# changelog

author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-271.0.0.174
changelog:
  - !17015 [OLK-5.10]:update patches for sw64 architecture
  - !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
  - !12159 Add the spidev.ko to OLK-5.10
  - !16992  selinux: ignore unknown extended permissions
  - !15235 correct address translation for Hygon family 18h model 4h~10h
  - sw64: kvm: save the virtual address of irqs_pending in vcpucb
  - sw64: delete useless I/O access in VM and emulator
  - sw64: kvm: fix perf kvm support for CORE4
  - sw64: pci: remove zx200 dma mask reset
  - sw64: fix for executing syscall(-1)
  - sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
  - sw64: pci: add base address of devmn
  - sw64: adjust the notrace in the code
  - !16776  cachefiles: Fix the potential ABBA deadlock issue
  - selinux: ignore unknown extended permissions
  - !16970  Fix CVE-2025-38170
  - !16966  net: openvswitch: Fix the dead loop of MPLS parse
  - !16965  dma-buf: insert memory barrier before updating num_fences
  - arm64/fpsimd: Discard stale CPU state when handling SME traps
  - net: openvswitch: Fix the dead loop of MPLS parse
  - EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
  - dma-buf: insert memory barrier before updating num_fences
  - !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
  - !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
  - !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
  - !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
  - !16935 [OLK-5.10] Add gpio-hisi softdepend
  - xhci: Limit time spent with xHC interrupts disabled during bus resume
  - xhci: add helpers for enabling and disabling interrupters
  - iommu: Add support for ACPI device direct mapping
  - !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
  - !16916  Backport mainline patches
  - !16914  net: fix slab-use-after-free read in decode_session6
  - sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
  - Add gpio-hisi softdepend
  - PCI/DPC: Ignore Surprise Down error on hot removal
  - hwtracing: hisi_ptt: Check duplicate filters before allocation
  - hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
  - EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
  - EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
  - EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
  - !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
  - !16901  uprobes: check anon before compound when unregister
  - net: virtio: Fix kabi broken
  - net: test for not too small csum_start in virtio_net_hdr_to_skb()
  - net: add more sanity check in virtio_net_hdr_to_skb()
  - net: fix crash when config small gso_max_size/gso_ipv4_max_size
  - net: fix slab-use-after-free read in decode_session6
  - !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
  - !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
  - !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
  - mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
  - uprobes: check anon before compound when unregister
  - libnvdimm/labels: Fix divide error in nd_label_data_init()
  - !16752  nfs: handle failure of nfs_get_lock_context in unlock path
  - x86/cpufeatures: Add CSV3 CPU feature
  - x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
  - x86/cpu: Detect memory encryption features on Hygon CPUs
  - KVM: SVM: Print Hygon CSV support info if support is detected
  - crypto: ccp: Print Hygon CSV API version when CSV support is detected
  - x86/mm: Print CSV info into the kernel log
  - x86/config: Set CONFIG_HYGON_CSV by default
  - x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
  - Documentation/arch/x86: Add HYGON secure virtualization description
  - cachefiles: Fix the potential ABBA deadlock issue
  - nfs: handle failure of nfs_get_lock_context in unlock path
  - KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
  - perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
  - EDAC/amd64: Get instance id for Hygon family 18h model 10h
  - EDAC/amd64: Calculate instance id for hygon family 18h model 7h
  - EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
  - Open the CONFIG for spidev.ko


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-272.0.0.175
changelog:
  - !17048  RDMA/hns: Stability and Security Fixes and Improvements
  - !16839 Add gpio-hisi softdepend
  - !16852 net: hns3: fix a use of uninitialized variable problem
  - !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
  - !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
  - !16855 ptp: hisi: the print of element in ptp need protected by lock
  - !16881 net: hns3: fix kernel crash when uninstalling driver
  - RDMA/hns: Fix double destruction of rsv_qp
  - RDMA/hns: Fix address information leakage of DCA memory
  - RDMA/hns: Fix scc_param failed logic judgments
  - RDMA/hns: Fix congestion control algorithm parameter range
  - RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
  - RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
  - RDMA/hns: Fix divide-by-zero error in dca debugfs
  - RDMA/hns: Fix descriptions of stars api
  - RDMA/hns: Fix poe memory leak in error flow
  - RDMA/hns: Fix accessing uninitialized resources
  - RDMA/hns: Add check between dca_min_size and dca_max_size
  - io_uring: Support forcing sq thread to be idle and woken up by hrtimer
  - iio: light: opt3001: fix deadlock due to concurrent flag access
  - net: hns3: fix kernel crash when uninstalling driver
  - ptp: hisi: the print of element in ptp need protected by lock
  - ptp: hisi: fix list not delete problem
  - net: hns3: fix a use of uninitialized variable problem
  - net: hns3: avoid unnecessary checking when unmap buffer
  - net: hns3: disable interrupt when ptp init failed
  - Add gpio-hisi softdepend


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-273.0.0.176
changelog:
  - !17045  arm64: Fix a typo in xcall_init_task()
  - !17105  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
  - !17099  arm64: exec: add mcs support for prepare_binprm
  - arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
  - !17104  hugetlb: drain pcp for movable zone before alloc
  - !16949  media: uvcvideo: Remove dangling pointers
  - hugetlb: drain pcp for movable zone before alloc
  - arm64: exec: add mcs support for prepare_binprm
  - iov_iter: add copy_mc_page_to_kvec_iter
  - !16927  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
  - !16761  cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect
  - !16429 CVE-2025-21855
  - !17050 EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
  - !17058  media: cxusb: no longer judge rbuf when the write fails
  - !16943  KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
  - media: cxusb: no longer judge rbuf when the write fails
  - ibmvnic: Don't reference skb after sending to VIOS
  - !17002  net_sched: red: fix a race in __red_change()
  - EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
  - arm64: Fix a typo in xcall_init_task()
  - net_sched: red: fix a race in __red_change()
  - media: uvcvideo: Remove dangling pointers
  - KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
  - nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
  - cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-274.0.0.177
changelog:
  - !17195  smb: client: fix use-after-free in crypt_message when using async crypto
  - !17239 【OLK 5.10】some bugfixes and cleanups for hns3 driver
  - !17077  smb: client: fix use-after-free in cifs_oplock_break
  - !17242  ima: prevent concurrent list operations in ima_lsm_update_rules
  - ima: prevent concurrent list operations in ima_lsm_update_rules
  - net: hns3: Change the function return type from int to bool
  - !17232 soc: hisilicon: kunpeng_hccs: Fix incorrect log information
  - !17233  hugeltb: Fix null ptr exception during drain movable pcp
  - soc: hisilicon: kunpeng_hccs: Fix incorrect log information
  - net: hns3: defer calling ptp_clock_register()
  - net: hns3: fix an interrupt residual problem
  - hugeltb: Fix null ptr exception during drain movable pcp
  - net: hns3: store rx VLAN tag offload state for VF
  - !17204 v2  CVE-2022-49961
  - !16809  vhost-scsi: protect vq->log_used with vq->mutex
  - !16885  fs: Backport two namespace fix patches
  - !17158  arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
  - selftests/bpf: Add regression test for pruning fix
  - bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO
  - !17146  jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
  - !17173  wifi: ath9k_htc: Abort software beacon handling if disabled
  - !16942  ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
  - smb: client: fix use-after-free in crypt_message when using async crypto
  - wifi: ath9k_htc: Abort software beacon handling if disabled
  - !17149  Bluetooth: MGMT: Protect mgmt_pending list with its own lock
  - arm64/mpam: Only inform the CPUs running tasks of the group
  - arm64/mpam: Fix the potential deadlock when updating the rmid
  - arm64/mpam: Fix task CLOSID/RMID update race
  - arm64/mpam: Apply READ_ONCE/WRITE_ONCE to task_struct.{rmid,closid}
  - arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
  - !17123  crypto: algif_hash - fix double free in hash_accept
  - Bluetooth: MGMT: Protect mgmt_pending list with its own lock
  - jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
  - !17125  EDAC/skx_common: Fix general protection fault
  - !17131  modify xcall xint proc file permissions
  - modify xcall proc file permissions to 640
  - modify xint proc file permissions to 640
  - EDAC/skx_common: Fix general protection fault
  - crypto: algif_hash - fix double free in hash_accept
  - smb: client: fix use-after-free in cifs_oplock_break
  - ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
  - clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
  - do_change_type(): refuse to operate on unmounted/not ours mounts
  - vhost-scsi: protect vq->log_used with vq->mutex


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-275.0.0.178
changelog:
  - !17327  perf: Revert to requiring CAP_SYS_ADMIN for uprobes
  - perf: Revert to requiring CAP_SYS_ADMIN for uprobes
  - !17252 ROH:fix security issues and eliminate redundancies
  - !17241 gpiolib: Get rid of ARCH_NR_GPIOS
  - !17010  perf: Fix sample vs do_exit()
  - !17256 Fixed the wrong debugfs node name in hisi_spi debugfs initialization
  - ROH:fix security issues and eliminate redundancies
  - !17311  usb: typec: altmodes/displayport: do not index invalid pin_assignments
  - !15469  scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI
  - !17283  fs/writeback: bail out if there is no more inodes for IO and queued once
  - usb: typec: altmodes/displayport: do not index invalid pin_assignments
  - !17306  atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
  - !17297  scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
  - !17298  dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
  - !17300  jfs: add check read-only before txBeginAnon() call
  - !16386 v5  Fix x2apic enablement and allow more CPUs, clean up I/OAPIC and MSI bitfields
  - atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
  - !17288 RDMA/hns: Support querying DIP SCC context
  - jfs: add check read-only before txBeginAnon() call
  - dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
  - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
  - !17285  libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
  - !16746 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y
  - RDMA/hns: Support querying DIP SCC context
  - libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
  - fs/writeback: bail out if there is no more inodes for IO and queued once
  - !17279 RDMA/hns: Remove MW support
  - RDMA/hns: Remove MW support
  - RDMA/hns: Drop GFP_NOWARN
  - RDMA/hns: Fix -Wframe-larger-than issue
  - RDMA/hns: Fix HW resources are not cleared in error flow
  - RDMA/hns: Fix remove debugfs after device has been unregistered
  - RDMA/hns: Add trace for MR/MTR attribute dumping
  - RDMA/hns: Add trace for WQE dumping
  - RDMA/hns: Add trace for CMDQ dumping
  - RDMA/hns: Add trace for AEQE dumping
  - RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
  - RDMA/hns: Inappropriate format characters cleanup
  - RDMA/hns: Add trace for flush CQE
  - !17258  mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
  - Fixed the wrong debugfs node name in hisi_spi debugfs initialization
  - mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
  - gpiolib: Get rid of never false gpio_is_valid() calls
  - perf: Fix sample vs do_exit()
  - nvmet-tcp: don't restore null sk_state_change
  - x86/hyperv: Enable 15-bit APIC ID if the hypervisor supports it
  - iommu/amd: Keep track of amd_iommu_irq_remap state
  - iommu/amd: Stop irq_remapping_select() matching when remapping is disabled
  - iommu/hyper-v: Remove I/O-APIC ID check from hyperv_irq_remapping_select()
  - x86/ioapic: Correct the PCI/ISA trigger type selection
  - x86/ioapic: Use I/O-APIC ID for finding irqdomain, not index
  - x86/kvm: Enable 15-bit extension when KVM_FEATURE_MSI_EXT_DEST_ID detected
  - iommu/hyper-v: Disable IRQ pseudo-remapping if 15 bit APIC IDs are available
  - x86/apic: Support 15 bits of APIC ID in MSI where available
  - x86/ioapic: Handle Extended Destination ID field in RTE
  - iommu/vt-d: Simplify intel_irq_remapping_select()
  - x86: Kill all traces of irq_remapping_get_irq_domain()
  - x86/ioapic: Use irq_find_matching_fwspec() to find remapping irqdomain
  - x86/hpet: Use irq_find_matching_fwspec() to find remapping irqdomain
  - iommu/hyper-v: Implement select() method on remapping irqdomain
  - iommu/vt-d: Implement select() method on remapping irqdomain
  - iommu/amd: Implement select() method on remapping irqdomain
  - x86/apic: Add select() method on vector irqdomain
  - genirq/irqdomain: Implement get_name() method on irqchip fwnodes
  - x86/ioapic: Generate RTE directly from parent irqchip's MSI message
  - x86/ioapic: Cleanup IO/APIC route entry structs
  - x86/io_apic: Cleanup trigger/polarity helpers
  - x86/msi: Remove msidef.h
  - x86/pci/xen: Use msi_msg shadow structs
  - x86/kvm: Use msi_msg shadow structs
  - PCI: vmd: Use msi_msg shadow structs
  - x86/hpet: Move MSI support into hpet.c
  - x86/devicetree: Fix the ioapic interrupt type table
  - scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-276.0.0.179
changelog:
  - !16940 v2  dm: fix unconditional IO throttle caused by REQ_PREFLUSH
  - !17315  ovl: fix general protection fault in security_inode_getattr
  - !17425  net: stmmac: make sure that ptp_rate is not 0 before configuring EST
  - !17424  bcache: fix NULL pointer in cache_set_flush()
  - !17433  ACPICA: Refuse to evaluate a method if arguments are missing
  - !17417  drm/dp_mst: Fix MST sideband message body length check
  - !17418  drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
  - !17407  usb: net: sierra: check for no status endpoint
  - !17429  drm/v3d: Disable interrupts before resetting the GPU
  - !17292 [OLK 5.10] AMD Turin and auto IBRS patches backport
  - ACPICA: Refuse to evaluate a method if arguments are missing
  - drm/v3d: Disable interrupts before resetting the GPU
  - !17394  selftests/tracing: Fix false failure of subsystem event test
  - net: stmmac: make sure that ptp_rate is not 0 before configuring EST
  - bcache: fix NULL pointer in cache_set_flush()
  - drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
  - drm/dp_mst: Fix MST sideband message body length check
  - usb: net: sierra: check for no status endpoint
  - !17389  CVE-2025-21702
  - !17388  ipvlan: ensure network headers are in skb linear part
  - !17383  net/sched: act_ct: fix ref leak when switching zones
  - !17382  net: annotate races around sk->sk_bound_dev_if
  - !17381  net: sched: Disallow replacing of child qdisc from one parent to another
  - !17377  net: sched: fix ets qdisc OOB Indexing
  - !17379  bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
  - selftests/tracing: Fix false failure of subsystem event test
  - pfifo_tail_enqueue: Drop new packet when sch->limit == 0
  - net_sched: sch_fifo: implement lockless __fifo_dump()
  - ipvlan: ensure network headers are in skb linear part
  - net/sched: act_ct: fix ref leak when switching zones
  - net: annotate races around sk->sk_bound_dev_if
  - !17359 [OLK 5.10] AMD HSMP driver support patches backport
  - net: sched: Disallow replacing of child qdisc from one parent to another
  - !17374  RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert
  - !17365  atm: clip: Fix infinite recursive call of clip_push().
  - bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
  - net: sched: fix ets qdisc OOB Indexing
  - !17347  calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
  - !17373  drm/amd/display: Add null pointer check for get_first_active_display()
  - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert
  - !17370  ext4: inline: fix len overflow in ext4_prepare_inline_data
  - drm/amd/display: Add null pointer check for get_first_active_display()
  - ext4: inline: fix len overflow in ext4_prepare_inline_data
  - atm: clip: Fix infinite recursive call of clip_push().
  - !17350  scsi: lpfc: Use memcpy() for BIOS version
  - platform/x86/amd/hsmp: Check HSMP support on AMD family of processors
  - platform/x86/amd/hsmp: switch to use device_add_groups()
  - platform/x86/amd/hsmp: Change devm_kzalloc() to devm_kcalloc()
  - platform/x86/amd/hsmp: Remove extra parenthesis and add a space
  - platform/x86/amd/hsmp: Check num_sockets against MAX_AMD_SOCKETS
  - platform/x86/amd/hsmp: Non-ACPI support for AMD F1A_M00~0Fh
  - platform/x86/amd/hsmp: Add support for ACPI based probing
  - platform/x86/amd/hsmp: Restructure sysfs group creation
  - platform/x86/amd/hsmp: Move dev from platdev to hsmp_socket
  - platform/x86/amd/hsmp: Define a struct to hold mailbox regs
  - platform/x86/amd/hsmp: Create static func to handle platdev
  - platform/x86/amd/hsmp: Cache pci_dev in struct hsmp_socket
  - platform/x86/amd/hsmp: Move hsmp_test to probe
  - platform/x86/amd/hsmp: Fix iomem handling
  - platform/x86/amd/hsmp: improve the error log
  - platform/x86/amd/hsmp: add support for metrics tbl
  - platform/x86/amd/hsmp: create plat specific struct
  - platform/x86: Move AMD platform drivers to separate directory
  - !17344 v2  eventpoll: Fix return fixed cpu bug in set_prefetch_numa_cpu()
  - tools headers x86 cpufeatures: Sync with the kernel sources
  - KVM: x86: Fix clang -Wimplicit-fallthrough in do_host_cpuid()
  - KVM: x86: work around QEMU issue with synthetic CPUID leaves
  - KVM: x86: Propagate the AMD Automatic IBRS feature to the guest
  - x86/cpu, kvm: Add the SMM_CTL MSR not present feature
  - x86/cpu, kvm: Add the Null Selector Clears Base feature
  - x86/cpu, kvm: Move X86_FEATURE_LFENCE_RDTSC to its native leaf
  - x86/cpu, kvm: Add the NO_NESTED_DATA_BP feature
  - KVM: x86: Move open-coded CPUID leaf 0x80000021 EAX bit propagation code
  - x86/bugs: Don't fill RSB on context switch with eIBRS
  - x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
  - x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier()
  - x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers
  - x86/mm: Refactor cond_ibpb() to support other use cases
  - KVM: x86: Advertise that the SMM_CTL MSR is not supported
  - KVM: x86: synthesize CPUID leaf 0x80000021h if useful
  - KVM: x86: skip host CPUID call for hypervisor leaves
  - KVM: x86: add support for CPUID leaf 0x80000021
  - x86/bugs: Use SBPB in write_ibpb() if applicable
  - x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix
  - x86/asm: Have the __ASM_FORM macros handle commas in arguments
  - x86/cpu/amd: Fix workaround for erratum 1054
  - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
  - scsi: lpfc: Use memcpy() for BIOS version
  - calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
  - eventpoll: Fix return fixed cpu bug in set_prefetch_numa_cpu()
  - ovl: fix general protection fault in security_inode_getattr
  - dm: fix unconditional IO throttle caused by REQ_PREFLUSH


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-277.0.0.180
changelog:
  - !17505  CVE-2024-58237
  - !17504  net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
  - !17503  sctp: detect and prevent references to a freed transport in sendmsg
  - !17461 drivers:misc:sdma-dae: fix incorrect debugfs print
  - !17506 ROH: fix variable type inconsistency issue
  - !17437 [OLK-5.10]:update patches for sw64 architecture
  - ROH: fix variable type inconsistency issue
  - bpf: consider that tail calls invalidate packet pointers
  - bpf: refactor bpf_helper_changes_pkt_data to use helper number
  - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
  - sctp: detect and prevent references to a freed transport in sendmsg
  - !17486  net: atm: fix use after free in lec_send()
  - !17485  vlan: enforce underlying device type
  - !17484  net: gso: fix ownership in __udp_gso_segment
  - net: atm: fix use after free in lec_send()
  - vlan: enforce underlying device type
  - net: gso: fix ownership in __udp_gso_segment
  - !17466  arm-smmu-v3: adjust ecmdq log level
  - drivers:misc:sdma-dae: fix incorrect debugfs print
  - arm-smmu-v3: adjust ecmdq log level
  - !17457 v2  posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
  - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
  - sw64: ptrace: return -EIO in invalid PEEKUSR/POKEUSR requests
  - sw64: kvm: fix compile error of kvm.ko
  - sw64: kvm: remove the duplicated Kconfig selection of KVM
  - sw64: cpuidle: add dedicated driver
  - sw64: crypto: implement crc32 assembly optimization
  - sw64: efi: remove meaningless code from asm/efi.h
  - sw64: cpufreq: using PLL0 to provide clock for idle cores
  - sw64: kvm: enable dirty log gradually in small chunks for core4
  - sw64: fix guest kdump function
  - sw64: use wait/complete for smp boot
  - sw64: fix sw64_rrk_store() wrap handling


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-278.0.0.181
changelog:
  - !17568  comedi: aio_iiro_16: Fix bit shift out of bounds
  - !17545  net_sched: drr: Fix double list add in class with netem as child qdisc
  - comedi: aio_iiro_16: Fix bit shift out of bounds
  - !17566  hugelb: do not sleep during spinlock hugetlb_lock
  - hugelb: do not sleep during spinlock hugetlb_lock
  - !17480  HID: core: fix __hid_request when no report ID is used
  - !17554  arm64: mm: fix EFI_BUFFER_TOO_SMALL problem for MemoryOnChipMode
  - arm64: mm: fix EFI_BUFFER_TOO_SMALL problem for MemoryOnChipMode
  - !17544  net_sched: qfq: Fix double list add in class with netem as child qdisc
  - !17543  net: sch: Fix CVE-2025-37798
  - !17539  wifi: at76c50x: fix use after free access in at76_disconnect
  - !17536  net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
  - !17532  sched: Fix sched tunable parameter range overflow
  - !15064  arm64: mm: Update PBHA related variable name
  - net_sched: drr: Fix double list add in class with netem as child qdisc
  - net_sched: qfq: Fix double list add in class with netem as child qdisc
  - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()
  - sch_ets: make est_qlen_notify() idempotent
  - sch_qfq: make qfq_qlen_notify() idempotent
  - sch_hfsc: make hfsc_qlen_notify() idempotent
  - sch_drr: make drr_qlen_notify() idempotent
  - sch_htb: make htb_deactivate() idempotent
  - sch_htb: make htb_qlen_notify() idempotent
  - wifi: at76c50x: fix use after free access in at76_disconnect
  - net: vlan: Fix kabi breakage of struct vlan_info
  - net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
  - !17531 RDMA/hns: Fix dip entries leak on devices newer than hip09
  - sched: Fix sched tunable parameter range overflow
  - !17494 v2  kernfs performance optimization
  - RDMA/hns: Fix dip entries leak on devices newer than hip09
  - !17527  PCI/ASPM: Fix link state exit during switch upstream function removal
  - !17525  fix CVE-2022-49623
  - PCI/ASPM: Fix link state exit during switch upstream function removal
  - !17522  CVE-2025-38180
  - powerpc/xive/spapr: correct bitmap allocation size
  - powerpc/xive: Add some error handling code to 'xive_spapr_init()'
  - net: atm: fix /proc/net/atm/lec handling
  - net: atm: add lec_mutex
  - kernfs: don't create a negative dentry if inactive node exists
  - kernfs: also call kernfs_set_rev() for positive dentry
  - kernfs: dont call d_splice_alias() under kernfs node lock
  - kernfs: use i_lock to protect concurrent inode updates
  - kernfs: switch kernfs to use an rwsem
  - kernfs: use VFS negative dentry caching
  - kernfs: add a revision to identify directory node changes
  - HID: core: do not bypass hid_hw_raw_request
  - HID: core: ensure __hid_request reserves the report ID as the first byte
  - HID: core: ensure the allocated report buffer can contain the reserved report ID
  - arm64: mm: Update PBHA related variable name


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-279.0.0.182
changelog:
  - !17745  trace/fgraph: Fix the warning caused by missing unregister notifier
  - !17726  perf/core: Don't leak AUX buffer refcount on allocation failure
  - !17675  ftrace: Also allocate and copy hash for reading of filter files
  - !17670  ftrace: Fix potential warning in trace_printk_seq during ftrace_dump
  - !15618  partitions: mac: fix handling of bogus partition table
  - trace/fgraph: Fix the warning caused by missing unregister notifier
  - !17723  mm/dpool: mark dpool hugetlb page as dirty in free_huge_page()
  - !17727  CVE-2025-38465
  - !17454  md/raid1: Fix stack memory use after return in raid1_reshape
  - !17452  blk-mq: don't touch ->tagset in blk_mq_get_sq_hctx
  - netlink: avoid infinite retry looping in netlink_unicast()
  - netlink: make sure we allow at least one dump skb
  - netlink: Fix rmem check in netlink_broadcast_deliver().
  - netlink: Fix wraparounds of sk->sk_rmem_alloc.
  - perf/core: Don't leak AUX buffer refcount on allocation failure
  - mm/dpool: mark dpool hugetlb page as dirty in free_huge_page()
  - !17631  perf/core: Exit early on perf_mmap() fail
  - ftrace: Also allocate and copy hash for reading of filter files
  - ftrace: Fix potential warning in trace_printk_seq during ftrace_dump
  - !17603  two bugfix for arm64 support HVO
  - !17657  selftests/bpf: Add remaining ASSERT_xxx() variants
  - selftests/bpf: Add remaining ASSERT_xxx() variants
  - !17614  xfrm: state: fix out-of-bounds read during lookup
  - !17626  Fix CVE-2025-37780
  - !17627  Fix CVE-2024-58069
  - !17624  rtnetlink: Allocate vfinfo size for VF GUIDs when supported
  - !17623  net_sched: hfsc: Fix a UAF vulnerability in class handling
  - !17622  tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer
  - !17621  CVE-2025-38052
  - !17619  tipc: Fix use-after-free in tipc_conn_close().
  - !17620  net: clear the dst when changing skb protocol
  - !17618  net_sched: sch_sfq: fix a potential crash on gso_skb handling
  - !17617  net: fix udp gso skb_segment after pull from frag_list
  - !17616  atm: Fix NULL pointer dereference
  - !17615  udp: Fix memory accounting leak.
  - !17613  macsec: fix UAF bug for real_dev
  - !17612  vfio/pci: Properly hide first-in-list PCIe extended capability
  - perf/core: Exit early on perf_mmap() fail
  - rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read
  - isofs: Prevent the use of too small fid
  - rtnetlink: Allocate vfinfo size for VF GUIDs when supported
  - net_sched: hfsc: Fix a UAF vulnerability in class handling
  - tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer
  - net: tipc: fix refcount warning in tipc_aead_encrypt
  - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done
  - net: clear the dst when changing skb protocol
  - tipc: Fix use-after-free in tipc_conn_close().
  - net_sched: sch_sfq: fix a potential crash on gso_skb handling
  - net: fix udp gso skb_segment after pull from frag_list
  - atm: Fix NULL pointer dereference
  - udp: Fix memory accounting leak.
  - xfrm: state: fix out-of-bounds read during lookup
  - macsec: fix UAF bug for real_dev
  - vfio/pci: Properly hide first-in-list PCIe extended capability
  - !17376 net_sched: Flush gso_skb list too during ->change()
  - !17576  net/sched: Fix CVE-2025-37890
  - arm64: mm: HVO: fix deadlock in split vmemmap pmd
  - mm: HVO: fix hard lockup in split_vmemmap_huge_pmd under x86
  - !17581  tracing: Add down_write(trace_event_sem) when adding trace event
  - !17580  iio: adc: ti-ads8688: fix information leak in triggered buffer
  - tracing: Add down_write(trace_event_sem) when adding trace event
  - !17579 v2  two cve fix
  - iio: adc: ti-ads8688: fix information leak in triggered buffer
  - vfio/platform: check the bounds of read/write syscalls
  - powerpc/mm/fault: Fix kfence page fault reporting
  - net/sched: ets: use old 'nbands' while purging unused classes
  - net/sched: Always pass notifications when child class becomes empty
  - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice
  - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()
  - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc
  - md/raid1: Fix stack memory use after return in raid1_reshape
  - blk-mq: don't touch ->tagset in blk_mq_get_sq_hctx
  - net_sched: Flush gso_skb list too during ->change()
  - partitions: mac: fix handling of bogus partition table


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-280.0.0.183
changelog:
  - !17849 [OLK-5.10]:update patches for sw64 architecture
  - !17852  cpufreq: Init policy->rwsem before it may be possibly used
  - sw64: fix for userspace asking for syscall(-1)
  - sw64: update junzhang default config file
  - sw64: kvm: introduce pmd_thp_or_huge for PMD hugepage checking
  - sw64: add cross-page check in software unaligned write handling
  - sw64: ptrace: fail system calls on invalid address access in PEEKUSR
  - sw64: ptrace: fix a bug in return value handling in PEEKUSR AND POKEUSR
  - !17738  CVE-2024-53216 && CVE-2024-56558
  - cpufreq: Init policy->rwsem before it may be possibly used
  - !17801  page_pool: Fix use-after-free in page_pool_recycle_in_ring
  - !17799  iwlwifi: Add missing check for alloc_ordered_workqueue
  - !17817  vmci: Prevent the dispatching of uninitialized payloads
  - !17680 Add Model specific EPP adjustment support for EMR/SPR/GNR
  - !17667 cpufreq: intel_pstate: Add Granite Rapids support in no-HWP mode
  - !17682 Add TPMI RAPL PMU support for GNR/CWF and later Intel Xeon machines
  - !17664 intel_pstate support OOB mode for EMR/GNR/SRF/CWF
  - !17662 platform/x86: ISST: Add Clearwater Forest to support list
  - !17820  mm/hugetlb: fix surplus pages in dissolve_free_huge_page()
  - mm/hugetlb: fix surplus pages in dissolve_free_huge_page()
  - !17767 RDMA/hns: Fix bond not cleared when the configuration becomes invalid
  - !17806  pinmux: fix race causing mux_owner NULL with active mux_usecount
  - !17805  f2fs: fix to avoid out-of-boundary access in devs.path
  - vmci: Prevent the dispatching of uninitialized payloads
  - pinmux: fix race causing mux_owner NULL with active mux_usecount
  - f2fs: fix to avoid out-of-boundary access in devs.path
  - !17795  perf/core: Prevent VMA split of buffer mappings
  - !17316 [OLK-5.10] backport the follow important bugfix for nvme driver from upstream linux-5.10.y
  - !17791  ipv6: mcast: extend RCU protection in igmp6_send()
  - page_pool: Fix use-after-free in page_pool_recycle_in_ring
  - page_pool: fix inconsistency for page_pool_ring_[un]lock()
  - net: page_pool: use in_softirq() instead
  - iwlwifi: Add missing check for alloc_ordered_workqueue
  - !17573 ROH: Add crc_err_cnt and retry_cnt mib statistics
  - perf/core: Prevent VMA split of buffer mappings
  - !17773  thunderbolt: Do not double dequeue a configuration request
  - !17793 v2  fix some CVEs
  - KVM: x86: Reset IRTE to host control if *new* route isn't postable
  - rapidio: fix an API misues when rio_add_net() fails
  - filemap: avoid truncating 64-bit offset to 32 bits
  - drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table
  - drm/amd/display: Fix memory leak
  - scsi: ufs: bsg: Set bsg_queue to NULL after removal
  - ipv6: mcast: extend RCU protection in igmp6_send()
  - !17759  CVE-2025-37834
  - !17749  mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
  - !17688  netfilter: fix CVE-2022-49622
  - !17698  netfilter: nft_tunnel: fix geneve_opt type confusion addition
  - !17686  net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()
  - !17710  bnxt_en: Fix out-of-bound memcpy() during ethtool -w
  - !17765  mm/smaps: fix race between smaps_hugetlb_range and migration
  - !17740  Fix trace may OOB when trace_get_user failed
  - !17743  i2c: qup: jump out of the loop in case of timeout
  - thunderbolt: Do not double dequeue a configuration request
  - RDMA/hns: Fix bond not cleared when the configuration becomes invalid
  - mm/smaps: fix race between smaps_hugetlb_range and migration
  - mm/vmscan: fix hwpoisoned large folio handling in shrink_folio_list
  - mm/vmscan: don't try to reclaim hwpoison folio
  - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
  - i2c: qup: jump out of the loop in case of timeout
  - tracing: Limit access to parser->buffer when trace_get_user failed
  - tracing: Remove unneeded goto out logic
  - nfsd: fix UAF when access ex_uuid or ex_stats
  - SUNRPC: no need get cache ref when protected by rcu
  - nfsd: no need get cache ref when protected by rcu
  - SUNRPC: introduce cache_check_rcu to help check in rcu context
  - nfsd: Revert "nfsd: release svc_expkey/svc_export with rcu_work"
  - nfsd: release svc_expkey/svc_export with rcu_work
  - SUNRPC: make sure cache entry active before cache_show
  - nfsd: make sure exp active before svc_export_show
  - platform/x86: ISST: Add Clearwater Forest to support list
  - powercap: intel_rapl_tpmi: Enable PMU support
  - powercap: intel_rapl: Introduce APIs for PMU support
  - powercap: intel_rapl: Sort header files
  - cpufreq: intel_pstate: Add Granite Rapids support in no-HWP mode
  - cpufreq: intel_pstate: Update Balance-performance EPP for Granite Rapids
  - cpufreq: intel_pstate: Update Balance performance EPP for Emerald Rapids
  - cpufreq: intel_pstate: Allow model specific EPPs
  - bitfield: add FIELD_PREP_CONST()
  - cpufreq: intel_pstate: Adjust balance_performance EPP for Sapphire Rapids
  - cpufreq: intel_pstate: Update EPP for AlderLake mobile
  - cpufreq: intel_pstate: Support Clearwater Forest OOB mode
  - cpufreq: intel_pstate: Support Granite Rapids and Sierra Forest OOB mode
  - cpufreq: intel_pstate: Support Emerald Rapids OOB mode
  - bnxt_en: Fix out-of-bound memcpy() during ethtool -w
  - netfilter: nft_tunnel: fix geneve_opt type confusion addition
  - selftests: netfilter: add test case for nf trace infrastructure
  - netfilter: nf_tables: fix crash when nf_trace is enabled
  - netfilter: nf_tables: avoid skb access on nf_stolen
  - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()
  - ROH: Add crc_err_cnt and retry_cnt mib statistics
  - nvme-tcp: fix premature queue removal and I/O failover


author: caixiaomeng <caixiaomeng2@huawei.com> - 1:0.9.5-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ignore sssnic module when building hotpatch to fix sssnic wrongly dependency of sssnic


author: caixiaomeng <caixiaomeng2@huawei.com> - 1:0.9.5-12
changelog:
  - Type:bugfix
  - ID:NA                                                                                                         
  - SUG:NA
  - DESC:adpat kpatch bundle symbols to kernel change


author: lingsheng <lingsheng1@h-partners.com> - 3.5.2-9
changelog:
  - Type:CVE
  - ID:CVE-2025-5914,CVE-2025-5916,CVE-2025-5917,CVE-2025-5918
  - SUG:NA
  - DESC:fix CVE-2025-5914 CVE-2025-5916 CVE-2025-5917 CVE-2025-5918


author: liningjie <liningjie@xfusion.com> 2:0.8.1-10
changelog:
  - backport patches from openEuler-22.03-LTS-SP2:
    0001-remove-nonexistent-helper-functions-and-add-new-help.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:0.8.1-11
changelog:
  - backport patches from upstream:
    backport-libbpf-Fix-realloc-API-handling-in-zero-sized-edge-cases.patch
    backport-libbpf-Set-close-on-exec-flag-on-gzopen.patch
    backport-libbpf-Fix-is_pow_of_2.patch
    backport-libbpf-make-RINGBUF-map-size-adjustments-more-eagerly.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:0.8.1-12
changelog:
  - backport patches from upstream:
    backport-libbpf-Fix-NULL-pointer-dereference-in_bpf_object__c.patch
    backport-libbpf-Fix-str_has_sfxs-return-value.patch
    backport-libbpf-Initialize-err-in-probe_map_create.patch


author: jinzhiguang <jinzhiguang@kylinos.cn> - 2:0.8.1-13
changelog:
  - backport patch from upstream:
    backport-libbpf-Modify-the-function-name-in-libbpf.c-to-match.patch


author: xiesongyang <xiesongyang@huawei.com> - 2:0.8.1-14
changelog:
  - backport patch from upstream:
    backport-libbpf-Fix-an-error-in-64bit-relocation-value-comput.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:0.8.1-15
changelog:
  - backport patch from upstream:
    backport-libbpf-Avoid-uninitialized-value-in-BPF_CORE_READ_BI.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:0.8.1-16
changelog:
  - backport patch from upstream:
    backport-libbpf-Add-NULL-checks-to-bpf_object__prev_map,next_.patch
    backport-libbpf-Apply-map_set_def_max_entries-for-inner_maps-.patch
    backport-libbpf-Fix-uninitialized-warning-in-btf_dump_dump_ty.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:0.8.1-17
changelog:
  - backport patch from upstream:
    backport-libbpf-Dont-take-direct-pointers-into-BTF-data-from-.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:0.8.1-18
changelog:
  - backport patch from upstream:
    backport-libbpf-Do-not-resolve-size-on-duplicate-FUNCs.patch
    backport-libbpf-Fix-bpf_object__open_skeleton-s-mishandling-o.patch
    backport-libbpf-Fix-segfault-due-to-libelf-functions-not-sett.patch
    backport-libbpf-Fixed-getting-wrong-return-address-on-arm64-a.patch
    backport-libbpf-fix-sym_is_subprog-logic-for-weak-global-subp.patch
    backport-libbpf-move-global-data-mmap-ing-into-bpf_object__lo.patch


author: tianmuyang <tianmuyang@huawei.com> 2:0.8.1-19
changelog:
  - Adaption for sched type eBPF program:
    backport-libbpf-Adaption-for-sched-type-eBPF-program.patch


author: yanglongkang <yanglongkang@h-partners.com> - 2.61-7
changelog:
  - backport upstream patches:
    getcpcaps: fix program name in help message
    Stop using _pam_overwrite() in pam_cap.c


author: shixuantong <shixuantong1@huawei.com> - 3.4.2-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix x86/ffi64 calls with 6 gp and some sse registers
         Robustify floating point comparison in test
         Fix floating point compare


author: echo <2220386943@qq.com> - 1.2-2
changelog:
  - update version to 1.2-2
  - support new create thread
  - description of supplementary documents
  - support event grouping
  - add the mangleName in symbol.h


author: ZhengZhenyu <zhengzhenyu@openeuler.sh> - 13.12-1
changelog:
  - aupgrade libpq to 13.12,fix CVE-2023-2455, CVE-2023-2454, CVE-2023-39417, CVE-2023-39418, CVE-2020-21469


author: yixiangzhike <yixiangzhike007@163.com> - 1.4.4-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:change the files order in patch file fix-doc-about-difok.patch


author: xinghe <xinghe2@h-partners.com> - 2.74.2-5
changelog:
  - Type:cves
  - ID:CVE-2024-52530 CVE-2024-52531 CVE-2024-52532
  - SUG:NA
  - DESC:fix CVE-2024-52530 CVE-2024-52531 CVE-2024-52532


author: zhangpan <zhangpan103@h-partners.com> - 2.74.2-6
changelog:
  - Type:cves
  - ID:CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784
  - SUG:NA
  - DESC:fix CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784


author: zhangpan <zhangpan103@h-partners.com> - 2.74.2-7
changelog:
  - Type:cves
  - ID:CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913
  - SUG:NA
  - DESC:fix CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913


author: zhangpan <zhangpan103@h-partners.com> - 2.74.2-10
changelog:
  - Type:cves
  - ID:CVE-2025-4476 CVE-2025-4948 CVE-2025-4969
  - SUG:NA
  - DESC:fix CVE-2025-4476 CVE-2025-4948 CVE-2025-4969


author: renmingshuai <renmingshuai@huawei.com> - 0.9.6-8
changelog:
  - Type:CVE
  - Id:CVE-2023-6004,CVE-2023-6918,CVE-2023-48795
  - SUG:NA
  - DESC:fix CVE-2023-6004, CVE-2023-6918 and CVE-2023-48795


author: gaihuiying <eaglegai@163.com> - 0.9.6-11
changelog:
  - Type:CVE
  - CVE:CVE-2025-4877 CVE-2025-4878 CVE-2025-5372
  - SUG:NA
  - DESC:fix CVE-2025-4877 CVE-2025-4878 CVE-2025-5372


author: Funda Wang <fundawang@yeah.net> - 2.9.14-15
changelog:
  - Type:CVE
  - CVE:CVE-2024-56171
  - CVE:CVE-2025-24928
  - CVE:CVE-2025-27113
  - SUG:NA
  - DESC: fix CVE-2024-56171, CVE-2025-24928, CVE-2025-27113


author: Funda Wang <fundawang@yeah.net> - 2.9.14-19
changelog:
  - Type:CVE
  - CVE:CVE-2025-49794
  - CVE:CVE-2025-49796
  - SUG:NA
  - DESC: fix CVE-2025-49794, CVE-2025-49796


author: yinbin <yinbin8@huawei.com> - 2.2.0-60
changelog:
  - IPV6: Enable IPV6_FRAG_COPYHEADER macro to adapt 64bit
  - IPV6: fix array out of bounds in function ip6_ntoa_r
  - IPV6: add group check while mld6 schedule a report


author: hankangkang <hankangkang5@huawei.com> - 2.2.0-62
changelog:
  - When the GAZELLE_TCP_REUSE_IPPORT is on, min_cnts_lpcb is NULL
  - Turn on the LWIP_SO-LINGER switch


author: wujichao <wujichao1@huawei.com> - 0.3-35
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:bugfix: Information in cpu directory is overwritten after lxcfs restart


author: xiejing <xiejing@kylinos.cn> - 1:10.5.25-1
changelog:
  - Bump to 10.5.25 for resolving CVE-2024-21096, CVE-2023-22084
  - Fix version description in systemd service file


author: wangkai <13474090681@163.com> - 20240312-1
changelog:
  - Update to 20240312 for fix CVE-2023-38575, CVE-2023-39368,
    CVE-2023-22655, CVE-2023-43490, CVE-2023-28746


author: Funda Wang <fundawang@yeah.net> - 20240813-1
changelog:
  - update to 20240813 for fix CVE-2024-24853, CVE-2024-25939,
    CVE-2024-24980, CVE-2023-42667, CVE-2023-49141


author: Funda Wang <fundawang@yeah.net> - 20250211-1
changelog:
  - update to 2025021 for fix CVE-2024-28047, CVE-2024-31157, CVE-2024-39279,
    CVE-2024-28127, CVE-2024-29214, CVE-2024-24582, CVE-2023-34440, CVE-2024-37020,
    CVE-2024-39355, CVE-2023-43758, CVE-2024-36293, CVE-2024-31068


author: Funda Wang <fundawang@yeah.net> - 20250512-1
changelog:
  - update to 20250512 to fix CVE-2024-28956, CVE-2025-24495, CVE-2025-20012,
    CVE-2024-45332, CVE-2025-20623, CVE-2024-43420, CVE-2025-20054, CVE-2025-20103


author: Funda Wang <fundawang@yeah.net> - 20250812-1
changelog:
  - update to 20250812 to fix CVE-2025-20053, CVE-2025-20109, CVE-2025-21090,
    CVE-2025-22839, CVE-2025-22840, CVE-2025-22889, CVE-2025-24305, CVE-2025-26403,
    CVE-2025-32086


author: yaoxin <1024769339@qq.com> - 2.4.16.6-1
changelog:
  - Update to 2.4.16.6:
    * metadata: fix caching of JWKs from jwks_uri when using the default expiry setting
    * info: fix requests to the info hook with extend_session=false
    * cookie: OIDCCookieSameSite default behaviour Lax
    * cookie: apply OIDCCookieSameSite Off/None properly to state cookies instead of always setting Lax
    * cache: avoid segfault and improve error reporting in case apr_temp_dir_get fails when a temp directory
      cannot be found on the system upon initaliizing cache mutexes and the file cache
    * metadata: allow plain HTTP URLs in metadata elements jwks_uri and signed_jwks_uri to ensure backwards
      compatibility with <=2.4.15.7 and to support private/test deployments
    * code: address warnings from static code analysis tool CodeChecker


author: yaoxin <yao_xin001@hoperun.com> - 1.27.4-1
changelog:
  - Update to 1.27.4 for fix CVE-2024-6381 and CVE-2024-6383
  - libbson Fixes:
    * Fix build with Visual Studio 2013.
    * Fix parsing of colon in timezone.
    * Error on failure to init subdocument in bson_iter_visit_all.
    * Fix string handling in bson_string_new and bson_string_append.
    * Fix iteration in bson_strfreev.
    * Use aligned alloc for bson_array_builder_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Fix conversion warning with GCC 12.
    * Fixes to some format strings in trace logs.
    * Allow mongoc_buffer_t to be larger than INT_MAX.
    * Add bson_array_builder_t.
  - libmongoc Fixes:
    * Fix possible crash reading malformed wire protocol message.
    * Upgraded bundled Zlib from 1.2.3 to 1.3.1
    * Close leftover connections to removed servers.
    * Fix possible crash when client is configured with empty password.
    * Fix possible hang if mongoc_gridfs_file_readv is called with a corrupt chunk with incomplete data.
    * Fix 32-bit compile with 64-bit time_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Disable shared libmongoc targets if ENABLE_SHARED=OFF
    * Fix documentation build with Python 3.9.
    * Fix data race in mongoc_cursor_get_host.
    * Add back support for BUILD_VERSION CMake option. BUILD_VERSION was unintentionally removed in 1.25.0.
    * Send recoveryToken in transactions when connected to a load balancer.


author: wangkai <13474090681@163.com> - 8.0.37-1
changelog:
  - Update to 8.0.37 for fix CVEs(CVE-2024-20964,CVE-2024-20971,CVE-2024-20976,
    CVE-2024-20973,CVE-2024-20978,CVE-2024-20981,CVE-2024-20962,CVE-2024-20977,
    CVE-2024-20963,CVE-2024-20965,CVE-2024-20972,CVE-2024-20961,CVE-2024-20982,
    CVE-2024-20970,CVE-2024-20967,CVE-2024-20984,CVE-2024-20974,CVE-2024-20966,
    CVE-2024-20960,CVE-2024-20985,CVE-2024-20969,CVE-2024-21000,CVE-2024-21069,
    CVE-2024-21009,CVE-2024-21087,CVE-2024-21047,CVE-2024-20998,CVE-2024-21013,
    CVE-2024-21060,CVE-2024-21008,CVE-2024-21102,CVE-2024-21054,CVE-2024-21062,
    CVE-2024-20994,CVE-2024-21096,CVE-2024-21061,CVE-2024-20993,CVE-2024-21055,
    CVE-2024-21057,CVE-2023-6129)


author: wangkai <13474090681@163.com> - 8.0.38-1
changelog:
  - Update to 8.0.38 for fix CVEs(CVE-2024-21125,CVE-2024-21142,CVE-2024-21179,
    CVE-2024-21171,CVE-2024-21130,CVE-2024-21162,CVE-2024-21177,CVE-2024-20996,
    CVE-2024-21134,CVE-2024-21165,CVE-2024-21173,CVE-2024-21129,CVE-2024-21127,
    CVE-2024-21163)


author: wangkai <13474090681@163.com> - 8.0.40-1
changelog:
  - Update to 8.0.40 for fix CVEs(CVE-2024-21218,CVE-2024-21196,CVE-2024-21207,
    CVE-2024-21198,CVE-2024-21203,CVE-2024-21213,CVE-2024-21239,CVE-2024-21199,
    CVE-2024-21197,CVE-2024-21247,CVE-2024-21193,CVE-2024-21212,CVE-2024-21241,
    CVE-2024-21230,CVE-2024-21236,CVE-2024-21194,CVE-2024-21238,CVE-2024-21237,
    CVE-2024-21201,CVE-2024-21231,CVE-2024-21219,CVE-2024-21185)


author: yaoxin <1024769339@qq.com> - 8.0.41-1
changelog:
  - Update to 8.0.41 for fix CVEs(CVE-2025-21490,CVE-2025-21491,CVE-2025-21495,
    CVE-2025-21497,CVE-2025-21500,CVE-2025-21501,CVE-2025-21503,CVE-2025-21505,
    CVE-2025-21518,CVE-2025-21519,CVE-2025-21520,CVE-2025-21522,CVE-2025-21523,
    CVE-2025-21529,CVE-2025-21531,CVE-2025-21540,CVE-2025-21543,CVE-2025-21546,
    CVE-2025-21555,CVE-2025-21559)


author: yaoxin <1024769339@qq.com> - 8.0.42-1
changelog:
  - Update to 8.0.42 for fix CVEs(CVE-2025-21574,CVE-2025-21575,CVE-2025-21577,
    CVE-2025-21580,CVE-2025-21581,CVE-2025-21584,CVE-2025-21585,CVE-2025-30681,
    CVE-2025-30682,CVE-2025-30683,CVE-2025-30684,CVE-2025-30685,CVE-2025-30687,
    CVE-2025-30688,CVE-2025-30689,CVE-2025-30693,CVE-2025-30695,CVE-2025-30696,
    CVE-2025-30699,CVE-2025-30703,CVE-2025-30704,CVE-2025-30705,CVE-2025-30710,
    CVE-2025-30715,CVE-2025-30721,CVE-2025-30722


author: yaoxin <1024769339@qq.com> - 8.0.43-1
changelog:
  - Update to 8.4.6 for fix CVEs (CVE-2025-50068,CVE-2025-50077,CVE-2025-50078,
    CVE-2025-50079,CVE-2025-50080,CVE-2025-50081,CVE-2025-50082,CVE-2025-50083,
    CVE-2025-50084,CVE-2025-50085,CVE-2025-50086,CVE-2025-50087,CVE-2025-50091,
    CVE-2025-50092,CVE-2025-50093,CVE-2025-50094,CVE-2025-50096,CVE-2025-50097,
    CVE-2025-50098,CVE-2025-50099,CVE-2025-50100,CVE-2025-50101,CVE-2025-50102,
    CVE-2025-50104,CVE-2025-53023)


author: xinghe <xinghe2@h-partners.com> - 1:1.0.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix cache prepare nft_cache evaluate to return error
         fix cache validate handle string length
         add src support for implicit chain bindings
         fix cache release pending rules
         fix segtree map listing
         parser_json fix device parsing in netdev family
         fix src Don't parse string as verdict in map


author: huangyu <huangyu106@huawei.com> - 1:1.0.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix string prefix expression must retain original length
  fix release top level scope


author: zhanghao <zhanghao383@huawei.com> - 1:1.0.0-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:evaluate allow implicit ether vlan dep
  evaluate datatype memleak after binop transfer
  evaluate bogus datatype assertion in binary operation evaluation
  netlink delinearize do not transfer binary operation to non anonymous sets
  payload do not kill dependency for proto unknown
  monitor missing cache and set handle initialization
  netlink linearize fix timeout with map updates


author: zhanghao <zhanghao383@huawei.com> - 1:1.0.0-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix potential array out of bounds access
  evaluate: fix shift exponent underflow in concatenation evaluation
  netlink: Fix for potential NULL-pointer deref
  mnl: dump_nf_hooks() leaks memory in error path


author: gaihuiying <eaglegai@163.com> - 1:1.0.0-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         evaluate: error out if basetypes are different
         evaluate: guard against NULL basetype
         evaluate: handle invalid mapping expressions gracefully
         evaluate: reject attempt to update a set
         evaluate: release mpz type in expr_evaluate_list() error path
         expression: missing line in describe command with invalid expression

  Thu Apr 18 2024 lingsheng <lingsheng1@h-partners.com> - 1:1.0.0-10
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:datatype: don't return a const string from cgroupv2_get_path()
  datatype: fix leak and cleanup reference counting for struct datatype
  datatype: initialize TYPE_CT_EVENTBIT slot in datatype array
  datatype: initialize TYPE_CT_LABEL slot in datatype array
  evaluate: do not remove anonymous set with protocol flags and single element
  evaluate: don't crash if object map does not refer to a value
  evaluate: error out when expression has no datatype
  evaluate: error out when store needs more than one 128bit register of align fixup
  evaluate: fix check for truncation in stmt_evaluate_log_prefix()
  evaluate: fix double free on dtype release
  evaluate: fix memleak in prefix evaluation with wildcard interface name
  evaluate: reject set in concatenation
  evaluate: revisit anonymous set with single element optimization
  evaluate: skip anonymous set optimization for concatenations
  evaluate: stmt_nat: set reference must point to a map
  evaluate: tproxy: move range error checks after arg evaluation
  evaluate: validate chain max length
  evaluate: validate maximum log statement prefix length
  exthdr: fix tcpopt_find_template to use length after mask adjustment
  exthdr: prefer raw_type instead of desc->type
  json: expose dynamic flag
  json: fix use after free in table_flags_json()
  libnftables: Drop cache in -c/--check mode
  meta: fix tc classid parsing out-of-bounds access
  netlink: don't crash if prefix for < byte is requested
  netlink: fix leaking typeof_expr_data/typeof_expr_key in netlink_delinearize_set()
  netlink: handle invalid etype in set_make_key()
  parser_bison: fix ct scope underflow if ct helper section is duplicated
  parser_bison: fix memleak in meta set error handling
  parser_bison: make sure obj_free releases timeout policies
  parser_json: Catch nonsense ops in match statement
  parser_json: Default meter size to zero
  parser_json: Fix flowtable prio value parsing
  parser_json: Fix synproxy object mss/wscale parsing
  parser_json: Fix typo in json_parse_cmd_add_object()
  parser_json: Proper ct expectation attribute parsing
  parser_json: Wrong check in json_parse_ct_timeout_policy()
  py: fix exception during cleanup of half-initialized Nftables
  rule: fix sym refcount assertion


author: gaihuiying <eaglegai@163.com> - 1:1.0.0-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         evaluate: disable meta set with ranges
         src: reject large raw payload and concat expressions
         evaluate: fix stack overflow with huge priority string
         tcpopt: don't create exthdr expression without datatype
         src: do not allow to chain more than 16 binops
         rule: fix ASAN errors in chain priority to textual names
         tests: shell: add regression test for double-free crash bug
         evaluate: handle invalid mapping expressions in stateful object
         evaluate: Fix incorrect checking the `base` variable in case of IPV6
         netlink: reset temporary set element stmt list after list splice


author: gaihuiying <eaglegai@163.com> - 1:1.0.0-13
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:parser: split tcp option rules
         cache: prepare nft_cache_evaluate() to return error
         ct timeout: fix 'list object x' vs. 'list objects in table' confusion
         ct expectation: fix 'list object x' vs. 'list objects in table' confusion
         tests: shell: connect chains to hook point


author: gaihuiying <eaglegai@163.com> - 1:1.0.0-14
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         parser_json: release buffer returned by json_dumps
         parser_json: fix handle memleak from error path
         parser_json: fix several expression memleaks from error path
         libnftables: Zero ctx->vars after freeing it


author: wangkai <13474090681@163.com> - 1:12.22.11-5
changelog:
  - Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
  - CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
  - CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
  - CVE-2023-32559,CVE-2022-35256


author: yyjeqhc <jialin.oerv@isrc.iscas.ac.cn> - 0.2.17-3
changelog:
  - Migrated legacy `import pango` and `pangocairo` usage to modern PyGObject (`gi.repository.Pango`, `PangoCairo`)
  - Replaced all legacy constants (`pango.STRETCH_...`) with `Pango.Stretch.XXX` enums


author: fly_1997 <flylove7@outlook.com> -v1.0.1-6
changelog:
  - fix dependency error and add enable failed logs
  - fix dependency disabled failed and pre-enable illegal plugin


author: fly_1997 <flylove7@outlook.com> -v1.0.2-3
changelog:
  - add automatic startup based on the version
  - fix coredump when process exits
  - modify logger mode to append


author: LHesperus <liuchanggeng@huawei.com> -v2.0.0-1
changelog:
  - merge the plugin repository into this repository
  - add oeaware sdk library
  - new interface of plugin : replace the ringbuf data with subscribe
  - add new plugin : system info, command collector, xcall


author: fly_1997 <flylove7@outlook.com> -v2.0.0-3
changelog:
  - adjust the header file structure
  - fix cycles sample, spe memory free
  - add one time command collection


author: LHesperus <liuchanggeng@huawei.com> -v2.0.1-1
changelog:
  - add some document
  - fix bug : spe period dynamic changes
  - fix bug : analysis client not work
  - fix bug : cpuburst exit error
  - adapt : seep tune , steal task tune, xcall tune


author: yeyiyang <yeyiyang3@h-partners.com> -v2.0.3-1
changelog:
  - Refactored and enhanced the analysis module:
    - Added scenario-aware analysis for multiple optimization plugins
    - Introduced command-line result viewing capability
    - Implemented Markdown format output support
  - Add new plugin: smt,binary,hirq


author: heppen <hepeng68@huawei.com> -v2.0.3-2
changelog:
  - Fixed memory leak issues:
    - Fixed unsubscribeHandler topic deserialize memory leak
    - Fixed analysis module memory leak
  - Enhanced eBPF functionality:
    - Set memory lock limit to infinity for eBPF
    - Used eBPF to collect thread information
  - Network improvements:
    - Fixed ntoh port error
    - Added support for attaching all network interfaces
    - Used tcp-set-state to adapt k8s docker
  - New features:
    - Added xcall parameters
    - Added support for docker coordination burst analysis
    - Added parameter validation
    - Added NUMA parallel scheduler tuning support
  - Other improvements:
    - Fixed header files and added CI test


author: fly_1997 <flylove7@outlook.com> -v2.0.4-1
changelog:
  - add docker coordination burst tune
  - add multi net path tune and analysis
  - add error log and params check


author: LHesperus <liuchanggeng@huawei.com> -v2.0.5-2
changelog:
  - improve some output format
  - add xcall prefetch
  - network interface plugin : adapt same nic with different ifindex


author: cuixucui <cuixucui1@h-partner.com> - 1.1.3-2
changelog:
  - Fix code issue and update log print in network
  - Cancel deleting the IP that automatically configured on the server
  - Fix cdrom bug


author: liqiang <liqiang332@h-partner.com> - 1.1.3-3
changelog:
  - Fix libswsds.so not stripped
  - Fix the value of kernel.src obtained by the kabi test case is incorrect
  - Add board infomation and fix memory bug
  - Fix the block size fails to be obtained during the NVME test
  - Judge whether to support kabi testing by architecture
  - Update readme and dev_design


author: cuixucui <cuixucui1@h-partner.com> - 1.1.4-0
changelog:
  - Add board information in the test report
  - Add spdk test case
  - Add dpdk test case
  - Update pci.ids file


author: cuixucui <cuixucui@h-partner.com> - 1.1.5-0
changelog:
  - Add support for openEuler 20.03 LTS SP4, openEuler 22.03 LTS SP2, openEuler 22.03 LTS SP3
  - Add modifications to Kylinsec with oec-hardware
  - Add support for Loongson and SW architectures
  - Bugfix


author: cuixucui <cuixucui@h-partner.com> - 1.1.5-1
changelog:
  - Add virtual cases
  - Resolve IB startup IB_Read_BW service failure issue
  - Delete redundant references
  - Resolve incorrect type in vgpu result data
  - Resolve the issue of getting the kernel source rpm


author: cuixucui <cuixucui@h-partner.com> - 1.1.5-1
changelog:
  - Resolve kdump\watchdog\cpufreq\kabiwhitelist\network test failure issue 
  - Add fio test cases:read,write,randread,randwrite
  - Solve the nvme line break issue in the command line interface
  - Fix compilation errors in the make command
  - Add Vulkan testcase for nvida GPU
  - Resolve the issue of oech server startup failure on version 24.03


author: xiaochn <xiaochuannan@inspur.com> - 1.1.5-3
changelog:
  - Resolve the issue of different kernel source download locations in kabi test case
  - Resolve the issue that kabiwhitelist still passes when the ko and rpm file does not exist
  - Add the way for manually adding kabiwhitelist file
  - For custom vendors, refer to the method of obtaining openEuler os information
  - Supports custom vendor


author: wangshuai <wangshuai321@huawei.com> - 1.1.6-0
changelog:
  - Add new test suite srpm and intel
  - Add virtual branch of test suite
  - Add support for Kylin and UOS
  - Bugfix


author: wangshuai <wangshuai321@huawei.com> - 1.1.6-3
changelog:
  - Update the pci.ids file
  - Remove unused variable in cdrom test suite
  - Update test_guide doc
  - Unify the location for downloading kernel source RPMs
  - Optimize kabiwhitelist and system test


author: xiaochn <xiaochuannan@inspur.com> - 1.1.7-1
changelog:
  - Add KylinSec 3.5.3 support
  - Fix the problem of disk size calculation
  - Fix bcm57414 nic test failed issue
  - Change the format of date
  - Fixed a bug where a non-existent logger level was used
  - Update README.md
  - Fix vgpu testing issue


author: Funda Wang <fundawang@yeah.net> - 0.21.0-11
changelog:
  - fix CVE-2024-8443, CVE-2024-45615, CVE-2024-45616,
    CVE-2024-45617, CVE-2024-45618, CVE-2024-45619, CVE-2024-45620


author: renmingshuai<renmingshuai@huawei.com> - 8.8p1-25
changelog:
  - Type:CVE
  - CVE:CVE-2023-48795,CVE-2023-51385
  - SUG:NA
  - DESC:fix CVE-2023-48795 and CVE-2023-51385


author: zhangbinqin<zhangbinqin@h-partners.com> - 8.8p1-36
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix the missing member of the struct Authmethod method_gsskeyex


author: wangkai <13474090681@163.com> - 5.3.7-6
changelog:
  - Fix CVE-2024-45769,CVE-2024-45770
  - Fix buffer sizing checks in pmstore PDU handling (RHEL-57805)
  - Guard against symlink attacks in pmpost program (RHEL-57810)
  - Fix libpcp_web webgroup slow request refcounting (RHEL-58306)
  - Updated pmdahacluster for newer crm_mon versions (RHEL-50693)
  - Fix invalid memory access in pmfind utility (BZ 2135314)


author: Xiaoqian Lv <xiaoqian@nj.iscas.ac.cn> - 4.5-5
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC: backport upstream 4.5-0.20 patches to support riscv64


author: Guofeng Yue <yueguofeng@h-partners.com> - 4.5-12
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: modify "--source_ip" to "--bind_source_ip" to fix init connection establishment with specific interface


author: wangkai <13474090681@163.com> - 1:0.78-13
changelog:
  - Fix CVE-2012-6687
  - Introduced environment variable-controlled polling timeouts 
    for the close and connection-keeping functions in the os_unix.c file.


author: Funda Wang <fundawang@yeah.net> - 8.0.30-7
changelog:
  - Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
    GHSA-4w77-75f9-2c8w
  - Fix OOB access in ldap_escape
    CVE-2024-8932
  - Fix Integer overflow in the dblib/firebird quoter causing OOB writes
    CVE-2024-11236
  - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
    CVE-2024-11234
  - Fix Single byte overread with convert.quoted-printable-decode filter
    CVE-2024-11233


author: duyiwei <duyiwei@kylinos.cn> - 1:3.4.4-4
changelog:
  - Type:bugfix
  - CVE:CVE-2024-9355、CVE-2019-9514、CVE-2024-24791、CVE-2022-32189、CVE-2022-41715、CVE-2022-2880、CVE-2022-1962、CVE-2023-45290、CVE-2024-24783、CVE-2024-24785
  - SUG:NA
  - DESC: Optimize spec files and fix CVE in batches through rebuild


author: zhouwenpei <zhouwenpei1@h-partners.com> - 0.90.0-6
changelog:
  - fix CVE-2022-37050,CVE-2022-37051,CVE-2022-37052,CVE-2022-38349,CVE-2020-23804
  - fix install error


author: xiongyi <xiongyi@uniontech.com> - 0.90.0-7
changelog:
  - fix CVE-2020-36023
  - fix infinite looping in cvtGlyph with broken files
  - patch source:https://gitlab.freedesktop.org/poppler/poppler/-/issues/1013


author: dillon chen <dillon.chen@gmail.com> - 13.3-8
changelog:
  - Fix build error for loongarch64
  - Fix issue: confilct between libpq-devel and postgresql-devel
  - guess init spec from redhat
  - change redhat spec:rm private package and add files to server-devel
  - so add delete lines to Fix issue
  - Next: write oe libpq and postgresql spec by myself


author: heppen <hepeng68@huawei.com> - 1.1.0-3
changelog:
  - Bug fix: fix build warning.
  - Bug fix: export PWR_SYS_GetRtPowerInfo.
  - Bug fix: data collection task intercept invalid task type.


author: heppen <hepeng68@huawei.com> - 1.1.0-4
changelog:
  - Bug fix: memcpy null pointer, array out of bounds, struct align.
  - Bug fix: get watt state will failed at the first time.
  - Bug fix: use process name to query pid but return all pids.
  - Bug fix: mismatch fopen/pclose and popen/fclose, useless if statement.


author: heppen <hepeng68@huawei.com> - 1.1.0-5
changelog:
  - Bug fix: SIGPIPE cause powerapi server exit.
  - Bug fix: pstree command is too slow to get all pid.
  - Bug fix: set smart grid state failed.
  - Bug fix: get watt attr and task list is not correct.


author: Zihao Xue <xuezihao@huawei.com> - 1.1.0-6
changelog:
  - Bug fix: heap buffer overflow caused by sending incomplete strings.
  - Bug fix: too long strings into QueryProcs causes services broke down.


author: heppen <hepeng68@huawei.com> - 1.0.1-4
changelog:
  - Add the dependency on ipmitool.
  - Fix bug: Coredump when CPU cores number exceed 248 or numa nodes exceed 16.
  - Fix some memory bug.


author: gaihuiying <eaglegai@163.com> - 2.4.9-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream
         Fixing up parsing in radiusclient.conf


author: chenhaixing <chenhaixing@huawei.com> - 1.26.8-2
changelog:
  - delete patch Bump-RECENT_DATE.patch and modify RECENT_DATE in python-urllib3.spec to adapt time change


author: chenhaixing <chenhaixing@huawei.com> - 1.26.12-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix socket timeout value when HTTPConnect is reused
         remove Exclamation mark character from the unreserved characters
         fix _idna_encode handling of x80


author: chengyechun <chengyechun1@huawei.com> - 1.26.12-7
changelog:
  - Type:CVE
  - CVE:CVE-2024-37891
  - SUG:NA
  - DESC:fix CVE-2024-37891 Strip Proxy-Authorization header on redirects


author: xinsheng <xinsheng3@huawei.com> - 3.9.9-35
changelog:
  - Type:CVE
  - CVE:NA
  - SUG:NA
  - DESC:fix CVE-2024-6923,CVE-2024-7592,CVE-2024-8088
      - Encode newlines in headers, and verify headers are sound
      - Fix quadratic complexity in parsing quoted cookie values with backslashes
      - Replaced SanitizedNames with a more surgical fix


author: xinsheng <xinsheng3@huawei.com> - 3.9.9-36
changelog:
  - Type:CVE
  - CVE:CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597,CVE-2024-4032
  - SUG:NA
  - DESC:fix CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597,CVE-2024-4032
      - rename all CVE patch name
      - CVE-2024-6232: Remove backtracking when parsing tarfile headers
      - CVE-2024-3219: patch1 Authenticate socket connection for `socket.socketpair()` fallback
      - CVE-2024-3219: patch2 Rework pure Python socketpair tests to avoid use of importlib.reload.
      - CVE-2024-0450: Protect zipfile from "quoted-overlap" zipbomb
      - CVE-2023-6597: tempfile.TemporaryDirectory: fix symlink bug in cleanup
      - CVE-2024-4032: Fix "private" (non-global) IP address ranges


author: wangshuo <wangshuo@kylinos.cn> - 3.9.9-37
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch, fix the bug introduced by the fix for CVE-2007-4559
  -      gh-107845: Fix symlink handling for tarfile.data_filter


author: Funda Wang <fundawang@yeah.net> - 3.9.9-38
changelog:
  - Type:CVE
  - CVE:CVE-2024-9287
  - SUG:NA
  - DESC:fix CVE-2024-9287
    - Quote template strings in venv activation scripts


author: xinsheng <xinsheng3@huawei.com> - 3.9.9-40
changelog:
  - Type:CVE
  - CVE:CVE-2024-11168
  - SUG:NA
  - DESC:fix CVE-2024-11168
         - Adds checks to ensure that bracketed hosts found by urlsplit are of IPv6 or IPvFuture format


author: <fengjiabo1@huawei.com> - 10:6.2.0-91
changelog:
  - hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs(CVE-2024-3446)
  - hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs(CVE-2024-3446)
  - hw/display/virtio-gpu: Protect from DMA re-entrancy bugs(CVE-2024-3446)
  - hw/virtio: Introduce virtio_bh_new_guarded() helper
  - hw: replace most qemu_bh_new calls with qemu_bh_new_guarded
  - checkpatch: add qemu_bh_new/aio_bh_new checks
  - async: avoid use-after-free on re-entrancy guard
  - async: Add an optional reentrancy guard to the BH API
  - hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set(CVE-2024-3447)
  - rtl8139: Remove unused variable
  - tulip: Remove unused variable
  - virtio-mem: Fix the bitmap index of the section offset
  - virtio-mem: Fix the iterator variable in a vmem->rdl_list loop
  - system/memory: use ldn_he_p/stn_he_p
  - block: Fix crash when loading snapshot on inactive node
  - smmu: Clear SMMUPciBus pointer cache when system reset
  - block/mirror: Fix NULL s->job in active writes
  - amd_iommu: Fix APIC address check
  - virtio-crypto: fix NULL pointer dereference in virtio_crypto_free_reques
  - libqos/virtio.c: Correct 'flags' reading in qvirtqueue_kick
  - ivshmem-test.c: enable test_ivshmem_server for ppc64 arch
  - ivshmem.c: change endianness to LITTLE_ENDIAN
  - hw/ppc/mac.h: Remove MAX_CPUS macro
  - configure: remove dead variables
  - virtio-gpu: do not byteswap padding
  - hw/intc: clean-up error reporting for failed ITS cmd
  - qemu-iotests: Discard stderr when probing devices
  - linux-user: un-parent OBJECT(cpu) when closing thread
  - hw/net/rocker: Avoid undefined shifts with more than 31 ports
  - contrib/vhost-user-blk: Clean up deallocation of VuVirtqElement
  - scsi-disk: fix overflow when block size is not a multiple of BDRV_SECTOR_SIZE


author: <fengjiabo1@huawei.com> - 10:6.2.0-92
changelog:
  - s390x/sclp: Simplify get_sclp_device() 
  - target/ppc: Remove msr_pr macro
  - docs/system/target-arm: Re-alphabetize board list
  - migration: Extend query-migrate to provide dirty page limit info
  - migration: Implement dirty-limit convergence algo
  - migration: Put the detection logic before auto-converge checking
  - migration: Refactor auto-converge capability logic
  - migration: Introduce dirty-limit capability
  - qapi/migration: Introduce vcpu-dirty-limit parameters
  - qapi/migration: Introduce x-vcpu-dirty-limit-period parameter
  - Change the value of no_ged from true to false
  - Allow UNIX socket option for VNC websocket
  - tpm_emulator: Avoid double initialization during
  - chardev/char-socket: Update AF_UNIX for Windows
  - KVM: dirty ring: add missing memory barrier
  - i386: reset KVM nested state upon CPU reset
  - esp: Handle CMD_BUSRESET by resetting the SCSI bus
  - dbus-vmstate: Restrict error checks to registered proxies in dbus_get_proxies
  - vfio/pci: Add Ascend310b scend910b support
  - target/i386: Export RFDS bit to guests
  - target/i386: Add new CPU model SierraForest
  - target/i386: Introduce Icelake-Server-v7 to enable TSX
  - hw/virtio: handle un-configured shutdown in virtio-pci
  - target/s390x: display deprecation status in '-cpu  help'
  - target/i386: display deprecation status in '-cpu  help'
  - pc-bios/s390-ccw: Fix booting with logical block size < physical block size


author: <fengjiabo1@huawei.com> - 10:6.2.0-93
changelog:
  - cvm: bug-fix for macro isolation
  - tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fix CVE-2023-5088)
  - hw/ide: reset: cancel async DMA operation before resetting state (Fix CVE-2023-5088)
  - Add support for the virtcca cvm feature.


author: <fengjiabo1@huawei.com> - 10:6.2.0-96
changelog:
  - vdpa: Fix bug where vdpa appliance migration does not resume after rollback
  - block: Parse filenames only when explicitly requested (CVE-2024-4467)
  - block: introduce bdrv_open_file_child() helper
  - iotests/270: Don't store data-file with json: prefix in image (CVE-2024-4467)
  - iotests/244: Don't store data-file with protocol in image (CVE-2024-4467)
  - qcow2: Don't open data_file with BDRV_O_NO_IO (CVE-2024-4467)
  - qcow2: Do not reopen data_file in invalidate_cache
  - hw/intc/arm_gic: Fix deactivation of SPI lines chery-pick from 7175a562f157d39725ab396e39c1e8e410d206b3
  - vhost-user: Skip unnecessary duplicated VHOST_USER_SET_LOG_BASE requests
  - target/ppc: Split off common embedded TLB init cheery-pick from 581eea5d656b73c6532109f4ced4c73fd4e5fd47`
  - vdpa: fix vdpa device migrate rollback wrong when suspend device failed 1. 
  - hw/virtio/virtio-pci:Support shadow device for virtio-net/blk/scsi devices


author: <fengjiabo1@huawei.com> - 10:6.2.0-97
changelog:
  - nbd/server: CVE-2024-7409: Close stray clients at server-stop
  - main-loop.h: introduce qemu_in_main_thread()
  - aio-wait.h: introduce AIO_WAIT_WHILE_UNLOCKED
  - nbd/server: CVE-2024-7409: Drop non-negotiating clients
  - nbd/server: CVE-2024-7409: Cap default max-connections to 100
  - nbd/server: Plumb in new args to nbd_client_add()
  - nbd: Minor style and typo fixes


author: <fengjiabo1@huawei.com> - 10:6.2.0-98
changelog:
  - pci-host: designware: Limit value range of iATU viewport register
  - hmat acpi: Fix out of bounds access due to missing use of indirection
  - migration: Skip only empty block devices
  - aspeed/hace: Initialize g_autofree pointer
  - hw/net/vmxnet3: Fix guest-triggerable assert()
  - qxl: don't assert() if device isn't yet initialized
  - Avoid unaligned fetch in ladr_match()
  - linux-user: Fix waitid return of siginfo_t and rusage
  - hw/net/lan9118: Replace magic '2048' value by MIL_TXFIFO_SIZE definition
  - stdvga: fix screen blanking
  - virtio-net: drop too short packets early
  - ebpf: replace deprecated bpf_program__set_socket_filter
  - vhsot-user: only read reply of SET_LOG_BASE from vq 0
  - cpu: add Tengyun S5000C cpu support
  - hw/virtio: Fix obtain the buffer id from the last descriptor
  - hw/core: ensure kernel_end never gets used undefined


author: <fengjiabo1@huawei.com> - 10:6.2.0-99
changelog:
  - target/i386: Introduce SapphireRapids-v3 to add missing features
  - qtest/fuzz-lsi53c895a-test: set guest RAM to 2G
  - hw/net/lan9118: Signal TSFL_INT flag when TX FIFO reaches specified level
  - target/arm: Fix alignment for VLD4.32
  - hw/microblaze: pass random seed to fdt
  - tests/qtest: npcm7xx-emc-test: Skip checking MAC
  - tests: mark io-command test as skipped if socat is missing
  - tests: unit: add NULL-pointer check
  - tests: test-qga: close socket on failure to connect
  - vdpa:block device capacity expansion online support vdpa block device update capacity.
  - virtio-net: Ensure queue index fits with RSS(CVE-2024-6505)
  - nbd/server: CVE-2024-7409: Avoid use-after-free when closing server
  - ppc/vof: Fix unaligned FDT property access
  - vvfat: Fix reading files with non-continuous clusters
  - vvfat: Fix bug in writing to middle of file
  - savevm: Fix load_snapshot error path crash
  - hw/dma/xilinx_axidma: Use semicolon at end of statement, not comma
  - hw/remote/message.c: Don't directly invoke DeviceClass:reset
  - crypto/tlscredspsk: Free username on finalize
  - hw/display/vhost-user-gpu.c: fix vhost_user_gpu_chr_read()
  - virtio: remove virtio_tswap16s() call in vring_packed_event_read()
  - char-stdio: Restore blocking mode of stdout on exit
  - hw/ppc: spapr: Use qemu_vfree() to free spapr->htab
  - smbios: sanitize type from external type before checking have_fields_bitmap
  - spapr_pci: fix leak in spapr_phb_vfio_get_loc_code
  - KVM: use store-release to mark dirty pages as harvested
  - monitor/hmp: print trace as option in help for log command
  - tpm_crb: Avoid backend startup just before shutdown under Xen
  - crypto/block-luks: make range overlap check more readable
  - spapr: Free stdout path
  - target/rx: Use target_ulong for address in LI
  - virtio-pci: Fix the use of an uninitialized irqfd
  - rtl8139: Fix behaviour for old kernels.
  - virtio-rng: block max-bytes=0 MIME-Version: 1.0
  - hw/audio/es1370: Clean up comment
  - vhost-user-server: do not set memory fd non-blocking
  - ui: reject extended clipboard message if not activated
  - virtio-net: Fix vhost virtqueue notifiers for RSS
  - hw/misc/applesmc: Fix memory leak in reset() handler


author: <fengjiabo1@huawei.com> - 10:6.2.0-100
changelog:
  - mac_dbdma: Remove leftover `dma_memory_unmap` calls(CVE-2024-8612)
  - softmmu: Support concurrent bounce buffers(CVE-2024-8612)
  - system/physmem: Per-AddressSpace bounce buffering
  - system/physmem: Propagate AddressSpace to MapClient helpers


author: <fengjiabo1@huawei.com> - 10:6.2.0-101
changelog:
  - python/aqmp: use absolute import statement
  - sysemu: Cleanup qemu_run_machine_init_done_notifiers()
  - vhost-backend: avoid overflow on memslots_limit
  - hw/i386/vmmouse: Require 'i8042' property to be set
  - hw/scsi/megasas: Fails command if SGL buffer overflows
  - target/i386/kvm: Replace use of __u32 type
  - hw/avr: Realize AVRCPU qdev object using qdev_realize()
  - qemu-keymap: Add license in generated files
  - configure: Symlink binaries using .exe suffix with MinGW
  - ui: remove break after g_assert_not_reached()
  - io/channel-websock: Replace strlen(const_str) by sizeof(const_str) - 1
  - target/ppc: Add HASHKEYR and HASHPKEYR SPRs
  - tests: Fix error strings
  - Hexagon (target/hexagon) remove unused encodings
  - target/i386: introduce insn_get_addr
  - target/i386: REPZ and REPNZ are mutually exclusive
  - target/i386: correctly mask SSE4a bit indices in register operands
  - bios-tables-test: Make oem-fields tests be consistent
  - tests/vm: update NetBSD to 9.3
  - monitor/hmp-cmds: Avoid displaying bogus size in 'info pci' When BAR aren't mapped, we get:
  - virtio-mem: don't warn about THP sizes on a kernel without THP Support
  - Subject: [PATCH] kvm: Use 'unsigned long' for request argument in functions  wrapping ioctl()


author: <fengjiabo1@huawei.com> - 10:6.2.0-102
changelog:
  - target/ppc: Remove unused xer_* macros
  - hw/mips: Build fw_cfg.c once
  - minikconf: print error entirely on stderr
  - target/ppc: Remove extra space from s128 field in ppc_vsr_t
  - hw/arm/virt:Keep Guest L1 cache type consistent with KVM
  - pc-bios/keymaps: Use the official xkb name for Arabic layout, not the legacy synonym


author: <fengjiabo1@huawei.com> - 10:6.2.0-103
changelog:
  - Introduce the SM4 cipher algorithms (OSCCA GB/T 32907-2016).
  - intel_iommu: Add missed sanity check for 256-bit invalidation queue
  - linux-user: use 'max' instead of 'qemu32' / 'qemu64' by default
  - chardev/baum: Use definitions to avoid dynamic stack allocation
  - ui/console: Get tab completion working again in the SDL monitor vc
  - s390x/tcg: Fix opcode for lzrf
  - virtiofsd: use g_date_time_get_microsecond to get subsecond
  - ui/curses: Avoid dynamic stack allocation
  - target/m68k: always call gen_exit_tb() after writes to SR
  - target/m68k: Perform writback before modifying SR
  - target/m68k: Fix MACSR to CCR
  - target/m68k: Implement atomic test-and-set
  - block/nvme: nvme_process_completion() fix bound for cid
  - hw/pci-host: pnv_phb{3, 4}: Fix heap out-of-bound access failure
  - target/ppc: Zero second doubleword of VSR registers for FPR insns
  - target/ppc: Set OV32 when OV is set
  - target/ppc: Zero second doubleword for VSX madd instructions
  - target/ppc: Set result to QNaN for DENBCD when VXCVI occurs
  - hw/pci: Add parenthesis to PCI_BUILD_BDF macro
  - intel_iommu: Send IQE event when setting reserved bit in IQT_TAIL
  - acpi: cpuhp: fix guest-visible maximum access size to the legacy reg block
  - acpi: ged: Add macro for acpi sleep control register
  - hw/pci-bridge: Add a Kconfig switch for the normal PCI bridge
  - ui/vnc: fix handling of VNC_FEATURE_XVP
  - s390/sclp: fix SCLP facility map
  - docs/tools/qemu-img.rst: fix typo (sumarizes)
  - chardev/char: fix qemu_chr_is_busy() check
  - edu: fix DMA range upper bound check
  - platform-bus: fix refcount leak
  - hw/net/virtio-net: fix qemu set used ring flag even vhost started
  - hw/net/can/sja1000: fix bug for single acceptance filter and standard frame
  - tests/avocado: fix typo in replay_linux
  - util/userfaultfd: Remove unused uffd_poll_events
  - hw/core/ptimer: fix timer zero period condition for freq > 1GHz
  - hcd-ohci: Drop ohci_service_iso_td() if ed->head & OHCI_DPTR_MASK is zero
  - tests/unit/test-vmstate: Avoid dynamic stack allocation
  - hw/usb/hcd-ohci: Use definition to avoid dynamic stack allocation
  - hw/i386/multiboot: Avoid dynamic stack allocation
  - hw/ppc/spapr: Fix code style problems reported by checkpatch
  - chardev/baum: Replace magic values by X_MAX / Y_MAX definitions
  - hw/intc/xics: Avoid dynamic stack allocation
  - hw/net/e1000e_core: Use definition to avoid dynamic stack allocation
  - intel_iommu: Fix invalidation descriptor type field
  - configs: Fix typo in the sh4-softmmu devices config file


author: <ganqixin@huawei.com> - 10:6.2.0-104
changelog:
  - intel_iommu: Add missed reserved bit check for IEC descriptor
  - 9pfs: fix crash on 'Treaddir' request
  - s390x/ap: fix missing subsystem reset registration
  - qemu/bswap: Undefine CPU_CONVERT() once done
  - linux-user: Add missing signals in strace output
  - linux-user: Add missing clock_gettime64() syscall strace


author: <alex.chen@huawei.com> - 10:6.2.0-105
changelog:
  - target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  - target/i386: Add VNMI and automatic IBRS feature bits
  - target/i386: Add missing feature bits in EPYC-Milan model
  - target/i386: Add feature bits for CPUID_Fn80000021_EAX
  - target/i386: Add a couple of feature bits in 8000_0008_EBX
  - target/i386: Add new EPYC CPU versions with updated cache_info
  - target/i386: allow versioned CPUs to specify new cache_info


author: <fengjiabo1@huawei.com> - 10:6.2.0-106
changelog:
  - hw/nvme: Remove redundant dma_blk_write
  - tests/avocado/machine_s390_ccw_virtio: Adapt test to new default resolution
  - edid: set default resolution to 1280x800 (WXGA)
  - iotests/308: Fix for CAP_DAC_OVERRIDE
  - hvf: remove unused but set variable
  - vvfat: Fix vvfat_write() for writes before the root directory
  - hw/misc/nrf51_rng: Don't use BIT_MASK() when we mean BIT()
  - hw/pci: Remove unused pci_irq_pulse() method
  - ui/gtk: fix leaks found wtih fuzzing
  - target/i386: fix size of EBP writeback in gen_enter()
  - tests/qtest/fuzz: fix memleak in qos_fuzz.c
  - hw/core/loader: gunzip(): fix memory leak on error path
  - migration: fix a typo
  - scsi: fetch unit attention when creating the request
  - raw-format: Fix error message for invalid offset/size
  - tcg: Reset data_gen_ptr correctly
  - Fix calculation of minimum in colo_compare_tcp
  - hw/intc: Don't clear pending bits on IRQ lowering
  - target/arm: Drop user-only special case in sve_stN_r
  - usb-hub: Fix handling port power control messages
  - target/ppc: Set ctx->opcode for decode_insn32()
  - linux-user: Add proper strace format strings for getdents()/getdents64()
  - linux-user: Fix TARGET_PROT_SEM for XTENSA
  - linux-user/hppa: Set TASK_UNMAPPED_BASE to 0xfa000000 for hppa arch
  - linux-user/hppa: Dump IIR on register dump
  - tests: Fix typo in check-help output
  - qdev-core.h: Fix wrongly named reference to TYPE_SPLIT_IRQ
  - hw/scsi/megasas: Simplify using the ldst API
  - gqa-win: get_pci_info: Clean dev_info if handle is valid
  - target/ppc: Fix 7448 support
  - vvfat: Fix size of temporary qcow file
  - docs: Correct 'vhost-user-blk' spelling
  - jackaudio: use ifdefs to hide unavailable functions
  - simplebench: Fix Python syntax error (reported by LGTM)
  - python: update type hints for mypy 0.930
  - Python/aqmp: fix type definitions for mypy 0.920
  - tcg: Allow top bit of SIMD_DATA_BITS to be set in simd_desc()
  - hw/ppc/e500: Prefer QOM cast
  - hw/ppc/e500: Remove unused "irqs" parameter
  - hw/ppc/e500: Add missing device tree properties to i2c controller node
  - linux-user: Show timespec on strace for futex()
  - linux-user: Add strace for clock_nanosleep()
  - linux-user: Fix strace of chmod() if mode == 0
  - linux-user: Log failing executable in EXCP_DUMP()
  - linux-user: Add pidfd_open(), pidfd_send_signal() and pidfd_getfd() syscalls


author: <fengjiabo1@huawei.com> - 10:6.2.0-107
changelog:
  - qemu: Support specifying the cache size presented to guest
  - hw/core/machine-smp: Initialize caches_bitmap before reading
  - qapi/qom: Define cache enumeration and properties for machine
  - linux-aio: fix unbalanced plugged counter in laio_io_unplug()


author: <fengjiabo1@huawei.com> - 10:6.2.0-109
changelog:
  - migration:Extand the fdtable in the incoming phase of migration
  - qemu6.2.0: Add trace to measure hot migrate downtime


author: <fengjiabo1@huawei.com> - 10:6.2.0-87
changelog:
  - vdpa: suspend function return 0 when the vdpa device is stopped
  - vdpa: don't suspend/resume device when vdpa device not started
  - vdpa: support vdpa device suspend/resume
  - vdpa: correct param passed in when unregister save
  - vdpa: set vring enable only if the vring address has already been set
  - shadow_dev: introduce shadow dev for virtio-net device
  - revert "tcg/loongarch64: Fix tcg_out_mov() Aborted"
  - migration: Set downtime_start even for postcopy
  - gdb-xml: fix duplicate register in arm-neon.xml
  - iotests: fix default machine type detection
  - migration: fix RAMBlock add NULL check
  - s390x: Fix spelling errors
  - ppc: spelling fixes
  - hw/scsi/vhost-scsi: don't double close vhostfd on error
  - virtio/vhost-vsock: don't double close vhostfd, remove redundant cleanup
  - hw/scsi/vhost-scsi: don't leak vqs on error
  - hw/i386/pc: Add missing property descriptions
  - pcie_aer: Don't trigger a LSI if none are defined
  - pci: Export the pci_intx() function
  - hw/qdev: Cosmetic around documentation
  - tests/unit: fix a -Wformat-truncation warning
  - tests/avocado: mark ReplayKernelNormal.test_mips64el_malta as flaky
  - i386/sev: Avoid SEV-ES crash due to missing MSR_EFER_LMA bit
  - ui/vnc-clipboard: fix inflate_buffer
  - hw/usb/hcd-xhci.c: spelling: tranfer


author: <fengjiabo1@huawei.com> - 10:6.2.0-88
changelog:
  - ui/vnc.c: Fixed a deadlock bug.
  - hw/i386: Fix comment style in topology.h
  - migration/multifd: Remove unnecessary usage of local Error
  - linux-user: fix sockaddr_in6 endianness
  - vhost_vdpa: fix the input in trace_vhost_vdpa_listener_region_del()
  - iotests: fix 194: filter out racy postcopy-active event
  - tests/avocado: fix waiting for vm shutdown in replay_linux
  - ui/vnc: fix debug output for invalid audio message


author: <fengjiabo1@huawei.com> - 10:6.2.0-89
changelog:
  - qga-win: Fix guest-get-fsinfo multi-disks collection
  - hw/timer: fix systick trace message
  - virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)
  - ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
  - esp: restrict non-DMA transfer length to that of available data (CVE-2024-24474)
  - hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
  - hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  - net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
  - net: Provide MemReentrancyGuard * to qemu_new_nic()


author: <fengjiabo1@huawei.com> - 10:6.2.0-90
changelog:
  - i386/cpuid: Move leaf 7 to correct group
  - i386/cpuid: Decrease cpuid_i when skipping CPUID leaf 1F
  - i386/cpu: Mask with XCR0/XSS mask for FEAT_XSAVE_XCR0_HI and FEAT_XSAVE_XSS_HI leafs
  - i386/cpu: Clear FEAT_XSAVE_XSS_LO/HI leafs when CPUID_EXT_XSAVE is not available
  - target/i386: Change wrong XFRM value in SGX CPUID leaf
  - target/i386: Enable support for XSAVES based features
  - target/i386: Add kvm_get_one_msr helper
  - hw/block/hd-geometry: Do not override specified bios-chs-trans mainline inclusion commit fd8a68ad6823d33bedeba20a22857867a1c3890e category: bugfix
  - linux-user/riscv: Align signal frame to 16 bytes mainline inclusion commit 1eaa63429a9944265c92efdb94c02fabb231f564 category: bugfix
  - ipmi:smbus: Add a check around a memcpy mainline inclusion commit 3fde641e7286f9b968bdb3b4b922c6465f2a9abc category: bugfix
  - tests/tcg/linux-test: Fix random hangs in test_socket mainline inclusion commit b9e6074fc5b429b1e956e9c60db7e284a91e0f3d category: bugfix
  - qemu-options.hx: Don't claim "-serial" has limit of 4 serial ports Before v2.12, the implementation of serial ports was limited to a value of MAX_SERIAL_PORTS = 4. We now dynamically allocate the data structures for serial ports, so this limit is no longer present, but the documentation for the -serial options still reads:
  - target/ppc: Modify the uncorrect value irq to n_IRQ
  - block-migration: Ensure we don't crash during migration cleanup
  - target/s390x: fix handling of zeroes in vfmin/vfmax mainline inclusion commit 13c59eb09bd6d1fbc13f08b708226421f14a232b category: bugfix
  - hw/virtio/virtio-iommu: Enforce power-of-two notify for both MAP and UNMAP mainline inclusion commit 0522be9a0c0094088ccef7aab352c57f483ca250 category: bugfix
  - configure: Add missing POSIX-required space mainline inclusion commit 35a7a6fc5624b1df828d82f2dfa74d0e4188b3b2 category: bugfix
  - vga: fix incorrect line height in 640x200x2 mode mainline inclusion commit 37e7b86766244b62a406747bb78e049390d0b528 category: bugfix
  - hw/ide/core: set ERR_STAT in unsupported command completion
  - linux-user/flatload.c: Fix setting of  image_info::end_code mainline inclusion commit 734a659ad264ac080457167e845ffabbaaa66d0e category: bugfix
  - load_elf: fix iterator's type for elf file processing
  - hw/misc/mps2-scc: Free MPS2SCC::oscclk[] array on finalize()
  - hw/nvram/xlnx-efuse: Free XlnxEFuse::ro_bits[] array on finalize()
  - hw/nvram/xlnx-efuse-ctrl: Free XlnxVersalEFuseCtrl[] "pg0-lock" array
  - chardev/char.c: fix "abstract device type" error message
  - block/rbd: fix handling of holes in .bdrv_co_block_status
  - qga: treat get-guest-fsinfo as "best effort" mainline inclusion commit bbb0151cf2e82489120a15df5e2eb9653312b0ec category: bugfix
  - usb/hcd-xhci: check slotid in  xhci_wakeup_endpoint() mainline inclusion commit 84218892f05515d20347fde4506e1944eb11cb25 category: bugfix
  - hw/display/bcm2835_fb: Fix framebuffer allocation  address mainline inclusion commit 5865d99fe88d8c8fa437c18c6b63fb2a8165634f category: bugfix
  - block/parallels: Fix buffer-based write call mainline inclusion commit eba088f91d21d9e42a81bef847173da30c5da961 category: bugfix
  - vl: Improve error message for conflicting -incoming and -loadvm
  - hw/smbios: Fix OEM strings table option validation


author: lifeifei <lifeifei@kylinos.cn> - 2.19-3
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Add the socket option IPV6_MULTICAST_LOOP to prevent the interface from autoconfiguring using RA messages sent by itself.


author: Xia Bing <xiabing12@h-partners.com> - 0.6.7-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix "nimbus_id=0" field is not displayed when query RAS error information


author: renhongxun <renhongxun@h-partners.com> - 0.6.7-15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:clear the link to rasdaemon.service when uninstalling rasdaemon
         and ensure rasdaemon restart once be upgraded


author: caixiaomeng <caixiaomeng2@huawei.com> - 0.6.7-19
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add-dynamic-switch-of-ras-events-support-and-disable-block-rq-complete


author: Bing Xia <xiabing12@h-partners.com> - 0.6.7-20
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix for vendor errors are not recorded in the SQLite database if 
         some cpus are offline at the system start


author: yangjunshuo <yangjunshuo@huawei.com> - 0.6.7-21
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix cpu isolate errors when some cpus are offline
    before the service started


author: wangkai <13474090681@163.com> - 7.2.7-1
changelog:
  - Update to 7.2.7
  - Fix CVE-2021-32626 CVE-2021-32627 CVE-2021-32762 CVE-2021-32675
    CVE-2021-41099 CVE-2021-32628 CVE-2021-32687 CVE-2022-24735
    CVE-2022-24736 CVE-2022-3647 CVE-2022-3734 CVE-2022-35977
    CVE-2023-25155 CVE-2024-46981


author: sunsuwan <sunsuwan3@huawei.com> - 1.2.6-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:add a user directory when the rpc user directory does not exist


author: wangyueliang <wangyueliang@kylinos.cn> - 2022.16-4
changelog:
  - merge feature from branch openEuler-22.03-LTS-SP1：
  - DESC: add loongarch64 and sw_64 support
  - AUTHOR: panchenbo <panchenbo@kylinsec.com.cn>


author: dongyuzhen <dongyuzhen@h-partners.com> - 2.16-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix failure when recompiling noarch rpm and remove the require to rpm-build


author: dongyuzhen <dongyuzhen@h-partners.com> - 2.16-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:revert: remove the require to rpm-build.For consistency with other community-released dependencies


author: yixiangzhike <yixiangzhike007@163.com> - 2.16-13
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:avoid truncate trailer space and do not escape backslash when read filename


author: yixiangzhike <yixiangzhike007@163.com> - 2.16-14
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:revert "avoid truncate trailer space and do not escape backslash when read filename"


author: zouzhimin <zouzhimin@kylinos.cn> - 1:2.2.3.1-4
changelog:
  - Type:CVES
  - ID:CVE-2024-26141 CVE-2024-26146 CVE-2024-25126
  - SUG:NA
  - DESC:CVE-2024-26141 CVE-2024-26146 CVE-2024-25126


author: zouzhimin <zouzhimin@kylinos.cn> - 1:2.2.3.1-5
changelog:
  - Type:CVES
  - ID:CVE-2022-44570 CVE-2022-44571 CVE-2022-44572
  - SUG:NA
  - DESC:CVE-2022-44570 CVE-2022-44571 CVE-2022-44572


author: zhongjiawei<zhongjiawei1@huawei.com> - 1.1.3-27
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Set temporary single CPU affinity before cgroup cpuset transition


author: wangkai <13474090681@163.com> - 1.76.0-1
changelog:
  - Update to 1.76.0 because firefox update 128ESR version
  - Fix CVE-2022-21658 CVE-2022-46176 CVE-2023-38497
  - Obsoletes rust-analysis


author: wangjiang <wangjiang37@h-partners.com> - 35.5-17
changelog:
  - backport patch Allow virt_domain read device sysctls
                   Allow icecast rename its log files


author: Jianmin <jianmin@iscas.ac.cn> - 1:1.8.0-7
changelog:
  - Type:cve
  - CVE:CVE-2023-39325 and CVE-2023-44487
  - SUG:NA
  - DESC:backport CVE-2023-39325 and CVE-2023-44487


author: wangkai <13474090681@163.com> - 14.4.2.0-29
changelog:
  - Fix CVE-2021-33844,CVE-2023-32627,CVE-2021-23159,CVE-2023-34432
  - CVE-2023-34318,CVE-2021-23172,CVE-2021-3643,CVE-2021-23210
  - CVE-2022-31650,CVE-2023-26590,CVE-2022-31651,CVE-2023-32627
  - CVE-2017-18189


author: shixuantong <shixuantong1@huawei.com> - 1.0.2-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix the problem that function cpu_report_result() is called more than once
         fix error handling


author: zhuofeng <zhuofeng2@huawei.com> - 1.0.2-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix syssentry fails to be started when cpu_sentry is not installed


author: shixuantong <shixuantong1@huawei.com> - 1.0.2-13
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:optimize the handing of cat-cli error msg in cpu_sentry
         over threshold should be warn level log in cat-cli


author: luckky <guodashun1@huawei.com> - 1.0.2-18
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix uint8 bug and change page isolation threshold default value


author: luckky <guodashun1@huawei.com> - 1.0.2-20
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC: update the commit of the log level and format function of sysSentry


author: lingsheng <lingsheng1@h-partners.com> - 6.04-16
changelog:
  - update libpng 1.6.36 to fix CVE-2011-2501 CVE-2011-2690 CVE-2011-2691
  - CVE-2011-2692 CVE-2011-3045 CVE-2011-3048 CVE-2012-3425 CVE-2015-7981
  - CVE-2015-8126 CVE-2015-8472 CVE-2015-8540 CVE-2016-10087 CVE-2017-12652


author: zhangyao <zhangyao108@huawei.com> - 249-91
changelog:
  - add backport-userdb-Use-json_dispatch_user_group_name-to-parse-Ge.patch
        backport-README-explicitly-note-that-util-linux-s-mount-swap-.patch
        backport-man-fix-section-number.patch
        backport-repart-fix-invalid-errno-in-log.patch
        backport-sysusers-insist-that-root-group-is-0.patch
        backport-importd-Always-specify-file-unpacked-by-tar.patch
        backport-docs-remove-dev-tty-confusion.patch


author: zhangyao <zhangyao108@huawei.com> - 249-92
changelog:
  - wait-online: fix handling of unmanaged state
  - add backport-wait-online-make-manager_link_is_online-return-0-whe.patch


author: zhangyao <zhangyao108@huawei.com> - 249-95
changelog:
  - add backport-cgroup-util-introduce-cg_is_threaded.patch
        backport-core-execute-warn-when-threaded-mode-is-detected.patch


author: zhangyao <zhangyao108@huawei.com> - 249-96
changelog:
  - backport upstream patch to solve systemd-shutdown hang all the time caused by fsync blocked by absence of DM mapping table


author: zhangyao <zhangyao108@huawei.com> - 249-97
changelog:
  - add backport-logind-give-better-error-messages-when-failing-to-at.patch
        backport-sd-journal-refuse-entry-objects-with-an-empty-boot-I.patch
        backport-fs-util-readlinkat-supports-an-empty-string.patch
        backport-exec-invoke-correct-dont_close-size.patch
        backport-core-Fix-file-descriptor-leak.patch
        backport-core-fix-NULL-pointer-dereference-during-deserializa.patch
        backport-core-service-fix-accept-socket-deserialization.patch
        backport-resolved-correct-parsing-of-OPT-extended-RCODEs.patch
        backport-coredump-correctly-take-tmpfs-size-into-account-for-.patch
        backport-sysusers-handle-NSS-errors-gracefully.patch
        backport-shared-log-error-when-execve-fail.patch


author: wangyuhang <wangyuhang27@huawei.com> - 249-98
changelog:
  - add backport-run-split-out-creation-of-unit-creation-messages.patch
        backport-run-pass-the-pty-slave-fd-to-transient-service.patch
        backport-run-do-not-pass-the-pty-slave-fd-to-transient-servic.patch
        backport-sd-event-do-not-assert-on-invalid-signal.patch
        backport-sd-event-change-error-code-EINVAL-EIO.patch
        backport-basic-log-do-not-treat-all-negative-errnos-as-synthe.patch
        backport-sd-ipv4acd-fix-assertion-triggered-when-an-ARP-recei.patch
        backport-main-reopen-dev-console-for-user-service-manager.patch
        backport-log-add-common-helper-log_set_target_and_open.patch
        backport-resolved-log-error-messages-for-openssl-gnutls-conte.patch
        backport-journalctl-erase-verify-key-before-free.patch
        backport-core-service-use-log_unit_-where-appropriate.patch
        backport-manager-log-unit-pid-of-sender-when-Reload-is-called.patch
        backport-Manager-also-log-caller-of-daemon-reexec.patch
        backport-manager-improve-message-about-Reload-Reexec-requests.patch
        backport-core-fix-null-in-output.patch
        backport-core-Bump-log-level-of-reexecute-request-to-notice.patch
        backport-core-Log-in-more-scenarios-about-which-process-initi.patch


author: hugel <gengqihu2@h-partners.com> - 249-102
changelog:
  - sync patch from systemd community
  - add backport-shutdown-close-DM-block-device-before-issuing-DM_DEV.patch
        backport-execute-free-syscall_log-hashmap-when-done.patch
        backport-logind-let-system-wide-idle-begin-at-the-time-logind.patch
        backport-core-fix-assert-when-AddDependencyUnitFiles-is-calle.patch


author: zhangyao <zhangyao108@huawei.com> - 249-89
changelog:
  - add backport-man-fix-directory-for-user-home-bind-mounts.patch
        backport-nspawn-fix-directory-in-logged-error.patch
        backport-test-boot-timestamp-Handle-ERANGE-error.patch


author: chenyaqiang <chengyaqiang@huawei.com> - 1:9.0.96-1
changelog:
  - Update to 9.0.96
  - Fix CVE-2021-43980 CVE-2022-25762 CVE-2023-44487 CVE-2023-46589
    CVE-2024-23672 CVE-2024-24549 CVE-2024-34750


author: wangkai <13474090681@163.com> - 1:9.0.100-1
changelog:
  - Update to 9.0.100 for fix CVE-2024-56337
  - Add a check to ensure that, if one or more web applications are potentially vulnerable to CVE-2024-56337,
    the JVM has been configured to protect against the vulnerability and to configure the JVM correctly if not.


author: Liu Chao <liuchao173@huawei.com> - 2.24.1-1
changelog:
  - Upgrade to 2.24.1:
    - fixed privileged execution of arbitrary scripts by active local user. (CVE-2024-52336)
    - added sanity checks for API methods parameters. (CVE-2024-52337)


author: tianmuyang <tianmuyang@huawei.com> - 2.24.1-3
changelog:
  - profiles: add programmable scheduling based on eBPF
  - package:  change package tuned to architecture-dependent


author: langfei<langfei@huawei.com> - 2022a-16
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Fix Palestine predictions for 2072 through 2075; Ittoqqortoormiit (America/Scoresbysund) zone change.


author: liuchao <liuchao173@huawei.com> - 2022a-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Vostok switches to +05; Sync Casey data from timeanddata.com; Kazakhstan unifies on UTC+5


author: langfei <langfei@huawei.com> - 2022a-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Aysén Region moves from -04/-03 to -03; new zone;
  -	Improve recent commentary for Chilean decrees.


author: gaihuiying <eaglegai@163.com> - 1.13.2-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:change run directory from /var/run to /run to fix "/usr/lib/tmpfiles.d/unbound.conf:1: xxxx"


author: yanglongkang <yanglongkang@h-partners.com> - 2.37.2-32
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         backport-uuidd-fix-open-lock-state-issue.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-34
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         [add]backport-Fix-ul_path_read_buffer.patch
         backport-fsck.minix-fix-possible-overrun.patch
         backport-wall-fix-possible-memory-leak.patch
         backport-wall-make-sure-unsigned-variable-not-underflow.patch


author: liyuzhe <liyuzhe@cqsoftware.com.cn> - 2.37.2-36
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         backport-login-su-pam_end-compliance.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-38
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         [add]backport-lsmem-make-lsmem-to-check-for-the-nodes-more-robust.patch
         backport-cfdisk-fix-possible-integer-overflow-coverity-scan.patch
         backport-more-make-sure-we-have-data-on-stderr.patch
         backport-libblkid-apfs-validate-checksums.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-39
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         [add] backport-sys-utils-setpriv-fix-potential-memory-leak.patch
         backport-sys-utils-save_adjtime-fix-memory-leak.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-40
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         [add] backport-libblkid-ext-add-checksum-support.patch
         backport-libblkid-fix-spurious-ext-superblock-checksum-mismat.patch
         backport-libblkid-fix-potential-memory-leaks.patch
         backport-sys-utils-fix-add-NULL-check-for-mnt_fs_get_target-r.patch
         backport-sulogin-fix-POSIX-locale-use.patch
         backport-setpriv.c-fix-memory-leak-in-parse_groups-function.patch
         backport-whereis-avoid-accessing-uninitialized-memory.patch
         backport-dmesg-fix-notime-use.patch


author: yueyuankun <yueyuankun@kylinos.cn> - 1:3.16.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:arm64: Handle sp, lr, fp as DwReg in CfiExpr
         sync arm64-Handle-sp-lr-fp-as-DwReg-in-CfiExpr.patch


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-16
changelog:
  - Type:CVE
  - ID:CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735
  - SUG:NA
  - DESC:fix CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-17
changelog:
  - Type:CVE
  - ID:CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781
  - SUG:NA
  - DESC:fix CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-22
changelog:
  - Type:CVE
  - ID:CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237
  - SUG:NA
  - DESC:fix CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237


author: yanglu <yanglu72@h-partners.com> -1.20.11-31
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix regression caused by the fix for CVE-2024-0229 
         fix use after free related to CVE-2024-21886


author: shuaijiakun <shuaijiakun1288@phytium.com.cn> -1.20.11-32
changelog:
  - Type:feature
  - CVE:NA
  - SUG:NA
  - DESC:fix display error for ps23xx when using ast and pe2201 bmc card.


author: Funda Wang <fundawang@yeah.net> - 1.20.11-35
changelog:
  - fix CVE-2025-26594, CVE-2025-26595, CVE-2025-26596,
    CVE-2025-26597, CVE-2025-26598, CVE-2025-26599
    CVE-2025-26600, CVE-2025-26601


