# changelog

author: Paul Howarth <paul@city-fan.org> - 1.0.5-17
changelog:
  - ldconfig scriptlets replaced by RPM File Triggers from Fedora 28
  - Drop legacy BuildRoot: and Group: tags
  - Drop redundant explicit buildroot cleaning
  - Specify all explicitly-used build requirements
  - Use %license where possible
  - Drop %defattr, redundant since rpm 4.4


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.40.10-1
changelog:
  - Update to 1.40.10 release
  - cloud-setup: preserve addresses added externally (rh #2132754)
  - veth: fix detection of existing interface and peer (rh #2129829)
  - dns: ensure dnsmasq is stopped after disabling it and a restart (rh #2120763)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.40.12-1
changelog:
  - Update to 1.40.12 release
  - core: retry if a rtnetlink socket runs out of buffer space (rh #2154350)


author: wangyue <wangyue92@huawei.com> - 2.2.0-19
changelog:
  - fix CVE-2021-3474 CVE-2021-3477 CVE-2021-3476 CVE-2021-3475 CVE-2021-20296 CVE-2021-3479 CVE-2021-20296


author: yaoxin <yaoxin30@huawei.com> - 2.2.0-22
changelog:
  - fix CVE-2020-11758 CVE-2020-11759 CVE-2020-11760 CVE-2020-11761 CVE-2020-11762 CVE-2020-11763 CVE-2020-11764 CVE-2020-11765 CVE-2020-15305 CVE-2020-15306


author: openEuler Buildteam <buildteam@openeuler.org> -20190730-2
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Increase the ability to provide adobe-mappings-cmap-deprecated


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0:1.10.5-3
changelog:
  - Use C.UTF-8 locale
    See https://fedoraproject.org/wiki/Changes/Remove_glibc-langpacks-all_from_buildroot


author: Mat Booth <mat.booth@redhat.com> - 3.2.2-8
changelog:
  - Allow testframework to still be built even with tests disabled, which is
    needed by other packages


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-2
changelog:
  - Adjust sample-rules dir permissions
    Resolves: rhbz#2054727 - /usr/share/audit/sample-rules is no longer readable by non-root users


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-2.1
changelog:
  - Fix path normalization in auparse
    Resolves: rhbz#2061726 - auparse missing information when used with --format-text


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-2.2
changelog:
  - Drop ProtectHome from auditd.service as it interferes with rules
    Resolves: rhbz#2070705 - Default systemd service config blocks audit watch rules in some directories


author: Pavel Březina <pbrezina@redhat.com> - 1.2.5-1
changelog:
  - Rebase to 1.2.5 (RHBZ #2080238)
  - sssd profile with-smartcard no longer prevents local users from accessing cron (RHBZ #2070325)
  - backup-restore now works correctly (RHBZ #2066535)
  - add with-subid to sssd profile (RHBZ #2063750)


author: Pavel Březina <pbrezina@redhat.com> - 1.2.6-1
changelog:
  - Rebase to 1.2.6 (RHBZ #2142805)
  - Update translations (RHBZ #2139696)
  - Change password hashing algorithm from yescrypt back to sha512 (RHBZ #2151140)


author: wangyuhang<wangyuhang27@huawei.com> - 5.1.4-1.02
changelog:
  - build: sync from openeuler
  - Type:bugfix
  - CVE:
  - SUG:NA
  - DESC:sync patches from bash community
         add backport-Bash-5.1-patch-12-fix-race-condition-with-child-proc.patch
         add backport-Bash-5.1-patch-16-fix-interpretation-of-multiple-ins.patch


author: yuejiayan<yuejiayan@huawei.com> - 1:2.8-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:completions/Makefile: Fix check-local in VPATH builds
         __load_completion: Avoid bad array subscript on "commands" ending wit…
         _xspecs: Declare as global on bash >= 4.2
         completions/Makefile.am: Use install-data-hook, not install-data-local
         man: Fix completion when failglob option is enabled (#225)
         _longopt: don't complete --no-* with file/dirname arg


author: Severin Gehwolf <sgehwolf@redhat.com> - 1.10-3
changelog:
  - Add explicit javapackages-tools requirement for sub-packages using
    jpackage_script-based scripts. See RHBZ#1600426.


author: Mat Booth <mat.booth@redhat.com> - 1.11-1
changelog:
  - Update to latest upstream release
  - Drop ancient obsoletes
  - Drop eclipse-specific hacks that are no longer needed
  - Allow conditional building without scripting engines for smaller dep chain
  - Break out some low-level modules into separate sub-package for smaller install
    size


author: Roman Vais <rvais@redhat.com> - 1.71-1
changelog:
  - Update to upstream version 1.71
  - Add patch for issue https://github.com/cbeust/jcommander/issues/367


author: huangyu <huangyu106@huawei.com> - 32:9.11.21-14
changelog:
  - Type:CVE
  - ID:CVE-2022-2906 CVE-2022-38177 CVE-2022-38178 CVE-2022-2795 CVE-2022-2881
  - SUG:NA
  - DESC:FIX CVE-2022-2906CVE-2022-38177CVE-2022-38178CVE-2022-2795CVE-2022-2881


author: zhanghao <zhanghao383@huawei.com> - 32:9.11.21-15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix output expected information when install bing-sdborbind-sdb-chroot


author: zhangyiru <zhangyiru3@huawei.com> - 1.73.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:increase used_block_count when use put_mem_block
    Disallow repeating a case-change group


author: zhangyiru <zhangyiru3@huawei.com> - 1.73.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Correct stack unwinding inside recursions when seeing (*SKIP).


author: wangjie<wangjie294@huawei.com> -1.0.7-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Synchronize patches from community
         Verbose-CLI-start-pulling-Shared-Brotli.patch
         Ensure-decompression-consumes-all-input.patch
         fix-MSVC-configuration-and-c++-compilation-fails.patch
         fix-executable-mode-of-decode-js.patch
         Fix-include-for-EMCC-build.patch
         Add-an-option-to-avoid-building-shared-libraries.patch
         Disable-PIC-in-EMCC-mode.patch
         Add-missing-const-to-a-couple-of-kConstants.patch
         Move-TZCNT-and-BSR-intrinsics-and-add-MSVC-versions.patch


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-2
changelog:
  - fix chroot: unmount with MNT_DETACH instead of UnmountMountpoints()
  - bug reference 1772179
  - Related: RHELPLAN-25139


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-7
changelog:
  - fix "CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process"
  - Resolves: #1819393


author: Jindrich Novy <jnovy@redhat.com> - 1.19.3-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/a96b716)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.4-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/76beccc)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/1fb260f)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/db783f4)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/9dd415b)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/e5384ed)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-5
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/016b90d)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-6
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/dcd385e)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.6-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/7aedb16)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.7-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/a2854ed)
  - Resolves: #1935376


author: Jindrich Novy <jnovy@redhat.com> - 1.5-4.gite94b4f9
changelog:
  - fix "CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process"
  - Resolves: #1818127


author: Mat Booth <mat.booth@redhat.com> - 1.9.5-1
changelog:
  - Update to latest upstream release
  - Add a bootstrap mode to break circular self-dependency
  - Patch out use of optional external unixsocket library that is not present
    in Fedora
  - Patch to avoid bundling ASM inside the shaded jar


author: xinghe <xinghe2@h-partners.com> - 1.16.1-7
changelog:
  - Type:cves
  - CVE:CVE-2023-31130 CVE-2023-31124 CVE-2023-31147
  - SUG:NA
  - DESC:fix CVE-2023-31130 CVE-2023-31124 CVE-2023-31147


author: yanglu <yanglu60@huawei.com> - 1.15.14-5
changelog:
  - Type:cves
  - ID:CVE-2018-19876 CVE-2019-6461 CVE-2019-6462
  - SUG:NA
  - DESC: fix CVE-2018-19876 CVE-2019-6461 CVE-2019-6462


author: haowenchao <haowenchao@huawei.com> - 6.10-3
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-Use-explicit-usr-bin-python3.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: Martin Pitt <mpitt@redhat.com> - 286.1-1
changelog:
  - Users: Fix broken alignment of the first column in groups table
  - Translation updates (rhbz#2139715)


author: Martin Pitt <mpitt@redhat.com> - 2-1
changelog:
  - Update to upstream 2 release
  - Support podman API 1.3
  - Support running commands with arguments
  - Show the default command coming from image
  - Implement filtering of images and containers


author: Martin Pitt <mpitt@redhat.com> - 3-1
changelog:
  - Enable Commit button for running containers
  - Fix race condition with container deletion
  - Stop fetching all containers/images for each container/image event


author: Matej Marusak <mmarusak@redhat.com> - 10-1
changelog:
  - Support for user containers
  - Show list of containers that use given image
  - Show placeholder while loading containers and images
  - Fix setting memory limit rhbz#1732713
  - Add container Terminal rhbz#1703245


author: Jindrich Novy <jnovy@redhat.com> - 11-1
changelog:
  - Fix Alert notification in Image Search Modal
  - Allow more than a single Error Notification for Container action errors
  - Various Alert cleanups
  - Translation updates
  - Related: RHELPLAN-25139


author: Jindrich Novy <jnovy@redhat.com> - 27.1-3
changelog:
  - another gating test fix - don't remove all containers but only admin ones
    thanks to Matej Marusak
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 2:2.123.0-2
changelog:
  - implement spec file refactoring by Zdenek Pytela, namely:
    Change the uninstall command in the %postun section of the specfile
    to use the %selinux_modules_uninstall macro which uses priority 200.
    Change the install command in the %post section if the specfile
    to use the %selinux_modules_install macro.
    Replace relabel commands with using the %selinux_relabel_pre and
    %selinux_relabel_post macros.
    Change formatting so that the lines are vertically aligned
    in the %postun section.
    (https://github.com/containers/container-selinux/pull/85)
  - Related: RHELPLAN-25139


author: Jindrich Novy <jnovy@redhat.com> - 2:2.130.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.130.0
  - don't use macros in changelog
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 2:2.150.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.150.0
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 2:2.151.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.151.0
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 2:2.152.0-1
changelog:
  - update to
    https://github.com/containers/container-selinux/releases/tag/v2.152.0
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 2:2.153.0-1
changelog:
  - update to
    https://github.com/containers/container-selinux/releases/tag/v2.153.0
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 2:2.154.0-1
changelog:
  - update to
    https://github.com/containers/container-selinux/releases/tag/v2.154.0
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 2:2.155.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.155.0
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 2:2.156.0-1
changelog:
  - update to
    https://github.com/containers/container-selinux/releases/tag/v2.156.0
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 2:2.158.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.158.0
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 0.8.1-2
changelog:
  - backport https://github.com/coreos/go-iptables/pull/62
    from Michael Cambria
  - Resolves: #1627561


author: Jindrich Novy <jnovy@redhat.com> - 0.8.6-2
changelog:
  - propagate proper CFLAGS to CGO_CFLAGS to assure code hardening and optimization
  - Related: #1821193


author: Eduardo Santiago <santiago@redhat.com> - 1:0.1.41-3
changelog:
  - patch broken gating tests: improper 'jq' usage, and use 'registry:2.6'
    (instead of :2) to work around broken image pushed by docker


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-12
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/3abb778)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/e72dd9c)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-5
changelog:
  - use infra_image = registry.redhat.io/ubi8/pause in contiainers.conf
    (unlike previous one ubi8/pause doesn't require authentication)
  - Related: #1934947


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-6
changelog:
  - update documentation and configs according to the current
    versions of vendored projects
  - Related: #1938234


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-6
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/e7880c4)
  - Related: #1938234


author: jiangchuangang <jiangchuangang@huawei.com> - 8.32-6
changelog:
  - skip testcase for overlay filesystem because of no inotify_add_watch
    add test-skip-overlay-filesystem-because-of-no-inotify_add_watch.patch


author: fuanan <fuanan3@h-partners.com> - 2.13-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert fix CVE-2015-1197 because it causes AT testcases problems


author: chenziyang <chenziyang4@huawei.com> - 2.13-7
changelog:
  - Type:CVE
  - ID:CVE-2015-1197
  - SUG:NA
  - DESC:Fix CVE-2015-1197, delete revert-CVE-2015-1197.patch because new patch
         will fix the problem brought by old-CVE-2015-1197.patch, so we delete 
         revert-CVE-2015-1197.patch


author: liyancheng <412998149@qq.com> - 7.3.0-2020033101.50
changelog:
  - Add-bolt-linker-plugin.patch: New file
  - Enable-BOLT-linker-plugin-on-aarch64.patch: New file
  - gcc.spec: Add new patches, enable bolt plugin on aarch64.


author: Adrian Reber <adrian@lisas.de> - 3.12-0.1
changelog:
  - Updated to 3.12 (pre-release)
  - Create libs subpackage
  - Build against SELinux (Fedora and RHEL8)
  - Build against libbsd (Fedora)


author: Alexander Sosedkin <asosedkin@redhat.com> - 20211116-1.gitae470d6
changelog:
  - OSPP: relax -ECDSA-SHA2-512, -FFDHE-*
  - fips-mode-setup, fips-finish-install: call zipl more often (s390x-specific)
  - libssh: enable diffie-hellman-group14-sha256 support
  - openssl: fix disabling ChaCha20


author: Alexander Sosedkin <asosedkin@redhat.com> - 20221215-1.gitece0092
changelog:
  - bind: expand the list of disableable algorithms
  - tests/java: fix java.security.disableSystemPropertiesFile=true
  - stop accidentally creating /etc/crypto-policies/back-ends/.config symlink


author: Daniel Zatovic <dzatovic@redhat.com> - 2.3.7-4
changelog:
  - patch: Remove LUKS2 encryption data size restriction.
  - patch: Abort encryption when header and data devices are same.
  - Resolves: #2150254


author: yuxiaojun <yuxiaojun@uniontech.com> - 2.2.13-17.up4
changelog:
  - rebuild
  - feat:merge uts01
  - fix: cups autostart when enabled (bugid:161411)
  - fix build error for UnionTech


author: Jeff Moyer <jmoyer@redhat.com> - 1.9.2-1.el8
changelog:
  - Package pmdk version 1.9.2 for stream 1-fileformat-v6-rhel-8.3.1
  - libvmem is no longer packaged as part of pmdk.
  - ppc64le packages are now built
  - Related: rhbz#1524652, rhbz#1780388, rhbz#1854812, rhbz#1860860


author: Alejandro Sáez <asm@redhat.com> - 1.3.2-3
changelog:
  - Resolves: rhbz#1758612
  - Resolves: rhbz#1780554
  - Add patch: 1781-pkg-terminal-Fix-exit-status.patch


author: mahailiang <mahailiang@uniontech.com> - 1.5.0-2.01
changelog:
  - fix check error(sync https://github.com/go-delve/delve/commit/1f552c5a4c97df196cea28862890e2d398811602)
  - define debug_package nil


author: Marian Csontos <mcsontos@redhat.com> - 2.03.14-5
changelog:
  - Exit with error when --devicesfile used does not exist.
  - Additional important fixes from upstream up to commit 3b0f9ce.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-31
changelog:
  - Add 0114-multipathd-ignore-duplicated-multipathd-command-keys.patch
    * Fixes bz #2133996
  - Add 0115-multipath-tools-use-run-instead-of-dev-shm.patch
    * Fixes bz #2133990
  - Resolves: bz #2133990, #2133996


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-32
changelog:
  - Add 0116-kpartx-hold-device-open-until-partitions-have-been-c.patch
    * Fixes bz #2128885
  - Add 0117-libmultipath-cleanup-remove_feature.patch
  - Add 0118-libmultipath-cleanup-add_feature.patch
  - Add 0119-multipath-tests-tests-for-adding-and-removing-featur.patch
  - Add 0120-libmultipath-fix-queue_mode-feature-handling.patch
  - Add 0121-multipath-tests-tests-for-reconcile_features_with_qu.patch
  - Add 0122-libmultipath-prepare-proto_id-for-use-by-non-scsi-de.patch
  - Add 0123-libmultipath-get-nvme-path-transport-protocol.patch
  - Add 0124-libmultipath-enforce-queue_mode-bio-for-nmve-tcp-pat.patch
    * Fixes bz #2022359
  - Resolves: bz #2022359, #2128885


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-33
changelog:
  - Add 0125-multipath-add-historical-service-time-to-the-man-pag.patch
    * Fixes bz #2141996
  - Modify tests/multipath_conf_syntax/main.sh
    * fix unrelated test error
  - Resolves: bz #2141996


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-34
changelog:
  - Add 0126-libmultipath-copy-mpp-hwe-from-pp-hwe.patch
    * Fixes bz #2126714
  - Cleanup multiple CI tests
  - Resolves: bz #2126714


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-35
changelog:
  - Add 0127-libmultipath-don-t-leak-memory-on-invalid-strings.patch
  - Add 0128-libmutipath-validate-the-argument-count-of-config-st.patch
  - Resolves: bz #2155560


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-36
changelog:
  - Add 0129-libmultipath-select-resize-action-even-if-reload-is-.patch
  - Add 0130-libmultipath-cleanup-ACT_CREATE-code-in-select_actio.patch
  - Add 0131-libmultipath-keep-renames-from-stopping-other-multip.patch
  - Resolves: bz #2166468


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-37
changelog:
  - Fix bugzilla linked to the changes (was previously linked to
    the wrong bug, 2162537)
  - Resolves: bz #2166468


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.2-8
changelog:
  - Type:cves
  - ID:CVE-2021-25214, CVE-2021-25215, CVE-2021-25219, CVE-2021-25220
  - SUG:restart
  - DESC: Fix CVE-2021-25214 CVE-2021-25215 CVE-2021-25219 CVE-2021-25220


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.2-9
changelog:
  - Type:cves
  - ID:CVE-2022-2928, CVE-2022-2929
  - SUG:restart
  - DESC: Fix CVE-2022-2928 and CVE-2022-2929


author: zhangxingrong <zhangxingrong@uniontech.com> - 12:4.4.2-9.01
changelog:
  - cve: CVE-2022-2795 CVE-2022-38177 CVE-2020-8623 CVE-2020-8622  CVE-2020-8625 
  - cve: CVE-2020-8624 CVE-2022-38178  CVE-2020-8619 CVE-2020-8617 CVE-2020-8616


author: Nicola Sella <nsella@redhat.com> - 4.7.0-15
changelog:
  - Ignore processing variable files with unsupported encoding (RhBug:2141215)
  - Better explain traceback of rpm.error with dnf


author: Lukas Hrazky <lhrazky@redhat.com> - 4.0.21-12
changelog:
  - [repomanage] Use modules only from repo they are handling
  - [repomanage] Add new option --oldonly
  - Skip all non rpm tsi for transaction_action plugins


author: Lukas Hrazky <lhrazky@redhat.com> - 4.0.21-13
changelog:
  - [copr] Fix 'dnf copr enable' on Fedora 35
  - [copr] Disable dnf playground command
  - [copr] Fix baseurl for centos stream chroot
  - [copr] Silence a deprecation warning in plugins/copr.py
  - [copr] Shorter verification that the project exists
  - [copr] Better error message for dnf copr enable
  - [copr] allow specifying protocol as part of --hub


author: renmingshuai <renmingshuai@huawei.com> - 2.82-14
changelog:
  - Type:bugfix
  - Id:
  - SUG:NA
  - DESC:Reduce code duplication, reuse existing functions
         Fix memory leak when using --dhcp-optsfile with DHCPv6 options


author: zhangbowei<zhangbowei@kylinos.cn> - 1.0.0.rc3-219
changelog:
  - Type: bugfix
  - CVE:  NA
  - SUG:  NA
  - DESC: fix the bug when runc failed to update fat container memory value


author: uoser <uoser@uniontech.com> - 4.1-12.up1
changelog:
  - Type:bugfix
  - ID:PMS47511
  - SUG:NA
  - DESC:sync upstream patch from profession edition
    Add Patches:0001-Append-git-to-version-number.patch
                0002-Turn-label-in-struct-DOS_FS-into-char-array-from-pointer.patch
                0003-Fix-printf-format-specifier-for-printing-label.patch
                0004-Add-asprintf-wrapper.patch
                0005-Add-get_line-function-to-read-user-input-in-canonica.patch
                0006-Add-get_choice-function.patch
                0007-Overhaul-interactive-prompts.patch
                0008-Remove-get_key.patch
                0009-fsck-Don-t-ask-whether-to-perform-changes-in-immediate-write-mode.patch
                0010-fsck-Make-prompts-asking-for-writing-changes-at-end-more-verbose-and-clear.patch
                0011-fsck-Add-quit-choice-to-interactive-prompts.patch
                0012-mkfs.fat.c-Change-misleading-comment-about-FAT32-selection.patch
                0013-fsck-Clean-up-usage-message-a-little.patch
                0014-fsck-Pass-the-exit-value-to-use-to-usage.patch
                0015-fsck-Switch-to-getopt_long-option-parser-and-add-help-option.patch
                0016-fsck.fat.h-Remove-extern-declarations-of-interactive-and-write_immed.patch
                0017-mkfs-Link-with-common.c-and-use-its-die-implementation.patch
                0018-Move-all-three-check_atari-and-atari_format-definiti.patch
                0019-Disable-legacy-check-for-68k-Atari-by-default.patch
                0020-manpages-configure.ac-Correct-description-of-Atari-format-selection.patch
                0021-manpages-Rework-the-intro-of-the-mkfs-man-page.patch
                0022-mkfs-fsck-Add-variant-TYPE-command-line-option.patch
                0023-mkfs-List-all-options-with-short-descriptions-in-help-message.patch
                0024-add-missing-n.patch
                0025-Fix-signed-integer-overflow-in-FSTART.patch
                0026-Warn-that-r-is-useless-with-FAT32-filesystems.patch
                0027-fatlabel-Change-option-parsing-to-getopt_long.patch
                0028-fatlabel-Expand-help-message-by-description-and-options.patch
                0029-Read-volume-ID-in-read_boot.patch
                0030-Make-fs_open-path-argument-const-char.patch
                0031-Add-write_serial-function.patch
                0032-fatlabel-Implement-volume-ID-mode.patch
                0033-fatlabel-Fix-parsing-volume-ID.patch
                0034-mkfs-Handle-n-correctly.patch
                0035-fatlabel-Fix-erasing-label.patch
                0036-Avoid-returning-deleted-directory-entries-as-labels.patch
                0037-Terminate-volume-label-search-at-end-of-directory.patch
                0038-Remove-leftover-handling-of-split-directory-entry-name.patch
                0039-Handle-0xe5-as-first-character-of-volume-label.patch
                0040-fatlabel-Refuse-empty-strings-as-labels.patch
                0041-Add-remove_label-function.patch
                0042-Move-generation-of-serial-number-into-new-function-generate_volume_id.patch
                0043-fatlabel-Don-t-access-element-of-argv-array-that-may-not-exist.patch
                0044-fatlabel-Add-new-r-reset-option.patch
                0045-Harmonize-unknown-command-line-option-handling.patch
                0046-manpages-Make-SEE-ALSO-sections-conform-to-conventios.patch
                0047-manpages-Clarify-rules-for-volume-labels-as-implemented.patch
                0048-manpages-Remove-formatting-from-NAME-sections-where-it-doesnot-belong.patch
                0049-src-check.c-Fix-up-mtools-created-bad-dir-entries.patch
                0050-mkfs-Check-volume-label-given-with-n-is-no-longer-than-11-characters.patch
                0051-fatlabel-Show-only-label-stored-in-root-directory.patch
                0052-fatlabel-Print-label-without-padding-spaces.patch
                0053-fatlabel-Clear-ATTR_VOLUME-from-directory-entry-when-removing-label.patch
                0054-fatlabel-Optimize-size-of-the-binary.patch
                0055-manpages-Add-section-COMPATIBILITY-and-BUGS-to-fatlabel.patch
                0056-fsck.fat-Handle-0xe5-as-first-character-of-directory-entry.patch
                0057-mkfs.fat-Correctly-process-0xe5-as-first-character-of-directory-entry.patch
    Del Patches:0000-Fix-signed-integer-overflow-in-FSTART.patch
                0001-Avoid-returning-deleted-directory-entries-as-labels.patch
                0002-src-check.c-Fix-up-mtools-created-bad-dir-entries.patch
                0009-Turn-label-in-struct-DOS_FS-into-char-array-from-poi.patch
    Rename Patches:0003-Remove-long-file-name-when-changing-short-file-name.patch -->0058-Remove-long-file-name-when-changing-short-file-name.patch
                   0004-Fix-gcc-sprintf-length-warnings.patch----------------------->0059-Fix-gcc-sprintf-length-warnings.patch
                   0005-fsck.fat-Fix-Year-2038-Bug.patch---------------------------->0060-fsck.fat-Fix-Year-2038-Bug.patch


author: konglidong <konglidong@uniontech.com> - 4.1-12.up2
changelog:
  - DESC: sync from openEuler-20.03-LTS-SP2
    Add patchs:0061-mkfs.fat-Fix-parsing-of-block-number.patch
               0062-device_info-Fix-parsing-partition-number
               0063-Fix-memory-leaks-in-read_fat-function


author: panxiaohe <panxiaohe@huawei.com> - 050-5
changelog:
  - [add] backport patches from upstream
    backport-fix-always-use-mkdir-p.patch
    backport-fix-dracut.sh-omission-is-an-addition-to-other-omiss.patch


author: Lukas Czerner <lczerner@redhat.com> 1.45.6-14.02
changelog:
  - Update e2fsprogs with upstream fixes and improvements (#2083621)
  - Fix out-of-bounds read/write via crafter filesystem (#2073548)


author: lifeifei<lifeifei@kylinos.cn> - 2.0.11-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix: if libvirt and ebtables are installed at the same time, ping the operation prompts "sendmsg: Operation not permitted".


author: Mat Booth <mat.booth@redhat.com> - 1:4.7.3a-1
changelog:
  - Update to Oxygen.3a release for java 10 support
  - Break circular dep on JDT by providing the java API stubs in this package


author: Mat Booth <mat.booth@redhat.com> - 1:4.15-3
changelog:
  - Don't build and ship the test framework. We are not shipping any actual tests
    anyway and this allows to drop the dependency on mockito and friends.


author: yexiao<yexiao7@huawei.com> - 202002-17
changelog:
  - fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727


author: yexiao<yexiao7@huawei.com> - 202002-19
changelog:
  - fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235


author: panxiaohe <panxh.life@foxmail.com> - 1.186-1.04
changelog:
  - Get instance correctly for eu-ar -N option
  - Use make macros
  - Use upstream patch for no stdin flag


author: Mark Wielaard <mjw@redhat.com> - 0.187-4
changelog:
  - Upgrade to elfutils 0.187
    - debuginfod: Support -C option for connection thread pooling.
    - debuginfod-client: Negative cache file are now zero sized instead
      of no-permission files.
    - addr2line: The -A, --absolute option, which shows file names
      includingthe full compilation directory is now the
      default.  To get theold behavior use the new option --relative.
    - readelf, elflint: Recognize FDO Packaging Metadata ELF notes
    - libdw, debuginfo-client: Load libcurl lazily only when files need
      to be fetched remotely. libcurl is now never loaded when
      DEBUGINFOD_URLS is unset. And whenDEBUGINFOD_URLS is set,
      libcurl is only loaded when the debuginfod_begin function is
      called.
  - Add elfutils-0.187-csh-profile.patch
  - Add elfutils-0.187-debuginfod-client-fd-leak.patch
  - Add elfutils-0.187-mhd_no_dual_stack.patch
  - Add elfutils-0.187-mhd_epoll.patch
  - Add an explicit versioned requires from elfutils-debuginfod-client
    on elfutils-libs and elfutils-libelf.
  - Remove brew testsuite workarounds


author: lixiaokeng <lixiaokeng@huawei.com> -2.9.9-6
changelog:
  - autosetup patch

  - Wed Jun 23 2021 yanglongkang <yanglongkang@huawei.com> - 2.9.9-5
  - fix changelog error

  - Sat May 22 2021 yanglongkang <yanglongkang@huawei.com> -3.9.2-4
  - Separate fuse3 out into its own package


author: Jindrich Novy <jnovy@redhat.com> - 0.7.2-4
changelog:
  - replace "fuse-overlayfs segfault" patch with improved one
    due to application to a different context
  - Resolves: #1805015


author: Jindrich Novy <jnovy@redhat.com> - 1.1.2-3
changelog:
  - fix "error bind mounting /dev from host into mount namespace"
    (the openat2 syscall is not yet supported by the RHEL8 kernel)
  - Resolves: #1867447


author: Weitao Zhou <zhouwt@linux.alibaba.com> - 1.18.1-7.02
changelog:
  - remove char *parseopt_program_doc and *parseopt_program_args in parseopt.c for compatible gcc10 build


author: chenyanpanHW <chenyanpan@huawei.com> - 1.0.5-6
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-Fix-segfault-on-some-weird-data-structures.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: Zoltan Fridrich <zfridric@redhat.com> - 3.6.16-6
changelog:
  - Fix x86_64 CPU feature detection when AVX is not available (#2131152)
  - Fix timing side-channel in TLS RSA key exchange (#2162598)


author: David Benoit <dbenoit@redhat.com> - 1.15.2-1
changelog:
  - Rebase to 1.15.2
  - Related: rhbz#1870531
  - Related: rhbz#1872622
  - Related: rhbz#1888673
  - Related: rhbz#1889437
  - Related: rhbz#1891095


author: David Benoit <dbenoit@redhat.com> - 1.15.2-1
changelog:
  - Rebase to 1.15.2
  - fix rhbz#1872622 in commit af9a1b1f6567a1c5273a134d395bfe7bb840b7f8
  - Resolves: rhbz#1872622
  - add net/http graceful shutdown patch
  - Resolves: rhbz#1888673
  - add x509warnCN patch
  - Resolves: rhbz#1889437


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.04-38
changelog:
  - Type:CVE
  - CVE:CVE-2024-1048
  - SUG:NA
  - DESC:grub-set-bootflag: Fix for CVE-2024-1048
         commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
         kern/acpi: Skip NULL entries in RSDT and XSDT
         util/grub-mount: Check file path sanity
         kern/acpi: Use xsdt_addr if present
         commands/acpi: Use xsdt_addrifpresent


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:1.3-22
changelog:
  - Elimitate race condition when injecting JAR manifest
  - Resolves: rhbz#1495234
  - Remove bogus hamcrest-text JAR


author: Mat Booth <mat.booth@redhat.com> - 4.5.6-2
changelog:
  - Add a patch to allow building with mockito 2
  - Don't package tests jars, the tests jars have the same OSGi metadata as the
    main jars, which can cause tycho to resolve the wrong one when building
    eclipse plugins


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-31
changelog:
  - Resolves: #1677590 - CVE-2018-17199 httpd:2.4/httpd: mod_session_cookie does
    not respect expiry time
  - Resolves: #1869075 - CVE-2020-11984 httpd:2.4/httpd: mod_proxy_uswgi buffer
    overflow
  - Resolves: #1872828 - httpd: typo in htpasswd, contained in httpd-tools package
  - Resolves: #1869576 - httpd : mod_proxy should allow to specify
    Proxy-Authorization in ProxyRemote directive
  - Resolves: #1875844 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
  - Resolves: #1891829 - mod_proxy_hcheck Doesn't perform checks when in
    a balancer


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-33
changelog:
  - Resolves: #1868608 - Intermittent Segfault in Apache httpd due to pool
    concurrency issues
  - Resolves: #1861380 - httpd/mod_proxy_http/mod_ssl aborted when sending
    a client cert to backend server
  - Resolves: #1680118 - unorderly connection close when client attempts
    renegotiation


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-36
changelog:
  - Resolves: #1896176 - [RFE] ProxyWebsocketIdleTimeout from httpd
    mod_proxy_wstunnel
  - Resolves: #1847585 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-37
changelog:
  - Resolves: #1883648 - [RFE] Update httpd directive SSLProxyMachineCertificateFile
    to be able to handle certs without matching private key


author: Lujun <wanglujun@uniontech.com> - 1.3.2-12.4.sm
changelog:
  - add ima-evm-utils-libs packages, resolve file conflicts.
  - sync "disable check for build" from panchenbo.


author: gaoxingwang<gaoxingwang@huawei.com> - 10.04-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: ifup-eth: add a new PERSISTENT_DHCLIENT_IPV6 option for IPv6 dhclient daemon


author: Thomas Woerner <twoerner@redhat.com> - 4.9.2-2
changelog:
  - Sync ipatests from upstream to RHEL packages for FreeIPA 4.9 branch
    Resolves: RHBZ#1932289
  - Fix krb5kdc is crashing intermittently on IPA server
    Resolves: RHBZ#1932784


author: Thomas Woerner <twoerner@redhat.com> - 4.9.2-3
changelog:
  - ipa-client-install displays false message
    'sudo binary does not seem to be present on this system'
    Resolves: RHBZ#1939371


author: lihaipeng <lihaipeng@openanolis.org> - 4.9.2-3.0.1
changelog:
  - Cherry-pick [47ddcda] [c15e47e] [3f12c7a]
  - Set IPAPLATFORM=rhel when build on anolis
  - Fix bug:0000050


author: herengui <herengui@uniontech.com> - 4.9.2-3.0.3.up1
changelog:
  - modify some required version number
  - use python3-rjsmin replace uglify-js
  - remove patch 1002-add-platform-judgment-info.patch, openEuler does not provide uglifyjs
  - __os_install_post will build python files installed in the /usr/share directory,
    including these __pycache__ folders to the rpm package.
  - remove version required for python3-pyasn1-modules
  - remove conflict with crypto-policies, do not consider AD-Support at this time.
  - Remove installation dependent version requirements of uos-logos-ipa


author: mahailiang <mahailiang@uniontech.com> - 4.9.2-3.0.3.up2
changelog:
  - spec: changelog BR krb5-kdb-devel-version krb5-kdb-version to openssl-devel
  - spec: delete __pycache__


author: Rob Crittenden <rcritten@redhat.com> - 0.4-1
changelog:
  - Rebase to upstream 0.4 (#1770346)
  - Create subpackage to split out core processing (#1771710)
  - Correct URL (#1773512)
  - Errors not translated to strings (#1752849)
  - JSON output not indented by default (#1729043)
  - Add dependencies to checks to avoid false-positives (#1727900)
  - Verify expected DNS records (#1695125)


author: Rob Crittenden <rcritten@redhat.com> - 0.4-5
changelog:
  - Remove the Obsoletes < 0.4 and add same-version Requires to each
    subpackage so that upgrades from 0.3 will work (#1852244)


author: Rob Crittenden <rcritten@redhat.com> - 0.4-6
changelog:
  - The core subpackage can be installed standalone, drop the Requires
    on the base package. (#1852244)
  - Add Conflicts < 0.4 to to core to allow downgrading with
    --allowerasing (#1852244)


author: Rob Crittenden <rcritten@redhat.com> - 0.7-1
changelog:
  - Update to upstream 0.7 (#1891850)
  - Include Directory Server healthchecks (#1824193)
  - Document that default output format is JSON (#1780328)
  - Fix return value on exit with --input-file (#1866558)
  - Fix examples in man page (#1809215)
  - Replace man page reference to output-format with output-type (#1780303)
  - Add dependencies on services to avoid false positives (#1780510)


author: haomimi <haomimi@uniontech.com> - 5.15.0-4.0.1.5
changelog:
  - build: sync from anolis
  - delete the rt_dsfield file due to three Aones
  - [kernelself-tests]net.fib_rule_tests.sh: TEST rule4 del by pref, rule6 del by pref FAIL


author: zhaoshuang <zhaoshuang@uniontech.com> - 5.15.0-4.0.1.8
changelog:
  - feat: ip-ipvlan-reintroduce-L3s-mode
  - refer to https://github.com/shemminger/iproute2/commit/b7c148803434b0eb8b9425d581f61c9d9dbc0309


author: Andrea Claudi <aclaudi@redhat.com> - 5.18.0-1.1
changelog:
  - macvlan: Add bclim parameter (Andrea Claudi) [2209687]
  - Update kernel headers (Andrea Claudi) [2209687]


author: yanglu <yanglu72@h-partners.com> - 20190709-9
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:fix ping6 binding to VRF and address
         Avoid binding to non-VRF
         Fix ARP protocol field for AX.25 and NETROM


author: Mat Booth <mat.booth@redhat.com> - 2.9.8-1
changelog:
  - Update to latest upstream release, fixes CVE-2018-14718 CVE-2018-147189
    CVE-2018-19360 CVE-2018-19361 CVE-2018-19362 CVE-2018-12022 CVE-2018-12023
    CVE-2018-14720 CVE-2018-14721


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 2.10.0-1
changelog:
  - Update to latest upstream release
  - Fixes: CVE-2019-14540
  - Fixes: CVE-2019-16335
  - Resolves: rhbz#1760274
  - Resolves: rhbz#1760278


author: wutao <wutao61@huawei.com> - 2.0.14-9
changelog:
  - fix folllowing CVE in this revision
    CVE-2018-18873
    CVE-2018-19541 
    CVE-2018-9055
    CVE-2018-9154 
    CVE-2018-19539 
    CVE-2018-20570
    CVE-2018-9252 
    CVE-2018-19540 
    CVE-2018-20622
    CVE-2018-19139


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.382-b05.9
changelog:
  - add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
  - add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
  - add Record-the-number-of-processes-to-errlog-file.patch.patch
  - add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
  - add The-OverWriteOldestGCLog-option-is-added-to-control.patch
  - add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
  - add add-make-Appcds-jsa-rw-region-deterministic.patch
  - add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
  - add add-8198423-Improve-metaspace-chunk-allocation.patch
  - add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
  - add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
  - add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
  - add add-8170831-ZipFile-implementation-no-longer-caches-.patch
  - add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
  - add add-8226530-test-case-fixed.patch
  - add add-8147940-Modify-testcase-this-test-does-not-assum.patch
  - add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
  - add add-Do-not-collect_class-when-DynamicCDS-dump.patch
  - add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
  - add add-Adapting-IOException-of-Zip-to-ZipException.patch
  - add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
  - add add-fix-windows-build-Dynamic-CDS-failure.patch
  - add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
  - add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> - 1:1.8.0.392-b08.0
changelog:
  - add 8308682-Enhance-AES-performance.patch
  - add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
  - add Add-metaspace-memory-allocation-failure-validation.patch
  - add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
  - del 8202952.patch
  - del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
  - modified Dynamic-CDS-Archive.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified kae-phase1.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - upgrade to jdk8u392-b08


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.392-b08.1
changelog:
  - add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
  - add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
  - add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
  - add 8314236-Overflow-in-Collections.rotate.patch
  - add 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
  - add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - add 8285516-clearPassword-should-be-called-in-a-finally-.patch
  - add 8148470-Metadata-print-routines-should-not-print-to-.patch
  - add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
  - add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
  - add 8312065-Socket.connect-does-not-timeout-when-profili.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified add-missing-test-case.patch


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.392-b08.2
changelog:
  - remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
  - remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
  - remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
  - remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
  - remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
  - remove add-8226530-test-case-fixed.patch
  - remove add-Adapting-IOException-of-Zip-to-ZipException.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.21.9-0
changelog:
  - update to 11.0.21+9(GA)
  - modified delete_expired_certificates.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
  - modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
  - modified 8214527-AArch64-ZGC-for-Aarch64.patch


author: Michael Simacek <msimacek@redhat.com> - 0:6.1.3-1
changelog:
  - Update to upstream version 6.1.3
  - Use new upstream location
  - Generate scripts with jpackage_script


author: wangkai <wangkai385@huawei.com> - 3.3.0-6
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-44228 is fixed,the version needs to be rebuild.


author: yaoxin <yaoxin30@huawei.com> - 3.3.0-7
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-45105 is fixed,the version needs to be rebuild.


author: yaoxin <yaoxin30@huawei.com> - 3.3.0-8
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-44832 is fixed,the version needs to be rebuild.


author: Michael Simacek <msimacek@redhat.com> - 2.0.6-12
changelog:
  - Repack tarball without bundled jars
  - The repacked jar contains slightly different source (force push by upstream?)
  - Correct license tag


author: Red Hat PKI Team <rhcs-maint@redhat.com> 4.7.2-1
changelog:
  - Rebase to upstream stable release JSS v4.7.2
  - Red Hat Bugzilla #1822246 - Fix SSLSocket NULL pointer deference after close


author: Red Hat PKI Team <rhcs-maint@redhat.com> 4.7.3-1
changelog:
  - Rebase to upstream stable release JSS v4.7.3
  - Red Hat Bugzilla #1873235 - Fix SSL_ERROR_INAPPROPRIATE_FALLBACK_ALERT in pki ca-user-cert-add


author: Red Hat PKI Team <rhcs-maint@redhat.com> 4.8.1-1
changelog:
  - Rebase to upstream JSS v4.8.1
  - Red Hat Bugilla #1908541 - jss broke SCEP - missing PasswordChallenge class
  - Red Hat Bugilla #1489256 - [RFE] jss should support RSA with OAEP padding


author: Severin Gehwolf <sgehwolf@redhat.com> - 5.2.0-3
changelog:
  - Add explicit requirement on javapackages-tools since junit5 script
    uses java-functions. See RHBZ#1600426.


author: Mat Booth <mat.booth@redhat.com> - 5.3.1-1
changelog:
  - Update to latest upstream release
  - Conditionally build the console modules
  - Remove stuff for discontinued gradle plugin


author: Mat Booth <mat.booth@redhat.com> - 5.4.0-1
changelog:
  - Update to latest upstream release
  - License switched to EPL only now the surefire provider was moved to the
    Apache Surefire project


author: caina <caina@uniontech.com> - 4.19.90-2312.3.0.0230.76
changelog:
  - euler: tun: avoid double free in tun_free_netdev
  - euler: net: fix kabi broken in struct netns_xfrm
  - euler: xfrm: fix a data-race in xfrm_gen_index()
  - euler: dccp/tcp: Call security_inet_conn_request() after setting IPv6 addresses.
  - euler: can: dev: can_restart(): fix race condition between controller restart and netif_carrier_on()
  - euler: can: dev: can_restart(): don't crash kernel if carrier is OK
  - euler: can: dev: move driver related infrastructure into separate subdir
  - euler: ipv6: avoid atomic fragment on GSO packets
  - euler: tcp_metrics: do not create an entry from tcp_init_metrics()
  - euler: tcp_metrics: properly set tp->snd_ssthresh in tcp_init_metrics()
  - euler: tcp_metrics: add missing barriers on delete
  - euler: tcp: tsq: relax tcp_small_queue_check() when rtx queue contains a single skb
  - euler: tcp: fix excessive TLP and RACK timeouts from HZ rounding
  - euler: genirq/matrix: Exclude managed interrupts in irq_matrix_allocated()
  - euler: ACPI: sysfs: Fix create_pnp_modalias() and create_of_modalias()
  - euler: ACPI: irq: Fix incorrect return value in acpi_register_gsi()
  - euler: vfs: fix readahead(2) on block devices
  - euler: overlayfs: set ctime when setting mtime and atime
  - euler: quota: Fix slow quotaoff
  - euler: mcb: remove is_added flag from mcb_device struct
  - euler: sched,idle,rcu: Push rcu_idle deeper into the idle path
  - euler: cgroup: Remove duplicates in cgroup v1 tasks file
  - euler: x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs
  - euler: workqueue: Override implicit ordered attribute in workqueue_apply_unbound_cpumask()
  - euler: icmp: Fix a data-race around sysctl_icmp_errors_use_inbound_ifaddr.
  - euler: net: hns: update hns version to 23.12.1
  - euler: net: hns: fix fake link up on xge port
  - euler: regmap: fix NULL deref on lookup
  - euler: KVM: arm64: limit PMU version to PMUv3 for ARMv8.1
  - euler: arm64: cpufeature: Extract capped perfmon fields
  - euler: mm: don't let userspace spam allocations warnings
  - euler: nvme: retain split access workaround for capability reads
  - euler: sched: smart grid: check is active in affinity timer
  - euler: ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
  - euler: x86/mce/amd: Publish the bank pointer only after setup has succeeded
  - euler: x86/mce/inject: Fix a wrong assignment of i_mce.status
  - euler: cpu/hotplug: fix kabi breakage in enum cpuhp_state
  - euler: hrtimers: Push pending hrtimers away from outgoing CPU earlier
  - euler: crypto: fix kabi broken in struct crypto_instance
  - euler: crypto: api - Use work queue in crypto_destroy_instance
  - euler: kconfig: Add script to check & update openeuler_defconfig
  - euler: kbuild: ensure full rebuild when the compiler is updated
  - euler: mm/migrate.c: fix potential indeterminate pte entry in migrate_vma_insert_page()
  - euler: genirq: Take the proposed affinity at face value if force==true
  - euler: optee: add phytium optee driver
  - euler: optee: model OP-TEE as a platform device/driver
  - euler: {CVE-2023-39197} netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
  - euler: irqchip/gic-v3: Always trust the managed affinity provided by the core code
  - euler: genirq: Always limit the affinity to online CPUs
  - euler: genirq/msi: Shutdown managed interrupts with unsatifiable affinities
  - euler: Revert "tcp: fix delayed ACKs for MSS boundary condition"
  - euler: hwrng: Add support for Phytium SoC RNG
  - euler: jpeg: Add a Phytium JPEG Engine driver
  - euler: mm, memory_hotplug: update pcp lists everytime onlining a memory block
  - euler: drivers/gmjstcm: import CVE-2011-1160 CVE-2011-1162 fixes to tcm.c
  - euler: rtc: add phytium rtc driver document
  - euler: gpio: add phytium gpio driver
  - euler: mailbox:add phytium mailbox driver document
  - euler: {CVE-2023-29198} drm/qxl: fix UAF on handle creation
  - euler: mailbox: add phytium mailbox driver
  - euler: mmc: add phytium mmc driver DT binding docs
  - euler: mmc: add support for Phytium MMC
  - euler: tty: tty_jobctrl: fix pid memleak in disassociate_ctty()
  - euler: Revert "tty: fix pid memleak in disassociate_ctty()"
  - euler: {CVE-2022-45884} media: dvb-core: Fix use-after-free due to race at dvb_register_device()
  - euler: {CVE-2022-45884} media: media/dvb: Use kmemdup rather than duplicating its implementation
  - euler: {CVE-2022-45884} media: dvbdev: Fix memleak in dvb_register_device
  - euler: drivers/gmjstcm: fix a dev_err() call in spi tcm device probe
  - euler: sched/fair: Refill bandwidth before scaling
  - euler: signal: Properly set TRACE_SIGNAL_LOSE_INFO in __send_signal
  - euler: SCSI: SSSRAID: Support 3SNIC 3S5XX serial RAID/HBA controllers
  - euler: cpufreq: make interface functions and lock holding state clear
  - euler: cpufreq: Abort show()/store() for half-initialized policies
  - euler: spi: add phytium spi driver DT binding docs
  - euler: spi: add phytium spi support
  - euler: qspi: add phytium qspi driver DT binding docs
  - uos: bugfix: fixup marvell sata controller init fail on some machine
  - uos: dup: pick file after uld_close_fd()
  - mainline: selftests/bpf: skip nmi test when perf hw events are disabled [B219507]
  - uos: selftest/bpf: change llvm flag -mpcu=probe to -mcpu=v2 [B219057]
  - uos: selftest/bpf: modify selftest code of get_stack_raw_tp [B219507]
  - mainline: libbpf: Fix BTF-defined map's __type macro handling of arrays [B219507]
  - uos: selftest/bpf: onvert get_stack_raw_tp.c using BTF-defined maps to new syntax [B219057]
  - mainline: selftests/bpf: Define SYS_NANOSLEEP_KPROBE_NAME for aarch64 [B219057]
  - uos: add .errstr_unpriv and .result_unpriv for testcase in test_verifier [T305117]
  - uos: fix kabi broken [T303433]
  - anolis: alinux: mm: fix an global-out-of-bounds in __do_proc_doulongvec_minmax [T303433]
  - anolis: alinux: mm: add an interface to adjust the penalty time dynamically [T303433]
  - anolis: alinux: mm: support swap.high for cgroup v1 [T303433]
  - anolis: mm/memcg: automatically penalize tasks with high swap use [T303433]
  - anolis: mm/memcg: move cgroup high memory limit setting into struct page_counter [T303433]
  - anolis: mm/memcg: move penalty delay clamping out of calculate_high_delay() [T303433]
  - anolis: mm/memcg: prepare for swap over-high accounting and penalty calculation [T303433]
  - anolis: mm, memcg: prevent memory.swap.max load tearing [T303433]
  - anolis: mm, memcg: prevent memory.min load/store tearing [T303433]
  - anolis: mm, memcg: prevent memory.low load/store tearing [T303433]
  - anolis: mm, memcg: prevent memory.max load tearing [T303433]
  - anolis: mm, memcg: prevent memory.high load/store tearing [T303433]
  - anolis: mm, memcg: do not high throttle allocators based on wraparound [T303433]
  - anolis: mm, memcg: bypass high reclaim iteration for cgroup hierarchy root [T303433]
  - anolis: mm, memcg: throttle allocators based on ancestral memory.high [T303433]
  - anolis: mm, memcg: fix corruption on 64-bit divisor in memory.high throttling [T303433]
  - anolis: alinux: mm: completely disable swapout with negative swappiness [T303433]
  - anolis: alinux: mm, memcg: optimize division operation with memsli counters [T303433]
  - anolis: alinux: mm, memcg: rework memsli interfaces [T303433]
  - anolis: alinux: mm, memcg: add kconfig MEMSLI [T303433]
  - anolis: alinux: mm, memcg: add memsli procfs switch interface [T303433]
  - anolis: alinux: mm, memcg: gather memsli/exstat from all possible cpus [T303433]
  - anolis: alinux: mm, memcg: account throttle over memory.high for memcg direct reclaim [T303433]
  - anolis: alinux: mm, memcg: record latency of swapout and swapin in every memcg [T303433]
  - anolis: alinux: mm, memcg: account reclaim_high for memcg direct reclaim [T303433]
  - anolis: alinux: mm, memcg: adjust the latency probe point for memcg direct reclaim [T303433]
  - anolis: alinux: mm, memcg: rework memory latency histogram interfaces [T303433]
  - anolis: alinux: mm, memcg: record latency of direct compact in every memcg [T303433]
  - anolis: alinux: mm, memcg: record latency of direct reclaim in every memcg [T303433]
  - anolis: alinux: mm, memcg: optimize division operation with memcg counters [T303433]
  - anolis: alinux: mm, memcg: export workingset counters on memcg v1 [T303433]
  - anolis: alinux: mm, memcg: abort priority oom if with oom victim [T303433]
  - anolis: alinux: mm, memcg: account number of processes in the css [T303433]
  - anolis: alinux: mm, memcg: fix soft lockup in priority oom [T303433]
  - anolis: alinux: mm, memcg: record latency of memcg wmark reclaim [T303433]
  - uos: fix kabi broken [T303433]
  - anolis: alinux: mm: oom_kill: show killed task's cgroup info in global oom [T303433]
  - anolis: alinux: mm: memcontrol: enable oom.group on cgroup-v1 [T303433]
  - anolis: alinux: doc: alibaba: Add priority oom descriptions [T303433]
  - anolis: alinux: mm: memcontrol: introduce memcg priority oom [T303433]
  - anolis: alinux: kernel: cgroup: account number of tasks in the css and its descendants [T303433]
  - anolis: alinux: doc: Add Documentation/alibaba/interfaces.rst [T303433]
  - anolis: alinux: memcg: Account throttled time due to memory.wmark_min_adj [T303433]
  - anolis: alinux: memcg: Introduce memory.wmark_min_adj [T303433]
  - anolis: alinux: memcg: Provide users the ability to reap zombie memcgs [T303433]
  - anolis: alinux: mm,memcg: export memory.{min,low} to cgroup v1 [T303433]
  - anolis: alinux: mm,memcg: export memory.{events,events.local} to v1 [T303433]
  - anolis: mm: don't raise MEMCG_OOM event due to failed high-order allocation [T303433]
  - anolis: mm, memcg: introduce memory.events.local [T303433]
  - anolis: mm, memcg: consider subtrees in memory.events [T303433]
  - anolis: alinux: mm,memcg: export memory.high to v1 [T303433]
  - anolis: alinux: mm: memcontrol: make distance between wmark_low and wmark_high configurable [T303433]
  - anolis: alinux: mm: vmscan: make memcg kswapd set memcg state to dirty or writeback [T303433]
  - anolis: alinux: mm: memcontrol: treat memcg wmark reclaim work as kswapd [T303433]
  - anolis: alinux: mm: memcontrol: add background reclaim support for cgroupv2 [T303433]
  - anolis: alinux: mm: memcontrol: support background async page reclaim [T303433]
  - anolis: alinux: mm, memcg: fix possible soft lockup in try_charge [T303433]
  - anolis: mm, memcg: throttle allocators when failing reclaim over memory.high [T303433]
  - uos: fix kabi broken [T303433]
  - anolis: kernel/sched/psi.c: expose pressure metrics on root cgroup [T303433]
  - anolis: psi: introduce psi monitor [T303433]
  - anolis: kernel: cgroup: add poll file operation [T303433]
  - anolis: fs: kernfs: add poll file operation [T303433]
  - anolis: include/: refactor headers to allow kthread.h inclusion in psi_types.h [T303433]
  - anolis: psi: track changed states [T303433]
  - anolis: psi: split update_stats into parts [T303433]
  - anolis: psi: rename psi fields in preparation for psi trigger addition [T303433]
  - anolis: psi: make psi_enable static [T303433]
  - anolis: psi: introduce state_mask to represent stalled psi states [T303433]
  - anolis: psi: clarify the units used in pressure files [T303433]
  - anolis: psi: avoid divide-by-zero crash inside virtual machines [T303433]
  - anolis: psi: clarify the Kconfig text for the default-disable option [T303433]
  - anolis: psi: fix aggregation idle shut-off [T303433]
  - anolis: psi: fix reference to kernel commandline enable [T303433]
  - anolis: psi: make disabling/enabling easier for vendor kernels [T303433]
  - anolis: kernel/sched/psi.c: simplify cgroup_move_task() [T303433]
  - anolis: psi: cgroup support [T303433]
  - anolis: psi: pressure stall information for CPU, memory, and IO [T303433]
  - anolis: delayacct: track delays from thrashing cache pages [T303433]
  - anolis: mm: workingset: tell cache transitions from workingset thrashing [T303433]
  - uos: fix kabi broken [T303433]
  - anolis: alinux: sched/fair: Fix CPU burst stat [T303433]
  - anolis: alinux: sched/fair: Introduce init buffer into CFS burst [T303433]
  - anolis: alinux: sched: Restore upper limit of cfs_b->buffer to max_cfs_runtime [T303433]
  - anolis: alinux: sched: Add document for burstable CFS bandwidth control [T303433]
  - anolis: alinux: sched: Add cfs bandwidth burst statistics [T303433]
  - anolis: alinux: sched: Make CFS bandwidth controller burstable [T303433]
  - anolis: alinux: sched: Introduce primitives for CFS bandwidth burst [T303433]
  - anolis: alinux: sched: Defend cfs and rt bandwidth against overflow [T303433]
  - uos: lms feature optimized
  - uos: sched/idle: optimize uos fixed poll with dynamic method  [T305741]
  - uos: Delete the old interface compatible with eth_get_headlen to solve compile error [T305117]
  - uos: fix the function eth_get_headlen kabi error [T305117]
  - uos: net: drivers: kcompat: Delete the old interface compatible with eth_get_headlen [T305117]
  - mainline: selftests/bpf: properly return error from bpf_flow_load [T305117]
  - mainline: selftests: bpf: Move bpf_printk to bpf_helpers.h [B219507]
  - mainline: selftests/bpf: add flow dissector bpf_skb_load_bytes helper test [T305117]
  - mainline: net: pass net_device argument to the eth_get_headlen [T305117]
  - mainline: bpf: increase complexity limit and maximum program size [B219507]
  - uos: core_reloc test remove field existence check test case to sovle test fail [B219507]
  - mainline: selftests/bpf: Ensure core_reloc_kernel is reading test_progs's data only [B219507]
  - mainline: bpf: bpf_probe_read_kernel_str() has to return amount of data read on success [B219507]
  - mainline: selftests/bpf: Make CO-RE reloc test impartial to test_progs flavor [B219507]
  - mainline: selftests/bpf: Add BPF_CORE_READ and BPF_CORE_READ_STR_INTO macro tests [B219507]
  - mainline: selftests/bpf: Adjust CO-RE reloc tests for new bpf_core_read() macro [B219507]
  - uos: enable IPV6_SEG6_LWTUNNEL to solve bpf test problem [B219507]
  - mainline: selftests/bpf: adjust strobemeta loop to satisfy latest clang [B219507]


author: caina <caina@uniontech.com> - 4.19.90-2312.6.0.0232.77
changelog:
  - uos: fix build error for symbol NOKPROBE_SYMBOL
  - uos: Revert "uos: fix short cycle process load balance"
  - euler: {CVE-2023-6564} tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
  - euler: {CVE-2023-6564} tty: n_gsm: fix restart handling via CLD command
  - euler: {CVE-2023-6391} perf: Fix perf_event_validate_size() lockdep splat
  - euler: {CVE-2023-6391} perf: Fix perf_event_validate_size()
  - euler: i2c: hisi: Only handle the interrupt of the driver's transfer
  - euler: i2c: hisi: Only use the completion interrupt to finish the transfer
  - euler: i2c: hisi: Avoid redundant interrupts
  - euler: net: Remove acked SYN flag from packet in the transmit queue correctly
  - euler: Revert "hrtimers: Push pending hrtimers away from outgoing CPU earlier"
  - euler: Revert "cpu/hotplug: fix kabi breakage in enum cpuhp_state"
  - euler: SCSI: hisi_raid: support SPxxx serial RAID/HBA controllers
  - uos: SCSI: SSSRAID: update 3SNIC 3S5XX serial RAID/HBA to 1.0.6.2
  - uos: fix the error of sssdk.ko and sssnic.ko[B234253]
  - uos: fix short cycle process load balance
  - mainline: selftests/bpf: Fix "dubious pointer arithmetic" test [T305117]
  - mainline: selftests/bpf: Fix test_align verifier log patterns [T305117]
  - uos: fix the testcase of test_align "pointer variable subtraction" fail [T305117]
  - mainline: selftests/bpf: Fix "dubious pointer arithmetic" test [T305117]
  - uos: fix error by revert "x86/cpufeatures: Add CPUID_8000_0C86_EDX CPUID leaf" [305235]
  - uos: hygon: Commit Message: Provides hygon crypto technology ccp device driver. [305235]
  - uos: hygon: newfeature: crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp. [305235]
  - uos: hygon: newfeature: crypto: ccp: Process multiple VQ commands once for SM3 ccp. [305235]
  - uos: hygon: bugfix: crypto: The output data length is not fixed for SM2 encrypt and decrypt algorithm. [305235]
  - uos: hygon: newfeature: crypto: CCP: Support SM4 high security module for hygon ccp. [305235]
  - uos: hygon: newfeature: crypto: CCP: Support SM4 algorithm for hygon ccp. [305235]
  - uos: hygon: newfeature: crypto: CCP: Support SM3 algorithm for hygon ccp. [305235]
  - uos: hygon: newfeature: crypto: CCP: Support SM2 algorithm for hygon ccp. [305235]
  - uos: hygon: opensource: crypto: AF_ALG -- add asymmetric cipher [305235]
  - uos: hygon: [newfeature]HYGON:: KVM: SVM: CSV: Add KVM_CSV_RECEIVE_ENCRYPT_CONTEXT command [305235]
  - uos: hygon: [newfeature]HYGON:: KVM: SVM: CSV: Add KVM_CSV_RECEIVE_ENCRYPT_DATA command [305235]
  - uos: hygon: [newfeature]HYGON:: KVM: SVM: CSV: Add KVM_CSV_SEND_ENCRYPT_CONTEXT command [305235]
  - uos: hygon: [newfeature]HYGON:: KVM: SVM: CSV: Add KVM_CSV_SEND_ENCRYPT_DATA command [305235]
  - uos: hygon: [newfeature]HYGON:: crypto: ccp: Define CSV migration command id [305235]
  - uos: hygon: [bugfix]HYGON:: KVM: SVM: CSV: Handle interrupts before nested page fault [305235]
  - uos: hygon: [newfeature]HYGON:: Documentation/x86: Add CSV3 CMA explanation [305235]
  - uos: hygon: [bugfix]HYGON:: x86/mm: Handle NULL parameter of csv_mem_percentage/csv_mem_size [305235]
  - uos: hygon: [bugfix]HYGON:: KVM: SVM: CSV: Init local variable nodemask [305235]
  - uos: hygon: [optimization]HYGON:: x86/mm: CSV allows CMA allocation concurrently [305235]
  - uos: hygon: [newfeature]HYGON:: mm/cma: Add API to enable concurrent allocation from the CMA [305235]
  - uos: hygon: [optimization]HYGON:: arch/x86/mm/csv: Reduce CSV CMA name length [305235]
  - uos: hygon: [bugfix]HYGON:: arch/x86/mm/csv: fix bug that cma array count maybe not correct [305235]
  - uos: hygon: [bugfix]HYGON:: x86/mm/csv: Try to allocate cma memory from current node firstly [305235]
  - uos: hygon: [opensource]mm, page_alloc: avoid expensive reclaim when compaction may not succeed [305235]
  - uos: hygon: [opensource]mm, page_alloc: move draining pcplists to page isolation users [305235]
  - uos: hygon: [bugfix]HYGON:: mm: release hugetlb pages to buddy allocator after migrate them [305235]
  - uos: hygon: [opensource]mm: make alloc_contig_range handle in-use hugetlb pages [305235]
  - uos: hygon: [opensource]mm: make alloc_contig_range handle free hugetlb pages [305235]
  - uos: hygon: [opensource]mm,compaction: let isolate_migratepages_{range,block} return error codes [305235]
  - uos: hygon: [bugfix]HYGON:: kvm: csv: We firstly consider CSV CMAS which is easy to allocate memory from [305235]
  - uos: hygon: [opensource]KVM: SVM: Don't apply SEV+SMAP workaround on code fetch or PT access [305235]
  - uos: hygon: [opensource]KVM: SVM: Inject #UD on attempted emulation for SEV guest w/o insn buffer [305235]
  - uos: hygon: [opensource]KVM: SVM: Don't kill SEV guest if SMAP erratum triggers in usermode [305235]
  - uos: hygon: [opensource]Fix unsynchronized access to sev members through svm_register_enc_region [305235]
  - uos: hygon: [opensource]KVM: SVM: Fix detection of AMD Errata 1096 [305235]
  - uos: hygon: [opensource]KVM: SVM: Workaround errata#1096 (insn_len maybe zero on SMAP violation) [305235]
  - uos: hygon: [opensource]crypto: ccp - Clear PSP interrupt status register before calling handler [305235]
  - uos: hygon: [opensource]anolis: x86/setup: Preserve _ENC flag when initrd is being relocated [305235]
  - uos: hygon: [opensource]anolis: mm/early_ioremap.c: Always build early_memremap_prot() in x86 [305235]
  - uos: hygon: [bugfix]x86/csv2: Fix VC/VC2 stack cea mapping [305235]
  - uos: hygon: [opensource]x86/sev: Make enc_dec_hypercall() accept a size instead of npages [305235]
  - uos: hygon: [opensource]KVM: SVM: Don't defer NMI unblocking until next exit for SEV-ES guests [305235]
  - uos: hygon: [opensource]KVM: x86: Move HF_NMI_MASK and HF_IRET_MASK into "struct vcpu_svm" [305235]
  - uos: hygon: [bugfix]Revert "x86/cpufeatures: Add CPUID_8000_0C86_EDX CPUID leaf" [305235]
  - uos: hygon: alinux: tcm: add Hygon TCM2 driver [305235]
  - uos: hygon: [opensource] mm: apply per-task gfp constraints in fast path [305235]
  - uos: hygon: [opensource] mm,page_alloc,cma: conditionally prefer cma pageblocks for movable allocations [305235]
  - uos: hygon: [opensource] mm,thp,compaction,cma: allow THP migration for CMA allocations [305235]
  - uos: hygon: [newfeature]x86/mm: Print CSV info into kernel log [305235]
  - uos: hygon: [newfeature]x86: Add support for changing the memory attribute for CSV [305235]
  - uos: hygon: [newfeature]x86: Update memory shared/private attribute in early boot for CSV [305235]
  - uos: hygon: [newfeature]x86/kernel: Set bss decrypted memory as shared in CSV guest [305235]
  - uos: hygon: [newfeature]x86/kernel: Add CSV early update(enc/dec)/reset memory helpers [305235]
  - uos: hygon: [newfeature]x86/boot/compressed/64: Add CSV update page attr(private/shared) [305235]
  - uos: hygon: [newfeature]x86/boot/compressed/64: Init CSV secure call pages [305235]
  - uos: hygon: [newfeature]x86/boot/compressed/64: Add CSV guest detection [305235]
  - uos: hygon: [newfeature]KVM: SVM: CSV: Manage CSV guest's nested page table [305235]
  - uos: hygon: [newfeature]KVM: SVM: CSV: Add KVM_CSV_LAUNCH_ENCRYPT_VMCB command [305235]
  - uos: hygon: [newfeature]KVM: SVM: CSV: Add KVM_CSV_LAUNCH_ENCRYPT_DATA command [305235]
  - uos: hygon: [newfeature]KVM: SVM: CSV: Add KVM_CSV_INIT command [305235]
  - uos: hygon: [newfeature]KVM: Define CSV key management command id [305235]
  - uos: hygon: [newfeature]crypto: ccp: Add SET_SMR/SET_SMCR commands for CSV [305235]
  - uos: hygon: [newfeature]x86/csv: Manage CSV guest's private memory by CMA [305235]
  - uos: hygon: [newfeature]crypto: ccp: Define CSV key management command id [305235]
  - uos: hygon: [newfeature]crypto: ccp: Add CCP/PSP PCI interface on Hygon hardware [305235]
  - uos: hygon: [bugfix]KVM: SVM: Pin SEV guest memory out of CMA area [305235]
  - uos: hygon: [opensource]mm: update get_user_pages_longterm to migrate pages allocated from CMA region [305235]
  - uos: hygon: [opensource]mm/cma: add PF flag to force non cma alloc [305235]
  - uos: hygon: [newfeature]x86/cpufeatures: Add CSV3 CPU feature [305235]
  - uos: hygon: [newfeature]x86/cpufeatures: Add CPUID_8000_0C86_EDX CPUID leaf [305235]
  - uos: hygon: [bugfix]vfio/pci: Disable VFIO pci reset for hygon DCU device. [305235]
  - uos: hygon: [bugfix]KVM: SVM: Flush caches before backup encrypted VMSA [305235]
  - uos: hygon: [opensource]swiotlb: Remove call to sme_active() [305235]
  - uos: hygon: [newfeature]KVM: SVM: Print Hygon CSV support info if support is detected [305235]
  - uos: hygon: [newfeature]x86/cpu: Show Hygon csv/csv2 features in /proc/cpuinfo [305235]
  - uos: hygon: [opensource]x86/xen: Fix noinstr fail in exc_xen_unknown_trap() [305235]
  - uos: hygon: [opensource]crypto: ccp - During shutdown, check SEV data pointer before using [305235]
  - uos: hygon: [opensource]KVM: VMX: Heed the 'msr' argument in msr_write_intercepted() [305235]
  - uos: hygon: [opensource]x86/unwind/fp: Fix FP unwinding in ret_from_fork [305235]
  - uos: hygon: [opensource]KVM: x86: Don't WARN if userspace mucks with RCX during string I/O exit [305235]
  - uos: hygon: [opensource]crypto: ccp - Fail the PSP initialization when writing psp data file failed [305235]
  - uos: hygon: [opensource]crypto: ccp - Fix the INIT_EX data file open failure [305235]
  - uos: hygon: [opensource]KVM: SVM: Add register operand to vmsave call in sev_es_vcpu_load [305235]
  - uos: hygon: [opensource]KVM: x86: Always set kvm_run->if_flag [305235]
  - uos: hygon: [bugfix]KVM: x86: Avoid warning when CSV2 guest invoke KVM_HC_MAP_GPA_RANGE hypercall [305235]
  - uos: hygon: [opensource]KVM: x86: Assume a 64-bit hypercall for guests with protected state [305235]
  - uos: hygon: [opensource]KVM: X86: Fix failure to boost kernel lock holder candidate in SEV-ES guests [305235]
  - uos: hygon: [opensource]x86/xen: avoid warning in Xen pv guest with CONFIG_AMD_MEM_ENCRYPT enabled [305235]
  - uos: hygon: [opensource]x86/debug: Fix stack recursion caused by wrongly ordered DR7 accesses [305235]
  - uos: hygon: [opensource]x86/asm: Replace __force_order with a memory clobber [305235]
  - uos: hygon: [opensource]crypto: ccp - Flush the SEV-ES TMR memory before giving it to firmware [305235]
  - uos: hygon: [opensource]crypto: ccp - shutdown SEV firmware on kexec [305235]
  - uos: hygon: [opensource]KVM: SVM: Fix potential overflow in SEV's send|receive_update_data() [305235]
  - uos: hygon: [opensource]KVM: SVM: Use kzalloc for sev ioctl interfaces to prevent kernel data leak [305235]
  - uos: hygon: [opensource]docs: virt/kvm: close inline string literal [305235]
  - uos: hygon: [opensource]dma-mapping: use dma_get_mask in dma_addressing_limited [305235]
  - uos: hygon: [opensource]dma-mapping: add a dma_addressing_limited helper [305235]
  - uos: hygon: [opensource]dma-direct: only limit the mapping size if swiotlb could be used [305235]
  - uos: hygon: [opensource]Documentation: DMA-API: fix a function name of max_mapping_size [305235]
  - uos: hygon: [opensource]swiotlb: using SIZE_MAX needs limits.h included [305235]
  - uos: hygon: [opensource]KVM: x86: Add compat handler for KVM_X86_SET_MSR_FILTER [305235]
  - uos: hygon: [opensource]KVM: nVMX: Handle dynamic MSR intercept toggling [305235]
  - uos: hygon: [opensource]doc/kvm: Fix wrong entry for KVM_CAP_X86_MSR_FILTER [305235]
  - uos: hygon: [opensource]KVM: x86: Protect userspace MSR filter with SRCU, and set atomically-ish [305235]
  - uos: hygon: [opensource]KVM: VMX: Forbid userspace MSR filters for x2APIC [305235]
  - uos: hygon: [opensource]KVM: VMX: Ignore userspace MSR filters for x2APIC [305235]
  - uos: hygon: [opensource]KVM: x86: Add proper ReST tables for userspace MSR exits/flags [305235]
  - uos: hygon: [opensource]KVM: x86: Exit to userspace if emulation prepared a completion callback [305235]
  - uos: hygon: [opensource]KVM: x86: Fix NULL dereference at kvm_msr_ignored_check() [305235]
  - uos: hygon: [opensource]KVM: SVM: fix error return code in svm_create_vcpu() [305235]
  - uos: hygon: bugfix: tpm: efi/x86: Add TPM related EFI tables to unencrypted mapping checks [305235]
  - uos: hygon: bugfix: tpm: Fix keyctl failure of loading an encrypted key [305235]
  - uos: hygon: newfeature: tpm: keyring service support creating encrypted key from user provided plaintext key [305235]
  - uos: hygon: [opensource]x86/entry/64: Move non entry code into .text section [305235]
  - uos: hygon: [opensource]x86/efi: Restore Firmware IDT before calling ExitBootServices() [305235]
  - uos: hygon: [opensource]KVM: SVM: Zero out the VMCB array used to track SEV ASID association [305235]
  - uos: hygon: [opensource]x86/head/64: Re-enable stack protection [305235]
  - uos: hygon: [opensource]x86/sev: Remove duplicated assignment to variable info [305235]
  - uos: hygon: [opensource]KVM: SVM: Fix off-by-one indexing when nullifying last used SEV VMCB [305235]
  - uos: hygon: [bugfix]KVM: SVM: Force flush caches before reboot CSV guest [305235]
  - uos: hygon: [newfeature]KVM: SVM: Rename *{deprotect,reprotect}_vcpu_state* to control_vcpu_{pre,post}_system_reset [305235]
  - uos: hygon: [bugfix]x86/csv2: Keep in atomic context when holding ghcb page if the #VC comes from user space [305235]
  - uos: hygon: [bugfix]KVM: SVM: Fix CSV2 info during module initialization [305235]
  - uos: hygon: [bugfix]KVM: SVM: Fix the available asid range that can be assigned to CSV2 guest [305235]
  - uos: hygon: [opensource]dma-direct: don't over-decrypt memory [305235]
  - uos: hygon: [opensource]x86/sev: Mark the code returning to user space as syscall gap [305235]
  - uos: hygon: [opensource]x86/sev: Annotate stack change in the #VC handler [305235]
  - uos: hygon: [opensource]KVM: SVM: Simplify and harden helper to flush SEV guest page(s) [305235]
  - uos: hygon: [opensource]KVM, SEV: Add KVM_EXIT_SHUTDOWN metadata for SEV-ES [305235]
  - uos: hygon: [opensource]x86/sev-es: Replace open-coded hlt-loop with sev_es_terminate() [305235]
  - uos: hygon: [opensource]KVM: SEV: Add cond_resched() to loop in sev_clflush_pages() [305235]
  - uos: hygon: [opensource]KVM: SVM: Exit to userspace on ENOMEM/EFAULT GHCB errors [305235]
  - uos: hygon: [opensource]KVM: SVM: WARN if KVM attempts emulation on #UD or #GP for SEV guests [305235]
  - uos: hygon: [opensource]KVM: x86: Pass emulation type to can_emulate_instruction() [305235]
  - uos: hygon: [opensource]KVM: SVM: Explicitly require DECODEASSISTS to enable SEV support [305235]
  - uos: hygon: [opensource]KVM: SVM: Don't intercept #GP for SEV guests [305235]
  - uos: hygon: [opensource]swiotlb: do not zero buffer in set_memory_decrypted() [305235]
  - uos: hygon: [opensource]crypto: ccp - Add SEV_INIT rc error logging on init [305235]
  - uos: hygon: [opensource]dma-direct: always leak memory that can't be re-encrypted [305235]
  - uos: hygon: [opensource]KVM: SVM: Do not terminate SEV-ES guests on GHCB validation failure [305235]
  - uos: hygon: [opensource]KVM: SEV: Fall back to vmalloc for SEV-ES scratch area if necessary [305235]
  - uos: hygon: [opensource]KVM: SEV: Return appropriate error codes if SEV-ES scratch setup fails [305235]
  - uos: hygon: [opensource]KVM: SEV: WARN if SEV-ES is marked active but SEV is not [305235]
  - uos: hygon: [opensource]docs: security: Add secrets/coco documentation [305235]
  - uos: hygon: [opensource]efi: Register efi_secret platform device if EFI secret area is declared [305235]
  - uos: hygon: [opensource]virt: Add efi_secret module to expose confidential computing secrets [305235]
  - uos: hygon: [opensource]efi: Save location of EFI confidential computing area [305235]
  - uos: hygon: [newfeature]KVM: SVM: Add support CSV2 guest reboot [305235]
  - uos: hygon: [opensource]x86/sev: Fix SEV-ES INS/OUTS instructions for word, dword, and qword [305235]
  - uos: hygon: [opensource]KVM: SEV-ES: fix another issue with string I/O VMGEXITs [305235]
  - uos: hygon: [opensource]x86/sev: Expose sev_es_ghcb_hv_call() for use by HyperV [305235]
  - uos: hygon: [opensource]KVM: SEV-ES: go over the sev_pio_data buffer in multiple passes if needed [305235]
  - uos: hygon: [opensource]KVM: SEV-ES: keep INS functions together [305235]
  - uos: hygon: [opensource]KVM: x86: remove unnecessary arguments from complete_emulator_pio_in [305235]
  - uos: hygon: [opensource]KVM: x86: split the two parts of emulator_pio_in [305235]
  - uos: hygon: [opensource]KVM: SEV-ES: clean up kvm_sev_es_ins/outs [305235]
  - uos: hygon: [opensource]KVM: x86: leave vcpu->arch.pio.count alone in emulator_pio_in_out [305235]
  - uos: hygon: [opensource]KVM: SEV-ES: rename guest_ins_data to sev_pio_data [305235]
  - uos: hygon: [opensource]x86/sev: Allow #VC exceptions on the VC2 stack [305235]
  - uos: hygon: [opensource]x86/sev: Fix stack type check in vc_switch_off_ist() [305235]
  - uos: hygon: [opensource]x86/sev: Include fpu/xcr.h [305235]
  - uos: hygon: [opensource]x86/sev: Carve out HV call's return value verification [305235]
  - uos: hygon: [opensource]KVM: SEV-ES: reduce ghcb_sa_len to 32 bits [305235]
  - uos: hygon: [opensource]KVM: SEV-ES: Set guest_state_protected after VMSA update [305235]
  - uos: hygon: [opensource]KVM: SEV-ES: fix length of string I/O [305235]
  - uos: hygon: [opensource]KVM: SEV: Acquire vcpu mutex when updating VMSA [305235]
  - uos: hygon: [opensource]x86/sev: Return an error on a returned non-zero SW_EXITINFO1[31:0] [305235]
  - uos: hygon: [opensource]x86/sev: Use "SEV: " prefix for messages from sev.c [305235]
  - uos: hygon: [opensource]x86/sev: Add defines for GHCB version 2 MSR protocol requests [305235]
  - uos: hygon: [opensource]x86/sev: Split up runtime #VC handler for correct state tracking [305235]
  - uos: hygon: [opensource]x86/sev: Make sure IRQs are disabled while GHCB is active [305235]
  - uos: hygon: [opensource]x86/sev: Propagate #GP if getting linear instruction address failed [305235]
  - uos: hygon: [opensource]x86/insn: Extend error reporting from insn_fetch_from_user[_inatomic]() [305235]
  - uos: hygon: [opensource]x86/insn-eval: Make 0 a valid RIP for insn_get_effective_ip() [305235]
  - uos: hygon: [opensource]x86/sev: Fix error message in runtime #VC handler [305235]
  - uos: hygon: [opensource]x86/sev: Check SME/SEV support in CPUID first [305235]
  - uos: hygon: [opensource]x86/sev-es: Use __put_user()/__get_user() for data accesses [305235]
  - uos: hygon: [opensource]x86/sev-es: Forward page-faults which happen during emulation [305235]
  - uos: hygon: [opensource]x86/sev-es: Don't return NULL from sev_es_get_ghcb() [305235]
  - uos: hygon: [opensource]x86/sev-es: Invalidate the GHCB after completing VMGEXIT [305235]
  - uos: hygon: [opensource]x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch [305235]
  - uos: hygon: [opensource]x86/sev: Move GHCB MSR protocol and NAE definitions in a common header [305235]
  - uos: hygon: [opensource]x86/sev-es: Rename sev-es.{ch} to sev.{ch} [305235]
  - uos: hygon: [opensource]KVM: SVM: Move GHCB unmapping to fix RCU warning [305235]
  - uos: hygon: [opensource]KVM: SVM: Skip SEV cache flush if no ASIDs have been used [305235]
  - uos: hygon: [opensource]KVM: SVM: Free sev_asid_bitmap during init if SEV setup fails [305235]
  - uos: hygon: [opensource]x86/sev: Drop redundant and potentially misleading 'sev_enabled' [305235]
  - uos: hygon: [opensource]KVM: SVM: Make sure GHCB is mapped before updating [305235]
  - uos: hygon: [opensource]KVM: SVM: Do not allow SEV/SEV-ES initialization after vCPUs are created [305235]
  - uos: hygon: [opensource]KVM: SVM: Do not set sev->es_active until KVM_SEV_ES_INIT completes [305235]
  - uos: hygon: [opensource]KVM: SVM: Use online_vcpus, not created_vcpus, to iterate over vCPUs [305235]
  - uos: hygon: [opensource]x86/sev-es: Optimize __sev_es_ist_enter() for better readability [305235]
  - uos: hygon: [opensource]x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate() [305235]
  - uos: hygon: [opensource]x86/boot/compressed/64: Check SEV encryption in the 32-bit boot-path [305235]
  - uos: hygon: [opensource]x86/boot/compressed/64: Add CPUID sanity check to 32-bit boot-path [305235]
  - uos: hygon: [opensource]x86/boot/compressed/64: Add 32-bit boot #VC handler [305235]
  - uos: hygon: [opensource]x86/boot/compressed/64: Setup IDT in startup_32 boot path [305235]
  - uos: hygon: [opensource]x86/boot/compressed/64: Reload CS in startup_32 [305235]
  - uos: hygon: [opensource]x86/sev: Do not require Hypervisor CPUID bit for SEV guests [305235]
  - uos: hygon: [opensource]x86/boot/compressed/64: Cleanup exception handling before booting kernel [305235]
  - uos: hygon: [opensource]x86/sev-es: Split vc_decode_insn() [305235]
  - uos: hygon: [opensource]crypto: ccp - Don't initialize SEV support without the SEV feature [305235]
  - uos: hygon: [opensource]crypto: ccp - Add SEV_INIT_EX support [305235]
  - uos: hygon: [opensource]x86/sev-es: Use __copy_from_user_inatomic() [305235]
  - uos: hygon: [opensource]x86/sev-es: Check regs->sp is trusted before adjusting #VC IST stack [305235]
  - uos: hygon: [opensource]x86/sev-es: Introduce ip_within_syscall_gap() helper [305235]
  - uos: hygon: [opensource]x86/sev-es: Remove subtraction of res variable [305235]
  - uos: hygon: [opensource]x86/sev-es: Do not unroll string I/O for SEV-ES guests [305235]
  - uos: hygon: [bugfix]KVM: SVM: Grab kvm->lock before pinning memory when handling vm_attestation callback [305235]
  - uos: hygon: [newfeature]KVM: SVM: Export MSR_AMD64_SEV_ES_GHCB to userspace for CSV2 guest [305235]
  - uos: hygon: [bugfix]KVM: SVM: Sync L attribute bit when sync from ghcb page [305235]
  - uos: hygon: [bugfix]x86/csv2: Pass L attribute bit when handle VMMCALL events [305235]
  - uos: hygon: [bugfix]KVM: x86: Restore some registers to support CSV2 VM live migration [305235]
  - uos: hygon: [bugfix]KVM: SVM: Don't check guest_state_protected in svm_set_cr0 [305235]
  - uos: hygon: [opensource]KVM: x86: Revert "KVM: x86: Mark GPRs dirty when written" [305235]
  - uos: hygon: [opensource]KVM: SVM: Unconditionally sync GPRs to GHCB on VMRUN of SEV-ES guest [305235]
  - uos: hygon: [opensource]x86/sev: Fix nonistr violation [305235]
  - uos: fix access_ok has multiple parameters
  - uos: hygon: [opensource]x86/sev-es: Handle string port IO to kernel memory properly [305235]
  - uos: hygon: [opensource]KVM: SVM: Mark SEV launch secret pages as dirty. [305235]
  - uos: hygon: [opensource]KVM: SVM: Add support for booting APs in an SEV-ES guest [305235]
  - uos: hygon: [opensource]x86/sev-es: Fix SEV-ES OUT/IN immediate opcode vc handling [305235]
  - uos: hygon: [opensource]KVM: SVM: fix 32-bit compilation [305235]
  - uos: hygon: [opensource]KVM: SVM: Fix offset computation bug in __sev_dbg_decrypt(). [305235]
  - uos: hygon: [opensource]KVM: SVM: Add AP_JUMP_TABLE support in prep for AP booting [305235]
  - uos: hygon: [opensource]KVM: SVM: Provide support to launch and run an SEV-ES guest [305235]
  - uos: hygon: [opensource]KVM: SVM: Provide an updated VMRUN invocation for SEV-ES guests [305235]
  - uos: hygon: [opensource]KVM: SVM: Provide support for SEV-ES vCPU loading [305235]
  - uos: hygon: [opensource]KVM: SVM: Provide support for SEV-ES vCPU creation/loading [305235]
  - uos: hygon: [opensource]KVM: SVM: Update ASID allocation to support SEV-ES guests [305235]
  - uos: hygon: [opensource]KVM: SVM: Set the encryption mask for the SVM host save area [305235]
  - uos: hygon: [opensource]KVM: SVM: Add NMI support for an SEV-ES guest [305235]
  - uos: hygon: [opensource]KVM: SVM: Guest FPU state save/restore not needed for SEV-ES guest [305235]
  - uos: hygon: [opensource]KVM: SVM: Do not report support for SMM for an SEV-ES guest [305235]
  - uos: hygon: [opensource]KVM: x86: Update __get_sregs() / __set_sregs() to support SEV-ES [305235]
  - uos: hygon: [opensource]KVM: SVM: Add support for CR8 write traps for an SEV-ES guest [305235]
  - uos: hygon: [opensource]KVM: SVM: Add support for CR4 write traps for an SEV-ES guest [305235]
  - uos: hygon: [opensource]KVM: SVM: Add support for CR0 write traps for an SEV-ES guest [305235]
  - uos: hygon: [opensource]KVM: SVM: Add support for EFER write traps for an SEV-ES guest [305235]
  - uos: hygon: [opensource]KVM: SVM: Support string IO operations for an SEV-ES guest [305235]
  - uos: hygon: [opensource]KVM: SVM: Support MMIO for an SEV-ES guest [305235]
  - uos: hygon: [opensource]KVM: SVM: Create trace events for VMGEXIT MSR protocol processing [305235]
  - uos: hygon: [opensource]KVM: SVM: Create trace events for VMGEXIT processing [305235]
  - uos: hygon: [opensource]KVM: SVM: Add support for SEV-ES GHCB MSR protocol function 0x100 [305235]
  - uos: hygon: [opensource]KVM: SVM: Add support for SEV-ES GHCB MSR protocol function 0x004 [305235]
  - uos: hygon: [opensource]KVM: SVM: Add support for SEV-ES GHCB MSR protocol function 0x002 [305235]
  - uos: hygon: [opensource]KVM: SVM: Add initial support for a VMGEXIT VMEXIT [305235]
  - uos: hygon: [opensource]KVM: Properly check if "page" is valid in kvm_vcpu_unmap [305235]
  - uos: hygon: [opensource]kvm: fix compile on s390 part 2 [305235]
  - uos: hygon: [opensource]kvm: fix compilation on s390 [305235]
  - uos: hygon: [opensource]KVM: SVM: Prepare for SEV-ES exit handling in the sev.c file [305235]
  - uos: hygon: [opensource]KVM: SVM: Cannot re-initialize the VMCB after shutdown with SEV-ES [305235]
  - uos: hygon: [opensource]KVM: SVM: Do not allow instruction emulation under SEV-ES [305235]
  - uos: hygon: [newfeature]KVM: X86: Introduce 'can_emulate_instruction' in 'struct kvm_x86_ops' [305235]
  - uos: hygon: [opensource]KVM: SVM: Prevent debugging under SEV-ES [305235]
  - uos: hygon: [opensource]KVM: SVM: Add required changes to support intercepts under SEV-ES [305235]
  - uos: hygon: [opensource]KVM: x86: introduce complete_emulated_msr callback [305235]
  - uos: hygon: [opensource]KVM: x86: use kvm_complete_insn_gp in emulating RDMSR/WRMSR [305235]
  - uos: hygon: [opensource]KVM: x86: remove bogus #GP injection [305235]
  - uos: hygon: [opensource]KVM: x86: Mark GPRs dirty when written [305235]
  - uos: hygon: [opensource]KVM: SVM: Add support for the SEV-ES VMSA [305235]
  - uos: hygon: [opensource]KVM: SVM: Add GHCB accessor functions for retrieving fields [305235]
  - uos: hygon: [opensource]KVM: SVM: Add support for SEV-ES capability in KVM [305235]
  - uos: hygon: [opensource]KVM: SVM: Remove the call to sev_platform_status() during setup [305235]
  - uos: hygon: [opensource]x86/cpu: Add VM page flush MSR availablility as a CPUID feature [305235]
  - uos: hygon: [opensource]x86,swiotlb: Adjust SWIOTLB bounce buffer size for SEV guests [305235]
  - uos: hygon: [opensource]x86/sev-es: Use new for_each_insn_prefix() macro to loop over prefixes bytes [305235]
  - uos: hygon: [opensource]x86/insn-eval: Use new for_each_insn_prefix() macro to loop over prefixes bytes [305235]
  - uos: hygon: [opensource]x86/boot: Remove unused finalize_identity_maps() [305235]
  - uos: hygon: [opensource]x86/sev-es: Do not support MMIO to/from encrypted memory [305235]
  - uos: hygon: [opensource]x86/head/64: Check SEV encryption before switching to kernel page-table [305235]
  - uos: hygon: [opensource]x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path [305235]
  - uos: hygon: [opensource]x86/boot/compressed/64: Sanity-check CPUID results in the early #VC handler [305235]
  - uos: hygon: [opensource]x86/boot/compressed/64: Introduce sev_status [305235]
  - uos: hygon: [opensource]x86/boot/64: Explicitly map boot_params and command line [305235]
  - uos: hygon: [opensource]x86/head/64: Disable stack protection for head$(BITS).o [305235]
  - uos: hygon: [opensource]x86/sev-es: Use GHCB accessor for setting the MMIO scratch buffer [305235]
  - uos: hygon: [opensource]x86/sev-es: Check required CPU features for SEV-ES [305235]
  - uos: hygon: [opensource]x86/efi: Add GHCB mappings when SEV-ES is active [305235]
  - uos: hygon: [opensource]x86/sev-es: Handle NMI State [305235]
  - uos: hygon: [opensource]x86/sev-es: Support CPU offline/online [305235]
  - uos: hygon: [opensource]x86/head/64: Don't call verify_cpu() on starting APs [305235]
  - uos: hygon: [opensource]x86/smpboot: Load TSS and getcpu GDT entry before loading IDT [305235]
  - uos: hygon: [opensource]x86/realmode: Setup AP jump table [305235]
  - uos: hygon: [opensource]x86/realmode: Add SEV-ES specific trampoline entry point [305235]
  - uos: hygon: [opensource]x86/vmware: Add VMware-specific handling for VMMCALL under SEV-ES [305235]
  - uos: hygon: [opensource]x86/kvm: Add KVM-specific VMMCALL handling under SEV-ES [305235]
  - uos: hygon: [opensource]x86/paravirt: Allow hypervisor-specific VMMCALL handling under SEV-ES [305235]
  - uos: hygon: [opensource]x86/sev-es: Handle #DB Events [305235]
  - uos: hygon: [opensource]x86/sev-es: Handle #AC Events [305235]
  - uos: hygon: [opensource]x86/sev-es: Handle VMMCALL Events [305235]
  - uos: hygon: [opensource]x86/sev-es: Handle MWAIT/MWAITX Events [305235]
  - uos: hygon: [opensource]x86/sev-es: Handle MONITOR/MONITORX Events [305235]
  - uos: hygon: [opensource]x86/sev-es: Handle INVD Events [305235]
  - uos: hygon: [opensource]x86/sev-es: Handle RDPMC Events [305235]
  - uos: hygon: [opensource]x86/sev-es: Handle RDTSC(P) Events [305235]
  - uos: hygon: [opensource]x86/sev-es: Handle WBINVD Events [305235]
  - uos: hygon: [opensource]x86/sev-es: Handle DR7 read/write events [305235]
  - uos: hygon: [opensource]x86/sev-es: Handle MSR events [305235]
  - uos: hygon: [opensource]x86/sev-es: Handle MMIO String Instructions [305235]
  - uos: hygon: [opensource]x86/sev-es: Handle MMIO events [305235]
  - uos: hygon: [opensource]x86/sev-es: Handle instruction fetches from user-space [305235]
  - uos: hygon: [opensource]x86/sev-es: Wire up existing #VC exit-code handlers [305235]
  - uos: hygon: [opensource]x86/sev-es: Add a Runtime #VC Exception Handler [305235]
  - uos: hygon: [opensource]x86/entry/64: Add entry code for #VC handler [305235]
  - uos: hygon: [opensource]x86/dumpstack/64: Add noinstr version of get_stack_info() [305235]
  - uos: hygon: [opensource]x86/sev-es: Adjust #VC IST Stack on entering NMI handler [305235]
  - uos: hygon: [opensource]x86/sev-es: Allocate and map an IST stack for #VC handler [305235]
  - uos: hygon: [opensource]x86/sev-es: Setup per-CPU GHCBs for the runtime handler [305235]
  - uos: hygon: [opensource]x86/sev-es: Setup GHCB-based boot #VC handler [305235]
  - uos: hygon: [opensource]x86/sev-es: Setup an early #VC handler [305235]
  - uos: hygon: [opensource]x86/sev-es: Compile early handler code into kernel image [305235]
  - uos: hygon: [newfeature]x86/csv: Print CSV(2) info into the kernel log [305235]
  - uos: hygon: [opensource]x86/sev-es: Print SEV-ES info into the kernel log [305235]
  - uos: hygon: [opensource]x86/sev-es: Add SEV-ES Feature Detection [305235]
  - uos: hygon: [opensource]x86/head/64: Move early exception dispatch to C code [305235]
  - uos: hygon: [opensource]x86/idt: Make IDT init functions static inlines [305235]
  - uos: hygon: [newfeature]x86/head/64: Fixup startup_gdt_descr address in startup_64_env_setup() [305235]
  - uos: hygon: [opensource]x86/head/64: Install a CPU bringup IDT [305235]
  - uos: hygon: [opensource]x86/head/64: Switch to initial stack earlier [305235]
  - uos: hygon: [opensource]x86/head/64: Load segment registers earlier [305235]
  - uos: hygon: [opensource]x86/head/64: Load GDT after switch to virtual addresses [305235]
  - uos: hygon: [opensource]x86/head/64: Install startup GDT [305235]
  - uos: hygon: [opensource]x86/idt: Split idt_data setup out of set_intr_gate() [305235]
  - uos: hygon: [opensource]x86/sev-es: Add CPUID handling to #VC handler [305235]
  - uos: hygon: [opensource]x86/fpu: Move xgetbv()/xsetbv() into a separate header [305235]
  - uos: hygon: [opensource]x86/sev-es: Add support for handling IOIO exceptions [305235]
  - uos: hygon: [opensource]x86/boot/compressed/64: Unmap GHCB page before booting the kernel [305235]
  - uos: hygon: [opensource]x86/boot/compressed/64: Setup a GHCB-based VC Exception handler [305235]
  - uos: hygon: [opensource]x86/boot/compressed/64: Add set_page_en/decrypted() helpers [305235]
  - uos: hygon: [opensource]x86/boot/compressed/64: Check return value of kernel_ident_mapping_init() [305235]
  - uos: hygon: [opensource]x86/boot/compressed/64: Call set_sev_encryption_mask() earlier [305235]
  - uos: hygon: [opensource]x86/boot/compressed/64: Add stage1 #VC handler [305235]
  - uos: hygon: [opensource]x86/boot/compressed/64: Change add_identity_map() to take start and end [305235]
  - uos: hygon: [opensource]x86/boot/compressed/64: Don't pre-map memory in KASLR code [305235]
  - uos: hygon: [opensource]x86/boot/64: Initialize 5-level paging variables earlier [305235]
  - uos: hygon: [opensource]x86/boot/compressed/64: Always switch to own page table [305235]
  - uos: hygon: [opensource]x86/boot/compressed/64: Add page-fault handler [305235]
  - uos: hygon: [opensource]x86/boot/compressed/64: Rename kaslr_64.c to ident_map_64.c [305235]
  - uos: hygon: [opensource]x86/boot/compressed/64: Add IDT Infrastructure [305235]
  - uos: hygon: [opensource]x86/boot/compressed: Get rid of GOT fixup code [305235]
  - uos: hygon: [opensource]x86/boot/compressed: Force hidden visibility for all symbol references [305235]
  - uos: hygon: [opensource]x86/boot/compressed: Move .got.plt entries out of the .got section [305235]
  - uos: hygon: [opensource]x86/boot: Correct relocation destination on old linkers [305235]
  - uos: hygon: [opensource]x86/boot/compressed/64: Disable red-zone usage [305235]
  - uos: add GMJS(Nationz Tech) TCM driver for PNPACPI
  - uos: hygon: [opensource]x86/insn: Add insn_has_rep_prefix() helper [305235]
  - uos: hygon: [opensource]KVM: SVM: Use __packed shorthand [305235]
  - uos: hygon: [opensource]KVM: SVM: Add GHCB Accessor functions [305235]
  - uos: hygon: [opensource]x86/insn: Add insn_get_modrm_reg_off() [305235]
  - uos: hygon: [opensource]x86/umip: Factor out instruction decoding [305235]
  - uos: hygon: [opensource]KVM: SVM: Add GHCB definitions [305235]
  - uos: hygon: [opensource]x86/umip: Factor out instruction fetch [305235]
  - uos: hygon: [opensource]x86/insn: Make inat-tables.c suitable for pre-decompression code [305235]
  - uos: hygon: [opensource]x86/traps: Move pf error codes to <asm/trap_pf.h> [305235]
  - uos: hygon: [opensource]x86/cpufeatures: Add SEV-ES CPU feature [305235]
  - uos: hygon: [opensource]x86/CPU/AMD: Ensure clearing of SME/SEV features is maintained [305235]
  - uos: hygon: [opensource]KVM: SVM: fix svn_pin_memory()'s use of get_user_pages_fast() [305235]
  - uos: hygon: [opensource]x86/idtentry: Provide IDTENTRY_DF [305235]
  - uos: hygon: [opensource]x86/idtentry: Provide IDTRENTRY_NOIST variants for #DB and #MC [305235]
  - uos: hygon: [opensource]x86/idtentry: Provide IDTENTRY_IST [305235]
  - uos: hygon: [opensource]x86/idtentry: Provide IDTENTRY_RAW [305235]
  - uos: hygon: [opensource]x86/idtentry: Provide IDTENTRY_ERRORCODE [305235]
  - uos: hygon: [opensource]x86/entry/common: Provide idtentry_enter/exit() [305235]
  - uos: hygon: [opensource]x86/idtentry: Provide macros to define/declare IDT entry points [305235]
  - uos: hygon: [opensource]x86/entry/64: Reorder idtentries [305235]
  - uos: hygon: [opensource]x86/entry/32: Pass cr2 to do_async_page_fault() [305235]
  - uos: hygon: [opensource]x86/entry/64: Prevent clobbering of saved CR2 value [305235]
  - uos: hygon: [opensource]x86/mm, tracing: Fix CR2 corruption [305235]
  - uos: hygon: [newfeature]x86: Move GET_CR2_INTO into common header file [305235]
  - uos: hygon: [opensource]x86/entry/32: Simplify common_exception [305235]
  - uos: hygon: [opensource]x86/traps: Split trap numbers out in a separate header [305235]
  - uos: hygon: [opensource]lockdep: Prepare for noinstr sections [305235]
  - uos: hygon: [opensource]vmlinux.lds.h: Create section for protection against instrumentation [305235]
  - uos: hygon: [opensource]tracing: Provide lockdep less trace_hardirqs_on/off() variants [305235]
  - uos: fix the assembler messages of attempt to move .org backwards by 0d0cc77a132c
  - uos: hygon: [opensource]x86/boot/compressed/64: Switch to __KERNEL_CS after GDT is loaded [305235]
  - uos: hygon: [opensource]x86/boot/compressed: Fix reloading of GDTR post-relocation [305235]
  - uos: hygon: [opensource]x86/boot: Micro-optimize GDT loading instructions [305235]
  - uos: hygon: [opensource]x86/boot: GDT limit value should be size - 1 [305235]
  - uos: hygon: [opensource]x86/boot: Reload GDTR after copying to the end of the buffer [305235]
  - uos: hygon: [opensource]efi/x86: Don't depend on firmware GDT layout [305235]
  - uos: hygon: [opensource]x86/boot: Remove KEEP_SEGMENTS support [305235]
  - uos: hygon: [opensource]x86/boot/compressed/64: Use 32-bit (zero-extended) MOV for z_output_len [305235]
  - uos: hygon: [opensource]x86/boot/compressed/64: Use LEA to initialize boot stack pointer [305235]
  - uos: hygon: [opensource]x86/asm: Use SYM_INNER_LABEL instead of GLOBAL [305235]
  - uos: hygon: [opensource]x86/boot: Annotate data appropriately [305235]
  - uos: hygon: [opensource]x86/asm: Annotate local pseudo-functions [305235]
  - uos: hygon: [opensource]linkage: Introduce new macros for assembler symbols [305235]
  - uos: hygon: [opensource]x86/asm: Make some functions local labels [305235]
  - uos: hygon: [opensource]x86/entry/64: Update comments and sanity tests for create_gap [305235]
  - uos: hygon: [opensource]x86/entry/64: Simplify idtentry a little [305235]
  - uos: hygon: [opensource]x86/boot: Make the GDT 8-byte aligned [305235]
  - uos: hygon: [opensource]x86/kexec: Set the C-bit in the identity map page table when SEV is active [305235]
  - uos: hygon: [opensource]x86/kexec: Do not map kexec area as decrypted when SEV is active [305235]
  - uos: hygon: [opensource]x86/dumpstack/64: Don't evaluate exception stacks before setup [305235]
  - uos: hygon: [opensource]x86/dumpstack/64: Speedup in_exception_stack() [305235]
  - uos: hygon: [opensource]x86/exceptions: Split debug IST stack [305235]
  - uos: hygon: [opensource]x86/exceptions: Enable IST guard pages [305235]
  - uos: hygon: [opensource]x86/exceptions: Disconnect IST index and stack order [305235]
  - uos: hygon: [opensource]x86/cpu: Remove orig_ist array [305235]
  - uos: hygon: [opensource]x86/cpu: Prepare TSS.IST setup for guard pages [305235]
  - uos: hygon: [opensource]x86/dumpstack/64: Use cpu_entry_area instead of orig_ist [305235]
  - uos: hygon: [opensource]x86/irq/64: Use cpu entry area instead of orig_ist [305235]
  - uos: hygon: [opensource]x86/traps: Use cpu_entry_area instead of orig_ist [305235]
  - uos: hygon: [opensource]x86/cpu_entry_area: Provide exception stack accessor [305235]
  - uos: hygon: [opensource]x86/cpu_entry_area: Prepare for IST guard pages [305235]
  - uos: hygon: [opensource]x86/exceptions: Add structs for exception stacks [305235]
  - uos: hygon: [opensource]x86/cpu_entry_area: Cleanup setup functions [305235]
  - uos: hygon: [opensource]x86/exceptions: Make IST index zero based [305235]
  - uos: hygon: [opensource]x86/exceptions: Remove unused stack defines on 32bit [305235]
  - uos: hygon: [opensource]x86/idt: Remove unused macro SISTG [305235]
  - uos: hygon: [opensource]x86/irq/64: Sanitize the top/bottom confusion [305235]
  - uos: hygon: [opensource]x86/irq/64: Remove a hardcoded irq_stack_union access [305235]
  - uos: hygon: [opensource]x86/entry: Remove unneeded need_resched() loop [305235]
  - uos: hygon: [opensource]crypto: ccp - Update driver messages to remove some confusion [305235]
  - uos: hygon: [opensource]crypto: ccp - fix the SEV probe in kexec boot path [305235]
  - uos: hygon: [opensource]x86/boot: Save several bytes in decompressor [305235]
  - uos: hygon: [opensource]x86/kdump: Export the SME mask to vmcoreinfo [305235]
  - uos: hygon: [opensource]fs/proc/vmcore: Enable dumping of encrypted memory when SEV was active [305235]
  - uos: hygon: [opensource]kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled [305235]
  - uos: hygon: [opensource]iommu/amd: Remap the IOMMU device table with the memory encryption mask for kdump [305235]
  - uos: hygon: [opensource]x86/ioremap: Add an ioremap_encrypted() helper [305235]
  - uos: hygon: [opensource]x86/pti/64: Remove the SYSCALL64 entry trampoline [305235]
  - uos: hygon: [opensource]x86/entry/64: Use the TSS sp2 slot for SYSCALL/SYSRET scratch space [305235]
  - uos: hygon: [opensource]x86/entry/64: Document idtentry [305235]
  - uos: hygon: [bugfix]crypto: ccp: Fix definition of struct sev_data_send_update_vmsa [305235]
  - uos: hygon: [opensource]crypto: ccp - Add support for SEV-ES to the PSP driver [305235]
  - uos: hygon: [bugfix]x86/kvm: Correct number of pages calculation in kvm_init_platform() [305235]
  - uos: hygon: [bugfix]x86/mm: Pass variable start to notify_range_enc_status_changed() in __set_memory_enc_dec() [305235]
  - uos: hygon: [newfeature]KVM: SVM: Implement RECEIVE_UPDATE_DATA command handler used by KVM_SEV_COMMAND_BATCH [305235]
  - uos: hygon: [newfeature]KVM: SVM: Implement SEND_UPDATE_DATA command handler used by KVM_SEV_COMMAND_BATCH [305235]
  - uos: hygon: [newfeature]KVM: SVM: Implement a memory pool for the memory allocation of CMDs in COMMAND_BATCH [305235]
  - uos: hygon: [newfeature]KVM: SVM: Introduce KVM_SEV_COMMAND_BATCH API which use RING_BUFFER Mode to handle CMDs [305235]
  - uos: hygon: [newfeature]crypto: ccp: Add support for issue commands in RING_BUFFER Mode [305235]
  - uos: hygon: [newfeature]crypto: ccp: Implement SEV_RING_BUFFER command handler [305235]
  - uos: hygon: [newfeature]crypto:ccp: Add the status dequeue API support for CSV RING_BUFFER Mode [305235]
  - uos: hygon: [newfeature]crypto:ccp: Add the command enqueue API support for CSV RING_BUFFER Mode [305235]
  - uos: hygon: [newfeature]crypto: ccp: Add the init and free API support for CSV RING_BUFFER Mode [305235]
  - uos: hygon: [opensource]x86/kvm: Add kexec support for SEV Live Migration. [305235]
  - uos: hygon: [opensource]x86/kvm: Add guest support for detecting and enabling SEV Live Migration feature. [305235]
  - uos: hygon: [opensource]EFI: Introduce the new AMD Memory Encryption GUID. [305235]
  - uos: hygon: [opensource]mm: x86: Invoke hypercall when page encryption status is changed [305235]
  - uos: hygon: [opensource]KVM: SVM: fix missing sev_decommission in sev_receive_start [305235]
  - uos: hygon: [opensource]KVM: X86: Introduce KVM_HC_MAP_GPA_RANGE hypercall [305235]
  - uos: hygon: [opensource]KVM: SVM: Call SEV Guest Decommission if ASID binding fails [305235]
  - uos: hygon: [opensource]KVM: SVM: Fix SEV SEND_START session length & SEND_UPDATE_DATA query length after commit 238eca821cee [305235]
  - uos: hygon: [opensource]KVM: SVM: Add support for KVM_SEV_SEND_CANCEL command [305235]
  - uos: hygon: [opensource]KVM: SVM: Add KVM_SEND_UPDATE_DATA command [305235]
  - uos: hygon: [opensource]KVM: SVM: Add KVM_SEV SEND_START command [305235]
  - uos: hygon: [opensource]x86/mem_encrypt: Correct physical address calculation in __set_clr_pte_enc() [305235]
  - uos: hygon: [opensource]mm: always have io_remap_pfn_range() set pgprot_decrypted() [305235]
  - uos: hygon: [opensource]KVM: SVM: Issue WBINVD after deactivating an SEV guest [305235]
  - uos: hygon: [opensource]KVM: SVM: document KVM_MEM_ENCRYPT_OP, let userspace detect if SEV is available [305235]
  - uos: hygon: [opensource]KVM: SVM: Reduce WBINVD/DF_FLUSH invocations [305235]
  - uos: hygon: [opensource]KVM: SVM: Remove unneeded WBINVD and DF_FLUSH when starting SEV guests [305235]
  - uos: hygon: [opensource]KVM: SVM: Guard against DEACTIVATE when performing WBINVD/DF_FLUSH [305235]
  - uos: hygon: [opensource]KVM: SVM: Serialize access to the SEV ASID bitmap [305235]
  - uos: hygon: [opensource]virtio-blk: Consider virtio_max_dma_size() for maximum segment size [305235]
  - uos: hygon: [opensource]virtio_ring: Fix querying of maximum DMA mapping size for virtio device [305235]
  - uos: hygon: [opensource]virtio: Introduce virtio_max_dma_size() [305235]
  - uos: hygon: [opensource]dma: Introduce dma_max_mapping_size() [305235]
  - uos: hygon: [opensource]KVM/SVM: add support for SEV attestation command [305235]
  - uos: hygon: [opensource]swiotlb: Add is_swiotlb_active() function [305235]
  - uos: hygon: [opensource]swiotlb: Introduce swiotlb_max_mapping_size() [305235]
  - uos: hygon: [opensource]swiotlb: clear io_tlb_start and io_tlb_end in swiotlb_exit [305235]
  - uos: hygon: [opensource]KVM: x86: Introduce MSR filtering [305235]
  - uos: hygon: [opensource]KVM: VMX: Fix x2APIC MSR intercept handling on !APICV platforms [305235]
  - uos: hygon: [opensource]KVM: x86: VMX: Prevent MSR passthrough when MSR access is denied [305235]
  - uos: hygon: [opensource]KVM: x86: SVM: Prevent MSR passthrough when MSR access is denied [305235]
  - uos: hygon: [opensource]KVM: x86: Prepare MSR bitmaps for userspace tracked MSRs [305235]
  - uos: hygon: [opensource]KVM: x86: Add infrastructure for MSR filtering [305235]
  - uos: hygon: [opensource]KVM: x86: Allow deflecting unknown MSR accesses to user space [305235]
  - uos: hygon: [opensource]KVM: x86: Return -ENOENT on unimplemented MSRs [305235]
  - uos: hygon: [opensource]KVM: X86: Do the same ignore_msrs check for feature msrs [305235]
  - uos: hygon: [opensource]KVM: X86: Move ignore_msrs handling upper the stack [305235]
  - uos: hygon: [opensource]KVM: x86: Refactor up kvm_{g,s}et_msr() to simplify callers [305235]
  - uos: hygon: [opensource]KVM: SVM: refactor msr permission bitmap allocation [305235]
  - uos: hygon: [opensource]x86: KVM: svm: don't pretend to advance RIP in case wrmsr_interception() results in #GP [305235]
  - uos: hygon: [newfeature]crypto: ccp: Add userspace DOWNLOAD_FIRMWARE API [305235]
  - uos: hygon: [newfeature]crypto: ccp: Add userspace PLATFORM_SHUTDOWN API [305235]
  - uos: hygon: [newfeature]crypto: ccp: Add userspace PLATFORM_INIT API [305235]
  - uos: hygon: [newfeature]crypto: ccp: Support DOWNLOAD_FIRMWARE when probe CSV [305235]
  - uos: hygon: [newfeature]x86: add hygon family 18h [305235]
  - uos: open some config
  - uos: config: fix warnnig with make menuconfig
  - uos: uts01 code pick
  - uos: fix patch "bpf: Add helper to retrieve socket in BPF" merge error [T278697]
  - uos: add errstr_unpriv to resolve PTR_TO_STACK test fail
  - anolis: Revert "bpf: correct slot_type marking logic to allow more stack slot sharing" [B219507]
  - euler: 4.19 patch2 oe [T309497]
  - euler: 4.19-clean-dcache-when-vcpu_id-is-0-oe-1127 [T309497]
  - uos: update phytium_ce driver
  - mainline: selftests/bpf: Skip perf hw events test if the setup disabled it [B219507]
  - uos: fix subprog test_stacktrace_build_id of test_prog [B219507]
  - stable: ACPICA: ACPI 6.3: add Error Disconnect Recover Notification value [T300323]
  - mainline: bpf: Test_verifier, #70 error message updates for 32-bit right shift [B219507]
  - uos: split test array items into seperate files
  - mainline: bpf, selftests: Adjust few selftest result_unpriv outcomes [B219507]
  - mainline: bpf: Update selftests to reflect new error states [B219507]
  - uos: adjust mmap size to resolve test_mmap error in large page system [B219057]
  - mainline: selftests/bpf: Test that lookup on SOCKMAP/SOCKHASH is allowed [B219507]
  - uos: selftests/bpf: fix verifier test failed about calls and loops [B219507]
  - euler: tun: avoid double free in tun_free_netdev
  - euler: net: fix kabi broken in struct netns_xfrm
  - euler: xfrm: fix a data-race in xfrm_gen_index()
  - euler: dccp/tcp: Call security_inet_conn_request() after setting IPv6 addresses.
  - euler: can: dev: can_restart(): fix race condition between controller restart and netif_carrier_on()
  - euler: can: dev: can_restart(): don't crash kernel if carrier is OK
  - euler: can: dev: move driver related infrastructure into separate subdir
  - euler: ipv6: avoid atomic fragment on GSO packets
  - euler: tcp_metrics: do not create an entry from tcp_init_metrics()
  - euler: tcp_metrics: properly set tp->snd_ssthresh in tcp_init_metrics()


author: caina <caina@uniontech.com> - 4.19.90-2401.3.0.0234.78
changelog:
  - uos: selftest/ebpf: fix the guest section name test failed case [B238585]
  - uos: derive: wangxun: Add uos suffix after version number
  - uos: derive: net: Remove unnecessary HAVE_XMIT_MORE compatible programs [B232799]
  - uos: net: Delete __netdev_tx_sent_queue duplicate definition error problem [B232799]
  - mainline: drivers: net: aurora: use netdev_xmit_more helper [B232799]
  - uos: drivers: net: use netdev_xmit_more helper [B232799]
  - mainline: um: vector netdev: adjust to xmit_more API change [B232799]
  - mainline: drivers: net: sfc: use netdev_xmit_more helper [B232799]
  - mainline: drivers: mellanox: use netdev_xmit_more() helper [B232799]
  - mainline: sfc: use the new __netdev_tx_sent_queue BQL optimisation [B232799]
  - mainline: net/mlx4_en: use __netdev_tx_sent_queue() [B232799]
  - mainline: net: bql: add __netdev_tx_sent_queue() [B232799]
  - euler: team: Fix use-after-free when an option instance allocation fails
  - euler: packet: Move reference count in packet_sock to atomic_long_t
  - euler: tcp: do not accept ACK of bytes we never sent
  - euler: ipv4: ip_gre: Avoid skb_pull() failure in ipgre_xmit()
  - euler: ipv6: fix potential NULL deref in fib6_add()
  - euler: ipv4: Correct/silence an endian warning in __ip_do_redirect
  - euler: net: sched: fix race condition in qdisc_graft()
  - euler: macvlan: Don't propagate promisc change to lower dev in passthru
  - euler: ppp: limit MRU to 64K
  - euler: tty: Fix uninit-value access in ppp_sync_receive()
  - euler: net: annotate data-races around sk->sk_dst_pending_confirm
  - euler: net: annotate data-races around sk->sk_tx_queue_mapping
  - euler: ring-buffer: Fix memory leak of free page
  - euler: arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify
  - euler: asm-generic: qspinlock: fix queued_spin_value_unlocked() implementation
  - euler: Revert "PCI: acpiphp: Reassign resources on bridge if necessary"
  - euler: x86/CPU/AMD: Check vendor in the AMD microcode callback
  - euler: genirq/generic_chip: Make irq_remove_generic_chip() irqdomain aware
  - euler: audit: don't WARN_ON_ONCE(!current->mm) in audit_exe_compare()
  - euler: audit: don't take task_lock() in audit_exe_compare() code path
  - euler: {CVE-2023-6121} nvmet: nul-terminate the NQNs passed in the connect command
  - euler: {CVE-2023-7192} netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack()
  - euler: ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
  - euler: net/sched: cbs: Fix not adding cbs instance to list
  - euler: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super()
  - euler: iomap: add support to track dirty state of sub pages
  - euler: devcoredump: Send uevent once devcd is ready
  - euler: devcoredump : Serialize devcd_del work
  - euler: driver core: Release all resources during unbind before updating device links
  - euler: {CVE-2023-51781} appletalk: Fix Use-After-Free in atalk_ioctl
  - euler: {CVE-2023-51779} Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
  - euler: {CVE-2023-6610} smb: client: fix potential OOB in smb2_dump_detail()
  - euler: {CVE-2023-6606} smb: client: fix OOB in smbCalcSize()
  - euler: {CVE-2023-51782} net/rose: Fix Use-After-Free in rose_ioctl
  - euler: {CVE-2023-51780} atm: Fix Use-After-Free in do_vcc_ioctl
  - euler: jbd2: fix soft lockup in journal_finish_inode_data_buffers()
  - euler: {CVE-2023-35827} ravb: Fix races between ravb_tx_timeout_work() and net related ops
  - euler: {CVE-2023-35827} ravb: Fix use-after-free issue in ravb_tx_timeout_work()
  - euler: net: check vlan filter feature in vlan_vids_add_by_dev() and vlan_vids_del_by_dev()
  - euler: ip: Fix data-races around sysctl_ip_no_pmtu_disc.
  - euler: ip: Fix data-races around sysctl_ip_fwd_update_priority.
  - euler: fs: don't audit the capability check in simple_xattr_list()
  - uos: fix Phytium x100 chip USB not working [T313951]
  - mainline: libbpf: Support .text sub-calls relocations [B238711]
  - mainline: selftests/bpf: Fix test_progs send_signal flakiness with nmi mode [B219507]


author: caina <caina@uniontech.com> - 4.19.90-2402.1.0.0263.80
changelog:
  - uos: fix kabi error for cpu_hwcap_keys and cpu_hwcaps
  - euler: smb: client: fix NULL deref in asn1_ber_decoder()
  - euler: {CVE-2024-23849} net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
  - euler: fs:/dcache.c: fix negative dentry limit not complete problem
  - euler: {CVE-2023-51042} drm/amdgpu: Fix potential fence use-after-free v2
  - euler: {CVE-2023-46343} nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
  - euler: crypto: hisilicon/qm - drop unnecessary IS_ENABLE(CONFIG_NUMA) check
  - euler: ipv6: init the accept_queue's spinlocks in inet6_create
  - euler: tcp: make sure init the accept_queue's spinlocks once
  - euler: netlink: fix potential sleeping issue in mqueue_flush_file
  - euler: dhugetlb: skip unexpected migration
  - euler: dhugetlb: introduce page_belong_to_dynamic_hugetlb() function
  - euler: sched/fair: Fix qos_timer deadlock when cpuhp offline
  - euler: {CVE-2024-0639} sctp: fix potential deadlock on &net->sctp.addr_wq_lock
  - euler: time: Handle negative seconds correctly in timespec64_to_ns()
  - euler: timerqueue: Use rb_entry_safe() in timerqueue_getnext()
  - euler: efi/x86: Map the entire EFI vendor string before copying it
  - euler: {CVE-2024-0607} netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
  - euler: rtnetlink: Reject negative ifindexes in RTM_NEWLINK
  - euler: Revert "rtnetlink: Reject negative ifindexes in RTM_NEWLINK"
  - euler: {CVE-2022-48619} Input: add bounds checking to input_set_capability()
  - euler: {CVE-2024-0565} smb: client: fix OOB in receive_encrypted_standard()
  - euler: crypto: hisilicon/qm: fix several issues
  - euler: crypto: hisilicon - replace 'smp_processor_id' with the raw version of the macro
  - euler: {CVE-2023-6040} netfilter: nf_tables: Reject tables of unsupported family
  - euler: crypto: hisilicon/sec2: fix memory use-after-free issue
  - euler: {CVE-2024-0340} vhost: use kzalloc() instead of kmalloc() followed by memset()
  - euler: net: bridge: multicast: fix UAF of net_bridge
  - uos: support CCUSR8116 RAID
  - anolis: configs: enable CONFIG_EROFS_FS [B235941]
  - anolis: erofs: fix a dead loop due to PIPE iovec [B235941]
  - anolis: erofs: support passing in struct file * for FUSE [B235941]
  - anolis: erofs: support blobfile over virtiofs [B235941]
  - anolis: erofs: support RAFS v6 over virtiofs [B235941]
  - anolis: erofs: add multiple device support [B235941]
  - anolis: erofs: introduce erofs_sb_has_xxx() helpers [B235941]
  - anolis: erofs: fix double free of 'copied' [B235941]
  - anolis: erofs: support reading chunk-based uncompressed files [B235941]
  - anolis: erofs: introduce chunk-based file on-disk format [B235941]
  - anolis: erofs: don't use erofs_map_blocks() any more [B235941]
  - anolis: erofs: move from drivers/staging/ to fs/ [B235941]
  - anolis: erofs: sync up with kernel 5.10 [B235941]
  - uos: change the python-shabang to '/usr/xx' path [B235061]
  - uos: Revert "uos: bugfix: fixup marvell sata controller init fail on some machine" [B240939]
  - stable: kvm: selftests: aarch64: fix default vm mode [B240841]
  - stable: kvm: selftests: aarch64: compile with warnings on [B240841]
  - stable: KVM: selftests: Wrap vcpu_nested_state_get/set functions with x86 guard [B240841]
  - uos: arm64: Fix the cpu capacity copy error by previous commit
  - uos: fix compile error caused by interface change
  - uos: Unixbench optimized
  - uos: uos_pwu: add sched partner wakeup solution
  - uos: config: open CONFIG_ZIMC_PHY config [T317019]
  - uos: derive: net: add ZIMC_PHY driver [T317019]


author: caina <caina@uniontech.com> - 4.19.90-2402.1.0.0263.81
changelog:
  - uos: derive: net: update ice to 1.12.7 [T317017]
  - uos: locking/osq_lock: Optimize osq_lock performance using per-NUMA
  - feat: uos: sched: hide period poll debug info
  - fix: mm/munlock: delete munlock_vma_pages_all(), allow oomreap(bugid:190957)


author: caina <caina@uniontech.com> - 4.19.90-2402.5.0.0266.82
changelog:
  - mainline: ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems [B219467]
  - mainline: ACPI: processor_idle: Skip dummy wait if kernel is in guest [B219467]
  - uos: bugfix: fixup marvell sata controller init fail on some machine
  - uos: fs: move S_ISGID stripping into the vfs_*() helpers [B191653]
  - uos: fs: add mode_strip_sgid() helper [B191653]
  - stable: {CVE-2023-52439} uio: Fix use-after-free in uio_open
  - stable: {CVE-2023-52443} apparmor: avoid crash when parsed profile name is empty
  - stable: {CVE-2023-52444} f2fs: fix to avoid dirent corruption
  - stable: {CVE-2023-52445} media: pvrusb2: fix use after free on context disconnection
  - stable: {CVE-2023-52449} mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
  - stable: {CVE-2023-52451} powerpc/pseries/memhp: Fix access beyond end of drmem array
  - stable: {CVE-2023-52464} EDAC/thunderx: Fix possible out-of-bounds string access
  - stable: {CVE-2024-26597} net: qualcomm: rmnet: fix global oob in rmnet_policy
  - euler: {CVE-2023-46838} xen-netback: don't produce zero-size SKB frags
  - euler: net: hns3: update hns3 version to 24.2.1
  - euler: net: hns3: fix tm port shapping of fibre port is incorrect after driver initialization
  - euler: {CVE-2023-52340} ipv6: fix kabi broken in struct dst_ops
  - euler: {CVE-2023-52340} ipv6: Document that max_size sysctl is deprecated
  - euler: {CVE-2023-52340} ipv6: remove max_size check inline with ipv4
  - euler: arm64/openeuler_defconfig: add not set config to fix compiling error
  - euler: tracing/kprobes: Do the notrace functions check without kprobes on ftrace
  - euler: fs:/dcache.c: fix negative dentry flag warning in dentry_free
  - euler: {CVE-2024-1086} netfilter: nf_tables: reject QUEUE/DROP verdict parameters
  - euler: net: Save and restore msg_namelen in sock_sendmsg
  - euler: net: prevent rewrite of msg_name in sock_sendmsg()
  - euler: {CVE-2023-51043} drm/atomic: Fix potential use-after-free in nonblocking commits
  - euler: net/dst: use a smaller percpu_counter batch for dst entries accounting
  - euler: net: add a route cache full diagnostic message
  - euler: net: check dev->gso_max_size in gso_features_check()
  - euler: net: warn if gso_type isn't set for a GSO SKB
  - euler: mm: fix unmap_mapping_range high bits shift bug
  - euler: x86/alternatives: Sync core before enabling interrupts
  - euler: mm/filemap: avoid buffered read/write race to read inconsistent data
  - euler: net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve
  - euler: {CVE-2023-6531} io_uring/af_unix: disable sending io_uring over sockets
  - uos: uharden: fix network performance degradation issue [B237495]
  - uos: elfverify: fix slab memory leak [T325833]
  - uos: locking/osq_lock: fix osq_lock compile warning


author: caina <caina@uniontech.com> - 4.19.90-2402.5.0.0266.83
changelog:
  - uos: close NUMA_AWARE_SPINLOCKS [B247001]
  - stable: kvm/arm64: fixed passthrough gpu into vm on arm64
  - uos: fix short cycle process load balance
  - uos: bugfix: modified the license information unified uharden certificate information in all modules
  - uos: locking/osq_lock: Optimize osq_lock performance using per-NUMA
  - Revert "uos: locking/osq_lock: Optimize osq_lock performance using per-NUMA"
  - Revert "uos: locking/osq_lock: fix osq_lock compile warning"


author: caina <caina@uniontech.com> - 4.19.90-2403.3.0.0270.83
changelog:
  - stable: {CVE-2023-6270} aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
  - euler: {CVE-2023-52515} RDMA/srp: Do not call scsi_done() from srp_abort()
  - euler: {CVE-2023-52598} s390/ptrace: handle setting of fpc register correctly
  - euler: {CVE-2023-52586} drm/msm/dpu: Add mutex lock in control vblank irq
  - euler: {CVE-2023-52604} FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
  - euler: {CVE-2024-26625} llc: call sock_orphan() at release time
  - euler: {CVE-2023-52583} ceph: fix deadlock or deadcode of misusing dget()
  - euler: {CVE-2023-52606} powerpc/lib: Validate size for vector operations
  - euler: {CVE-2023-52607} powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
  - euler: {CVE-2022-48630} crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ
  - euler: {CVE-2022-48629} crypto: qcom-rng - ensure buffer for generate is completely filled
  - euler: {CVE-2023-52486} drm: Don't unref the same fb many times by mistake due to deadlock handling
  - euler: {CVE-2023-52524} net: nfc: llcp: Add lock when modifying device list
  - euler: {CVE-2023-52502} net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
  - euler: {CVE-2023-52502} nfc: constify several pointers to u8, char and sk_buff
  - euler: {CVE-2023-52507} nfc: nci: assert requested protocol is valid
  - euler: {CVE-2021-46952} NFS: fs_context: validate UDP retrans to prevent shift out-of-bounds
  - euler: {CVE-2021-46926} ALSA: hda: intel-sdw-acpi: harden detection of controller
  - euler: {CVE-2021-46926} soundwire: intel: filter SoundWire controller device search
  - euler: {CVE-2023-52578} net: fix kabi check warning
  - euler: {CVE-2023-52578} net: Fix unwanted sign extension in netdev_stats_to_stats64()
  - euler: {CVE-2023-52578} net: bridge: use DEV_STATS_INC()
  - euler: {CVE-2023-52578} net: add atomic_long_t to net_device_stats fields
  - euler: {CVE-2023-52478} HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect
  - euler: {CVE-2023-52530} wifi: mac80211: fix potential key use-after-free
  - euler: {CVE-2021-47063} drm: bridge/panel: Cleanup connector on bridge detach
  - euler: {CVE-2021-47071} uio_hv_generic: Fix a memory leak in error handling paths
  - euler: {CVE-2021-47076} RDMA/rxe: Return CQE error if invalid lkey was supplied
  - euler: {CVE-2021-47074} nvme-loop: fix memory leak in nvme_loop_create_ctrl()
  - euler: {CVE-2021-47074} nvme-loop: don't put ctrl on nvme_init_ctrl error
  - euler: {CVE-2021-47078} RDMA/rxe: Clear all QP fields if creation failed
  - euler: {CVE-2023-52522} net: fix possible store tearing in neigh_periodic_work()
  - euler: {CVE-2021-46933} usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear.
  - euler: {CVE-2021-46998} ethernet:enic: Fix a use after free bug in enic_hard_start_xmit
  - euler: {CVE-2021-46984} kyber: fix kabi broken in ->bio_merge()
  - euler: {CVE-2021-46984} kyber: fix out of bounds access when preempted
  - euler: {CVE-2023-52504} x86/alternatives: Disable KASAN in apply_alternatives()
  - euler: {CVE-2021-47020} soundwire: stream: fix memory leak in stream config error path
  - euler: {CVE-2021-47015} bnxt_en: Fix RX consumer index logic in the error path.
  - euler: {CVE-2022-48627} vt: fix memory overlapping when deleting chars in the buffer
  - euler: {CVE-2021-47013} net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send
  - euler: {CVE-2020-36783} i2c: img-scb: fix reference leak when pm_runtime_get_sync fails
  - euler: {CVE-2023-52528} net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
  - euler: {CVE-2023-52566} nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
  - euler: {CVE-2021-46935} binder: fix async_free_space accounting for empty parcels
  - euler: {CVE-2023-52451} powerpc/64s: Fix crashes when toggling entry flush barrier
  - euler: {CVE-2020-36778} i2c: xiic: fix reference leak when pm_runtime_get_sync fails
  - euler: {CVE-2021-47077} scsi: qedf: Add pointer checks in qedf_update_link_speed()
  - euler: {CVE-2021-47024} vsock/virtio: free queued packets when closing socket
  - euler: {CVE-2021-47024} vsock/virtio: discard packets only when socket is really closed
  - euler: {CVE-2021-47024} virtio_vsock: Fix race condition in virtio_transport_recv_pkt
  - euler: {CVE-2021-47034} powerpc/64s: Fix pte update for kernel memory on radix
  - euler: {CVE-2021-46924} NFC: st21nfca: Fix memory leak in device probe and remove
  - euler: {CVE-2023-52510} ieee802154: ca8210: Fix a potential UAF in ca8210_probe
  - euler: {CVE-2023-52476} perf/x86/lbr: Filter vsyscall addresses
  - euler: {CVE-2021-47056} crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init
  - euler: {CVE-2021-46934} i2c: validate user data in compat ioctl
  - euler: {CVE-2024-26600} phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
  - euler: {CVE-2023-52500} scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
  - euler: {CVE-2021-46909} ARM: footbridge: fix PCI interrupt mapping
  - euler: {CVE-2021-46906} HID: usbhid: fix info leak in hid_submit_ctrl
  - euler: {CVE-2023-52477} usb: hub: Guard against accesses to uninitialized BOS descriptors
  - euler: {CVE-2020-36780} i2c: sprd: fix reference leak when pm_runtime_get_sync fails
  - euler: {CVE-2021-47073} platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios
  - euler: {CVE-2024-22099} Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
  - euler: {CVE-2020-36777} media: dvbdev: Fix memory leak in dvb_media_device_free()
  - euler: {CVE-2021-47061} KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU
  - euler: {CVE-2021-46932} Input: appletouch - initialize work before device registration
  - euler: {CVE-2020-36784} i2c: cadence: fix reference leak when pm_runtime_get_sync fails
  - euler: {CVE-2021-47060} KVM: Stop looking for coalesced MMIO zones if the bus is destroyed
  - euler: {CVE-2019-25162} i2c: Fix a potential use after free
  - euler: {CVE-2021-47006} ARM: 9064/1: hw_breakpoint: Do not directly check the event's overflow_handler hook
  - euler: {CVE-2024-1151} net: openvswitch: limit the number of recursions from action sets
  - euler: {CVE-2021-46941} usb: dwc3: core: Do not perform GCTL_CORE_SOFTRESET during bootup
  - euler: {CVE-2021-46941} usb: dwc3: core: balance phy init and exit
  - euler: {CVE-2021-46941} usb: dwc3: core: Do core softreset when switch mode
  - euler: {CVE-2023-52475} Input: powermate - fix use-after-free in powermate_config_complete
  - euler: {CVE-2021-46989} hfsplus: prevent corruption in shrinking truncate
  - euler: {CVE-2021-47054} bus: qcom: Put child node before return
  - euler: {CVE-2021-46955} openvswitch: fix stack OOB read while fragmenting IPv4 packets
  - euler: {CVE-2021-47049} Drivers: hv: vmbus: Use after free in __vmbus_open()
  - euler: {CVE-2024-26602} sched/membarrier: reduce the ability to hammer on sys_membarrier
  - euler: {CVE-2020-36782} i2c: imx-lpi2c: fix reference leak when pm_runtime_get_sync fails
  - euler: {CVE-2020-36782} PM: runtime: Add pm_runtime_resume_and_get to deal with usage counter
  - euler: {CVE-2021-47040} io_uring: fix overflows checks in provide buffers
  - euler: {CVE-2021-46928} parisc: Clear stale IIR value on instruction access rights trap
  - euler: {CVE-2023-52451} powerpc/pseries/memhotplug: Quieten some DLPAR operations
  - euler: {CVE-2023-52469} drivers/amd/pm: fix a use-after-free in kv_parse_power_table
  - euler: {CVE-2024-26606} binder: signal epoll threads of self-work
  - euler: {CVE-2024-26598} KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
  - euler: {CVE-2021-46904} net: hso: fix NULL-deref on disconnect regression
  - euler: {CVE-2021-46904} net: hso: fix null-ptr-deref during tty device unregistration
  - euler: {CVE-2021-46904} usb: hso: check for return value in hso_serial_common_create()
  - euler: {CVE-2024-26595} mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
  - euler: {CVE-2024-26586} mlxsw: spectrum_acl_tcam: Fix stack corruption
  - euler: {CVE-2023-52435} net: Fix compile warning in skb_segment()
  - euler: {CVE-2023-52435} net: prevent mss overflow in skb_segment()
  - euler: {CVE-2023-52436} f2fs: explicitly null-terminate the xattr list
  - euler: arm64/mpam: Fix use-after-free when deleting resource groups
  - euler: arm64/mpam: remove kernfs_get() calls() and add kernfs_put() calls to prevent refcount leak
  - euler: arm64/mpam: Expand the monitor number of the resctrl root
  - euler: dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
  - euler: crypto: scomp - fix req->dst buffer overflow
  - euler: netfilter: nft_compat: reject unused compat flag
  - euler: ppp_async: limit MRU to 64K
  - euler: inet: read sk->sk_family once in inet_recv_error()
  - euler: bonding: remove print in bond_verify_device_path
  - euler: af_unix: fix lockdep positive in sk_diag_dump_icons()
  - euler: net: ipv4: fix a memleak in ip_setup_cork
  - euler: ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
  - euler: virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
  - euler: bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
  - euler: SUNRPC: Fix a suspicious RCU usage warning
  - euler: tcp: Add memory barrier to tcp_push()
  - euler: vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
  - euler: md: Whenassemble the array, consult the superblock of the freshest device
  - euler: jbd2: correct the printing of write_flags in jbd2_write_superblock()
  - euler: of: unittest: Fix of_count_phandle_with_args() expected value message
  - euler: of: unittest: Fix compile in the non-dynamic case
  - euler: of: Fix double free in of_parse_phandle_with_args_map
  - euler: pmdomain: core: Move the unused cleanup to a _sync initcall
  - euler: tick/sched: Preserve number of idle sleeps across CPU hotplug events
  - euler: acpi: property: Let args be NULL in __acpi_node_get_property_reference
  - euler: tick-sched: Fix idle and iowait sleeptime accounting vs CPU hotplug
  - euler: ACPI: LPIT: Avoid u32 multiplication overflow
  - euler: audit: Send netlink ACK before setting connection in auditd_set
  - euler: crypto: scompress - return proper error code for allocation failure
  - euler: x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
  - euler: mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
  - euler: sched: remove wait bookmarks
  - euler: filemap: remove use of wait bookmarks
  - euler: mpam/mpam_ctrlmon: update monitor config with its parent's ctrl_val
  - euler: arm64/mpam: support resctrl fs to show mounting option
  - euler: arm64/mpam: set default feedback of last_cmd_status interface as null string
  - euler: arm64/mpam: Skip updates of unrelated ctrl type
  - euler: Revert "memcg: fix a UAF problem in drain_all_stock()"
  - euler: i2c: hisi: Add clearing tx aempty interrupt operation
  - euler: i2c: hisi: Optimized the value setting of maxwrite limit to fifo depth - 1
  - euler: blk-mq: fix IO hang from sbitmap wakeup race
  - euler: nvme: sanitize metadata bounce buffer for reads
  - uos: Revert "uos: hygon: [newfeature]x86: add hygon family 18h [305235]" [B248835]
  - uos: fix run fs_fill of ltp failed [B249027]
  - uos: locking/osq_lock: Optimize osq_lock performance using per-NUMA
  - Revert "uos: locking/osq_lock: Optimize osq_lock performance using per-NUMA"
  - fix: uos: Add module license for uhdkmod[B248671]


author: caina <caina@uniontech.com> - 4.19.90-2403.3.0.0270.84
changelog:
  - uos: export uld_fcheck_file symbol
  - uos: config: open Motorcomm YT6801 defconfig [T332297]
  - uos: net/yt6801: Add Motorcomm Gigabit network card driver 1.0.27 [T332297]
  - fix: wrong logic when allocating memory in elf module
  - uos: net: update Motorcomm Phy driver to 2.2.26536 [T332295]
  - uos: add uos_fork and uos_cwu
  - stable: {CVE-2023-6270} aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
  - euler: {CVE-2023-52515} RDMA/srp: Do not call scsi_done() from srp_abort()
  - euler: {CVE-2023-52598} s390/ptrace: handle setting of fpc register correctly
  - euler: {CVE-2023-52586} drm/msm/dpu: Add mutex lock in control vblank irq
  - euler: {CVE-2023-52604} FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
  - euler: {CVE-2024-26625} llc: call sock_orphan() at release time
  - euler: {CVE-2023-52583} ceph: fix deadlock or deadcode of misusing dget()
  - euler: {CVE-2023-52606} powerpc/lib: Validate size for vector operations
  - euler: {CVE-2023-52607} powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
  - euler: {CVE-2022-48630} crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ
  - euler: {CVE-2022-48629} crypto: qcom-rng - ensure buffer for generate is completely filled
  - euler: {CVE-2023-52486} drm: Don't unref the same fb many times by mistake due to deadlock handling
  - euler: {CVE-2023-52524} net: nfc: llcp: Add lock when modifying device list
  - euler: {CVE-2023-52502} net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
  - euler: {CVE-2023-52502} nfc: constify several pointers to u8, char and sk_buff
  - euler: {CVE-2023-52507} nfc: nci: assert requested protocol is valid
  - euler: {CVE-2021-46952} NFS: fs_context: validate UDP retrans to prevent shift out-of-bounds
  - euler: {CVE-2021-46926} ALSA: hda: intel-sdw-acpi: harden detection of controller
  - euler: {CVE-2021-46926} soundwire: intel: filter SoundWire controller device search
  - euler: {CVE-2023-52578} net: fix kabi check warning
  - euler: {CVE-2023-52578} net: Fix unwanted sign extension in netdev_stats_to_stats64()
  - euler: {CVE-2023-52578} net: bridge: use DEV_STATS_INC()
  - euler: {CVE-2023-52578} net: add atomic_long_t to net_device_stats fields
  - euler: {CVE-2023-52478} HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect
  - euler: {CVE-2023-52530} wifi: mac80211: fix potential key use-after-free
  - euler: {CVE-2021-47063} drm: bridge/panel: Cleanup connector on bridge detach
  - euler: {CVE-2021-47071} uio_hv_generic: Fix a memory leak in error handling paths
  - euler: {CVE-2021-47076} RDMA/rxe: Return CQE error if invalid lkey was supplied
  - euler: {CVE-2021-47074} nvme-loop: fix memory leak in nvme_loop_create_ctrl()
  - euler: {CVE-2021-47074} nvme-loop: don't put ctrl on nvme_init_ctrl error
  - euler: {CVE-2021-47078} RDMA/rxe: Clear all QP fields if creation failed
  - euler: {CVE-2023-52522} net: fix possible store tearing in neigh_periodic_work()
  - euler: {CVE-2021-46933} usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear.
  - euler: {CVE-2021-46998} ethernet:enic: Fix a use after free bug in enic_hard_start_xmit
  - euler: {CVE-2021-46984} kyber: fix kabi broken in ->bio_merge()
  - euler: {CVE-2021-46984} kyber: fix out of bounds access when preempted
  - euler: {CVE-2023-52504} x86/alternatives: Disable KASAN in apply_alternatives()
  - euler: {CVE-2021-47020} soundwire: stream: fix memory leak in stream config error path
  - euler: {CVE-2021-47015} bnxt_en: Fix RX consumer index logic in the error path.
  - euler: {CVE-2022-48627} vt: fix memory overlapping when deleting chars in the buffer
  - euler: {CVE-2021-47013} net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send
  - euler: {CVE-2020-36783} i2c: img-scb: fix reference leak when pm_runtime_get_sync fails
  - euler: {CVE-2023-52528} net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
  - euler: {CVE-2023-52566} nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
  - euler: {CVE-2021-46935} binder: fix async_free_space accounting for empty parcels
  - euler: {CVE-2023-52451} powerpc/64s: Fix crashes when toggling entry flush barrier
  - euler: {CVE-2020-36778} i2c: xiic: fix reference leak when pm_runtime_get_sync fails
  - euler: {CVE-2021-47077} scsi: qedf: Add pointer checks in qedf_update_link_speed()
  - euler: {CVE-2021-47024} vsock/virtio: free queued packets when closing socket
  - euler: {CVE-2021-47024} vsock/virtio: discard packets only when socket is really closed
  - euler: {CVE-2021-47024} virtio_vsock: Fix race condition in virtio_transport_recv_pkt
  - euler: {CVE-2021-47034} powerpc/64s: Fix pte update for kernel memory on radix
  - euler: {CVE-2021-46924} NFC: st21nfca: Fix memory leak in device probe and remove
  - euler: {CVE-2023-52510} ieee802154: ca8210: Fix a potential UAF in ca8210_probe
  - euler: {CVE-2023-52476} perf/x86/lbr: Filter vsyscall addresses
  - euler: {CVE-2021-47056} crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init
  - euler: {CVE-2021-46934} i2c: validate user data in compat ioctl
  - euler: {CVE-2024-26600} phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
  - euler: {CVE-2023-52500} scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
  - euler: {CVE-2021-46909} ARM: footbridge: fix PCI interrupt mapping
  - euler: {CVE-2021-46906} HID: usbhid: fix info leak in hid_submit_ctrl
  - euler: {CVE-2023-52477} usb: hub: Guard against accesses to uninitialized BOS descriptors
  - euler: {CVE-2020-36780} i2c: sprd: fix reference leak when pm_runtime_get_sync fails
  - euler: {CVE-2021-47073} platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios
  - euler: {CVE-2024-22099} Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
  - euler: {CVE-2020-36777} media: dvbdev: Fix memory leak in dvb_media_device_free()
  - euler: {CVE-2021-47061} KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU
  - euler: {CVE-2021-46932} Input: appletouch - initialize work before device registration
  - euler: {CVE-2020-36784} i2c: cadence: fix reference leak when pm_runtime_get_sync fails
  - euler: {CVE-2021-47060} KVM: Stop looking for coalesced MMIO zones if the bus is destroyed
  - euler: {CVE-2019-25162} i2c: Fix a potential use after free
  - euler: {CVE-2021-47006} ARM: 9064/1: hw_breakpoint: Do not directly check the event's overflow_handler hook
  - euler: {CVE-2024-1151} net: openvswitch: limit the number of recursions from action sets
  - euler: {CVE-2021-46941} usb: dwc3: core: Do not perform GCTL_CORE_SOFTRESET during bootup
  - euler: {CVE-2021-46941} usb: dwc3: core: balance phy init and exit
  - euler: {CVE-2021-46941} usb: dwc3: core: Do core softreset when switch mode
  - euler: {CVE-2023-52475} Input: powermate - fix use-after-free in powermate_config_complete
  - euler: {CVE-2021-46989} hfsplus: prevent corruption in shrinking truncate
  - euler: {CVE-2021-47054} bus: qcom: Put child node before return
  - euler: {CVE-2021-46955} openvswitch: fix stack OOB read while fragmenting IPv4 packets
  - euler: {CVE-2021-47049} Drivers: hv: vmbus: Use after free in __vmbus_open()
  - euler: {CVE-2024-26602} sched/membarrier: reduce the ability to hammer on sys_membarrier
  - euler: {CVE-2020-36782} i2c: imx-lpi2c: fix reference leak when pm_runtime_get_sync fails
  - euler: {CVE-2020-36782} PM: runtime: Add pm_runtime_resume_and_get to deal with usage counter
  - euler: {CVE-2021-47040} io_uring: fix overflows checks in provide buffers
  - euler: {CVE-2021-46928} parisc: Clear stale IIR value on instruction access rights trap
  - euler: {CVE-2023-52451} powerpc/pseries/memhotplug: Quieten some DLPAR operations
  - euler: {CVE-2023-52469} drivers/amd/pm: fix a use-after-free in kv_parse_power_table
  - euler: {CVE-2024-26606} binder: signal epoll threads of self-work
  - euler: {CVE-2024-26598} KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
  - euler: {CVE-2021-46904} net: hso: fix NULL-deref on disconnect regression
  - euler: {CVE-2021-46904} net: hso: fix null-ptr-deref during tty device unregistration
  - euler: {CVE-2021-46904} usb: hso: check for return value in hso_serial_common_create()
  - euler: {CVE-2024-26595} mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
  - euler: {CVE-2024-26586} mlxsw: spectrum_acl_tcam: Fix stack corruption
  - euler: {CVE-2023-52435} net: Fix compile warning in skb_segment()
  - euler: {CVE-2023-52435} net: prevent mss overflow in skb_segment()
  - euler: {CVE-2023-52436} f2fs: explicitly null-terminate the xattr list
  - euler: arm64/mpam: Fix use-after-free when deleting resource groups
  - euler: arm64/mpam: remove kernfs_get() calls() and add kernfs_put() calls to prevent refcount leak
  - euler: arm64/mpam: Expand the monitor number of the resctrl root
  - euler: dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
  - euler: crypto: scomp - fix req->dst buffer overflow
  - euler: netfilter: nft_compat: reject unused compat flag
  - euler: ppp_async: limit MRU to 64K
  - euler: inet: read sk->sk_family once in inet_recv_error()
  - euler: bonding: remove print in bond_verify_device_path
  - euler: af_unix: fix lockdep positive in sk_diag_dump_icons()
  - euler: net: ipv4: fix a memleak in ip_setup_cork
  - euler: ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
  - euler: virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
  - euler: bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
  - euler: SUNRPC: Fix a suspicious RCU usage warning
  - euler: tcp: Add memory barrier to tcp_push()
  - euler: vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
  - euler: md: Whenassemble the array, consult the superblock of the freshest device
  - euler: jbd2: correct the printing of write_flags in jbd2_write_superblock()
  - euler: of: unittest: Fix of_count_phandle_with_args() expected value message
  - euler: of: unittest: Fix compile in the non-dynamic case
  - euler: of: Fix double free in of_parse_phandle_with_args_map
  - euler: pmdomain: core: Move the unused cleanup to a _sync initcall
  - euler: tick/sched: Preserve number of idle sleeps across CPU hotplug events
  - euler: acpi: property: Let args be NULL in __acpi_node_get_property_reference
  - euler: tick-sched: Fix idle and iowait sleeptime accounting vs CPU hotplug
  - euler: ACPI: LPIT: Avoid u32 multiplication overflow
  - euler: audit: Send netlink ACK before setting connection in auditd_set
  - euler: crypto: scompress - return proper error code for allocation failure
  - euler: x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
  - euler: mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
  - euler: sched: remove wait bookmarks
  - euler: filemap: remove use of wait bookmarks
  - euler: mpam/mpam_ctrlmon: update monitor config with its parent's ctrl_val
  - euler: arm64/mpam: support resctrl fs to show mounting option
  - euler: arm64/mpam: set default feedback of last_cmd_status interface as null string
  - euler: arm64/mpam: Skip updates of unrelated ctrl type
  - euler: Revert "memcg: fix a UAF problem in drain_all_stock()"
  - euler: i2c: hisi: Add clearing tx aempty interrupt operation
  - euler: i2c: hisi: Optimized the value setting of maxwrite limit to fifo depth - 1
  - euler: blk-mq: fix IO hang from sbitmap wakeup race
  - euler: nvme: sanitize metadata bounce buffer for reads
  - uos: Revert "uos: hygon: [newfeature]x86: add hygon family 18h [305235]" [B248835]
  - uos: fix run fs_fill of ltp failed [B249027]
  - uos: locking/osq_lock: Optimize osq_lock performance using per-NUMA
  - Revert "uos: locking/osq_lock: Optimize osq_lock performance using per-NUMA"
  - fix: uos: Add module license for uhdkmod[B248671]


author: snoweay <snoweay@163.com> - 2.0.20-15
changelog:
  - Add support for quick kexec
    kexec: Add quick kexec support
    arm64: Quick kexec implementation for arm64


author: GouHao <gouhao@uniontech.com> - 2.0.20-17.up6
changelog:
  - Update source to 2.0.20-17
    patches shouldn't be surrounded by ifarch condition
    Fix bugs on some ft2500
    Fix x86 build error
    Fix kdump failed for FT2500
    add kernel version to release and add buildrequires uname-build-checks


author: pangqing <pangqing@uniontech.com> - 0.3.112-3.2
changelog:
  - Loongarch only supports eventfd2
  - Add endian detection and bit width detection for loongarch 
  - Use generic syscall number schema for loongarch


author: haomimi <haomimi@uniontech.com> - 2.35.2-12.up4.07
changelog:
  - build: sync from anolis
  - build: fix #2142496 - update upstream tests
  - build: fix #2149394 - umount outputs inaccurate error message when umount() fails with EACCES
  - build: fix #2159544 - lslogins "Password is locked" status changed in util-linux-2.32.1-38
  - build: fix #2180413 - Backport hint about systemd daemon-reload


author: Zoltan Fridrich <zfridric@redhat.com> - 2.48-2
changelog:
  - rebase to 2.48
    resolves: rhbz#2032813
  - fix ambient capabilities for non-root users
    resolves: rhbz#1950187


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.1.16-1
changelog:
  - Update to 0.1.16
  - Make inline function __comps_objmrtree_all also static (RhBug:1793424)
  - Fix memory leaks and resource leaks
  - Fix: Check result "comps_parse_parsed_init()"


author: Filip Januš <fjanus@redhat.com> 5.3.28-42
changelog:
  - Apply the previous change only on aarch64 to limit the risk of unwanted impact
  - Resolves: #1992402


author: Liu Xiaoping <lxp01404969@alibaba-inc.com> - 0.63.0-14.0.1
changelog:
  - Disable rhsm support in Anolis (geliwei@openanolis.org)
  - rebrand: fix platform compatibility (geliwei@openanolis.org)


author: panxiaohe <panxiaohe@huawei.com> - 2.1.12-2
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:add debuginfo package and make ELF files stripped
         remove redundant ABI compatibility library


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.40.2-26
changelog:
  - insufficient default memsize to open anaconda default RHEL 8.2 luks device
    resolves: rhbz#1837765


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.40.2-27
changelog:
  - selinux-relabel does not work if SELINUXTYPE != targeted
  - tar-in command does not allow restoring file capabilities
    resolves: rhbz#1384241 rhbz#1828952


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.44.0-4
changelog:
  - Autodetect backing format for qemu-img create -b
  - Move appliance to separate subpackage
  - Read rpm database through librpm
    resolves: rhbz#2013916, rhbz#1989520, rhbz#1836094


author: Liwei Ge <geliwei@openanolis.org> - 1:1.44.0-5.0.1
changelog:
  - Fix build with distro
  - Add REDHAT as compatible distro and anolis info
  - Do not download packages from net


author: Richard W.M. Jones <rjones@redhat.com> - 8.6-1
changelog:
  - Rebase to ntfs-3g 2021.8.22
  - Fixes: CVE-2021-33285, CVE-2021-33286, CVE-2021-33287, CVE-2021-33289,
    CVE-2021-35266, CVE-2021-35267, CVE-2021-35268, CVE-2021-35269,
    CVE-2021-39251, CVE-2021-39252, CVE-2021-39253, CVE-2021-39254
    resolves: rhbz#2004490


author: Cole Robinson <crobinso@redhat.com> - 1.18.0-2
changelog:
  - Fix rdma deps and don't restrict archs
  - Add --disable-werror to fix gcc8 build (bz #1556044)
  - Spec file cleanups (bz #1483290)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 1.18.0-5.el8
changelog:
  - libiscsi-iser_rcv_completion-unify-error-handling.patch [bz#1634541]
  - libiscsi-iser-fix-posting-of-receive-descriptors.patch [bz#1634541]
  - libiscsi-sync-remove-unnecessary-checks.patch [bz#1634541]
  - libiscsi-do-not-warn-for-strncpy.patch [bz#1634541]
  - libiscsi-avoid-fallthrough.patch [bz#1634541]
  - libiscsi-avoid-truncation-when-logging-message-that-includes-.patch [bz#1634541]
  - Resolves: bz#1634541
    (Fix important coverity issues (libiscsi))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> -
changelog:
  - libiscsi-fix-connection-to-LUN-with-IPv6-address.patch [bz#1597942]
  - Resolves: bz#1597942
    (Qemu-kvm fails to connect to iscsi LUN by IPV6 address)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 1.18.0-7.el8
changelog:
  - libiscsi-redhat-Remove-disable-werror-from-spec-file.patch [bz#1581025]
  - Resolves: bz#1581025
    (Remove --disable-werror from spec file)


author: Danilo de Paula <ddepaula@redhat.com> - 1.18.0-8
changelog:
  - Rebuild all virt packages to fix RHEL's upgrade path
  - Resolves: rhbz#1695587
    (Ensure modular RPM upgrade path)


author: zengwefeng <zwfeng@huawei.com> - 3.5.0-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add missing check for NULL return from allocate_rfd
         add include netlink private nl-auto-h header
         use proper int type for id attributes
         add RTNL_LINK_REASM_OVERLAPS stat
         check for null pointer in macvlan
         fix leaking in link msg parser
         fix NLE_NOMEM handling in parse multipath


author: Jeff Moyer <jmoyer@redhat.com> - 1.9-1
changelog:
  - Update to upstream version 1.9
  - get rid of % check, as the builtin tests now require packages we don't ship.
  - Related: rhbz#1780389


author: ZhengZhenyu <zhengzhenyu@openeuler.sh> - 13.12-1
changelog:
  - update: upgrade to 13.12,fix CVE-2023-2455, CVE-2023-2454, CVE-2023-39417, CVE-2023-39418, CVE-2020-21469


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1.4.4-3
changelog:
  - Resolves: rhbz#1919026 libpwquaily rpm requires cracklib to function but RPM missing requirement [updated]


author: Li Qiang <liqiang64@huawei.com> - 1:12.2.8-16
changelog:
  - Synchronize the performance optimization of the pick_a_shard
  - function in the upstream community.


author: Pavla Kratochvilova <pkratoch@redhat.com> - 1.14.2-1
changelog:
  - Update to 1.14.2
  - Reduce time to load metadata
  - Fix resource leaks and memory leaks
  - Remove build dependency on python3-flask


author: Lukas Hrazky <lhrazky@redhat.com> - 1.14.2-4
changelog:
  - Fix termination of va_list in lr_metadatatarget_append_error()
  - Detailed error message when using non-existing TMPDIR


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 3.1-3
changelog:
  - fix heap-use-after-free in cil_yy_switch_to_buffer
  - fix heap-use-after-free in __class_reset_perm_values()
  - fix heap-buffer-overflow in cil_print_recursive_blockinherit


author: Jindrich Novy <jnovy@redhat.com> - 4.3.0-3
changelog:
  - fix static analysis issues merged upstream
    (https://gitlab.freedesktop.org/slirp/libslirp/-/merge_requests/41)
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 4.3.0-4
changelog:
  - fix "CVE-2020-10756 QEMU: slirp: networking out-of-bounds read information disclosure vulnerability"
  - Related: #1821193


author: xinghe <xinghe2@h-partners.com> - 4.11.12-30
changelog:
  - Type:cves
  - CVE:CVE-2022-2127 CVE-2023-34966 CVE-2023-34967
  - SUG:NA
  - DESC:fix CVE-2022-2127 CVE-2023-34966 CVE-2023-34967


author: Norbert Pocs <npocs@redhat.com> - 0.9.6-6
changelog:
  - Enable client and server testing build time
  - Fix failing rekey test on arch s390x
  - Resolves: rhbz#2126342


author: Liwei Ge <liwei.glw@alibaba-inc.com> - 0.9.6-7
changelog:
  - NULL pointer dereference during rekeying with algorithm guessing (CVE-2023-1667)
  - authorization bypass in pki_verify_data_signature (CVE-2023-2283)


author: yuboyun<yuboyun@huawei.com> - 1.9.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix heap-buffer-overflow in _libssh2_ntohu32 and wild-addr-read in _libssh2_ntohu32


author: Xin Long <lxin@redhat.com> - 1.31-4
changelog:
  - teamd: do no remove the ports on shutdown with -N [2148856]
  - teamd: stop iterating callbacks when a loop restart is requested [2148855]


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.7.3-1.20200818git1d392d466a
changelog:
  - Update to v0.7.3 stable, fixes rhbz#1868447
  - (includes "tpm2: fix PCRBelongsTCBGroup for PCClient")


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.7.4-5.20201106git2452a24dab
changelog:
  - Fix CVE-2021-3623: out-of-bounds access when trying to resume the state of the vTPM
    Fixes: rhbz#1976816


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.7.4-6.20201106git2452a24dab
changelog:
  - Fix CVE-2021-3746 libtpms: out-of-bounds access via specially crafted TPM 2 command packets
    Resolves: rhbz#1999307


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-2
changelog:
  - Revert "report error when virProcessGetStatInfo() is unable to parse data" (rhbz#2041610)
  - qemu: fix inactive snapshot revert (rhbz#2043584)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-3
changelog:
  - qemuDomainSetupDisk: Initialize 'targetPaths' (rhbz#2046172)
  - RHEL: Remove <glib-2.64.0 workaround for GSource race (rhbz#2045879)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-4
changelog:
  - qemu_command: Generate memory only after controllers (rhbz#2050697)
  - qemu: Validate domain definition even on migration (rhbz#2050702)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-5
changelog:
  - node_device: Rework udevKludgeStorageType() (rhbz#2056673)
  - node_device: Treat NVMe disks as regular disks (rhbz#2056673)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-5.1.el8
changelog:
  - conf: Introduce memory allocation threads (rhbz#2075569)
  - qemu_capabilities: Detect memory-backend-*.prealloc-threads property (rhbz#2075569)
  - qemu_validate: Validate prealloc threads against qemuCpas (rhbz#2075569)
  - qemu_command: Generate prealloc-threads property (rhbz#2075569)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-5.2.el8
changelog:
  - cpu_map: Disable cpu64-rhel* for host-model and baseline (rhbz#2084030)
  - cputest: Drop some old artificial baseline tests (rhbz#2084030)
  - cputest: Give better names to baseline tests (rhbz#2084030)
  - cputest: Add some real world baseline tests (rhbz#2084030)
  - cpu_x86: Consolidate signature match in x86DecodeUseCandidate (rhbz#2084030)
  - cpu_x86: Refactor feature list comparison in x86DecodeUseCandidate (rhbz#2084030)
  - cpu_x86: Penalize disabled features when computing CPU model (rhbz#2084030)
  - cpu_x86: Ignore enabled features for input models in x86DecodeUseCandidate (rhbz#2084030)


author: Remi Collet <remi@remirepo.net> - 1.3.2-1
changelog:
  - update to 1.3.2
  - drop multilib header hack
  - change URL to https://libzip.org/
  - test suite now ok on all arch


author: Remi Collet <remi@remirepo.net> - 1.5.1-1
changelog:
  - update to 1.5.1
  - drop dependency on zlib-devel and bzip2-devel no more
    referenced in libzip.pc
  - drop rpath patch merged upstream


author: Remi Collet <rcollet@redhat.com> - 1.5.2-1
changelog:
  - update to 1.5.2
  - add all explicit cmake options to ensure openssl is used
    even in local build with other lilbraries available


author: Tomas Bzatek <tbzatek@redhat.com> - 0.32-1
changelog:
  - Upgrade to 0.32 upstream snapshot (#1855766)
  - Fix NVMe device parsing (#1687841, #1845977)
  - Fix WWN string reporting (#1846559)
  - Implement SCSI identifier sort priority (#1846566)


author: Mat Booth <mat.booth@redhat.com> - 0:7.7.0-1
changelog:
  - Update to latest upstream release
  - Drop deprecated uima analyzers sub-package
  - Added nori Korean analyzers sub-package


author: Mat Booth <mat.booth@redhat.com> - 0:8.1.1-3
changelog:
  - Drop spatial, morfologik, replicator, demo and benchmark modules due to missing deps
  - Fix obsoletes when built in minimal mode


author: Gao Xiang <hsiangkao@linux.alibaba.com> - 1.9.4-1
changelog:
  - Update to 1.9.4 in sync with Anolis 23
  - Switch back from Meson since its version is too low on Anolis 8.


author: bzhaoop<bzhaojyathousandy@gmail.com> - 3:10.3.34-1
changelog:
  - Bump version to latest 10.3.34 version
  - For resolving the CVEs, which includes:
  - CVE-2021-46659
  - CVE-2021-46664
  - CVE-2021-46665
  - CVE-2021-46663
  - CVE-2021-46662
  - CVE-2021-46666
  - CVE-2021-46667
  - CVE-2021-46661
  - CVE-2021-46669
  - CVE-2021-46657
  - Above all CVEs needs to bump to the latest version for resolve.
  - Refresh all patches relies on the latest tar package.


author: bzhaoop<bzhaojyathousandy@gmail.com> - 3:10.3.35-1
changelog:
  - Bump version to 10.3.35 for resolving CVEs as below
  - CVE-2022-27379
  - CVE-2022-27386
  - CVE-2022-27447
  - CVE-2022-27448
  - CVE-2022-27449
  - CVE-2022-27445
  - CVE-2022-27456
  - CVE-2022-27458
  - CVE-2022-27452
  - CVE-2022-27376
  - CVE-2022-27378
  - CVE-2022-27377
  - CVE-2022-27381
  - CVE-2022-27383
  - CVE-2022-27380
  - CVE-2022-27384
  - CVE-2022-27387


author: ZhenyuZheng<zheng.zhenyu@outlook.com> - 3:10.3.39-1
changelog:
  - Bump to 10.3.39
  - CVE-2023-5157
  - CVE-2022-47015
  - CVE-2022-38791
  - CVE-2022-0778
  - CVE-2022-32087
  - CVE-2022-32091
  - CVE-2022-32085
  - CVE-2022-32084
  - CVE-2022-32088
  - CVE-2022-32083
  - CVE-2020-28912
  - CVE-2021-2144


author: herengui <herengui@uniontech.com> - 10.5.9-1.up1
changelog:
  - change cmake_build and cmake_install macros to make_build and make_install
  - enable config option to generate mariadb-config for providing /etc/my.cnf file.
  - add -B option to cmake


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 3.0.0-4
changelog:
  - Remove legacy obsoletes/provides
  - Remove dependency on junit-addons
  - Remove build-dependency on maven-invoker-plugin


author: Alex Williamson <alex.williamson@redhat.com> - 0.57-1
changelog:
  - 13f1322e576c ("Remove systemd support")
  - d84a2737e79c ("Fix device udev tagging")
  - 68c92c7beaca ("Tag before generating spec file")
  - c34c4f1ade60 ("Update mdevctl.spec.in for lsmdev.8")
  - ed86d345aae0 ("Fix systemd UUID escaping")
  - d4e83f08161d ("Merge pull request #13 from cpaelzer/fix-lsmdev-man-page")
  - 3c0d285b75ab ("lsmdev - add the alternative name to the man page")


author: Alex Williamson <alex.williamson@redhat.com> - 0.61-1
changelog:
  - d7dfac5f5bfb ("Merge pull request #15 from cohuck/attr_sanity")
  - 28a9fa17b51e ("validate attribute names")


author: chengguipeng <chengguipeng11@huawei.com> - 8.3.0-14
changelog:
  - BuildRequires:add libglvnd-devel, libXext-devel and remove mesa-libGLES-devel to solve compilation failture.


author: Mat Booth <mat.booth@redhat.com> - 2.23.9-1
changelog:
  - Update to latest upstream version
  - Switch to maven build system using a custom pom to avoid a dep on gradle


author: Jakub Hrozek <jhrozek@redhat.com> - 2.3.7-5
changelog:
  - Resolves: rhbz#1805749 - CVE-2019-14857 mod_auth_openidc:2.3/mod_auth_openidc:
                             Open redirect in logout url when using URLs with
                             leading slashes
  - Resolves: rhbz#1805068 - CVE-2019-20479 mod_auth_openidc:2.3/mod_auth_openidc:
                             open redirect issue exists in URLs with slash and
                             backslash


author: Jakub Hrozek <jhrozek@redhat.com> - 2.3.7-6
changelog:
  - Fix the previous backport
  - Related: rhbz#1805749 - CVE-2019-14857 mod_auth_openidc:2.3/mod_auth_openidc:
                            Open redirect in logout url when using URLs with
                            leading slashes
  - Related: rhbz#1805068 - CVE-2019-20479 mod_auth_openidc:2.3/mod_auth_openidc:
                            open redirect issue exists in URLs with slash and
                            backslash


author: Jakub Hrozek <jhrozek@redhat.com> - 2.3.7-7
changelog:
  - Resolves: rhbz#1897992 - OIDCStateInputHeaders &
                             OIDCStateMaxNumberOfCookies in existing
                             mod_auth_openidc version
  - Backport the OIDCStateMaxNumberOfCookies option
  - Configure which header value is used to calculate the fingerprint of
    the auth state


author: Jakub Hrozek <jhrozek@redhat.com> - 2.3.7-8
changelog:
  - Resolves: rhbz#1823756 - Backport SameSite=None cookie from
                             mod_auth_openidc upstream to support latest browsers


author: Lubos Uhliarik <luhliari@redhat.com> - 1.11.3-3
changelog:
  - Resolves: #1744999 - CVE-2019-9511 httpd:2.4/mod_http2: HTTP/2: large amount
    of data request leads to denial of service
  - Resolves: #1745086 - CVE-2019-9516 httpd:2.4/mod_http2: HTTP/2: 0-length
    headers leads to denial of service
  - Resolves: #1745154 - CVE-2019-9517 httpd:2.4/mod_http2: HTTP/2: request for
    large response leads to denial of service


author: Lubos Uhliarik <luhliari@redhat.com> - 1.15.7-1
changelog:
  - new version 1.15.7
  - Resolves: #1814236 - RFE: mod_http2 rebase 
  - Resolves: #1747289 - CVE-2019-10082 httpd:2.4/mod_http2: httpd: 
    read-after-free in h2 connection shutdown
  - Resolves: #1696099 - CVE-2019-0197 httpd:2.4/mod_http2: httpd: 
    mod_http2: possible crash on late upgrade
  - Resolves: #1696094 - CVE-2019-0196 httpd:2.4/mod_http2: httpd:
    mod_http2: read-after-free on a string compare
  - Resolves: #1677591 - CVE-2018-17189 httpd:2.4/mod_http2: httpd: 
    mod_http2: DoS via slow, unneeded request bodies


author: Lubos Uhliarik <luhliari@redhat.com> - 1.15.7-2
changelog:
  - Resolves: #1869073 - CVE-2020-9490 httpd:2.4/mod_http2: httpd: 
    Push diary crash on specifically crafted HTTP/2 header


author: Lubos Uhliarik <luhliari@redhat.com> - 1:2.0.8-8
changelog:
  - Resolves: #1832844 - mod_md does not work with ACME server that does not
    provide keyChange or revokeCert resources


author: mskalick@redhat.com - 3.6.3-0.2.gite657a1d
changelog:
  - Update to latest commit from v3.6 upstream branch (will became r3.6.4-rc1 release)
  - Rebase to Fedora commit e48cd06


author: mskalick@redhat.com - 3.6.4-0.1.gite657a1d
changelog:
  - Change version to 3.6.4 - still used latest sources from v3.6 branch
    (to support openssl 1.1.0 and new go compiler)


author: herengui <herengui@uniontech.com> - 3.6.8-1.up1
changelog:
  - remove systemd_postun macro, UnionTech does not support this one
  - add systemd_post to post section.
  - add patch to fix build issue: #698152


author: Michal Schorm <mschorm@redhat.com> - 1.0.1-1
changelog:
  - Rebase to 1.0.1 release
    This release is just a sync-up with upstream selinux-policy
  - URL changed to a new upstream repository


author: zengwefeng<zwfeng@huawei.com> - 0.9.6-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:enable check while building
         parser_bison memleak symbol redefinition
         segtree memleaks in interval_map_decompose
         json Combining terse with json has no effect
         evaluate Reject quoted strings containing only wildcard
         Solves Bug 1462 nft j list set does not show counters
         json Fix memleak in set_dtype_json
         mnl reply netlink error message might be larger than MNL_SOCKET_BUFFER_SIZE


author: gaihuiying <gaihuiying1@huawei.com> - 0.9.6-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:evaluate disallow ct original s d ddr from maps
         evaluate disallow ct original s d ddr from concatena


author: huangyu <huangyu106@huawei.com> - 1:0.9.6-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:parser_json fix device parsing in netdev family
  src don't parse string as verdict in map


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.14.1-9
changelog:
  - Resolves: #1744811 - CVE-2019-9511 nginx:1.14/nginx: HTTP/2: large amount of
    data request leads to denial of service
  - Resolves: #1744325 - CVE-2019-9513 nginx:1.14/nginx: HTTP/2: flood using
    PRIORITY frames resulting in excessive resource consumption
  - Resolves: #1745094 - CVE-2019-9516 nginx:1.14/nginx: HTTP/2: 0-length
    headers leads to denial of service


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.16.1-1
changelog:
  - update to 1.16.1
  - Resolves: #1745697 - CVE-2019-9511 nginx:1.16/nginx: HTTP/2: large amount
    of data request leads to denial of service
  - Resolves: #1745690 - CVE-2019-9513 nginx:1.16/nginx: HTTP/2: flood using
    PRIORITY frames resulting in excessive resource consumption
  - Resolves: #1745645 - CVE-2019-9516 nginx:1.16/nginx: HTTP/2: 0-length
    headers leads to denial of service


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.16.1-2
changelog:
  - Resolves: #1798230 - CVE-2019-20372 nginx:1.16/nginx: HTTP request smuggling
    via error pages in http/ngx_http_special_response.c


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.16.1-2.1
changelog:
  - Resolves: #1963174 - CVE-2021-23017 nginx:1.16/nginx: Off-by-one in
    ngx_resolver_copy() when labels are followed by a pointer to a root
    domain name


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.18.0-2
changelog:
  - new version 1.18.0
  - Resolves: #1668717 - [RFE] Support loading certificates from hardware token
    (PKCS#11)
  - Increased types_hash_max_size to 4096 in default config
  - Drop location / from default config (rhbz#1564768)
  - Drop default_sever from default config (rhbz#1373822)


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.18.0-3
changelog:
  - Resolves: #1651377 - centralizing default index.html on nginx
  - Resolves: #1825683 - Outdated Red Hat branding used in nginx default pages


author: Felix Kaechele <heffer@fedoraproject.org> - 1:1.21.5-2
changelog:
  - switch to PCRE2
  - drop unnecessary pcre and openssl Requires, these are pulled in through
    RPM's library dependency tracking


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:10.21.0-1
changelog:
  - Security update to 10.21.0
  - Resolves: RHBZ#1845307
  - Fixes CVE-2020-11080, CVE-2020-8174, CVE-2020-10531
  - Bundle brotli, because --shared-brotli configure option is missing
  - Add i18n subpackage


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:10.23.1-1
changelog:
  - January Security release
  - https://nodejs.org/en/blog/vulnerability/january-2021-security-releases/
  - Rebase to 10.23.1
  - Resolves: RHBZ#1916461, RHBZ#1914789
  - Resolves: RHBZ#1914783, RHBZ#1916462, RHBZ#1916395, RHBZ#1916459
  - Resolves: RHBZ#1916691, RHBZ#1916689, RHBZ#1916388
  - Remove dot-prop patch, as it is fixed by npm rebase


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:10.24.0-1
changelog:
  - Resolves: RHBZ#1932373, RHBZ#1932426
  - Resolves CVE-2021-22883 and CVE-2021-22884
  - remove -debug-nghttp2 flag (1930775)
  - remove ini patch merged upstream


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.19.1-1
changelog:
  - Resolves: RHBZ#1901044, #1901045, #1901046, #1901047
  - c-ares, ajv and y18n CVEs and yarn installability issues


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.20.1-1
changelog:
  - Security rebase for January security release
  - https://nodejs.org/en/blog/vulnerability/january-2021-security-releases/
  - Resolves: RHBZ#1916460, RHBZ#1914786
  - Resolves: RHBZ#1914784, RHBZ#1916396


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.21.0-1
changelog:
  - Resolves: RHBZ#1932315, RHBZ#1932424
  - remove --debug-nghttp2 option
  - remove ini patch
  - Backport patch to use getauxval


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:14.15.4-1
changelog:
  - Security rebase to 14.15.4
  - https://nodejs.org/en/blog/vulnerability/january-2021-security-releases/
  - Resolves: RHBZ#1916463, RHBZ#1914788
  - Resolves: RHBZ#1914785, RHBZ#1916387, RHBZ#1916389, RHBZ#1916390, RHBZ#1916690


author: obd 1.3.3
changelog:
  - new features: change repository for a deployed component
   - fix bug: check kernel version when autdeploy obproxy


author: obd 1.5.0
changelog:
  - new features: obd cluster reinstall
   - new features: obd tool
   - new features: support rsync
   - new keyword: include
   - more option: obd test mysqltest


author: obd 1.6.0
changelog:
  - new features: support oceanbase 4.0
   - new features: support Prometheus
   - new features: support Grafana
   - new features: obd demo


author: obd 1.6.1
changelog:
  - new features: minimum startup resource check
   - fix bug: grafana dashboard title
   - fix bug: autodeploy maybe failed in the case of large memory and small disk
   - fix bug: obproxy frequent core dump in demo
   - fix bug: remote install rsync transmission does not use the user.port


author: obd 2.0.0
changelog:
  - new features: obd web
   - new features: obd display-trace
   - new features: obd cluster tenant show
   - new features: obd mirror add-repo
   - new features: new option "--generate-consistent-config/--gcc" for autdeploy
   - new features: support ocp-express
   - new features: support obagent V1.3.0
   - new features: support oceanbase-ce V4.1.0
   - bug fix: start when system_memory is greater than memory_limit
   - bug fix: Table 'TEST.LINEITEM' doesn't exist in obd tpch test


author: obd 2.0.1
changelog:
  - new features: support ocp-express reinstall
   - bug fix: exit code is not 0 when obd test tpcc
   - bug fix: tpcc test failed when the obproxy ce component is not included in the deployment


author: obd 2.1.0
changelog:
  - new features: support oceanbase-ce V4.0 upgrade
   - new features: support ocp-express V1.0.1
   - new features: support oceanbase-diagnostic-tool
   - new features: random password when password is empty
   - new features: obd web support English


author: obd 2.1.1
changelog:
  - new features: support upgrade keyword 'when_come_from' and 'deprecated'
   - fix bug: start server failed when other servers downtime #171
   - fix bug: The signed '%' password causes a stack overflow in the upgrade plugin
   - fix bug: system_memory check failed when memory_limit is 0
   - fix bug: xtend ocp-express meta ob connect time


author: Mat Booth <mat.booth@redhat.com> - 6.1.1-1
changelog:
  - Update to latest upstream relase for Java 10 support
  - Switch to maven build
  - Now executing test suites


author: Jindrich Novy <jnovy@redhat.com> - 1.2.1-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.1
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.2.1-1
changelog:
  - update to
    https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.1
  - require crun >= 0.17
  - Related: #1883490


author: Dan Walsh <dwalsh@redhat.com> - 1:0.1.15-1.git
changelog:
  - Fix issue with oci-systemd-hook running in user namespaces
  - fix json file to run container with proper stage field.


author: Dan Walsh <dwalsh@redhat.com> - 2:2.2.0-2.git0a4dcd6
changelog:
  * Thu Sep 21 2017 Dan Walsh <dwalsh@redhat.com> - 2:2.2.0-2.git0a4dcd6
  - Add support for multiple configuration files.
    oci-umount will still read config file /etc/oci-umount.conf if it
    exists, but will also read config files in /usr/share/oci-umount/oci-umount.d
    and config files in /etc/oci-umount/oci-umount.d.  If the same file name exists
    in both directories, then oci-umount will only use the content in /ect/oci-umount/oci-umount.d.
  - Make Logs less noisy
  - Improve logs output, adding containier id, and needed file information
  - Add support for specifying submounts PATH/* will unmount all mountpoints 
    under PATH in a container
  - Support for oci configuration files to specify when to run the plugin


author: haowenchao <haowenchao@huawei.com> - 2.1.1-8
changelog:
  - backport one patch for solving install problem, sync from branch openEuler-20.09
    which commit id is 81fd136


author: Wenchao Hao <haowenchao@huawei.com> - 0.100-7
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-Fix-the-issue-of-ignoring-the-return-value.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-Fix-compiler-issue-when-not-in-security-mode.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-Fix-586-compile-issue-and-remove-Werror.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-Do-not-install-isnsd.socket-in-isnsd.service.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-libisns-remove-sighold-and-sigrelse.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0006-isnsadm-Fix-unparse-command-line-options-V-and-r.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0007-isnsd-socket-Make-sure-to-create-IPv6-socket-default.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: liuyumeng <liuyumeng5@huawei.com> - 2.3.1-6
changelog:
  - fix CVE-2020-8112 CVE-2020-6851 CVE-2020-27823 CVE-2020-27824,avoid integer overflow:pre-patch of CVE-2020-27841,fix fuzz


author: xiongyi<xiongyi@uniontech.com> - 8.2p1-21.up1.04
changelog:
  - feat: backport patch add support for SMx
  - DESC: fix bug sm2-sm3 kex function to delete patch openssh-8.0p1-openssl-kdf


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:1.1.1k-9
changelog:
  - Fixed Timing Oracle in RSA Decryption
    Resolves: CVE-2022-4304
  - Fixed Double free after calling PEM_read_bio_ex
    Resolves: CVE-2022-4450
  - Fixed Use-after-free following BIO_new_NDEF
    Resolves: CVE-2023-0215
  - Fixed X.400 address type confusion in X.509 GeneralName
    Resolves: CVE-2023-0286


author: wulei <wulei80@huawei.com> - 2020.4-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Do not run testcase test-libarchive-import, because selinux is off.


author: panchenbo <panchenbo@uniontech.com> - 1.4.0-11.up4
changelog:
  - add root password check rule
    change the password of non-root user, enter a blank password, and prompt that it is not translated
    update zh_CN translate
    add root password check rule use libpwquality,revert dc163ab27466e45ce89848726b364bc942ef919e


author: yangfei <yangfei@uniontech.com> - 1.4.0-11.up7
changelog:
  - fix:error messages caused by authentication errors(bugid:241733) (bugid:188013)
    correct-translation-error(bugid:241531)


author: Nathan Scott <nathans@redhat.com> - 0.4.0-5
changelog:
  - Use RPM macros to ease dropwizard metrics enablement.
  - Correct the dependency on systems.uom:systems-unicode-java8


author: Michal Hlavinka <mhlavink@redhat.com> - 3.7.0-1
changelog:
  - pciutils updated to 3.7.0, add support for basic DVSEC and CXL DVSEC (#1856436)
  - add support for RCEC Associated Endpoint (#1856440)


author: yangmingtai <yangmingtai@huawei.com> - 10.35-4
changelog:
  - DESC:sync community patches
         backport-jit-fail-early-in-ffcps_-if-subject-shorter-than-off.patch
         backport-jit-fix-pcre2_jit_free_unused_memory-if-sljit-not-us.patch


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.26.3-417
changelog:
  - Fix Time-Local tests to pass after year 2019 (bug #1807120)
  - Run-require perl(Encode) by perl-libs (bug #1903503)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.26.3-419
changelog:
  - Fix CVE-2020-10543 (bug #1839273)
  - Fix CVE-2020-10878 (bug #1839276)
  - Fix a file mode of a perl-example.stp example (bug #1913693)


author: Petr Pisar <ppisar@redhat.com> - 4:5.30.1-451
changelog:
  - Fix CVE-2020-10543 (an integer overflow from nested regex quantifiers)
    (bug #1837975)
  - Fix CVE-2020-10878 (a corruption of a state of a compiled regular expression
    due to an integer overflow) (bug #1837988)
  - Fix CVE-2020-12723 (a corruption of a state of a compiled regular expression
    due to recursive calls) (bug #1838000)


author: Petr Pisar <ppisar@redhat.com> - 0.12-13
changelog:
  - Remove perl-CPAN-DistnameInfo RPM package from perl-App-cpanminus module with
    perl:5.30 (bug #1713592)


author: Paul Howarth <paul@city-fan.org> - 2.150010-1
changelog:
  - Update to 2.150010
    Added:
    - Merged Parse::CPAN::Meta 1.4420 into this distribution
    Fixed:
    - CPAN::Meta::Prereqs now fully accepts phases and types starting with 'x_';
      new 'phases' and 'types_in' interfaces have been added
    - No longer relies on JSON backend for data structure cloning; this is much
      faster than using JSON::PP
    - The cloning routine would raise an error on expected types when it
      previously would stringify; the old behavior is restored
    - Fixed used of Encode in Parse::CPAN::Meta::load_json_string (cherry picked
      from Parse::CPAN::Meta 1.4422)
    - Added "use warnings" to Parse::CPAN::Meta
    - The YAML and JSON backend variables are ignored when building/testing the
      perl core itself, where non-core backends are not yet installed
    Tests:
    - The 'extra_mappings' feature for meta merging is now tested and documented
    - During tests, delete new environment variables added by Parse::CPAN::Meta
      1.4418
    Spec:
    - Clarifies acceptable values for booleans
    - Cleaned up text and links of historical specs
  - Obsolete old perl-Parse-CPAN-Meta package
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 2.140-7
changelog:
  - Introduce build-condition for optional tests
  - Simplify find command using -delete
  - Switch to hunspell for spell check


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.54-6
changelog:
  - Adjust to sqlite-3.22.0 (bug #1543286)
  - Add new index constraint ops introduced in SQLite 3.21.0 to PerlData


author: Paul Howarth <paul@city-fan.org> - 0.110-1
changelog:
  - Update to 0.110
    - Major optimization to mkopt
  - Use %license
  - Simplify find expression using -delete


author: Petr Pisar <ppisar@redhat.com> - 2.12-367
changelog:
  - Fix CVE-2017-6512 (setting arbitrary mode on an arbitrary file in rmtree()
    and remove_tree()) (bug #1457834)


author: Paul Howarth <paul@city-fan.org> - 1:0.98-1
changelog:
  - Update to 0.98
    - Added wait_loop_callback for run_forked()
    - Only search in curdir in can_run() when on Win32 (CPAN RT#105601)
  - Drop redundant Group: tag


author: Paul Howarth <paul@city-fan.org> - 1.25-12
changelog:
  - Drop EL-5 support
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section
  - Introduce build-condition for optional tests
  - Use %license where possible
  - Simplify find command using -delete
  - Classify buildreqs by usage


author: Paul Howarth <paul@city-fan.org> - 2.93000-1
changelog:
  - Update to 2.93
    - Changed the number detection logic (experimental)
    - Correct 0 handling (GH#23)
    - Removed base.pm dependency (GH#5)
    - Fixed wrong character offset (CPAN RT#116998)
    - Address VAX issues (CPAN RT#118469)
    - Various documentation fixes
    - Remove . in @INC in json_pp (GH#25, CVE-2016-1238)
    - Removed $VAR1 from json_pp output (GH#11)
    - Fixed an issue to ignore trailing 0 (GH#29)
    - Added Scalar::Util dependency for Perl 5.8+ (CPAN RT#84347)
    - Fixed issues spotted by Nicolas Seriot's JSON Test Suite including
      experimental UTF-16/32 support and backward incompatible change of
      C style comment handling (now disabled by default) (GH#28)
    - Moved the guts of JSON::PP::Boolean into lib/JSON/PP/Boolean.pm and gave
      it a proper version
    - Refactored incremental parser to let it handle incomplete JSON text
      properly
    - Imported and tweaked tests from JSON.pm
    - Minor code clean up
    - Fixed not to fail tests under Perl 5.25.* (CPAN RT#119114)
    - Reworked documentation, based on the one for JSON::XS
    - Let json_pp utility show the version of JSON::PP
    - Fix loading order of B module (GH#31)
    - Fixed isa tests for bignum
  - This release by ISHIGAKI → update source URL
  - Use five-digit version number for rpm to maintain upgrade path
  - Drop EL-5 support
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section


author: Paul Howarth <paul@city-fan.org> - 1:4.00-1
changelog:
  - Update to 4.00
    - BACKWARD INCOMPATIBILITY: As JSON::XS 4.0 changed its policy and enabled
      allow_nonref by default, JSON::PP also enabled allow_nonref by default
    - Implement allow_tags that was introduced by JSON::XS 3.0
    - Add boolean_values that was introduced by JSON::XS 4.0
    - Allow literal tags in strings in relaxed mode, as JSON::XS 3.02 does
    - Allow PERL_JSON_PP_USE_B environmental variable to restore old number
      detection behavior for compatibility
    - Various documentation updates
  - Drop provides filter, no longer needed


author: Paul Howarth <paul@city-fan.org> - 0.13-1
changelog:
  - Update to 0.13
    - Don't run pod tests on user installs
    - Stop using Module::Install to fix installation when @INC doesn't have the
      current directory (CPAN RT#119016)
    - Repository migrated to the github moose organization
  - This release by HAARG → update source URL
  - Simplify find command using -delete


author: Jitka Plesnikova <jplesnik@redhat.com> - 1:1.9998.11-6
changelog:
  - Document Math::BigInt::CalcEmu requires Math::BigInt (bug #1689912) 
    - Petr Pisar <ppisar@redhat.com>
  - Rebuild with enable hardening (bug #1636329)


author: Paul Howarth <paul@city-fan.org> - 0.70-1
changelog:
  - Update to 0.70
    - Protect ourselves from Module::Metadata parsing problems (CPAN RT#130939)
  - Use author-independent source URL
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 1.000035-1
changelog:
  - Update to 1.000035
    - Fix how relative paths are absolutized, so they work properly on MSWin32
      (GH#24)
    - Quieten noisy tests (GH#31)


author: Paul Howarth <paul@city-fan.org> - 1.84-1
changelog:
  - Update to 1.84
    - Fixed an error in t/local/04_basic.t causing a test failure if
      Test::Exception not installed


author: Paul Howarth <paul@city-fan.org> - 1.85-1
changelog:
  - Update to 1.85
    - Preparations for transferring maintenace to a new maintainer
    - Fixed test failure in t/local/33_x509_create_cert.t for some versions of
      OpenSSL
    - Fixed free() error that causes "Free to wrong pool ..." message on Windows


author: Petr Pisar <ppisar@redhat.com> - 1.85-3
changelog:
  - Adapt to OpenSSL 1.1.1 (bug #1610376)
  - Adapt tests to system-wide crypto policy (bug #1610376)
  - Adapt tests to security level 2 system-wide crypt policy (bug #1610376)


author: Petr Pisar <ppisar@redhat.com> - 1.85-5
changelog:
  - Revert retry in Net::SSLeay::{read,write}() (bug #1610376)
  - Revert retry in Net::SSLeay::write_partial() (bug #1610376)


author: Paul Howarth <paul@city-fan.org> - 1.010-1
changelog:
  - Update to 1.010
    - Added 'msys' as a Unix-type OS
  - BR: perl-generators where available
  - Simplify find command using -delete
  - Update patches as needed


author: Paul Howarth <paul@city-fan.org> - 1.010-4
changelog:
  - Drop EL-5 support
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section
    - Drop workaround for building with Test::More < 0.88
    - Spell checker is always hunspell now
  - Introduce build-condition for optional tests


author: Petr Pisar <ppisar@redhat.com> - 3.28-2
changelog:
  - Introduce a build-condition on groff
  - Rename a _without_tk build-condition to
    _without_perl_Pod_Perldoc_enables_tk_test


author: Paul Howarth <paul@city-fan.org> - 0.103013-1
changelog:
  - Update to 0.103013
    - guess_license_from_pod() now knows about Software::License::CC0_1_0
    - Enable "v" as a version word
    - Improve FreeBSD (2-Clause) phrases
    - Added EUPL v1.1 and v1.2
  - This release by LEONT → update source URL
  - Drop EL-5 support
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section
    - Drop workaround for building with Test::More < 0.88


author: Paul Howarth <paul@city-fan.org> - 0.103014-1
changelog:
  - Update to 0.103014
    - Added SPDX license expression support
  - This release by LEONT → update source URL


author: Paul Howarth <paul@city-fan.org> - 0.987-15
changelog:
  - Drop some support for older distributions
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section
    - Drop workarounds for building with Test::More < 0.94


author: Paul Howarth <paul@city-fan.org> - 0.89-1
changelog:
  - Update to 0.89
    - Require Test::More ≥ 0.88 (GH#19)
    - Support the use of plain 'use Test::Base' without any tests (GH#21)
  - Classify buildreqs by usage
  - Drop legacy Group: tag
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 1.122-1
changelog:
  - Update to 1.122
    - Added $Test::Deep::LeafWrapper to control the behavior of simple values in
      the "expected" definition
    - Documentation improvements
    - Avoid a few evals, localize $@ in a few places where eval is used
    - Goodbye tabs, hello spaces
  - BR: perl-generators
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 1.123-1
changelog:
  - Update to 1.123
    - Remove test suite reliance on "." appearing @INC
    - When an object with stringification overloading fails to match a "re" test,
      its stringification is included in the diagnostics


author: Paul Howarth <paul@city-fan.org> - 1.124-1
changelog:
  - Update to 1.124
    - Avoid an uninitialized warning when array_each() compares to a
      non-reference


author: Paul Howarth <paul@city-fan.org> - 1.126-1
changelog:
  - Update to 1.126
    - If objects in the "expected" structure have an as_test_deep_cmp method, it
      will be called and its return (which should be a Test::Deep::Cmp object)
      will be used as the test for that location in the structure
    - Internal undocumented class_base routine has been replaced with a
      different, clearly private routine
    - The LeafWrapper is also used for objects with an unknown reftype (like
      LVALUE or other weird ones)


author: Paul Howarth <paul@city-fan.org> - 1.127-1
changelog:
  - Update to 1.127
    - Do not eagerly convert simple scalars into tests in the all, any and none
      tests; this was breaking LeafWrapper application
  - Drop EL-5-isms
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section


author: Paul Howarth <paul@city-fan.org> - 1.302083-1
changelog:
  - Update to 1.302083
    - Fixes for '. in @INC' changes (#768)
    - Timeout when waiting for child procs and threads (#765)
    - Fix SIGSYS localization issue (#758)
    - Fix outdated docs (#759, #754)
    - Fix bail-out in buffered subtest (#747)
    - Fix threads timeout for older perls (as best we can)
    - Fix test that incorrectly called private function as method
    - Update some breakage info for Test::More::Prefix and
      Test::DBIx::Class::Schema


author: Paul Howarth <paul@city-fan.org> - 1.302085-1
changelog:
  - Update to 1.302085
    - Better IO management
    - Allow access to the STDERR/STDOUT Test2::API uses
    - Formatters should use the Test2::API handles


author: Paul Howarth <paul@city-fan.org> - 2:1.302164-1
changelog:
  - Update to 1.302164
    - Do not use threads::shared in Test::Tester::Capture (GH#826)
    - Add missing version info to Info/Table
    - Fix event in global destruction bug (GH#827)
    - Proper fix for todo = '' (GH#812, GH#829)
  - Modernize spec using %{make_build} and %{make_install}
  - Drop obsoletes/provides for perl-Test2 dating back to Fedora 25


author: Paul Howarth <paul@city-fan.org> - 3:1.302166-1
changelog:
  - Update to 1.302166
    - Better diagnostics when a context is destroyed unexpectedly
    - Add an event to notify when END phase starts


author: Paul Howarth <paul@city-fan.org> - 3:1.302168-1
changelog:
  - Update to 1.302168
    - Fix typo in a Test2::API::Breakage warning
    - Delay loading of Term::Table until needed


author: Paul Howarth <paul@city-fan.org> - 3:1.302169-1
changelog:
  - Update to 1.302169
    - Update inlined Object::HashBase
    - Avoid 'used only once' warnings in BEGIN and END blocks


author: Paul Howarth <paul@city-fan.org> - 0.29-1
changelog:
  - Update to 0.29
    - Skip tests of "when" and "given/when" usage for perl 5.27.7 *only*
      (see CPAN RT#123908)


author: Paul Howarth <paul@city-fan.org> - 1.20-1
changelog:
  - Update to 1.20
   - Allow quoted map keys in arrays (GH#146)
   - B::Deparse is loaded at runtime now
   - New feature $YAML::Preserve (GH#9)
  - This release by INGY → update source URL


author: Paul Howarth <paul@city-fan.org> - 1.21-1
changelog:
  - Update to 1.21
    - Declare variables with our() to avoid warnings (GH#109, GH#171)
    - Empty mapping value at the end resolves to null (was becoming empty string)
      (GH#131, GH#170)
    - Output key in warning when duplicate key was found (GH#119, GH#169)
    - Allow reading and writing to IO::Handle (GH#157, GH#168)


author: Paul Howarth <paul@city-fan.org> - 1.24-1
changelog:
  - Update to 1.24
    - Fix $LoadCode (GH#180, GH#181, GH#182)
  - This release by TINITA → update source URL
  - Drop redundant Group: tag


author: Petr Pisar <ppisar@redhat.com> - 1.10-5
changelog:
  - perl dependency renamed to perl-interpreter
    <https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules>


author: Petr Pisar <ppisar@redhat.com> - 3.10-2
changelog:
  - Net::libnetFAQ document replaced with a hyper link because of the Artistic
    license (CPAN RT#117888)


author: Paul Howarth <paul@city-fan.org> - 1:0.236-1
changelog:
  - Update to 0.236
    - Add Travis test configuration
    - Make test for PMC availability more reliable
    - Disable benchmark test rt62341.t as it runs out of memory on many smoker
      systems (CPAN RT#118310)
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 1:0.237-1
changelog:
  - Update to 0.237
    - Don't load vars.pm (CPAN RT#132077)
  - Drop legacy Group: tag
  - Drop buildroot cleaning in %install section


author: Petr Pisar <ppisar@redhat.com> - 4.09-3
changelog:
  - Fix pod2man and pod2text error messages when standard input is empty
  - Fix layers detection on output file handle (CPAN RT#122521)


author: Petr Pisar <ppisar@redhat.com> - 6:0.99.18-7
changelog:
  - Remove useless build-time dependency on ExtUtils::CBuilder
  - Fix documentation about numify() and stringify() trailing zeros
    (CPAN RT#64635, CPAN RT#122858)


author: Remi Collet <rcollet@redhat.com> - 7.2.7-1
changelog:
  - Update to 7.2.7 - http://www.php.net/releases/7_2_7.php
  - drop -mstackrealign option, workaround to #1593144


author: Remi Collet <rcollet@redhat.com> - 7.4.6-1
changelog:
  - update to 7.4.6
  - add ffi extension
  - add /usr/share/php/preload as default ffi.preload configuration
  - run FPM tests
  - set opcache.enable_cli in provided default configuration
  - ensure all shared extensions can be loaded
  - drop wddx, recode and extensions
  - run test suite using 4 concurrent workers


author: Remi Collet <rcollet@redhat.com> - 1:1.10.12-1
changelog:
  - update PEAR to 1.10.12
  - update Archive_Tar to 1.4.9
  - update Console_Getopt to 1.4.3
  - update XML_Util to 1.4.5


author: Coty Sutherland <csutherl@redhat.com> - 1:9.0.7-14
changelog:
  - Update to JWS 5.0.2 distribution
  - Resolves: rhbz#1658846 CVE-2018-8034 pki-servlet-container: tomcat: host name verification missing in WebSocket client
  - Resolves: rhbz#1579614 CVE-2018-8014 pki-servlet-container: tomcat: Insecure defaults in CORS filter enable 'supportsCredentials' for all origins
  - Resolves: rhbz#1619232 - CVE-2018-8037 pki-servlet-container: tomcat: Due to a mishandling of close in NIO/NIO2 connectors user sessions can get mixed up
  - Resolves: rhbz#1641874 - CVE-2018-11784 pki-servlet-container: tomcat: Open redirect in default servlet


author: Coty Sutherland <csutherl@redhat.com> - 1:9.0.30-1
changelog:
  - Resolves: rhbz#1721684 Rebase pki-servlet-engine to 9.0.30
  - Update to JWS 5.3.0 distribution
  - Remove new dependencies that PKI doesn't need (and are not provided by RHEL 8)


author: Jindrich Novy <jnovy@redhat.com> - 1.0.0-4.git921f98f
changelog:
  - fix "CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process"
  - Resolves: #1818122


author: Jindrich Novy <jnovy@redhat.com> - 1.0.0-8.git921f98f
changelog:
  - fix "podman can not create user inside of container" regression introduced by
    patch for CVE-2021-20188
  - Related: #1918285


author: Jindrich Novy <jnovy@redhat.com> - 1.6.4-24
changelog:
  - fix CVE-2021-20188
  - update to the latest content of https://github.com/containers/podman/tree/v1.6.4-rhel
    (https://github.com/containers/podman/commit/2c7b579)
  - Related: #1920383


author: Jindrich Novy <jnovy@redhat.com> - 1.6.4-26
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v1.6.4-rhel
    (https://github.com/containers/podman/commit/bcbbbc4)
  - Related: #1920383


author: Jindrich Novy <jnovy@redhat.com> - 3.0.0-0.40rc2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0
    (https://github.com/containers/podman/commit/a5ab59e)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 3.0.0-0.41rc2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0
    (https://github.com/containers/podman/commit/2b89fe7)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 3.0.0-1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0
    (https://github.com/containers/podman/commit/ddd8a17)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 3.0.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0
    (https://github.com/containers/podman/commit/797f1ea)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 3.0.1-1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0
    (https://github.com/containers/podman/commit/7e286bc)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 3.0.1-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0
    (https://github.com/containers/podman/commit/9a2fc37)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 3.0.1-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0.1-rhel
    (https://github.com/containers/podman/commit/7a71903)
  - Resolves: #1931545


author: Jindrich Novy <jnovy@redhat.com> - 3.0.1-4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0.1-rhel
    (https://github.com/containers/podman/commit/c67172a)
  - Resolves: #1935376


author: Jindrich Novy <jnovy@redhat.com> - 3.0.1-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0.1-rhel
    (https://github.com/containers/podman/commit/fcca86d)
  - Resolves: #1936927


author: Jindrich Novy <jnovy@redhat.com> - 3.0.1-6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0.1-rhel
    (https://github.com/containers/podman/commit/ad1aaba)
  - Resolves: #1921128
  - Resolves: #1936927
  - Resolves: #1938234


author: zhouwenpei <zhouwenpei1@h-partners.com> - 0.90.0-4
changelog:
  - fix CVE-2022-37050,CVE-2022-37051,CVE-2022-37052,CVE-2022-38349,CVE-2020-23804
  - fix install error


author: openEuler Buildteam <buildteam@openeuler.org> - 0.4.9-4
changelog:
  -Type:enhancement
  -Id:NA
  -SUG:NA
  -DESC:Increase the ability of encoding files for use with libpoppler


author: wangqia <wangqia@uniontech.com> - 1.18-3.01
changelog:
  - Fix incorrect handling of leftovers with poptStuffArgs and memory leak
  - Revert fix memory leak regressions in popt


author: Patrik Novotný <panovotn@redhat.com> - 12.5-1
changelog:
  - Rebase to upstream release 12.5
    Resolves: rhbz#1898330
    Resolves: rhbz#1898224
    Resolves: rhbz#1898244


author: herengui <herengui@uniontech.com> - 12.7-1.up1
changelog:
  - patch postgresql-setup
  - remove Patch8, use bundled libpq
  - remove Patch10, restore the default expected result of the dblink test case
  - enable scanning ecpg
  - add subpackage postgresql-libs
  - add symbolic-link pg_config since we do not have libpq-devel


author: herengui <herengui@uniontech.com> - 13.3-1.up1
changelog:
  - patch postgresql-setup
  - remove Patch8, use bundled libpq
  - enable scanning ecpg
  - add subpackage postgresql-libs
  - add symbolic-link pg_config since we do not have libpq-devel


author: chengzeruizhi <chengzeruizhi@huawei.com> - 3.14.0-7
changelog:
  - Type:enhancement
  - ID:NA                  
  - SUG:NA                                                             
  - DESC: add compile option for coverage


author: John Dennis <jdennis@redhat.com> - 1.0.1-1
changelog:
  * Add TLS 1.3 cipher suites.

    * ssl_cipher_info.py now attempts to enable TLS 1.3.

    * Fix build issue in setup.py. python-nss can now be build
      as Python wheel, e.g. `pip wheel -w dist .`

    * The following constants were added:

      - ssl.TLS_AES_128_GCM_SHA256
      - ssl.TLS_AES_256_GCM_SHA384
      - ssl.TLS_CHACHA20_POLY1305_SHA256


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.0.1-5
changelog:
  - Python 2 binary package renamed to python2-nss
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Iryna Shcherbina <ishcherb@redhat.com> - 1.0.1-6
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: <jdennis@redhat.com> - 1.0.1-10
changelog:
  - Move documentation generator from epydoc to Sphinx autodoc
  - Modify py2/py3 build logic to comply with new guidelines


author: Jindrich Novy <jnovy@redhat.com> - 1.2.0-0.2.gitd0a45fe
changelog:
  - revert update to 1.6.0 due to new python3-pbr dependency which
    is not in RHEL
  - Related: RHELPLAN-25139


author: mahailiang <mahailiang@openanolis.org> - 2.7.5-7.0.1
changelog:
  - Mark _test_external_close as expected failure
  - Sync https://git.centos.org/rpms/python-psycopg2/tree/c8-stream-2.7


author: Tomas Orsava <torsava@redhat.com> - 2.7.17-2
changelog:
  - Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
  Resolves: rhbz#1856481


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-2
changelog:
  - Security fix for CVE-2020-26116: Reject control chars in HTTP method in httplib.putrequest
  Resolves: rhbz#1883258


author: lihaipeng <lihaipeng@uniontech.com> - 2.7.18-4.0.2
changelog:
  - Sync modify from a8.2 to a8
  - Modify rpm-config in spec
  - Add BuildRequires git
  - Add patch: 10000-python2-uos-rebrand.patch
  - Add patch: 0001-CVE-2021-23336-only-amp-as-query-sep.patch


author: Tomas Orsava <torsava@redhat.com> - 1.0-16
changelog:
  - Update python macros to python2 versioned macros
  - Issue found when rebuilding the python27 module to include CVE fixes
  - Related: rhbz#1883890 rhbz#1883258


author: Petr Viktorin <pviktori@redhat.com> - 1.16.3-2
changelog:
  - Allow Python 2 for build
    See: https://hurl.corp.redhat.com/rhel8-py2

  - Skip tests on Python 2 (python2-pytest is being removed)


author: shenyangyang<shenyangyang4@huawei.com> - 1.11.5-8
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:optimize the method to provide default version of python-name


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.4.4-17
changelog:
  - Python 2 binary package renamed to python2-cheetah
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Iryna Shcherbina <ishcherb@redhat.com> - 2.7.14-2
changelog:
  - Fix ambiguous Python 2 dependencies declarations
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Tomas Orsava <torsava@redhat.com> - 2.7.15-2
changelog:
  - Modify for building on RHEL8
  - Disable the tests, because the linkchecker package isn't available in RHEL8
  - Resolves: rhbz#1656048


author: Tomas Orsava <torsava@redhat.com> - 2.7.15-3
changelog:
  - Modify for prebuilding and deploying on RHEL8
  - Rename the info page to python2
  - Resolves: rhbz#1656048


author: Petr Viktorin <pviktori@redhat.com> - 1.0.2-10
changelog:
  - Skip python2 tests to allow removing python2-unittest2 from the distribution
  - Fix workaround for allowing Python 2 for build


author: Petr Viktorin <pviktori@redhat.com> - 1.0.2-11
changelog:
  - Disable the python3 subpackage
    Functionality of funcsigs is available in Python 3's inspect module.


author: Charalampos Stratakis <cstratak@redhat.com> - 9.0.3-15
changelog:
  - Use the system level root certificate instead of the one bundled in certifi
  Resolves: rhbz#1659551


author: Lumír Balhar <lbalhar@redhat.com> - 9.0.3-16
changelog:
  - Add four new patches for CVEs in bundled urllib3 and requests
  CVE-2018-20060, CVE-2019-11236, CVE-2019-11324, CVE-2018-18074
  Resolves: rhbz#1649153
  Resolves: rhbz#1700824
  Resolves: rhbz#1702473
  Resolves: rhbz#1643829


author: Tomas Orsava <torsava@redhat.com> - 9.0.3-18
changelog:
  - Patch for pip install <url> allow directory traversal, leading to arbitrary file write
  Resolves: rhbz#1870184


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.0.0-6
changelog:
  - Python 2 binary package renamed to python2-pyusb
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Tomas Orsava <torsava@redhat.com> - 3-29
changelog:
  - Switch the Python 3 executable to /usr/libexec/platform-python
  - Update macros using pip or easy_install to be invoked through the main
    executable


author: Tomas Orsava <torsava@redhat.com> - 3-30
changelog:
  - Explicitly enable Python 2 when invoking Python 2 macros
    See: https://url.corp.redhat.com/rhel8-py2


author: Tomas Orsava <torsava@redhat.com> - 3-31
changelog:
  - Remove RHEL_ALLOW_PYTHON2_FOR_BUILD=1 from build and install macros,
    as that is where the user needs to set it themself


author: Tomas Orsava <torsava@redhat.com> - 3-32
changelog:
  - Merging: (Tue Jul 10 2018 Tomas Orsava <torsava@redhat.com> - 3-32)
    - Fix %py_byte_compile macro: when invoked with a Python 2 binary it also
      mistakenly ran py3_byte_compile
  - Merging: (Tue Jul 03 2018 Miro Hrončok <mhroncok@redhat.com> - 3-31)
    - Add %python3_platform useful for PYTHONPATH on arched builds
  - Merging: (Mon Jun 18 2018 Jason L Tibbitts III <tibbs@math.uh.edu> - 3-30)
    - Add %pypi_source macro, as well as %__pypi_url and
      %_pypi_default_extension.
  - Merging: (Wed Apr 18 2018 Miro Hrončok <mhroncok@redhat.com> - 3-29)
    - move macros.pybytecompile from python3-devel


author: Tomas Orsava <torsava@redhat.com> - 3-33
changelog:
  - macros.pybytecompile: Detect Python version through sys.version_info instead
    of guessing from the executable name


author: Miro Hrončok <mhroncok@redhat.com> - 3-37
changelog:
  - Workaround leaking buildroot PATH in 
  python_binary="%1"
  bytecode_compilation_path="%2"
  find $bytecode_compilation_path -type f -a -name "*.py" -print0 | xargs -0 $python_binary -O -m py_compile
  find $bytecode_compilation_path -type f -a -name "*.py" -print0 | xargs -0 $python_binary -m py_compile
  - Resolves: rhbz#1644455


author: wangce <wangce@uniontech.com> - 3.7.9-34.up1
changelog:
  - feat:Close the test case due to the modification of the national 
   　　　secret to solve the koji compilation


author: shixuantong <shixuantong@huawei.com> - 4.5.2-6
changelog:
  - Cleaner: cover some more cases where scripts could sneak through in specially crafted style content.


author: zhangliangpengkun<zhangliangpengkun@xfusion.com> - 4.1.0-6
changelog:
  - fix for python 3.7 deprecation warning about importing certain types from collections vs collections.abc


author: liubo <liubo1@xfusion.com> - 0.7.19-16
changelog:
  - PKG-INFO metadata generation seems to be broken (lists maintainer as author on PyPI - mutually exclusive?)


author: wangkai <13474090681@163.com> - 9.0.1-5
changelog:
  - correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)


author: haomimi <haomimi@uniontech.com> - 10-1
changelog:
  - build: Sync with upstream RPM
  - Handle version ending with ".*" (#1758141)
  - Handle compatible-release operator "~=" (#1758141)
  - Use rich deps for semantically versioned dependencies
  - Match Python version if minor has multiple digits (e.g. 3.10, #1777382)
  - Only add setuptools requirement for egg-info packages


author: chenhaixing <chenhaixing@huawei.com> - 1.25.9-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:modify RECENT_DATE in python-urllib3.spec to adapt time change


author: chenhaixing <chenhaixing@huawei.com> - 1.25.9-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:modify HOST_PORT_PAT in backport-fixed-issue-with-port-0-returning-None.patch


author: xzf1244 <xzff@hust.edu.cn> - 1.25.9-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix field NRESERVED_PAT and function _idna_encode that will cause bugs


author: Lumír Balhar <lbalhar@redhat.com> - 3.8.6-2
changelog:
  - Add support for upstream architecture names
  https://fedoraproject.org/wiki/Changes/Python_Upstream_Architecture_Names
  Resolves: rhbz#1868006


author: Charalampos Stratakis <cstratak@redhat.com> - 3.8.8-3
changelog:
  - Security fix for CVE-2021-29921: Leading zeros in IPv4 addresses are no longer tolerated
  Resolves: rhbz#1957458


author: herengui <herengui@uniontech.com> - 3.8.12-1.1.up1
changelog:
  - remove alternative related codes
  - modify uos-rpm-config to UnionTech-rpm-config
  - modify extension_*flags to build_*flags


author: Miro Hrončok <mhroncok@redhat.com> - 1.12.3-5
changelog:
  - Subpackage python2-cffi has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 3.0.4-14
changelog:
  - Subpackage python2-chardet has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Lumír Balhar <lbalhar@redhat.com> - 19.3.1
changelog:
  - Rebase to 19.3.1 to enable support for manylinux2014
  Resolves: rhbz#1827623
  - + some other fixes from Fedora 32 where we have the same version now


author: Miro Hrončok <mhroncok@redhat.com> - 3.11-6
changelog:
  - Subpackage python2-ply has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Christian Heimes <cheimes@redhat.com> - 2.14-18
changelog:
  - Add build dependency on cpp for unit tests
  - Add dependency on python-ply version to prevent "yacc table file version is out of date"
  - Fixes RHBZ#1668230


author: Miro Hrončok <mhroncok@redhat.com> - 1.25.7-2
changelog:
  - Subpackage python2-urllib3 has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: herengui <herengui@uniontech.com> - 3.9.2-1.up1
changelog:
  - modify some build macros
  - Remove alternatives scriptlets since current OS does not support platform-python


author: Miro Hrončok <mhroncok@redhat.com> - 2.8-5
changelog:
  - Subpackage python2-idna has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 4.4.1-3
changelog:
  - Subpackage python2-lxml has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 4.6.2-1
changelog:
  - Update to 4.6.2
  - Fixes CVE-2020-27783 and another vulnerability in the HTML Cleaner
  - Fixes: rhbz#1855415
  - Fixes: rhbz#1901634


author: Tom Stellard <tstellar@redhat.com> - 4.6.8-3
changelog:
  - Use make_build macro instead of just make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Nikola Forró <nforro@redhat.com> - 1.5.4-1
changelog:
  - New upstream release 1.5.4
  - Increase test timeout, 300 seconds is not always enough
    for test_logpdf_overflow on s390x
    resolves: #1894887


author: Tomas Orsava <torsava@redhat.com> - 1.5.4-3
changelog:
  - Specify LDFLAGS explicitly
  - Force preprocessing of Fortran sources to make annobin record proper flags
  - Resolves: rhbz#1778983 rhbz#1877430


author: Miro Hrončok <mhroncok@redhat.com> - 1.14.0-1
changelog:
  - Update to 1.14.0 (#1768982) for Python 3.9 support (#1788494)
  - Drop old obsoletes for platform-python-six


author: Tomas Orsava <torsava@redhat.com> - 0.10.1-5
changelog:
  - Convert spec for python39 module in RHEL8
  - Revert usage of pyproject-rpm-macros
  - Resolves: rhbz#1877430


author: Tomas Orsava <torsava@redhat.com> - 1:0.35.1-3
changelog:
  - Add back Epoch 1 to the package version because the original version with the
    epoch was available in CentOS Stream for a few days
  - Resolves: rhbz#1877430


author: zhangxianting <zhangxianting@uniontech.com> - 4.1.0-79.up3
changelog:
  - fix: qemu-img convert remote FTP disk with large file curl pull error(bugid:202745)
  - fix:add buildrequires rdma-core and python3-pyverbs for fix build error
  - fix: add build option --enable-spice (bugid:139683)


author: Jiabo Feng <fengjiabo1@huawei.com> 4.1.0-80
changelog:
  - accel/tcg: fix race in cpu_exec_step_atomic (bug 1863025)
  - pci: assert configuration access is within bounds
  - io: remove io watch if TLS channel is closed during handshake


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-8
changelog:
  - kvm-block-nbd-Delete-reconnect-delay-timer-when-done.patch [bz#2035185]
  - kvm-block-nbd-Assert-there-are-no-timers-when-closed.patch [bz#2035185]
  - kvm-iotests.py-Add-QemuStorageDaemon-class.patch [bz#2035185]
  - kvm-iotests-281-Test-lingering-timers.patch [bz#2035185]
  - kvm-block-nbd-Move-s-ioc-on-AioContext-change.patch [bz#2035185]
  - kvm-iotests-281-Let-NBD-connection-yield-in-iothread.patch [bz#2035185]
  - Resolves: bz#2035185
    (Qemu core dump when start guest with nbd node or do block jobs to nbd node)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-9
changelog:
  - kvm-Revert-redhat-Add-hw_compat_4_2_extra-and-apply-to-u.patch [bz#2061856]
  - kvm-Revert-redhat-Enable-FDC-device-for-upstream-machine.patch [bz#2061856]
  - kvm-Revert-redhat-Expose-upstream-machines-pc-4.2-and-pc.patch [bz#2061856]
  - kvm-hw-virtio-vdpa-Fix-leak-of-host-notifier-memory-regi.patch [bz#2027208]
  - kvm-pci-expose-TYPE_XIO3130_DOWNSTREAM-name.patch [bz#2054597]
  - kvm-acpi-pcihp-pcie-set-power-on-cap-on-parent-slot.patch [bz#2054597]
  - Resolves: bz#2061856
    (Revert IBM-specific Ubuntu-compatibility machine type for 8.6-AV GA)
  - Resolves: bz#2027208
    ([virtual network][vDPA] qemu crash after hot unplug vdpa device)
  - Resolves: bz#2054597
    (Do operation to disk will hang in the guest of target host after hotplugging and migrating)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-10
changelog:
  - kvm-vmxcap-Add-5-level-EPT-bit.patch [bz#2056986]
  - kvm-i386-Add-Icelake-Server-v6-CPU-model-with-5-level-EP.patch [bz#2056986]
  - kvm-acpi-fix-QEMU-crash-when-started-with-SLIC-table.patch [bz#2059311]
  - kvm-tests-acpi-whitelist-expected-blobs-before-changing-.patch [bz#2059311]
  - kvm-tests-acpi-add-SLIC-table-test.patch [bz#2059311]
  - kvm-tests-acpi-SLIC-update-expected-blobs.patch [bz#2059311]
  - kvm-tests-acpi-manually-pad-OEM_ID-OEM_TABLE_ID-for-test.patch [bz#2059311]
  - kvm-tests-acpi-whitelist-nvdimm-s-SSDT-and-FACP.slic-exp.patch [bz#2059311]
  - kvm-acpi-fix-OEM-ID-OEM-Table-ID-padding.patch [bz#2059311]
  - kvm-tests-acpi-update-expected-blobs.patch [bz#2059311]
  - kvm-tests-acpi-test-short-OEM_ID-OEM_TABLE_ID-values-in-.patch [bz#2059311]
  - kvm-rhel-workaround-for-lack-of-binary-patches-in-SRPM.patch [bz#2059311]
  - Resolves: bz#2056986
    (Win11 (q35+edk2) guest broke after install wsl2 through 'wsl --install -d Ubuntu-20.04')
  - Resolves: bz#2059311
    (Guest can not start with SLIC acpi table)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-11
changelog:
  - kvm-target-i386-properly-reset-TSC-on-reset.patch [bz#1975840]
  - Resolves: bz#1975840
    (Windows guest hangs after updating and restarting from the guest OS)


author: caowenyuan <caowenyuan@uniontech.org> - 6.2.0-11.0.2
changelog:
  - Add support for sata disk by lvcongqing.
  - No check on ppc64le by mahailiang.
  - Add support for USB, PCI, networking and other related devices on aARCH64 platform
  - Add patch file 0001-add-aarch64-uos-device.patch
  - Modify 0006-Enable-disable-devices-for-RHEL.patch file,add "+include aarch64-uos-devices.mak"(cancel)


author: zhaoshuang <zhaoshuang@uniontech.com> - 5.11.1-21.up3
changelog:
  - add a patch to fix cursor shifting related issue
  - Fix disabled IME when QPlainTextEdit read only property is toggled
  - modify mysql-devel to mariadb-connector-c-devel


author: zhaoshuang <zhaoshuang@uniontech.com> - 5.11.1-21.up7
changelog:
  - fix: Dont-retry-a-ssl-connection-if-encryption-was-never-finished
  - refer to https://codereview.qt-project.org/c/qt/qtbase/+/254895


author: openEuler Buildteam <buildteam@openeuler.org> - 5.11.1-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Delete the dependency include qt5-qt3d qt5-qtenginio-devel qt5-qtwebkit-devel


author: liyangyang <liyangyang20@huawei.com> - 35.0-1
changelog:
  - DESC: Currently 28.1 is not commercially available and need to be modified to 35.0 with more complete features


author: tangchengchang <tangchengchang@huawei.com> - 35.0-4
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: Rename the previous patch to facilitate subsequent management


author: shixuantong<shixuantong@huawei.com> - 3.7.6-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add python3-Cython and python3-devel to BuildRequires for check fail


author: Remi Collet <rcollet@redhat.com> - 4.0.10-2
changelog:
  - drop build dependency on pandoc
  - drop dependency on jemalloc #1591762
  - fix License (BSD and MIT)
  - add bundled libraries licences
  - cleanup conditions from spec file


author: Remi Collet <rcollet@redhat.com> - 5.0.3-2
changelog:
  - fix Heap buffer overflow in HyperLogLog triggered by malicious client
    CVE-2019-10192
  - fix Stack buffer overflow in HyperLogLog triggered by malicious client
    CVE-2019-10193


author: Alexander Scheel <ascheel@redhat.com> - 3.0.26-6
changelog:
  - CVE-2020-1695: Improper validation of response header in MediaTypeHeaderDelegate.java class
    Resolves: rh-bz#1845548


author: Jun Aruga <jaruga@redhat.com> - 0.5.2-1
changelog:
  - New upstream release 0.5.2 by merging Fedora master branch (commit: cc15309)
    Resolves: rhbz#1672575


author: Jun Aruga <jaruga@redhat.com> - 0.5.3-1
changelog:
  - New upstream release 0.5.3 by merging Fedora master branch (commit: 674d475)
    Resolves: rhbz#1817135


author: lihaipeng <lihaipeng@openanolis.org> - 1.0.0-2.0.1
changelog:
  - Changed the way how/when parameters are interpret
  - Reference https://github.com/ged/ruby-pg/commit/73cd5e158ba4af73243c22f8918b1754256db17b


author: lihaipeng <lihaipeng@openanolis.com> - 1.0.0-2.0.2
changelog:
  - Fix expected PG::Error with message matching /invalid input syntax for integer/
  - Reference https://github.com/ged/ruby-pg/blob/v1.2.0/spec/pg/connection_spec.rb


author: Jun Aruga <jaruga@redhat.com> - 1.1.4-1
changelog:
  - Update to pg 1.1.4 by merging Fedora master branch (commit: 397796e)
    * BuildRequires: s/postgresql-devel/libpq-devel/
    * Add marking lines at the start and end of the setup.log
    Resolves: rhbz#1672575


author: Jindrich Novy <jnovy@redhat.com> - 1.0.0-68.rc92
changelog:
  - update to https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc92
  - propagate proper CFLAGS to CGO_CFLAGS to assure code hardening and optimization
  - Related: #1821193


author: Michael Simacek <msimacek@redhat.com> - 2.10.6-7
changelog:
  - Port from deprecated add_maven_depmap to mvn_install
  - Remove unused BR felix-framework
  - Fix unowned directory


author: Michael Simacek <msimacek@redhat.com> - 2.10.6-11
changelog:
  - Correct license tag to include CC0 and Public Domain
  - Repack tarball to remove possibly proprietary binaries
  - Use %license macro


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.10.6-13
changelog:
  - Stop scaladoc from trying to bundle non-existent resources
  - Temporarly disable docs generation during build


author: Jon Maloy <jmaloy@redhat.com> - 1.15.0-1.el8
changelog:
  - pci-reserve-resources-for-pcie-pci-bridge-to-fix-reg.patch [bz#2001921]
  - pci: let firmware reserve IO for pcie-pci-bridge.patch [bz#2001921]
  - Resolves: bz#2001921


author: Camilla Conte <cconte@redhat.com> - 1.15.0-2
changelog:
  - seabios-shortcut-skip-unbootable-disks-optimitation.patch [bz#1924972]
  - Resolves: bz#1924972
    (Guest whose os is installed multiple disks but boot partition is installed on single disk can't boot into OS on RHEL 8)


author: wanhui <wanhui@uniontech.com> - 3.14.3-118
changelog:
  - fix: slove sudo error and ssh login struck after security enhance(bugid:221543)
  - fix: slove bug 220817(bugid:220817)


author: panchenbo <panchenbo@uniontech.com> - 15-32.up5
changelog:
  - fix: amend efi directory UnionTech to uos (bugid:193879)
    Logo removal and modification
    modify openeuler to UOS Server Euler
    Add UOS Secure Boot
    fix noarch package built differently on different architectures


author: Nathan Scott <nathans@redhat.com> - 0.6.2-1
changelog:
  - Switch to enabling the Java 8+ maven modules only now.
  - Add unitsofmeasurement prefix to package name.
  - Update to latest upstream sources.


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.5-1
changelog:
  - Upstream release 0.56.5
  - Resolves: rhbz#1751295: (2) When sync-repl is enabled, slapi-nis can deadlock during retrochanglog trimming
  - Resolves: rhbz#1768156: ERR - schemacompat - map rdlock: old way MAP_MONITOR_DISABLED


author: Jindrich Novy <jnovy@redhat.com> - 0.4.0-1
changelog:
  - update to v.0.4.0
  - sync with fedora spec
  - drop applied CVE-2019-14378 patch
  - Resolves: #1766774


author: Jindrich Novy <jnovy@redhat.com> - 1.1.1-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.1
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.1.2-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.2
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.1.3-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.3
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.1.4-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.4
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.1.6-1
changelog:
  - update to
    https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.6
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.1.7-1
changelog:
  - update to
    https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.7
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.1.8-1
changelog:
  - update to
    https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.8
  - Related: #1883490


author: gil cattaneo <puntogil@libero.it> - 1.0.5-5
changelog:
  - update Url and Source0 fields
  - minor changes to adapt to current guideline
  - introduce license macro


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.6.0-1
changelog:
  - Fixes: rhbz#1818877 - rebase to softhsm 2.6.0+
  - Fixes: rhbz#1701233 - support setting supported signature methods on the token


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.6.0-3
changelog:
  - Fixes: rhbz#1834909 - softhsm use-after-free on process exit
  - Synchronize the final fix with Fedora


author: chenyanpanHW <chenyanpan@huawei.com> - 4.4-4
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-Fix-typos-update-URLs-in-squashfs-tools-Makefile.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-Support-creating-sockets-in-unsquashfs.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-squashfs-tools-fix-build-failure-against-gcc-10.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-xattr-Initialize-header-to-avoid-valgrind-warning.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-CVE-2021-40153.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0006-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0007-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0008-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0009-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0010-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.4-6
changelog:
  - Resolves: #1679526 - Missing detailed configuration file
  - Resolves: #1703117 - RHEL 7 to 8 fails with squid installed because dirs
    changed to symlinks
  - Resolves: #1691741 - Squid cache_peer DNS lookup failed when not all lower
    case
  - Resolves: #1683527 - "Reloading" message on a fresh reboot after enabling
    squid


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.4-8
changelog:
  - Resolves: # 1738485 - CVE-2019-12527 squid:4/squid: heap-based buffer overflow
    in HttpHeader::getAuth


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.4-9
changelog:
  - Resolves: #1738583 - CVE-2019-12525 squid:4/squid: parsing of header
    Proxy-Authentication leads to memory corruption
  - Resolves: #1828369 - CVE-2020-11945 squid: improper access restriction upon
    Digest Authentication nonce replay could lead to remote code execution
  - Resolves: #1828370 - CVE-2019-12519 squid: improper check for new member in
    ESIExpression::Evaluate allows for stack buffer overflow


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.11-1
changelog:
  - new version 4.11
  - libsystemd integration
  - Resolves: #1829467 - squid:4 rebase
  - Resolves: #1828378 - CVE-2019-12521 squid:4/squid: off-by-one error in
    addStackElement allows for a heap buffer overflow and a crash
  - Resolves: #1828377 - CVE-2019-12520 squid:4/squid: improper input validation
    in request allows for proxy manipulation
  - Resolves: #1828375 - CVE-2019-12524 squid:4/squid: improper access restriction
    in url_regex may lead to security bypass
  - Resolves: #1820664 - CVE-2019-18860 squid: mishandles HTML in the host
    parameter to cachemgr.cgi which could result in squid behaving in unsecure way
  - Resolves: #1802514 - CVE-2020-8449 squid:4/squid: Improper input validation
    issues in HTTP Request processing
  - Resolves: #1802513 - CVE-2020-8450 squid:4/squid: Buffer overflow in a Squid
    acting as reverse-proxy
  - Resolves: #1802512 - CVE-2019-12528 squid:4/squid: Information Disclosure
    issue in FTP Gateway
  - Resolves: #1771288 - CVE-2019-18678 squid:4/squid: HTTP Request Splitting
    issue in HTTP message processing
  - Resolves: #1771283 - CVE-2019-18679 squid:4/squid: Information Disclosure
    issue in HTTP Digest Authentication
  - Resolves: #1771280 - CVE-2019-18677 squid:4/squid: Cross-Site Request Forgery
    issue in HTTP Request processing
  - Resolves: #1771275 - CVE-2019-12523 squid:4/squid: Improper input validation
    in URI processor
  - Resolves: #1771272 - CVE-2019-18676 squid:4/squid: Buffer overflow in URI
    processor
  - Resolves: #1771264 - CVE-2019-12526 squid:4/squid: Heap overflow issue in URN
    processing
  - Resolves: #1738581 - CVE-2019-12529 squid: OOB read in Proxy-Authorization
    header causes DoS


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.11-2
changelog:
  - Resolves: #1853130 - CVE-2020-15049 squid:4/squid: request smuggling and
    poisoning attack against the HTTP cache
  - Resolves: #1853136 - CVE-2020-14058 squid:4/squid: DoS in TLS handshake


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.11-3
changelog:
  - Resolves: #1871705 - CVE-2020-24606 squid: Improper Input Validation could
    result in a DoS
  - Resolves: #1871702 - CVE-2020-15811 squid: HTTP Request Splitting could result
    in cache poisoning
  - Resolves: #1871700 - CVE-2020-15810 squid: HTTP Request Smuggling could result
    in cache poisoning


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.11-5
changelog:
  - Resolves: #1944261 - CVE-2020-25097 squid:4/squid: improper input validation
    may allow a trusted client to perform HTTP Request Smuggling


author: Tom Stellard <tstellar@redhat.com> - 4.0.2-2
changelog:
  - Use make macros
    https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
  - Disable Go tests


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.4.0-2.20200828git0c238a2
changelog:
  - Backport fixes from 0.4.0 stable branch. Resolves: rhbz#1868375
    (fixes usage of swtpm-localca with passwords when signing keys)


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.4.2-1.20201201git2df14e3
changelog:
  - Update to 0.4.2, to address potential symlink vulnerabilities (CVE-2020-28407).
    Resolves: rhbz#1906043


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 1:8.6.10-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:The "no acceptable C compiler found" error message is displayed during compilation.Therefore,add buildrequires gcc.


author: Mat Booth <mat.booth@redhat.com> - 6.11-1
changelog:
  - Update to latest upstream release
  - Continue building with maven for now, instead of moving to gradle due to
    rhbz#1467724


author: openEuler Buildteam <buildteam@openeuler.org> - 0.5.9
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC:Solve the problem of service cannot restart when upgrading


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 0.6-2
changelog:
  - The"cc:No such file or directroy"error message is displayed during compilation.Therefore,add buildrequires gcc.
    The macro unitdir is used.Therefore,add buildrequires systemd


author: caopeiqing <caopeiqing@uniontech.com> - 5.0-4
changelog:
  - feat: add hygon patchs for gm support.
  0001-newfeature-tpm-Add-gm-support.patch
  0002-newfeature-tpm-Add-gm-test-case-for-all-commands.patch
  0003-bugfix-tpm-fix-policy-test-case-error.patch


author: Patsy Griffin <patsy@redhat.com> - 2023a-1
changelog:
  - Rebase to tzdata-2023a
  - Egypt reintroduced DST, from April through October.
  - Morocco springs forward April 23, not April 30.
  - Palestine delayed the start of DST this year.


author: Lukas Vrabec <lvrabec@redhat.com> - 0.1.3-3
changelog:
  - Improve capability parsing for docker containers
  - Update small changes in manpage, like issue with mandatory option '-c' for docker containers
  - Fix parsing Mountpoints in docker inspect JSON file


author: Lukas Vrabec <lvrabec@redhat.com> - 0.1.3-4
changelog:
  - Update manpage with the latest known bug described in https://github.com/containers/udica/issues/8
  - Add check if runtimes are installed on the system


author: Lukas Vrabec <lvrabec@redhat.com> - 0.1.4-1
changelog:
  - Fix minor problems reported by pylint #11
  - Catch FileNotFoundError when inspecting containers #12
  - Create basic tests #13
  - Restore working directory #14
  - udica cannot use the container ID once it is provided #10


author: Lukas Vrabec <lvrabec@redhat.com> - 0.1.5-1
changelog:
  - Create mock selinux and semanage module
  - Update testing section in README
  - Add travis file for Travis CI
  - Grammar fixes in the udica.8 manpage file
  - Support port ranges (Resolves: #16)
  - Test port ranges


author: yangcheng <yangcheng87@huawei.com> - 20170801-12
changelog:
  - Fix the problem that the mkfontscale command and mkfontdir command were not found during installation


author: Lubos Uhliarik <luhliari@redhat.com> - 6.0.6-2
changelog:
  - new version 6.0.6
  - Resolves: #1795673 - RFE: rebase varnish:6 to latest 6.0.x LTS
  - Resolves: #1790907 - CVE-2019-20637 varnish: not clearing pointer between two
    client requests leads to information disclosure
  - Resolves: #1763958 - CVE-2019-15892 varnish:6/varnish: denial of service 
    handling certain crafted HTTP/1 requests


author: Luboš Uhliarik <luhliari@redhat.com> - 6.0.6-2.1
changelog:
  - Resolves: #1982861 - CVE-2021-36740 varnish:6/varnish: HTTP/2 request
    smuggling attack via a large Content-Length header for a POST request


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-15
changelog:
  - Type:CVE
  - ID:CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781
  - SUG:NA
  - DESC:fix CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781


author: gil cattaneo <puntogil@libero.it> 31-4
changelog:
  - remove enforcer plugin support
  - related to rhbz#1308237,1308238
  - use BRs mvn()-like
  - introduce license macro


author: haomimi <haomimi@uniontech.com> - 2.21-17
changelog:
  - Resolves: #2025709, check shell correctly 
  - Resolves: #2009547, which treats function contents as aliases when parsing ksh


author: Zhiqiang Liu <liuzhiqiang26@huawei.com> - 5.6.0-3
changelog:
  - mkfs.xfs: fix ASSERT on to-small device with stripe geometry.
    Fix issue: https://gitee.com/src-openeuler/xfsprogs/issues/I4RZKQ


author: wangqia <wangqia@uniontech.com> - 1.2.11-20.01
changelog:
  - fix: add CVE-2018-25032-for-{x86/arm/loongarch}.patches to fix CVE-2018-25032 
  - fix: CVE-2022-37434


author: Michel Alexandre Salim <salimma@centosproject.org> - 1.5.1-1
changelog:
  - Rebase to the latest upstream version
  - Enable optional gz, xz/lzma, and lz4 support in the zstd tool
  - Disable amd64 assembly on non-x86_64 architectures (rhbz#2035802)
    this should avoid the issue where an executable stack is created
  - Re-enable CET protections (rhbz#2039353)
    Resolves: rhbz#2039488


