-buffer-overread-in-IMA_ADPCM_nibble.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/backport-CVE-2019-7574-Fix-a-buffer-overread-in-IMA_ADPCM_decode.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/backport-CVE-2019-7572-Fix-a-buffer-overwrite-in-IMA_ADPCM_decode.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/backport-CVE-2019-7575-Fix-a-buffer-overwrite-in-MS_ADPCM_decode.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yixiangzhike <yixiangzhike007@163.com> - 0.18.6-3
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: backport upstream patch to fix parsing of lowercase group names


author: yanglongkang<yanglongkang@h-partners.com> - 3.2.2-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Adding Patching Operations
         provides relibility and self-healing capabilities for service


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 3.2.5-2
changelog:
  - Type：update
  - ID：NA
  - SUG:NA
  - DESC: Modify the license to SPDX format
          Delete MIT and Public Domain license because it no longer appears in the upstream source


author: shixuantong<shixuantong@huawei.com> - 0.3.6-25
changelog:
  - Type:cves
  - ID:CVE-2017-6828 CVE-2017-6829 CVE-2017-6831 CVE-2017-6838 CVE-2017-6839
  - SUG:NA
  - DESC:fix CVE-2017-6828 CVE-2017-6829 CVE-2017-6831 CVE-2017-6838 CVE-2017-6839


author: zhengxiaoxiao<zhengxiaoxiao2@huawei.com> - 1:3.1.2-1
changelog:
  - update version to 3.1.2
    - When processing a run level change, make auditd exit
    - In auditd, fix return code when rules added in immutable mode
    - In auparse, when files are given, also consider EUID for access
    - Auparse now interprets unnamed/anonymous sockets (Enzo Matsumiya)
    - Disable Python bindings from setting rules due to swig bug (S. Trofimovich)
    - Update all lookup tables for the 6.5 kernel
    - Don't be as paranoid about auditctl -R file permissions
    - In ausearch, correct subject/object search to be an and if both are given
    - Adjust formats for 64 bit time_t
    - Fix segfault in python bindings around the feed API
    - Add feed_has_data, get_record_num, and get/goto_field_num to python bindings


author: wangkerong <wangkerong@huawei.com> - 1.13.0-3
changelog:
  - Fix OOM during fuzz test
  - We don't run some testcase,because the patch of fuzz test will lead to the failure of testcase


author: fuanan <fuanan3@h-partners.com> - 1.16.5-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Bump release and Cleanup useless comments and License compliance rectification


author: zhoupengcheng <zhoupengcheng11@huawei.com> - 2.12.1-1
changelog:
  - update to 2.12.1 
  - backport two patches from upstream to fix testcase failure after upgrade 2.12.1
      backport-Freeze-format_time-tests-to-a-specific-date-to-fix-t.patch
      backport-Use-aware-UTC-datetimes-internally.patch


author: wangyuhang <wangyuhang27@huawei.com> -5.2.15-11
changelog:
  - the mayexec function no longer checks cmdline each time that verifies whether a script are allowed to run


author: wangyuhang <wangyuhang27@huawei.com> -5.2.15-13
changelog:
  - remove the log message for failing to open cmdline,
    and ensure that the mayexec function does not modify the value of errno.


author: zhanghao<zhanghao383@huawei.com> - 32:9.16.37-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix output expected information when install bing-sdborbind-sdb-chroot


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-2
changelog:
  - Type:CVE
  - CVE:CVE-2023-4408 CVE-2023-5517 CVE-2023-5679 CVE-2023-50387 CVE-2023-50868
  - SUG:NA
  - DESC:fix CVE-2023-4408 CVE-2023-5517 CVE-2023-5679 CVE-2023-50387 CVE-2023-50868


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-3
changelog:
  - Type:CVE
  - CVE:CVE-2024-0760,CVE-2024-1737,CVE-2024-1975,CVE-2024-4076
  - SUG:NA
  - DESC:fix CVE-2024-0760,CVE-2024-1737,CVE-2024-1975,CVE-2024-4076


author: Wenlong Zhang <zhangwenlong@loongson.cn> - 2.41-3
changelog:
  - LoongArch: sync patch from binutils upstream
  - LoongArch: Modify inconsistent behavior of ld with --unresolved-symbols=ignore-all


author: liuh <liuhuan01@kylinos.cn> - 6.6.3-12
changelog:
  - btrfs-progs: convert: insert a dummy inode item before inode ref for ext2/4
  - btrfs-progs: convert: for ext2, fix possible tree-checker error when converting a large fs


author: liuxu <liuxu156@huawei.com> - 1:1.36.1-6
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363


author: xinghe <xinghe2@h-partners.com> - 1.18.1-5
changelog:
  - Type:CVE
  - CVE:CVE-2023-32067 CVE-2023-31130
  - SUG:restart
  - DESC:fix CVE-2023-32067 CVE-2023-31130


author: wangjiang <wangjiang37@h-partners.com> - 2023.2.64-2
changelog:
  - remove expired and sync new certificates
    Removing:
      Security Communication Root CA
    Adding:
      D-Trust SBR Root CA 1 2022
      D-Trust SBR Root CA 2 2022
      Telekom Security SMIME ECC Root 2021
      Telekom Security SMIME RSA Root 2023
      Telekom Security TLS ECC Root 2020
      Telekom Security TLS RSA Root 2023


author: sunhai<sunhai10@huawei.com> - 1.17.4-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:cairo_truetype_reverse_cmap detected memory leaks
         fix read memory access
         fix call get_unaligned_be32 heap buffer overflow
         fix heap buffer overflow in cairo_cff_parse_charstring


author: yangyun <yangyun50@huawei.com> - 1.5.5-1
changelog:
  - update to 1.5.5 version
  	- add support of readers (see README.md)
  	- configure.ac: disable the use of --disabele-usbdropdir
  	- parse: create output.bin file
  	- udev: Disable USB-persist for CCID devices
  	- configure: fail if flex is not found
  	- some other minor improvments


author: shixuantong <shixuantong1@huawei.com> - 23.4.1-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add python3-passlib to BuildRequires
         skip some test if there are multiple NICs with the MAC address 'ee:ee:ee:ee:ee:ee'
         fix: unpin jsonschema and update tests
         test: fix tmpdir in test_cc_apk_configure
         bug(tests): mock reads of host's /sys/class/net via  get_sys_class_path
         test: fix disable_sysfs_net mock
         tests: drop CiTestCase and convert to pytest


author: shixuantong <shixuantong1@huawei.com> - 23.4.1-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix growpart race
         handle error when log file is empty
         ec2: Do not enable dhcp6 on EC2


author: shixuantong <shixuantong1@huawei.com> - 23.4.1-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:disable use-dns for secondary nics
         Make duplicate route add succeed
         Fix predictable interface rename issue


author: dongyuzhen <dongyuzhen@h-partners.com> - 23.4.1-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix(net): klibc ipconfig PROTO compatibility
         fix(openstack): Fix bond mac_address


author: shixuantong <shixuantong1@huawei.com> - 23.4.1-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:chore: set recursive=False for ensure_dir if parent path is "/"
         test(openstack): Test bond mac address
         fix: Ensure properties for bonded interfaces are properly translated


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 3.27.9-5
changelog:
  - Support 
    /usr/bin/cmake --build "riscv64-openEuler-linux-gnu" -j4 --verbose and 
    DESTDIR="/home/abuild/rpmbuild/BUILDROOT/cmake-3.27.9-5.oe2403sp1.riscv64" /usr/bin/cmake --install "riscv64-openEuler-linux-gnu".


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 309-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: remove incorrect provides cockpit-machines and cockpit-machines-ovirt
          remove require libvirt and libvirt-client


author: lijian <lijian2@kylinos.cn> - 2:2.230.0-1
changelog:
  - Update container-selinux to v2.230.0
  - Allow containers to unmount file systems
  - Add buildah as a container_runtime_exec_t label
  - Additional rules for container_user_t
  - Add some MLS rules to policy
  - Add container_file_t and container_ro_file_t as user_home_type


author: jiangchuangang <jiangchuangang@huawei.com> - 9.4-2
changelog:
  - skip testcase for overlay filesystem because of no inotify_add_watch
    add test-skip-overlay-filesystem-because-of-no-inotify_add_watch.patch


author: huyubiao <huyubiao@huawei.com> - 9.4-9
changelog:
  - fix alias sm3sum not working on bash
    delete redundant backport-chmod-fix-exit-status-when-ignoring-symlinks.patch


author: huyubiao <huyubiao@huawei.com> - 9.4-10
changelog:
  - sync patches from community
  - add backport-pinky-fix-string-size-calculation.patch
        backport-cksum-consistently-validate-length-attributes.patch
        backport-timeout-fix-race-where-we-might-kill-arbitrary-proce.patch
        backport-timeout-fix-narrow-race-in-failing-to-kill-processes.patch
        backport-maint-basenc-consistently-check-buffer-bounds-when-e.patch
        backport-putenv-Don-t-crash-upon-out-of-memory.patch
        backport-head-off_t-not-uintmax_t-for-file-offset.patch
        backport-shuf-avoid-integer-overflow-on-huge-inputs.patch
        backport-shuf-fix-randomness-bug.patch


author: fuanan <fuanan3@h-partners.com> - 2.13-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert fix CVE-2015-1197 because it causes AT testcases problems


author: yixiangzhike <yixiangzhike007@163.com> - 1.17.0-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix the failure of testcase when building with python-setuptools>=66.0.0


author: shaojiansong <shaojiansong@kylinos.cn> - 8.0.4-3
changelog:
  - Fix lack of loongarch64 and sw_64 patch files in src.rpm package which is build from any platform.


author: shenzhongwei <shenzhongwei@kylinos.cn> - 8.0.4-10
changelog:
  - remove the architecture judgment in the patches section;
  - include all patches in the source package.


author: lijian <lijian2@kylinos.cn> - 1.8.7-1
changelog:
  - update to 1.8.7
  - crun: new command "crun features".
  - linux: support io_priority from the OCI specs.
  - cgroup: allow setting swap to 0.
  - cgroup, systemd: set the memory limit on the system scope.


author: yixiangzhike <yixiangzhike007@163.com> - 20230614-1.git5f3458e
changelog:
  - update version to 20230614
    - DEFAULT policy drop DH<2048bits,TLS1.0,TLS1.1,SHA-1
    - Remove the CBC ciphers from DEFAULT policy in openssh
    - FIPS policy drop the CBC ciphersuites
    - Enable RSA-PSK algorithms in DEFAULT and LEGACY policies
    - Add the diffie-hellman-group14-sha256 to libssh
    - Add --check option to update-crypto-policies
    - Add AES-192 algorithms support
    - Use allowlisting config for gnutls
    - Enable SHAKE algorithms for gnutls,java and nss
    - Openssl disable SHA-1 signatures in FUTURE policy
    - Openssh add HostbasedAcceptedAlgorithms and RequiresRSASize config options


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:paramhlp: fix CRLF-stripping files with "-d @file"
         libssh2: set length to 0 if strdup failed
         openldap: create ldap URLs correctly for IPv6 addresses
         multi: avoid memory-leak risk
         tool_cfgable: free {proxy_}cipher13_list on exit


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:multi: check that the multi handle is valid in curl_multi_assign


author: wuyifeng <wuyifeng10@huawei.com> - 78-1
changelog:
  - upgrade to version 78:
  	-incorporate up to 6.5 kernel
  	-add new cxl commands
  	-fix some bugs detail see:github.com/pmem/ndctl


author: hongjinghao <hongjinghao@huawei.com> - 1:1.14.8-3
changelog:
  - sync patch from upstream
  	backport-bus-Don-t-crash-if-bus_context_create_client_policy-.patch
  	backport-bus-When-failing-to-reload-client-policy-continue-it.patch
  	backport-test-Add-a-targeted-test-for-_dbus_unix_groups_from_.patch
  	backport-userdb-Add-proper-error-reporting-when-getting-group.patch


author: liuyumeng <liuyumeng5@huawei.com> - 0.40.0-2
changelog:
  - add patch:dconf read random contents of memory causing discrepancy,initialize memory to eliminate discrepancy


author: yuanchao <1050706328@qq.com> - 8:2.03.21-13
changelog:
  - support clang build:
    - fix function undeclared in libdm-common.c and dev-cache.c
    - fix changelog to be in descending chronological order


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.3-4
changelog:
  - Type:bugfix
  - ID:
  - SUG:restart
  - DESC:delete report url added by other upstream patch to keep pace with DHCP


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.3-5
changelog:
  - Type:CVE
  - ID:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
  - SUG:restart
  - DESC:fix CVE-2022-2795,CVE-2022-38177 and CVE-2022-38178


author: hanhuihui <hanhuihui5@huawei.com> - 4.16.2-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dnf:Remove --duplicates and --oldinstallonly exit with 0 when nothing to remove and Add all candidates for reinstall to solver


author: LuWu <2398491106@qq.com> - 4.16.2-5
changelog:
  - Limit queries to nevra forms when provided by command and Update the man page entry for the countme option


author: majianhan <majianhan@kylinos.cn> - 4.16.2-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix dnf-automatic service to apply security updates the same way as dnf tool


author: chenhaixing <chenhaixing@huawei.com> - 4.3.1-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dnf-plugins-core:download plugin:respect install_weak_deps option value


author: renmingshuai <renmingshuai@huawei.com> - 2.89-2
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Fix memory leak when using --dhcp-optsfile with DHCPv6 options


author: suoxiaocong <suoxiaocong@kylinos.cn> - 18.09.0-337
changelog:
  - Type:BUG
  - CVE:NA
  - SUG:NA
  - DESC:remove ifarch condition check when addding source, this causes src.rpm missing files


author: yanglongkang <yanglongkang@h-partners.com> - 7.5.2-1
changelog:
  - Update package to version 7.5.2
  - Dos2unix can print info about the line break type of the last line, or indicate there is none.
  - Updated documentation about the ASCII conversion mode.
  - Fixed problem of converting a symbolic link target that is on another file system.
  - Updated Chinese and Serbian translations.


author: huangdengdui <huangdengui@huawei.com> - 23.11-17
changelog:
  Sync some patchs from upstreaming for hns3 pmd and modifications
   are as follow:
   - dma/hisilicon: remove support for HIP09 platform
   - net/hns3: disable SCTP verification tag for RSS hash input
   - net/hns3: fix variable overflow
   - net/hns3: fix double free for Rx/Tx queue
   - net/hns3: fix read Rx timestamp handle
   - net/hns3: fix offload flag of IEEE 1588
   In addition, the following patch synchronizes the latest version
   - ethdev: fix strict aliasing lead to link cannot be up


author: yinbin <yinbin8@huawei.com> - 23.11-18
changelog:
  - change dpdk-* in dpdk-tools  from dynamic build to static build
  - add -s flag to remove symbols of dpdk-* in dpdk-tools


author: huangdengdui <huangdengui@huawei.com> - 23.11-19
changelog:
  Support more VLAN fields matching for hns3 and sync a bugfix
   - net/hns3: add Rx DMA address align check
   - net/hns3: support more VLAN fields matching


author: huangdengdui <huangdengui@huawei.com> - 23.11-24
changelog:
  Sync some patchs from upstreaming, includind some bugfixes, hns3 pmd
   flow rule priority feature, hns3 pmd outer VLAN flow match feature,
   and support dump reigser names and filter.
   This patch set is modified as follows:
   - net/hns3: fix cannot fully use hardware flow director table
   - net/hns3: fix error code for repeatedly create counter
   - net/hns3: support flow rule priority
   - common/nfp: use new kvargs process API
   - net/tap: use new kvargs process API
   - net/sfc: use new kvargs process API
   - kvargs: rework process API
   - net/hns3: fix variable type
   - net/hns3: fix pointer offset
   - net/hns3: fix error log
   - net/hns3: support filtering registers by module names
   - net/hns3: support reporting names of registers
   - net/hns3: refactor register dump
   - net/hns3: remove separators between register module
   - net/hns3: fix dump counter of registers
   - net/hns3: remove some basic address dump
   - telemetry: register command with private argument
   - ethdev: fix race on ports in telemetry endpoints
   - ethdev: add telemetry command for registers
   - ethdev: add report of register names and filter
   - net/hns3: support outer VLAN flow match
   - net/hns3: register VLAN flow match mode parameter
   - net/hns3: support general tunnel flow match
   - net/hns3: restrict tunnel flow rule to one header
   - net/hns3: remove ROH devices
   - net/hns3: dump queue head and tail pointer info
   - dmadev: fix potential null pointer access
   - net/hns3: verify reset type from firmware
   - ethdev: verify queue ID in Tx done cleanup


author: Zhiqiang Liu <liuzhiqiang26@huawei.com> - 1.47.0-2
changelog:
  - For openeuler 24.03 LTS, remove metadata_csum_seed and orphan_file
    to keep same with openeuler 22.03 LTS.


author: lifeifei<lifeifei@kylinos.cn> - 2.0.11-10
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix: if libvirt and ebtables are installed at the same time, ping the operation prompts "sendmsg: Operation not permitted".


author: xinghe <xinghe2@h-partners.com> - 2.0.11-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix ebtables-restore --noflush failed when ebtables is uninstall


author: Xiaotian Wu <wuxiaotian@loongson.cn> - 202308-17
changelog:
  - Update LoongArch virtual machine
  - 0080-Platform-Loongson-Remove-minimium-memory-size-limita.patch
  - 0081-Platform-Loongson-Modify-loongarch-uefi-firmware-siz.patch
  - 0082-fixup-fdt-parse-error.patch


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 18-4
changelog:
  - Fix segfault when passed --index is greater than current boot order size
    Add missing short option handling for --index (-I)


author: zhangxingrong <zhangxingrong@uniontech.com> - 18-5
changelog:
  - Fix the incorrect long parameter in help messages
  - efibootmgr: delete_bootnext is just a boolean, not an entry id


author: fuanan <fuanan3@h-partners.com> - 0.189-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Remove unnecessary patch because this patch is contained in elfutils-0.189.tar


author: lifeifei <lifeifei@kylinos.cn> - 0.190-3
changelog:
  - Type:requirement
  - CVE:NA
  - SUG:NA
  - DESC:add noreplace to /usr/lib/sysctl.d/10-default-yama-scope.conf


author: wangqiang <wangqiang1@kylinos.cn> - 0.190-4
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: Fix handling of corefiles with non-contiguous .so segments


author: xiaojiantao <xiaojiantao1@h-partners.com> - 2:5.15-3
changelog:
  - Type:requirement
  - Id:NA
  - SUG:NA
  - DESC:add support to set or get rx buf len and tx push by ethtool


author: wangkai <13474090681@163.com> - 115.14.0-1
changelog:
  - Update to 115.14.0
  - Fix CVE-2024-7519 CVE-2024-7521 CVE-2024-7522 CVE-2024-7524
    CVE-2024-7525 CVE-2024-7526 CVE-2024-7527 CVE-2024-7529 CVE-2024-7531


author: wangkai <13474090681@163.com> - 128.3.0-1
changelog:
  - Update to 128.3.0
  - Fix CVE-2024-9392 CVE-2024-9393 CVE-2024-9394 CVE-2024-9396
    CVE-2024-9397 CVE-2024-9398 CVE-2024-9399 CVE-2024-9400 CVE-2024-9401
    CVE-2024-9402


author: wangkai <13474090681@163.com> - 128.4.0-1
changelog:
  - Update to 128.4.0
  - Fix CVE-2024-10458 CVE-2024-10459 CVE-2024-10460 CVE-2024-10461 CVE-2024-10462
    CVE-2024-10463 CVE-2024-10464 CVE-2024-10465 CVE-2024-10466 CVE-2024-10467


author: wangkai <13474090681@163.com> - 128.5.0-1
changelog:
  - Update to 128.5.0
  - Fix CVE-2024-11691 CVE-2024-11692 CVE-2024-11694 CVE-2024-11695 CVE-2024-11696
    CVE-2024-11697 CVE-2024-11699


author: xinghe <xinghe2@h-partnres.com> - 1.0.2-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix zone combined forward must not default to True
         fix fw icmptype don't alter ipvs in io_object
         fix check config use the dictionary variants
         fix functions check config fails if direct.xml exists
         fix service adding includes


author: zhouyihang <zhouyihang3@h-partners.com> - 1.2.6-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:chore nftables add delete table helper
         fix nftables always flush main table on start


author: zhouyihang <zhouyihang3@h-partners.com> - 1.2.6-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Firewall startup is to set CleanupModuleOnxit=yes to unload related ko when stopping firewalld service
         To reduce unnecessary loading of ebtables-related kernel modules
         fix(nm): release NM client after a timeout


author: liyuxiang <liyuxiang@ncti-gba.cn> - 2:2.8.1-2
changelog:
  - Fix CVE-2022-39316
  - Fix CVE-2022-39318
  - Fix CVE-2022-39319
  - Fix CVE-2022-39347
  - Fix CVE-2022-41877


author: wangkai <13474090681@163.com> - 2:2.11.7-1
changelog:
  - Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
    CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
    CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660


author: yangyun <yangyun50@huawei.com> -3.16.2-1
changelog:
  - upgrade to 3.16.2
  	- fix some issues (see: https://github.com/libfuse/libfuse/releases) 
  	- improved support for some less common systems (32bit, alternative libcs)
  	- unsupported mount options are no longer silently accepted
  	- auto_unmount is now compatible with allow_other
  	- readdir kernel cache can be enabled from high-level API


author: Jiayi Chen <chenjiayi22@huawei.com> - 5.2.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport five patches from upstream to fix double free bug in 5.2.0-1
         backport-Fix-a-bug-with-Node_elem_new.patch
         backport-Additional-fix-for-Node_elem_new.patch
         backport-Yet-another-fix-and-test-for-Node_elem_new.patch
         backport-Fix-a-memory-leak.patch
         backport-Code-simplification-in-interpret.h.patch


author: liuchao <liuchao173@huawei.com> - 14.1-1
changelog:
  - upgrade GDB version to 14.1:
    - GDB no longer support AiX 4.x, 5.x and 6.x. The minimum version supported is AiX 7.1.
    - GDB/MI version 1 support has been removed
    - Initial built-in support for Debugger Adapter Protocol (DAP)
    - GDB now recognizes the NO_COLOR environment variable
    - Initial support for integer types larger than 64 bits
    - Breakpoints can now be inferior-specific
    - New convenience function "$_shell", to execute a shell command and return its result.
    - Python support
    - Support for enabling or disabling individual remote target features
    - New 'no-history' stop reason
    - Support for inferior-specific breakpoints
    - The bkpt tuple, which appears in breakpoint-created notifications, and in the result of the -break-insert command can now include an optional 'inferior' field for both the main breakpoint, and each location, when the breakpoint is inferior-specific.
    - Trying to create a thread-specific breakpoint using a non-existent thread ID now results in an error
    - New "simple-values-ref-types" -list-feature value indicating how the --simple-values option in various commands take reference types into account.
    - Initial support for Scalable Matrix Extension (SME) and for Scalable Matrix Extension 2 (SME2)
    - The 'org.gnu.gdb.aarch64.pauth' Pointer Authentication feature is now deprecated in favor of the 'org.gnu.gdb.aarch64.pauth_v2' feature string
    - Support for the Ada 2022 target name symbol ('@')
    - Support for the The Ada 2022 'Enum_Rep and 'Enum_Val attributes
    - The 'list' command now accepts '.' as an argument, telling GDB to print the location around the point of execution within the current frame
    - New '%V' output format for printf and dprintf commands.
    - The printf command now limits the size of strings fetched from the inferior to the value of the 'max-value-size' setting.
    - Support for extending at configure time the default value of the 'debug-file-directory' GDB parameter via the new --additional-debug-dirs=PATHs configure option.
    - New command "info main"
    - New command "set tui mouse-events [on|off]" (on by default)
    - New command "set always-read-ctf on|off" (off by default)
    - Various new debug and maitenance commands


author: zhangxianting <zhangxianting@uniontech.com> - 9.56.1-6
changelog:
  - Type:CVE
  - ID:NA
  - SUG:NA
  - DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511


author: yaoxin <yao_xin001@hoperun.com> - 5.2.2-1
changelog:
  - Update to 5.2.2
    * Fixes for CVE-2023-48161 (bsc#1217390), CVE-2022-28506 (bsc#1198880)
    * Address SF issue #151: A heap-buffer-overflow in gif2rgb.c:294:45
    * Address SF issue #166: a read zero page leads segment fault in
      getarg.c and memory leaks in gif2rgb.c and gifmalloc.c


author: fuanan <fuanan3@h-partners.com> - 2.39.1-5
changelog:
  - Type:CVE
  - ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
  - SUG:NA
  - DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815


author: fuanan <fuanan3@h-partners.com> - 2.39.1-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:enable multithreading compilation and installation,
         move Git.3pm.gz to perl-Git,avoid installation conflicts,
         change BuildRequires from pcre-devel to pcre2-devel.


author: huyubiao <huyubiao@huawei.com> - 2.39.1-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
         Delete git-core-doc from git, git-core-doc is provided by git-help.


author: fuanan <fuanan3@h-partners.com> - 2.43.0-4
changelog:
  - Type:CVE
  - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
  - SUG:NA
  - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465


author: yanglu <yanglu72@h-partners.com> - 2.78.0-1
changelog:
  - update glib-networking version to 2.78.0:
    - disable PKCS#11 tests when GNuTLS is built without PKCS#11 support
    - fix connection tests on 32-bit systems with 64-bit time_t
    - updated translations


author: zhangzikang <zhangzikang@kylinos.cn> - 2.78.3-3
changelog:
  - backport patch:
      backport-gdbusmessage-Clean-the-cached-arg0-when-setting-the-message-body.patch
      backport-gsocketclient-Fix-a-use-after-free-in-g_socket_client_connected_callback.patch
      backport-gcontextspecificgroup-Wait-until-stop_func-is-done.patch
      backport-gresources-fix-memory-leak-from-libelf.patch


author: Qingqing Li <liqingqing3@huawei.com> - 2.38-38
changelog:
  - nptl: Use <support/check.h> facilities in tst-setuid3
  - posix: Use <support/check.h> facilities in tst-truncate and tst-truncate64
  - ungetc: Fix backup buffer leak on program exit [BZ #27821]
  - ungetc: Fix uninitialized read when putting into unused streams [BZ #27821]
  - Make tst-ungetc use libsupport
  - stdio-common: Add test for vfscanf with matches longer than INT_MAX [BZ #27650]
  - support: Add FAIL test failure helper


author: Qingqing Li <liqingqing3@huawei.com> - 2.38-40
changelog:
  - elf: Change ldconfig auxcache magic number (bug 32231)
  - Add crt1-2.0.o for glibc 2.0 compatibility tests
  - libio: Attempt wide backup free only for non-legacy code


author: shixuantong <shixuantong@huawei.com> - 2.38-43
changelog:
  - elf: avoid jumping over a needed declaration
  - elf: Move __rtld_malloc_init_stubs call into _dl_start_final


author: shixuantong <shixuantong@huawei.com> - 2.38-44
changelog:
  - elf: Handle static PIE with non-zero load address
  - elf: Introduce _dl_relocate_object_no_relro
  - elf: Switch to main malloc after final ld.so self-relocation


author: Qingqing Li <liqingqing3@huawei.com> - 2.38-45
changelog:
  - nptl: initialize cpu_id_start prior to rseq registration
  - nptl: initialize rseq area prior to registration


author: wuguanghao <wuguanghao3@huawei.com> - 11.1-1
changelog:
  - upgrade to 11.1
    - add simple-quota xattr to afr and ec ignore list
    - fix asan use-after-free bug
    - fix error not supported for ipv6
    - support OpenSSL 3.0
    - drop libglusterd
    - O_PATH support over protocol
    - Enable AES cipher for SSL by default
    - glusterd: add stripe_count in volume info
    - snapshots: Support for ZFS Snapshots
    - gfapi: Add support for 'AT_EMPTY_PATH' and 'AT_REMOVEDIR' flag


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 11.1-2
changelog:
  - fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.


author: xuraoqing <xuraoqing@huawei.com> - 3.8.2-1
changelog:
  - update to 3.8.2
  - some API and ABI modifications, see NEWS for details
  - New option --attime to specify current time
  - libgnutls: Add a mechanism to control whether to enforce extended master secret (RFC 7627)
  - libgnutls: Add additional PBKDF limit checks in FIPS mode as defined in SP 800-132
  - libgnutls: %GNUTLS_NO_EXTENSIONS has been renamed to %GNUTLS_NO_DEFAULT_EXTENSIONS.
  - libgnutls: Add support for RFC 9258 external PSK importer.
  - libgnutls: ClientHello extensions are randomized by default,
               To make fingerprinting harder, TLS extensions in ClientHello messages are shuffled.
  - gnutls-cli: New option --starttls-name.
  - libgnutls: transparent KTLS support is extended to FreeBSD kernel.
  - libgnutls: Added support for AES-GCM-SIV ciphers (RFC 8452).
  - libgnutls: Add API functions to perform ECDH and DH key agreement.
  - libgnutls: Fix timing side-channel inside RSA-PSK key exchange(CVE-2023-5981).


author: wangshuo <wangshuo@kylinos.cn> - 1.21.4-25
changelog:
  - Type:CVE
  - CVE:CVE-2024-34158
  - SUG:NA
  - DESC:fix CVE-2024-34158
  -      optimize the names of the first two patch files


author: laokz <zhangkai@iscas.ac.cn> - 2.15-2
changelog:
  - riscv64: force --enable-frame-pointers due to unsupported
    -momit-leaf-frame-pointer compile option until gcc14


author: peng.zou <peng.zou@shingroup.cn> - 1:2.12-22
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:remove BuildRequires:pesign >= 0.99-8 and fix bug about petitboot doesn't ignore EFI entries for ppc64le


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.12-25
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:10_linux: fix missing "ro" in kernel boot parameters
         Disable LTO


author: hanliyang <hanliyang@hygon.cn> - 1:2.12-26
changelog:
  - Type:requirement
  - CVE:NA
  - SUG:NA
  - DESC:use confidential computing provisioned secrets for disk decryption


author: yueyuankun <yueyuankun@kylinos.cn> - 1:2.12-27
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:acpi: Fix out of bounds access in grub_acpi_xsdt_find_table()


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.12-28
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:commands/efi/tpm: Re-enable measurements on confidential computing platforms


author: Funda Wang <fundawang@yeah.net> - 1.22.5-2
changelog:
  - fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
    CVE-2024-47607, CVE-2024-47615, CVE-2024-47835


author: yaoxin <yao_xin001@hoperun.com> - 1.14.5-1
changelog:
  - Update to 1.14.5:
    * Added signed Windows msi binary and signed Apple dmg binary files.
    * Moved examples to the HDF5Examples folder in the source tree.
    * Added support for using zlib-ng package as the zlib library
    * Disable CMake UNITY_BUILD for hdf5
    * Removed "function/code stack" debugging configuration option
    * Added configure options for enabling/disabling non-standard programming language features
    * Added the CMake variable HDF5_ENABLE_ROS3_VFD to the HDF5 CMake config
      file hdf5-config.cmake. This allows it to easily detect if the library
      has been built with or without read-only S3 functionality.
    * Fixed many CVE:
      CVE-2024-29157,CVE-2024-29158,CVE-2024-29159,CVE-2024-29160,CVE-2024-29161,CVE-2024-29162
      CVE-2024-29163,CVE-2024-29164,CVE-2024-29165,CVE-2024-29166,CVE-2024-32605,CVE-2024-32606
      CVE-2024-32607,CVE-2024-32608,CVE-2024-32609,CVE-2024-32610,CVE-2024-32611,CVE-2024-32612
      CVE-2024-32613,CVE-2024-32614,CVE-2024-32615,CVE-2024-32616,CVE-2024-32617,CVE-2024-32618
      CVE-2024-32619,CVE-2024-32620,CVE-2024-32621,CVE-2024-32622,CVE-2024-32623,CVE-2024-32624
      CVE-2024-33873,CVE-2024-33874,CVE-2024-33875,CVE-2024-33876,CVE-2024-33877,CVE-2018-13871
      CVE-2018-13875,CVE-2018-14034


author: chenyanpanHW <chenyanpan@huawei.com> - 9.58-2
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/0001-hdparm-fallocate-close-fd.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/0002-hdparam-Remove-security_password-printing.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/0003-hdparm-fix-fd-leak-in-sysfs_write_attr.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: chengyechun <chengyechun1@huawei.com> - 2.4.55-3
changelog:
  - Type:CVE
  - ID:CVE-2023-27522, CVE-2023-25690
  - SUG:restart
  - DESC:fix CVE-2023-27522, CVE-2023-25690


author: chengyechun <chengyechun1@huawei.com> - 2.4.55-5
changelog:
  - Type:CVE
  - ID:CVE-2023-31122, CVE-2023-45802, CVE-2023-43622
  - SUG:NA
  - DESC:fix CVE-2023-31122 and CVE-2023-45802 and CVE-2023-43622


author: chengyechun <chengyechun1@huaiwe.com> - 2.4.58-2
changelog:
  - Type:CVE
  - ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
  - SUG:NA
  - DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream


author: zhangyaqi <zhagnyaqi@kylinos.cn> - 2.4.58-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:allocate a heap buffer if the configured size is greater than the stack-allocated buffer.


author: chengyechun <chengyechun1@huawei.com> - 2.4.58-6
changelog:
  - Type:CVE
  - ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
  - SUG:NA
  - DSEC:fix some CVEs


author: zhongtao <zhongtao17@huawei.com> - 2.1.5-7
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: bugfix of background execution exec error command and setting negative cpu-rt issue


author: zhongtao <zhongtao17@huawei.com> - 2.1.5-8
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: remove extra %s in CreateContainerLogSymlink and allow env variable has an empty value


author: wujichao <wujichao1@huawei.com> - 2.1.5-12
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: combine ten similar submissions into one(0125-fix-clang-build-error.patch) and Upgrade from upstream


author: yinsist <jianhui.oerv@isrc.iscas.ac.cn> - 50.0-10
changelog:
  - Type: requirement
  - ID: NA
  - SUG: NA
  - DESC: Valgrind does not support certain architectures like RISC-V, Before depending on Valgrind, first check if Valgrind supports the architecture


author: Funda Wang <fundawang@yeah.net> - 50.0-14
changelog:
  - adopt to new cmake macro
  - migrated to SPDX license
  - drop useless setup macro, cause it duplicates with autosetup
  - drop useless ldconfig_scriptlets, it has been done through glibc's
    filetriggers since openeuler 1.0


author: Xinghai Cen <cenxinghai@h-partners.com> - 50.0-17
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: Fix coredump during QP destruction when send_cq == recv_cq


author: mengkanglai <mengkanglai2@huawei.com> - 1.8.18-20
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:lan channel fix set alert on off and lanplus realloc the msg if the payload_length gets update


author: Huang Yang <huangyang@loongson.cn> - 1.8.18-22
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Resolve malloc aborted error raised when executing ipmitool fru.


author: gaoxingwang <gaoxingwang1@huawei.com> - 1:6.1.0-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add epoch version in changelog to fix check_spec_file ci failure


author: gaoxingwang <gaoxingwang1@huawei.com> - 1:6.1.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix testsuite build failure and delete libcap-devel dependency


author: yanglu <yanglu72@h-partners.com> - 1.8.9-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ebtables translate Print flush command after parsing is finished
         fix crash when opts isn't reallocated
         Fix handling of non-existent chains
         nft: Special casing for among match in compare_matches
         extensions: libipt_icmp: Fix confusion between 255/255 and any
         Revert libiptc: fix wrong maptype of base chain counters on restore
         extensions: Fix checking of conntrack --ctproto 0
         libxtables: xtoptions: Fix for non-CIDR-compatible hostmasks
         libxtables: xtoptions: Prevent XTOPT_PUT with XTTYPE_HOSTMASK
         libiptc: Fix for another segfault due to chain index NULL pointer


author: liweigang <liweiganga@uniontech.com> - 1.8.9-5
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: libxtables: Fix memleak of matches' udata
          xshared: Fix parsing of empty string arg in '-c' option


author: yanglu <yanglu72@h-partners.com> - 1.8.9-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:extensions:recent:Fix format string for unsigned values
         nft:cmd:Init struct nft_cmd::head early


author: qinyu <qinyu32@huawei.com> - 3:1.9.0-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC: procinterrupts: Fix IRQ name parsing on certain arm64 SoC


author: langfei <langfei@huawei.com> - 3:1.9.2-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC: Fix socket API being blocked for 10s;
  -	Flush file brfore closing;
  -	Check fflush() return value.


author: kuenking111 <wangkun49@huawei.com> -1:1.8.0.422-b05.4
changelog:
  - Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
  - Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.422-b05.6
changelog:
  - let support-KAE-zip.patch not install libz.so on loongarch64
  - update LoongArch64 port to 8u422
  - fix changelog date error


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.432.b06-1
changelog:
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
  - modified GCC-12-reports-some-compiler-warnings.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
  - add Backport-8057910-G1-BOT-verification-should-not-pass.patch
  - add Backport-8069330-and-adapt-G1GC-related-optimization.patch
  - add SA-redact-support-password.patch


author: liweigang <liweiganga@uniontech.com> - 0.17-3
changelog:
  - add backport-Handle-yet-another-out-of-memory-condition.patch
  - add backport-Issue-857-fix-a-few-places-where-json_tokener-should.patch


author: yueyuankun <yueyuankun@kylinos.cn> - 0.17-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Disallow control characters in strict mode
          Fix the expected output for test_parse
          Fix causing the strict-mode control characters check to incorrectly trigger


author: sunhai <sunhai10@huawei.com> - 0.17-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix the apps/json_parse "-s" (strict) option so it actually does something, and default to non-strict.


author: zhukeqian <zhukeqian1@huawei.com> - 2.1.0-32
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:append readonly option when get pflash cmdline for stratovirt runtime


author: yanglu <yanglu72@h-partners.com> - 006-2
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC:Add crashkernel auto for Arm 
         enable kdump and set default reserve memory 512MB
         fix test failed due to default value change


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-64.0.0.68
changelog:
  - !14106 uacce: some bugfix and cleanup
  - migration: modify dfx error type without VM driver
  - crypto: hisilicon_qm - fix the uacce_alloc return value check
  - crypto: hisilicon_zip - correct the wrong word in the printed information
  - uacce: add mutex for check qfr
  - uacce: add stop_queue to replace put_queue in ioctl
  - uacce: check the qfr address before releasing the qfr
  - uacce: add error number for the unsupported mremap
  - !14117  mm/page_alloc: Separate THP PCP into movable and non-movable categories
  - mm: fix kabi breakage due to struct per_cpu_pages
  - mm/page_alloc: Separate THP PCP into movable and non-movable categories
  - !14120  bpf: sync_linked_regs() must preserve subreg_def
  - bpf: sync_linked_regs() must preserve subreg_def
  - !14128  sched: Optimize the latency of select_task_rq and pick_next_task.
  - sched: Optimize the latency of select_task_rq and pick_next_task.
  - !13991  virtio-fs: introduce multi-queue support
  - virtio-fs: add multi-queue support
  - virtio-fs: limit number of request queues
  - virtiofs: include a newline in sysfs tag
  - virtiofs: emit uevents on filesystem events
  - virtiofs: export filesystem tags through sysfs
  - !14126 [OLK-6.6]perf:Add PMCG platform information for HiSilicon HIP09A
  - ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
  - Revert "perf: Add PMCG platform information for HiSilicon HIP09A"
  - !14103  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
  - nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
  - !13841 Fix livepatch selftest
  - selftests/livepatch: fix selftest execution error
  - !14069 MPTCP Upstream part 23
  - tcp: socket option to check for MPTCP fallback to TCP
  - mptcp: fix typos in comments
  - !13970  LoongArch: fix AVEC related issue
  - drivers/irqchip: Disable pci_irq_limit when using AVEC interrupt controller
  - irqchip/avec: Support AVEC for 3C6000 multi-node machine
  - !13981  LoongArch: backport ptw&set_pte patches from upstream
  - LoongArch: Set initial pte entry with PAGE_GLOBAL for kernel space
  - LoongArch: Improve hardware page table walker
  - LoongArch: Use accessors to page table entries instead of direct dereference
  - LoongArch: Remove superfluous flush_dcache_page() definition
  - !14107 ata: libata-core: Set ATA_QCFLAG_RTF_FILLED in fill_result_tf()
  - ata: libata-core: Set ATA_QCFLAG_RTF_FILLED in fill_result_tf()
  - !14101 [sync] PR-14087: v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
  - drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
  - !14095 ima: Fix violation digests extending issue in virtcca
  - ima: Fix violation digests extending issue in virtcca
  - !14079 v3  irqchip: gic: some bugfix of hip10
  - irqchip/gic-v4.1:Check whether indirect table is supported in allocate_vpe_l1_table
  - KVM: arm64: vgic-v3: Fix a issue of hip10 erratum 162200806
  - irqchip/gic-v3: Exclude GICv4.1 for hip10 erratum 162200803
  - !14085  ocfs2: uncache inode which has failed entering the group
  - ocfs2: uncache inode which has failed entering the group
  - !13837 update patches for sw64 architecture
  - sw64: wrap frequency workaround into standalone functions
  - sw64: remove redudant save_ktp
  - sw64: fix compile warning of smp_callin()
  - sw64: distribute intx interrupts by hose
  - sw64: acpi: remove constraint that cid of boot core must be zero
  - sw64: pci: get register base address from firmware
  - sw64: fix compile warning of do_entUna()
  - sw64: fix save_ktp compatibility for C3
  - sw64: fix PTBR save/restore for hibernation
  - sw64: add syscall pfh_ops
  - sw64: fix broken rdfpcr()
  - sw64: force kernel stack to be 16 bytes aligned
  - sw64: match platform device by acpi method
  - sw64: spi: update spi controller driver
  - sw64: add -fno-sw-unalign-byte to cflags for C4
  - sw64: define cpu_relax() as imb()
  - sw64: fix the .endm in hibernate_asm.S
  - sw64: fix compile error of efi.systab
  - sw64: pci: adjust the maximum number of RC per node
  - sw64: get mclk and external clk from firmware
  - sw64: fix compile error of MMSIZE
  - sw64: acpi: disable ACPI for xuelang
  - sw64: ahci: disable parallel bus scan
  - sw64: redesign run mode setup method
  - sw64: rename static key and related simd libraries
  - sw64: fix secondary cpu bring up bug
  - sw64: irq: fix compile error when PINTC or LPC-INTC is not set
  - sw64: improve the verification logic of DTB
  - sw64: apply new boot params from DTB chosen node
  - sw64: receive new boot params from firmware
  - sw64: setup stackframe at kernel entry point
  - sw64: save and restore CSR_WR_FREGS for SIMD libs
  - sw64: rename copy and set lib functions
  - sw64: rename copy and set lib files
  - sw64: choose lib at compile time
  - sw64: store topology and numa info by each cpu itself
  - sw64: work around suspend for C4
  - sw64: employ trick on regs.pc for specific exception
  - sw64: enable CONFIG_FRAME_POINTER by default for junzhang
  - sw64: fix syscall_fallback() for vdso gettimeofday
  - sw64: dts: add Junzhang
  - sw64: lpc: work around hardware flaws
  - sw64: improve cpu bring up method
  - sw64: introduce new entry framework for C4
  - sw64: irq: update the initial value of nr_irqs
  - sw64: dynamically switch between lib implementation
  - sw64: msi: remove redundant interrupt enables
  - sw64: add unaligned access support for C4 new instructions
  - sw64: acpi: fix missed upper bits of rcid for junzhang
  - sw64: pci: remove duplicate pcie operations
  - sw64: irq: remove unnecessary initialization
  - sw64: acpi: enable generic GSI
  - sw64: irqchip: support ACPI-based interrupt controller initialization
  - sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
  - sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
  - sw64: fix compilation warning
  - sw64: fix kconfig selections
  - sw64: use a new wrap_asid hmcall when asid wraps
  - sw64: rewrite fpcr and swcr conversion
  - sw64: enable hardware denorm by default
  - sw64: add four-socket system support
  - sw64: add a new kernel parameter to override mclk
  - sw64: improve sw64_printk()
  - sw64: msi: fix bugs in multi-msi interrupts allocation and release
  - sw64: pci: change pci transaction ordering rule settings
  - sw64: irqchip: fix virtual PINTC not working properly
  - sw64: dts: improve properties for PINTC
  - sw64: dts: improve properties for LPC-INTC
  - sw64: dts: fix interrupt related properties for GPIO
  - sw64: dts: add chosen node
  - sw64: dts: fix properties for spi controller device node
  - sw64: acpi: fix coding style and typos
  - sw64: fix rd_f compatibility issue for C4
  - sw64: refactor device interrupt domain
  - sw64: fix macro definition compilation error
  - USB: xHCI: fix resume issue of some ZHAOXIN hosts
  - USB: Fix ehci infinite suspend-resume loop issue in zhaoxin
  - sw64: pci: fix compile error when CONFIG_ACPI=n
  - sw64: smp: suppress function setup_smp() when ACPI enabled
  - sw64: acpi: parse SW CINTC for SMP initialization
  - sw64: acpi: support MADT entry print for SW CINTC
  - sw64: acpi: add ACPI-style structures for SW CINTC
  - sw64: smp: add new structure to record rcid information
  - sw64: smp: modify function smp_rcb_init() to receive base address
  - sw64: pci: synchronize the OEM table ID of MCFG with BIOS
  - sw64: iommu: fix the bug when vfio_iommu unpin pages
  - sw64: use rvpcr() to setup run mode
  - sw64: kgdb: add single-step debug support
  - sw64: fix lockdep error
  - sw64: perf: do all event checks in sw64_pmu_event_init()
  - sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
  - sw64: pci: export some pci functions
  - sw64: uapi: fix a compile error for headers_install
  - sw64: perf: hide hardware performance events in guest os
  - sw64: fix hugepage support
  - sw64: extern vdso_start and vdso_end as char[]
  - sw64: remove useless current_policy
  - sw64: add arch-specific SYM_END definition
  - !13151 [OLK-6.6] arm64: errata: Unify and expand speculative SSBS workaround
  - openeuler_defconfig: Enable CONFIG_ARM64_ERRATUM_3194386 by default
  - arm64: Subscribe Microsoft Azure Cobalt 100 to erratum 3194386
  - arm64: errata: Expand speculative SSBS workaround once more
  - arm64: errata: Expand speculative SSBS workaround (again)
  - arm64: errata: Expand speculative SSBS workaround
  - arm64: errata: Unify speculative SSBS errata logic
  - arm64: errata: Add workaround for Arm errata 3194386 and 3312417


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-66.0.0.70
changelog:
  - !13846 [OLK-6.6] cpufreq: acpi-cpufreq: Zhaoxin: fix incorrect max-freq issue
  - cpufreq: acpi-cpufreq: Zhaoxin: fix incorrect max-freq issue
  - !9184 [OLK-6.6] i2c: smbus: Add support for Zhaoxin SMBUS controller
  - configs: Add Zhaoxin i2c smbus items in openeuler_config
  - i2c: smbus: Add support for Zhaoxin SMBUS controller
  - !9223 [OLK-6.6] x86/hpet: Read HPET directly if panic in progress
  - x86/hpet: Read HPET directly if panic in progress
  - !14088 ACPI: CPPC: Introduce new EPP capabilities and update auto selection functions
  - ACPI: CPPC: Introduce new EPP capabilities and update auto selection functions
  - !14112  xfs: Fix data overflow
  - xfs: Fix data overflow in xfs_mod_fdblocks()
  - Revert "xfs: split xfs_mod_freecounter"
  - !14099 [6.6] [Feature] : update patches for sw64 architecture
  - sw64: pci: fix compile error when CONFIG_PCI_MSI=n
  - sw64: pci: fix unable to get node ID when numa_off is set
  - sw64: add uapi reg.h
  - sw64: pciehp: remove useless code
  - sw64: dts: support online-capable property for cpu device node
  - sw64: kvm: resolve a compile warning
  - sw64: pciehp: update code
  - sw64: kvm: fix mmio GPA for C4
  - sw64: handle null MSI irq in guest os
  - sw64: fix guest memory and cpu hotplug function
  - sw64: kvm: walk host page tables to find THP mapping size
  - sw64: kvm: convert to the gfn-based MMU notifier callbacks
  - sw64: kvm: rename mmu_notifier_* to mmu_invalidate_*
  - sw64: kvm: fix compiler errors caused by mismatched parameters
  - sw64: kvm: use get_page() instead of kvm_get_pfn()
  - sw64: kvm: fix the handling when the live migration fails
  - sw64: kvm: fix NULL poniter access in kvm_arch_prepare_memory_region
  - sw64: kvm: fix link error with CONFIG_KVM=m
  - sw64: kvm: fix build failure about KVM
  - sw64: add dependency for sunway-ged driver
  - sw64: fix compile error with CONFIG_SUNWAY_GED=m
  - sw64: remove unused sunway_memory_get_meminfo()
  - sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
  - sw64: add cpu hotplug support for C4 guest
  - sw64: kvm: support up to 256 vCPUs for C4
  - sw64: kvm: fix inconsistent vcpucb of C4
  - sw64: kvm: implement kvm_arch_set_irq_inatomic()
  - sw64: fix guest send ipi target
  - sw64: kvm: add numa support for memory hotplug
  - sw64: kvm: fix bug when vcpu disable irq
  - sw64: kvm: acpi: match sunway_ged by acpi method
  - sw64: kvm: use generic kvm mmu memory caches
  - sw64: kvm: remove some unused codes
  - sw64: kvm: fix pmd_trans_cont
  - sw64: kvm: fix size of struct kvm_regs for C3B
  - sw64: kvm: add the member of the vcpucb structure
  - sw64: kvm: fix the check for THP
  - sw64: kvm: fix page walk error of unmap_apt_range()
  - sw64: redesign struct kvm_regs for C4
  - sw64: kvm: fix live migration bug
  - sw64: kvm: fix APT fault handler
  - sw64: kvm: fix unmap_apt_{ptes, pmds}
  - sw64: kvm: fix clock sync of CORE4 live migration
  - sw64: kvm: delete memory hotplug codes for CORE3B
  - sw64: add missing c4 legacy power management code
  - sw64: kvm: scale up the range of target vcpu parsed by hypervisor
  - sw64: kvm: fix return value of vmem_mmap
  - sw64: kvm: add trace kvm function
  - sw64: fix rc resource setup
  - sw64: 6.6 update: sunway_pciehp_reset_slot()
  - sw64: 6.6 update: arch_remove_memory()
  - sw64: bypass sunway pcie hotplug driver in non-physical scenario
  - sw64: defconfig: update defconfig for kata-containers
  - sw64: add HARDLOCKUP_DETECTOR support
  - sw64: fix bugs in decreasing frequency
  - sw64: add NMI support
  - sw64: add CSR_CAUSE into pt_regs
  - sw64: optimize the code in do_entInt()
  - sw64: seperate IRQ_MSI configs for sub-architectures
  - sw64: handle null MSI irq
  - sw64: fix a compilation warning
  - sw64: fix a base address of msiaddr register
  - sw64: fix some S3 CSRs problems for C4
  - sw64: fix io resource remapping
  - sw64: amdgpu/radeon: correct low-level mmio memset/memcpy direct calls
  - sw64: fix pci resource assignment bug
  - sw64: fix MSI compilation warnings
  - sw64: 6.6 io.h fixup
  - sw64: iommu: support SW64 IOMMU on 6.6 kernel
  - sw64: fix msi interrupt for guest os
  - sw64: msi: update code
  - sw64: gpio: fix compile error of sunway_gpio_add_port
  - sw64: fdt: map physical node ID to logical node ID
  - sw64: fix regs.pc on single-step with ptrace
  - sw64: modify some interrupt target core to logic 0 core
  - sw64: fix sw64_is_fake_mcount() of recordmcount
  - sw64: remove some unused module init/exit/license
  - sw64: numa: support NUMA initialization based on device tree
  - sw64: smp: support SMP initialization based on device tree
  - sw64: dtb: disable built-in DTB for junzhang
  - sw64: ata: add ata_hrst_delay cmdline option
  - sw64: kconfig: add I2C and SPI defconfig for junzhang
  - sw64: kconfig: set default y for GPIO if ACPI enabled
  - sw64: fix a bug in gpio-sunway.c
  - sw64: pci: use readq/writeq to read/write RC and PIU IO registers
  - sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
  - sw64: pciehp: add pcie hotplug driver support for C4
  - sw64: remove redundant intx code
  - sw64: irq: support interrupt for virtual GPIO
  - sw64: acpi: enable ACPI by default
  - sw64: mm: fix mem=xxx command line invalid in some cases
  - sw64: use generic page_is_ram()
  - sw64: mm: take memory information from firmware
  - sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
  - sw64: fix typo in gpio-sunway
  - sw64: fix compile warning of handle_pci_msi_interrupt
  - sw64: fix usage of __add_memory() in sunway-ged driver
  - sw64: change FORCE_MAX_ZONEORDER default value
  - sw64: perf: fix event check order


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-67.0.0.71
changelog:
  - !14144 [6.6] [Feature] : update patches for sw64 architecture
  - sw64: fix compile errors
  - sw64: work around gcc bugs with 'asm goto' with output
  - libbpf: add sw64 support
  - sw64: rename mmap protection_map
  - sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
  - sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
  - sw64 bpf: add BPF_NOSPEC jit
  - sw64: rename _PFN_BITS to __PFN_BITS
  - sw64: update defconfig
  - sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
  - sw64: implementing VDSO with generic code
  - sw64: irqchip: fix irq_enable/disable callback for MCU controller
  - sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
  - sw64: acpi: support reset and S5
  - sw64: kvm: use vma_lookup() instead of find_vma_intersection()
  - sw64: refactor reset routines with new API
  - sw64: kvm: remove unused kvm_arch_flush_remote_tlbs_memslot()
  - sw64: kvm: optimize the calling and implementation of functions in mmu.c
  - sw64: irqchip: remove fallback after kzalloc_node()
  - sw64: irqchip: improve intx implementation
  - sw64: pci: remove function fix_jm585_reset()
  - sw64: fix mmap protection_map
  - sw64: show CPU feature UNA in /proc/cpuinfo
  - sw64: fix the error of cpufreq update
  - sw64: fix compilation issues on match.c
  - sw64: mm: fix PFN of PMDs for 512M hugepage
  - sw64: kvm: fix an error when unmapping 512M hugepages
  - sw64: modify sys_pfh_ops
  - sw64: fix set_huge_pte_at for C4
  - sw64: add the missed clear_flush()
  - sw64: fix compilation issues
  - sw64: add arch_hugetlb_valid_size for C4
  - sw64: kvm: adjust interrupt priority for guest
  - sw64: compatible with suspend implementation
  - sw64: add junzhang_v1/2/3_key
  - sw64: fix numa setup when acpi is disabled
  - sw64: fix setup_mem_size()
  - sw64: fix the register bug in do_entUna
  - sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
  - sw64: select different MUX to read cpu frequency
  - sw64: lpc: fix ast2400 driver error for C4
  - sw64: improve lib performance for new archs
  - sw64: remove unnecessary parameter passing
  - sw64: add __vdso_getcpu support
  - sw64: kexec: fix kernel crashdump bugs
  - sw64: bpf: fix BPF_CALL address
  - sw64: fix irq work
  - sw64: reset the CSR:PTBR_USR
  - sw64: kvm: add KVM_CAP_READONLY_MEM support
  - sw64: pci: fix incorrect pointer of struct pci_controller
  - sw64: perf: add core4 pmu support
  - sw64: mm: support fdt memory reservation
  - sw64: provide a cleaner raw_smp_processor_id()
  - sw64: remove deprecated annotation in irq.h
  - sw64: introduce a fine-grained intx mask/unmask system
  - sw64: move handle_intx() into pci-intx handle
  - sw64: iommu: fix NULL hose check
  - sw64: fix judgements about legacy pci support
  - sw64: cacheinfo: give preference to cache information from PPTT table
  - sw64: cache: fix shared_cpu_map of cacheinfo
  - sw64: cpu: refactor cpuinfo related code
  - sw64: cache: refactor cacheinfo related code
  - sw64: cpu: move cpu related code to the newly created cpu.c
  - sw64: topology: support initializing topology via DT or ACPI
  - sw64: spi: convert SPI_MASTER_GPIO_SS to SPI_CONTROLLER_GPIO_SS
  - sw64: defconfig: fix SPI related configuration items
  - sw64: irqchip: add version 3 for PINTC
  - sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
  - sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
  - sw64: clk: further fix the clock frequency of SPI and I2C
  - sw64: smp: fix function fdt_setup_smp()
  - Revert "sw64: fdt: map physical node ID to logical node ID"
  - sw64: pci: remove legacy io reservation
  - sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
  - sw64: 6.6 upgrade
  - sw64: mm: remove legacy memory detection for JunZhang platform
  - sw64: iommu: improve iommu initialization
  - sw64: clk: fix the clock frequency of SPI and I2C
  - sw64: fix a bug in huge_pte_offset()
  - sw64: pci: rename some functions
  - sw64: pci: support PCIe controller driver based on device tree
  - sw64: remove sw64_io related functions
  - sw64: platform: add misc platform driver
  - sw64: add basic frequency scaling support for JunZhang
  - sw64: remove redundant link options
  - sw64: kvm: enable ring-based dirty page tracking
  - sw64: kvm: fix invalid memslot flags checking during dirty logging
  - sw64: pciehp: fix compile error when CONFIG_PCIE_DPC=y
  - sw64: kvm: don't retrieve memory slot again in page fault handler
  - sw64: kexec: remove code for compatibility with builtin DTB
  - sw64: smp: allow NR_CPUS less than the number detected by firmware
  - sw64: fix C4 INTx configuration
  - !14166  Align per_cpu osq_node to 64 Byte size cacheline
  - Align per_cpu osq_node to 64 Byte size cacheline
  - !14130 [virtcca] delete unused interfaces: tmi_data_destroy and tmi_ttt_unmap_range
  - virtCCA Feature: remove unused interfaces and add cpumask check
  - !14152  crypto: hisilicon/sec2 - the aead algorithm of sec2 is fixed.
  - crypto: hisilicon/trng - support to obtain random numbers from soft algorithm
  - crypto: hisilicon/sec2 - fix for aead invalid authsize
  - crypto: hisilicon/sec2 - fix for aead icv error
  - crypto: hisilicon/qm - disable error report before flr
  - !13824 mm: some mTHPs improve
  - mm: fix docs for the kernel parameter ``thp_anon=``
  - mm: count the number of anonymous THPs per size
  - mm: tidy up shmem mTHP controls and stats
  - mm: cleanup count_mthp_stat() definition
  - mm: huge_mm: fix undefined reference to `mthp_stats' for CONFIG_SYSFS=n
  - mm: override mTHP "enabled" defaults at kernel cmdline
  - !10305 [OLK-6.6] Backport bugfixes for mm LRU from Linux upstream
  - mm: vmscan.c: fix OOM on swap stress test
  - mm/gup: clear the LRU flag of a page before adding to LRU batch


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-68.0.0.72
changelog:
  - !14161  drm/rockchip: vop: Fix a dereferenced before check warning
  - drm/rockchip: vop: Fix a dereferenced before check warning
  - !14143 KVM:arm64:Add a kvm parameter to control guest wfi trapping
  - KVM:arm64:Add a kvm parameter to control guest wfi trapping
  - !14177 v2  kabi: restrict the KABI fix to a specific architecture and dist
  - kabi: enable KABI_COMPAT series by default on x86_64 & ARM64
  - kabi: restrict the KABI fix to a specific architecture and dist
  - !14151  CVE-2024-53142
  - initramfs: avoid filename buffer overrun
  - !14183  mm/dynamic_pool: use __GENKSYMS__ to revert the kabi change
  - mm/dynamic_pool: use __GENKSYMS__ to revert the kabi change
  - !13999 add iommu support for loongarch
  - LoongArch: add iommu support
  - LoongArch: Fix cpu hotplug issue
  - !13998 Synchronization with patch for loongarch virtualization
  - LoongArch: Fix AP booting issue in VM mode
  - LoongArch: KVM: Remove unnecessary CSR register saving during enter guest
  - LoongArch: KVM: Remove undefined a6 argument comment for kvm_hypercall()
  - LoongArch: KVM: Add vcpu mapping from physical cpuid
  - LoongArch: KVM: Remove unnecessary definition of KVM_PRIVATE_MEM_SLOTS
  - LoongArch: KVM: Add cpucfg area for kvm hypervisor
  - LoongArch: KVM: Add KVM hypercalls documentation for LoongArch
  - LoongArch: KVM: Implement function kvm_para_has_feature()
  - LoongArch: KVM: Enable paravirt feature control from VMM
  - LoongArch: KVM: Add PMU support for guest
  - LoongArch: KVM: Add vm migration support for LBT registers
  - LoongArch: KVM: Add Binary Translation extension support
  - LoongArch: KVM: Add VM feature detection function
  - LoongArch: Revert qspinlock to test-and-set simple lock on VM
  - LoongArch: KVM: Invalidate guest steal time address on vCPU reset
  - KVM: Discard zero mask with function kvm_dirty_ring_reset
  - perf kvm: Add kvm-stat for loongarch64
  - LoongArch: KVM: Add PV steal time support in guest side
  - LoongArch: KVM: Add PV steal time support in host side
  - LoongArch: KVM: always make pte young in page map's fast path
  - LoongArch: KVM: Mark page accessed and dirty with page ref added
  - LoongArch: KVM: Add dirty bitmap initially all set support
  - LoongArch: KVM: Add memory barrier before update pmd entry
  - LoongArch: KVM: Discard dirty page tracking on readonly memslot
  - LoongArch: KVM: Select huge page only if secondary mmu supports it
  - LoongArch: KVM: Delay secondary mmu tlb flush until guest entry
  - LoongArch: KVM: Sync pending interrupt when getting ESTAT from user mode
  - LoongArch: KVM: Add mmio trace events support
  - LoongArch: KVM: Add software breakpoint support
  - LoongArch: KVM: Add PV IPI support on guest side
  - LoongArch: KVM: Add PV IPI support on host side
  - !14163  LeapIOraid： Remove Unnecessary header file references: version.h
  - LeapIOraid： Remove Unnecessary header file references: version.h
  - !13997 Add interrupt controller emulation in the kernel
  - LoongArch: KVM: Add irqfd support
  - LoongArch: KVM: Add PCHPIC user mode read and write functions
  - LoongArch: KVM: Add PCHPIC read and write functions
  - LoongArch: KVM: Add PCHPIC device support
  - LoongArch: KVM: Add EXTIOI user mode read and write functions
  - LoongArch: KVM: Add EXTIOI read and write functions
  - LoongArch: KVM: Add EXTIOI device support
  - LoongArch: KVM: Add IPI user mode read and write function
  - LoongArch: KVM: Add IPI read and write function
  - LoongArch: KVM: Add IPI device support
  - LoongArch: KVM: Add iocsr and mmio bus simulation in kernel
  - !14111  LeapIOraid： Fix the compilation warnings in LeapIOraid driver in loongarch64
  - LeapIOraid： Fix the compilation warnings in LeapIOraid driver in loongarch64
  - !14162  LeapIOraid： Fix too many invalid interruptes in arm64
  - LeapIOraid： Fix too many invalid interruptes in arm64
  - !11509 [OLK-6.6] Enhanced Hygon processor's processing capabilities for large memory copying
  - mm: Enhanced copy capabilities for Hygon processor
  - !14155  drm/amd/display: Adjust VSDB parser for replay feature
  - drm/amd/display: Adjust VSDB parser for replay feature


author: Xie XiuQi <xiexiuqi@huawei.com> - 6.6.0-68.0.0.73
changelog:
  - kabi: add kabi_ext1 list for checking
  - check-kabi: fix kabi check failed when no namespace
  - kernel.spec: fix with_kabichk on non-arm64 platform


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-69.0.0.75
changelog:
  - !14221  KABI for cgroup
  - cgroup: add more reserve kabi
  - cgroup/cpuset: Prevent UAF in proc_cpuset_show()
  - cgroup: Move rcu_head up near the top of cgroup_root
  - cgroup: Make operations on the cgroup root_list RCU safe
  - Revert "cgroup: fix uaf when proc_cpuset_show"
  - !14220  fs: Allow fine-grained control of folio sizes
  - fs: Allow fine-grained control of folio sizes
  - !12108  include/msi: modify kabi size of msi_desc
  - include/msi: modify kabi size of msi_desc
  - !14195 [OLK-6.6]Hygon: Enable CONFIG_CMA by default on X86 architecture
  - x86/Kconfig: Select CONFIG_CMA if CONFIG_HYGON_CSV=y
  - x86/config: Enable CONFIG_CMA by default in openeuler_defconfig
  - !14215  iommu: Reserve extra KABI entry for struct iopf_group
  - iommu: Reserve extra KABI entry for struct iopf_group
  - !14223 v2  kabi: net: reserve space for xdp subsystem related structure
  - kabi: net: reserve space for xdp subsystem related structure
  - !14224  net/kabi: Reserve space for net structures
  - net/kabi: Reserve space for net structures
  - !14236 v2  statx: kabi: KABI reservation for kstat
  - statx: kabi: KABI reservation for kstat
  - !14218  seq_file: kabi: KABI reservation for seq_file
  - seq_file: kabi: KABI reservation for seq_file
  - !14203  tcp: Fix use-after-free of nreq in reqsk_timer_handler().
  - tcp: Fix use-after-free of nreq in reqsk_timer_handler().
  - !14191  nfs: fix the loss of superblock's initialized flags
  - nfs: fix the loss of superblock's initialized flags


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-72.0.0.76
changelog:
  - !14213 v2  bpf: Add kabi reserve padding for uapi struct bpf_link_info
  - bpf: Add kabi reserve padding for uapi struct bpf_link_info
  - !14225  kabi OLK-6.6 reverve space
  - kabi: reserve space for uprobes.h
  - kabi: reserve space for internal.h
  - kabi: reserve space for perf_event.h
  - !14259 【OLK-6.6】 Hygon  family 18h model 6h~fh L3 PMU config incorrect issue fix
  - perf/x86/uncore: Correct the L3 PMU config for Hygon processors
  - !14251  kabi reserver space for i2c
  - kabi reserver space for i2c
  - !14258 v2  scsi: hisi_sas: Enable force phy when SATA disk directly connected
  - scsi: hisi_sas: Enable force phy when SATA disk directly connected


author: chenguokai <chenguokai123@live.com> - 2.0.26-9
changelog:
  - Fix multiple issues of riscv image format & initrd support
  - Rebase and test by Mingzheng Xing <xingmingzheng@iscas.ac.cn>


author: wangzhiqiang <wangzhiqiang95@huawei.com> - 0.9.5-1
changelog:
  - upgrade version to 0.9.5:
    - add requires libmount and libmount-devel
    - add multipath.conf multipathc and libmpathutil.so
    - delete README.alua


author: EibzChan <chenbingzhao@huawei.com> - 608-2
changelog:
  - Type:test enhancement
  - ID:NA
  - SUG:NA
  - DESC:backport patches from upstream to enable make check.
         backport-makecheck-0000-add-lesstest.patch
         backport-makecheck-0001-Work-on-lesstest-remove-rstat-add-LESS_DUMP_CHAR.patch
         backport-makecheck-0002-lesstest-correctly-handle-less-exit-during-run_inter.patch
         backport-makecheck-0003-Some-runtest-tweaks.patch
         backport-makecheck-0004-Rearrange-signal-handling-a-little.patch
         backport-makecheck-0005-Don-t-setup_term-in-test-mode.patch
         backport-makecheck-0006-Compile-fixes.patch
         backport-makecheck-0007-Pass-less-specific-env-variables-to-lesstest-get-rid.patch
         backport-makecheck-0008-Move-terminal-init-deinit-to-run_interactive-since.patch
         backport-makecheck-0009-Fix-bug-in-setting-env-vars-from-lt-file-in-test-mod.patch
         backport-makecheck-0010-Make-runtest-work.patch
         backport-makecheck-0011-lesstest-in-interactive-mode-call-setup_term-before-.patch
         backport-makecheck-0012-lesstest-log-LESS_TERMCAP_-vars-so-termcap-keys-etc.patch
         backport-makecheck-0013-lesstest-accommodate-stupid-termcap-design-where-the.patch
         backport-makecheck-0014-lesstest-maketest-should-not-overwrite-existing-lt-f.patch
         backport-makecheck-0015-lesstest-add-O-option-to-maketest-if-textfile-is-not.patch
         backport-makecheck-0016-lesstest-add-O-option-to-lesstest.patch
         backport-makecheck-0017-lesstest-handle-colored-text-with-less-R.patch
         backport-makecheck-0018-lesstest-add-e-option.patch
         backport-makecheck-0019-lesstest-split-display_screen-into-display_screen_de.patch
         backport-makecheck-0020-Add-E-option.patch
         backport-makecheck-0021-Consistent-style.patch
         backport-makecheck-0022-Obsolete-file.patch
         backport-makecheck-0023-Tuesday-style.patch
         backport-makecheck-0024-Tuesday-style.patch
         backport-makecheck-0025-lesstest-add-support-for-combining-and-composing-cha.patch
         backport-makecheck-0026-Minor-runtest-output-tweaks.patch
         backport-makecheck-0027-lesstest-lt_screen-should-clear-param-stack-after-pr.patch
         backport-makecheck-0028-Handle-fg-and-bg-colors.patch
         backport-makecheck-0029-Have-lt_screen-use-ANSI-sequences-for-bold-underline.patch
         backport-makecheck-0030-ESC-m-should-clear-attributes-as-well-as-colors.patch
         backport-makecheck-0031-lesskey-make-lt_screen-treat-ESC-0m-like-ESC-m.patch
         backport-makecheck-0032-Store-2-char-hex-values-in-log-file-rather-than-bina.patch
         backport-makecheck-0033-lesstest-Make-display_screen_debug-write-to-stderr-n.patch
         backport-makecheck-0034-lesstest-Clear-screen-at-end-of-maketest-in-case-ter.patch
         backport-makecheck-0035-lesstest-Verify-that-the-less-binary-is-built-with-D.patch
         backport-makecheck-0036-Add-check-target-to-Makefile-to-run-lesstest.patch
         backport-makecheck-0037-Don-t-set-LESS_TERMCAP_xx-environment-vars-from-term.patch
         backport-makecheck-0038-lesstest-Remove-unnecessary-exit_all_modes-field-fro.patch
         backport-makecheck-0039-lesstest-Add-some-initial-lt-files.patch
         backport-makecheck-0040-lesstest-Remove-empty-lt-file.patch
         backport-makecheck-0041-lesstest-Add-a-couple-more-lt-files.patch
         backport-makecheck-0042-Make-make-check-work-regardless-of-directory-where-l.patch


author: laokz <zhangkai@iscas.ac.cn> - 0.0.1-7
changelog:
  - Type:Enhancement
  - ID:NA
  - SUG:NA
  - DESC: Add riscv64 support. Patches are from nix v0.17.0 and v0.18.0.
          Add protobuf-compiler to avoid patching big binary for prost-build.


author: xuxuepeng <xuxuepeng1@huawei.com> - 0.0.1-8
changelog:
  - Type:Enhancement
  - ID:NA
  - SUG:NA
  - DESC: Simplify Store api, remove unnecessary validation
          Check if a path is abstract before connection
          Add vsock support.


author: chenyanpanHW <chenyanpan@huawei.com> - 1.1.3-3
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/0003-Add-getentropy-emulation-through-syscall.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: zhangyao <zhangyao108@huawei.com> - 2.39.1-15
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: backport community patches
          backport-sys-utils-setpriv-fix-potential-memory-leak.patch
          backport-sys-utils-save_adjtime-fix-memory-leak.patch
          backport-wall-fix-possible-memory-leak.patch
          backport-suL-fix-use-after-free-on-error.patch


author: wangzhiqiang <swangzhiqiang95@huawei.com> - 3.0.4-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Add BDPluginSpec constructor and use it in plugin_specs_from_names


author: zhangmingyi <zhangmingyi5@huawei.com> -2:0.8.1-8
changelog:
  - backport patches from upstream:
    backport-libbpf-disassociate-section-handler-on-explicit-bpf_.patch
    backport-libbpf-Use-correct-return-pointer-in-attach_raw_tp.patch
    backport-libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:0.8.1-10
changelog:
  - backport patches from upstream:
    backport-libbpf-Ensure-FD-3-during-bpf_map__reuse_fd.patch
    backport-libbpf-Ensure-libbpf-always-opens-files-with-O_CLOEX.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:0.8.1-11
changelog:
  - backport patches from upstream:
    backport-libbpf-Fix-realloc-API-handling-in-zero-sized-edge-cases.patch
    backport-libbpf-Set-close-on-exec-flag-on-gzopen.patch
    backport-libbpf-Fix-is_pow_of_2.patch
    backport-libbpf-make-RINGBUF-map-size-adjustments-more-eagerly.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:1.2.2-2
changelog:
  - backport patches from upstream:
    backport-libbpf-Fix-NULL-pointer-dereference-in_bpf_object__c.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:1.2.2-4
changelog:
  - backport patch from upstream:
    backport-libbpf-Avoid-uninitialized-value-in-BPF_CORE_READ_BI.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:1.2.2-5
changelog:
  - backport patch from upstream:
    backport-libbpf-Add-NULL-checks-to-bpf_object__prev_map,next_.patch
    backport-libbpf-Apply-map_set_def_max_entries-for-inner_maps-.patch


author: yanglongkang <yanglongkang@h-partners.com> - 2.69-3
changelog:
  - backport upstream patches:
    getpcaps: fix program name in help message
    Stop using _pam_overwrite() in pam_cap.c


author: chenyanpanHW <chenyanpan@huawei.com> - 2.1.0-3
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/backport-correct-realpath-test-failure.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/0001-fix-Werror-format-security.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: chenhaixing <chenhaixing@huawei.com> - 0.70.2-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:libdnf:Avoid reinstalling installonly packages marked for ERASE
                Fix utimes error message in dnf-repo
                Do not download repository if our local cache is up to date in dnf-repo
                python bindings:Load all modules with RTLD_GLOBAL


author: doupengda <doupengda@loongson.cn> 1.0.1-7
changelog:
  - update config.guess and config.sub
  - fix SOURCE1 file autoconf.h '__loongarch64__' to '__loongarch64'


author: yuanchao <1050706328@qq.com> - 2.1.12-13
changelog:
  - Fix function undeclared,incompatible pointer and parameter lack in 'add-testcases-for-event.c-apis.patch',support clang build


author: Yang Yanchao <yangyanchao6@huawei.com> - 0.1-3
changelog:
  - Check the return ptr of the malloc[#I7YV2X]
    add hnid in gmemPrefetch [#I7XQMW]
    free userData in stream to avoid async operations accessing illeagal address[#I7Z2RF]


author: yanglu <yanglu72@h-partners.com> - 3.0.17-2
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:avoid crashing in icalcomponent_normalize
         fix a memleak in icalcomponent_normalize


author: yixiangzhike <yixiangzhike007@163.com> - 1.4.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:refix the failure of building with cppcheck>=2.11 by using upstream patch


author: yixiangzhike <yixiangzhike007@163.com> - 1.6.4-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch to fix possible uninitialized variable


author: Hu Bin <hubin73@huawei.com> - 0.1.3-10
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:add libmetalink testcases for api and error handling, fix automake error


author: Hu Bin <hubin73@huawei.com> - 0.1.3-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport patches to fix NULL pointer dereference and memory leak bug


author: shechenglong <shechenglong@xfusion.com> - 25.0.3-17
changelog:
  - DESC: move group creation into pre section rather than post section
          change requires into meta dependency for its actual use


author: Funda Wang <fundawang@yeah.net> - 25.0.3-22
changelog:
  - fix CVE-2024-36620, CVE-2024-36621, CVE-2024-36623
  - reorganize patches so that they could be applied automatically


author: chengyechun <chengyechun1@huawei.com> - 3.7.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:prevent segfault in af_request_type
         fix bridge info parsing


author: Weifeng Su <suweifeng1@huawe.com> - 1.8-1
changelog:
  - Upgrade to version 1.8
    -Support added for Flexible Data Placement(TP4146)
    -Add support for Persistent Discovery Controllers
    -Replaced the libsystemd dependency with libdbus
    -A parser for the NBFT table
    -Ignoring fabric connect attempts if the execution context doesn't match
    -support for TP8018
    -use sysfs only for topology scan
    -auto cleanup for resources
    -buf fixed and clean code


author: chenyanpanHW <chenyanpan@huawei.com> - 0.16-2
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/0000-libpciaccess-rom-size.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/0001-libpciaccess-add-sw64.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yixiangzhike <yixiangzhike007@163.com> - 1.4.4-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:change the files order in patch file fix-doc-about-difok.patch


author: yinsist <jianhui.oerv@isrc.iscas.ac.cn> - 0.20.5-2
changelog:
  - Valgrind does not support certain architectures like RISC-V, Before depending on Valgrind, first check if Valgrind supports the architecture


author: yuanchao <1050706328@qq.com> - 0.20.5-3
changelog:
  - fix `incompatible function pointer types passing`errors in test-vala-unstable.vala and test-vala-lang.vala


author: xinghe <xinghe2@h-partners.com> - 4.18.5-2
changelog:
  - Type:cves
  - ID:CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670
  - SUG:NA
  - DESC:fix CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670


author: liying <liying_1@chinatelecom.cn> - 1.0.31-3
changelog:
  - Marked unimplemented dither enums in the header file as such.
  - Fix typo
  - Fix memory leak in caf_read_header


author: zhangjun<zhangjun@kylinos.cn> - 0.7.20-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memory leak when using testsolv to execute cases 
         Fix segfault on conflict resolution when using bindings


author: xinghe <xinghe2@h-partners.com> - 2.74.3-4
changelog:
  - Type:cves
  - ID:CVE-2024-52530 CVE-2024-52531 CVE-2024-52532
  - SUG:NA
  - DESC:fix CVE-2024-52530 CVE-2024-52531 CVE-2024-52532


author: renmingshuai <renmingshuai@huawei.com> - 0.10.4-2
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:config: Escape brackets in ProxyCommand build from ProxyJump
         packet: do not enqueue outgoing packets after sending


author: Chenxi Mao <chenxi.mao@suse.com> - 0.10.4-3
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Backport patches to fix build error if compiler switch to clang.


author: renmingshuai <renmingshuai@huawei.com> - 0.10.5-2
changelog:
  - Type:CVE
  - Id:CVE-2023-6004,CVE-2023-48795,CVE-2023-6918
  - SUG:NA
  - DESC:fix CVE-2023-6004,CVE-2023-48795 and CVE-2023-6918


author: yueyuankun<yueyuankun@kylinos.cn> - 1.11.0-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add patch to work around strict permissions issues for sshd tests


author: laokz <zhangkai@iscas.ac.cn> - 1.9.6-2
changelog:
  - make with_mem_leak_test option following i386 i486 i586 i686 pentium3 pentium4 athlon geode x86_64 armv3l armv4b armv4l armv4tl armv5tl armv5tel armv5tejl armv6l armv6hl armv7l armv7hl armv7hnl armv8l armv8hl armv8hnl armv8hcnl aarch64 ppc64le s390x


author: chenyanpanHW <chenyanpan@huawei.com> - 1.1.1-26
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/Fix-pp_sharp_mod-calculation.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/examples-fix-underlinking.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/examples-png_sizeof-no-longer-available-since-libpng.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


author: yezengruan <yezengruan@huawei.com> - 0.7.3-7
changelog:
  - tpm2: Reset TPM2B buffer sizes after test fails for valid buffer size
  - tpm2: Add maxSize parameter to TPM2B_Marshal for sanity checks
  - tpm2: Restore original value if unmarsalled value was illegal
  - fix CVE-2021-3623


author: chenziyang <chenziyang4@huawei.com> - 2:1.6.2-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch to fix failed run-ptrace-mapper testcase


author: chenyanpanHW <chenyanpan@huawei.com> - 1:0.1.5-18
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/0000-Link-with-znodelete-to-disallow-unloading.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: JiaboFeng <fengjiabo1@huawei.com> - 9.10.0-5
changelog:
  - hotpatch: if hotpatch_path not in qemu.conf,the hotpatch doesn't antoload
  - remote: check for negative array lengths before allocation
  - Fix off-by-one error in udevListInterfacesByStatus
  - Fix warnings found by clang
  - hotpatch: virsh support autoload mode
  - domain: add logs for virDomainHotpatchManage
  - hotpatch: check vm id and pid before using hotpatch api
  - hotpatch: implement hotpatch virsh api
  - hotpatch: introduce hotpatch async job flag
  - hotpatch: Implement qemuDomainHotpatchManage
  - Hotpatch: introduce DomainHotpatchManage API


author: JiaboFeng <fengjiabo1@huawei.com> - 9.10.0-14
changelog:
  - Bugfix: Enhance the capability to trace the shutdown status of large VMS
  - conf: qemu: support provide inject secret for Hygon CSV
  - conf: qemu: add libvirt support reuse id for hygon CSV
  - Automatically unbind all devices' driver under same root port and bind to vfio-pci in the context of CVM.
  - Consistent coding style with opensource.
  - build: Make daemons depend on generated *_protocol.[ch]
  - Add the get tmm memory info API into libvirt-host. Also should add the RPC calls into libvirtd for API calling.
  - Add cvm parameter into the type of LaunchSecurity which is a optional filed for libvirt xml


author: chenyanpanHW <chenyanpan@huawei.com> - 0.9.27-2
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/lmdb-make.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/lmdb-s390-check.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/support-specify-cc.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: xinghe <xinghe2@h-partners.com> - 34.1-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ensure that the src package contains the loongson and sw patches


author: liuchao <liuchao173@huawei.com> - 2.13.7-1
changelog:
  - Update to 2.13.7:
    - fix: invoke MKDIR_P before changing directories
    - fix: -Wsingle-bit-bitfield-constant-conversion with clang16
    - fix: clean java inner class files in examples
    - Introduce sync vs unsync enablers
    - Fix: misaligned urcu reader accesses
    - ustfork: Fix warning about volatile qualifier
    - ustfork: Fix possible race conditions
    - Fix: tracepoint: Remove trailing \ at the end of macro
    - fix: python agent: use stdlib distutils when setuptools is installed
    - fix: python agent: install on Debian python >= 3.10
    - fix: python agent: Add a dependency on generated files
    - python: use setuptools with python >= 3.12


author: chenyanpanHW <chenyanpan@huawei.com> - 9-5
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/0001-Relax-content-tests-in-test-suite.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/0002-Force-creation-of-LUKS1-containers-in-test-suite.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/0003-Define-log-callback-function-to-use-with-libcryptset.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: zhangxiaoyu<zhangxiaoyu58@huawei.com> - 5.0.2-8
changelog:
  - Type: bugfix
  - ID:NA
  - SUG:NA
  - DESC: skip setup console if disable pty and fix syscontainer-hooks write devices rule useless


author: zhangxiaoyu<zhangxiaoyu58@huawei.com> - 5.0.2-9
changelog:
  - Type: bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix dev mount failed and skip send/recv devpts_fd if disable_pty


author: jikai<jikai11@huawei.com> - 5.0.2-13
changelog:
  - Type: bugfix
  - ID:NA
  - SUG:NA
  - DESC: unfreeze freezing container and bugfix for files.limit and syscontainer


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 5.0.2-14
changelog:
  - Type: bugfix
  - ID:NA
  - SUG:NA
  - DESC: update meson parameters for disabling LTO when building with clang & ld.bfd


author: yuanchao <1050706328@qq.com> - 5.0.2-16
changelog:
  - Type: bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix error of cc.compiles in meson.build on aarch cased by '-fstack-clash-protection' and '-Werror'


author: chenyanpanHW <chenyanpan@huawei.com> - 12.5-33
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/nail-11.25-config.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/mailx-12.3-pager.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/mailx-12.5-lzw.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/mailx-12.5-fname-null.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/mailx-12.5-collect.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/mailx-12.5-usage.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/mailx-12.5-man-page-fixes.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/mailx-12.5-outof-Introduce-expandaddr-flag.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/mailx-12.5-fio.c-Unconditionally-require-wordexp-support.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/mailx-12.5-globname-Invoke-wordexp-with-WRDE_NOCMD-CVE-2004-277.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/mailx-12.5-unpack-Disable-option-processing-for-email-addresses.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/mailx-12.5-empty-from.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/mailx-12.5-nss-hostname-matching.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/mailx-12.5-encsplit.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/mailx-12.5-openssl.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/backport-mailx-12.5-no-SSLv3.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/set-mail-defualt-did-not-record-failsend.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: xiejing <xiejing@kylinos.cn> - 4:10.5.25-1
changelog:
  - Bump to 10.5.25 for resolving CVE-2024-21096
  - Fix version description in systemd service file
  - Add conflict with greatsql and change requires


author: chenyanpanHW <chenyanpan@huawei.com> - 4.0.26-2
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/0001-comment-invalid-info-in-conf-file.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: wangkai <13474090681@163.com> - 8.0.37-1
changelog:
  - Update to 8.0.37 for fix CVEs(CVE-2024-20964,CVE-2024-20971,CVE-2024-20976,
    CVE-2024-20973,CVE-2024-20978,CVE-2024-20981,CVE-2024-20962,CVE-2024-20977,
    CVE-2024-20963,CVE-2024-20965,CVE-2024-20972,CVE-2024-20961,CVE-2024-20982,
    CVE-2024-20970,CVE-2024-20967,CVE-2024-20984,CVE-2024-20974,CVE-2024-20966,
    CVE-2024-20960,CVE-2024-20985,CVE-2024-20969,CVE-2024-21000,CVE-2024-21069,
    CVE-2024-21009,CVE-2024-21087,CVE-2024-21047,CVE-2024-20998,CVE-2024-21013,
    CVE-2024-21060,CVE-2024-21008,CVE-2024-21102,CVE-2024-21054,CVE-2024-21062,
    CVE-2024-20994,CVE-2024-21096,CVE-2024-21061,CVE-2024-20993,CVE-2024-21055,
    CVE-2024-21057,CVE-2023-6129)


author: wangkai <13474090681@163.com> - 8.0.38-1
changelog:
  - Update to 8.0.38 for fix CVEs(CVE-2024-21125,CVE-2024-21142,CVE-2024-21179,
    CVE-2024-21171,CVE-2024-21130,CVE-2024-21162,CVE-2024-21177,CVE-2024-20996,
    CVE-2024-21134,CVE-2024-21165,CVE-2024-21173,CVE-2024-21129,CVE-2024-21127,
    CVE-2024-21163)


author: wangkai <13474090681@163.com> - 8.0.40-1
changelog:
  - Update to 8.0.40 for fix CVEs(CVE-2024-21218,CVE-2024-21196,CVE-2024-21207,
    CVE-2024-21198,CVE-2024-21203,CVE-2024-21213,CVE-2024-21239,CVE-2024-21199,
    CVE-2024-21197,CVE-2024-21247,CVE-2024-21193,CVE-2024-21212,CVE-2024-21241,
    CVE-2024-21230,CVE-2024-21236,CVE-2024-21194,CVE-2024-21238,CVE-2024-21237,
    CVE-2024-21201,CVE-2024-21231,CVE-2024-21219,CVE-2024-21185)


author: yaoxin <yao_xin001@hoperun.com> - 8.0-1
changelog:
  - Update to 8.0
    * CVE-2024-5742: Avoid privilege escalations via symlink attacks
      on emergency save file (boo#1226099)
    * By default ^F is bound to starting a forward search, and ^B to
      starting a backward search, while M-F and M-B repeat the search
      in the corresponding direction. (See the documentation if you
      want the old bindings back.)
    * Command-line option --modernbindings (-/) makes ^Q quit, ^X cut,
      ^C copy, ^V paste, ^Z undo, ^Y redo, ^O open a file, ^W write a file,
      ^R replace, ^G find again, ^D find again backwards, ^A set the mark,
      ^T jump to a line, ^P show the position, and ^E execute.
    * For easier access, M-" is bound to placing/removing an anchor,
      and M-' to jumping to the next anchor.


author: gaihuiying <eaglegai@163.com> - 1:5.9.3-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Customized the anti-attacki/reset-last_engineTime function for IdeaUI
         change the permissions of passtest


author: xingwei <xingwei14@h-partners.com> - 1:5.9.3-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Migration patch from upstream, add compatibility to parse
  Linux 6.7 Ip header while keep support for previous versions.


author: eaglegai <eaglegai@163.com> - 2.10-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix ifconfig display error when the length of interface name is 15


author: chenyanpanHW <chenyanpan@huawei.com> - 0.2.8-19
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/0000-netcf-call-aug_load-at-most-once-per-second.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/0001-netcf-optimize-aug_match-query-for-all-ifcfg-files-related.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/0002-netcf-linux-include-bond-element-for-bonds-with-no-slaves.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/0003-netcf-Properly-classify-bond-devices-with-no-slaves.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/Fix-memory-leak-in-aug-match-mac.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: lingsheng <lingsheng1@h-partners.com> - 1:1.0.8-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:datatype: don't return a const string from cgroupv2_get_path()
  datatype: fix leak and cleanup reference counting for struct datatype
  datatype: initialize TYPE_CT_EVENTBIT slot in datatype array
  datatype: initialize TYPE_CT_LABEL slot in datatype array
  evaluate: do not remove anonymous set with protocol flags and single element
  evaluate: don't crash if object map does not refer to a value
  evaluate: error out when expression has no datatype
  evaluate: error out when store needs more than one 128bit register of align fixup
  evaluate: fix check for truncation in stmt_evaluate_log_prefix()
  evaluate: fix double free on dtype release
  evaluate: fix memleak in prefix evaluation with wildcard interface name
  evaluate: reject set in concatenation
  evaluate: revisit anonymous set with single element optimization
  evaluate: skip anonymous set optimization for concatenations
  evaluate: stmt_nat: set reference must point to a map
  evaluate: tproxy: move range error checks after arg evaluation
  evaluate: validate chain max length
  evaluate: validate maximum log statement prefix length
  exthdr: prefer raw_type instead of desc->type
  json: expose dynamic flag
  json: fix use after free in table_flags_json()
  libnftables: Drop cache in -c/--check mode
  meta: fix tc classid parsing out-of-bounds access
  netlink: don't crash if prefix for < byte is requested
  netlink: fix leaking typeof_expr_data/typeof_expr_key in netlink_delinearize_set()
  netlink: handle invalid etype in set_make_key()
  parser_bison: fix ct scope underflow if ct helper section is duplicated
  parser_bison: fix memleak in meta set error handling
  parser_bison: make sure obj_free releases timeout policies
  parser_json: Catch nonsense ops in match statement
  parser_json: Default meter size to zero
  parser_json: Fix flowtable prio value parsing
  parser_json: Fix synproxy object mss/wscale parsing
  parser_json: Fix typo in json_parse_cmd_add_object()
  parser_json: Proper ct expectation attribute parsing
  parser_json: Wrong check in json_parse_ct_timeout_policy()
  py: fix exception during cleanup of half-initialized Nftables
  rule: fix sym refcount assertion


author: liweigang <liweiganga@uniontech.com> - 1:1.0.8-4
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: evaluate: guard against NULL basetype
  evaluate: error out if basetypes are different
  evaluate: reject attempt to update a set
  evaluate: release mpz type in expr_evaluate_list() error path
  expression: missing line in describe command with invalid expression
  evaluate: handle invalid mapping expressions in stateful object statements gracefully


author: gaihuiying <eaglegai@163.com> - 1:1.0.8-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         evaluate: disable meta set with ranges
         src: reject large raw payload and concat expressions
         evaluate: fix stack overflow with huge priority string
         tcpopt: don't create exthdr expression without datatype
         src: do not allow to chain more than 16 binops
         rule: fix ASAN errors in chain priority to textual names
         tests: shell: add regression test for double-free crash bug
         evaluate: handle invalid mapping expressions in stateful object
         evaluate: Fix incorrect checking the `base` variable in case of IPV6


author: gaihuiying <eaglegai@163.com> - 1:1.0.8-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:ct expectation: fix 'list object x' vs. 'list objects in table' confusion
         tests: shell: connect chains to hook point


author: gaihuiying <eaglegai@163.com> - 1:1.0.8-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         parser_json: release buffer returned by json_dumps
         parser_json: fix crash in json_parse_set_stmt_list
         parser_json: fix handle memleak from error path
         parser_json: fix several expression memleaks from error path
         libnftables: Zero ctx->vars after freeing it


author: xingwei <xingwei14@h-partners.com> - 2:7.92-4
changelog:
  - Type:bugfix
  - CVE:
  - SUG:NA
  - DESC:decouple from PCRE because it has been End-of-life, use local libpcre to build instead


author: chenyanpanHW <chenyanpan@huawei.com> - 1.6-3
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/backport-0001-w32-Use-cast-by-uintptr_t-for-thread-ID.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/add-test-cases.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/backport-0002-posix-Add-npth_poll-npth_ppoll.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p15-8
changelog:
  - Type:CVE
  - ID:CVE-2023-26551
  - SUG:NA
  - DESC:make sure the buffer has enough room for the input extra characters


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p15-10
changelog:
  - Type:CVE
  - ID:CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26554,CVE-2023-26555
  - SUG:NA
  - DESC:change the patch of CVE-2023-26551 and fix CVE-2023-26555


author: yanglongkang <yanglongkang@h-partners.com> - 0.34.7-4
changelog:
  - Replace SELinux deprecated functions
  - Replace deprecated libxml2 calls
  - Fix implicit cast from const to non const


author: Funda Wang <fudnawang@yeah.net> - 31-1
changelog:
  - merge two messy repositories
  - update config.sub and config.guess, without support on loongarchx32,
    as it does not exist in real world
  - add chrpath and coreutils runtime dependecies
  - bump rpm version requirement for brp-remove-la-files
  - package becomes noarch now


author: Funda Wang <fundawang@yeah.net> - 31-5
changelog:
  - Drop symlinks of .la and .a also
  - move hardcode requires on man and info to file attrs
  - add helper script for mageia to fix libtool linking order
  - disable info dir generatiion by setting AM_UPDATE_INFO_DIR=no
  - add helper macro for extensions of man pages and info pages
  - add helper scripts for nbdkit


author: Kai Liu <kai.liu@windriver.com> - 0.3.25-5
changelog:
  - Don't run make tasks in background sub-shell, as this causes
    severe issue. Use the _smp_mflags macro instead. See issue
    IB3EV0 for more detail.


author: Funda Wang <fundawang@yeah.net> - 0.23.0-7
changelog:
  - fix CVE-2024-8443, CVE-2024-45615, CVE-2024-45616,
    CVE-2024-45617, CVE-2024-45618, CVE-2024-45619, CVE-2024-45620


author: chenyanpanHW <chenyanpan@huawei.com> - 2.0.0-26
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/openslp-2.0.0-multicast-set.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/openslp-2.0.0-notify-systemd-of-start-up.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/openslp-2.0.0-null-pointer-deref.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/openslp-2.0.0-openssl-1.1-fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/openslp-2.0.0-cve-2016-7567.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/openslp-2.0.0-cve-2017-17833.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/CVE-2012-4428-fix-handling-of-string-list-in-slp_common-c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/Fix-slp_iface-c-comma-expression-so-it-works-as-designed.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/Daemon-sends-wrong-service-reply-when-security-is-enabled.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/Fix-DAAddresses-hostname-resolution-issue.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/Change-default-slpreg-connection-from-UDP-to-TCP.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/Fix-interface-parsing-code-to-look-for-null-ifc-addrs.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/Fix-broadcast-functionality.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/Properly-initialize-xcastsocks-for-error-exit.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/Fix-xrealloc-to-properly-free-original-pointer-on-resize.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/CVE-2019-5544.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: xingwei <xingwei14@h-partners.com> - 2.0.0-27
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Introduce epoch command to slove package upgrade failure problem


author: renmingshuai<renmingshuai@huawei.com> - 9.3p1-3
changelog:
  - Type:CVE
  - CVE:CVE-2023-48795,CVE-2023-51385
  - SUG:NA
  - DESC:fix CVE-2023-48795 and CVE-2023-51385


author: xulei <xulei@xfusion.com> - 2.17.5-2
changelog:
  - enhance some behavior: 
    1、add control group system-ovs.slice
    2、OVS_USER_ID change to root:root
    3、add user group openvswith and user openvswith


author: zhangpan <zhangpan103@h-partners.com> - 3.2.1-3
changelog:
  - fix openvswitch-ipsec servive failure when selinux is on
  - fix the problem that openvswitch-ipsec.service causes ipsec.service to fail when starting


author: baiguo <baiguo@kylinos.cn> - 0.4.34-2
changelog:
  - Use vasprintf() if available for error messages and otherwise vsnprintf();orccompiler, orcparse: Use secure UCRT printing functions on Windows


author: chenyanpanHW <chenyanpan@huawei.com> - 1.77-3
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/os-prober-mdraidfix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/os-prober-bootpart-name-fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/os-prober-mounted-partitions-fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/os-prober-umount-fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/os-prober-grub2-parsefix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/os-prober-grepfix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: jiangchuangang <jiangchuangang@huawei.com> - 2022.7-1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:update to 2022.7
    add skip-if-etc-mtab-is-not-a-symlink-of-proc-self-mounts.patch for test failed


author: Xibo.Wang <wangxb12@chinatelecom.cn> - 2.7.6-20
changelog:
  - Skip "ed" test when the ed utility is not installed
  - Abort when cleaning up fails
  - Don't crash when RLIMIT_NOFILE is set to RLIM_INFINITY
  - Avoid invalid memory access in context format diffs
  - Fix failed assertion 'outstate->after_newline'
  - Add missing-section tests to context-format test case
  - Fix test for presence of BASH_LINENO[0]


author: wangkai <13474090681@163.com> - 6.2.2-4
changelog:
  - Fix CVE-2024-45769,CVE-2024-45770
  - Fix buffer sizing checks in pmstore PDU handling (RHEL-57805)
  - Guard against symlink attacks in pmpost program (RHEL-57810)
  - Fix libpcp_web webgroup slow request refcounting (RHEL-58306)
  - Updated pmdahacluster for newer crm_mon versions (RHEL-50693)


author: hugel <gengqihu2@h-partners.com> - 10.42-12
changelog:
  - DESC:sync patches from upstream
         backport-Further-ASCII-tests-and-minor-bugfix-plus-ChangeLog-.patch
         backport-avoid-inconsistency-between-d-and-digit-when-using-a.patch
         backport-Fix-the-lookahead-after-d-or-posix-to-skip-whitespac.patch
         backport-Improve-error-offsets-for-character-classes-548.patch
         backport-Non-recursive-scan-prefix-in-JIT-560.patch


author: tangyuchen <tangyuchen5@huawei.com> - 2.0.0-1
changelog:
  - update to 2.0.0
    - Adjust USB drivers path at run-time via environment variable PCSCLITE_HP_DROPDIR
    - Add '--disable-polkit' option
    - Reset eventCounter when a reader is removed
    - Add "polkit" in "pcscd -v" output if enabled
    - Doxygen: document SCARD_E_INVALID_VALUE for some functions
    - use secure_getenv(3) if available
    - Some other minor improvements


author: Xiaoqian Lv <xiaoqian@nj.iscas.ac.cn> - 4.5-5
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC: backport upstream 4.5-0.20 patches to support riscv64


author: chenyanpanHW <chenyanpan@huawei.com> - 4.050-2
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/backport-DBD-mysql-4.050-Remove-a-useless-shebang-from-DBD-mysql.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: dongyuzhen <dongyuzhen@h-partners.com> - 2:3.51-1
changelog:
  - upgrade vertion to 3.51:
    - fix OVERLOAD and FALLBACK handling
    - fix ExtUtils::ParseXS compatibility with perl < 5.8.8
    - add support for elifdef and elifndef
    - allow symbolic alias of default function
    - better support for duplicate ALIASes
    - make versions in ExtUtils-ParseXS consistent


author: dongyuzhen <dongyuzhen@h-partners.com> - 1:2.57-1
changelog:
  - upgrade version to 2.57:
    - fix long standing bug that duplicate options were not detected when the options differ in case while ignore_case is in effect
    - allow periods in option names
    - move Getopt::Long::Parser to a separate module and add documentation
    - do not use Getopt::Long to establish Getopt::Long::Parser version
    - adapt tests for perl core


author: dongyuzhen <dongyuzhen@h-partners.com> - 2.206-1
changelog:
  - upgrade version to 2.206:
    - fix version checks to use correct method
    - drop rt.cpan from SUPPORT section


author: dongyuzhen <dongyuzhen@h-partners.com> - 0.42-1
changelog:
  - upgrade version to 0.42:
    - updated for Perl v5.14 - use `package NAME VERSION` syntax
    - fix typo 'behvior'
    - fix for DragonflyBSD and IPV6_V6ONLY from core perl


author: dongyuzhen <dongyuzhen@h-partners.com> - 2.084-1
changelog:
  - upgrade version to 2.084:
    - various fixes for edge cases
    - update documentation to reflect default SSL_version


author: zhangyao <zhangyao108@huawei.com> - 1:20231213-1
changelog:
  - Upgrade version to 20231213
  - Update certificates
  - Stop installing mk-ca-bundle.pl script
  - Switched tests from Test to Test::More


author: woody2918 <wudi1@uniontech.com> - 1.94-1
changelog:
  - update version to 1.94
  - supports all stable releases of OpenSSL 3.1 and 3.2, and LibreSSL 3.5 - 3.8.
  - Enhancements to the API.


author: huyubiao <huyubiao@huawei.com> - 2:3.48-1
changelog:
  - update version to 3.48
    - Accept TAP version 14
    - Fix HARNESS_PERL_SWITCHES=-I handling in TAP::Harness::Env
    - Color the "ok"s as well.
    - Skip symlink tests on msys2
    - Use use absolute path for executable tests
    - Space-quote executable if has spaces
    - Avoid using Errno::EINTR directly for platforms without it
    - stop calling import on App::Prove plugins


author: zhangyao <zhangyao108@huawei.com> - 2:2.36-1
changelog:
  - DESC: Upgrade version to 2.36, test code modify, build optimization, avoid the use of magic numbers, deal compilation warning


author: gaihuiying <eaglegai@163.com> - 0.9.5-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add macros to control if need libdrm, pango, libpng and if need to exclude bootlog


author: wangyu <wangqingsan@huawei.com> - 123-1
changelog:
  - update to 123
    - duktape:prevent wrongful termination of runway thread
    - harden the security features of the systemd service
    - add packit build tool
    - systemd:set User/Group and don't change uid/gid if already set
    - stop installing /usr/share/polkit-1/rules.d as 700/polkitd
    - moving the 50-default.rules file location


author: zhangxingrong <zhangxingrong@uniontech.cn> - 1.19-4
changelog:
  - Fix poptCallbackType documentation
  - Fix multiple typos in comments
  - Fix potential double-free in test3.c


author: chenyanpanHW <chenyanpan@huawei.com> - 2.13-2
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/backport-powertop-2.7-always-create-params.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: gaihuiying <eaglegai@163.com> - 2.4.9-2
changelog:
  - Type:bufix
  - ID:NA
  - SUG:NA
  - DESC:pppd: Negotiate IP address when only peer addresses are provided


author: gaihuiying <eaglegai@163.com> - 2.5.0-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:pre-created upstream default lock dir
         Openssl engine API is deprecated for a while thus disable it


author: chenyanpanHW <chenyanpan@huawei.com> - 3.22-52
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/procmail-3.24-rhconfig.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/procmail-3.15.1-man.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/procmail-3.22-truncate.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/procmail-3.24-ipv6.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: liuchao <liuchao173.huawei.com> - 1.5.0-1
changelog:
  - upgrade to 1.5.0:
    - Makefile.am: change link order
    - GitHub actions fail on Windows due to missing unzip command
    - Export and install CMake targets
    - Use CMAKE_CURRENT_BINARY_DIR instead of CMAKE_BINARY_DIR
    - remove deprecated functionality
    - Avoid "unused variable" compiler warning
    - Update autotools
    - Support for new Google protobuf 22.x, 23.x releases
    - Miscellaneous fixes
    - Remove protobuf 2.x support
    - Silence some compiler diagnostics
    - Fixing MSVC build for Msbuild and Makefile generators


author: gengqihu <gengqihu2@h-partners.com> - 23.3.1-1
changelog:
  - update version to 23.3.1
  - Fix parallel pip cache downloads causing crash (#12364)
  - Upgrade urllib3 to 1.26.17 (#12343)
  - Fix zsh completion script (#12173)
  - Fix #12166
  - Move the setuptools settings into pyproject.toml
  - Use `-r=...` instead of `-r ...` for hg
  - Drop isort and flake8 settings from setup.cfg
  - Follow imports for more vendored dependencies
  - Enable mypy's strict equality checks (#12209)
  - Fixed argument name in docstring
  - Allow truststore to not import on Python 3.9 and earlier
  - Vendor truststore
  - Fix formatting, combine numbers not strings!
  - Remove uses of `utcnow` in non-vendored code (#12006)
  - Fix issues raised in code review
  - move test_download_metadata mock pypi index utilities to conftest.py
  - Use strict optional checking in req_install.py (#11379)
  - Fix 'force' remove file without write permissions
  - Dropped unused attribute
  - Fix Pytest --use-venv init
  - Limit the double download fix to wheels
  - Fix slowness on Python 3.11 when updating an existing large environment.
  - Fix `pip completion --zsh`


author: xinsheng <xinsheng3@huawei.com> - 3.11.6-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix CVE-2024-4032, CVE-2024-0397 and fix xml tree assert error


author: Dingli Zhang <dingli@iscas.ac.cn> - 3.11.6-5
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:enable profile guided optimizations for some architectures


author: xinsheng <xinsheng3@huawei.com> - 3.11.6-6
changelog:
  - Type:CVE
  - CVE:NA
  - SUG:NA
  - DESC:fix CVE-2024-6923,CVE-2024-7592,CVE-2024-8088
      - Encode newlines in headers, and verify headers are sound
      - Fix quadratic complexity in parsing quoted cookie values with backslashes
      - Replaced SanitizedNames with a more surgical fix


author: xinsheng <xinsheng3@huawei.com> - 3.11.6-7
changelog:
  - Type:CVE
  - CVE:CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597
  - SUG:NA
  - DESC:fix CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597
      - rename all CVE patch name
      - CVE-2024-6232: Remove backtracking when parsing tarfile headers
      - CVE-2024-3219: patch1 Authenticate socket connection for `socket.socketpair()` fallback
      - CVE-2024-3219: patch2 Rework pure Python socketpair tests to avoid use of importlib.reload.
      - CVE-2024-0450: Protect zipfile from "quoted-overlap" zipbomb
      - CVE-2023-6597: tempfile.TemporaryDirectory: fix symlink bug in cleanup


author: Funda Wang <fundawang@yeah.net> - 3.11.6-8
changelog:
  - Type:CVE
  - CVE:CVE-2024-9287
  - SUG:NA
  - DESC:fix CVE-2024-9287
    - Quote template strings in venv activation scripts


author: Weifeng Su <suweifeng1@huawei.com> - 5.0.8-1
changelog:
  - upgrade to 5.0.8
    -fix a regression error in 5.0.7
    -update testing to validate against python version 2.7 and 3.5-3.11
    -update broken links / no-existent services and references


author: xu_ping <707078654@qq.com> - 7.0.0-1
changelog:
  - Upgrade version to 7.0.0
  - Python 3.12 support and python 3.7 no longer supported
  - Add support bind mount propagation.


author: xuchenchen <xuchenchen@kylinos.cn> - 3.1.3-2
changelog:
  - Type: CVE
  - CVE: CVE-2024-34064
  - SUG: NA
  - DESC: fix disallow invalid characters in keys to xmlattr filter


author: chenhuihan <chenhuihan@huawei.com> - 2.8.0-1
changelog:
  - Update package to version 2.8.0:
    - export PyJWKClientConnectionError class
    - pre-autoupdate mirrors-mypy blacken-docs black
    - allows passing of ssl.SSLContext to PyJWKClient


author: dongyuzhen <dongyuzhen@h-partners.com> - 5.1.0-1
changelog:
  - upgrade version to 5.1.0:
    - some incorrect declarations were removed from ``python.pxd``
    - built with Cython 3.0.7
    - some redundant and long deprecated methods were removed
    - character escaping in ``C14N2`` serialisation now uses a single pass over the text instead of searching for each unescaped character separately
    - early support for Python 3.13a2 was added
    - support for Python 2.7 and Python versions < 3.6 was removed
    - parsing ASCII strings is slightly faster
    - some bugs fixes


author: shixuantong <shixuantong1@huawei.com> - 1:1.24.3-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:remove f2py form python3-numpy package. It is in python3-numpy-f2py
         Do not pack open-source test case files


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 23.2-1
changelog:
  - Update package with version 23.2
    Add python 3.12 support.
    Add types for packaging.version._Version.
    Add platform tag support for LoongArch.
    Update pyupgrade to Python 3.7+
    Support enriched metadata.


author: zhaojingyu <zhaojingyu@kylinos.cn> - 2.2.2-1
changelog:
  - Update to 2.2.2
  - Avoid issuing a spurious DeprecationWarning when a custom DataFrame or Series subclass method is called


author: zhengxiaoxiao<zhengxiaoxiao2@huawei.com> - 24.0.0-1
changelog:
  - Upgrade version to 24.0.0
    - Dropped support for Python 3.6.
    - The minimum cryptography version is now 41.0.5.
    - Removed OpenSSL.crypto.loads_pkcs7 and OpenSSL.crypto.loads_pkcs12 which had been deprecated for 3 years.
    - Added OpenSSL.SSL.OP_LEGACY_SERVER_CONNECT to allow legacy insecure renegotiation between OpenSSL and unpatched servers.
    - Deprecated OpenSSL.crypto.PKCS12,OpenSSL.crypto.NetscapeSPKI,OpenSSL.crypto.CRL,OpenSSL.crypto.Revoked,OpenSSL.crypto.load_crl,OpenSSL.crypto.dump_crl,OpenSSL.crypto.sign,OpenSSL.crypto.verify,OpenSSL.crypto.X509Extension
    - Changed OpenSSL.crypto.X509Store.add_crl to also accept cryptography's x509.CertificateRevocationList arguments in addition to the now deprecated OpenSSL.crypto.CRL arguments
    - Fixed test_set_default_verify_paths test so that it is skipped if no network connection is available
    - Add ``OpenSSL.SSL.Connection.get_selected_srtp_profile`` to determine which SRTP profile was negotiated


author: yixiangzhike <yixiangzhike007@163.com> - 3.1.1-1
changelog:
  - update version to 3.1.1
    - Fixed bug in NotAny where expr parse action was not being run
    - Fix regex matching for Python quoted strings
    - Make create_diagram() code compatible with latest version of railroad-diagrams
    - Support Python 3.12
    - Small perf optimization for `expr | ""` mapping to `Optional(expr)`
    - Redo QuotedString '\' escape handling as a state machine
    - Add ParseResults.deepcopy()
    - Remove ^ and $ tags from pp.common.url regex
    - Added DelimitedList class, for better handling of naming and diagramming
    - Deprecate ParserElement.validate()
    - Added new class method ParserElement.using_each
    - Fix bug in delimited_list
    - Added python_quoted_string; fixed exception messages for ParseElementEnhance subclasses
    - Enable packrat in verilogParse.py by default
    - Add embed argument to create_diagram
    - Add support for slice in expr[] notation
    - Fixed bug in srange
    - Added Lox language parser


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 7.4.4-1
changelog:
  - Update package with version 7.4.4
    Fix non-string constants at the top of file being detected as docstrings on Python>=3.8.
    Removed unhelpful error message from assertion rewrite mechanism
    Updated documentation to refer to hyphenated options
    Markers are now considered in the reverse mro order to ensure base class markers are considered first
    Improved disclaimer on pytest plugin reference page to better indicate this is an automated
    Added ExceptionInfo.from_exception() <pytest.ExceptionInfo.from_exception>


author: chenhaixing <chenhaixing@huawei.com> - 1.26.12-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix socket timeout value when HTTPConnect is reused
         remove Exclamation mark character from the unreserved characters
         fix _idna_encode handling of x80


author: chengyechun <chengyechun1@huawei.com> - 1.26.17-2
changelog:
  - Type:CVE
  - ID:CVE-2023-45803
  - SUG:NA
  - DESC:fix CVE-2023-45803 Made body stripped form HTTP requests


author: chengyechun <chengyechun1@huawei.com> - 1.26.18-2
changelog:
  - Type:CVE
  - CVE:CVE-2024-37891
  - SUG:NA
  - DESC:fix CVE-2024-37891 Strip Proxy-Authorizatioin header on redirects


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-18
changelog:
  - hw/loongarch/virt: Fix FDT memory node address width
  - hw/loongarch: Fix fdt memory node wrong 'reg'
  - load_elf: fix iterator's type for elf file processing
  - migration/colo: Fix bdrv_graph_rdlock_main_loop: Assertion `!qemu_in_…
  - target/i386: no single-step exception after MOV or POP SS
  - char-stdio: Restore blocking mode of stdout on exit
  - backends/cryptodev-builtin: Fix local_error leaks
  - target/loongarch: fix a wrong print in cpu dump
  - virtio-pci: fix use of a released vector
  - target/arm: Disable SVE extensions when SVE is disabled
  - hw/misc/bcm2835_property: Fix handling of FRAMEBUFFER_SET_PALETTE
  - target/i386: Introduce SapphireRapids-v3 to add missing features
  - virtio-net: Ensure queue index fits with RSS (CVE-2024-6505)
  - nbd/server: CVE-2024-7409: Avoid use-after-free when closing server
  - update io/trace-events. Parameters should remain consistent.
  - update docs/tools/virtfs-proxy-helper.rst. This place is spelled wrong.
  - kvm: Add support for CSV2 reboot
  - target/i386/kvm: Fix the resettable info when emulate Hygon CSV2 guest
  - target/i386: get/set/migrate GHCB state
  - target/i386: csv: Add support for migrate VMSA for CSV2 guest
  - migration/ram: Accelerate the loading of CSV guest's encrypted pages
  - migration/ram: Accelerate the transmission of CSV guest's encrypted pages
  - target/i386: csv: add support to load incoming encrypted pages queued in the CMD list
  - target/i386: csv: add support to queue the incoming page into a list
  - target/i386: csv: add support to encrypt the outgoing pages in the list queued before.
  - target/i386: csv: add support to queue the outgoing page into a list
  - target/i386: csv: Read cert chain from file when prepared for CSV live migration
  - target/i386: Introduce header file csv.h
  - migration/ram: Fix calculation of gfn correpond to a page in ramblock
  - target/i386: sev: Clear shared_regions_list when reboot CSV Guest
  - migration/ram: Force encrypted status for VGA vram
  - target/i386: sev: Return 0 if sev_send_get_packet_len() fails
  - kvm: Add support for userspace MSR filtering and handling of MSR_KVM_MIGRATION_CONTROL.
  - migration/ram: Force encrypted status for flash0 & flash1 devices.
  - migration/ram: add support to send encrypted pages
  - migration: add support to migrate shared regions list
  - kvm: Add support for SEV shared regions list and KVM_EXIT_HYPERCALL.
  - target/i386: sev: add support to load incoming encrypted page
  - target/i386: sev: add support to encrypt the outgoing page
  - target/i386: sev: do not create launch context for an incoming guest
  - target/i386: sev: provide callback to setup outgoing context
  - confidential guest support: introduce ConfidentialGuestMemoryEncryptionOps for encrypted VMs
  - migration.json: add AMD SEV specific migration parameters
  - doc: update AMD SEV to include Live migration flow
  - crypto/tlscredspsk: Free username on finalize
  - hw/nvme: fix leak of uninitialized memory in io_mgmt_recv
  - hw/display/vhost-user-gpu.c: fix vhost_user_gpu_chr_read()
  - cvm : Implement command blacklist for cvm security enhancement
  - crypto: Introduce SM3 hash hmac pbkdf algorithm
  - virtio-net: Use virtual time for RSC timers
  - vvfat: Fix bug in writing to middle of file
  - hw/core/ptimer: fix timer zero period condition for freq > 1GHz
  - hw/misc: support vpsp


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-19
changelog:
  - mac_dbdma: Remove leftover `dma_memory_unmap` calls(CVE-2024-8612)
  - softmmu: Support concurrent bounce buffers(CVE-2024-8612)
  - system/physmem: Per-AddressSpace bounce buffering
  - system/physmem: Propagate AddressSpace to MapClient helpers


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-20
changelog:
  - Added CoDA feature support in the context of CVM. When virtcca cvm is enabled, the iommu is tagged as secure.
  - hw/block: fix uint32 overflow
  - hw/ufs: add basic info of query response upiu
  - crypto: avoid leak of ctx when bad cipher mode is given Fixes: Coverity CID 1546884


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-21
changelog:
  - tests: bump QOS_PATH_MAX_ELEMENT_SIZE again
  - softmmu/physmem: fix memory leak in dirty_memory_extend()
  - crypto: run qcrypto_pbkdf2_count_iters in a new thread
  - hw/audio/virtio-sound: fix heap buffer overflow
  - hw/intc/arm_gic: fix spurious level triggered interrupts
  - ui/sdl2: set swap interval explicitly when OpenGL is enabled
  - target/riscv/kvm: tolerate KVM disable ext errors
  - virtio: remove virtio_tswap16s() call in vring_packed_event_read()
  - block: fix -Werror=maybe-uninitialized false-positive
  - hw/remote/vfio-user: Fix config space access byte order
  - hw/loongarch/virt: Fix memory leak
  - hw/intc/riscv_aplic: APLICs should add child earlier than realize
  - stdvga: fix screen blanking
  - ui/gtk: Draw guest frame at refresh cycle
  - target/i386: fix size of EBP writeback in gen_enter()
  - virtio-net: drop too short packets early
  - target/ppc: Fix lxv/stxv MSR facility check
  - target/ppc: Fix lxvx/stxvx facility check
  - virtio-snd: add max size bounds check in input cb(CVE-2024-7730)


author: fangyi <eric.fangyi@huawei.com> - 11:8.2.0-23
changelog:
  - vdpa: fix vdpa device migrate rollback wrong when suspend device failed.
  - vdpa: support resizing virtio-blk capacity online for kernel vdpa
  - Revert "vdpa: add vhost_vdpa_suspend"
  - Revert "vdpa: add vhost_vdpa->suspended parameter"
  - Revert "vdpa: block migration if SVQ does not admit a feature"
  - vdpa: remove memory listener unregister in vhost_vdpa_reset_status


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-24
changelog:
  - ppc/xive: Fix ESB length overflow on 32-bit hosts
  - target/hppa: Fix PSW V-bit packaging in cpu_hppa_get for hppa64
  - target/ppc: Fix migration of CPUs with TLB_EMB TLB type
  - target/arm: Clear high SVE elements in handle_vec_simd_wshli
  - module: Prevent crash by resetting local_err in module_load_qom_all()
  - tests/docker: update debian i686 and mipsel images to bookworm
  - target/arm: Fix SVE SDOT/UDOT/USDOT (4-way, indexed)
  - docs/sphinx/depfile.py: Handle env.doc2path() returning a Path not a str
  - block/blkio: use FUA flag on write zeroes only if supported
  - virtio-pci: Fix the use of an uninitialized irqfd
  - hw/cxl: Ensure there is enough data to read the input header in cmd_get_physical_port_state()
  - intel_iommu: Send IQE event when setting reserved bit in IQT_TAIL
  - virtio-net: Avoid indirection_table_mask overflow
  - Fix calculation of minimum in colo_compare_tcp
  - target/riscv/csr.c: Fix an access to VXSAT
  - linux-user: Clean up unused header
  - raw-format: Fix error message for invalid offset/size
  - hw/loongarch/virt: Remove unnecessary 'cpu.h' inclusion
  - tests: Wait for migration completion on destination QEMU to avoid failures
  - acpi: ged: Add macro for acpi sleep control register
  - hw/intc/openpic: Improve errors for out of bounds property values
  - hw/pci-bridge: Add a Kconfig switch for the normal PCI bridge
  - docs/tools/qemu-img.rst: fix typo (sumarizes)
  - audio/pw: Report more accurate error when connecting to PipeWire fails
  - audio/pw: Report more accurate error when connecting to PipeWire fails
  - dma: Fix function names in documentation Ensure the function names match.
  - edu: fix DMA range upper bound check
  - platform-bus: fix refcount leak
  - hw/net/can/sja1000: fix bug for single acceptance filter and standard frame
  - tests/avocado: fix typo in replay_linux
  - util/userfaultfd: Remove unused uffd_poll_events
  - Consider discard option when writing zeros
  - crypto: factor out conversion of QAPI to gcrypt constants
  - crypto: drop gnutls debug logging support
  - crypto: use consistent error reporting pattern for unsupported cipher modes
  - hw/gpio/aspeed_gpio: Avoid shift into sign bit


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-25
changelog:
  - hw/arm/virt:Keep Guest L1 cache type consistent with KVM
  - cvm : Add support for TEE-based national encryption acceleration.
  - Add virtCCA Coda annotation Adjust the position of the security device
  - target/i386: sev: Add support for reuse ASID for different CSV guests
  - target/i386: sev: Fix incompatibility between SEV and CSV on the GET_ID API
  - hw/cxl: Ensure there is enough data for the header in cmd_ccls_set_lsa()
  - hw/pci: Add parenthesis to PCI_BUILD_BDF macro
  - hw/audio/hda: free timer on exit
  - meson.build: Remove ncurses workaround for OpenBSD
  - ui/console-vc: Silence warning about sprintf() on OpenBSD
  - ui: remove break after g_assert_not_reached()
  - s390x/sclp: Simplify get_sclp_device()
  - hw/vfio/hct: qemu startup terminate once error happened in hct
  - hw/vfio/hct: fix ccp_index error caused by uninitialized buf
  - hw/vfio/hct: update support ccp count to 48.
  - hw/vfio: add device hct based on vfio.


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-26
changelog:
  - vdpa-dev: Fix initialisation order to restore VDUSE compatibility
  - tcg: Allow top bit of SIMD_DATA_BITS to be set in simd_desc()
  - migration: fix-possible-int-overflow
  - target/m68k: Map FPU exceptions to FPSR register
  - qemu-options: Fix CXL Fixed Memory Window interleave-granularity typo
  - hvf: arm: Fix encodings for ID_AA64PFR1_EL1 and debug System registers
  - hw/intc/arm_gic: Fix handling of NS view of GICC_APR<n>
  - qio: Inherit follow_coroutine_ctx across TLS
  - target/riscv: Fix the element agnostic function problem
  - accel/tcg: Fix typo causing tb->page_addr[1] to not be recorded
  - tcg/loongarch64: Fix tcg_out_movi vs some pcrel pointers
  - migration: Fix file migration with fdset
  - ui/vnc: don't return an empty SASL mechlist to the client
  - target/arm: Fix FJCVTZS vs flush-to-zero
  - hw/ppc/e500: Prefer QOM cast
  - sphinx/qapidoc: Fix to generate doc for explicit, unboxed arguments
  - hw/ppc/e500: Remove unused "irqs" parameter
  - hw/ppc/e500: Add missing device tree properties to i2c controller node
  - hw/i386/amd_iommu: Don't leak memory in amdvi_update_iotlb()
  - hw/arm/mps2-tz.c: fix RX/TX interrupts order
  - target/i386: csv: Add support to migrate the incoming context for CSV3 guest
  - target/i386: csv: Add support to migrate the outgoing context for CSV3 guest
  - target/i386: csv: Add support to migrate the incoming page for CSV3 guest
  - target/i386: csv: Add support to migrate the outgoing page for CSV3 guest
  - linux-headers: update kernel headers to include CSV3 migration cmds
  - vfio: Only map shared region for CSV3 virtual machine
  - vga: Force full update for CSV3 guest
  - target/i386: csv: Load initial image to private memory for CSV3 guest
  - target/i386: csv: Do not register/unregister guest secure memory for CSV3 guest
  - target/i386: cpu: Populate CPUID 0x8000_001F when CSV3 is active
  - target/i386: csv: Add command to load vmcb to CSV3 guest memory
  - target/i386: csv: Add command to load data to CSV3 guest memory
  - target/i386: csv: Add command to initialize CSV3 context
  - target/i386: csv: Add CSV3 context
  - next-kbd: convert to use qemu_input_handler_register()
  - qemu/bswap: Undefine CPU_CONVERT() once done
  - exec/memop: Remove unused memop_big_endian() helper
  - hw/nvme: fix handling of over-committed queues
  - 9pfs: fix crash on 'Treaddir' request
  - hw/misc/psp: Pin the hugepage memory specified by mem2 during use for psp
  - hw/misc: support tkm use mem2 memory
  - hw/i386: add mem2 option for qemu
  - kvm: add support for guest physical bits
  - target/i386: add guest-phys-bits cpu property


author: Xianglai Li <lixianglai@loongson.cn> - 11:8.2.0-27
changelog:
  - fix compile error on loongarch
  - hw/loongarch: fix cpu hotplug reset
  - hw/loongarch/boot: Use warn_report when no kernel filename
  - hw/loongarch: clean code
  - hw/loongarch: Add KVM pch msi device support
  - hw/loongarch: Add KVM pch pic device support
  - hw/loongarch: Add KVM extioi device support
  - hw/loongarch: Add KVM IPI device support
  - hw/loongarch/virt: Update the ACPI table for hotplug cpu
  - hw/loongarch/virt: Add basic CPU plug support
  - hw/loongarch/virt: Add CPU topology support
  - accel/kvm/kvm-all: Fixes the missing break in vCPU unpark logic
  - gdbstub: Add helper function to unregister GDB register space
  - physmem: Add helper function to destroy CPU AddressSpace
  - hw/acpi: Update CPUs AML with cpu-(ctrl)dev change
  - hw/acpi: Update ACPI GED framework to support vCPU Hotplug
  - hw/acpi: Move CPU ctrl-dev MMIO region len macro to common header file
  - accel/kvm: Extract common KVM vCPU {creation,parking} code
  - target/loongarch: Add steal time support on migration
  - linux-headers: loongarch: Add kvm_para.h and unistd_64.h
  - target/loongarch/kvm: Implement LoongArch PMU extension
  - target/loongarch: Implement lbt registers save/restore function
  - target/loongarch: Add loongson binary translation feature
  - sync loongarch linux-headers
  - target/loongarch: Avoid bits shift exceeding width of bool type
  - target/loongarch: Use explicit little-endian LD/ST API
  - target/loongarch: fix -Werror=maybe-uninitialized false-positive
  - target/loongarch: Support QMP dump-guest-memory
  - target/loongarch/kvm: Add vCPU reset function
  - target/loongarch: Add compatible support about VM reboot
  - target/loongarch: Fix cpu_reset set wrong CSR_CRMD
  - target/loongarch: Set CSR_PRCFG1 and CSR_PRCFG2 values
  - target/loongarch: Remove avail_64 in trans_srai_w() and simplify it
  - target/loongarch/kvm: Add software breakpoint support
  - target/loongarch: Add loongarch vector property unconditionally
  - target/loongarch/kvm: Fix VM recovery from disk failures
  - target/loongarch: Put cpucfg operation before CSR register
  - target/loongarch: Add TCG macro in structure CPUArchState
  - hw/arm/virt-acpi-build.c: Migrate SPCR creation to common location
  - hw/loongarch/virt: Add FDT table support with acpi ged pm register
  - hw/loongarch/virt: Add description for virt machine type
  - hw/loongarch: Add acpi SPCR table support
  - hw/loongarch: virt: pass random seed to fdt
  - hw/loongarch: virt: support up to 4 serial ports
  - hw/loongarch: Remove default enable with VIRTIO_VGA device
  - hw/loongarch: Fix length for lowram in ACPI SRAT
  - hw/loongarch/virt: Remove unused assignment
  - hw/loongarch: Change the tpm support by default
  - hw/loongarch/boot.c: fix out-of-bound reading
  - hw/loongarch/virt: Use MemTxAttrs interface for misc ops
  - tests/libqos: Add loongarch virt machine node
  - hw/loongarch: Remove minimum and default memory size
  - hw/loongarch: Refine system dram memory region
  - hw/loongarch: Refine fwcfg memory map
  - hw/loongarch: Refine fadt memory table for numa memory
  - hw/loongarch: Refine acpi srat table for numa memory
  - hw/loongarch: Add VM mode in IOCSR feature register in kvm mode
  - hw/loongarch: Refine default numa id calculation
  - hw/loongarch: Rename LoongArchMachineState with LoongArchVirtMachineState
  - hw/loongarch: Rename LOONGARCH_MACHINE with LOONGARCH_VIRT_MACHINE
  - hw/loongarch: move memory map to boot.c
  - loongarch: switch boards to "default y"
  - hw/loongarch: Add cells missing from rtc node
  - hw/loongarch: Add cells missing from uart node
  - hw/loongarch: fdt remove unused irqchip node
  - hw/loongarch: fdt adds pcie irq_map node
  - hw/loongarch: fdt adds pch_msi Controller
  - hw/loongarch: fdt adds pch_pic Controller
  - hw/loongarch: fdt adds Extend I/O Interrupt Controller
  - hw/loongarch: fdt adds cpu interrupt controller node
  - hw/loongarch: Init efi_fdt table
  - hw/loongarch: Init efi_initrd table
  - hw/loongarch: Init efi_boot_memmap table
  - hw/loongarch: Init efi_system_table
  - hw/loongarch: Add init_cmdline
  - hw/loongarch: Add slave cpu boot_code
  - hw/loongarch: Add load initrd
  - hw/loongarch: Move boot functions to boot.c


author: lifeifei <lifeifei@kylinos.cn> - 2.19-3
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Add the socket option IPV6_MULTICAST_LOOP to prevent the interface from autoconfiguring using RA messages sent by itself.


author: Shiju Jose<shiju.jose@huawei.com> - 0.6.8-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:
    1. Fix return value type issue of read/write function from unistd.h.
    2. Fix issue of signed and unsigned integer comparison.
    3. Remove redundant header file and do some cleaup.
    4. Add support for create/open the vendor error tables at rasdaemon startup.
    5. Make changes in the HiSilicon error handling code for the same.
    6. Add four modules supported by HiSilicon common section


author: yanglongkang <yanglongkang@h-partners.com> - 0.6.8-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport libtraceevent patch to adapt to kernel ftrace ring buffer change


author: renhongxun <renhongxun@h-partners.com> - 0.6.8-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:clear the link to rasdaemon.service when uninstalling rasdaemon
         and ensure rasdaemon restart once be upgraded


author: luoshengwei <luoshengwei@huawei.com> - 0.8.0-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix cpu isolate errors when some cpus are offline
    before the service started


author: chenyanpanHW <chenyanpan@huawei.com> - 0.16.3-24
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/fix-build-bug-with-distro-of-openeuler.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: sunsuwan <sunsuwan3@huawei.com> - 1.2.6-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:add a user directory when the rpc user directory does not exist


author: dongyuzhen <dongyuzhen@h-partners.com> - 2.18-5
changelog:
  - revert: remove the require to rpm-build.For consistency with other community-released dependencies


author: zhangyaqi <zhangyaqi@kylinos.cn> - 8.2312.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memory leak in omazureeventhubs on accepted PN_DELIVERY event


author: jinlun<jinlun@huawei.com> - 40.7-1
changelog:
  - update version to 40.7
    - Allow chronyd-restricted read chronyd key files
    - Allow systemd-sleep set attributes of efivarfs files
    - Make name_zone_t and named_var_run_t a part of the mountpoint attribute
    - Update cifs interfaces to include fs_search_auto_mountpoints()
    - Allow map xserver_tmpfs_t files when xserver_clients_write_xshm is on
    - Add map_read map_write to kernel_prog_run_bpf
    - Add policy for nvme-stas
    - Make new virt drivers permissive
    - Allow named and ndc use the io_uring api
    - Allow sssd send SIGKILL to passket_child running in ipa_otpd_t


author: yanglu<yanglu72@h-partners.com> - 8.17.1-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix newaliases command error and postfix service start execption after sendmail install


author: chenyanpanHW <chenyanpan@huawei.com> - 2.17-52
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/setserial-2.17-fhs.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/setserial-2.17-rc.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/setserial-2.17-spelling.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/setserial-hayesesp.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/setserial-aarch64.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: zhengxiaoxiao <zhengxiaoxiao2@huawei.com> - 2:4.14.3-1
changelog:
  - update version to 4.14.3
    -Avoid null pointer dereference
    -Update utmp at an initial login
    -Merge libshadow and libmisc into a single libshadow
    -Adding the userdel and groupdel hooks to release tarball


author: chenyanpanHW <chenyanpan@huawei.com> - 2.3.2-9
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/slang-sighuptest.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: dillon chen<dillon.chen@gmail.com> -1.1.10-1
changelog:
  - update version to 1.1.10
  - Removed patch1(inline.patch) as it's no longer required.
  - repatch patch2(snappy-stubs-internal.h)


author: yanglu <yanglu72@h-partners.com> - 7:6.1-2
changelog:
  - Type:cves
  - ID:CVE-2023-5824 CVE-2023-46846 CVE-2023-46847 CVE-2023-46848
  - SUG:NA
  - DESC:fix CVE-2023-5824 CVE-2023-46846 CVE-2023-46847 CVE-2023-46848


author: zhangxianting <zhangxianting@uniontech.com> - 0.9-64
changelog:
  - Type:patch
  - CVE:NA
  - SUG:NA
  - DESC:patch hunk FAILED bacause of the arch judgement of sw_64 and loongarch64


author: laokz <zhangkai@iscas.ac.cn> - 0.9-67
changelog:
  - Type:fix
  - CVE:NA
  - SUG:NA
  - DESC:riscv64: reverse -static-pie patch due to unsupported tool-chains


author: zhangyao <zhangyao108@huawei.com> - 255-27
changelog:
  - DESC:network networkd address does not set up firewall rules
         add backport-network-networkd-address-don-t-set-up-firewall-rules.patch


author: zhangyao <zhangyao108@huawei.com> - 255-32
changelog:
  - backport upstream patch to solve systemd-shutdown hang all the time caused by fsync blocked by absence of DM mapping table


author: langfei<langfei@huawei.com> - 4.5-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Resolve stap-exporter.service chenge to disable when upgraded systemtap-stap-exporter package


author: langfei<langfei@huawei.com> - 4.5-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix some test cases fail to be executed, Resolve the sc2168 warning detected by the shellcheck tool.


author: liuchao <liuchao173@huawei.com> - 5.0-1
changelog:
  - Upgrade to 5.0:
    - Performance improvements in uprobe registration and module startup.
    - More probe point process details are printed in "-L" list mode with more "-v".
    - For the case where newer kernels may break systemtap runtime APIs, better pass-4 failure diagnostics are printed.
    - Tapset function print_ubacktrace_fileline() now understands DWARF5.
    - The target(s) of process probes may be specified by path name globs,  as located selected debuginfod servers.
    - The kernel-user message transport system added framing codes, making the transport more reliable, but becoming incompatible across pre-5.0 versions. Use matching versions of stap and staprun.
    - The testsuite Makefile has been simplified to remove concurrency, so "parallel" and "resume" modes are gone.
    - New runtime macro STP_TIMING_NSECS is now supported for reporting probe timing stats in nsecs instead of cycles.  This may become default later.
    - Add new runtime macro STP_FORCE_STDOUT_TTY to override STP_STDOUT_NOT_ATTY.


author: zhangqiang <zhangqiang@kylinos.cn> - 14:4.99.1-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Set SA_RESTART on non-lethal signals (REQ_INFO, FLUSH_PCAP) to avoid corrupting binary pcap output


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com>- 0.6-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:The "cc:No such file or directroy" error message is displayed during compilation.Therefore,add buildrequires gcc.
         The macro unitdir is used.Therefore,add buildrequires systemd


author: jinlun <jinlun@huawei.com> - 4.0.1-1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:update version to 4.0.1
    - Fix CVE-2023-22745
    - TPM version 1.59 support
    - libmu soname from 0:0:0 to 0:1:0.
    - tss2-sys soname from 1:0:0 to 1:1:0
    - FAPI ignores vendor properties on Fapi_GetInfo
    - FAPI Event Logging JSON format
    - Dead struct TPMS_ALGORITHM_DESCRIPTION
    - Dead field intelPttProperty from TPMU_CAPABLITIES
    - Dead code Tss2_MU_TPMS_ALGORITHM_DESCRIPTION_Marshal
    - Dead code Tss2_MU_TPMS_ALGORITHM_DESCRIPTION_Unmarshal


author: chenyanpanHW <chenyanpan@huawei.com> - 1.8.0-2
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/0001-Support-specify-CC.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: liuchao <liuchao173@huawei.com> - 2.21.0-1
changelog:
  - upgrade to 2.21.0:
    - api: fixed stop method not to require any parameter
    - plugin_scheduler: fix perf fd leaks
    - allow skipping rollback when restarting TuneD or switching profile
    - function_calc_isolated_cores: no errors for offline CPUs
    - sap-hana: new profile sap-hana-kvm-guest
    - serialized SIGHUP handler to prevent possible bootcmdline corruption
    - fixed possible traceback on SIGHUP
    - updated manual pages to be consistent
    - tuned-adm: better error message for unauthorized switch_profile
    - plugin_sysctl: report reapplied sysctls only on different values
    - plugin_cpu: added support for pm_qos_resume_latency_us
    - plugin_cpu: added support for intel_pstate scaling driver
    - plugin_scheduler: do not leak FDs from the perf
    - profiles: new cpu-partitioning-powersave profile
    - profiles: new profile for AWS EC2
    - throughput-performance: set net.core.somaxconn to at least 2048
    - API: added support for moving devices between instances
    - added support for the API access through the Unix Domain Socket
    - D-Bus: send tracebacks through D-Bus only in debug mode
    - Makefile: added fix for python-3.12
    - do not exit on duplicate config lines


author: ZhaoYu Jiang <jiangzhaoyu@kylinos.cn> - 2.24.1-1
changelog:
  - Upgrade to 2.24.1:
    - fixed privileged execution of arbitrary scripts by active local user. (CVE-2024-52336)
    - added sanity checks for API methods parameters. (CVE-2024-52337)
    - tuned-ppd: fixed controller init to correctly set_on_battery


author: langfei<langfei@huawei.com> - 2022g-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Fix Palestine predictions for 2072 through 2075; Ittoqqortoormiit (America/Scoresbysund) zone change.


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 2024a-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Explicitly specify the path to 'zic' to address occational command-not-found issues


author: liuchao <liuchao173@huawei.com> - 1.90.2-1
changelog:
  - Update to 1.90.2:
    - Fix wireless devices not disappearing from Settings when disconnected
    - Require a newer libgudev to avoid bugs related to newline stripping when reading sysfs attributes
    - Add installed-tests files for use with gnome-desktop-testing
    - Fix integration test to work with system installed upower binary and under jhbuild
    - Detect headsets with kernel batteries such as Logitech and Steelseries headsets, and make them automatically disappear if the headset is turned off (if the kernel driver supports the wireless_status attribute)
    - Hide duplicate Logitech Bluetooth devices (Bolt-compatible devices connected through Bluetooth would show as 2 batteries)
    - Hide duplicate Logitech wireless devices when they get connected through USB as well
    - Fix Bluetooth device names not synchronising, and use user-chosen names when available
    - Handle the "present" sysfs attribute changing
    - Fix iDevices not appearing
    - Fix reading capacity_level with newer libgudev
    - Fix OpenBSD backend
    - Refactor internal battery handling into separate classes
    - Guess charging/discharging state based on energy rate (#196)
    - Fix polling after resume (#198)
    - Fix battery state guessing (#146)
    - Reload history when battery ID changes
    - Test fixes
    - Move state guessing into DisplayDevice
    - Always use 90% threshold to consider a battery full
    - Various test improvements
    - Fix mice showing up as keyboards (#189)
    - Allow unit test inspector to fail (#187)
    - Fix test cases when daemon shuts down too slowly (#188)
    - Remove broken wakeup DBus API
    - Tag UPS hid devices using hwdb and update list from upstream
    - Only permit Refresh method when in debug mode
    - Refactor device polling
    - Refactor udev device discovery and sibling detection
    - Improved testing and CI
    - Handle SIGTERM to trigger a clean shutdown
    - Improve polling of batteries after line-power "online" status change
    - Multiple wacom tablet detection fixes
    - Fix updates after a BT hid power supply moves in sysfs
    - Fix enumeration of "Whats Up!" devices on startup
    - Accept USB power supplies without warning
    - Allow building without gtk-doc


author: zhanghongtao <zhanghongtao22@huawei.com> - 017-1
changelog:
  - update package to usbutils-017
  - lsusb: add fallback names for 'lsusb -v' output
  - Honor system libdir and includedir
  - usbutils: lsusb-t: print entries for devices with no interfaces
  - lsusb -t: sort in bus order, not reverse order
  - susb-t: if a driver is not bound to an interface, report "[none]"
  - Generate usbutils.pc pkgconfig file
  - usbreset: Allow idProduct and idVendor to be 0
  - susb: Add function that sorts the output by device ID.
  - lsusb: Additional sorting by bus number.
  - lsusb: This is a more compact implementation of the device list sort implemented within this pull request. The output remains the same as the one demonstrated in the previous commit.


author: liuchao <liuchao173@huawei.com> - 0.14.0-1
changelog:
  - upgrade to 0.14.0:
    - Fix: urcu-bp: only teardown call-rcu worker in destructor
    - Fix: rculfhash: urcu_die() takes positive error value
    - Fix: call_rcu: teardown default call_rcu worker on application exit
    - Fix: join worker thread in call_rcu_data_free
    - Docs: clarify grace period polling API
    - Document grace period polling in rcu-api.md
    - Implement poll rcu stress test in rcutorture
    - urcu-memb,mb,signal: Implement grace period polling
    - Fix: auto-resize hash table destroy deadlock
    - Fix building on MSYS2
    - rculfhash: Include rculfhash-internal.h from local directory
    - Remove "Darwin" from "should also work on list"
    - Merge branch 'adah1972-improve-md'
    - Add semicolons at the end of function prototypes
    - Wrap a file name in backticks
    - Wrap command-line options in backticks
    - Fix a wrong format
    - Wrap URLs in angle brackets
    - Fix Markdown issues
    - Fix: Always check pthread_create for failures
    - Disable signals in URCU background threads
    - Fix: futex.h: include headers outside extern C
    - Fix: add missing unused attribute to _rcu_dereference
    - Fix: change method used by _rcu_dereference to strip type constness
    - Fix: remove type constness in URCU_FORCE_CAST's C++ version
    - Move extern "C" down in include/urcu/urcu-bp.h
    - fix: ifdef linux specific cpu count compat
    - Add unit tests for possible_cpus_array_len
    - fix: sysconf(_SC_NPROCESSORS_CONF) can be less than max cpu id
    - Fix: revise obsolete command in README.md
    - Fix: workqueue: remove unused variable "ret"
    - Fix: urcu-qsbr: futex wait: handle spurious futex wakeups
    - Fix: urcu: futex wait: handle spurious futex wakeups
    - Fix: urcu-wait: futex wait: handle spurious futex wakeups
    - Fix: defer_rcu: futex wait: handle spurious futex wakeups
    - Fix: call_rcu: futex wait: handle spurious futex wakeups
    - Fix: workqueue: futex wait: handle spurious futex wakeups
    - Fix: Use %lu rather than %ld to print count
    - Update ABI definition files
    - Bump version current and age
    - alpha: allocate membarrier system call number
    - Bump version to 0.14.0-pre
    - Improved test framework
    - rculfhash: introduce cds_lfht_node_init_deleted
    - Fix: changelog: v0.13.0 was released in 2021
    - cleanup: i386 arch detection
    - fix: properly detect 'cmpxchg' on x86-32
    - fix: use urcu-tls compat with c++ compiler
    - Fix typo
    - fix: remove autoconf features default value in help message
    - fix: add missing pkgconfig file for memb flavour lib
    - Cleanup: Tests: Remove useless pre-C99 compatibility code from tap.h
    - Document C99 and C++11 requirement in README.md
    - Always use '__thread' for Thread local storage except on MSVC
    - Fix: powerpc32: transparent unions alter calling convention
    - fix: don't use C++ thread_local on MacOs
    - wfcqueue API: implement overloaded wrappers with templates
    - wfcqueue: combine C++ API cds_wfcq_head_cast with overloading
    - wfstack C++ API: implement overloaded wrappers with templates
    - lfstack C++ API: implement overloaded wrappers with templates
    - wfstack: combine C++ API cds_wfs_stack_cast with overloading
    - lfstack: combine C++ API cds_lfs_stack_cast with overloading
    - fix: test_build tap plan
    - Test C++ build of list head init
    - Fix order of initializers in CDS_LIST_HEAD_INIT
    - unit tests: test wfcqueue, wfstack, lfstack empty check functions in C++
    - wfcqueue: implement C++ API based on function overloading
    - wfstack: implement C++ API based on function overloading
    - lfstack: implement C++ API based on function overloading
    - Fix tap.h: remove extra semicolon in pass/fail macros
    - Add C++ build tests
    - Build and run regression and unit tests as C++ programs
    - Add --enable-Werror configure switch
    - Add `urcu_posix_assert()` as `assert()` replacement
    - Rename `urcu_assert()` to `urcu_assert_debug()`
    - cleanup: spelling fixes in comments
    - Make temporary variable in _rcu_dereference non-const
    - (tls-ie2) Fix: x86 and s390: uatomic __hp() macro C++ support
    - Fix: x86 and s390: uatomic __hp() macro clang support
    - Fix: x86 and s390 uatomic: __hp() macro warning with gcc 11


author: yanjianqing <yanjianqing@kylinos.cn> - 4.1.0-7
changelog:
  - tests: testdriver: Add filesystem socket example
  - cli: Drop unnecessary --disk prop aliases
  - fsdetails: Fix an error with source.socket of virtiofs
  - tests: cli: Fix test output after previous commit
  - cli: --disk: Add driver.metadata_cache options


author: yanjianqing <yanjianqing@kylinos.cn> - 4.1.0-8
changelog:
  - diskbackend: Drop support for sheepdog
  - cli: support --boot loader.stateless=
  - virt-install: Reuse cli.fail_conflicting
  - virt-install: --unattended and --cloud-init conflict
  - cloner: Sync and system uuid
  - virt-install: --help required options are wrong
  - cli: --cpu: Add maxphysaddr.{mode,bits} options
  - tests: Add a compat check for linux2020 in amd-sev test case
  - virtinstall: fix regression with --boot and no install method
  - virtinstall: split no_install conditional apart to track code coverage


author: yangzhuangzhuang<yangzhuangzhuang1@huawei.com> - 0.3.12-3
changelog:
  - The "no acceptable C compiler found" error message is displayed during compilation.Therefore,add buildrequires gcc.


author: John W. Linville <linville@redhat.com> - 2019.06.03-5
changelog:
  - Remove patch preventing install of regulatory.bin.5 man page
  - Include regulatory.bin.5 man page in distributed files


author: yanglu <yanglu72@h-partners.com> -1.20.11-31
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix regression caused by the fix for CVE-2024-0229 
         fix use after free related to CVE-2024-21886


author: shuaijiakun <shuaijiakun1288@phytium.com.cn> -1.20.11-32
changelog:
  - Type:feature
  - CVE:NA
  - SUG:NA
  - DESC:fix display error for ps23xx when using ast and pe2201 bmc card.


author: luhuaxin <luhuaxin@huawei.com> - 1.3-39
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC: move gxvattr to main package, move AUTHORS to license folder


author: xingwei <xingwei14@h-partners.com> - 4.2.3-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add haveged requires and optimize random number function replacement patch


author: chenyanpanHW <chenyanpan@huawei.com> - 2.7.2-2
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/ypbind-1.11-gettextdomain.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/ypbind-2.4-gettext_version.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yanglu <yanglu72@huawei.com> - 4.1-6
changelog:
  - DESC:delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/ypserv-2.5-nfsnobody2.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/ypserv-2.13-ypxfr-zeroresp.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/ypserv-2.13-nonedomain.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/ypserv-2.19-slp-warning.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/ypserv-4.0-manfix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/ypserv-2.24-aliases.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/ypserv-2.27-confpost.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/ypserv-2.31-netgrprecur.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/ypserv-4.0-headers.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/ypserv-4.0-selinux-context.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  ,and delete BuildRequires git


author: zhoupengcheng <zhoupengcheng11@huawei.com> - 1.2.13-1
changelog:
  - update to zlib-1.2.13
  - remove openEuler uncompiled  patch : 0005-Accelerate-Adler32-using-arm64-SVE-instructions.patch


author: yuanchao <1050706328@qq.com> - 0.13.72-4
changelog:
  - backport:disable zzip_use_file_header_zip64_offset,and fix wrong format in changelog,to support clang build


