# changelog

author: wangkai <13474090681@163.com> - 1.4.3.36-1
changelog:
  - Update to 1.4.3.36
  - Fix dsidm user/posixgroup get_dn fails with search_ext()
  - Fix unable to add objectclass/attribute without x-origin
  - Fix execute dsconf to open pdb


author: zoulin <zoulin13@huawei.com> - 0.17.3-1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC: update to 0.17.3;
          delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/Add-sm3-algorithm-for-aide.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-Handle-malformed-database-lines.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-Fix-handling-of-duplicate-database-entries.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-Switch-from-PCRE-to-PCRE2-closes-116.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: shenyangyang<shenyangyang4@huawei.com> - 1.7.0-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Rebuild for openEuler-rpm-config moving /usr/lib/rpm/openEuler/xxxx
         to /usr/lib/xxxx


author: licihua <licihua@huawei.com> -5.1.8-5
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC: fix crash in readline when started with an invalid locale specification


author: wangyuhang <wangyuhang27@huawei.com> -5.1.8-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: add backport-Bash-5.1-patch-10-fix-for-wait-n-being-interrupted-b.patch
      backport-Bash-5.1-patch-11-save-and-restore-alias-parsing-whe.patch
      backport-Bash-5.1-patch-12-fix-race-condition-with-child-proc.patch
      backport-Bash-5.1-patch-15-fix-readline-display-of-some-chara.patch
      backport-Bash-5.1-patch-16-fix-interpretation-of-multiple-ins.patch


author: wangyuhang <wangyuhang27@huawei.com> -5.1.8-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: backport-Bash-5.1-patch-13-fix-tilde-expansion-after-unquoted.patch
          backport-Bash-5.1-patch-14-fix-off-by-one-error-when-reading-.patch
          backport-changes-to-documentation-to-reduce-gender-specific-l.patch
          backport-fixes-for-array-subscripts-and-values-containing-0x0.patch
          change PATCHLEVEL from 9 to 8, keep it consistent with the actual version of bash


author: yaoxin <yao_xin001@hoperun.com> - 1.17-1
changelog:
  - Update to 1.17 for fix CVE-2022-38398,CVE-2022-38648,CVE-2022-40146,CVE-2022-44729 and CVE-2022-44730


author: huangyu <huangyu106@huawei.com> - 32:9.16.23-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Fix catalog zone reconfiguration crash
  Improve the logging on failed TCP accept
  Separate the locked parts of dns_zone_catz_enable-di
  Check if key-metadata is modified before writing
  Fix CID-352776 Concurrent data access violations
  Require valid key for dst_key functions


author: zhanghao<zhanghao383@huawei.com> - 32:9.16.23-14
changelog:
  - Type:CVE
  - CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
  - SUG:NA
  - DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094


author: zhanghao<zhanghao383@huawei.com> - 32:9.16.23-15
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix output expected information when install bing-sdborbind-sdb-chroot


author: zhanghao <zhanghao383@huawei.com> - 32:9.16.23-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Don't perform arithmetic on NULL pointers
  Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
  Fix a use-after-free bug in dns_zonemgr_releasezone()
  Fix dns_fwdtable_addfwd() error path cleanup bug
  Detach the views in zone_shutdown(), not in zone_free()
  Detach the zone views outside of the zone lock
  delay trust anchor management until zones are loaded
  In hmac_createctx free ctx on isc_hmac_init failure
  Fix dns_kasp_attach / dns_kasp_detach usage
  Fix backport error in 84929d1c
  Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
  Searching catzs->zones requires a read lock
  Fix view's zones reverting bug during reconfiguration


author: chengyechun <chengyechun1@huawei.com> - 32:9.16.23-21
changelog:
  - Type:CVE
  - CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
  - SUG:NA
  - DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream


author: chengyechun <chengyechun1@huawei.com> - 32:9.16.23-23
changelog:
  - Type:CVE
  - CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
  - SUG:NA
  - DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737


author: yeqinglong <yeqinglong@kylinsec.com.cn> - 2.37-24
changelog:
  - DESC:Add sw_64 support
  - DESC:Add LoongArch support
  - DESC:Fix LoongArch PLT entry generate bug
  - DESC:Add .equ support for LoongArch and fix some bugs


author: xiechengliang <xiechengliang1@huawei.com> - 1:1.33.1-12
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:fix CVE-2021-42378 CVE-2021-42379 CVE-2021-42380 CVE-2021-42381 CVE-2021-42382 CVE-2021-42383 CVE-2021-42384 CVE-2021-42385 and CVE-2021-42386


author: yanglu <yanglu72@h-partners.com> - 1.18.1-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:delete a static library file
         add BuildRequires make to fix build problem


author: hehuazhen <hehuazhen@huawei.com> - 1.18.1-6
changelog:
  - Type:CVE
  - CVE:CVE-2023-32067 CVE-2023-31130
  - SUG:restart
  - DESC:fix CVE-2023-32067 CVE-2023-31130


author: chenyanpanHW <chenyanpan@huawei.com> - 6.12-3
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0001-CVE-2022-27239.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0002-CVE-2022-29869.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0003-setcifsacl-fix-comparison-of-actions-reported-by-cov.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0004-cifs-utils-work-around-missing-krb5_free_string-in-H.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Lv Ying <lvying6@huawei.com> - 21.4-17
changelog:
  - backport upstream patches:
  https://github.com/canonical/cloud-init/commit/fa53c7f4086f5937bc9bd328dba9f91ca73b6614
  https://github.com/canonical/cloud-init/commit/9c7502a801763520639c66125eb373123d1e4f44
  https://github.com/canonical/cloud-init/commit/2e17a0d626d41147b7d0822013e80179b3a81ee4
  https://github.com/canonical/cloud-init/commit/9f0efc474ea430c75cd0abec3e2da719d4934346
  https://github.com/canonical/cloud-init/commit/bb414c7866c4728b2105e84f7b426ab81cc4bf4d
  https://github.com/canonical/cloud-init/commit/9cbd94dd57112083856ead0e0ff724e9d1c1f714
  https://github.com/canonical/cloud-init/commit/6d817e94beb404d3917bf973bcb728aa6cc22ffe
  https://github.com/canonical/cloud-init/commit/0450a1faff9e5095e6da0865916501772b3972e9


author: Lv Ying <lvying6@huawei.com> - 21.4-18
changelog:
  - backport upstream patches:
  https://github.com/canonical/cloud-init/commit/7136109df5a7b3c75dfb05a853fc4485fed25b5f
  https://github.com/canonical/cloud-init/commit/f51c352e6c6a7d05a61308c188450a1b818eac45
  https://github.com/canonical/cloud-init/commit/668a68fe577368555ea7f71577fc352494a98c25


author: shixuantong <shixuantong1@huawei.com> - 21.4-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Do not generate dsa and ed25519 key types when crypto FIPS mode is enabled
         Don't fail if IB and Ethernet devices 'collide'
         Fix default route rendering on v2 ipv6
         Fix IPv6 netmask format for sysconfig
         Fix KeyError when rendering sysconfig IPv6 routes
         Fix network v2 metric rendering
         Ignore duplicate macs from mscc_felix and fsl_enetc
         macs: ignore duplicate MAC for devs with driver driver qmi_wwan
         net/dhcp: catch dhclient failures and raise NoDHCPLeaseError
         net: skip duplicate mac check for netvsc nic and its VF
         Set ownership for new folders in Write Files Module
         cc_ubuntu_advantage: Redact token from logs
         Do not silently ignore integer uid
         Ensure network ready before cloud-init service runs
         Fix exception when no activator found
         Fix KeyError in iproute pformat
         Handle non existent ca-cert-config situation


author: shixuantong <shixuantong1@huawei.com> - 21.4-21
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:cc_mounts: Fix swapfile not working on btrfs
         cc_mounts: Use fallocate to create swapfile on btrfs
         collect-logs fix memory usage


author: shixuantong <shixuantong1@huawei.com> - 21.4-28
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:disable use-dns for secondary nics
         Make duplicate route add succeed
         Fix predictable interface rename issue


author: zhongjiawei<zhongjiawei1@huawei.com> - 1.2.0-314
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:bump ttrpc to fix containerd-shim socket connect increase leak after restart docker


author: zhangzikang <zhangzikang@kylinos.cn> - 1.6.22-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add loong64 to THP patch, fix build error for loongarch64
         fix incorrect dates


author: fuanan <fuanan3@h-partners.com> - 2.13-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert fix CVE-2015-1197 because it causes AT testcases problems


author: chenziyang <chenziyang4@huawei.com> - 2.13-10
changelog:
  - Type:CVE
  - ID:CVE-2015-1197
  - SUG:NA
  - DESC:backport CVE-2015-1197, delete revert-CVE-2015-1197.patch and backport the following 2 bugfix patches


author: fuanan <fuanan3@huawei.com> - 2.13-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add 'autoconf automake' to BuildRequires to use autoreconf command


author: wangbin <wangbin224@huawei.com> - 7.3.0-5
changelog:
  - Handle task_struct cpu member changes for kernels >= 5.16-rc1
    and delete use_system_readline_v3.patch


author: chenyanpanHW <chenyanpan@huawei.com> - 2.3.3-5
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0001-cryptsetup-add-system-library-paths.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0002-fix-compat-test.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0003-add-test-case-for-sm4.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0004-Fix-CVE-2021-4122-LUKS2-reencryption-crash-recovery-.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0005-Fix-OpenSSL-2-crypto-backend-PBKDF2-possible-iterati.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0006-fix-potential-null-pointer-dereference.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0007-Update-file-cryptsetup-ssh.c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: gaihuiying <eaglegai@163.com> - 7.79.1-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix build error when add --disable-http-auth configure option


author: yanglu <yanglu72@h-partners.com> - 7.79.1-12
changelog:
  - Type:cves
  - CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
  - SUG:NA
  - DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916


author: xinghe <xinghe2@h-partners.com> - 7.79.1-14
changelog:
  - Type:cves
  - CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
  - SUG:NA
  - DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916


author: xingwei <xingwei14@h-partners.com> - 7.79.1-15
changelog:
  - Type:cves
  - CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
  - SUG:NA
  - DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538


author: zhouyihang <zhouyihang3@h-partners.com> - 7.79.1-26
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:tool_progress: avoid division by zero in parallel progress
         digest: pass over leading spaces in qop values
         Curl_close: call Curl_resolver_cancel to avoid memory-leak
         easy: fix the altsvc init for curl_easy_duphandle
         libssh: if sftp_init fails, don't get the sftp error code
         url: move back the IDN conversion of proxy names
         ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
         http: fix the ::1 comparison for IPv6 localhost for cookies
         multi: free up more data earleier in DONE
         curl_path: bring back support for SFTP path ending in /~
         transfer: refuse POSTFIELDS + RESUME_FROM combo
         tool_operate: refuse (--data or --form) and --continue-at
         http: free the url before storing a new copy
         url: fix null dispname for --connect-to option
         vtls: avoid memory leak if sha256 call fails
         urlapi: make sure zoneid is also duplicated in curl_url_dup


author: zhouyihang <zhouyihang3@h-partners.com> - 7.79.1-27
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:transfer: also stop the sending on closed connection
         openssl: avoid BN_num_bits() NULL pointer derefs


author: zhouyihang <zhouyihang3@h-partners.com> - 7.79.1-29
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:paramhlp: fix CRLF-stripping files with "-d @file"
         libssh2: set length to 0 if strdup failed
         openldap: create ldap URLs correctly for IPv6 addresses
         multi: avoid memory-leak risk
         tool_cb_rea: limit rate unpause for -T . uploads
         tool_cfgable: free {proxy_}cipher13_list on exit


author: hongjinghao <hongjinghao@huawei.com> - 1:1.12.20-11
changelog:
  - add backport-bus-dir-watch-Do-not-crash-with-128-dirs.patch	
  backport-Do-not-crash-when-reloading-configuration.patch


author: renmingshuai <renmingshuai@huawei.com> - 4.4.2-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:remove build require bind-export-devel and add buildin bind


author: renmingshuai <renmingshuai@huawei.com> - 4.4.2-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:add a test case for PXE to support ipv6
         support lease time config for ipv6


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.3-4
changelog:
  - Type:bugfix
  - ID:
  - SUG:restart
  - DESC:delete report url added by other upstream patch to keep pace with DHCP


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.3-5
changelog:
  - Type:CVE
  - ID:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
  - SUG:restart
  - DESC:fix CVE-2022-2795,CVE-2022-38177 and CVE-2022-38178


author: renmingshuai <renmingshuai@huawei.com> - 2.86-3
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Fix parsing of IPv6 addresses with peer from netlink
         Fix bad interaction between --address=/#/<ip> and
              --server=/some.domain/#
         Fix --address=/#/...... which was lost in 2.86


author: renmingshuai <renmingshuai@huawei.com> - 2.86-7
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Fix memory leak when using --dhcp-optsfile with DHCPv6 options


author: Leon Wang <wangl29@chinatelecom.cn> - 20.10.12-1
changelog:
  - Initial project. Must build with golang1.16+, change specs
  - Change engine.tgz, fix hack dir, add GO111MODULE=off to make it compile
  - Change plugins.tgz, cache all plugins and tools source code into tgz
  - Remove epoch
  - specify version and git commit, remove git clone process
  - Add GOPATH, comment git proxy config, remove GOOS GOARCH set
  - Integrate engine cli plugins build into a single spec, output 3 rpms with 1 spec


author: zhangbowei<zhangbowei@kylinos.cn> - 25.0.3-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix bug by using docker-proxy in the source file to get better compatibility


author: zhongjiawei<zhongjiawei1@huawei.com> - 1.1.3-27
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Set temporary single CPU affinity before cgroup cpuset transition


author: huangdengdui <huangdengui@huawei.com> - 21.11-58
changelog:
  Sync some patchs from upstreaming and modifies are as follow:
   - maintainers: update for hns3 driver
   - app/testpmd: add command to flush multicast MAC addresses
   - app/testpmd: fix help string
   - app/testpmd: fix multicast address pool leak
   - net/hns3: optimize SVE Rx performance
   - net/hns3: optimize rearm mbuf for SVE Rx
   - net/hns3: optimize free mbuf for SVE Tx
   - net/hns3: fix order in NEON Rx
   - net/hns3: fix traffic management dump text alignment
   - net/hns3: fix traffic management thread safety
   - net/hns3: fix flushing multicast MAC address
   - net/hns3: fix error code for multicast resource
   - net/hns3: fix VF default MAC modified when set failed
   - net/hns3: fix index to look up table in NEON Rx
   - net/hns3: fix non-zero weight for disabled TC
   - config/arm: add HiSilicon HIP10


author: huangdengdui <huangdengui@huawei.com> - 21.11-59
changelog:
  Sync some patchs from upstreaming and modifies are as follow:
   - net/hns3: fix mailbox sync
   - net/hns3: report maximum buffer size
   - ethdev: add maximum Rx buffer size
   - app/procinfo: show RSS hash algorithm
   - ethdev: get RSS algorithm names
   - app/procinfo: adjust format of RSS info
   - app/procinfo: fix RSS info
   - net/hns3: support setting and querying RSS hash function
   - net/hns3: report RSS hash algorithms capability
   - ethdev: set and query RSS hash algorithm
   - ethdev: clarify RSS related fields usage
   - net/hns3: fix uninitialized hash algo value
   - net/hns3: keep set/get algo key functions local
   - net/hns3: fix some error logs
   - net/hns3: fix some return values
   - net/hns3: fix LRO offload to report
   - net/hns3: fix setting DCB capability
   - app/testpmd: ease configuring all offloads
   - net/hns3: refactor interrupt state query
   - net/hns3: fix IMP or global reset
   - net/hns3: fix multiple reset detected log
   - net/hns3: remove reset log in secondary
   - net/hns3: fix double stats for IMP and global reset
   - net/hns3: fix crash for NEON and SVE
   - net/hns3: fix unchecked Rx free threshold
   - net/hns3: fix typo in function name
   - net/hns3: fix build warning
   - telemetry: fix repeat display when callback don't init dict


author: huangdengdui <huangdengui@huawei.com> - 21.11-60
changelog:
  Sync some bugfix from upstreaming about hns3 reset and modifies
   are as follow:
   - net/hns3: fix VF reset handler interruption
   - net/hns3: fix reset event status
   - net/hns3: fix ignored reset event


author: huangdengdui <huangdengui@huawei.com> - 21.11-61
changelog:
  Sync some bugfix from upstreaming about testpmd and doc, modifies
   are as follow:
   - support set RSS hash algorithm
   - ethdev: add new API to get RSS hash algorithm by name
   - doc: fix description of RSS features
   - doc: fix RSS flow description in hns3 guide
   - doc: update features in hns3 guide
   - doc: fix hns3 build option about max queue number
   - app/testpmd: check port and queue Rx/Tx offloads
   - app/testpmd: fix Tx offload command
   - app/testpmd: allow offload config for all ports
   - app/testpmd: fix tunnel TSO configuration
   - app/testpmd: add explicit check for tunnel TSO
   - app/testpmd: fix tunnel TSO capability check
   - app/testpmd: remove useless check in TSO command


author: huangdengdui <huangdengui@huawei.com> - 21.11-62
changelog:
  Sync some patches for hns3 about refactor mailbox and bugfix, modifies
   are as follow:
   - net/hns3: fix reset level comparison
   - net/hns3: fix disable command with firmware
   - net/hns3: fix VF multiple count on one reset
   - net/hns3: refactor handle mailbox function
   - net/hns3: refactor send mailbox function
   - net/hns3: refactor PF mailbox message struct
   - net/hns3: refactor VF mailbox message struct


author: chenyi <chenyi211@huawei.com> - 21.11-66
changelog:
  Sync some patches from upstream about bugfix, modifies
   are as follow:
   - app/testpmd: fix crash in multi-process forwarding
   - net/hns3: fix offload flag of IEEE 1588
   - net/hns3: fix read Rx timestamp handle
   - net/hns3: fix double free for Rx/Tx queue
   - net/hns3: fix variable overflow
   - net/hns3: enable PFC for all user priorities
   - ring: add telemetry command for ring info
   - ring: add telemetry command to list rings
   - net/hns3: support power monitor
   - net/hns3: disable SCTP verification tag for RSS hash input
   - app/testpmd: fix RSS algorithm choice


author: chenyi <chenyi211@huawei.com> - 21.11-67
changelog:
  Sync some patches from upstream about bugfix, modifies
   are as follow:
   - net/hns3: support new device
   - dma/hisilicon: remove support for HIP09 platform


author: hankangknag <hankangknag5@huawei.com> - 21.11-68
changelog:
  Sync some patches from upstream about bugfix, modifies
   are as follow:
   - mlx5: device should be started to set the flow


author: chenyi <chenyi211@huawei.com> - 21.11-69
changelog:
  Sync some patches from upstream about bugfix, modifies
   are as follow:
   - net/hns3: check Rx DMA address alignmnent


author: Timothy Redaelli <tredaelli@redhat.com> - 0.101-1
changelog:
  - Rebase to driverctl-0.101-1.el7 (#1648411):
    - Fix shellcheck warnings (#1506969)
    - Install bash-completion as driverctl instead of driverctl-bash-completion.sh
    - fix load_override for non-PCI bus
    - Make sure driverctl had loaded all the overrides before basic.target (#1634160)


author: Timothy Redaelli <tredaelli@redhat.com> - 0.108-1
changelog:
  - Fix bash autocompletion (#1657020)
  - Fix --no-save to do not always returns with exit code 1
  - Return error code when unbinding a device from a driver fails


author: yexiao<yexiao7@huawei.com> - 202011-14
changelog:
  - fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727


author: yexiao<yexiao7@huawei.com> - 202011-16
changelog:
  - fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235


author: panxiaohe <panxh.life@foxmail.com> - 0.185-10
changelog:
  - Get instance correctly for eu-ar -N option
  - Use make macros
  - Use upstream patch for no stdin flag


author: fuanan <fuanan3@h-partners.com> - 0.185-11
changelog:
  - Fix "/usr/lib64/libdebuginfod.so.1" not found when uninstall elfutils-debuginfod-client-devel
  - Fix Obsoletes in spec


author: hubin <hubin73@huawei.com> - 0.185-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:change permission to 750 and move debug tools into extra package


author: yangcheng <yangcheng87@huawei.com> - 1:27.2-3
changelog:
  - DESC: Fix the upgrade error caused by the info file in the emacs-help software package being repackaged


author: wangjie <wangjie375@huawei.com> - 2.4.1-2
changelog:
  - Type:CVE
  - ID:CVE-2021-45960 CVE-2021-46143 CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827
  - SUG:NA
  - DESC:fix CVE-2021-45960 CVE-2021-46143
         CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827


author: yangzhuangzhuang <yangzhuangzhuang1@h-partners.com> - 2.4.1-4
changelog:
  - Type:CVE
  - ID:CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315
  - SUG:NA
  - DESC:Fix CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315


author: wangkai <13474090681@163.com> - 102.13.0-1
changelog:
  - Update to 102.13.0
  - Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
  - Remove unused patch


author: wangkai <13474090681@163.com> - 102.14.0-1
changelog:
  - Update to 102.14.0
  - Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056


author: lvfei <lvfei@kylinos.cn> - 102.15.0-1
changelog:
  - Update to 102.15.0
  - Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584


author: wangxiao <wangxiao65@huawei.com> - 79.0-4
changelog:
  - Fix CVE-2020-15664 CVE-2020-15665 CVE-2020-15666 CVE-2020-15667
    CVE-2020-15668 CVE-2020-15676 CVE-2020-15677 CVE-2020-15678


author: wangxiao <wangxiao65@huawei.com> - 79.0-5
changelog:
  - Fix CVE-2020-15969 CVE-2020-15999 CVE-2020-16012 CVE-2020-26951
    CVE-2020-26953 CVE-2020-26956 CVE-2020-26957 CVE-2020-26958
    CVE-2020-26959 CVE-2020-26960 CVE-2020-26961 CVE-2020-26963
    CVE-2020-26965 CVE-2020-25966 CVE-2020-26967


author: liyuxiang <liyuxiang@ncti-gba.cn> - 2:2.8.1-2
changelog:
  - Fix CVE-2022-39316
  - Fix CVE-2022-39318
  - Fix CVE-2022-39319
  - Fix CVE-2022-39347
  - Fix CVE-2022-41877


author: Funda Wang <fundawang@yeah.net> - 2:2.11.1-1
changelog:
  - 2.11.1
  - Fix CVE-2023-40567
  - Fix CVE-2023-40569
  - Fix CVE-2023-40188
  - Fix CVE-2023-40186
  - Fix CVE-2023-40181
  - Fix CVE-2023-39353
  - Fix CVE-2023-39352
  - Fix CVE-2023-39356
  - Fix CVE-2023-39350
  - Fix CVE-2023-39351
  - Fix CVE-2023-39354
  - Fix CVE-2023-40589


author: wangkai <13474090681@163.com> - 2:2.11.7-1
changelog:
  - Update to 2.11.7
  - Fix CVE-2024-32039,CVE-2024-32040,CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460


author: wangkai <13474090681@163.com> - 2:2.11.7-1
changelog:
  - Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
    CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
    CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660


author: benniaobufeijiushiji <linda7@huawei.com> - 10.3.1-20
changelog:
  - Type:Sync
  - ID:NA
  - SUG:NA
  - DESC:Sync patch from openeuler/gcc
         Bugfix for loop-distribution, semi-relayout and mull64.


author: Xiong Zhou <xiongzhou4@huawei.com> - 10.3.1-22
changelog:
  - Type:Sync
  - ID:NA
  - SUG:NA
  - DESC:Sync patch from openeuler/gcc
         Fix typo in tree-ssa-reassoc.c.


author: Zhao Shujian <zhaoshujian@huawei.com> - 10.3.1-23
changelog:
  - Type:Spec
  - ID:NA
  - SUG:NA
  - DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.


author: yaoxin <yao_xin001@hoperun.com> - 5.2.2-1
changelog:
  - Update to 5.2.2
    * Fixes for CVE-2023-48161 (bsc#1217390), CVE-2022-28506 (bsc#1198880)
    * Address SF issue #151: A heap-buffer-overflow in gif2rgb.c:294:45
    * Address SF issue #166: a read zero page leads segment fault in
      getarg.c and memory leaks in gif2rgb.c and gifmalloc.c


author: fuanan <fuanan3@h-partners.com> - 2.33.0-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch


author: fuanan <fuanan3@h-partners.com> - 2.33.0-10
changelog:
  - Type:CVE
  - ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
  - SUG:NA
  - DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815


author: fuanan <fuanan3@h-partners.com> - 2.33.0-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:enable multithreading compilation and installation,
         move Git.3pm.gz to perl-Git,avoid installation conflicts,
         change BuildRequires from pcre-devel to pcre2-devel.


author: huyubiao <huyubiao@huawei.com> - 2.33.0-13
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
         Delete git-core-doc from git, git-core-doc is provided by git-help.


author: fuanan <fuanan3@h-partners.com> - 2.33.0-14
changelog:
  - Type:CVE
  - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
  - SUG:NA
  - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465


author: Qingqing Li <liqingqing3@huawei.com> - 2.34-145
changelog:
  - elf: Add a way to check if tunable is set (BZ 27069)
  - malloc: Improve MAP_HUGETLB with glibc.malloc.hugetlb=2


author: chengyechun <chengyechun1@huawei.com> - 2.34-148
changelog:
  - Type:CVE
  - ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
  - SUG:NA
  - DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602


author: chengyechun <chengyechun1@huaiwe.com> - 2.34-149
changelog:
  - Type:bugfix
  - ID:
  - SUG:NA
  - DESC:nscd: Use errval, not errno to guide cache update
         nsce :Skip unusable entries in first pass in prune_cache


author: shixuantong <shixuantong1@huawei.com> - 2.34-150
changelog:
  - Type:bugfix
  - ID:
  - SUG:NA
  - DESC:elf: Add TLS modid reuse test for bug 29039
         elf: Fix TLS modid reuse generation assignment
         elf: Check objname before calling fatal_error
         elf: Fix _dl_debug_vdprintf to work before self-relocation
         elf: ldconfig should skip temporary files created by package managers
         ldconfig: Fixes for skipping temporary files.


author: chenyanpanHW <chenyanpan@huawei.com> - 7.6-2
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: lihaoxiang <lihaoxiang9@huawei.com> - 10.0-7
changelog:
  - fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.


author: hanchao <hanchao47@huawei.com> - 1.17.3-10
changelog:
  - Type:CVE
  - CVE:CVE-2022-41715,CVE-2022-2880,CVE-2022-2879
  - SUG:NA
  - DESC: fix CVE-2022-41715,CVE-2022-2880,CVE-2022-2879


author: hanchao <hanchao47@huawei.com> - 1.17.3-12
changelog:
  - Type:CVE
  - CVE:CVE-2022-41716
  - SUG:NA
  - DESC: remove hard code and strong dependency of git, subversion and mercurial


author: hanchao <hanchao47@huawei.com> - 1.17.3-14
changelog:
  - Type:CVE
  - CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
  - SUG:NA
  - DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717


author: hanchao <hanchao47@huawei.com> - 1.17.3-15
changelog:
  - Type:CVE
  - CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
  - SUG:NA
  - DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725


author: hanchao <hanchao47@huawei.com> - 1.17.3-16
changelog:
  - Type:CVE
  - CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
  - SUG:NA
  - DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538


author: hanchao <hanchao63@huawei.com> - 1.17.3-18
changelog:
  - Type:CVE
  - CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
  - SUG:NA
  - DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540


author: hanchao <hanchao63@huawei.com> - 1.17.3-19
changelog:
  - Type:CVE
  - CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
  - SUG:NA
  - DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405


author: hanchao <hanchao63@huawei.com> - 1.17.3-23
changelog:
  - Type:CVE
  - CVE:CVE-2023-39318,CVE-2023-39319
  - SUG:NA
  - DESC:fix CVE-2023-39318 and CVE-2023-39319


author: hanchao <hanchao63@huawei.com> - 1.17.3-28
changelog:
  - Type:CVE
  - CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
  - SUG:NA
  - DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289


author: wangshuo <wangshuo@kylinos.cn> - 1.17.3-31
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport the upstream patch, fix the overflow issue in runtime.netpollWaiters


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-31
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:kern/acpi: Use xsdt_addr if present
         commands/acpi: Use xsdt_addrifpresent


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-35
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:kern: Check for NULL when closing devices and disks
         kern/efi/mm: Fix use-after-free in finish boot services
         util/grub-install-common: Fix the key of the --core-compress option
         net/dns: Fix lookup error when no IPv6 is returned
         net/dns: Simplify error handling of recv_hook() function
         net/dns: Fix removal of DNS server


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-37
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fs/udf: Fix out of bounds access
         lib/relocator: Fix OOB write when initializing lo->freebytes[]
         util/grub-mount: Fix memory leak in fuse_getattr()


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-38
changelog:
  - Type:CVE
  - CVE:CVE-2023-4692 CVE-2023-4693
  - SUG:NA
  - DESC:fs/ntfs: Make code more readable
         fs/ntfs: Fix an OOB read when parsing a volume label
         fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
         fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
         fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
         fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-40
changelog:
  - Type:requirement
  - CVE:NA
  - SUG:NA
  - DESC:add TPCM support with ipmi channel
         change the name of module tpcm to tpcm_kunpeng
         skip verification when not loading grub.cfg


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-41
changelog:
  - Type:CVE
  - CVE:CVE-2024-1048
  - SUG:NA
  - DESC:grub-set-bootflag: Fix for CVE-2024-1048
         commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
         kern/acpi: Skip NULL entries in RSDT and XSDT
         util/grub-mount: Check file path sanity


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-42
changelog:
  - Type:CVE
  - CVE:CVE-2021-46848
  - SUG:NA
  - DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.2.4-1
changelog:
  - Upgrade to 1.2.4
  - Update Version, Release, Source0, BuildRequires
  - Delete sed operation which existed in this version
  - Add patch for fix CVE-2021-33516
  - Update stage 'prep', 'build', 'install', 'check', 'files'


author: Lv Ying<lvying6@huawei.com> - 1.11-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix build failure in OBS env because of automake version dependcy


author: xinghe <xinghe2@h-partners.com> - 2.6.6-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:connection: Clear flags when a conn is removed
         connection: Preserve flags when a conn is removed
         stream: do not try to free a failed stream-conn
         http_ana/txn: don't re-initialize txn and req var
         mworker: prevent incorrect values in uptime
         protocol: fix minor memory leak in protocol_bind_all()
         stream: Perform errors handling in right order in stream_new()


author: xinghe <xinghe2@h-partners.com> - 2.6.6-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:backport to fix potential coredump:
         errors: handle malloc failure in usermsgs_put
         ssl_sock: add check for ha_meth
         thread: add a check for pthread_creat


author: xinghe <xinghe2@h-partners.com> - 2.6.6-10
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:server: add missing free for server->rdr_pfx
         server: do not leak default-server in defaults


author: liweiganga <liweiganga@uniontech.com> - 2.4.51-10
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:change default value of HeartbeatMaxServers
         fix setting and comparison of IPs fileds
         avoid voerflow in case of indecently large session
         make ap_escape_quotes() work correctly
         fix lua_request with cast first
         Handle children killed pathologically
         mod_md do not interfere with requests if challenge type http-01


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:reduce the dependency of httpd on system-logos installation


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-13
changelog:
  - Type:CVE
  - ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
  - SUG:restart
  - DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-15
changelog:
  - Type:CVE
  - ID:CVE-2023-27522, CVE-2023-25690
  - SUG:restart
  - DESC:fix CVE-2023-27522, CVE-2023-25690


author: chengyechun <chengyehcun1@huawei.com> - 2.4.51-16
changelog:
  - Type:bugfix
  - ID:
  - SUG:restart
  - DESC:Report an error if the AJP backend sends an invalid number of headers
         handled a negative value when parsing the config
         avoid delimiting the query with a backreference
         fix missing APLOGNO


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-17
changelog:
  - Type:bugfix
  - ID:
  - SUG:restart
  - DESC:Fix double encoding of the uri-path of the request
         Do not match the extention against possible query string
         Do not double encode slashes
         Check before forwarding that a nocanon path has not been rewriteen


author: panchenbo <panchenbo@kylinsec.com.cn> - 2.4.51-18
changelog:
  - Type:bugfix
  - ID:
  - SUG:NA
  - DESC:add sw_64 support,optimize sw build patch,add loongarch64 support


author: chengyechun <chengyechun1@huaiwe.com> - 2.4.51-21
changelog:
  - Type:CVE
  - ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
  - SUG:NA
  - DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-22
changelog:
  - Type:CVE
  - ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
  - SUG:NA
  - DSEC:fix some CVEs


author: yangchenguang <yangchenguang@kylinsec.com.cn> - 72.1-7
changelog:
  - icu already supports loongarch64 architecture
  - Remove loongarch64 patch and modify sw_64 support patch to use all arch


author: crash888 <wangmengqi13@huawei.com> - 1:1.8.0.372-b07.0
changelog:
  - deleted Add-ability-to-configure-third-port-for-remote-JMX.patch
  - deleted 8287109-Distrust-failed-with-CertificateExpired.patch
  - deleted Huawei-fix-windows-build-Dynamic-CDS-failure.patch
  - deleted 8296480-Fix-the-problem-that-the-TestPolicy.java-cas.patch
  - deleted 8296485-BuildEEBasicConstraints.java-test-fails-with.patch
  - deleted fix-CVE-2023-21930.patch
  - deleted fix-CVE-2023-21954.patch
  - deleted fix-CVE-2023-21967.patch
  - modified 8202951-Support-default-jsa.patch
  - modified 8204595-add-more-thread-related-system-settings-info.patch
  - modified 8257695-linux-Add-process-memory-information-to-hs-e.patch
  - modified add-appcds-test-case.patch
  - modified fix-log-bug-enhance-aes-hmac-performance.patch
  - modified Test8167409.sh-fails-to-run-with-32bit-jdk-on-64bit-.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - modified add-missing-test-case.patch
  - add fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - add 8074354-Make-CreateMinidumpOnCrash-a-new-name-and-av.patch    
  - add jcmd-mnt-add-start-time-and-end-time.patch                    
  - add Fix-localtime_r-not-defined-on-windows.patch                  
  - add 8057743-process-Synchronize-exiting-of-threads-and-p.patch    
  - add 8305541-C2-Div-Mod-nodes-without-zero-check-could-be.patch
  - upgrade to jdk8u372-b07


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.372-b07.2
changelog:
  - 0002-8179498-attach-in-linux-should-be-relative-to-proc-p.patch
  - 0003-8187408-AbstractQueuedSynchronizer-wait-queue-corrup.patch
  - 0004-8193710-jcmd-l-and-jps-commands-do-not-list-Java-pro.patch
  - 0005-8196743-jstatd-doesn-t-see-new-Java-processes-inside.patch
  - 0006-8284330-jcmd-may-not-be-able-to-find-processes-in-th.patch
  - 0007-8241670-Enhance-heap-region-size-ergonomics-to-impro.patch
  - 0008-8223162-Improve-ergonomics-for-Sparse-PRT-entry-sizi.patch
  - 0009-8262316-Reducing-locks-in-RSA-Blinding.patch
  - 0010-8283994-Make-Xerces-DatatypeException-stackless.patch
  - 0011-Optimizing-ObjectInputStream-by-FreqInlineSize.patch
  - 0012-8301187-Memory-leaks-in-OopMapCache.patch
  - 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch
  - 0014-8280511-AArch64-Combine-shift-and-negate-to-a-single.patch
  - 0015-6605915-jinfo-flag-flag-name-functionality-doesn-t-w.patch
  - 0016-8036599-Use-Diagnostic-Commands-instead-of-SA-by-def.patch
  - 0017-8054889-Compiler-team-s-implementation-task.patch
  - 0018-8130832-Extend-the-WhiteBox-API-to-provide-informati.patch
  - 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
  - 0020-8251216-Implement-MD5-Intrinsics-on-aarch64.patch
  - 0021-fastdebug-fix-TestMD5Intrinsics.java-and-TestMD5Mult.patch
  - 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch
  - 0023-8180421-Change-default-value-of-BiasedLockingStartup.patch
  - 0024-Fix-the-trim-crash-caused-by-incorrect-assert-in-fas.patch
  - 0025-8220166-Performance-regression-in-deserialization.patch
  - 0026-8072070-Improve-interpreter-stack-banging.patch
  - 0027-8193386-CompressedClassSize-too-large-with-MaxMetasp.patch
  - 0028-Display-more-information-about-the-codedump-file-pat.patch
  - 0029-8211845-A-new-switch-to-control-verbosity-of-hs-err-.patch
  - 0030-add-more-specific-possible-reasons-in-hs_error-log-w.patch
  - 0031-8187653-Lock-in-CoderResult.Cache-becomes-performanc.patch
  - 0032-8299158-Improve-MD5-intrinsic-on-AArch64.patch
  - 0033-8211326-add-OS-user-related-information-to-hs_err-fi.patch
  - 0034-8250902-Implement-MD5-Intrinsics-on-x64.patch
  - 0035-8210821-Support-dns_canonicalize_hostname-in-krb5.co.patch
  - 0036-8297656-AArch64-Enable-AES-GCM-Intrinsics.patch
  - 0038-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
  - 0039-8243389-enhance-os-pd_print_cpu_info-on-linux.patch
  - 0040-Print-the-Exception-event-in-more-detail.patch
  - 0041-Reuse-translet-in-XSLTC-for-specjvm-xml-transform.patch
  - 0042-8140581-Excluding-compile-messages-should-only-be-pr.patch
  - 0043-Cache-dom-in-xml-transform.patch
  - 0044-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
  - 0045-8276904-Optional.toString-is-unnecessarily-expensive.patch
  - 0046-8210960-Allow-with-boot-jdk-jvmargs-to-work-during-c.patch
  - 0047-8025692-Log-what-methods-are-touched-at-run-time.patch
  - 0048-fix-jdk8-fastdebug-hotspot-test-compiler-c2-TestSpli.patch
  - 0049-Modify-G1GC-log-information.patch
  - 0050-8181644-C1-crashes-with-XX-PrintCFGToFile.patch
  - 0051-8071962-The-SA-code-needs-to-be-updated-to-support-S.patch
  - 0052-8177959-G1CollectedHeap-print_on-prints-incorrect-ca.patch
  - 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch
  - 0054-Fix-jmap-heapdump-symbols-when-the-class-is-loaded-f.patch
  - 0055-Fix-CodelistTest.java-Failed-to-Execute-CodelistTest.patch


author: wanghao_hw <wanghao564@huawei.com> - 1:1.8.0.382-b05.0
changelog:
  - add Huawei-Print-more-information-when-AbortVMOnException.patch
  - deleted patch 8185736-missing-default-exception-handler-in-calls-t.patch
  - deleted patch cve-2022-37434-Fix-a-bug-when-getting-a-gzip-header-extra-field-with-inflate.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - modified add-missing-test-case.patch
  - modified fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - add 8035986-KerberosKey-algorithm-names-are-not-specifie.patch
  - add fixing-a-bug-in-the-processing-of-default-attributes.patch
  - add enhance-java-heap-oom-err-log.patch
  - add 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - add 8179273-sun.net.httpserver.LeftOverInputStream-shoul.patch
  - del --with-zlib=system
  - upgrade to jdk8u382-b05


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.382-b05.9
changelog:
  - add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
  - add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
  - add Record-the-number-of-processes-to-errlog-file.patch.patch
  - add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
  - add The-OverWriteOldestGCLog-option-is-added-to-control.patch
  - add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
  - add add-make-Appcds-jsa-rw-region-deterministic.patch
  - add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
  - add add-8198423-Improve-metaspace-chunk-allocation.patch
  - add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
  - add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
  - add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
  - add add-8170831-ZipFile-implementation-no-longer-caches-.patch
  - add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
  - add add-8226530-test-case-fixed.patch
  - add add-8147940-Modify-testcase-this-test-does-not-assum.patch
  - add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
  - add add-Do-not-collect_class-when-DynamicCDS-dump.patch
  - add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
  - add add-Adapting-IOException-of-Zip-to-ZipException.patch
  - add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
  - add add-fix-windows-build-Dynamic-CDS-failure.patch
  - add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
  - add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> - 1:1.8.0.392-b08.0
changelog:
  - add 8308682-Enhance-AES-performance.patch
  - add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
  - add Add-metaspace-memory-allocation-failure-validation.patch
  - add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
  - del 8202952.patch
  - del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
  - modified Dynamic-CDS-Archive.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified kae-phase1.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - upgrade to jdk8u392-b08


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.392-b08.1
changelog:
  - add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
  - add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
  - add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
  - add 8314236-Overflow-in-Collections.rotate.patch
  - add 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
  - add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - add 8285516-clearPassword-should-be-called-in-a-finally-.patch
  - add 8148470-Metadata-print-routines-should-not-print-to-.patch
  - add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
  - add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
  - add 8312065-Socket.connect-does-not-timeout-when-profili.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified add-missing-test-case.patch


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.392-b08.2
changelog:
  - remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
  - remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
  - remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
  - remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
  - remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
  - remove add-8226530-test-case-fixed.patch
  - remove add-Adapting-IOException-of-Zip-to-ZipException.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> - 1:1.8.0.402-b06.0
changelog:
  - modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
  - modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified g1gc-numa-aware-Implementation.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - modified 8203699.patch
  - add Add-CaptchaTest-and-fix-KAE-Testcases.patch
  - add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
  - add Add-compiling-option-GS-when-building-windows-JDK.patch
  - add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
  - add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
  - add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
  - add 8057967-CallSite-dependency-tracking-scales-devastat.patch
  - add 8079205-CallSite-dependency-tracking-is-broken-after.patch


author: Benshuai5D <benshuai5d@163.com> - 1:1.8.0.402-b06.4
changelog:
  - add 8322725-tz-Update-Timezone-Data-to-2023d.patch
  - add 8325150-tz-Update-Timezone-Data-to-2024a.patch
  - add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
  - add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
  - add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
  - add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
  - add GCC-12-reports-some-compiler-warnings.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.412-b08.0
changelog:
  - del 8322725-tz-Update-Timezone-Data-to-2023d.patch
  - del 8325150-tz-Update-Timezone-Data-to-2024a.patch
  - del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified kae-phase2.patch
  - modified support-numactl-for-hadoop-yarn.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch


author: kuenking111 <wangkun49@huawei.com> -1:1.8.0.412-b08.3
changelog:
  - add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
  - add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.412-b08.4
changelog:
  - fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
  - fix loongson vendor error


author: kuenking111 <wangkun49@huawei.com> - 1:11.0.16.8-0
changelog:
  - modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
  - modified ZGC-Redesign-C2-load-barrier-to-expand-on-th.patch
  - modified fast-serializer-jdk11.patch
  - modified dfx-enhancement-of-FastSerializer.patch
  - modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
  - modified src-openeuler-openjdk-11-resolve-code-inconsistencies.patch
  - modified add-missing-inline.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
  - delete fix_X509TrustManagerImpl_symantec_distrust.patch
  - add fix_Internal_and_external_code_inconsistency.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.17.6-0
changelog:
  - update to 11.0.17+5
  - modified NUMA-Aware-Implementation-humongous-region.patch
  - modified Add-KAE-implementation.patch
  - modified fast-serializer-jdk11.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.17.8-0
changelog:
  - update to 11.0.17+8(GA)
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
  - modified PS-introduce-UsePSRelaxedForwardee-to-enable-using-r.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.18.10-0
changelog:
  - update to 11.0.18+10(GA)
  - modified 8231441-2-AArch64-Initial-SVE-backend-support.patch
  - delete 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch


author: wanghao <wanghao564@huawei.com> - 1:11.0.19.7-0
changelog:
  - update to 11.0.19+7(GA)
  - deleted 8225648-TESTBUG-java-lang-annotation-loaderLeak-Main.patch
  - modified Add-KAE-implementation.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
  - modified delete_expired_certificates.patch
  - modified 8205921-Optimizing-best_of_2-work-stealing-queue-selection.patch
  - deleted fix-CVE-2023-21930.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.21.9-0
changelog:
  - update to 11.0.21+9(GA)
  - modified delete_expired_certificates.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
  - modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
  - modified 8214527-AArch64-ZGC-for-Aarch64.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.22.7-0
changelog:
  - update to 11.0.22+7(GA)
  - modified delete_expired_certificates.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch


author: yaoxin <yao_xin001@hoperun.com> - 1.5.4-1
changelog:
  - Upgrade to 1.5.4 for fix cves: CVE-2022-40149,CVE-2022-40150,
    CVE-2022-45685,CVE-2022-45693 and CVE-2023-1436


author: fengtao <fengtao40@huawei.com> - 0.15-5
changelog:
  - we got upgrade error when upgrade json-c from very low version,
    for example json-c-0.11-5. because old version has a softlink:
    /usr/include/json-c  --> /usr/include/json
    and now, softlink has been removed. so, we fix this in pretrans


author: mengkanglai <mengkanglai2@huawei.com> - 0.16-2
changelog:
  - add backport-Add-test-to-check-for-the-memory-leak-mentioned-in-issue-781.patch
  - add backport-Fix-memory-leak-with-emtpy-strings-in-json_object_set_string.patch
  - add backport-json_object_from_fd_ex-fail-if-file-is-too-large.patch


author: sunhai <sunhai10@huawei.com> - 0.16-4
changelog:
  - backport patch to Fix build with clang-15+
  - backport patch to Fix json_tokener_parse_ex: handle out of memory errors


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-136.1.0.76
changelog:
  - coresight: trbe: Enable ACPI/Platform automatic module loading
  - arm64/trbe: Add initial MADT/SPE probing
  - ACPI 6.5: MADT: add support for trace buffer extension in GICC
  - coresight: Return the pointer of @pdata when not "fwnode"
  - blk-mq: don't access request_wrapper if request is not allocated from block layer
  - blk-mq: fix kabi broken due to request_wrapper
  - ide-cd: don't clear rq_flags after blk_get_request
  - iommu: Fix error handling in probe_acpi_namespace_devices()
  - !322 [sync] PR-321: net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol and fix the incorrect way to obtain parameters.
  - !320 Some bugfix about rx packet,rx copybreak and phy link ksettings for the HNS3.
  - net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol
  - net: hns3: fix getting supported parameter from driver in hclge_set_wol
  - net: hns3: fix setting incorrect phy link ksettings for firmware in resetting process
  - net: hns3: fix return value check bug of rx copybreak
  - net: hns3: fix incorrect hw rss hash type of rx packet


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-136.3.0.77
changelog:
  - !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
  - Revert "ipvlan: Modify the value of ipvlan modes"
  - net/af_packet: make sure to pull mac header
  - KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
  - dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
  - arm64: fix a concurrency issue in emulation_proc_handler()
  - vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
  - tools include UAPI: Sync linux/vhost.h with the kernel sources
  - tools include UAPI: Sync linux/vhost.h with the kernel sources
  - tools include UAPI: Sync linux/vhost.h with the kernel sources
  - vhost-vdpa: call vhost_vdpa_cleanup during the release
  - vhost: allow batching hint without size
  - vdpa_sim: set vringh notify callback
  - virtio_pci: struct virtio_pci_common_cfg add queue_reset
  - virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
  - virtio: use virtio_reset_device() when possible
  - virtio: document virtio_reset_device
  - virtio: wrap config->reset calls
  - virtio_pci: introduce helper to get/set queue reset
  - virtio_pci: extract the logic of active vq for modern pci
  - vhost-vdpa: uAPI to suspend the device
  - vhost-vdpa: introduce SUSPEND backend feature bit
  - vdpa: Add suspend operation
  - vhost-vdpa: Call ida_simple_remove() when failed
  - vDPA: fix 'cast to restricted le16' warnings in vdpa.c
  - vDPA: !FEATURES_OK should not block querying device config space
  - vdpa: make get_vq_group and set_group_asid optional
  - vhost-vdpa: return -EFAULT on copy_to_user() failure
  - vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
  - vhost-vdpa: support ASID based IOTLB API
  - vhost-vdpa: introduce uAPI to set group ASID
  - vhost-vdpa: uAPI to get virtqueue group id
  - vhost-vdpa: introduce uAPI to get the number of address spaces
  - vhost-vdpa: introduce uAPI to get the number of virtqueue groups
  - vhost-vdpa: introduce asid based IOTLB
  - vhost: support ASID in IOTLB API
  - vhost_iotlb: split out IOTLB initialization
  - vdpa: introduce config operations for associating ASID to a virtqueue group
  - vdpa: multiple address spaces support
  - vdpa: introduce virtqueue groups
  - vhost-vdpa: switch to use vhost-vdpa specific IOTLB
  - vhost-vdpa: passing iotlb to IOMMU mapping helpers
  - virtio-vdpa: don't set callback if virtio doesn't need it
  - vhost: move the backend feature bits to vhost_types.h
  - net/vdpa: Use readers/writers semaphore instead of cf_mutex
  - net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
  - vdpa: Add support for querying vendor statistics
  - vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
  - vhost: handle error while adding split ranges to iotlb
  - vdpa: change the type of nvqs to u32
  - vhost: fix hung thread due to erroneous iotlb entries
  - vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
  - vdpa: Protect vdpa reset with cf_mutex
  - vdpa: Avoid taking cf_mutex lock on get status
  - vdpa: Use BIT_ULL for bit operations
  - vdpa: Support reporting max device capabilities
  - vdpa: Add support for returning device configuration information
  - vdpa: Allow to configure max data virtqueues
  - vdpa: Read device configuration only if FEATURES_OK
  - vdpa: Sync calls set/get config/status with cf_mutex
  - vdpa: Provide interface to read driver features
  - vdpa: Mark vdpa_config_ops.get_vq_notification as optional
  - vdpa: Avoid duplicate call to vp_vdpa get_status
  - docs: document sysfs ABI for vDPA bus
  - vhost-vdpa: clean irqs before reseting vdpa device
  - vdpa: Enable user to set mac and mtu of vdpa device
  - vdpa: Use kernel coding style for structure comments
  - vdpa: Introduce query of device config layout
  - vdpa: Introduce and use vdpa device get, set config helpers
  - vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
  - virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
  - vdpa: min vq num of vdpa device cannot be greater than max vq num
  - vdpa: add new callback get_vq_num_min in vdpa_config_ops
  - vhost_vdpa: unset vq irq before freeing irq
  - vdpa: potential uninitialized return in vhost_vdpa_va_map()
  - vhost-iotlb: Add an opaque pointer for vhost IOTLB
  - vdpa: Support transferring virtual addressing during DMA mapping
  - vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
  - vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
  - vhost-vdpa: Handle the failure of vdpa_reset()
  - vdpa: Fix some coding style issues
  - vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
  - vdpa: Add documentation for vdpa_alloc_device() macro
  - virtio/vdpa: clear the virtqueue state during probe
  - vp_vdpa: correct the return value when fail to map notification
  - virito_pci libray: hide vp_modern_map_capability()
  - vhost/vdpa: Remove the restriction that only supports virtio-net devices
  - virtio_pci_modern: hide vp_modern_get_queue_notify_off()
  - vdpa: Follow kdoc comment style
  - vdpa: Follow kdoc comment style
  - virtio_vdpa: don't warn when fail to disable vq
  - vdpa: Use simpler version of ida allocation
  - vhost_vdpa: switch to vmemdup_user()


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-136.4.0.78
changelog:
  - RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
  - RDMA/hns: Fix AH attr queried by query_qp
  - RDMA/hns: Kernel notify usr space to stop ring db


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-136.8.0.80
changelog:
  - Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
  - Bluetooth: L2CAP: Fix build errors in some archs
  - cpuidle: add cpuidle-haltpoll driver module parameter
  - clk: imx: Add check for kcalloc
  - x86/cpu/hygon: Set __max_die_per_package on Hygon
  - mm/dynamic_hugetlb: fix clear PagePool without lock protection
  - mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
  - mm/swapfile: use new way to fix broken kabi in swap_info_struct
  - block: always align request_wrapper to cacheline
  - block: fix crash on cmpxchg for request_wrapper
  - efi/libstub: Fix build error in efi-stub.c for riscv
  - mm: init: Fix build waring for ascend enable features
  - mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
  - ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
  - xen/netback: fix build warning
  - xen/netback: Ensure protocol headers don't fall in the non-linear area
  - block: only use cmpxchg64 in 64bit platform
  - proc: proc_skip_spaces() shouldn't think it is working on C strings
  - proc: avoid integer type confusion in get_proc_long
  - sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-136.10.0.82
changelog:
  - scsi: iscsi: remove .unbind_conn from iscsi_transport
  - Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"


author: Zheng Zengkai <zhangzq20@chinatelecom.cn> - 5.10.0-136.12.0.88
changelog:
  - i2c: designware: Get right data length
  - x86/cpufeatures: Fix cpu capabilities incorrect detection
  - erofs over fscache features support


author: Guo Jin <guoj17@chinatelecom.cn> - 5.10.0-136.12.0.88.1
changelog:
  - sched: add cfs bandwidth recharge function
  - net/bonding: solve the packet loss problem in bond6 and bridge network
  - net/bonding: solve the packet loss problem of bond6 in spr machine
  - net/bonding: optimize arp mul send
  - virtio: fix hot plug failure on bare metal platforms


author: Guo Jin <guoj17@chinatelecom.cn> - 5.10.0-136.12.0.88.2
changelog:
  - Adapted for EMR 8th Generation Cloud Host
  - netfilter/nf_tables: fix CVE-2024-1086 bug
  - cgroup: open CONFIG_BLK_CGROUP_IOCOST defconfig in x86 arch
  - x86/kvm: increase KVM_USER_MEM_SLOTS to 32K


author: Guo Jin <guoj17@chinatelecom.cn> - 5.10.0-136.12.0.88.3
changelog:
  - sched: fix the hardlockup issue introduced in 88.1 version
  - arch: support Hygon 4
  - arm/kvm: increase KVM_USER_MEM_SLOTS to 32K
  - bugfix: fix CVPKER-230 bug
  - bugfix: fix some failed testcases which detected by ltp-202405


author: Guo Jin <guoj17@chinatelecom.cn> - 5.10.0-136.12.0.88.4
changelog:
  - vfio: fix soft lockup problems when the value of npage is large
  - virtio: fix the performance issues of the redis benchmark test
  - Add Kunpeng 920B basic support
  - perf/x86/uncore: support for Hygon family 18h model 4h-7h and 10h DF PMU
  - pci: optimize pci_wait_for_pending logic for zijin virtio device


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-136.0.0.74
changelog:
  - sched: disable sched_autogroup by default
  - Revert "add barriers to buffer_uptodate and set_buffer_uptodate"
  - Fixed the issue that the macro def_domain_type is repeatedly defined.
  - coresight: trbe: remove cpuhp instance node before remove cpuhp state
  - RDMA/hns: adjust the structure of RoCE bonding driver
  - RDMA/hns: add constraints for bonding-unsupported situations
  - RDMA/hns: fix the error of missing GID in RoCE bonding mode 1
  - RDMA/hns: fix possible dead lock when setting RoCE Bonding
  - drm/i915: fix TLB invalidation for Gen12 video and compute engines
  - fork: Fixed the extended kabi memory is not initialized
  - mm/dynamic_hugetlb: fix compound_nr incorrect
  - mm/shmem: fix shmem_swapin() race with swapoff
  - swap: fix do_swap_page() race with swapoff
  - mm/swapfile: fix broken kabi in swap_info_struct
  - mm/swapfile: use percpu_ref to serialize against concurrent swapoff
  - swapfile: fix soft lockup in scan_swap_map_slots
  - spi: hisi-sfc-v3xx: drop unnecessary ACPI_PTR and related ifendif protection
  - spi: hisi-sfc-v3xx: fix potential irq race condition
  - spi: hisi-sfc-v3xx: add address mode check
  - spi: hisi-sfc-v3xx: extend version checking compatibility
  - coresight: ete: Add acpi match id for Hip09
  - coresight: etm4x: Fix accesses to TRCSEQRSTEVR and TRCSEQSTR
  - l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
  - l2tp: Serialize access to sk_user_data with sk_callback_lock
  - Bluetooth: L2CAP: Fix u8 overflow
  - workqueue: fix state-dump console deadlock
  - preempt/dynamic: Fix typo in macro conditional statement
  - jump_label: Fix usage in module __init
  - arm64/mpam: update last_cmd_status in parse_cache() and parse_bw()
  - arm64/mpam: remove kernfs_get() calls() and add kernfs_put() calls to prevent refcount leak
  - arm64/mpam: make mbw_max/min not less than min_bw
  - arm64/mpam: Fix indent format error in resctrl_parse_param()
  - arm64/mpam: decrease dom_num when domain goes offline
  - arm64/mpam: correct mbw_max/min if remainder is too large
  - mm/migrate.c: rework migration_entry_wait() to not take a pageref
  - sched/fair: limit burst to zero when cfs bandwidth is toggled off
  - sched: Fix null-ptr-deref in free_fair_sched_group
  - !317 AMD: Fix allmodconfig build issue in amd perf uncore module.
  - !314 config: disable CONFIG_QOS_SCHED_SMT_EXPELLER
  - x86/cpu: Add get_llc_id() helper function
  - perf/amd/uncore: Clean up header use, use <linux/ include paths instead of <asm/
  - perf/amd/uncore: Simplify code, use free_percpu()'s built-in check for NULL
  - config: disable CONFIG_QOS_SCHED_SMT_EXPELLER
  - !232 txgbe : merge net-swift txgbe out_of_tree module v1.2.3 to openEuler/txgbe for some known bugs
  - !316 SPR: support Intel In Field Scan(IFS)
  - Enable Intel In Field Scan(IFS) as kernel module
  - openeuler: net: txgbe: Fix some known bugs, merge net-swift txgbe-1.2.3 out-of-tree
  - platform/x86/intel/ifs: Add CPU_SUP_INTEL dependency
  - Documentation: In-Field Scan
  - platform/x86/intel/ifs: add ABI documentation for IFS
  - trace: platform/x86/intel/ifs: Add trace point to track Intel IFS operations
  - platform/x86/intel/ifs: Add IFS sysfs interface
  - platform/x86/intel/ifs: Add scan test support
  - platform/x86/intel/ifs: Authenticate and copy to secured memory
  - platform/x86/intel/ifs: Check IFS Image sanity
  - platform/x86/intel/ifs: Read IFS firmware image
  - platform/x86/intel/ifs: Add stub driver for In-Field Scan
  - stop_machine: Add stop_core_cpuslocked() for per-core operations
  - x86/msr-index: Define INTEGRITY_CAPABILITIES MSR
  - x86/microcode/intel: Expose collect_cpu_info_early() for IFS
  - !312 intel: backport fix for SPR c1 and c1e independent support for intel_idle
  - !311 intel: backport  Sapphire Rapids PMT errata fix
  - intel_idle: make SPR C1 and C1E be independent
  - platform/x86/intel/pmt: Sapphire Rapids PMT errata fix
  - openeuler: configs: delete txgbe/Kconfig, add txgbe_config to netswift/Kconfig
  - !293 openEuler: add openEuler/MAINTAINERS for Maintainers & Committers
  - !281 [5.10] [Feature] :add netswift WX1860 series NIC ngbe  module support
  - openeuler: config: txgbe mode compile param default config
  - !310 config: support hns3 pmu
  - openeuler: net: ngbe: add ngbe module support
  - openeuler: config: add NGBE MODODULE CONFIG
  - config: support hns3 pmu
  - !304 update patches for sw64 architecture
  - !286 defconfig: add helper script for update openeuler_defconfig
  - !306 tc-testing: fix a bug in gitignore of tc-testing
  - configs: update arch/x86/configs/openeuler_defconfig
  - configs: update arch/arm64/configs/openeuler_defconfig
  - kconfig: Add script to update openeuler_defconfig
  - !303 iommu: bugfix for missing symbols when build arm_smmu_v3.ko
  - scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq
  - scsi: ufs: core: Enable link lost interrupt
  - perf/x86/intel/uncore: Fix broken read_counter() for SNB IMC PMU
  - perf python: Fix build when PYTHON_CONFIG is user supplied
  - Documentation/ABI: Mention retbleed vulnerability info file for sysfs
  - arm64: Fix match_list for erratum 1286807 on Arm Cortex-A76
  - md: call __md_stop_writes in md_stop
  - Revert "md-raid: destroy the bitmap after destroying the thread"
  - mm/hugetlb: fix hugetlb not supporting softdirty tracking
  - xen/privcmd: fix error exit of privcmd_ioctl_dm_op()
  - ACPI: processor: Remove freq Qos request for all CPUs
  - s390: fix double free of GS and RI CBs on fork() failure
  - asm-generic: sections: refactor memory_intersects
  - loop: Check for overflow while configuring loop
  - x86/bugs: Add "unknown" reporting for MMIO Stale Data
  - perf/x86/lbr: Enable the branch type for the Arch LBR by default
  - btrfs: check if root is readonly while setting security xattr
  - btrfs: add info when mount fails due to stale replace target
  - btrfs: replace: drop assert for suspended replace
  - btrfs: fix silent failure when deleting root reference
  - ionic: fix up issues with handling EAGAIN on FW cmds
  - rxrpc: Fix locking in rxrpc's sendmsg
  - ixgbe: stop resetting SYSTIME in ixgbe_ptp_start_cyclecounter
  - net: Fix a data-race around sysctl_somaxconn.
  - net: Fix data-races around sysctl_devconf_inherit_init_net.
  - net: Fix data-races around sysctl_fb_tunnels_only_for_init_net.
  - net: Fix a data-race around netdev_budget_usecs.
  - net: Fix a data-race around netdev_budget.
  - net: Fix a data-race around sysctl_net_busy_read.
  - net: Fix a data-race around sysctl_net_busy_poll.
  - net: Fix a data-race around sysctl_tstamp_allow_data.
  - net: Fix data-races around sysctl_optmem_max.
  - bpf: Folding omem_charge() into sk_storage_charge()
  - ratelimit: Fix data-races in ___ratelimit().
  - net: Fix data-races around netdev_tstamp_prequeue.
  - net: Fix data-races around netdev_max_backlog.
  - net: Fix data-races around weight_p and dev_weight_[rt]x_bias.
  - net: Fix data-races around sysctl_[rw]mem_(max|default).
  - net: Fix data-races around sysctl_[rw]mem(_offset)?.
  - tcp: tweak len/truesize ratio for coalesce candidates
  - netfilter: nf_tables: disallow jump to implicit chain from set element
  - netfilter: nf_tables: upfront validation of data via nft_data_init()
  - netfilter: bitwise: improve error goto labels
  - netfilter: nft_cmp: optimize comparison for 16-bytes
  - netfilter: nf_tables: consolidate rule verdict trace call
  - netfilter: nftables: remove redundant assignment of variable err
  - netfilter: nft_tunnel: restrict it to netdev family
  - netfilter: nft_osf: restrict osf to ipv4, ipv6 and inet families
  - netfilter: nf_tables: do not leave chain stats enabled on error
  - netfilter: nft_payload: do not truncate csum_offset and csum_type
  - netfilter: nft_payload: report ERANGE for too long offset and length
  - bnxt_en: fix NQ resource accounting during vf creation on 57500 chips
  - netfilter: ebtables: reject blobs that don't provide all entry points
  - net: ipvtap - add __init/__exit annotations to module init/exit funcs
  - bonding: 802.3ad: fix no transmission of LACPDUs
  - net: moxa: get rid of asymmetry in DMA mapping/unmapping
  - net: ipa: don't assume SMEM is page-aligned
  - net/mlx5e: Properly disable vlan strip on non-UL reps
  - ice: xsk: prohibit usage of non-balanced queue id
  - ice: xsk: Force rings to be sized to power of 2
  - nfc: pn533: Fix use-after-free bugs caused by pn532_cmd_timeout
  - rose: check NULL rose_loopback_neigh->loopback
  - mm/smaps: don't access young/dirty bit if pte unpresent
  - mm/huge_memory.c: use helper function migration_entry_to_page()
  - SUNRPC: RPC level errors should set task->tk_rpc_status
  - NFSv4.2 fix problems with __nfs42_ssc_open
  - NFS: Don't allocate nfs_fattr on the stack in __nfs42_ssc_open()
  - xfrm: clone missing x->lastused in xfrm_do_migrate
  - xfrm: fix refcount leak in __xfrm_policy_check()
  - kernel/sched: Remove dl_boosted flag comment
  - vfs: make sync_filesystem return errors from ->sync_fs
  - fs: remove __sync_filesystem
  - pinctrl: amd: Don't save/restore interrupt status and wake status bits
  - kernel/sys_ni: add compat entry for fadvise64_64
  - parisc: Fix exception handler for fldw and fstw instructions
  - audit: fix potential double free on error path from fsnotify_add_inode_mark
  - kbuild: dummy-tools: avoid tmpdir leak in dummy gcc
  - iommu: bugfix for missing symbols when build arm_smmu_v3.ko
  - !308 Enable CONFIG_UPROBES_SUPPORT_PC_ALTER by default
  - uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER by default
  - tc-testing: gitignore, delete plugins directory
  - sw64: fix kernel_stack_pointer
  - sw64: add support for KPROBES_ON_FTRACE
  - sw64: optimize single float load store instruction emulation
  - sw64: fix VM_DATA_DEFAULT_FLAGS
  - sw64: kvm: support debugging guest kernel via gdb
  - sw64: add basic NVDIMM support
  - sw64: fix argument type of __sw64_vcpu_run()
  - sw64: ftrace: fix function graph tracing support
  - sw64: generate call instruction with disp 0
  - sw64: ftrace: fix ARCH_SUPPORTS_FTRACE_OPS support
  - sw64: mark sched_clock() as notrace
  - sw64: fix memmap_range_valid()
  - sw64: bpf: improve BPF_CALL address check
  - sw64: add basic livepatch support on SW64
  - sw64: acpi: fix compilation dependency when CONFIG_PCI=n
  - sw64: fix recordmcount and dynamic ftrace
  - sw64: fix topology setup
  - sw64: kvm: fix guest longtime offset of VCPU
  - sw64: improve stack trace
  - sw64: remove unused boot syncronization code
  - Revert "sw64: clean up unused single step support in kernel"
  - sw64: fix compile error when CONFIG_DEBUG_PER_CPU_MAPS=y
  - sw64: always restore MATCH configuration after scheduling
  - sw64: track last vpn in struct cpuinfo_sw64
  - sw64: make struct cpuinfo_sw64 cache line aligned
  - sw64: kvm: add qemu fw_cfg device to chip_vt.dts
  - sw64: kvm: add qemu fw_cfg device support in sysfs
  - openEuler: add openEuler/MAINTAINERS for Maintainers & Committers


author: zhangxiaoyu<zhangxiaoyu58@huawei.com> - 2.0.9-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix update cpu-rt period failed and fix layer size type as int64


author: jikai<jikai11@huawei.com> - 2.0.9-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix potential log error, empty pointer reference and overflow


author: zhangxiaoyu<zhangxiaoyu58@huawei.com> - 2.0.8-9
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC:add macro to adapt musl libc and add add-gids option for exec


author: Eibz-Chan <chenbingzhao@huawei.com> - 590-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:[add] backport patches from upstream
  	Fix-memory-leak-when-using-corrupt-lesshst-file.patch
  	Fix-crash-when-enter-invaid-pattern-in-command.patch


author: yaoxin <yaoxin30@huawei.com> - 1.0.13-1
changelog:
  - Upgrade libEMF to 1.0.13; fix CVE-2020-13999 CVE-2020-11863 CVE-2020-11865 CVE-2020-11866 CVE-2020-11864


author: yixiangzhike <yixiangzhike007@163.com> - 2.32-3
changelog:
  - capsh better error handling for integer parsing
  - setcap clean up error handling of the ns rootid argument


author: yanglongkang <yanglongkang@h-partners.com> - 2.61-7
changelog:
  - backport upstream patches:
    getcpcaps: fix program name in help message
    Stop using _pam_overwrite() in pam_cap.c


author: chenhaixing <chenhaixing@huawei.com> - 0.69.0-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:libdnf:Avoid reinstalling installonly packages marked for ERASE
                Fix utimes error message in dnf-repo
                Do not download repository if our local cache is up to date in dnf-repo
                python bindings:Load all modules with RTLD_GLOBAL


author: hanhuihui <hanhuihui5@huawei.com> - 0.69.0-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix history rollback cmd not meet the expectation
         Fix memory leak in subject-py


author: zhengxiaoxiao <zhengxiaoxiao@huawei.com> - 1.9.4-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add backport-Fix-the-behavior-for-child-process.patch
             backport-Clear-AESWRAP-scratch-area-immediately-after-use.patch


author: Guoshuai Sun <sunguoshuai@huawei.com> - 1.2.57-12
changelog:
  - Fix CVE-2013-7353 CVE-2013-7354 CVE-2017-12652
    And we have check CVE-2014-9495 CVE-2011-3045 CVE-2008-3964 CVE-2015-8126 CVE-2015-0973 alreadyi been fixed before.
    And CVE-2016-3751 CVE-2013-6954 didn'd involved.


author: zhangjun<zhangjun@kylinos.cn> - 0.7.20-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memory leak when using testsolv to execute cases 
         Fix segfault on conflict resolution when using bindings


author: zengweifeng <zwfeng@huawei.com> - 0.9.6-3
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:add errno while reset with strtoul call
         fix error returned in ssh_userauth_try_publicke
         client do not close the socket if it was set via opt
         fix openForward to not set sourcehost to NULL
         fix the length calculation of packet in sftp_write


author: xinghe <xinghe2@h-partners.com> - 0.9.6-4
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:options: Parse hostname by last '@'
         torture_options: Add test for '@' in login name
         session: Initialize pointers
         tests: Ensure the mode of the created file is what we set


author: seuzw <930zhaowei@163.com> - 0.9.6-5
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:backport some upstream patches:
         Avoid false positive report from Coveritt CID 1470006
         kdf: Avoid endianess issues
         misc: Fix format truncation in ssh_path_expand_escape()
         misc: Fix expanding port numbers
         misc: rename gettimeofday symbol
         session: Initialize the port with the standard port (22)
         session->socket_callbacks.data will be set to ssh_packet_socket_callback
         socket: Add error message if execv fails
         tests: Add test for expanding port numbers


author: renmingshuai <renmingshuai@huawei.com> - 0.9.6-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:config: Escape brackets in ProxyCommand build
         packet: do not enqueue outgoing packets


author: renmingshuai <renmingshuai@huawei.com> - 0.9.6-8
changelog:
  - Type:CVE
  - Id:CVE-2023-6004,CVE-2023-6918,CVE-2023-48795
  - SUG:NA
  - DESC:fix CVE-2023-6004, CVE-2023-6918 and CVE-2023-48795


author: zhouwenpei <zhouwenpei1@h-partners.com> - 4.3.0-23
changelog:
  - fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
  - fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804


author: yezengruan <yezengruan@huawei.com> - 0.7.3-7
changelog:
  - tpm2: Reset TPM2B buffer sizes after test fails for valid buffer size
  - tpm2: Add maxSize parameter to TPM2B_Marshal for sanity checks
  - tpm2: Restore original value if unmarsalled value was illegal
  - fix CVE-2021-3623


author: XuFei <xufei30@huawei.com> - 6.2.0-56
changelog:
  - nodedev: ignore EINVAL from libudev in udevEventHandleThread
  - qemu: tpm: Pass --logfile to swtpm_setup for incoming migration


author: zhangxinhao <zhangxinhao1@huawei.com> - 6.2.0-57
changelog:
  - cpu_topo: support for cpu_topo "clusters” in conf
  - cpu_topo: support for specifying "clusters" in qemu comand
  - cpu_topo: support for reporting cluster_id in NUMA topology
  - cpu_topo: fix detection of vCPU pids when multiple clusters are present


author: Jiabo Feng <fengjiabo1@huawei.com> - 6.2.0-58
changelog:
  - virnetsshsession: Adapt to change libssh2 API
  - selinux: Reflect context_str() type change
  - Revert "selinux: adapt to libselinux"
  - selinux: adapt to libselinux
  - fix error in printf format string


author: Jiabo Feng <fengjiabo1@huawei.com> - 6.2.0-61
changelog:
  - lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
  - qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
  - tests: upstream Fixing compiler warning in cputest
  - qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
  - virrandom: Fix printf format string in virRandomGenerateWWN()
  - fix the issue of errors when saving after 'virsh edit'
  - Use (un)signed printf specifiers correctly
  - admin: fix leak of typed parameters on error
  - esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
  - qemu: Fix incorrect command name in error messages


author: jiangdongxu <jiangdongxu1@huawei.com> - 6.2.0-62
changelog:
  - vdpa: Release pci slot address when unplugging vdpa device
  - vdpa: return pcieFlags when calculate vdpa passthrough devices.
  - vdpa: support vdpa device migrate
  - vdpa: support vdpa device hot plug/unplug
  - vdpa: Introduce the new device type vdpa to hostdev
  - node_device: fix leak of DIR*
  - Include vdpa devices in node device list


author: caozhongwang <caozhongwang1@huawei.com>
changelog:
  - interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
  - remote: check for negative array lengths before allocation (CVE-2024-2494)
  - vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)


author: jiangjiacheng <jiangjiacheng@huawei.com> - 6.2.0-64
changelog:
  - util: keep track of full GSource object not source ID number
  - rpc: mark source returned by virEventGLibAddSocketWatch as unused
  - rpc: ensure temporary GSource is removed from client event loop (CVE-2024-4418)


author: Jiabo Feng <fengjiabo1@huawei.com> - 6.2.0-65
changelog:
  - remote: fix double free of migration params on error
  - qemu: avoid deadlock in qemuDomainObjStopWorker We are dropping the only reference here so that the event loop thread is going to be exited synchronously. In order to avoid deadlocks we need to unlock the VM so that any handler being called can finish execution and thus even loop thread be finished too.
  - virsh: add tmm main command word Add tmm command word into virsh tool to call get tmm memory info API. It makes virsh can use tmm main commmand to show tmm memory info on console. This command requires specific kernel and a kernel driver to make sure its regular function. If runnning environment missing the above reliance, this command will show error result on console.
  - libvirt: add get tmm memory info API and libvirtd RPC Add the get tmm memory info API into libvirt-host. Also should add the RPC calls into libvirtd for API calling.
  - libvirt: support the virtCCA feature Add cvm parameter into the type of LaunchSecurity which is a optional filed for libvirt xml. Its purpose is to pass the cvm parameter through to qemu. Also this patch support virsh edit to save cvm parameter into libvirt temporary xml.
  - qemu_driver: Add calc_mode for dirtyrate statistics
  - virsh: Add mode option to domdirtyrate-calc virsh api
  - qemu: Generate command line for dirty-ring-size
  - qemu: support dirty ring feature
  - conf: Turn virDomainDef.kvm_features into a struct
  - qemu_validate: Allow kvm hint-dedicated on non-passthrough VMs
  - virDomainFeaturesKVMDefParse: Remove tautological "if"
  - virDomainFeaturesKVMDefParse: Remove tautological "switch"
  - virxml: Add virXMLPropUInt
  - virxml: Add virXMLPropInt
  - virxml: Add virXMLPropTristateSwitch
  - virxml: Add virXMLPropTristateBool
  - virDomainFeaturesKVMDefParse: Remove ctxt
  - virDomainFeaturesDefParse: Factor out KVM parsing into separate function
  - internal.h: Introduce and use VIR_IS_POW2()
  - hotpatch: if hotpatch_path not in qemu.conf,the hotpatch doesn't antoload


author: fuanan <fuanan3@h-partners.com> - 2.9.14-1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:Upgrade to upstream v2.9.14 and Cleanup duplicate installation


author: fuanan <fuanan3@h-partners.com> - 2.9.12-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memory leaks in xmlACatalogAdd when xmlHashAddEntry failed


author: zhaoxiaohu <zhaoxiaohu@kuaishou.com> - 20211027-3
changelog:
  - fix build install need use copy-firmware.sh ice Intel(R) E810 Series intel/ice/ddp/ice.pkg -> ice-1.3.26.0.pkg


author: bzhaoop<bzhaojyathousandy@gmail.com> -4:10.5.15-1
changelog:
  - Bump to 10.5.15
  - For resolving CVEs:
  - CVE-2022-24048
  - CVE-2022-24052
  - CVE-2022-24050
  - CVE-2022-24051
  - CVE-2021-46668
  - CVE-2021-46658


author: bzhaoop<bzhaojyathousandy@gmail.com> - 4:10.5.15-2
changelog:
  - Fix the systemd service issue about the env variable.
  - Apply the patches from old branch.
  - Adaption the cmake version and integrate into the spec file.


author: bzhaoop<bzhaojyathousandy@gmail.com> - 4:10.5.16-1
changelog:
  - Bump to 10.5.16 for resolving CVEs below
  - CVE-2022-27385
  - CVE-2022-27382
  - CVE-2022-27451
  - CVE-2022-27457
  - CVE-2022-27446
  - CVE-2022-27455
  - CVE-2022-27444
  - CVE-2022-27379
  - CVE-2022-27386
  - CVE-2022-27447
  - CVE-2022-27448
  - CVE-2022-27449
  - CVE-2022-27445
  - CVE-2022-27456
  - CVE-2022-27458
  - CVE-2022-27452
  - CVE-2022-27376
  - CVE-2022-27378
  - CVE-2022-27377
  - CVE-2022-27381
  - CVE-2022-27383
  - CVE-2022-27380
  - CVE-2022-27384
  - CVE-2022-27387
  - And we fit the latest packages for the new mariadb release, such as errmsg package.


author: xiejing <xiejing@kylinos.cn> - 1:10.5.25-1
changelog:
  - Bump to 10.5.25 for resolving CVE-2024-21096, CVE-2023-22084
  - Fix version description in systemd service file


author: Alex Williamson <alex.williamson@redhat.com> - 0.57-1
changelog:
  - 13f1322e576c ("Remove systemd support")
  - d84a2737e79c ("Fix device udev tagging")
  - 68c92c7beaca ("Tag before generating spec file")
  - c34c4f1ade60 ("Update mdevctl.spec.in for lsmdev.8")
  - ed86d345aae0 ("Fix systemd UUID escaping")
  - d4e83f08161d ("Merge pull request #13 from cpaelzer/fix-lsmdev-man-page")
  - 3c0d285b75ab ("lsmdev - add the alternative name to the man page")


author: Alex Williamson <alex.williamson@redhat.com> - 0.61-1
changelog:
  - d7dfac5f5bfb ("Merge pull request #15 from cohuck/attr_sanity")
  - 28a9fa17b51e ("validate attribute names")


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 1.1.0-2
changelog:
  - Create additonal directories required by installation.
  - Fix sporadic callout test failures
    Related: rhbz#1999687


author: wangkai <13474090681@163.com> - 20240312-1
changelog:
  - Update to 20240312 for fix CVE-2023-38575, CVE-2023-39368,
    CVE-2023-22655, CVE-2023-43490, CVE-2023-28746


author: xulei<xulei@xfusion.com> - 20.10.24-5
changelog:
  - DESC: Fix missing runc dependencies
          The declaration conflicts with the installation of docker-engine


author: yaoxin <yao_xin001@hoperun.com> - 1.27.4-1
changelog:
  - Update to 1.27.4 for fix CVE-2024-6381 and CVE-2024-6383
  - libbson Fixes:
    * Fix build with Visual Studio 2013.
    * Fix parsing of colon in timezone.
    * Error on failure to init subdocument in bson_iter_visit_all.
    * Fix string handling in bson_string_new and bson_string_append.
    * Fix iteration in bson_strfreev.
    * Use aligned alloc for bson_array_builder_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Fix conversion warning with GCC 12.
    * Fixes to some format strings in trace logs.
    * Allow mongoc_buffer_t to be larger than INT_MAX.
    * Add bson_array_builder_t.
  - libmongoc Fixes:
    * Fix possible crash reading malformed wire protocol message.
    * Upgraded bundled Zlib from 1.2.3 to 1.3.1
    * Close leftover connections to removed servers.
    * Fix possible crash when client is configured with empty password.
    * Fix possible hang if mongoc_gridfs_file_readv is called with a corrupt chunk with incomplete data.
    * Fix 32-bit compile with 64-bit time_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Disable shared libmongoc targets if ENABLE_SHARED=OFF
    * Fix documentation build with Python 3.9.
    * Fix data race in mongoc_cursor_get_host.
    * Add back support for BUILD_VERSION CMake option. BUILD_VERSION was unintentionally removed in 1.25.0.
    * Send recoveryToken in transactions when connected to a load balancer.


author: liwu <liwu13@huawei.com> - 8.0.26-1
changelog:
  - Upgrade mysql to 8.0.26,fix CVES:CVE-2021-2356 CVE-2021-2339 CVE-2021-2354
    CVE-2021-2352 CVE-2021-2340


author: yaoxin <yaoxin30@huawei.com> - 8.0.27-1
changelog:
  - Upgrade mysql to 8.0.27,fix CVES:CVE-2021-2471 CVE-2021-2478 CVE-2021-2479
    CVE-2021-2481  CVE-2021-35546 CVE-2021-35575 CVE-2021-35577 CVE-2021-35591
    CVE-2021-35596 CVE-2021-35597 CVE-2021-35602 CVE-2021-35604 CVE-2021-35607
    CVE-2021-35608 CVE-2021-35610 CVE-2021-35612 CVE-2021-35618
    CVE-2021-35621-to-CVE-2021-35636 CVE-2021-35638-to-CVE-2021-35642
    CVE-2021-35644-to-CVE-2021-35648


author: jintang song<jintang.song@epro.com.cn> - 8.0.29-1
changelog:
  - Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
    CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
    CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
    CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
    CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
    CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
    CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490


author: jintang song<jintang.song@epro.com.cn> - 8.0.29-1
changelog:
  - Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451
    CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414
    CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412
    CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418
    CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425
    CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484
    CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490


author: wangkai <13474090681@163.com> - 8.0.37-1
changelog:
  - Update to 8.0.37 for fix CVEs(CVE-2024-20964,CVE-2024-20971,CVE-2024-20976,
    CVE-2024-20973,CVE-2024-20978,CVE-2024-20981,CVE-2024-20962,CVE-2024-20977,
    CVE-2024-20963,CVE-2024-20965,CVE-2024-20972,CVE-2024-20961,CVE-2024-20982,
    CVE-2024-20970,CVE-2024-20967,CVE-2024-20984,CVE-2024-20974,CVE-2024-20966,
    CVE-2024-20960,CVE-2024-20985,CVE-2024-20969,CVE-2024-21000,CVE-2024-21069,
    CVE-2024-21009,CVE-2024-21087,CVE-2024-21047,CVE-2024-20998,CVE-2024-21013,
    CVE-2024-21060,CVE-2024-21008,CVE-2024-21102,CVE-2024-21054,CVE-2024-21062,
    CVE-2024-20994,CVE-2024-21096,CVE-2024-21061,CVE-2024-20993,CVE-2024-21055,
    CVE-2024-21057,CVE-2023-6129)


author: wangkai <13474090681@163.com> - 8.0.38-1
changelog:
  - Update to 8.0.38 for fix CVEs(CVE-2024-21125,CVE-2024-21142,CVE-2024-21179,
    CVE-2024-21171,CVE-2024-21130,CVE-2024-21162,CVE-2024-21177,CVE-2024-20996,
    CVE-2024-21134,CVE-2024-21165,CVE-2024-21173,CVE-2024-21129,CVE-2024-21127,
    CVE-2024-21163)


author: bzhaoop <bzhaojyathousandy@gmail.com> - 5.7.37-1
changelog:
  - Fix CVE issues for bump to the 5.7.37 version
  - CVE-2022-21245
  - CVE-2022-21270
  - CVE-2022-21303
  - CVE-2022-21304
  - CVE-2022-21344
  - CVE-2022-21367
  - CVE-2021-35624
  - CVE-2021-2356
  - CVE-2021-2011
  - CVE-2021-2010
  - CVE-2021-2007


author: gaihuiying <gaihuiying1@huawei.com> - 5.8-15
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix undefined behavior in asn_build_int()
         libsnmp: Rework parse_imports()
         libsnmp: Increase MAX_IMPORTS
         libsnmp: Allocate the module import list on the heap
         libsnmp: Fix a memory leak in a MIB parser error path
         libsnmp: Fix the getoid() error path


author: gaihuiying <eaglegai@163.com> - 1:5.9.1-3
changelog:
  - Type:CVE
  - CVE:CVE-2022-24805 CVE-2022-24806 CVE-2022-24807 CVE-2022-24808 CVE-2022-24809 CVE-2022-24810
  - SUG:NA
  - DESC:fix CVE-2022-24805 CVE-2022-24806 CVE-2022-24807
             CVE-2022-24808 CVE-2022-24809 CVE-2022-24810


author: xingwei <xingwei14@h-partners.com> - 1:5.9.1-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: IF-MIB, IP-FORWARD-MIB: Improve robustness
          IF-MIB: pass the network interface index to net
          IF-MIB: fix a memory leak
          IF-MIB: fix a recently introduced use after free
          IF-MIB: add a trailing newline to an error message


author: wangkai <wangkai385@huawei.com> - 4.1.13-17
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-45105 is fixed,the version needs to be rebuild.


author: wangkai <13474090681@163.com> - 1:12.22.11-5
changelog:
  - Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
  - CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
  - CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
  - CVE-2023-32559,CVE-2022-35256


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p15-8
changelog:
  - Type:CVE
  - ID:CVE-2023-26551
  - SUG:NA
  - DESC:make sure the buffer has enough room for the input extra characters


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p15-10
changelog:
  - Type:CVE
  - ID:CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26554,CVE-2023-26555
  - SUG:NA
  - DESC:change the patch of CVE-2023-26551 and fix CVE-2023-26555


author: liuyumeng <liuyumeng5@huawei.com> - 2.3.1-6
changelog:
  - fix CVE-2020-8112 CVE-2020-6851 CVE-2020-27823 CVE-2020-27824,avoid integer overflow:pre-patch of CVE-2020-27841,fix fuzz


author: renmingshuai<renmingshuai@huawei.com> - 8.8p1-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport some upstream patches and modify some patches numbers


author: renmingshuai<renmingshuai@huawei.com> - 8.8p1-25
changelog:
  - Type:CVE
  - CVE:CVE-2023-48795,CVE-2023-51385
  - SUG:NA
  - DESC:fix CVE-2023-48795 and CVE-2023-51385


author: panxiaohe <panxh.life@foxmail.com> - 8.0.0-8
changelog:
  - use lmdb instead of Berkeley DB for package dba
  - update %configure for riscv
  - delete unused rcver


author: zhouwenpei <zhouwenpei1@h-partners.com> - 0.90.0-6
changelog:
  - fix CVE-2022-37050,CVE-2022-37051,CVE-2022-37052,CVE-2022-38349,CVE-2020-23804
  - fix install error


author: xiongyi <xiongyi@uniontech.com> - 0.90.0-7
changelog:
  - fix CVE-2020-36023
  - fix infinite looping in cvtGlyph with broken files
  - patch source:https://gitlab.freedesktop.org/poppler/poppler/-/issues/1013


author: bzhaoop <bzhaojyathousandy@gmail.com> - 13.3-6
changelog:
  - Porting "Fix subtransaction test failed" from master branch
  - Fri May 6 2022 caodongxia <caodongxia@h-partners.com> - 13.3-4
  - sync the same line with master


author: dillon chen <dillon.chen@gmail.com> - 13.3-8
changelog:
  - Fix build error for loongarch64
  - Fix issue: confilct between libpq-devel and postgresql-devel
  - guess init spec from redhat
  - change redhat spec:rm private package and add files to server-devel
  - so add delete lines to Fix issue
  - Next: write oe libpq and postgresql spec by myself


author: gaihuiying <eaglegai@163.com> - 2.4.9-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:pppd: Negotiate IP address when only peer addresses are provided


author: zhangliangpengkun<zhangliangpengkun@xfusion.com> - 0.12.13-21
changelog:
  - Added 'cheroot' server adapter to list of server names, so it can be selected from the command line and by name.


author: yaoxin <yao_xin001@hoperun.com> - 4.2.15-1
changelog:
  - Update to 4.2.15
    * CVE-2024-41989: Memory exhaustion in ``django.utils.numberformat.floatformat()``
    * CVE-2024-41990: Potential denial-of-service vulnerability in ``django.utils.html.urlize()``
    * CVE-2024-41991: Potential denial-of-service vulnerability in ``django.utils.html.urlize()`` and ``AdminURLFieldWidget``
    * CVE-2024-42005: Potential SQL injection in ``QuerySet.values()`` and ``values_list()``
    * Fixed a regression in Django 4.2.14 that caused a crash in ``LocaleMiddleware`` when processing a language code over 500 characters
    * CVE-2024-38875: Potential denial-of-service vulnerability in django.utils.html.urlize()
    * CVE-2024-39329: Username enumeration through timing difference for users with unusable passwords
    * CVE-2024-39330: Potential directory-traversal via Storage.save()
    * CVE-2024-39614: Potential denial-of-service vulnerability in get_supported_language_variant()
    * Fixed a crash in Django 4.2 when validating email max line lengths with content decoded using the surrogateescape error handling scheme


author: Martin Hauke <mardnh@gmx.de>
changelog:
  - Update to version 0.4.1
    * Deprecate the ansi parameter of .opt() in favor of colors
      which is a name more appropriate.
    * Prevent unrelated files and directories to be incorrectly
      collected thus causing errors during the retention process
    * Strip color markups contained in record["message"] when
      logging with .opt(ansi=True) instead of leaving them as is.
    * Ignore color markups contained in *args and **kwargs when
      logging with .opt(ansi=True), leave them as is instead of
      trying to use them to colorize the message which could cause
      undesirable errors.
  - Update to version 0.4.0
    * Add support for coroutine functions used as sinks and add the
      new logger.complete() asynchronous method to await them.
    * Add a way to filter logs using one level per module in the
      form of a dict passed to the filter argument.
    * Add type hints to annotate the public methods using a .pyi
      stub file.
    * Add support for copy.deepcopy() of the logger allowing multiple
      independent loggers with separate set of handlers.
    * Add the possibility to convert datetime to UTC before
      formatting (in logs and filenames) by adding "!UTC" at the end
      of the time format specifier.
    * Add the level name as the first argument of namedtuple returned
      by the .level() method.
    * Remove class objects from the list of supported sinks and
      restrict usage of **kwargs in .add() to file sink only. User is
      in charge of instantiating sink and wrapping additional keyword
      arguments if needed, before passing it to the .add() method.
    * Rename the logger.configure() keyword argument patch to patcher
      so it better matches the signature of logger.patch().
    * Fix AttributeError while using a file sink on some distributions
      (like Alpine Linux) missing the os.getxattr and os.setxattr
      functions.
    * Fix values wrongly displayed for keyword arguments during
      exception formatting with diagnose=True.
    * Fix logging messages wrongly chopped off at the end while using
      standard logging.Handler sinks with .opt(raw=True).
    * Fix an error using a filter function "by name" while receiving
      a log with record["name"] equals to None.
    * Fix incorrect record displayed while handling errors
      (if catch=True) occurring because of non-picklable objects
      (if enqueue=True).
    * Prevent hypothetical ImportError if a Python installation is
      missing the built-in distutils module.
    * Raise TypeError instead of ValueError when a logger method is
      called with argument of invalid type.
    * Raise ValueError if the built-in format() and filter() functions
      are respectively used as format and filter arguments of the
      add() method. This helps the user to understand the problem, as
      such a mistake can quite easily occur.
    * Remove inheritance of some record dict attributes to str (for
      "level", "file", "thread" and "process").
    * Give a name to the worker thread used when enqueue=True


author: Benjamin Greiner <code@bnavigator.de>
changelog:
  - Add runtime requirement for contextvars and the correct BR for
    Leap
  - Skip failing tests on 32-bit


author: John Vandenberg <jayvdb@gmail.com>
changelog:
  - Update t0 v0.5.3
    * Fix child process possibly hanging at exit while combining
      enqueue=True with third party library like uwsgi
    * Fix possible exception during formatting of non-string messages
  - from v0.5.2
    * Fix AttributeError within handlers using serialize=True when
      calling logger.exception() outside of the context of an exception
    * Fix error while logging an exception containing a non-picklable
      value to a handler with enqueue=True
    * Add support for async callable classes used as sinks
  - from v0.5.1
    * Modify the way the extra dict is used by LogRecord in order to
      prevent possible KeyError with standard logging handlers
    * Add a new default optional argument to logger.catch(), it should
      be the returned value by the decorated function in case an
      error occurred
    * Fix ValueError when using serialize=True in combination with
      logger.catch() or logger.opt(record=True) due to circular
      reference of the record dict
  - from v0.5.0
    * Remove the possibility to modify the severity no of levels
      once they have been added in order to prevent surprising
      behavior
    * Add better support for "structured logging" by automatically
      adding **kwargs to the extra dict besides using these arguments
      to format the message. This behavior can be disabled by setting
      the new .opt(capture=False) parameter
    * Add a new onerror optional argument to logger.catch(), it should
      be a function which will be called when an exception occurs in
      order to customize error handling
    * Add a new exclude optional argument to logger.catch(), is should
      be a type of exception to be purposefully ignored and propagated
      to the caller without being logged
    * Modify complete() to make it callable from non-asynchronous
      functions, it can thus be used if enqueue=True to make sure
      all messages have been processed
    * Fix possible deadlocks on Linux when multiprocessing.Process()
      collides with enqueue=True or threading
    * Fix compression function not executable concurrently due to file
      renaming (to resolve conflicts) being performed after and not
      before it
    * Fix the filter function listing files for retention being too
      restrictive, it now matches files based on the pattern
      "basename(.*).ext(.*)"
    * Fix the impossibility to remove() a handler if an exception is
      raised while the sink' stop() function is called
    * Fix file sink left in an unstable state if an exception occurred
      during retention or compression process
    * Fix situation where changes made to record["message"] were
      unexpectedly ignored when opt(colors=True), causing
      "out-of-date" message to be logged due to implementation details
    * Fix possible exception if a stream having an isatty() method
      returning True but not being compatible with colorama is used
      on Windows
    * Fix exceptions occurring in coroutine sinks never retrieved and
      hence causing warnings


author: Ben Greiner <code@bnavigator.de>
changelog:
  - Add loguru-exception-formatting-py39.patch
    https://github.com/Delgan/loguru/commit/19f518c5 for changed
    exception formatting in Python 3.9


author: Max Lin <mlin@suse.com>
changelog:
  - Removed python 3.7 checks since Leap 15.4 has 3.6 as the default
    python3 version, and Leap15/SLE15 do not have these additional
    python macros.


author: yangcheng <yangcheng1203@163.com> - 8.1.2-4
changelog:
  - Type:CVE
  - CVE:CVE-2022-22815,CVE-2022-22816,CVE-2022-22817
  - SUG:NA
  - DESC:fix CVE-2022-22815,CVE-2022-22816,CVE-2022-22817


author: dongyuzhen <dongyuzhen@h-partners.com> - 9.0.1-2
changelog:
  - correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)


author: chenhaixing <chenhaixing@huawei.com> - 1.26.8-2
changelog:
  - delete patch Bump-RECENT_DATE.patch and modify RECENT_DATE in python-urllib3.spec to adapt time change


author: chenhaixing <chenhaixing@huawei.com> - 1.26.12-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix socket timeout value when HTTPConnect is reused
         remove Exclamation mark character from the unreserved characters
         fix _idna_encode handling of x80


author: Chenxi Mao <chenxi.mao@suse.com> - 3.9.9-23
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC: Enable link time optimizaitons (LTO) for better performance.


author: zhaoyu <zhaoyu64@huawei.com>- 3.9.9-25
changelog:
  - Type:CVE
  - CVE:CVE-2007-4559
  - SUG:NA
  - DESC:Add a filter parameter to tarfile.extractall will allow users to avoid CVE-2007-4559 by changing their code/settings.


author: xinsheng <xinsheng3@huawei.com> - 3.9.9-31
changelog:
  - Type:CVE
  - CVE:NA
  - SUG:NA
  - DESC:fix CVE-2024-6923,CVE-2024-7592,CVE-2024-8088
      - Encode newlines in headers, and verify headers are sound
      - Fix quadratic complexity in parsing quoted cookie values with backslashes
      - Replaced SanitizedNames with a more surgical fix


author: Xia Bing <xiabing12@h-partners.com> - 0.6.7-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix "nimbus_id=0" field is not displayed when query RAS error information


author: renhongxun <renhongxun@h-partners.com> - 0.6.7-15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:clear the link to rasdaemon.service when uninstalling rasdaemon
         and ensure rasdaemon restart once be upgraded


author: caixiaomeng <caixiaomeng2@huawei.com> - 0.6.7-19
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add-dynamic-switch-of-ras-events-support-and-disable-block-rq-complete


author: Bing Xia <xiabing12@h-partners.com> - 0.6.7-20
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix for vendor errors are not recorded in the SQLite database if 
         some cpus are offline at the system start


author: yangjunshuo <yangjunshuo@huawei.com> - 0.6.7-21
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix cpu isolate errors when some cpus are offline
    before the service started


author: sunsuwan <sunsuwan3@huawei.com> - 1.2.6-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:add a user directory when the rpc user directory does not exist


author: Liming Sun <limings@nvidia.com> - 2.0.6-7
changelog:
  - Keep intr_fd during rshim_pcie disable/enable
  - Mustang: Add support for rshim over pcie and pcie_lf


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 8.2110.0-15
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC:omprog bugfix: invalid status handling at called program
         core bugfix: template system may generate invalid json


author: linzhuorong <linzhuorong@huawei.com> - 8.2110.0-16
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC: OpenSSL: fix depreacted API issues for OpenSSL 3.x
          MMDBLOOKUP::FIXED:: Don't crash Rsyslog on mmdb
          support sha256 for StreamDriverAuthMode="x509/fingerprint"
          imjournal: add second fallback to _COMM
          bugfix: prevent pot. segfault when switchung to
          core/bugfix: using $uuid msg prop can deadlock rsyslog on shutdown
          GNUTls Driver: Fix memory leaks in gtlsInitCred


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 8.2110.0-19
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:tcp net subsystem: handle data race gracefully
         fix startup issue on modern systemd systems
         tcpflood bugfix: plain tcp send error not properly reported
         tcpflood bugfix: TCP sending was not implemented properly
         lookup tables: fix static analyzer issue
         lookup tables bugfix: reload on HUP did not work when backgrounded
         openssl: Replaced depreceated method SSLv23_method with TLS_method
         testbench: make waiting for HUP processing more reliable
         bugfix: cosmetic data races
         mmnormalize bugfix: if msg cannot be parsed, parser chain is stopped
         core bugfix: potential segfault on busy systems
         imfile: fix ext directory's fd leak in case of inotify on symlink
         imfile tests: ext directory's fd leak in case of inotify on symlink
         testbench: fix imfile-statefile-delete.sh (INOTIFY trigger)
         imfile bugfix: message loss/duplication when monitored file is rotated
         testbench: add testcase for frequent imfile input file change
         Use runConf instead of loadConf in ratelimiting during runtime


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 8.2110.0-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:imfile: remove state file on file delete fix
         omfile: do not carry out actual action when writing to /dev/null


author: zouzhimin <zouzhimin@kylinos.cn> - 1:2.2.3.1-3
changelog:
  - Type:CVES
  - ID:CVE-2024-26141 CVE-2024-26146 CVE-2024-25126
  - SUG:NA
  - DESC:CVE-2024-26141 CVE-2024-26146 CVE-2024-25126


author: zouzhimin <zouzhimin@kylinos.cn> - 1:2.2.3.1-4
changelog:
  - Type:CVES
  - ID:CVE-2022-44570 CVE-2022-44571 CVE-2022-44572
  - SUG:NA
  - DESC:CVE-2022-44570 CVE-2022-44571 CVE-2022-44572


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0.3-6
changelog:
  - Fix every podman run invocation generates two "Couldn't stat device
    /dev/char/10:200: No such file or directory" lines in the journal
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.1.3-3
changelog:
  - fix "Error: runc: exec failed: unable to start container process:
    open /dev/pts/0: operation not permitted: OCI permission denied"
  - Related: #2061390


author: xinghe <xinghe2@h-partners.com> - 4.17.2-5
changelog:
  - Type:cves
  - ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
  - SUG:NA
  - DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967


author: xinghe <xinghe2@h-partners.com> - 4.17.5-3
changelog:
  - Type:cves
  - ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
  - SUG:NA
  - DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922


author: xinghe <xinghe2@h-partners.com> - 4.17.5-6
changelog:
  - Type:cves
  - ID:CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968
  - SUG:NA
  - DESC:fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968


author: xinghe <xinghe2@h-partners.com> - 4.17.5-8
changelog:
  - Type:cves
  - ID:CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670
  - SUG:NA
  - DESC:fix CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670


author: chenyanpanHW <chenyanpan@huawei.com> - 1.2.2-6
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /root/workspace/scipy/backport-BUG-fix-a-minor-refcounting-issue-in-Py_FindObjects.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /root/workspace/scipy/backport-BUG-fix-small-refcount-issue-in-ndimage._ctest.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Jon Maloy <jmaloy@redhat.com> - 1.15.0-1.el8
changelog:
  - pci-reserve-resources-for-pcie-pci-bridge-to-fix-reg.patch [bz#2001921]
  - pci: let firmware reserve IO for pcie-pci-bridge.patch [bz#2001921]
  - Resolves: bz#2001921


author: Paweł Poławski <ppolawsk@redhat.com> - 1.16.0-1
changelog:
  - Rebase to upstream 1.16 tag [bz#2066828]
  - Resolves: bz#2066828
    (rebase seabios to 1.16 release)


author: Jon Maloy <jmaloy@redhat.com> - 1.16.0-2
changelog:
  - seabios-shortcut-skip-unbootable-disks-optimitation.patch [bz#2073012]
  - seabios-pci-refactor-the-pci_config_-functions.patch [bz#2083884]
  - seabios-reset-force-standard-PCI-configuration-access.patch [bz#2083884]
  - Resolves: bz#2073012
    (Guest whose os is installed multiple disks but boot partition is installed on single disk can't boot into OS on RHEL 8 [rhel-8.7.0])
  - Resolves: bz#2083884
    (qemu reboot problem with seabios 1.16.0)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.16.0-3
changelog:
  - seabios-virtio-blk-use-larger-default-request-size.patch [bz#2101787]
  - Resolves: bz#2101787
    ([rhel.8.7] Loading a kernel/initrd is sometimes very slow)


author: wangjiang <wangjiang37@h-partners.com> - 35.5-16
changelog:
  - backport patch Allow virt_domain read device sysctls
                   Allow icecast rename its log files


author: jinlun <jinlun@huawei.com> - 15.4-5
changelog:
  - fix CVE-2017-3735 CVE-2017-3737 CVE-2018-0732 CVE-2018-0737
    CVE-2018-0739 CVE-2019-1563 CVE-2020-1971 CVE-2021-23840
    CVE-2021-23841 CVE-2022-0778 CVE-2021-3712


author: lijian<lijian2@kylinos.cn> - 1:1.5.2-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:rebuild for golang cvefix: CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538


author: liukuo<liukuo@kylinos.cn> - 1:1.5.2-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:rebuild for golang cvefix: CVE-2022-41723,CVE-2023-29406,CVE-2023-39326


author: wangkai <13474090681@163.com> - 14.4.2.0-29
changelog:
  - Fix CVE-2021-33844,CVE-2023-32627,CVE-2021-23159,CVE-2023-34432
  - CVE-2023-34318,CVE-2021-23172,CVE-2021-3643,CVE-2021-23210
  - CVE-2022-31650,CVE-2023-26590,CVE-2022-31651,CVE-2023-32627
  - CVE-2017-18189


author: wangkai <wangkai385@huawei.com> - 3.2.18-9
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-44228 is fixed,the version needs to be rebuild.


author: lingsheng <lingsheng1@h-partners.com> - 6.04-16
changelog:
  - update libpng 1.6.36 to fix CVE-2011-2501 CVE-2011-2690 CVE-2011-2691
  - CVE-2011-2692 CVE-2011-3045 CVE-2011-3048 CVE-2012-3425 CVE-2015-7981
  - CVE-2015-8126 CVE-2015-8472 CVE-2015-8540 CVE-2016-10087 CVE-2017-12652


author: wangyuhang <wangyuhang27@huawei.com> - 249-54
changelog:
  - add a new switch to control whether udev complies with the new SAT standards
    and add sense_data.py to check if the device meets the new SAT standards


author: shixin <shixin21@huawei.com> - 249-55
changelog:
  - sysuesrs_dir, sysctl_dir, binfmt_dir, modules_load_dir reference directories in /usr/lib for embedded
  - modify dns server address to avoid security risk for embedded
  - add support to relabel systemd process for embedded
  - add noexec mount option to strenthen tmp partition for embedded
  - use yocto configs for embedded


author: huyubiao <huyubiao@huawei.com> - 249-60
changelog:
  - backport: sync patches from systemd community
    add backport-core-path-do-not-enqueue-new-job-in-.trigger_notify-.patch
        backport-socket-fix-use-of-ERRNO_IS_DISCONNECT.patch
        backport-sd-bus-fix-use-of-ERRNO_IS_DISCONNECT.patch
        backport-resolved-fix-use-of-ERRNO_IS_DISCONNECT.patch
        backport-bus-add-some-minimal-bounds-check-on-signatures.patch
        backport-udev-builtin-net_id-fix-potential-buffer-overflow.patch
        backport-hostname-Make-sure-we-pass-error-to-bus_verify_polki.patch
        backport-Limit-rlim_max-in-rlimit_nofile_safe-to-nr_open.patch
        backport-udev-raise-RLIMIT_NOFILE-as-high-as-we-can.patch


author: wangyuhang <wangyuhang27@huawei.com> - 249-62
changelog:
  - add: backport-json-use-unsigned-for-refernce-counter.patch
        backport-macro-check-over-flow-in-reference-counter.patch
        backport-sd-bus-fix-reference-counter-to-be-incremented.patch
        backport-sd-bus-introduce-ref-unref-function-for-track_item.patch
        backport-sd-bus-do-not-read-unused-value.patch
        backport-sd-bus-do-not-return-negative-errno-when-unknown-nam.patch
        backport-sd-bus-use-hashmap_contains-and-drop-unnecessary-cas.patch
        backport-test-shorten-code-a-bit.patch
        backport-test-add-several-tests-for-track-item.patch
        backport-Use-dummy-allocator-to-make-accesses-defined-as-per-standard.patch
        backport-sd-bus-switch-to-a-manual-overflow-check-in.patch


author: wangyuhang <wangyuhang27@huawei.com> - 249-68
changelog:
  - backport: sync patches from systemd community
              add backport-journal-recalculate-line_max-when-stdout-stream-stat.patch
              backport-pid1-terminate-cylon-string.patch
              backport-pid1-move-draw_cylong-to-pretty-print.-ch.patch
              backport-test-add-test-for-draw_cylon.patch
              backport-locale-util-do-not-call-setlocale-when-multi-threade.patch
              backport-resolve-fix-wrong-error-cause-assignment-to-log_debu.patch
              backport-resolve-do-not-trigger-assertion-on-exit.patch
              backport-network-neighbor-add-missing-OOM-check.patch
              backport-dissect-tool-right-align-the-partition-number.patch
              backport-dissect-image-fix-fd-leak-in-dissected_image_acquire.patch
              backport-udev-even-if-a-device-is-a-zac-device-scsi-ID_SERIAL.patch
              backport-core-log-message-when-reloading-finishes.patch


author: huyubiao <huyubiao@huawei.com> - 249-69
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add backport-basic-fix-overflow-detection-in-sigbus_pop.patch
         backport-busctl-avoid-asserting-on-NULL-message.patch
         backport-resolve-don-t-add-sockets-to-the-graveyard-on-shutdo.patch
         backport-sd-journal-check-sd-event-state-before-setting-up-po.patch


author: huyubiao <huyubiao@huawei.com> - 249-70
changelog:
  - move the architecture patches after Patch9800 (excluding Patch9800)
    delete the duplicate systemd-coredump.socket


author: huyubiao <huyubiao@huawei.com> - 249-73
changelog:
  - DESC:add backport-core-exec-do-not-crash-with-UtmpMode-user-without-Us.patch
         backport-resolved-limit-the-number-of-signature-validations-i.patch
         backport-resolved-reduce-the-maximum-nsec3-iterations-to-100.patch


author: xingwei <xingwei14@h-partners.com> - 14:4.99.1-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Set SA_RESTART on non-lethal signals (REQ_INFO, FLUSH_PCAP) to avoid corrupting binary pcap output


author: gaihuiying <eaglegai@163.com> - 1.13.2-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:remove buildin key
         add macros to control if key files permissons is 600 or 644
         remove useless BuildRequires:unbound-libs


author: yanglu <yanglu72@h-partners.com> - 1.13.2-5
changelog:
  - Type:cves
  - CVE:CVE-2022-30698 CVE-2022-30699
  - SUG:NA
  - DESC:fix CVE-2022-30698 and CVE-2022-30699


author: gaihuiying <eaglegai@163.com> - 1.13.2-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:change run directory from /var/run to /run to fix "/usr/lib/tmpfiles.d/unbound.conf:1: xxxx"


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-19
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         [add]backport-libfdisk-Fix-randomly-generated-GPT-UUID-s.patch
         backport-write-correctly-handle-wide-characters.patch
         backport-wall-convert-homebrew-buffering-to-open_memstream.patch
         backport-wall-use-fputs_careful.patch
         backport-hexdump-parse-handle-truncated-format-pattern.patch
         backport-libblkid-copy-BLKID_PARTS_FORCE_GPT-to-whole-disk-pr.patch
         backport-lscpu-fix-p-output-all-caches-delimiter.patch
         backport-add-return-in-supam_conv-function.patch
         backport-wrap-return-in-else-directive-to-avoid-dead-code.patch
         backport-sulogin-ignore-none-existing-console-devices.patch
         backport-sulogin-fix-KDGKBMODE-ifdef.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         [add]backport-lib-caputils-fix-integer-handling-issues-coverity-sc.patch
         backport-unshare-Move-implementation-of-keep-caps-option-to-l.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-21
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         [add]backport-libblkid-jfs-avoid-undefined-shift.patch
         backport-cfdisk-add-hint-about-labels-for-bootable-flag.patch
         backport-logger-initialize-socket-credentials-contol-union.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-22
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         [add]backport-column-fix-buffer-overflow-when-l-specified.patch
         backport-column-fix-greedy-mode-on-l.patch
         backport-column-fix-memory-leak.patch
         backport-column-fix-l.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-23
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         [add]backport-scriptreplay-support-ctrl-s-and-ctrl-g.patch
         backport-login-use-correct-terminal-fd-during-setup.patch
         backport-login-prevent-undefined-ioctl-and-tcsetattr-calls.patch
         backport-libblkid-avoid-memory-leak-of-cachefile-path.patch
         backport-more-avoid-out-of-bound-access.patch
         backport-lslogins-fix-realloc-loop-allocation-size.patch
         backport-ldattach-don-t-call-exit-from-signal-handler.patch
         backport-libblkid-ntfs-validate-that-sector_size-is-a-power-o.patch
         backport-blkid-fix-call-to-err_exclusive_options.patch
         backport-libblkid-reset-errno-before-calling-probefuncs.patch
         backport-lib-path-fix-possible-out-of-boundary-access.patch
         backport-libmount-improve-mnt_table_next_child_fs.patch
         backport-libmount-fix-possible-NULL-dereference-coverity-scan.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-24
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
  	[add]backport-libsmartcols-drop-spourious-newline-in-between-strea.patch
  	backport-libsmartcols-flush-correct-stream.patch
  	backport-libsmartcols-only-recognize-closed-object-as-final-e.patch
  	backport-cal-avoid-out-of-bound-write.patch
  	backport-libfdisk-sun-properly-initialize-partition-data.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-25
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:solve the issue of ext4 is incorrectly probed as drbd
          [add]backport-include-c.h-add-helpers-for-unaligned-structure-acce.patch
          backport-libblkid-probe-read-data-in-chunks.patch
          backport-libblkid-avoid-aligning-out-of-probing-area.patch
          backport-libblkid-drbd-validate-zero-padding.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-26
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         backport-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-receive.patch
         backport-libblkid-hfsplus-reduce-false-positive.patch
         backport-wall-fix-calloc-cal-Werror-calloc-transposed-args.patch
         backport-libblkid-drbd-reduce-false-positive.patch
         backport-lib-cpuset-exit-early-from-cpulist_parse.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-27
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         backport-sys-utils-lscpu-Unblock-SIGSEGV-before-vmware_bdoor.patch
         backport-libblkid-Check-offset-in-LUKS2-header.patch
         backport-more-fix-poll-use.patch


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-7
changelog:
  - Type:CVE
  - ID:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054
  - SUG:NA
  - DESC:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-16
changelog:
  - Type:CVE
  - ID:CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735
  - SUG:NA
  - DESC:fix CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-17
changelog:
  - Type:CVE
  - ID:CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781
  - SUG:NA
  - DESC:fix CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-22
changelog:
  - Type:CVE
  - ID:CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237
  - SUG:NA
  - DESC:fix CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237


author: wanglin <wangl29@chinatelecom.cn> - 1.20.11-14
changelog:
  - Fix openEuler hard code problem
  - use -git instead of .git as the filename, to avoid .git ignore
  - Fix changelog date


author: chenyanpanHW <chenyanpan@huawei.com> - 363-3
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-CVE-2021-27135.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-CVE-2022-24130.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: kouwenqi <kouwenqi@kylinos.cn> - 5.2.5-4
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC:Add overflow check for Unpadded size in lzma_index_append


