# changelog

author: sunchendong <sunchendong@xfusion.com> - 1.0-1.u15
changelog:
  - Type:CVE
  - CVE:CVE-2022-45886 CVE-2022-45884 CVE-2022-45919 CVE-2022-45885 CVE-2022-45887
  - DESC:add dvb-core and ttusb_dec in kernel module blacklist


author: shenbowen <shenbowen@xfusion.com> - 1.0-4.u5
changelog:
  - Type:requirement
  - CVE:
  - DESC:Delete the operation of clearing FusionOS.repo during FusionOS-4k upgrade


author: ChenYanpan <chenyanpan@xfusion.com> - 1.0
changelog:
  - Type:bugfix
  - CVE:N/A
  - DESC:no file /etc/openEulerLinux.conf in system anymore, don't need to rename it


author: ChenYanpan <chenyanpan@xfusion.com> - 1.0-48.u1
changelog:
  - Type:bugfix
  - CVE:N/A
  - DESC:empty the file content of eula.en_US, English translation is not currently required


author: ChenYanpan <chenyanpan@xfusion.com> - 22-48.u5
changelog:
  - Type:bugfix
  - CVE:N/A
  - DESC:add ID_LIKE to file /etc/os-release, add /etc/openEuler-release link to /etc/FusionOS-release


author: ChenYanpan <chenyanpan@xfusion.com> - 1.0-47
changelog:
  - Type:bugfix
  - CVE:N/A
  - DESC:set value in /etc/os-release, empty EULA file, keep /etc/openEuler-release link


author: mengwenhua <mengwenhua@xfusion.com> - 30-20.u5
changelog:
  - Type:bugfix
  - CVE:
  - DESC:add brp script to delete rpath & fix the ELF file cannot be found due to escape of '\'


author: yangzhuangzhuang<yangzhuangzhuang@xfusion.com> - 1.0-1.u2
changelog:
  - Type:requirement
  - CVE:NA
  - DESC:Randomize temporary file names.
         Set file properties, cannot delete and modify, can only read.
         Adding an IP address Field.


author: yangzhuangzhuang<yangzhuangzhuang@xfusion.com> - 1.0-1.u4
changelog:
  - Type:bugfix
  - CVE:NA
  - DESC:Optimized the output of log information
         A message is displayed when the IP address is unavailable
         A message is displayed when the IP address is repeatedly recorded
         Code format unification


author: jixianghua<jixianghua@xfusion.com> - 1.0-1.u8
changelog:
  - Type:bugfix
  - CVE:NA
  - DESC:eliminate unnecessary error report since selinux is disabled by default


author: maminjie <maminjie1@huawei.com> - 1.3.30-8
changelog:
  - fix some CVEs: CVE-2018-18544 CVE-2019-7397 CVE-2019-11005 CVE-2019-11006
    CVE-2019-11010 CVE-2019-12921 CVE-2020-10938 CVE-2020-12672


author: wutao <wutao1@xfusion.com> - 6.9.12.42-1.u1
changelog:
  - Type:CVE
  - CVE:CVE-2021-39212,CVE-2021-3596
  - DESC:Update to 6.9.12.42 to fix CVE-2021-39212 CVE-2021-3596


author: jiazhenyuan <jiazhenyuan@uniontech.com> - 1.26.2-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix dbus-daemon error when systemd-resolved service was not enabled


author: gaoxingwang <gaoxingwang@huawei.com> - 1.26.2-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:sync from upstream, fix wrongly considering ipv6.may-fail for ipv4


author: wenbailin<wenbailin@xfusion.com> - 1.26.2-10.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:libnm: fix leak and return failures from nm_client_load_connections()
         fix crash in nm_wildcard_match_check
         fix leak of NMOvsdbPrivate db_uuid


author: zhouyitao<zhouyitao@xfusion.com> - 1.26.2-10.u2
changelog:
  - Type:bugfix
  - CVE:NA
  - DESC:fix the issue that NetworkManager service does not self-heal when the dbus service is abnormal


author: sunguoshuai <sunguoshuai@xfusion.com> - 1:1.26.2-10.u3
changelog:
  - Type:bugfix
  - CVE:
  - DESC:del libnm-device-plugin-wwan.so and libnm-wwan.so from NetworkManager which is included in NetworkManager-wwan


author: wangyue <wangyue92@huawei.com> - 2.2.0-19
changelog:
  - fix CVE-2021-3474 CVE-2021-3477 CVE-2021-3476 CVE-2021-3475 CVE-2021-20296 CVE-2021-3479 CVE-2021-20296


author: yaoxin <yaoxin30@huawei.com> - 2.2.0-22
changelog:
  - fix CVE-2020-11758 CVE-2020-11759 CVE-2020-11760 CVE-2020-11761 CVE-2020-11762 CVE-2020-11763 CVE-2020-11764 CVE-2020-11765 CVE-2020-15305 CVE-2020-15306


author: likang<likang@xfusion.com> - 2.2.0-23.u3
changelog:
  - Type:CVE
  - CVE:CVE-2021-20300,CVE-2021-20302,CVE-2021-3933
  - DESC:Fix CVE-2021-20300,CVE-2021-20302,CVE-2021-3933


author: miaokaibo<miaokaibo@xfusion.com> - 2.0.12-1.u1
changelog:
  - Type:CVE
  - CVE:CVE-2020-14409,CVE-2020-14410
  - DESC:Upgrade SDL2 to 2.0.12 and fix CVE-2020-14409,CVE-2020-14410


author: hupeixi<hupeixi@xfusion.com> - 3.5.1-20.u1
changelog:
  - Type:CVE
  - CVE:CVE-2022-37704,CVE-2022-37705
  - DESC:Fix CVE-2022-37704,CVE-2022-37705
  -      Add install require sharutils


author: mengwenhua<mengwenhua@xfusion.com> - 33.19-34.u18
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Solve the problem that sometimes the circular loading progress bar does not rotate


author: liubo <liubo1@xfusion.com> - 33.19-34.u21
changelog:
  - Type:bugfix
  - CVE:NA
  - DESC:Fixed inability to enter graphical desktop mode due to low xtimeout value


author: chenweihua <chenweihua@xfusion.com> - 33.19-34.u23
changelog:
  - Type:bugfix
  - CVE:NA
  - DESC:Translate the prompt information of hostname and expected capacity into Chinese


author: hutianxue <hutianxue@xfusion.com> - 33.19-36.u26
changelog:
  - Type:bugfix
  - CVE:
  - DESC:dracut handle compressed kernel modules
         network use separate main conext for NM-client in threads


author: maxin<maxin@xfusion.com> - 33.19-36.u28
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Fix the error of the key combination prompt in the storage configuration error prompt


author: wangyong2 <wangyong2@xfusion.com> - 33.19-36.u40
changelog:
  - Type:requirement
  - CVE:
  - DESC:Add a switch to control the tripod features:
         1. If secadm and auditadm are set at the same time, 
            the tripod is enabled, otherwise the tripod is disabled.
         2. Ordinary users no longer need to enter iac label, the default is empty.
         3. Modify some displayed information.


author: zhangliangpengkun <zhangliangpengkun@xfusion.com> - 1:2.9.2-1.u1
changelog:
  - Type:CVE
  - CVE:CVE-2022-45047,CVE-2023-35887,CVE-2023-48795
  - DESC:fix CVE-2022-45047,CVE-2023-35887,CVE-2023-48795


author: lingsheng <lingsheng@xfusion.com> - 1.0.0-1.u1
changelog:
  - Type:bugfix
  - CVE:NA
  - DESC:enable certificate authentication by default and modify file permissions
    fix start failed of atuned service
    change Makefile A-Tune version to 1.0.0


author: mengwenhua <mengwenhua@xfusion.com> - 1.0.0-14.u6
changelog:
  - Type:bugfix
  - CVE:
  - DESC:define-fix-privilege-escalation & fix-collection-train-file-overwriting-through-soft-links


author: yixiangzhike <yixiangzhike007@163.com> - 3.0-4
changelog:
  - backport some patches
     Add missing call to free_interpretation_list
     fix 2 more issues found by fuzzing
     Fix an auparse memory leak caused in recent glibc
     Fix double free with corrupted logs
     Turn libaucommon into a libtool convenience library
     Fix the closing timing of audit_fd
     Fix some string length issues
     Move the free_config to success path
     Check for fuzzer induced invalid value
     error out if log is mangled
     Dont run off the end with corrupt logs
     Another hardening measure for corrupted logs
     Fix busy loop in normalizer when logs are corrupt
     Better fix for busy loop in normalizer when logs are corrupt
     flush uid gid caches when user group added deleted modified
     In auditd check if log_file is valid before closing handle
     Check ctime return code
     When interpreting if val is NULL return an empty string
     auditd.service Restart on failure ignoring some exit
     In auditd close the logging file descriptor when logging is suspended


author: hutianxue <hutianxue@xfusion.com> - 1:3.0-6.u3
changelog:
  - Type:bugfix
  - CVE:
  - DESC:backport some patches
         In auditd release the async flush lock on stop
         auditd cleanup krb5 memory leaks on error paths
         audisp remote cleanup krb5 memory leaks on error paths
         Final kerberos leak fixups
         time_t is not an int anymore
         krb5_cc_store_cred takes custody of my_creds so we do not need to keep it around
         rebuild for upgrade


author: hutianxue <hutianxue@xfusion.com> - 1:3.0-8.u4
changelog:
  - Type:bugfix
  - CVE:
  - DESC: asprintf can return a negative number patch
          Cleanup gssapi code
          fix another krb5 memory leak


author: xupeng<xupeng@xfusion.com> - 1.0-1.u14
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Fix the problem of network failure in different network segments in version 4.19


author: mengwenhua <mengwenhua@xfusion.com> - 0.8-11.u3
changelog:
  - Type:CVE
  - CVE:CVE-2023-38469,CVE-2023-38471,CVE-2023-38472,CVE-2023-38473
  - DESC:Fix CVE-2023-38469,CVE-2023-38471,CVE-2023-38472,CVE-2023-38473


author: shenyangyang<shenyangyang4@huawei.com> - 5.0-16
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Rebuild for openEuler-rpm-config moving /usr/lib/rpm/openEuler/xxxx
         to /usr/lib/xxxx


author: licihua<licihua@huawei.com> - 5.0-17
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix quoted null string removal when using shell word expansion pattern operators


author: mengwenhua <mengwenhua@xfusion.com> - 5.0-20.u5
changelog:
  - Type:bugfix
  - CVE:
  - DESC:sync patches from bash community
         fix for leak when completing command word with glob pattern
         fix for nofork comsub command printing; fix for crash caused by tempvar assignment converted to an array in a function
         fix small memleak in globbing


author: yangbo <yangbo2@xfusion.com> - 1.10-6.u2
changelog:
  - Type:CVE
  - CVE:CVE-2022-40146,CVE-2022-44730,CVE-2022-44729
  - DESC:fix CVE-2022-40146,CVE-2022-44730,CVE-2022-44729


author: lingsheng <lingsheng@xfusion.com> - 9.11.21-9.u1
changelog:
  - Type:bugfix
  - CVE:NA
  - DESC:bugfix set geoip-use-ecs default to no
         bugfix set print time default to yes


author: sunchendong <sunchendong@xfusion.com> - 9.16.23-1.u3
changelog:
  - Type:bugfix
  - CVE:NA
  - DESC:specify ISC_TASK_WORKERS value to fix some test cases execute time too long


author: zhouyitao<zhouyitao@xfusion.com> - 9.16.23-1.u5
changelog:
  - Type:bugfix
  - CVE:NA
  - DESC:remove not enabled option
         add systemd buildrequire
         limit number of test threads to reduce test execution time


author: liupengfei<liupengfei@xfusion.com> - 9.16.23-1.u7
changelog:
  - Type:bugfix
  - CVE:NA
  - DESC:Fix bind-chroot cannot be properly packed, resulting in abnormal service startup.


author: wangzeping<wangzeping@xfusion.com> - 32:9.16.23-11.u8
changelog:
  - Type:CVE
  - CVE:CVE-2022-2881,CVE-2022-2906,CVE-2022-2795,CVE-2022-38177,CVE-2022-38178,CVE-2022-3080
  - DESC:fix CVE-2022-2881,CVE-2022-2906,CVE-2022-2795,CVE-2022-38177,CVE-2022-38178,CVE-2022-3080
         fix downgrade bind-utils conflict bind-dnssec-doc
         Fix catalog zone reconfiguration crash
         Improve the logging on failed TCP accept
         Separate the locked parts of dns_zone_catz_enable-di
         Check if key-metadata is modified before writing
         Fix CID-352776 Concurrent data access violations
         Require valid key for dst_key functions


author: hutianxue <hutianxue@xfusion.com> - 32:9.16.23-14.u9
changelog:
  - Type:CVE
  - CVE:CVE-2022-3736,CVE-2022-3924,CVE-2022-3094
  - DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094


author: hutianxue <hutianxue@xfusion.com> - 32:9.16.23-14.u10
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Move setting the sock->write_timeout to the async_*send
         Add UV_RUNTIME_CHECK() macro to print uv_strerror()
         Tighten $GENERATE directive parsing
         Check for overflow in $GENERATE computations
         Remove resolver.c:maybe_destroy()
         Fix a race between resolver query timeout and validation
         Gracefully handle uv_read_start() failures
         make the fix more complete
         corrected the opcode param to opcode_totext
         Do not cancel processing record datasets in catalog zone after an error
         Don't process DNSSEC-related and ZONEMD records in catz
         Add kasp test for #3302
         Fix the fetches-per-server quota calculation
         Disable EDNS for the fetchlimit test server
         Add lower bound checks to fetchlimit test
         prevent a possible buffer overflow in configuration check
         Lock the trampoline when attaching
         Process the delegating NS RRset when checking rpz rules
         Process learned records as well as glue
         Check the cache as well when glue NS are returned processing RPZ
         Allow DNS_RPZ_POLICY_ERROR to be converted to a string
         Add test cases using static and static-stub zones
         Fix dig +nssearch race between recv_done() and send_done()
         Additional safety check for negative array index
         Initialize printed buffer
         Ensure diff variable is not read uninitialized
         Prevent memory bloat caused by a jemalloc quirk
         Update the rdataset->trust field in ncache.c:rdataset_settrust
         Check that pending negative cache entries for DS can be used successfully
         Update dns_dnssec_syncdelete() function
         Test CDS DELETE persists after zone sign
         update shell syntax
         add a system test for $GENERATE with an integer overflow
         Prevent arithmetic overflow of 'i' in master.c:generate
         Log "not authoritative for update zone" more clearly
         On shutdown, reset the established TCP connections
         Change single write timer to per-send timers
         Add network manager based timer API
         Check dnssec-policy key roles for validity
         Add test configurations with invalid dnssec-policy clauses
         Grow the lex token buffer in one more place
         Use unsigned arithmetic when shifting by 24
         Handle TCP sockets in isc__nmsocket_reset()
         Delay isc__nm_uvreq_t deallocation to connection callback
         Properly free up enqueued netievents in nm_destroy()
         Fix more ns_statscounter_recursclients underflows
         Update writetimeout to be T_IDLE in netmgr_test.c
         Rename sock->timer to sock->read_timer
         Add isc_nmhandle_setwritetimeout() function
         Add TCP write timeout system test
         Add TCP, TCPDNS and TLSDNS write timer
         Add log message when hard quota is reached in TCP accept
         Improve the zones' view reverting logic when a zone is a catalog zone
         Improve the view configuration error handling and reverting logic
         Fix invalid control port number in the catz system test
         Fix a memory leak in dns_dlzcreate()
         Add a system test for view reverting after a failed reconfiguration
         rndc: add an extra task reference
         add UV_ENOTSUP to isc___nm_uverr2result()
         Remove taskmgr->excl_lock, fix the locking for taskmgr->exiting
         On shutdown, return ISC_R_SHUTTINGDOWN from isc_taskmgr_excltask()
         Update autosign test
         Replace RSASHA1 in autosign test with default alg
         Only warn if we could not delete signature
         Fix bug introduced by #763 related to offline keys
         Prevent a shutdown race in catz_create_chg_task()
         Report duplicate dnssec-policy names
         Address memory leak when processing dnssec-policy clauses
         Stop leaking mutex in nmworker and cond in nm socket
         Add a regression test
         Exercise ISC_R_NOSPACE path in dns_sdlz_putrr
         Do not convert ISC_R_NOSPACE to DNS_R_SERVFAIL too early
         Don't enable serve-stale on duplicate queries
         disassociate rdatasets when cleaning up
         Reject zones with TTL higher than dnssec-policy max-zone-ttl
         Inherit dnssec-policy in check for inline-signing
         Increase the BUFSIZ-long buffers
         Fix tkey.c:buildquery() function's error handling
         Fix rndc dumpdb -expired for stuck cache contents
         Fix fetch context use-after-free bugs
         Clone the message buffer before forwarding UPDATE messages


author: hutianxue <hutianxue@xfusion.com> - 32:9.16.23-18.u11
changelog:
  - Type:CVE
  - CVE:CVE-2023-2828,CVE-2023-2911
  - DESC:ensure RPZ lookups handle CD=1 correctly
         Suppress duplicate dns_db_updatenotify_register registrations
         Select the appropriate namespace when using a dual stack server
         Release unused key file IO lock objects
         Propagate the shutdown event to the recursing ns_client(s)
         Fix logging a uint32_t SOA serial value in dns_catz_update_from_db()
         Fix a logical bug in cfg_print_duration()
         Don't allow DNSSEC records in the raw zone
         Check for NULL before dereferencing qctx->rpz_st
         Call dns_db_updatenotify_unregister earlier
         Add missing DbC magic checks
  	   Don't perform arithmetic on NULL pointers
         Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
         Fix a use-after-free bug in dns_zonemgr_releasezone()
         Fix dns_fwdtable_addfwd() error path cleanup bug
         Detach the views in zone_shutdown(), not in zone_free()
         Detach the zone views outside of the zone lock
         delay trust anchor management until zones are loaded
         In hmac_createctx free ctx on isc_hmac_init failure
         Fix dns_kasp_attach / dns_kasp_detach usage
         Fix backport error in 84929d1c
         Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
         Searching catzs->zones requires a read lock
         Fix view's zones reverting bug during reconfiguration
  	   fix CVE-2023-2911 CVE-2023-2828


author: yangbo <yangbo@xfusion.com> - 32:9.16.23-22.u14
changelog:
  - Type:CVE
  - CVE:CVE-2023-4408,CVE-2023-50868,CVE-2023-5517,CVE-2023-5679,CVE-2023-5680,CVE-2023-6516,CVE-2023-50387
  - DESC:Fix CVE-2023-4408,CVE-2023-50868,CVE-2023-5517,CVE-2023-5679,CVE-2023-5680,CVE-2023-6516,CVE-2023-50387
         update release version


author: zhangliangpengkun <zhangliangpengkun@xfusion.com> - 32:9.16.23-23.u15
changelog:
  - Type:CVE
  - CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
  - DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737


author: panxiaohe <panxiaohe@huawei.com> - 2.34-15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix erroneous decoding of LEB128 values
         heap-buffer-overflow on readelf -Ww


author: wangxinjian <wangxinjian@xfusion.com> - 2.34-16.u1
changelog:
  - Type:requirement
  - CVE:NA
  - DESC:Fix demangle style usage info
         Fix CVE-2021-45078
         Fix CVE-2021-42574


author: guowentao <guowentao@xfusion.com> - 2.34-28.u13
changelog:
  - Type:CVE
  - CVE:CVE-2022-47007,CVE-2022-47010,CVE-2022-48063
  - DESC:Fix CVE-2022-47007 CVE-2022-47010 CVE-2022-48063


author: liningjie <liningjie@xfusion.com> - 2.34-28.u14
changelog:
  - Type:CVE
  - CVE:CVE-2022-44840,CVE-2022-47695,CVE-2022-48065
  - DESC:fix CVE-2022-44840,CVE-2022-47695,CVE-2022-48065


author: mengwenhua <mengwenhua@xfusion.com> - 2.34-30.u15
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Backport some fixes about undefined shift and integer overflow issues & Backport a fix about use-after-free issue


author: panxiaohe <panxiaohe@huawei.com> - 3.6.4-2
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:use make macros to run check in parallel;
         fix a concurrent build issue in examples


author: liuxin <liuxin264@huawei.com> - 3.2.2-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix allocate_partitions threw an exception while adding /boot to RAID disk


author: yanan <yanan@huawei.com> - 3.2.2-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Convert LVM filter lists to sets
         Remove action device from LVM reject list


author: zhaoang <zhaoang@xfusion.com> - 1:3.2.2-8.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:fix the failure of not a valid name for this device while the hostname is setted as 63 maxlen


author: zhaoang <zhaoang@xfusion.com> - 1:3.2.2-9.u2
changelog:
  - Type:bugfix
  - CVE:
  - DESC:ignore devices marked as hidden in sysfs and fix reading hidden sysfs attrib


author: chenyanpanHW <chenyanpan@huawei.com> - 1.2.0-23
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0001-jhash-fix-annoying-gcc-fall-through-warnings.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0002-btt-devs-silence-warning-on-sprintf-overflow.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0003-btt-Fix-overlapping-IO-stats.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0004-blktrace-don-t-stop-tracer-if-not-setup-trace-succes.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0005-blkparse-remove-duplicated-entry-for-flag-M.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0006-btt-make-device-devno-use-PATH_MAX-to-avoid-overflow.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0007-make-btt-scripts-python3-ready.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0008-blktrace-remove-python2-dedpendency.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0009-btreplay-fix-device-IO-remap-functionality.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0010-blkparse-split-off-the-timestamp-correction-code-in-.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0011-blkparse-fix-absolute-timestamp-when-reading-from-fi.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0012-btt_plot.py-Use-with-open-as-.-context-manager.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0013-blkparse-Fix-device-in-event-tracking-error-messages.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0014-blkparse-Allow-request-tracking-on-non-md-dm-devices.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0015-blkparse-Initialize-and-test-for-undefined-request-t.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/blktrace-fix-exit-directly-when-nthreads-running.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0017-blktrace-Makefile-add-fstack-protector-strong-flag.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0018-fix-parallel-build-failures.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0019-fix-parallel-build-of-btt-and-blkiomon.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: maxin <maxin@xfusion.com> - 1.2.0-27.u2
changelog:
  - Type:bugfix
  - CVE:
  - DESC:backport upstream patches
         blkparse: skip check_cpu_map with pipe input
         blkparse: fix incorrectly sized memset in check_cpu_map
         fix hang when BLKTRACESETUP fails and "-o -" is used


author: wangxinjian <wangxinjian@xfusion.com> - 5.54-4.u1
changelog:
  - Type:requirement
  - CVE:NA
  - DESC:fix CVE-2021-43400
         fix an error in logs during bluez installation uninstallation


author: sunguoshuai<sunguoshuai@xfusion.com> - 5.54-4.u3
changelog:
  - Type:CVE
  - CVE:CVE-2022-0204,CVE-2021-0129
  - DESC:fix CVE-2022-0204 and add prefix for CVE-2021-0129


author: mengwenhua <mengwenhua@xfusion.com> - 5.54-14.u7
changelog:
  - Type:CVE
  - CVE:CVE-2023-45866,CVE-2023-50229,CVE-2023-50230
  - DESC:fix CVE-2023-45866,CVE-2023-50229,CVE-2023-50230


author: hutianxue <hutianxue@xfusion.com> - 1.8.18-17.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:move exchange-bmc-os-info,bmc-snmp-proxy to separate subpackages from ipmitool


author: hutianxue <hutianxue@xfusion.com> - 1.8.18-18.u4
changelog:
  - Type:bugfix
  - CVE:
  - DESC:lan channel fix set alert on off and lanplus realloc the msg if the payload_length gets update


author: zhangliangpengkun <zhangliangpengkun@xfusion.com> - 1.67-2.u2
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Additional information has been added to clarify that the older version of junit.jar included in the source package has been deprecated, and that the junit.jar provided by junit will now be used instead.


author: chenweihua <chenweihua@xfusion.com> - 4.19.90-2206.4.0.0156.u57
changelog:
  - Type:bugfix
  - CVE:NA
  - DESC:fix race condition between ext4_ioctl_setflags and ext4_fiemap and fix virtio-gpu UAF bug


author: hutianxue <hutianxue@xfusion.com> - 4.19.90-2207.3.0.0159.u58
changelog:
  - Type:CVE
  - CVE:CVE-2022-2153,CVE-2022-21123,CVE-2022-21125,CVE-2022-21166,CVE-2021-33656,CVE-2022-2318,CVE-2022-26365,CVE-2022-33740,CVE-2022-33741,CVE-2022-33742,CVE-2022-33744,CVE-2022-34918	
  - DESC: ext4: correct the misjudgment in ext4_iget_extra_inode
          ext4: correct max_inline_xattr_value_size computing
          ext4: fix use-after-free in ext4_xattr_set_entry
          ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h
          tracepoint: Add tracepoint_probe_register_may_exist() for BPF tracing
          swiotlb: skip swiotlb_bounce when orig_addr is zero
          KVM: x86: Forbid VMM to set SYNIC/STIMER MSRs when SynIC wasn't activated
          mm/sharepool: Fix using uninitialized sp_flag
          mm/sharepool: Add a task_struct parameter for sp_get_local_group()
          mm/sharepool: Don't check the DVPP address space range before merging
          mm/sharepool: Configure the DVPP range for process
          mm/sharepool: Introduce SPG_NON_DVPP flag for sp_group_add_task
          mm/sharepool: Update sp_mapping structure
          mm/sharepool: Clear the initialization of sp-associated structure for a process
          mm/sharepool: Unify the memory allocation process
          mm/sharepool: Use vm_private_data to store the spa
          mm/sharepool: Share pool statistics adaption
          mm/sharepool: Release the sp addr based on the id
          mm/sharepool: Add an interface to obtain an id
          mm/sharepool: Address space management for sp_group
          mm/sharepool: Create global normal and dvpp mapping
          mm/sharepool: Delete single-group mode
          io_uring: io_close: Set owner as current->files if req->work.files uninitialized
          x86: Fix return value of __setup handlers
          x86/delay: Fix the wrong asm constraint in delay_loop()
          ACPI: sysfs: Fix BERT error region memory mapping
          tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd
          nbd: fix io hung while disconnecting device
          nbd: fix race between nbd_alloc_config() and module removal
          nbd: call genl_unregister_family() first in nbd_cleanup()
          ip_gre: test csum_start instead of transport header
          net: xfrm: unexport __init-annotated xfrm4_protocol_init()
          SUNRPC: Fix the calculation of xdr->end in xdr_get_next_encode_buffer()
          af_unix: Fix a data-race in unix_dgram_peer_wake_me().
          NFSv4: Don't hold the layoutget locks across multiple RPC calls
          tcp: tcp_rtx_synack() can be called from process context
          serial: 8250_fintek: Check SER_RS485_RTS_* only with RS485
          md: fix an incorrect NULL check in md_reload_sb
          md: fix an incorrect NULL check in does_sb_need_changing
          ext4: avoid cycles in directory h-tree
          ext4: verify dir block before splitting it
          proc: fix dentry/inode overinstantiating under /proc/${pid}/net
          drivers/base/node.c: fix compaction sysfs file leak
          fsnotify: fix wrong lockdep annotations
          PCI: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store()
          fat: add ratelimit to fat*_ent_bread()
          nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags
          bpf: Enlarge offset check value to INT_MAX in bpf_skb_{load,store}_bytes
          dm stats: add cond_resched when looping over entries
          zsmalloc: fix races between asynchronous zspage free and page migration
          netfilter: conntrack: re-fetch conntrack after insertion
          assoc_array: Fix BUG_ON during garbage collect
          net: af_key: check encryption module availability consistency
          x86/pci/xen: Disable PCI/MSI[-X] masking for XEN_HVM guests
          net: bridge: Clear offload_fwd_mark when passing frame up bridge interface.
          ARM: 9197/1: spectre-bhb: fix loop8 sequence for Thumb2
          ARM: 9196/1: spectre-bhb: enable for Cortex-A15
          block:Fix kabi broken
          block: Fix warning in bd_link_disk_holder()
          block: move the NEED_PART_SCAN flag to struct gendisk
          block: rename bd_invalidated
          scsi: hisi_sas: Modify v3 HW I/O processing when SATA_DISK_ERR bit is set and NCQ Error occurs
          scsi: hisi_sas: enable use_clustering
          scsi: hisi_sas: Change DMA setup lock timeout to 2.5s
          x86/speculation/mmio: Print SMT warning
          KVM: x86/speculation: Disable Fill buffer clear within guests
          x86/speculation/mmio: Reuse SRBDS mitigation for SBDS
          x86/speculation/srbds: Update SRBDS mitigation selection
          x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data
          x86/speculation/mmio: Enable CPU Fill buffer clearing on idle
          x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations
          x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data
          x86/speculation: Add a common function for MD_CLEAR mitigation update
          x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug
          Documentation: Add documentation for Processor MMIO Stale Data
          x86/cpu: Add another Alder Lake CPU to the Intel family
          x86/cpu: Add Lakefield, Alder Lake and Rocket Lake models to the to Intel CPU family
          x86/cpu: Add Jasper Lake to Intel family
          cpu/speculation: Add prototype for cpu_show_srbds()
          x86/cpu: Add Elkhart Lake to Intel family
          block: open accurate iostat account by default
          block: use "precise_iostat" to switch accurate iostat account
          block/diskstats: more accurate approximation of io_ticks for slow disks
          fs-writeback: writeback_sb_inodes：Recalculate 'wrote' according skipped pages
          block: fix that part scan is disabled in device_add_disk()
          Revert "block: rename bd_invalidated"
          Revert "block: move the NEED_PART_SCAN flag to struct gendisk"
          Revert "block:Fix kabi broken"
          rcu/tree: Mark functions as notrace
          netfilter: nf_tables: stricter validation of element data
          net: rose: fix UAF bugs caused by timer handler
          xen/arm: Fix race in RB-tree based P2M accounting
          vt: drop old FONT ioctls
          dm thin: Fix crash in dm_sm_register_threshold_callback()
          xen/blkfront: force data bouncing when backend is untrusted
          xen/netfront: force data bouncing when backend is untrusted
          xen-netfront: fix potential deadlock in xennet_remove()
          xen/netfront: fix leaking data in shared pages
          xen/blkfront: fix leaking data in shared pages
          xen/blkfront: fix memory allocation flags in blkfront_setup_indirect()
          tmpfs: fix the issue that the mount and remount results are inconsistent.
          tmpfs: fix undefined-behaviour in shmem_reconfigure()
          mm/sharepool: Check sp_is_enabled() before show spa_stat


author: mengwenhua <mengwenhua@xfusion.com> - 4.19.90-2212.1.0.0180.u81
changelog:
  - Type:CVE
  - CVE:CVE-2022-4095,CVE-2022-4129,CVE-2022-41858,CVE-2022-45934
  - DESC:
  - x86/tsc: use topology_max_packages() in tsc watchdog check
  - scsi: hisi_sas: Set iptt aborted flag when receiving an abnormal CQ
  - ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0
  - Bluetooth: L2CAP: Fix u8 overflow
  - l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
  - l2tp: Serialize access to sk_user_data with sk_callback_lock
  - net/mlx5: Update the list of the PCI supported devices
  - net/mlx5: Update the list of the PCI supported devices
  - drivers: net: slip: fix NPD bug in sl_tx_timeout()
  - staging: rtl8712: fix use after free bugs
  - Add MWAIT Cx support for Zhaoxin CPUs.


author: chenditang <chenditang@xfusion.com> - 4.19.90-2212.1.0.0180.u83
changelog:
  - Type:bugfix
  - CVE:
  - DESC:propogate_one:check the mnt_master pointer when propagate the mount to
         the peer and slave mounts of 'dest_mnt'.


author: mengwenhua <mengwenhua@xfusion.com> - 4.19.90-2212.2.0.0181.u84
changelog:
  - Type:bugfix
  - CVE:
  - DESC:
  - mm/sharepool: Fix a double free problem caused by init_local_group
  - bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb()
  - macvlan: enforce a consistent minimal mtu
  - net: macvlan: fix memory leaks of macvlan_common_newlink
  - ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network
  - net: gso: fix panic on frag_list with mixed head alloc types
  - ipv6: fix WARNING in ip6_route_net_exit_late()
  - net, neigh: Fix null-ptr-deref in neigh_table_clear()
  - tcp: fix indefinite deferral of RTO with SACK reneging
  - net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed
  - serial: 8250: Flush DMA Rx on RLSI
  - serial: 8250: Fall back to non-DMA Rx if IIR_RDI occurs
  - capabilities: fix potential memleak on error path from vfs_getxattr_alloc()
  - security: commoncap: fix -Wstringop-overread warning
  - ring_buffer: Do not deactivate non-existant pages
  - ftrace: Fix null pointer dereference in ftrace_add_mod()
  - ftrace: Optimize the allocation for mcount entries
  - kprobe: reverse kp->flags when arm_kprobe failed
  - mm: fs: initialize fsdata passed to write_begin/write_end interface
  - nfs4: Fix kmemleak when allocate slot failed
  - kernfs: fix use-after-free in __kernfs_remove
  - mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages
  - mm: /proc/pid/smaps_rollup: fix no vma's null-deref
  - signal handling: don't use BUG_ON() for debugging
  - ida: don't use BUG_ON() for debugging


author: qiushigang <qiushigang@xfusion.com> - 4.19.90-2302.1.0.0187.u91
changelog:
  - Type:CVE
  - CVE:CVE-2022-20566,CVE-2022-3107,CVE-2022-42328,CVE-2022-3643,CVE-2022-3903,CVE-2022-42329,CVE-2022-3108,CVE-2022-3111,CVE-2022-3115,CVE-2022-41218,CVE-2022-2873,CVE-2022-3424,CVE-2022-4662,CVE-2023-23559,CVE-2022-4662,CVE-2022-47929,CVE-2023-23454,CVE-2023-23455,CVE-2023-0394
  - DESC:
  - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put
  - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression
  - Bluetooth: L2CAP: Fix build errors in some archs
  - Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
  - hv_netvsc: Add check for kvmalloc_array
  - xen/netback: don't call kfree_skb() with interrupts disabled
  - xen/netback: fix build warning
  - xen/netback: Ensure protocol headers don't fall in the non-linear area
  - Fix mouse enumeration issue after wakeup from s4
  - arm64: fix a concurrency issue in emulation_proc_handler()
  - dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
  - sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos
  - media: mceusb: Use new usb_control_msg_*() routines
  - media: mceusb: fix control-message timeouts
  - USB: add usb_control_msg_send() and usb_control_msg_recv()
  - dm thin: Use last transaction's pmd->root when commit failed
  - drm: mali-dp: potential dereference of null pointer
  - power: supply: wm8350-power: Add missing free in free_charger_irq
  - sched: Reinit task's vruntime if a task sleep over 200 days
  - media: dvb-core: Fix UAF due to refcount races at releasing
  - drm/amdkfd: Check for null pointer after calling kmemdup
  - mm: fix false-positive OVERCOMMIT_GUESS failures
  - mm/sharepool: clean up ABI breakage
  - mm/hwpoison: put page in already hwpoisoned case with MF_COUNT_INCREASED
  - mm/memory-failure.c: fix race with changing page more robustly
  - mm,memory_failure: always pin the page in madvise_inject_error
  - kobject: Fix slab-out-of-bounds in fill_kobj_path()
  - tracing: Fix infinite loop in tracing_read_pipe on overflowed print_trace_line
  - i2c: ismt: Fix an out-of-bounds bug in ismt_access()
  - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
  - mm/sharepool: Charge Buddy hugepage to memcg
  - USB: Fix kABI for usb_device->reset_in_progress
  - rndis_wlan: Prevent buffer overflow in rndis_query_oid
  - mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
  - ima: Directly assign the ima_default_policy pointer to ima_rules
  - driver core: Don't probe devices after bus_type.match() probe deferral
  - KEYS: trusted: Fix migratable=1 failing
  - certs: Fix blacklist flag type confusion
  - crypto: ecdh - avoid unaligned accesses in ecdh_set_secret()
  - ipv6: avoid use-after-free in ip6_fragment()
  - nvme initialize core quirks before calling nvme_init_subsystem
  - memcg: fix possible use-after-free in memcg_write_event_control()
  - x86/ioremap: Fix page aligned size calculation in __ioremap_caller()
  - nvme: restrict management ioctls to admin
  - arm64: Fix panic() when Spectre-v2 causes Spectre-BHB to re-allocate KVM vectors
  - packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE
  - net: tun: Fix use-after-free in tun_detach()
  - of: property: decrement node refcount in of_fwnode_get_reference_args()
  - af_key: Fix send_acquire race with pfkey_register
  - audit: fix undefined behavior in bit shift for AUDIT_BIT
  - USB: core: Fix RST error in hub.c
  - USB: core: Prevent nested device-reset calls
  - LSM: switch to blocking policy update notifiers
  - ima: use the lsm policy update notifier
  - ima: Handle -ESTALE returned by ima_filter_rule_match()
  - ima: ima/lsm policy rule loading logic bug fixes
  - ima: Evaluate error in init_ima()
  - lsm: Resolve KABI changes on lsm_notifier
  - ima: Do not print policy rule with inactive LSM labels
  - mm/hwpoison: do not lock page again when me_huge_page() successfully recovers
  - bus: hisi_lpc: Fixup IO ports addresses to avoid use-after-free in host removal
  - of/fdt: Don't calculate initrd size from DT if start > end
  - lib/cmdline: avoid page fault in next_arg
  - genirq: Introduce warn log when irq be reentrant
  - net: sched: disallow noqueue for qdisc classes
  - net: sched: atm: dont intepret cls results when asked to drop
  - block: check 'bd_super' before rescanning partition
  - net: sched: cbq: dont intepret cls results when asked to drop
  - swapfile: fix soft lockup in scan_swap_map_slots
  - Huawei BMA: Fix iBMA driver bug
  - ring-buffer: Fix race between reset page and reading page
  - block: don't allow a disk link holder to itself
  - ext4: fix use-after-free in ext4_orphan_cleanup
  - ext4: lost matching-pair of trace in ext4_truncate
  - ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
  - mm/swapfile: add cond_resched() in get_swap_pages()
  - hugetlbfs: don't delete error page from pagecache
  - mm: hwpoison: refactor refcount check handling
  - mm: fix false-positive OVERCOMMIT_GUESS failures
  - cfq: fix memory leak for cfqq


author: wutao <wutao1@xfusion.com> - 4.19.90-2302.1.0.0187.u92
changelog:
  - Type:CVE
  - CVE:CVE-2022-23960
  - DESC:
  - arm64: Use the clearbhb instruction in mitigations
  - arm64: add ID_AA64ISAR2_EL1 sys register
  - KVM: arm64: Allow SMCCC_ARCH_WORKAROUND_3 to be discovered and migrated
  - arm64: Mitigate spectre style branch history side channels 71
  - KVM: arm64: Add templates for BHB mitigation sequences
  - arm64: proton-pack: Report Spectre-BHB vulnerabilities as part of Spectre-v2
  - arm64: Add percpu vectors for EL1
  - arm64: entry: Add macro for reading symbol addresses from the trampoline
  - arm64: entry: Add vectors that have the bhb mitigation sequences
  - arm64: entry: Add non-kpti __bp_harden_el1_vectors for mitigations
  - arm64: entry: Allow the trampoline text to occupy multiple pages
  - arm64: entry: Make the kpti trampoline's kpti sequence optional
  - arm64: entry: Move trampoline macros out of ifdef'd section
  - arm64: entry: Don't assume tramp_vectors is the start of the vectors
  - arm64: entry: Allow tramp_alias to access symbols after the 4K boundary
  - arm64: entry: Move the trampoline data page before the text page
  - arm64: entry: Free up another register on kpti's tramp_exit path
  - arm64: entry: Make the trampoline cleanup optional
  - arm64: entry.S: Add ventry overflow sanity checks
  - arm64: Mitigate spectre style branch history side channels
  - arm64: errata: Fix KVM Spectre-v2 mitigation selection


author: zhaomeng <zhaomeng@xfusion.com> - 4.19.90-2302.1.0.0187.u93
changelog:
  - Type:CVE
  - CVE:CVE-2023-0615 CVE-2022-3707
  - DESC:
  - media: vivid: fix compose size exceed boundary
  - drm/i915/gvt: fix double free bug in split_2MB_gtt_entry


author: wutao <wutao1@xfusion.com> - 4.19.90-2302.1.0.0187.u95
changelog:
  - Type:CVE
  - CVE:CVE-2023-26545,CVE-2023-1078,CVE-2023-0461,CVE-2023-1095,CVE-2023-23000,CVE-2023-1118,CVE-2023-26607,CVE-2023-1073
  - DESC:
  - HID: check empty report_list in hid_validate_values()
  - ntfs: fix out-of-bounds read in ntfs_attr_find()
  - ntfs: fix use-after-free in ntfs_ucsncmp()
  - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
  - phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
  - netfilter: nf_tables: fix null deref due to zeroed list head
  - tcp: Fix listen() regression in 5.15.88.
  - rds: rds_rm_zerocopy_callback() use list_first_entry()
  - genirq: Remove irqd_irq_disabled in __irq_move_irq
  - net: mpls: fix stale pointer if allocation fails during device rename
  - nbd: fix assignment error for first_minor in nbd_dev_add
  - selinux: further adjust init order for cred_* hooks
  - selinux: further adjust init order for file_alloc_security hook
  - selinux: reorder hooks to make runtime disable less broken
  - evm: Fix a small race in init_desc()
  - evm: Check also if *tfm is an error pointer in init_desc()
  - of: resolver: Add of_node_put() before return and break
  - of: unittest: Add of_node_put() before return
  - drivers/iommu: Export core IOMMU API symbols to permit modular drivers
  - component: do not dereference opaque pointer in debugfs
  - ipmi: use %*ph to print small buffer
  - crypto: algif_skcipher - Use chunksize instead of blocksize
  - crypto: algif_skcipher - EBUSY on aio should be an error
  - crypto: rsa-pkcs1pad - fix buffer overread in pkcs1pad_verify_complete()
  - mm/sharepool: Fix null-pointer-deference in sp_free_area
  - net: bonding: Inherit MPLS features from slave devices
  - x86/unwind: Fix check_paravirt() calls orc_find() before declaration
  - mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
  - net: bridge: mcast: add and enforce query interval minimum
  - net: bridge: mcast: add and enforce startup query interval minimum
  - anolis: bond: broadcast ARP or ND messages to all slaves
  - block, bfq: switch 'bfqg->ref' to use atomic refcount apis
  - x86/bugs: Flush IBP in ib_prctl_set()
  - media: vivid: fix compose size exceed boundary
  - cifs: do not include page data when checking signature
  - SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails
  - net: stream: purge sk_error_queue in sk_stream_kill_queues()
  - net: stream: don't purge sk_error_queue in sk_stream_kill_queues()
  - mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
  - mm/khugepaged: fix GUP-fast interaction by sending IPI
  - mm: gup: fix the fast GUP race against THP collapse
  - prlimit: do_prlimit needs to have a speculation check
  - arm64: cmpxchg_double*: hazard against entire exchange variable
  - net/ulp: prevent ULP without clone op from entering the LISTEN status
  - driver core: Fix bus_type.match() error handling in __driver_attach()
  - md: fix a crash in mempool_free
  - bpf: pull before calling skb_postpull_rcsum()
  - SUNRPC: ensure the matching upcall is in-flight upon downcall
  - ovl: Use ovl mounter's fsuid and fsgid in ovl_link()
  - pnode: terminate at peers of source
  - cifs: Fix uninitialized memory read for smb311 posix symlink create
  - device_cgroup: Roll back to original exceptions after copy failure
  - PCI/sysfs: Fix double free in error path
  - PCI: Fix pci_device_is_present() for VFs by checking PF
  - ipmi: fix use after free in _ipmi_destroy_user()
  - ima: Fix a potential NULL pointer access in ima_restore_measurement_list
  - ipmi: fix long wait in unload when IPMI disconnect
  - binfmt: Fix error return code in load_elf_fdpic_binary()
  - chardev: fix error handling in cdev_device_add()
  - bpf: make sure skb->len != 0 when redirecting to a tunneling device
  - ipmi: fix memleak when unload ipmi driver
  - ACPICA: Fix error code path in acpi_ds_call_control_method()
  - skbuff: Account for tail adjustment during pull operations
  - serial: pl011: Do not clear RX FIFO & RX interrupt in unthrottle.
  - serial: amba-pl011: avoid SBSA UART accessing DMACR register
  - class: fix possible memory leak in __class_register()
  - crypto: tcrypt - Fix multibuffer skcipher speed test mem leak
  - blktrace: Fix output non-blktrace event when blk_classic option enabled
  - SUNRPC: Fix missing release socket in rpc_sockname()
  - bonding: uninitialized variable in bond_miimon_inspect()
  - pinctrl: pinconf-generic: add missing of_node_put()
  - ima: Fix misuse of dereference of pointer in template_desc_init_fields()
  - ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage()
  - md/raid1: stop mdx_raid1 thread when raid1 array run failed
  - blk-mq: fix possible memleak when register 'hctx' failed
  - perf: Fix possible memleak in pmu_dev_alloc()
  - cpuidle: dt: Return the correct numbers of parsed idle states
  - pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP
  - pstore/ram: Fix error return code in ramoops_probe()
  - perf: arm_dsu: Fix hotplug callback leak in dsu_pmu_init()
  - sched/rt: Optimize checking group RT scheduler constraints
  - md: protect md_unregister_thread from reentrancy
  - hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
  - lib/list_debug.c: Detect uninitialized lists
  - crypto: tcrypt - avoid signed overflow in byte count
  - mm: sharepool: fix hugepage_rsvd count increase error
  - genirq: introduce CONFIG_GENERIC_PENDING_IRQ_FIX_KABI
  - irqchip/gic-v3-its: introduce CONFIG_GENERIC_PENDING_IRQ
  - md: fix uaf in md_wakeup_thread
  - genirq: add printk safe in irq context
  - jbd2: Fix data missing when reusing bh which is ready to be checkpointed
  - x86/unwind: Fix orc entry for paravirt {save,restore}_fl
  - cifs: sanitize multiple delimiters in prepath


author: wutao <wutao1@xfusion.com> - 4.19.90-2303.1.0.0191.u96
changelog:
  - Type:CVE
  - CVE:CVE-2023-1076
  - DESC:
  - config: enbale irq pending config for fusionos
  - mrp: introduce active flags to prevent UAF when applicant uninit
  - drivers/iommu: Export core IOMMU API symbols to permit modular drivers
  - iommu: Properly export iommu_group_get_for_dev()
  - scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
  - scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
  - net: add sock_init_data_uid()
  - tun: tun_chr_open(): correctly initialize socket uid
  - tap: tap_open(): correctly initialize socket uid


author: xuxinyu <xuxinyu@xfusion.com> - 4.19.90-2303.1.0.0191.u97
changelog:
  - Type:CVE
  - CVE:CVE-2023-26242
  - DESC:
  - afu_mmio_region_get_by_offset in drivers/fpga/dfl-afu-region.c in the
  - Linux kernel through 6.1.12 has an integer overflow.


author: xuxinyu <xuxinyu@xfusion.com> - 4.19.90-2303.1.0.0191.u98
changelog:
  - Type:CVE
  - CVE:CVE-2022-4378
  - DESC:
  - proc: avoid integer type confusion in get_proc_long
  - proc_skip_spaces() shouldn't think it is working on C strings


author: maoyanping <maoyanping@xfusion.com> - 4.19.90-2303.1.0.0191.u99
changelog:
  - Type:CVE
  - CVE:CVE-2023-1074,CVE-2023-20938
  - DESC:
  - binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
  - binder: Address corner cases in deferred copy and fixup
  - binder: fix pointer cast warning
  - binder: defer copies of pre-patched txn data
  - binder: read pre-translated fds from sender buffer
  - binder: avoid potential data leakage when copying txn
  - binder: fix handling of error during copy
  - binder: use cred instead of task for getsecid
  - binder: don't detect sender/target during buffer cleanup
  - binder: make sure fd closes complete
  - binder: Remove bogus warning on failed same-process transaction
  - binder: fix incorrect calculation for num_valid
  - binder: Prevent repeated use of ->mmap() via NULL mapping
  - binder: Don't modify VMA bounds in ->mmap handler
  - binder: Set end of SG buffer area properly.
  - binder: return errors from buffer copy functions
  - binder: check for overflow when alloc for security context
  - binder: fix BUG_ON found by selinux-testsuite
  - binder: fix handling of misaligned binder object
  - binder: use userspace pointer as base of buffer space
  - binder: remove user_buffer_offset
  - binder: remove kernel vm_area for buffer space
  - binder: avoid kernel vm_area for buffer fixups
  - binder: add function to copy binder object from buffer
  - binder: add functions to copy to/from binder buffers
  - binder: create userspace-to-binder-buffer copy function
  - binder: fix use-after-free due to ksys_close() during fdget()
  - binder: fix kerneldoc header for struct binder_buffer
  - binder: create node flag to request sender's security context
  - binder: Add BINDER_GET_NODE_INFO_FOR_REF ioctl.
  - binder: use standard functions to allocate fds
  - sctp: fail if no bound addresses can be used for a given scope


author: guowentao <guowentao@xfusion.com> - 4.19.90-2303.1.0.0191.u100
changelog:
  - Type:CVE
  - CVE:CVE-2023-1281
  - DESC:net/sched: tcindex: update imperfect hash filters respecting rcu


author: heyaohua <heyaohua@xfusion.com> - 4.19.90-2303.1.0.0191.u101
changelog:
  - Type:CVE
  - CVE:CVE-2021-3923,CVE-2023-1079,CVE-2023-1513
  - DESC:
  - HID: asus: use spinlock to safely schedule workers
  - kvm: initialize all of the kvm_debugregs structure before sending it to userspace
  - RDMA/core: Don't infoleak GRH fields


author: fandehui <fandehui@xfusion.com> - 4.19.90-2303.1.0.0191.u102
changelog:
  - Type:CVE
  - CVE:CVE-2023-1382,CVE-2023-28466,CVE-2022-4269,CVE-2022-29901,CVE-2023-1281
  - DESC:
  - tipc: add an extra conn_get in tipc_conn_alloc
  - tipc: set con sock in tipc_conn_alloc
  - net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
  - act_mirred: use the backlog for nested calls to mirred ingress
  - net/sched: act_mirred: refactor the handle of xmit
  - net: sched: don't expose action qstats to skb_tc_reinsert()
  - net: sched: protect against stack overflow in TC act_mirred
  - net: sched: refactor reinsert action
  - x86/speculation: Add RSB VM Exit protections
  - x86/bugs: Warn when "ibrs" mitigation is selected on Enhanced IBRS parts
  - x86/speculation: Use DECLARE_PER_CPU for x86_spec_ctrl_current
  - x86/speculation: Disable RRSBA behavior
  - x86/bugs: Add Cannon lake to RETBleed affected CPU list
  - x86/cpu/amd: Enumerate BTC_NO
  - x86/common: Stamp out the stepping madness
  - x86/speculation: Fill RSB on vmexit for IBRS
  - KVM: VMX: Fix IBRS handling after vmexit
  - KVM: VMX: Prevent guest RSB poisoning attacks with eIBRS
  - x86/speculation: Remove x86_spec_ctrl_mask
  - x86/speculation: Use cached host SPEC_CTRL value for guest entry/exit
  - x86/speculation: Fix SPEC_CTRL write on SMT state change
  - x86/speculation: Fix firmware entry SPEC_CTRL handling
  - x86/speculation: Fix RSB filling with CONFIG_RETPOLINE=n
  - x86/speculation: Change FILL_RETURN_BUFFER to work with objtool
  - intel_idle: Disable IBRS during long idle
  - x86/bugs: Report Intel retbleed vulnerability
  - x86/bugs: Split spectre_v2_select_mitigation() and spectre_v2_user_select_mitigation()
  - x86/speculation: Add spectre_v2=ibrs option to support Kernel IBRS
  - x86/bugs: Optimize SPEC_CTRL MSR writes
  - x86/entry: Add kernel IBRS implementation
  - x86/entry: Remove skip_r11rcx
  - x86/bugs: Keep a per-CPU IA32_SPEC_CTRL value
  - x86/bugs: Add AMD retbleed= boot parameter
  - x86/bugs: Report AMD retbleed vulnerability
  - x86/cpufeatures: Move RETPOLINE flags to word 11
  - x86/cpu: Add a steppings field to struct x86_cpu_id
  - x86/cpu: Add consistent CPU match macros
  - x86/devicetable: Move x86 specific macro out of generic code
  - x86/cpufeature: Fix various quality problems in the <asm/cpu_device_hd.h> header
  - x86/cpufeature: Add facility to check for min microcode revisions
  - Revert "x86/cpu: Add a steppings field to struct x86_cpu_id"
  - Revert "x86/speculation: Add RSB VM Exit protections"
  - x86/nospec: Fix i386 RSB stuffing
  - net/sched: tcindex: search key must be 16 bits
  - net/sched: tcindex: update imperfect hash filters respecting rcu
  - rcu: Upgrade rcu_swap_protected() to rcu_replace_pointer()


author: wutao <wutao1@xfusion.com> - 4.19.90-2304.3.0.0197.u104
changelog:
  - Type:CVE
  - CVE:CVE-2023-1380,CVE-2023-0266,CVE-2023-1838,CVE-2023-1859,CVE-2023-1670,CVE-2023-1855
  - DESC:
  - hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
  - xirc2ps_cs: Fix use after free bug in xirc2ps_detach
  - 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
  - bpf: add missing header file include
  - uaccess: Add speculation barrier to copy_from_user()
  - random: always mix cycle counter in add_latent_entropy()
  - x86/mm: Fix use of uninitialized buffer in sme_enable()
  - ext4: fail ext4_iget if special inode unallocated
  - ext4: zero i_disksize when initializing the bootloader inode
  - irqdomain: Drop bogus fwspec-mapping error handling
  - irqdomain: Fix disassociation race
  - irqdomain: Fix association race
  - x86/kprobes: Fix arch_check_optimized_kprobe check within optimized_kprobe range
  - x86/kprobes: Fix __recover_optprobed_insn check optimizing logic
  - x86/bugs: Reset speculation control settings on init
  - timers: Prevent union confusion from unexpected restart_syscall()
  - crypto: rsa-pkcs1pad - Use akcipher_request_complete
  - crypto: seqiv - Handle EBUSY correctly
  - ACPI: battery: Fix missing NUL-termination with large strings
  - ACPICA: nsrepair: handle cases without a return value correctly
  - genirq: Fix the return type of kstat_cpu_irqs_sum()
  - ACPI: NFIT: fix a potential deadlock during NFIT teardown
  - alarmtimer: Prevent starvation by small intervals and SIG_IGN
  - ring-buffer: Fix race while reader and writer are on the same page
  - block: fix wrong mode for blkdev_put() from disk_scan_partitions()
  - block: fix scan partition for exclusively open device again
  - block: fix kabi broken in ioctl.c
  - block: merge disk_scan_partitions and blkdev_reread_part
  - block: cleanup partition scanning in register_disk
  - block: Revert "block: check 'bd_super' before rescanning partition"
  - md: fix kabi broken in struct mddev
  - md: use interruptible apis in idle/frozen_sync_thread
  - md: wake up 'resync_wait' at last in md_reap_sync_thread()
  - md: refactor idle/frozen_sync_thread()
  - md: add a mutex to synchronize idle and frozen in action_store()
  - md: refactor action_store() for 'idle' and 'frozen'
  - mm: mem_reliable: Initialize reliable_nr_page when mm_init()
  - md: fix soft lockup in status_resync
  - md: don't update recovery_cp when curr_resync is ACTIVE
  - md: Ensure resync is reported after it starts
  - md: Use enum for overloaded magic numbers used by mddev->curr_resync
  - loop: Add parm check in loop_control_ioctl
  - block/wbt: enable wbt after switching cfq to other schedulers
  - Fix double fget() in vhost_net_set_backend()
  - sched/fair: Sanitize vruntime of entity being migrated
  - sched/fair: sanitize vruntime of entity being placed
  - Revert "sched: Reinit task's vruntime if a task sleep over 200 days"
  - btrfs: fix race between quota disable and quota assign ioctls
  - ext4: Fix i_disksize exceeding i_size problem in paritally written case
  - ext4: ext4_put_super: Remove redundant checking for 'sbi->s_journal_bdev'
  - ext4: Fix reusing stale buffer heads from last failed mounting
  - net: virtio_net_hdr_to_skb: count transport header in UFO
  - ext4: fix race between writepages and remount
  - ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF
  - ftrace: Fix invalid address access in lookup_rec() when index is 0
  - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
  - scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
  - x86/nospec: Fix i386 RSB stuffing
  - ext4: make sure fs error flag setted before clear journal error
  - ext4: commit super block if fs record error when journal record without error
  - hugetlb: fix hugepages_setup when deal with pernode
  - hugetlb: fix wrong use of nr_online_nodes
  - tty: fix out-of-bounds access in tty_driver_lookup_tty()
  - kernel: Initialize cpumask before parsing
  - genirq: Disable interrupts for force threaded handlers
  - softirq: Don't try waking ksoftirqd before it has been spawned
  - scsi: hisi_sas: Clear interrupt status when exiting channel int0 for v3 hw
  - scsi: hisi_sas: Handle NCQ error when IPTT is valid
  - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
  - ext4: fix another off-by-one fsmap error on 1k block filesystems
  - mm/oom_kill.c: fix oom_cpuset_eligible() comment
  - oom: decouple mems_allowed from oom_unkillable_task
  - mm, oom: remove redundant task_in_mem_cgroup() check
  - mm, oom: refactor dump_tasks for memcg OOMs
  - block: Fix wrong offset in bio_truncate()
  - fs: move guard_bio_eod() after bio_set_op_attrs
  - block: add bio_truncate to fix guard_bio_eod
  - mm/mempolicy.c: fix out of bounds write in mpol_parse_str()
  - cifs: Fix use-after-free in rdata->read_into_pages()
  - media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
  - mm: memcontrol: fix cannot alloc the maximum memcg ID
  - scsi: cancel the inflight async device probe when remove scsi_target
  - scsi: fix use-after-free problem in scsi_remove_target
  - blk-wbt: don't enable throttling if default elevator is bfq
  - block: Fix kabi broken by "block: split .sysfs_lock into two locks"
  - block: fix comment and add lockdep assert
  - block: don't release queue's sysfs lock during switching elevator
  - block: fix race between switching elevator and removing queues
  - block: split .sysfs_lock into two locks
  - crypto: rsa-pkcs1pad - restore signature length check
  - migrate: hugetlb: check for hugetlb shared PMD in node migration
  - mm: hugetlb: proc: check for hugetlb shared PMD in /proc/PID/smaps
  - ipv6: Fix tcp socket connection with DSCP.
  - ipv6: Fix datagram socket connection with DSCP.
  - aio: fix mremap after fork null-deref
  - bpf: Always return target ifindex in bpf_fib_lookup
  - serial: 8250_dma: Fix DMA Rx rearm race
  - serial: 8250_dma: Fix DMA Rx completion race
  - x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL
  - ipv4: prevent potential spectre v1 gadget in ip_metrics_convert()
  - netlink: annotate data races around sk_state
  - netlink: annotate data races around dst_portid and dst_group
  - netlink: annotate data races around nlk->portid
  - netlink: remove hash::nelems check in netlink_insert
  - net: fix UaF in netns ops registration error path
  - netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state
  - block: fix kabi change since add bd_write_openers and bd_part_write_openers
  - block: add info when opening an exclusive opened block device for write
  - block: add info when opening a write opend block device exclusively
  - Revert "block: add info when opening an exclusive opened block device for write"
  - Revert "block: add info when opening a write opend block device exclusively"
  - ext4: fix WARNING in mb_find_extent


author: wutao <wutao1@xfusion.com> - 4.19.90-2304.3.0.0197.u104
changelog:
  - Type:CVE
  - CVE:CVE-2023-28328,CVE-2023-1380,CVE-2023-0266,CVE-2023-1838,CVE-2023-1859,CVE-2023-1670,CVE-2023-1855
  - DESC:
  - hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
  - xirc2ps_cs: Fix use after free bug in xirc2ps_detach
  - 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
  - bpf: add missing header file include
  - uaccess: Add speculation barrier to copy_from_user()
  - random: always mix cycle counter in add_latent_entropy()
  - x86/mm: Fix use of uninitialized buffer in sme_enable()
  - ext4: fail ext4_iget if special inode unallocated
  - ext4: zero i_disksize when initializing the bootloader inode
  - irqdomain: Drop bogus fwspec-mapping error handling
  - irqdomain: Fix disassociation race
  - irqdomain: Fix association race
  - x86/kprobes: Fix arch_check_optimized_kprobe check within optimized_kprobe range
  - x86/kprobes: Fix __recover_optprobed_insn check optimizing logic
  - x86/bugs: Reset speculation control settings on init
  - timers: Prevent union confusion from unexpected restart_syscall()
  - crypto: rsa-pkcs1pad - Use akcipher_request_complete
  - crypto: seqiv - Handle EBUSY correctly
  - ACPI: battery: Fix missing NUL-termination with large strings
  - ACPICA: nsrepair: handle cases without a return value correctly
  - genirq: Fix the return type of kstat_cpu_irqs_sum()
  - ACPI: NFIT: fix a potential deadlock during NFIT teardown
  - alarmtimer: Prevent starvation by small intervals and SIG_IGN
  - ring-buffer: Fix race while reader and writer are on the same page
  - block: fix wrong mode for blkdev_put() from disk_scan_partitions()
  - block: fix scan partition for exclusively open device again
  - block: fix kabi broken in ioctl.c
  - block: merge disk_scan_partitions and blkdev_reread_part
  - block: cleanup partition scanning in register_disk
  - block: Revert "block: check 'bd_super' before rescanning partition"
  - md: fix kabi broken in struct mddev
  - md: use interruptible apis in idle/frozen_sync_thread
  - md: wake up 'resync_wait' at last in md_reap_sync_thread()
  - md: refactor idle/frozen_sync_thread()
  - md: add a mutex to synchronize idle and frozen in action_store()
  - md: refactor action_store() for 'idle' and 'frozen'
  - mm: mem_reliable: Initialize reliable_nr_page when mm_init()
  - md: fix soft lockup in status_resync
  - md: don't update recovery_cp when curr_resync is ACTIVE
  - md: Ensure resync is reported after it starts
  - md: Use enum for overloaded magic numbers used by mddev->curr_resync
  - loop: Add parm check in loop_control_ioctl
  - block/wbt: enable wbt after switching cfq to other schedulers
  - Fix double fget() in vhost_net_set_backend()
  - sched/fair: Sanitize vruntime of entity being migrated
  - sched/fair: sanitize vruntime of entity being placed
  - Revert "sched: Reinit task's vruntime if a task sleep over 200 days"
  - btrfs: fix race between quota disable and quota assign ioctls
  - ext4: Fix i_disksize exceeding i_size problem in paritally written case
  - ext4: ext4_put_super: Remove redundant checking for 'sbi->s_journal_bdev'
  - ext4: Fix reusing stale buffer heads from last failed mounting
  - net: virtio_net_hdr_to_skb: count transport header in UFO
  - ext4: fix race between writepages and remount
  - ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF
  - ftrace: Fix invalid address access in lookup_rec() when index is 0
  - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
  - scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
  - x86/nospec: Fix i386 RSB stuffing
  - ext4: make sure fs error flag setted before clear journal error
  - ext4: commit super block if fs record error when journal record without error
  - hugetlb: fix hugepages_setup when deal with pernode
  - hugetlb: fix wrong use of nr_online_nodes
  - tty: fix out-of-bounds access in tty_driver_lookup_tty()
  - kernel: Initialize cpumask before parsing
  - genirq: Disable interrupts for force threaded handlers
  - softirq: Don't try waking ksoftirqd before it has been spawned
  - scsi: hisi_sas: Clear interrupt status when exiting channel int0 for v3 hw
  - scsi: hisi_sas: Handle NCQ error when IPTT is valid
  - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
  - ext4: fix another off-by-one fsmap error on 1k block filesystems
  - mm/oom_kill.c: fix oom_cpuset_eligible() comment
  - oom: decouple mems_allowed from oom_unkillable_task
  - mm, oom: remove redundant task_in_mem_cgroup() check
  - mm, oom: refactor dump_tasks for memcg OOMs
  - block: Fix wrong offset in bio_truncate()
  - fs: move guard_bio_eod() after bio_set_op_attrs
  - block: add bio_truncate to fix guard_bio_eod
  - mm/mempolicy.c: fix out of bounds write in mpol_parse_str()
  - cifs: Fix use-after-free in rdata->read_into_pages()
  - media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
  - mm: memcontrol: fix cannot alloc the maximum memcg ID
  - scsi: cancel the inflight async device probe when remove scsi_target
  - scsi: fix use-after-free problem in scsi_remove_target
  - blk-wbt: don't enable throttling if default elevator is bfq
  - block: Fix kabi broken by "block: split .sysfs_lock into two locks"
  - block: fix comment and add lockdep assert
  - block: don't release queue's sysfs lock during switching elevator
  - block: fix race between switching elevator and removing queues
  - block: split .sysfs_lock into two locks
  - crypto: rsa-pkcs1pad - restore signature length check
  - migrate: hugetlb: check for hugetlb shared PMD in node migration
  - mm: hugetlb: proc: check for hugetlb shared PMD in /proc/PID/smaps
  - ipv6: Fix tcp socket connection with DSCP.
  - ipv6: Fix datagram socket connection with DSCP.
  - aio: fix mremap after fork null-deref
  - bpf: Always return target ifindex in bpf_fib_lookup
  - serial: 8250_dma: Fix DMA Rx rearm race
  - serial: 8250_dma: Fix DMA Rx completion race
  - x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL
  - ipv4: prevent potential spectre v1 gadget in ip_metrics_convert()
  - netlink: annotate data races around sk_state
  - netlink: annotate data races around dst_portid and dst_group
  - netlink: annotate data races around nlk->portid
  - netlink: remove hash::nelems check in netlink_insert
  - net: fix UaF in netns ops registration error path
  - netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state
  - block: fix kabi change since add bd_write_openers and bd_part_write_openers
  - block: add info when opening an exclusive opened block device for write
  - block: add info when opening a write opend block device exclusively
  - Revert "block: add info when opening an exclusive opened block device for write"
  - Revert "block: add info when opening a write opend block device exclusively"
  - ext4: fix WARNING in mb_find_extent


author: wutao <wutao1@xfusion.com> - 4.19.90-2304.3.0.0197.u105
changelog:
  - Type:bugfix
  - CVE:
  - DESC:
  - scsi:hisi_sas:Grab sas_dev lock when traversing the members of sas_dev.list
  - arm64: errata: Remove AES hwcap for COMPAT tasks
  - cgroup/cpuset: Change cpuset_rwsem and hotplug lock order


author: gengqihu <gengqihu@xfusion.com> - 4.19.90-2304.4.0.0198.u106
changelog:
  - Type:CVE
  - CVE:CVE-2022-27672,CVE-2023-1829,CVE-2023-1989,CVE-2023-1990,CVE-2023-30456,CVE-2022-36280
  - DESC:
  - KVM: nVMX: add missing consistency checks for CR0 and CR4
  - drm/vmwgfx: Validate the box size for the snooped cursor
  - net/sched: Retire tcindex classifier
  - Documentation/hw-vuln: Fix rST warning
  - Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
  - KVM: x86: Mitigate the cross-thread return address predictions bug
  - x86/speculation: Identify processors vulnerable to SMT RSB predictions
  - cpu/SMT: create and export cpu_smt_possible()
  - nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
  - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition


author: gengqihu <gengqihu@xfusion.com> - 4.19.90-2304.5.0.0199.u107
changelog:
  - Type:CVE
  - CVE:CVE-2023-1998,CVE-2023-2194,CVE-2023-30772
  - DESC:
  - RDMA/hns: Add check for user-configured max_inline_data value
  - power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
  - i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
  - audit: fix a memleak caused by auditing load module
  - tcp: restrict net.ipv4.tcp_app_win
  - x86/speculation: Allow enabling STIBP with legacy IBRS
  - iommu/arm-smmu-v3: Fix UAF when handle evt during iommu group removing


author: lichi <lichi@xfusion.com> - 4.19.90-2304.5.0.0199.u109
changelog:
  - Type:bugfix
  - CVE:
  - DESC:
  - cgroup/cpuset: Change cpuset_rwsem and hotplug lock order
  - cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock
  - cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()


author: gengqihu <gengqihu@xfusion.com> - 4.19.90-2304.5.0.0199.u110
changelog:
  - Type:CVE
  - CVE:CVE-2023-2176,CVE-2023-2177,CVE-2023-31436,CVE-2023-2483,CVE-2023-2269,CVE-2023-32269,CVE-2023-2002
  - DESC:
  - Revert "RDMA/cma: Simplify rdma_resolve_addr() error flow"
  - RDMA/core: Refactor rdma_bind_addr
  - sctp: leave the err path free in sctp_stream_init to sctp_stream_free
  - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
  - net: qcom/emac: Fix use after free bug in emac_remove due to race condition
  - dm ioctl: fix nested locking in table_clear() to remove deadlock concern
  - netrom: Fix use-after-free caused by accept on already connected socket
  - bluetooth: Perform careful capability checks in hci_sock_ioctl()


author: gengqihu <gengqihu@xfusion.com> - 4.19.90-2304.5.0.0199.u111
changelog:
  - Type:CVE
  - CVE:CVE-2023-2124,CVE-2023-32233
  - DESC:
  - xfs: verify buffer contents when we skip log replay
  - netfilter: nf_tables: deactivate anonymous set from preparation phase


author: gengqihu <gengqihu@xfusion.com> - 4.19.90-2304.5.0.0199.u114
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Fix the execution timeout failure of the bind04 test case included in ltp


author: gengqihu <gengqihu@xfusion.com> - 4.19.90-2304.5.0.0199.u115
changelog:
  - Type:CVE
  - CVE:CVE-2022-1280
  - DESC:
  - drm: Fix use-after-free read in drm_getunique()
  - drm: Lock pointer access in drm_master_release()


author: gengqihu <gengqihu@xfusion.com> - 4.19.90-2304.5.0.0199.u117
changelog:
  - Type:CVE
  - CVE:CVE-2023-2985,CVE-2023-34256
  - DESC:
  - fs: hfsplus: fix UAF issue in hfsplus_put_super
  - ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum


author: caofei <caofei@xfusion.com> - 4.19.90-2304.5.0.0199.u118
changelog:
  - Type:bugfix
  - CVE:
  - DESC:cmci:Fixed the problem that the cmci dmesg log did not report an error when using incorrect parameters


author: gengqihu <gengqihu@xfusion.com> - 4.19.90-2304.5.0.0199.u119
changelog:
  - Type:CVE
  - CVE:CVE-2023-3141,CVE-2023-33288
  - DESC:
  - memstick: r592: Fix UAF bug in r592_remove due to race condition
  - power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition


author: gengqihu <gengqihu@xfusion.com> - 4.19.90-2304.5.0.0199.u121
changelog:
  - Type:CVE
  - CVE:CVE-2023-3159,CVE-2023-3161,CVE-2023-3220,CVE-2023-3268,CVE-2023-35823,CVE-2023-35824,CVE-2023-35828
  - DESC:
  - firewire: fix potential uaf in outbound_phy_packet_callback()
  - fbcon: Check font dimension limits
  - drm/msm/dpu: Add check for pstates
  - kernel/relay.c: fix read_pos error when multiple readers
  - relayfs: fix out-of-bounds access in relay_file_read
  - media: saa7134: fix use after free bug in saa7134_finidev due to race condition
  - media: dm1105: Fix use after free bug in dm1105_remove due to race condition
  - usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition


author: gengqihu <gengqihu@xfusion.com> - 4.19.90-2304.5.0.0199.u122
changelog:
  - Type:CVE
  - CVE:CVE-2023-35788
  - DESC:net/sched: flower: fix possible OOB write in fl_set_geneve_opt()


author: gengqihu <gengqihu@xfusion.com> - 4.19.90-2304.5.0.0199.u123
changelog:
  - Type:CVE
  - CVE:CVE-2023-3090,CVE-2023-3358,CVE-2023-3390
  - DESC:
  - ipvlan:Fix out-of-bounds caused by unclear skb->cb
  - HID: intel_ish-hid: Add check for ishtp_dma_tx_map
  - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE


author: gengqihu <gengqihu@xfusion.com> - 4.19.90-2304.5.0.0199.u124
changelog:
  - Type:CVE
  - CVE:CVE-2023-2860,CVE-2023-3006
  - DESC:
  - ipv6: sr: fix out-of-bounds read when setting HMAC data
  - arm64: Add AMPERE1 to the Spectre-BHB affected list


author: gengqihu <gengqihu@xfusion.com> - 4.19.90-2306.4.0.0206.u126
changelog:
  - Type:CVE
  - CVE:CVE-2023-31084
  - DESC:
  - writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
  - ext4: only update i_reserved_data_blocks on successful block allocation
  - bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
  - restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
  - timers/nohz: Last resort update jiffies on nohz_full IRQ entry
  - Fix memory leak when changing bond type to Ethernet
  - md: replace invalid function flush_rdev_wq() with flush_workqueue()
  - md: fix sysfs duplicate file while adding rdev
  - block: Only set bb->changed when badblocks changes
  - block/badblocks: fix the bug of reverse order
  - block/badblocks: fix badblocks loss when badblocks combine
  - md: fix double free of mddev->private in autorun_array()
  - md: use msleep() in md_notify_reboot()
  - md: extend disks_mutex coverage
  - dm thin: fix deadlock when swapping to thin device
  - dm stats: check for and propagate alloc_percpu failure
  - sched_getaffinity: don't assume 'cpumask_size()' is fully initialized
  - icmp: guard against too small mtu
  - net: don't let netpoll invoke NAPI if in xmit context
  - perf/core: Fix the same task check in perf_event_set_output
  - Mark get_lock_parent_ip() __always_inline
  - mm/swap: fix swap_info_struct race between swapoff and get_swap_pages()
  - udp6: fix potential access to stale information
  - verify_pefile: relax wrapper length check
  - cgroup/cpuset: Wake up cpuset_attach_wq tasks in cpuset_cancel_attach()
  - ipv6: Fix an uninit variable access bug in __ip6_make_skb()
  - x86/acpi/cstate: Optimize ARB_DISABLE on Centaur CPUs
  - x86/perf: fix use-after-free bug in uncore_pci_remove()
  - net/hinic: Fix compile error in allyesconfigs
  - scsi/hifc: Fix compile error in allyesconfigs
  - mm: memcontrol: switch to rcu protection in drain_all_stock()
  - arm64/mpam: modify mpam irq register error log
  - kvm: arm64: fix some pvsched bugs
  - x86/msr-index: make SPEC_CTRL_IBRS assembler-portable
  - iommu: Don't print warning when IOMMU driver only supports unmanaged domains
  - rcu: Use *_ONCE() to protect lockless ->expmask accesses
  - iommu/dma: Fix MSI reservation allocation
  - of: overlay: kmemleak in dup_and_fixup_symbol_prop()
  - net: sched: fix NULL pointer dereference in mq_attach
  - jbd2: recheck chechpointing non-dirty buffer
  - dm: add disk before alloc dax
  - nbd: get config_lock before sock_shutdown
  - kprobes: Fix to handle forcibly unoptimized kprobes on freeing_list
  - of: overlay: fix for_each_child.cocci warnings
  - lib/cmdline: fix get_option() for strings starting with hyphen
  - ring-buffer: Sync IRQ works before buffer destruction
  - convert po->origdev to an atomic flag
  - net/packet: convert po->auxdata to an atomic flag
  - crypto: drbg - make drbg_prepare_hrng() handle jent instantiation errors
  - crypto: drbg - Only fail when jent is unavailable in FIPS mode
  - ipv4: Fix potential uninit variable access bug in __ip_make_skb()
  - tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp.
  - of: Fix modalias string generation
  - perf/core: Fix hardlockup failure caused by perf throttle
  - af_packet: Don't send zero-byte data in packet_sendmsg_spkt().
  - serial: 8250: Fix serial8250_tx_empty() race with DMA Tx
  - ipmi_ssif: Rename idle state and check
  - ipmi: fix SSIF not responding under certain cond.
  - media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
  - net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
  - sched/rt: Fix possible warn when push_rt_task


author: gengqihu <gengqihu@xfusion.com> - 4.19.90-2306.4.0.0206.u127
changelog:
  - Type:bugfix
  - CVE:
  - DESC:
  - vfs: add rcu argument to ->get_acl() callback
  - ovl: enable RCU'd ->get_acl()
  - fix kabi broken due to import new inode operation get_inode_acl
  - ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
  - Revert "irqchip/gic-v3-its: introduce CONFIG_GENERIC_PENDING_IRQ"
  - Revert "genirq: introduce CONFIG_GENERIC_PENDING_IRQ_FIX_KABI"
  - Revert "config: enbale irq pending config for openeuler"
  - Revert "genirq: Remove irqd_irq_disabled in __irq_move_irq"
  - genirq: introduce handle_fasteoi_edge_irq flow handler
  - genirq: introduce handle_fasteoi_edge_irq for phytium
  - USB: HCD: Fix URB giveback issue in tasklet function
  - lib/stackdepot.c: fix global out-of-bounds in stack_slabs
  - x86/pm: Fix false positive kmemleak report in msr_build_context()
  - irqchip/gic-v3-its: Track LPI distribution on a per CPU basis
  - irqchip/gic-v3-its: Balance initial LPI affinity across CPUs
  - dm thin: Fix ABBA deadlock by resetting dm_bufio_client
  - block: refactor blkpg_ioctl
  - block: Fix the partition start may overflow in add_partition()
  - udp: Call inet6_destroy_sock() in setsockopt(IPV6_ADDRFORM).
  - tcp/udp: Call inet6_destroy_sock() in IPv6 sk->sk_destruct().
  - inet6: Remove inet6_destroy_sock() in sk->sk_prot->destroy().
  - dccp: Call inet6_destroy_sock() via sk->sk_destruct().
  - nohz: Add TICK_DEP_BIT_RCU
  - tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH
  - printk: declare printk_deferred_{enter,safe}() in include/linux/printk.h
  - mm/page_alloc: fix potential deadlock on zonelist_update_seq seqlock
  - dccp/tcp: Avoid negative sk_forward_alloc by ipv6_pinfo.pktoptions.
  - net: Remove WARN_ON_ONCE(sk->sk_forward_alloc) from sk_stream_kill_queues().
  - sctp: Call inet6_destroy_sock() via sk->sk_destruct().


author: lufalong <lufalong@xfusion.com> - 4.19.90-2306.4.0.0206.u128
changelog:
  - Type:bugfix
  - CVE:
  - DESC:- xfs: properly serialise fallocate against AIO+DIO
         - xfs: attach dquots and reserve quota blocks during
         - xfs: log worker needs to start before intent/unlink recovery


author: gengqihu <gengqihu@xfusion.com> - 4.19.90-2307.4.0.0210.u129
changelog:
  - Type:bugfix
  - CVE:
  - DESC:
  - net:bonding:support balance-alb interface with vlan to bridge
  - bonding: fix reference count leak in balance-alb mode
  - nbd: validate the block size in nbd_set_size
  - nbd: fix incomplete validation of ioctl arg
  - scsi: hisi_sas: Fix normally completed I/O analysed as failed
  - scsi: hisi_sas: Fix Null point exception after call debugfs_remove_recursive()
  - ext4: Stop trying writing pages if no free blocks generated
  - nbd: fold nbd config initialization into nbd_alloc_config()
  - nbd: factor out a helper to get nbd_config without holding 'config_lock'
  - nbd: fix null-ptr-dereference while accessing 'nbd->config'
  - net: tap: check vlan with eth_type_vlan() method
  - net: add vlan_get_protocol_and_depth() helper
  - ipmi_si: fix a memleak in try_smi_init()
  - quota: fixup *_write_file_info() to return proper error code
  - ext4: forbid commit inconsistent quota data when errors=remount-ro
  - ext4: turning quotas off if mount failed after enable quotas
  - x86/kprobes: Fix the error judgment for debug exceptions
  - random: fix data race on crng_node_pool
  - crypto: cryptd - Protect per-CPU resource by disabling BH.
  - block: Limit number of items taken from the I/O scheduler in one go
  - blk-wbt: make enable_state more accurate
  - block: return -EBUSY when there are open partitions in blkdev_reread_part
  - block: don't set GD_NEED_PART_SCAN if scan partition failed
  - Revert "loop: Check for overflow while configuring loop"
  - loop: Check for overflow while configuring loop
  - loop: loop_set_status_from_info() check before assignment
  - PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock
  - scsi: core: Improve scsi_vpd_inquiry() checks
  - ext4: improve error recovery code paths in __ext4_remount()
  - lib: cpu_rmap: Avoid use after free on rmap->obj array entries
  - lib: cpu_rmap: Fix potential use-after-free in irq_cpu_rmap_release()
  - ACPI: EC: Fix oops when removing custom query handlers
  - ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects
  - serial: 8250: Reinit port->pm on port specific driver unbind
  - sched: Fix KCSAN noinstr violation
  - arm64/mm: mark private VM_FAULT_X defines as vm_fault_t
  - kernel/extable.c: use address-of operator on section symbols
  - quota: avoid increasing DQST_LOOKUPS when iterating over dirty/inuse list
  - quota: add dqi_dirty_list description to comment of Dquot List Management
  - quota: factor out dquot_write_dquot()
  - quota: rename dquot_active() to inode_quota_active()
  - quota: add new helper dquot_active()
  - quota: fix dqput() to follow the guarantees dquot_srcu should provide
  - quota: simplify drop_dquot_ref()
  - netlink: annotate accesses to nlk->cb_running
  - net: annotate sk->sk_err write from do_recvmmsg()
  - net: datagram: fix data-races in datagram_poll()
  - af_unix: Fix a data race of sk->sk_receive_queue->qlen.
  - af_unix: Fix data races around sk->sk_shutdown.
  - net: Catch invalid index in XPS mapping
  - af_key: Reject optional tunnel/BEET mode templates in outbound policies
  - vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit()
  - udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated().
  - net: fix skb leak in __skb_tstamp_tx()
  - ipv6: Fix out-of-bounds access in ipv6_find_tlv()
  - af_packet: Fix data-races of pkt_sk(sk)->num.
  - af_packet: do not use READ_ONCE() in packet_bind()
  - tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if user_mss set
  - udp6: Fix race condition in udp6_sendmsg & connect
  - xfrm: Check if_id in inbound policy/secpath match
  - rfs: annotate lockless accesses to sk->sk_rxhash
  - rfs: annotate lockless accesses to RFS sock flow table
  - net: sched: fix possible refcount leak in tc_chain_tmplt_add()
  - ping6: Fix send to link-local addresses with VRF.
  - etmem: fix the div 0 problem in swapcache reclaim process
  - block: Try to handle busy underlying device on discard
  - bpf: cpumap: Fix memory leak in cpu_map_update_elem
  - ext4: Add debug message to notify user space is out of free


author: gengqihu <gengqihu@xfusion.com> - 4.19.90-2307.4.0.0210.u130
changelog:
  - Type:CVE
  - CVE:CVE-2023-35001,CVE-2022-45886,CVE-2023-3611,CVE-2023-21255,CVE-2023-3776,CVE-2023-3609,CVE-2023-3863
  - DESC:
  - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
  - media: dvb-core: Fix use-after-free due on race condition at dvb_net
  - net/sched: sch_qfq: account for stab overhead in qfq_enqueue
  - binder: fix UAF caused by faulty buffer cleanup
  - net/sched: cls_fw: Fix improper refcount update leads to use-after-free
  - net/sched: cls_u32: Fix reference counter leak leading to overflow
  - nfc: Fix to check for kmemdup failure
  - nfc: llcp: nullify llcp_sock->dev on connect() error paths
  - nfc: llcp: simplify llcp_sock_connect() error paths
  - net: nfc: Fix use-after-free caused by nfc_llcp_find_local


author: aiti <aiti@xfusion.com> - 4.19.90-2307.4.0.0210.u131
changelog:
  - Type:CVE
  - CVE:CVE-2023-1295
  - DESC:
  - jbd2: remove t_checkpoint_io_list
  - mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()
  - jbd2: remove journal_clean_one_cp_list()
  - jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
  - jbd2: fix a race when checking checkpoint buffer busy
  - jbd2: fix checkpoint cleanup performance regression
  - x86/mm: Avoid incomplete Global INVLPG flushes
  - tcp: factor out __tcp_close() helper
  - ipv{4,6}/raw: fix output xfrm lookup wrt protocol
  - tcp: deny tcp_disconnect() when threads are waiting
  - net: tcp: fix kabi breakage in struct sock
  - net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report
  - jbd2: Check 'jh->b_transaction' before remove it from checkpoint
  - netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
  - netfilter: nf_tables: unbind non-anonymous set if rule construction fails
  - file: Rename __close_fd_get_file close_fd_get_file
  - fs: provide locked helper variant of close_fd_get_file()
  - io_uring: get rid of intermediate IORING_OP_CLOSE stage


author: gengqihu <gengqihu@xfusion.com> - 4.19.90-2307.4.0.0210.u132
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Revert 4.19.90-2306.4.0.0206.u126, 4.19.90-2306.4.0.0206.u127, 
         4.19.90-2307.4.0.0210.u129, and 4.19.90-2307.4.0.0210.u131 for performance


author: gengqihu <gengqihu@xfusion.com> - 4.19.90-2307.4.0.0210.u134
changelog:
  - Type:CVE
  - CVE:CVE-2023-3567,CVE-2023-4128,CVE-2023-4132,CVE-2023-4194
  - DESC:
  - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
  - vc_screen: don't clobber return value in vcs_read
  - vc_screen: modify vcs_size() handling in vcs_read()
  - net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free
  - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
  - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
  - media: usb: siano: Fix use after free bugs caused by do_submit_urb
  - media: usb: siano: Fix warning due to null work_func_t function pointer
  - net: tun_chr_open(): set sk_uid from current_fsuid()
  - net: tap_open(): set sk_uid from current_fsuid()


author: lufalong <lufalong@xfusion.com> - 4.19.90-2306.4.0.0206.u128
changelog:
  - Type:bugfix
  - CVE:
  - DESC:- xfs: properly serialise fallocate against AIO+DIO
    - xfs: attach dquots and reserve quota blocks during
    - xfs: log worker needs to start before intent/unlink recovery


author: gengqihu <gengqihu@xfusion.com> - 4.19.90-2307.4.0.0210.u132
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Revert 4.19.90-2306.4.0.0206.u126, 4.19.90-2306.4.0.0206.u127,
      4.19.90-2307.4.0.0210.u129, and 4.19.90-2307.4.0.0210.u131 for performance


author: sunguoshuai <sunguoshuai@xfusion.com> - 4.19.90-2307.4.0.0210.u136
changelog:
  - Type:CVE
  - CVE:CVE-2023-3772,CVE-2023-4385,CVE-2023-4387,CVE-2023-40283
  - DESC: xfrm: add NULL check in xfrm_update_ae_params
  - fs: jfs: fix possible NULL pointer dereference in dbFree()
  - net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf()
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb


author: sunguoshuai <sunguoshuai@xfusion.com> - 4.19.90-2307.4.0.0210.u138
changelog:
  - Type:CVE
  - CVE:CVE-2023-1206,CVE-2023-31083,CVE-2023-31085,CVE-2023-3117,CVE-2023-34319,CVE-2023-4459,CVE-2023-4622,CVE-2022-41848,CVE-2022-44032,CVE-2022-44033,CVE-2022-44034,CVE-2022-45884
  - DESC:tcp: Reduce chance of collisions in inet6_hashfn()
      Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROT
      netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE and unbind non-anonymous set if rule construction fails
      xen/netback: Fix buffer overrun triggered by unusual packet
      net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup()
      af_unix: Fix null-ptr-deref in unix_stream_sendpage()
      char: pcmcia: synclink_cs: Fix use-after-free in mgslpc_ops
      char: pcmcia: cm4000_cs: Fix use-after-free in cm4000_fops
      char: pcmcia: cm4040_cs: Fix use-after-free in reader_fops
      char: pcmcia: scr24x_cs: Fix use-after-free in scr24x_fops
      media: dvb-core: Fix use-after-free due to race condition occurring in dvb_register_device()


author: sunguoshuai <sunguoshuai@xfusion.com> - 4.19.90-2307.4.0.0210.u146
changelog:
  - Type:CVE
  - CVE:CVE-2023-42753,CVE-2023-4921,CVE-2020-36766,CVE-2023-42755,CVE-2022-45887,CVE-2023-20588,CVE-2023-21400
  - DESC:netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
      net: sched: sch_qfq: Fix UAF in qfq_dequeue()
      cec-api: prevent leaking memory through hole in structure
      net/sched: Retire rsvp classifier
      media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
      io_uring: ensure IOPOLL locks around deferred work
      net: sched: sch_qfq: Fix UAF in qfq_dequeue()
      x86/CPU/AMD: Do not leak quotient data after a division
      x86/CPU/AMD: Fix the DIV(0) initial fix attempt


author: lingsheng <lingsheng@xfusion.com> - 4.19.90-2307.4.0.0210.u147
changelog:
  - Type:bugfix
  - CVE:
  - DESC:fs: add mode_strip_sgid() helper
  - fs: move S_ISGID stripping into the vfs_*() helpers


author: sunguoshuai <sunguoshuai@xfusion.com> - 4.19.90-2307.4.0.0210.u148
changelog:
  - Type:CVE
  - CVE:CVE-2023-39189,CVE-2023-39192,CVE-2023-39193,CVE-2023-39194,CVE-2023-42754
  - DESC:netfilter: nfnetlink_osf: avoid OOB read
      netfilter: xt_u32: validate user space input
      netfilter: xt_sctp: validate the flag_info count
      net: xfrm: Fix xfrm_address_filter OOB read
      ipv4: fix null-deref in ipv4_link_failure


author: sunguoshuai <sunguoshuai@xfusion.com> - 4.19.90-2307.4.0.0210.u151
changelog:
  - Type:CVE
  - CVE:CVE-2023-45862,CVE-2023-45871,CVE-2023-4623
  - DESC:USB: ene_usb6250: Allocate enough memory for full object
      igb: set max size RX buffer when store bad packet is enabled
      net/sched: sch_hfsc: Ensure inner classes have fsc


author: wangyong2 <wangyong2@xfusion.com> - 4.19.90-2307.4.0.0210.u152
changelog:
  - Type:requirement
  - CVE:NA
  - DESC:crypto:add CONFIG_CRYPTO_SM3_ARM64_CE=m CONFIG_CRYPTO_SM3=m CONFIG_CRYPTO_SM4=m


author: wangyong2 <wangyong2@xfusion.com> - 4.19.90-2307.4.0.0210.u153
changelog:
  - Type:requirement
  - CVE:NA
  - DESC:enable ecryptfs and support sm4 in ecryptfs and check algorithm of filename encryption in ecryptfs


author: sunguoshuai <sunguoshuai@xfusion.com> - 4.19.90-2307.4.0.0210.u154
changelog:
  - Type:CVE
  - CVE:CVE-2023-34324,CVE-2023-5717,CVE-2023-31085,CVE-2023-39198
  - DESC:xen/events: replace evtchn_rwlock with RCU
      perf: Disallow mis-matched inherited group reads
      perf: Fix kabi breakage in struct perf_event
      ubi: Refuse attaching if mtd's erasesize is 0
      drm/qxl: fix UAF on handle creation


author: sunguoshuai <sunguoshuai@xfusion.com> - 4.19.90-2309.5.0.0220.u155
changelog:
  - Type:CVE
  - CVE:CVE-2023-4385
  - DESC:Revert u132,add 4.19.90-2306.4.0.0206.u126, 4.19.90-2306.4.0.0206.u127, 4.19.90-2307.4.0.0210.u129, and 4.19.90-2307.4.0.0210.u131 patches
      ring-buffer: Fix deadloop issue on reading trace_pipe
      ftrace: Fix possible warning on checking all pages used
      ipv6/addrconf: fix a potential refcount underflow for
      pmu: remove uncore code for Zhaoxin Platform
      arm64/mpam: fix missing kfree domain's ctrl_val arrray
      net: hns3: fix not call nic_call_event() problem when
      net: hns3: fix use-after-free bug in
      net: hns3: add barrier in vf mailbox reply process
      net: hns3: fix incorrect hw rss hash type of rx packet
      net: hns3: fix tx timeout issue
      net: hns3: update hns3 version to 23.7.1
      net: hns: fix wrong head when modify the tx feature
      net: hns: update hns version to 23.7.1
      tracing: Fix warning in trace_buffered_event_disable()
      KVM: fix overflow of zero page refcount with ksm
      KVM: Don't set Accessed/Dirty bits for ZERO_PAGE
      can: raw: fix receiver memory leak
      can: raw: fix lockdep issue in raw_release()
      can: bcm: Fix UAF in bcm_proc_show()
      tty: fix pid memleak in disassociate_ctty()
      cgroup: Do not corrupt task iteration when rebinding
      sch_netem: acquire qdisc lock in netem_change()
      sch_netem: fix issues in netem_change() vs
      x86/apic: Fix kernel panic when booting with
      Revert "arm64/mpam: Fix mpam corrupt when cpu online"
      dm thin metadata: check fail_io before using data_sm
      Revert "dm: make sure dm_table is binded before queue
      dm: requeue IO if mapping table not yet available
      dm: don't lock fs when the map is NULL in process of
      dm: don't lock fs when the map is NULL during suspend
      md: Flush workqueue md_rdev_misc_wq in md_alloc()
      sched: disable sched_autogroup by default
      bonding: Fix incorrect deletion of ETH_P_8021AD
      workqueue: Rename "delayed" (delayed by active
      workqueue: Change arguement of pwq_dec_nr_in_flight()
      workqueue: Change the code of calculating work_flags in
      workqueue: Mark barrier work with WORK_STRUCT_INACTIVE
      workqueue: Assign a color to barrier work items
      netfilter: nat: remove csum_recalc hook
      netfilter: nat: fix udp checksum corruption
      netfilter: nat: fix kabi change
      drm/atomic-helper: Bump vblank timeout to 100 ms
      README: Remove out-of-date contribution guide
      fs: jfs: fix possible NULL pointer dereference in
      nbd: pass nbd_sock to nbd_read_reply() instead of index
      x86/microcode/AMD: Clean up per-family patch size
      x86/umip: Print UMIP line only once
      x86/umip: Make the UMIP activated message generic
      hwmon: Introduce SENSOR_DEVICE_ATTR_{RO, RW, WO} and
      hwmon: (k10temp) Auto-convert to use
      hwmon: Add convience macro to define simple static
      hwmon: (k10temp) Use bitops
      hmon: (k10temp) Convert to use
      hwmon: (k10temp) Report temperatures per CPU die
      hwmon: (k10temp) Show core and SoC current and voltages
      hwmon: (k10temp) Don't show temperature limits on Ryzen
      hwmon: (k10temp) Display up to eight sets of CCD
      hwmon: (k10temp) Swap Tdie and Tctl on Family 17h CPUs
      hwmon: (k10temp) Reorganize and simplify temperature
      hwmon: (k10temp) make some symbols static
      i2c: designware: Add device HID for Hygon I2C
      hwmon: (k10temp) Create common functions and macros for
      hwmon: (k10temp) Define SVI telemetry and current
      x86/mce: Increase maximum number of banks to 64
      hwmon: (k10temp) Add support for Zen3 CPUs
      EDAC/amd64: Set proper family type for Family 19h
      x86/CPU/AMD: Save AMD NodeId as cpu_die_id
      EDAC/mce_amd: Use struct cpuinfo_x86.cpu_die_id for AMD
      x86/topology: Set cpu_die_id only if DIE_TYPE found
      EDAC: Add DDR5 new memory type
      hwmon: (k10temp) Remove support for displaying voltage
      x86/cpu/amd: Set __max_die_per_package on AMD
      x86/topology: Make __max_die_per_package available
      x86/cstate: Allow ACPI C1 FFH MWAIT use on Hygon
      hwmon: (k10temp) Don't show Tdie for all Zen/Zen2/Zen3
      hwmon: (k10temp) Rework the temperature offset
      hwmon: (k10temp) Remove residues of current and voltage
      hwmon: (k10temp) Remove unused definitions
      EDAC: Add RDDR5 and LRDDR5 memory types
      EDAC/amd64: Add support for AMD Family 19h Models
      rtc: mc146818-lib: Fix the AltCentury for AMD platforms
      EDAC/amd64: Set memory type per DIMM
      EDAC/amd64: Add new register offset support and related
      EDAC/mc_sysfs: Increase legacy channel support to 12
      x86/MCE/AMD: Use an u64 for bank_map
      x86/cpu/hygon: Modify the CPU topology deriving method
      x86/microcode/hygon: Add microcode loading support for
      x86/amd_nb: Add Hygon family 18h model 4h PCI IDs
      x86/amd_nb: Add northbridge support for Hygon family
      iommu/hygon: Add support for Hygon family 18h model 4h
      EDAC/amd64: Get UMC channel from the 6th nibble for
      EDAC/amd64: Add support for Hygon family 18h model 4h
      EDAC/amd64: Adjust address translation for Hygon family
      EDAC/mce_amd: Use struct cpuinfo_x86.logical_die_id for
      hwmon/k10temp: Add support for Hygon family 18h model
      i2c-piix4: Remove the IMC detecting for Hygon SMBus
      x86/cpu: Get LLC ID for Hygon family 18h model 5h
      x86/amd_nb: Add support for Hygon family 18h model 5h
      EDAC/amd64: Add support for Hygon family 18h model 5h
      hwmon/k10temp: Add support for Hygon family 18h model
      x86/amd_nb: Add support for Hygon family 18h model 6h
      EDAC/amd64: Add support for Hygon family 18h model 6h
      ip6mr: Fix skb_under_panic in ip6mr_cache_report()
      ipvlan: Fix a reference count leak warning in
      tracing: Fix cpu buffers unavailable due to
      tracing: Fix memleak due to race between current_tracer
      fuse: revalidate: don't invalidate if interrupted
      block: don't get gendisk if queue has not been registered
      crypto:padata: Fix return err for PADATA_RESET
      sched/smt: fix unbalance sched_smt_present dec/inc
      iommu/amd: Use cmpxchg_double() when updating 128-bit
      iommu/amd: Restore IRTE.RemapEn bit after programming
      lib/genalloc.c: change return type to unsigned long for
      ext2: remove ext2_new_block()
      ext2: introduce flag argument for ext2_new_blocks()
      ext2: fix race between setxattr and write back
      ext2: dump current reservation window info
      tracing: Fix race issue between cpu buffer write and
      block: add precise io accouting apis
      dm: switch to precise io accounting
      memcg: fix a UAF problem in drain_all_stock()
      cpu/hotplug: Prevent self deadlock on CPU hot-unplug
      memcg: add refcnt for pcpu stock to avoid UAF problem
      netlink: fix potential deadlock in netlink_set_err()
      netlink: Add __sock_i_ino() for __netlink_diag_dump().
      netlink: do not hard code device address lenth in fdb
      ipvlan: Fix return value of ipvlan_queue_xmit()
      net: bridge: keep ports without IFF_UNICAST_FLT in
      tcp: annotate data races in __tcp_oow_rate_limited()
      netfilter: conntrack: Avoid nf_ct_helper_hash uses
      vrf: Increment Icmp6InMsgs on the original netdev
      icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev
      udp6: fix udp6_ehashfn() typo
      net/sched: make psched_mtu() RTNL-less safe
      SUNRPC: Fix UAF in svc_tcp_listen_data_ready()
      net: Replace the limit of TCP_LINGER2 with
      tcp: annotate data-races around tp->linger2
      tcp: annotate data-races around rskq_defer_accept
      tcp: annotate data-races around tp->notsent_lowat
      tcp: annotate data-races around fastopenq.max_qlen
      bonding: reset bond's flags when down link is P2P
      team: reset team's flags when down link is P2P device
      virtio-net: fix race between set queues and probe
      virtio-net: set queues after driver_ok
      tcp_metrics: fix addr_same() helper
      tcp_metrics: annotate data-races around tm->tcpm_stamp
      tcp_metrics: annotate data-races around tm->tcpm_lock
      tcp_metrics: annotate data-races around tm->tcpm_vals[]
      tcp_metrics: annotate data-races around tm->tcpm_net
      tcp_metrics: fix data-race in tcpm_suck_dst() vs
      net/packet: annotate data-races around tp->status
      drivers: net: prevent tun_build_skb() to exceed the
      integrity: Fix possible multiple allocation in
      nbd: Add the maximum limit of allocated index in
      serial: 8250_dw: split Synopsys DesignWare 8250 common
      serial: 8250_dw: Preserve original value of DLF
      scsi: core: Fix legacy /proc parsing buffer overflow
      scsi: core: Fix possible memory leak if device_add()
      scsi: core: raid_class: Remove raid_component_add()
      scsi: scsi_device_gets returns failure when the module
      scsi: don't fail if hostt->module is NULL
      scsi: fix kabi broken in struct Scsi_Host
      net: openvswitch: don't send internal clone attribute
      i2c: hisi: Add gpio bus recovery support
      netfilter: nftables: exthdr: fix 4-byte stack OOB write
      sched/qos: Fix warning in CPU hotplug scenarios
      crypto:hisilicon/sec - modify hw endian config
      crypto:hisilicon/qm - cache write back before flr and
      crypto: hisilicon/qm - prevent soft lockup in
      jbd2: Fix potential data lost in recovering journal raced
      crypto: hisilicon - reset before init the device
      sdei_watchdog: Avoid exception during sdei handler


author: sunguoshuai <sunguoshuai@xfusion.com> - 4.19.90-2309.5.0.0220.u159
changelog:
  - Type:CVE
  - CVE:CVE-2022-45919,CVE-2023-25775,CVE-2023-39197
  - DESC:serial: 8250: Reinit port->pm on port specific driver
      nohz: Add TICK_DEP_BIT_RCU
      tty: Prevent writing chars during tcsetattr
      media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
      RDMA/irdma: Prevent zero-length STAG registration
      netfilter: conntrack: dccp: copy entire header to stack buffer


author: sunguoshuai <sunguoshuai@xfusion.com> - 4.19.90-2309.5.0.0220.u160
changelog:
  - Type:bugfix
  - CVE:
  - DESC: revert nohz: Add TICK_DEP_BIT_RCU for hackbench performance degradation
      revert tty: Prevent writing chars during tcsetattr for hackbench performance degradation


author: sunguoshuai <sunguoshuai@xfusion.com> - 4.19.90-2309.5.0.0220.u161
changelog:
  - Type:CVE
  - CVE:CVE-2023-6546,CVE-2023-6931,CVE-2023-6932
  - DESC:tty: n_gsm: fix restart handling via CLD command
      tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
      perf: Fix perf_event_validate_size()
      perf: Fix perf_event_validate_size() lockdep splat
      ipv4: igmp: fix refcnt uaf issue when receiving igmp


author: sunguoshuai <sunguoshuai@xfusion.com> - 4.19.90-2309.5.0.0220.u162
changelog:
  - Type:CVE
  - CVE:CVE-2023-7192
  - DESC:netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack()


author: sunguoshuai <sunguoshuai@xfusion.com> - 4.19.90-2309.5.0.0220.u163
changelog:
  - Type:CVE
  - CVE:CVE-2024-0565,CVE-2023-6040,CVE-2023-51781,CVE-2023-51780,CVE-2023-51782,CVE-2022-48619,CVE-2024-0340,CVE-2023-6606,CVE-2023-6610,CVE-2023-1077
  - DESC:Input: add bounds checking to input_set_capability()
      atm: Fix Use-After-Free in do_vcc_ioctl
      appletalk: Fix Use-After-Free in atalk_ioctl
      net/rose: Fix Use-After-Free in rose_ioctl
      netfilter: nf_tables: Reject tables of unsupported family
      smb: client: fix OOB in smbCalcSize()
      smb: client: fix potential OOB in smb2_dump_detail()
      vhost: use kzalloc() instead of kmalloc() followed by memset()
      smb: client: fix OOB in receive_encrypted_standard()
      sched/rt: pick_next_rt_entity(): check list_entry


author: xuyuchao <xu.yuchao@xfusion.com> - 4.19.90-2309.5.0.0220.u164
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Remove the existing megaraid driver code and replace it with the code from the Broadcom manufacturer.


author: sunguoshuai <sunguoshuai@xfusion.com> - 4.19.90-2310.4.0.0223.u165
changelog:
  - Type:bugfix
  - CVE:
  - DESC:cgroup: fix missing cpus_read_{lock,unlock}() in cgroup_transfer_tasks()
      cpuidle: Fix kobject memory leaks in error paths
      netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
      xfrm6: fix inet6_dev refcount underflow problem
      cifs: Release folio lock on fscache read hit
      x86/topology: Fix erroneous smp_num_siblings on Intel Hybrid platforms
      mm: memory-failure: use rcu lock instead of tasklist_lock when collect_procs()
      quota: fix warning in dqgrab()
      quota: Properly disable quotas when add_dquot_ref() fails
      serial: 8250: Fix oops for port->pm on uart_change_pm()
      net: xfrm: Fix xfrm_address_filter OOB read
      net: af_key: fix sadb_x_filter validation
      ip_vti: fix potential slab-use-after-free in decode_session6
      team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
      sock: Fix misuse of sk_under_memory_pressure()
      PCI: acpiphp: Reassign resources on bridge if necessary
      PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus
      net: remove bond_slave_has_mac_rcu()
      bonding: fix macvlan over alb bond support
      sock: annotate data-races around prot->memory_pressure
      net: fix the RTO timer retransmitting skb every 1ms if linear option is enabled
      net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure
      net/sched: fix a qdisc modification with ambiguous command request
      netfilter: nf_queue: fix socket leak
      rtnetlink: Reject negative ifindexes in RTM_NEWLINK
      ipv4: fix null-deref in ipv4_link_failure
      RDMA/irdma: Prevent zero-length STAG registration
      net: ipv4: fix one memleak in __inet_del_ifa()
      scsi: hisi_sas: Handle the NCQ error returned by D2H frame
      netfilter: nfnetlink_osf: avoid OOB read
      netfilter: xt_sctp: validate the flag_info count
      ext4: fix rec_len verify error
      x86/platform/UV: Replace kmalloc() and memset() with k[cz]alloc() calls
      x86/platform/uv: Fix missing checks of kcalloc() return values
      perf/core: Fix reentry problem in perf_output_read_group()
      USB: ene_usb6250: Allocate enough memory for full object
      netfilter: xt_u32: validate user space input
      igb: set max size RX buffer when store bad packet is enabled
      ktask: add null-pointer checks for ktask_works in ktask_init()
      ktask: add memory leak handling for ktask_works in ktask_init()


author: sunguoshuai <sunguoshuai@xfusion.com> - 4.19.90-2310.4.0.0223.u166
changelog:
  - Type:CVE
  - CVE:CVE-2023-46343,CVE-2023-51042,CVE-2023-51043,CVE-2024-0607,CVE-2024-0639,CVE-2024-23849
  - DESC:nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
      drm/amdgpu: Fix potential fence use-after-free v2
      drm/atomic: Fix potential use-after-free in nonblocking commits
      netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
      sctp: fix potential deadlock on &net->sctp.addr_wq_lock
      net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv


author: xuyuchao <xu.yuchao@xfusion.com> - 4.19.90-2310.4.0.0223.u167
changelog:
  - Type:bugfix
  - CVE:
  - DESC: 1.Support tcm_qla2xxx
    2.Provide-stmmac-ko-to-solve-the-problem-of-unrecogniz


author: sunguoshuai <sunguoshuai@xfusion.com> - 4.19.90-2310.4.0.0223.u168
changelog:
  - Type:CVE
  - CVE:CVE-2023-6531,CVE-2024-23851,CVE-2023-46838
  - DESC:io_uring/af_unix: disable sending io_uring over sockets
      add check for param_kernel->data_size not bigger than INT_MAX in copy_params()
      xen-netback: don't produce zero-size SKB frags


author: sunguoshuai <sunguoshuai@xfusion.com> - 4.19.90-2310.4.0.0223.u169
changelog:
  - Type:CVE
  - CVE:CVE-2024-1086
  - DESC:netfilter: nf_tables: reject QUEUE/DROP verdict parameters
      sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset


author: chenditang <chenditang@xfusion.com> - 4.19.90-2310.4.0.0223.u172
changelog:
  - Type:bugfix
  - CVE:
  - DESC: xfs: add selinux labels to whiteout inodes
      xfs: validate inode fork size against fork format
      xfs: always return -ENOSPC on project quota reservation failure
      xfs: widen inode delalloc block counter to 64-bits
      xfs: group quota should return EDQUOT when prj quota enabled
      xfs: also remove cached ACLs when removing the underlying attr
      xfs: fix reflink source file racing with directio writes
      xfs: bulkstat should copy lastip whenever userspace supplies one
      xfs: prohibit fstrim in norecovery mode


author: wulinfeng <wulinfeng@xfusion.com> - 4.19.90-2310.4.0.0223.u174
changelog:
  - Type:CVE
  - CVE:CVE-2023-51779,CVE-2023-52435,CVE-2023-52439,CVE-2023-52443,CVE-2023-52444,CVE-2023-52445,CVE-2023-52449,CVE-2023-52451,CVE-2023-6121,CVE-2024-23307
  - DESC: Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
      net: prevent mss overflow in skb_segment()
      net: Fix compile warning in skb_segment()
      uio: Fix use-after-free in uio_open
      apparmor: avoid crash when parsed profile name is empty
      f2fs: fix to avoid dirent corruption
      media: pvrusb2: fix use after free on context disconnection
      mtd: Fix gluebi NULL pointer dereference caused by ftlnotifier
      powerpc/pseries/memhotplug: Quieten some DLPAR operations
      powerpc/pseries/memhp: Fix access beyond end of drmem array
      nvmet: nul-terminate the NQNs passed in the connect command
      md/raid5: fix atomicity violation in raid5_cache_count


author: shechenglong <shechenglong@xfusion.com> - 4.19.90-2310.4.0.0223.u175
changelog:
  - Type:bugfix
  - CVE:
  - DESC: Revert "rtnetlink: Reject negative ifindexes in RTM_NEWLINK"
      rtnetlink: Reject negative ifindexes in RTM_NEWLINK


author: xuyuchao <xu.yuchao@xfusion.com> - 4.19.90-2310.4.0.0223.u176
changelog:
  - Type:bugfix
  - CVE:
  - DESC: fs/jbd2: Add scheduling points in commit_transaction and log_do_checkpoint.


author: fandehui <fandehui@xfusion.com> - 4.19.90-2310.4.0.0223.u178
changelog:
  - Type:CVE
  - CVE:CVE-2023-52436,CVE-2021-47194,CVE-2023-52458,CVE-2024-26883,CVE-2024-26884,CVE-2024-26898,CVE-2024-26901,CVE-2024-26903,CVE-2024-     26904,CVE-2024-26908,CVE-2024-26882,CVE-2023-52578
  - DESC: f2fs: explicitly null erminate the xattr list
      net: call cfg80211_stop_ap when switch from P2P_GO type                                  block: add check that partition length needs to be aligned
      bpf: Check for integer overflow when using
      Fix stackmap overflow check on 32-bit arches
      Fix hashtab overflow check on 32-bit arches
      aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
      fs: do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
      Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
      btrfs: fix data race at btrfs_use_block_rsv() when accessing block reserve
      x86/xen: Add some null pointer checking to smp.c
      net: add atomic_long_t to net_device_stats fields
      ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()


author: wulinfeng <wulinfeng@xfusion.com> - 4.19.90-2401.1.0.0233.u179
changelog:
  - Type:CVE
  - CVE:CVE-2022-44033,CVE-2023-35827
  - DESC:release 4.19.90-2310.4.0-4.19.90-2401.1.0
    ubi: Refuse attaching if mtd's erasesize is 0
    DRM: Phytium display DRM document
    DRM: Phytium display DRM driver
    ASoC: hdmi-codec: Add an op to set callback function for plug event
    char: pcmcia: remove all the drivers
    tty: ipwireless: move Kconfig entry to tty
    perf: Fix kabi breakage in struct perf_event
    perf: Disallow mis-matched inherited group reads
    can: can controller driver for phytium CPUs
    media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
    Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
    printk: Drop console_sem during panic
    printk: Avoid livelock with heavy printk during panic
    printk: disable optimistic spin during panic
    printk: Add panic_in_progress helper
    xen/events: replace evtchn_rwlock with RCU
    irqchip/gicv3-its: Add workaround for hip09 ITS erratum 162100801
    irqchip/gic-v3-its: Make is_v4 use a TYPER copy
    Revert "genirq: Introduce warn log when irq be reentrant"
    Revert "genirq: add printk safe in irq context"
    audit: fix possible soft lockup in __audit_inode_child()
    can: add phytium can driver document
    efi: use 32-bit alignment for efi_guid_t literals
    can: raw: add missing refcount for memory leak fix
    arch/x86/mm/numa: Do not initialize nodes twice
    mm: handle uninitialized numa nodes gracefully
    mm, memory_hotplug: make arch_alloc_nodedata independent on CONFIG_MEMORY_HOTPLUG
    tcp: fix delayed ACKs for MSS boundary condition
    tcp: fix quick-ack counting to count actual ACKs of new data
    ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
    team: fix null-ptr-deref when team device type is changed
    af_unix: Fix data race around sk->sk_err.
    af_unix: Fix data-races around sk->sk_shutdown.
    af_unix: Fix data-race around unix_tot_inflight.
    af_unix: Fix data-races around user->unix_inflight.
    net: ipv6/addrconf: avoid integer underflow in ipv6_create_tempaddr
    net: read sk->sk_family once in sk_mc_loop()
    skbuff: skb_segment, Call zero copy functions before using skbuff frags
    igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU
    tcp: tcp_enter_quickack_mode() should be static
    net: Avoid address overwrite in kernel_connect
    md/raid1: fix error: ISO C90 forbids mixed declarations
    md: raid1: fix potential OOB in raid1_remove_disk()
    ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer
    autofs: fix memory leak of waitqueues in autofs_catatonic_mode
    pstore/ram: Check start of empty przs during init
    scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param()
    fs: Fix error checking for d_hash_and_lookup()
    crypto: hisilicon/qm - alloc reserve buffer to set and get xqc
    fs: lockd: avoid possible wrong NULL parameter
    crypto: hisilicon - qm obtain the mailbox config at one time
    regmap: rbtree: Fix wrong register marked as in-cache when creating new node
    regmap: rbtree: Use alloc_flags for memory allocations
    PCI/IOV: Add pci_sriov_numvfs_lock to support enable pci sriov concurrently
    net: sched: sch_qfq: Use non-work-conserving warning handler
    arm64: config: add CONFIG_NGBE for Wangxun 1G NIC
    netfilter: conntrack: fix infinite loop on rmmod
    netfilter: conntrack: do not auto-delete clash entries on reply
    netfilter: conntrack: allow insertion of clashing entries
    netfilter: conntrack: split resolve_clash function
    netfilter: conntrack: place confirm-bit setting in a helper
    netfilter: conntrack: remove two args from resolve_clash
    netfilter: conntrack: tell compiler to not inline nf_ct_resolve_clash
    sched/membarrier: fix missing local execution of ipi_sync_rq_state()
    sched/cpuacct: Fix charge cpuacct.usage_sys
    kernel/trace: Fix do not unregister tracepoints when register sched_migrate_task fail
    hda: add phytium hda driver
    hda: add phytium hda driver document
    i2c: add Phytium i2c driver
    i2c: add phytium i2c driver DT binding docs
    Net: ethernet: Support 3snic 3s9xx network card
    drm/qxl: fix UAF on handle creation
    media: dvb-core: Fix use-after-free due to race at dvb_register_device()
    media: media/dvb: Use kmemdup rather than duplicating its implementation
    media: dvbdev: Fix memleak in dvb_register_device
    drivers/gmjstcm: fix a dev_err() call in spi tcm device probe
    SCSI: SSSRAID: Support 3SNIC 3S5XX serial RAID/HBA  controllers
    arm64: config: add config for Phytium drivers
    config: update openeuler_defconfig for arm64
    config: update openeuler_defconfig for x86
    kconfig: Add script to check & update openeuler_defconfig
    kbuild: ensure full rebuild when the compiler is updated
    mm/migrate.c: fix potential indeterminate pte entry in migrate_vma_insert_page()
    mm, memory_hotplug: update pcp lists everytime onlining a memory block
    sched/fair: Refill bandwidth before scaling
    signal: Properly set TRACE_SIGNAL_LOSE_INFO in __send_signal
    mm: don't let userspace spam allocations warnings
    sched: smart grid: check is active in affinity timer
    perf/core: Fix perf_mmap fail when CONFIG_PERF_USE_VMALLOC enabled
    ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
    x86/mce/amd: Publish the bank pointer only after setup has succeeded
    x86/mce/inject: Fix a wrong assignment of i_mce.status
    crypto: fix kabi broken in struct crypto_instance
    crypto: api - Use work queue in crypto_destroy_instance
    cpufreq: make interface functions and lock holding state clear
    cpufreq: Abort show()/store() for half-initialized policies
    tun: avoid double free in tun_free_netdev
    net: fix kabi broken in struct netns_xfrm
    xfrm: fix a data-race in xfrm_gen_index()
    dccp/tcp: Call security_inet_conn_request() after setting IPv6 addresses.
    can: dev: can_restart(): fix race condition between controller restart and netif_carrier_on()
    can: dev: can_restart(): don't crash kernel if carrier is OK
    can: dev: move driver related infrastructure into separate subdir
    ipv6: avoid atomic fragment on GSO packets
    tcp_metrics: do not create an entry from tcp_init_metrics()
    tcp_metrics: properly set tp->snd_ssthresh in tcp_init_metrics()
    tcp_metrics: add missing barriers on delete
    tcp: tsq: relax tcp_small_queue_check() when rtx queue contains a single skb
    tcp: fix excessive TLP and RACK timeouts from HZ rounding
    genirq/matrix: Exclude managed interrupts in irq_matrix_allocated()
    ACPI: sysfs: Fix create_pnp_modalias() and create_of_modalias()
    ACPI: irq: Fix incorrect return value in acpi_register_gsi()
    ext4: move 'ix' sanity check to corrent position
    vfs: fix readahead(2) on block devices
    overlayfs: set ctime when setting mtime and atime
    quota: Fix slow quotaoff
    mcb: remove is_added flag from mcb_device struct
    sched,idle,rcu: Push rcu_idle deeper into the idle path
    cgroup: Remove duplicates in cgroup v1 tasks file
    x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs
    workqueue: Override implicit ordered attribute in workqueue_apply_unbound_cpumask()
    icmp: Fix a data-race around sysctl_icmp_errors_use_inbound_ifaddr.
    net: hns: update hns version to 23.12.1
    net: hns: fix fake link up on xge port
    regmap: fix NULL deref on lookup
    KVM: arm64: limit PMU version to PMUv3 for ARMv8.1
    arm64: cpufeature: Extract capped perfmon fields
    nvme: retain split access workaround for capability reads
    cpu/hotplug: fix kabi breakage in enum cpuhp_state
    hrtimers: Push pending hrtimers away from outgoing CPU earlier
    Revert "hrtimers: Push pending hrtimers away from outgoing CPU earlier"
    Revert "cpu/hotplug: fix kabi breakage in enum cpuhp_state"
    tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
    tty: n_gsm: fix restart handling via CLD command
    perf: Fix perf_event_validate_size() lockdep splat
    perf: Fix perf_event_validate_size()
    i2c: hisi: Only handle the interrupt of the driver's transfer
    i2c: hisi: Only use the completion interrupt to finish the transfer
    i2c: hisi: Avoid redundant interrupts
    net: Remove acked SYN flag from packet in the transmit queue correctly
    SCSI: hisi_raid: support SPxxx serial RAID/HBA controllers
    Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
    smb: client: fix potential OOB in smb2_dump_detail()
    smb: client: fix OOB in smbCalcSize()
    atm: Fix Use-After-Free in do_vcc_ioctl
    jbd2: fix soft lockup in journal_finish_inode_data_buffers()
    ravb: Fix races between ravb_tx_timeout_work() and net related ops
    ravb: Fix use-after-free issue in ravb_tx_timeout_work()
    net: check vlan filter feature in vlan_vids_add_by_dev() and vlan_vids_del_by_dev()
    ip: Fix data-races around sysctl_ip_no_pmtu_disc.
    ip: Fix data-races around sysctl_ip_fwd_update_priority.
    fs: don't audit the capability check in simple_xattr_list()


author: wulinfeng <wulinfeng@xfusion.com> - 4.19.90-2401.1.0.0233.u180
changelog:
  - Type:requirement
  - CVE:
  - DESC:release 4.19.90-2310.4.0-4.19.90-2401.1.0
    add 0001-SCSI-hisi_raid-support-SPxxx-serial-RAID-HBA-control.patch


author: fandehui <fandehui@xfusion.com> - 4.19.90-2401.1.0.0233.u184
changelog:
  - Type:CVE
  - CVE:CVE-2021-46904,CVE-2021-46905,CVE-2021-46906,CVE-2023-52464,CVE-2023-52469,CVE-2024-26595,CVE-2024-26597,CVE-2024-26598,CVE-2024-26600,CVE-2024-26602,CVE-2024-26606,CVE-2019-25162,CVE-2021-46909,CVE-2021-47171,CVE-2021-47173,CVE-2024-26934,CVE-2024-27013,CVE-2024-27019,CVE-2024-27020,CVE-2024-35982,CVE-2024-35984,CVE-2022-48693,CVE-2024-35997,CVE-2023-52753,CVE-2023-52817,CVE-2023-5282,CVE-2021-46925,CVE-2024-35978,CVE-2023-52806,CVE-2021-46924,CVE-2021-46926,CVE-2021-46929,CVE-2021-46928,CVE-2021-46933,CVE-2021-46935,CVE-2021-46932,CVE-2021-46934,CVE-2020-36777,CVE-2021-46941,CVE-2023-47233,CVE-2024-25739
  - DESC:usb: hso: check for return value in hso_serial_common_create()
    net: hso: fix null-ptr-deref during tty device unregistration
    net: hso: fix NULL-deref on disconnect regression
    HID: usbhid: fix info leak in hid_submit_ctrl
    EDAC/thunderx: Fix possible out-of-bounds string access
    drivers/amd/pm: fix a use-after-free in kv_parse_power_table
    mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
    net: qualcomm: rmnet: fix global oob in rmnet_policy
    KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
    phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
    sched/membarrier: reduce the ability to hammer on sys_membarrier
    binder: signal epoll threads of self-work
    i2c: Fix a potential use after free
    ARM: footbridge: fix PCI interrupt mapping
    net: usb: fix memory leak in smsc75xx_bind
    net: usb: fix possible use-after-free in smsc75xx_bind
    USB: core: Fix deadlock in usb_deauthorize_interface()
    tun: limit printing rate when illegal packet received by tun dev
    netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
    netfilter: nf_tables: __nft_expr_type_get() selects specific family type
    batman-adv: Avoid infinite loop trying to resize local TT
    i2c: smbus: fix NULL function pointer dereference
    soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe
    soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
    HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
    drm/amd/display: Avoid NULL dereference of timing generator
    drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
    net/smc: fix kernel panic caused by race of smc_sock
    Bluetooth: Fix memory leak in hci_req_sync_complete()
    ALSA: hda: Fix possible null-ptr-deref when assigning a stream
    NFC: st21nfca: Fix memory leak in device probe and remove
    soundwire: intel: filter SoundWire controller device search
    ALSA: hda: intel-sdw-acpi: harden detection of controller
    sctp: use call_rcu to free endpoint
    parisc: Clear stale IIR value on instruction access rights trap
    usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear
    binder: fix async_free_space accounting for empty parcels
    Input: appletouch - initialize work before device registration
    i2c: validate user data in compat ioctl
    media: dvbdev: Fix memory leak in dvb_media_device_free()
    usb: dwc3: core: Do not perform GCTL_CORE_SOFTRESET during bootup
    usb: dwc3: core: balance phy init and exit
    usb: dwc3: core: Do core softreset when switch mode
    wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
    ubi: Check for too small LEB size in VTBL code
    drm/panel: fix a possible null pointer dereference
    misc/uss720: fix memory leak in uss720_probe


author: wulinfeng <wulinfeng@xfusion.com> - 4.19.90-2401.1.0.0233.u185
changelog:
  - Type:CVE
  - CVE:CVE-2020-36778,CVE-2020-36780,CVE-2020-36784,CVE-2021-46952,CVE-2021-46955,CVE-2021-46984,CVE-2021-46989,CVE-2021-46990,CVE-2021-46998,CVE-2021-47013,CVE-2021-47015,CVE-2021-47024,CVE-2021-47034,CVE-2021-47054,CVE-2021-47056,CVE-2021-47060,CVE-2021-47061,CVE-2021-47063,CVE-2021-47071,CVE-2021-47073,CVE-2021-47074,CVE-2021-47076,CVE-2021-47091,CVE-2021-47101,CVE-2021-47110,CVE-2021-47113,CVE-2021-47121,CVE-2021-47122,CVE-2021-47131,CVE-2021-47142,CVE-2021-47143,CVE-2021-47145,CVE-2021-47146,CVE-2021-47149,CVE-2021-47159,CVE-2021-47161,CVE-2021-47162,CVE-2021-47163,CVE-2021-47169,CVE-2021-47170,CVE-2021-47180,CVE-2021-47182,CVE-2021-47203,CVE-2021-47210,CVE-2021-47211,CVE-2021-47216,CVE-2021-47217,CVE-2022-48627,CVE-2022-48636,CVE-2022-48664,CVE-2022-48674,CVE-2022-48697,CVE-2022-48701,CVE-2022-48702,CVE-2023-52476,CVE-2023-52478,CVE-2023-52488,CVE-2023-52502,CVE-2023-52515,CVE-2023-52528,CVE-2023-52530,CVE-2023-52566,CVE-2023-52583,CVE-2023-52586,CVE-2023-52587,CVE-2023-52594,CVE-2023-52597,CVE-2023-52598,CVE-2023-52599,CVE-2023-52601,CVE-2023-52602,CVE-2023-52603,CVE-2023-52604,CVE-2023-52606,CVE-2023-52615,CVE-2023-52619,CVE-2023-52620,CVE-2023-52622,CVE-2023-52635,CVE-2023-52637,CVE-2023-52639,CVE-2023-52642,CVE-2023-52652,CVE-2023-52656,CVE-2023-52685,CVE-2023-52686,CVE-2023-52802,CVE-2023-52809,CVE-2024-1151,CVE-2024-24855,CVE-2024-26586,CVE-2024-26622,CVE-2024-26635,CVE-2024-26636,CVE-2024-26640,CVE-2024-26642,CVE-2024-26651,CVE-2024-26654,CVE-2024-26668,CVE-2024-26685,CVE-2024-26686,CVE-2024-26696,CVE-2024-26726,CVE-2024-26739,CVE-2024-26744,CVE-2024-26751,CVE-2024-26763,CVE-2024-26773,CVE-2024-26791,CVE-2024-26810,CVE-2024-26812,CVE-2024-26813,CVE-2024-26817,CVE-2024-26825,CVE-2024-26828,CVE-2024-26839,CVE-2024-26840,CVE-2024-26845,CVE-2024-26851,CVE-2024-26857,CVE-2024-26859,CVE-2024-26863,CVE-2024-26865,CVE-2024-26872,CVE-2024-26874,CVE-2024-26875,CVE-2024-26876,CVE-2024-26878,CVE-2024-26894,CVE-2024-26915,CVE-2024-26922,CVE-2024-26926,CVE-2024-26931,CVE-2024-26955,CVE-2024-26956,CVE-2024-26958,CVE-2024-26960,CVE-2024-26961,CVE-2024-26965,CVE-2024-26966,CVE-2024-26969,CVE-2024-26973,CVE-2024-26974,CVE-2024-26976,CVE-2024-26981,CVE-2024-26982,CVE-2024-26993,CVE-2024-26994,CVE-2024-26996,CVE-2024-26999,CVE-2024-27001,CVE-2024-27008,CVE-2024-27010,CVE-2024-27011,CVE-2024-27014,CVE-2024-27028,CVE-2024-27037,CVE-2024-27043,CVE-2024-27046,CVE-2024-27051,CVE-2024-27054,CVE-2024-27059,CVE-2024-27072,CVE-2024-27073,CVE-2024-27074,CVE-2024-27075,CVE-2024-27395,CVE-2024-27396,CVE-2024-27398,CVE-2024-27401,CVE-2024-27437,CVE-2024-35807,CVE-2024-35849,CVE-2024-35935
  - DESC:fix cve


author: wulinfeng <wulinfeng@xfusion.com> - 4.19.90-2401.1.0.0233.u186
changelog:
  - Type:CVE
  - CVE:CVE-2024-26923,CVE-2022-48673,CVE-2023-52614,CVE-2024-26929,CVE-2024-24860,CVE-2023-7042,CVE-2024-26671,CVE-2024-26720,CVE-2023-3397,CVE-2023-52612,CVE-2024-27004
  - DESC:af_unix: fix lockdep positive in sk_diag_dump_icons()
    af_unix: Fix garbage collector racing against connect()
    af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc()
    net/smc: Fix possible access to freed memory in link clear
    devfreq: Fix buffer overflow in trans_stat_show
    scsi: qla2xxx: Fix double free of fcport
    Bluetooth: Move {min,max}_key_size debugfs into hci_debugfs_create_le
    Fix it by add a mutex lock between lmLogClose and txEnd
    crypto: scomp - fix req->dst buffer overflow
    clk: Get runtime PM before walking tree during


author: fandehui <fandehui@xfusion.com> - 4.19.90-2401.1.0.0233.u189
changelog:
  - Type:CVE
  - CVE:CVE-2023-52591,CVE-2021-47559,CVE-2021-47571,CVE-2024-36901,CVE-2021-47516,CVE-2021-47518,CVE-2021-47520,CVE-2021-47521,CVE-2021-47541,CVE-2021-47545,CVE-2021-47543,CVE-2021-47542,CVE-2024-36902,CVE-2024-36893,CVE-2024-36971
  - DESC:reiserfs: Avoid touching renamed directory if parent does not
    net/smc: Fix NULL pointer dereferencing in
    staging: rtl8192e: Fix use after free in
    ipv6: prevent NULL dereference in ip6_output()
    nfp: Fix memory leak in nfp_cpp_area_cache_add()
    nfc: fix potential NULL pointer deref in
    can: pch_can: pch_can_rx_normal: fix use after free
    can: sja1000: fix use after free in ems_pcmcia_add_card()
    net/mlx4_en: Fix an use-after-free bug in
    perf hist: Fix memory leak of a perf_hpp_fmt
    perf report: Fix memory leaks around perf_tip()
    net: qlogic: qlcnic: Fix a NULL pointer dereference in
    ipv6: fib6_rules: avoid possible NULL dereference in
    usb: typec: tcpm: Check for port partner validity before consuming it
    net: fix __dst_negative_advice() race
    scsi: Clear fcport pointer in SCSI device structure


author: Wei Chen <chenwei@xfusion.com> - 4.19.90-2401.1.0.0233.u192
changelog:
  - Type:bugfix
  - CVE:
  - DESC:fixed the issue of rust-process stuck when copying empty files in xfs file system


author: fandehui <fandehui@xfusion.com> - 4.19.90-2401.1.0.0233.u193
changelog:
  - Type:CVE
  - CVE:CVE-2023-52340,CVE-2024-38780,CVE-2024-39292,CVE-2024-39480,CVE-2024-39475
  - DESC:net/dst: use a smaller percpu_counter batch for dst entries accounting
    ipv6: remove max_size check inline with ipv4
    dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
    um: Add winch to winch_handlers before registering winch IRQ
    kdb: Fix buffer overflow during tab-complete
    fbdev: savage: Handle err return when savagefb_check_var failed


author: liningjie <liningjie@xfusion.com> - 4.19.90-2401.1.0.0233.u200
changelog:
  - Type:bugfix
  - CVE:
  - DESC:solve problem of failing to save xattr of new files(e.g. by running useradd).


author: wangweichao <wangweichao@xfusion.com> - 4.19.90-2401.1.0.0233.u201
changelog:
  - Type:CVE
  - CVE:CVE-2021-47232,CVE-2021-47261,CVE-2021-47323,CVE-2021-47324,CVE-2021-47372,CVE-2021-47391,CVE-2021-47403,CVE-2021-47456,CVE-2021-47483,CVE-2021-47500,CVE-2021-47511,CVE-2021-47548,CVE-2023-52739,CVE-2023-52810,CVE-2023-52832,CVE-2023-52881,CVE-2024-27413,CVE-2024-35789,CVE-2024-35821,CVE-2024-35955,CVE-2024-35960,CVE-2024-36016,CVE-2024-36886,CVE-2024-36904,CVE-2024-36905,CVE-2024-36940,CVE-2024-36964,CVE-2024-38541,CVE-2024-42154,CVE-2022-48822,CVE-2024-41087,CVE-2022-48792,CVE-2022-48788,CVE-2024-42160,CVE-2024-42224,CVE-2024-42228,CVE-2024-38583,CVE-2024-40902,CVE-2022-48855,CVE-2022-48851,CVE-2024-39494,CVE-2024-42271,CVE-2024-42284,CVE-2024-42285,CVE-2024-38538,CVE-2024-38552,CVE-2021-47598,CVE-2021-47589,CVE-2022-48943,CVE-2022-48926,CVE-2024-43858
  - DESC: - tcp_metrics: validate source addr length
    - usb: f_fs: Fix use-after-free for epfile
    - ata: libata-core: Fix double free on error
    - scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task
    - nvme-rdma: fix possible use-after-free in transport
    - f2fs: check validation of fault attrs in
    - f2fs: Add inline to f2fs_build_fault_attr() stub
    - net: dsa: mv88e6xxx: Correct check for empty list
    - drm/amdgpu: Using uninitialized value *size when calling
    - nilfs2: fix use-after-free of timer for log writer thread
    - jfs: xattr: fix buffer overflow for invalid xattr
    - sctp: fix kernel-infoleak for SCTP sockets
    - staging: gdm724x: fix use after free in gdm_lte_rx()
    - ima: Fix use-after-free on a dentry's dname.name
    - net/iucv: fix use after free in iucv_sock_close()
    - tipc: Return non-zero value from tipc_udp_addr2str() on error
    - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
    - net: bridge: xmit: make sure we have at least eth header len
    - drm/amd/display: Fix potential index out of bounds in color
    - sch_cake: do not call cake_destroy() from cake_init()
    - igbvf: fix double free in `igbvf_probe`
    - KVM: x86/mmu: make apf token non-zero to fix bug
    - can: j1939: transport: add j1939_session_skb_find_by_offset()
    - can: j1939: transport: j1939_session_tx_dat(): fix
    - can: j1939: fix Use-after-Free, hold skb ref while in use
    - IB/mlx5: Fix initializing CQ fragments buffer
    - watchdog: sc520_wdt: Fix possible use-after-free in
    - watchdog: Fix possible use-after-free in wdt_startup()
    - net: macb: fix use after free on rmmod
    - RDMA/cma: Ensure rdma_addr_cancel() happens before issuing
    - ipack: ipoctal: fix module reference leak
    - can: peak_pci: peak_pci_remove(): fix UAF
    - regmap: Fix possible double-free in regcache_rbtree_exit()
    - iio: mma8452: Fix trigger reference couting
    - ALSA: pcm: oss: Fix a few more UBSAN fixes
    - ALSA: pcm: oss: Fix negative period/buffer sizes
    - ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array
    - Fix page corruption caused by racy check in __free_pages
    - jfs: jfs_dmap: Validate db_l2nbperpage while mounting
    - fs/jfs: Add check for negative db_l2nbperpage
    - wifi: mac80211: don't return unset power in
    - tcp: do not accept ACK of bytes we never sent
    - efi/capsule-loader: fix incorrect allocation size
    - mac80211: clear sta->fast_rx when STA removed from 4-addr
    - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN
    - ubifs: Set page uptodate in the correct place
    - kprobes: Fix possible use-after-free issue on kprobe
    - net/mlx5: Properly link new fs rules into the tree
    - tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
    - tipc: fix UAF in error path
    - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
    - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
    - net: relax socket state check at accept time.
    - pinctrl: core: delete incorrect free in pinctrl_enable()
    - fs/9p: only translate RWX permissions for plain 9P2000
    - of: module: add buffer overflow check in of_modalias()
    - jfs: Fix array-index-out-of-bounds in diFree
    - usb: gadget: rndis: add spinlock for rndis response list


author: wangweichao <wangweichao@xfusion.com> - 4.19.90-2401.1.0.0233.u203
changelog:
  - Type:CVE
  - CVE:CVE-2024-38570,CVE-2024-39495,CVE-2024-43900,CVE-2024-41071,CVE-2024-41073,CVE-2024-42301
  - DESC: - dev/parport: fix the array out-of-bounds risk
    - gfs2: Fix potential glock use-after-free on unmount
    - gfs2: Rename sd_{ glock => kill }_wait
    - greybus: Fix use-after-free bug in gb_interface_release due to race
    - media: xc2028: avoid use-after-free in load_firmware_cb()
    - Subject: nvme: avoid double free special payload
    - wifi: mac80211: Avoid address calculations via out of bounds


author: maxin <maxin@xfusion.com> - 4.19.90-2411.2.0.0302.u205
changelog:
  - Type:CVE
  - CVE:CVE-2023-4881,CVE-2023-4207,CVE-2023-4206,CVE-2023-4208,CVE-2024-24898,CVE-2024-24891,CVE-2024-47659,CVE-2024-47669,CVE-2024-47697,CVE-2024-47696,CVE-2024-47701,CVE-2024-49860,CVE-2024-47742,CVE-2024-49882,CVE-2024-49889,CVE-2024-49950,CVE-2024-49884,CVE-2024-49995,CVE-2024-49877,CVE-2024-49991,CVE-2024-49936,CVE-2024-49878,CVE-2024-49981,CVE-2024-49883,CVE-2024-49924,CVE-2022-48960,CVE-2024-50035,CVE-2022-49021,CVE-2022-48966,CVE-2022-49031,CVE-2022-48978,CVE-2022-49002,CVE-2022-48948,CVE-2022-49032,CVE-2024-50058,CVE-2022-49011,CVE-2022-48992,CVE-2022-48962,CVE-2024-50033,CVE-2022-48971,CVE-2022-48972,CVE-2022-48949,CVE-2022-49020,CVE-2024-49881,CVE-2024-50073,CVE-2024-46685,CVE-2024-46677,CVE-2024-46675,CVE-2024-46724,CVE-2024-46743,CVE-2024-47698,CVE-2024-47685,CVE-2024-49855,CVE-2024-49900,CVE-2024-49894,CVE-2022-48994,CVE-2022-49029,CVE-2022-48946,CVE-2022-49010,CVE-2022-48967,CVE-2022-48973,CVE-2022-49007,CVE-2024-50036,CVE-2022-49033,CVE-2023-52918,CVE-2024-46675,CVE-2024-46757,CVE-2024-46826,CVE-2023-52742,CVE-2024-46816,CVE-2024-46829,CVE-2024-46840,CVE-2024-46849,CVE-2024-46859,CVE-2024-44958,CVE-2024-44954,CVE-2024-45021,CVE-2024-46673,CVE-2024-46674,CVE-2024-46722,CVE-2024-46721,CVE-2024-46771,CVE-2024-46739,CVE-2024-46750,CVE-2024-46761,CVE-2024-46777,CVE-2024-46756,CVE-2024-46738,CVE-2024-46740,CVE-2024-46781,CVE-2024-46780,CVE-2024-46758,CVE-2024-47709,CVE-2024-44965,CVE-2024-45008,CVE-2024-44999,CVE-2024-45025,CVE-2024-45028,CVE-2024-46723,CVE-2024-46759,CVE-2024-46747,CVE-2024-46800,CVE-2024-46745,CVE-2024-46744,CVE-2024-46755,CVE-2024-44948,CVE-2024-44960,CVE-2024-45006,CVE-2024-44987,CVE-2023-52915,CVE-2021-47400,CVE-2024-42259,CVE-2024-42295,CVE-2024-43856,CVE-2024-43871,CVE-2023-52894,CVE-2023-52907,CVE-2022-48905,CVE-2024-43914,CVE-2024-40901,CVE-2024-42131,CVE-2024-42131,CVE-2024-42311,CVE-2024-42292,CVE-2024-42286,CVE-2024-42312,CVE-2022-48879,CVE-2022-48877,CVE-2023-52899,CVE-2022-48891,CVE-2022-48914,CVE-2022-48908,CVE-2022-48937,CVE-2024-43883,CVE-2024-43893,CVE-2024-43892,CVE-2024-43890,CVE-2024-44944,CVE-2024-39501,CVE-2022-48795,CVE-2024-41015,CVE-2024-41068,CVE-2024-42153,CVE-2024-42265,CVE-2024-42280,CVE-2024-42297,CVE-2024-42313,CVE-2024-42289,CVE-2024-43861,CVE-2024-43879,CVE-2024-43882,CVE-2022-48899,CVE-2023-52893,CVE-2023-52898,CVE-2023-52900,CVE-2022-48924,CVE-2022-48928,CVE-2024-44952,CVE-2021-47207,CVE-2024-42070,CVE-2024-42229,CVE-2024-42232,CVE-2024-42236,CVE-2024-42310,CVE-2024-42305,CVE-2024-43839,CVE-2024-43830,CVE-2024-42304,CVE-2022-48860,CVE-2024-41012,CVE-2024-41034,CVE-2024-41065,CVE-2024-41035,CVE-2024-42084,CVE-2024-42087,CVE-2024-42089,CVE-2024-42096,CVE-2024-42143,CVE-2024-42148,CVE-2024-42105,CVE-2024-42105,CVE-2024-42157,CVE-2024-42223,CVE-2024-42102,CVE-2024-42244,CVE-2021-47202,CVE-2024-39509,CVE-2024-40959,CVE-2024-41014,CVE-2024-41017,CVE-2024-41020,CVE-2024-41046,CVE-2024-41059,CVE-2024-41059,CVE-2024-41069,CVE-2024-41072,CVE-2024-41081,CVE-2024-41044,CVE-2024-41063,CVE-2024-42077,CVE-2024-41095,CVE-2024-41097,CVE-2024-41089,CVE-2024-42086,CVE-2024-42090,CVE-2024-42097,CVE-2024-42092,CVE-2024-42094,CVE-2024-42104,CVE-2024-42106,CVE-2024-42115,CVE-2024-42145,CVE-2024-42119,CVE-2024-38611,CVE-2024-40978,CVE-2024-40988,CVE-2024-40981,CVE-2024-41006,CVE-2024-40942,CVE-2022-48857,CVE-2022-48845,CVE-2022-48863,CVE-2024-49959,CVE-2021-47206,CVE-2024-40987,CVE-2024-40904,CVE-2024-40941,CVE-2024-41005,CVE-2024-40995,CVE-2024-40974,CVE-2024-40912,CVE-2024-40960,CVE-2024-40968,CVE-2024-40932,CVE-2024-40929,CVE-2024-39506,CVE-2024-40984,CVE-2024-39499,CVE-2024-41007,CVE-2022-48804,CVE-2022-48794,CVE-2022-48828,CVE-2022-48775,CVE-2022-48786,CVE-2022-48865,CVE-2022-48856,CVE-2022-48838,CVE-2022-48836,CVE-2021-47204,CVE-2021-47181,CVE-2021-47189,CVE-2024-39484,CVE-2024-39487,CVE-2024-39493,CVE-2024-39489,CVE-2024-40943,CVE-2024-23848,CVE-2024-22386,CVE-2024-26816,CVE-2024-35915,CVE-2021-47296,CVE-2021-47270,CVE-2021-47515,CVE-2021-47311,CVE-2024-36949,CVE-2024-38588,CVE-2024-38579,CVE-2024-38567,CVE-2024-38618,CVE-2024-38578,CVE-2024-38565,CVE-2024-38554,CVE-2024-38582,CVE-2024-38546,CVE-2024-38558,CVE-2024-38559,CVE-2021-47583,CVE-2021-47611,CVE-2021-47612,CVE-2022-48722,CVE-2022-48758,CVE-2021-47619,CVE-2022-48738,CVE-2022-48757,CVE-2022-48717,CVE-2022-48760,CVE-2022-48743,CVE-2024-38637,CVE-2024-37356,CVE-2024-36286,CVE-2021-47515,CVE-2024-37078,CVE-2024-39301,CVE-2021-47235,CVE-2021-47285,CVE-2023-52730,CVE-2024-36014,CVE-2024-36946,CVE-2024-38597,CVE-2024-38549,CVE-2024-38601,CVE-2024-38553,CVE-2024-38599,CVE-2024-38560,CVE-2024-38613,CVE-2021-47602,CVE-2024-38589,CVE-2024-38612,CVE-2024-38587,CVE-2022-48759,CVE-2022-48744,CVE-2022-48732,CVE-2022-48736,CVE-2022-48715,CVE-2021-47587,CVE-2024-37353,CVE-2024-38632,CVE-2024-38659,CVE-2024-38633,CVE-2024-38634,CVE-2024-38627,CVE-2024-33621,CVE-2024-38621,CVE-2024-38630,CVE-2024-31076,CVE-2024-38621,CVE-2022-48772,CVE-2024-38661,CVE-2024-39276,CVE-2024-27436,CVE-2024-35830,CVE-2023-52670,CVE-2024-35969,CVE-2021-47347,CVE-2021-47346,CVE-2021-47252,CVE-2021-47231,CVE-2021-47288,CVE-2021-47434,CVE-2021-47469,CVE-2021-47466,CVE-2021-47493,CVE-2023-52834,CVE-2023-52853,CVE-2021-47565,CVE-2024-36894,CVE-2024-36941,CVE-2024-36950,CVE-2024-38588,CVE-2024-38596,CVE-2021-47597,CVE-2024-38607,CVE-2021-47609,CVE-2022-48756,CVE-2022-48755,CVE-2022-48737,CVE-2022-49005,CVE-2024-27402,CVE-2024-35828,CVE-2024-35819,CVE-2024-35893,CVE-2024-35937,CVE-2024-35947,CVE-2021-47267,CVE-2021-47345,CVE-2021-47249,CVE-2021-47301,CVE-2021-47281,CVE-2021-47234,CVE-2021-47229,CVE-2021-47257,CVE-2023-52742,CVE-2023-52747,CVE-2021-47425,CVE-2021-47440,CVE-2021-47485,CVE-2021-47474,CVE-2021-47482,CVE-2023-52836,CVE-2023-52875,CVE-2023-52843,CVE-2021-47321,CVE-2021-47334,CVE-2021-47310,CVE-2021-47509,CVE-2021-47501,CVE-2023-52880,CVE-2024-36934,CVE-2024-36914,CVE-2024-36919,CVE-2024-36952,CVE-2024-36960,CVE-2024-36484,CVE-2024-35809,CVE-2024-35888,CVE-2024-35910,CVE-2024-35896,CVE-2024-35962,CVE-2021-47354,CVE-2021-47254,CVE-2021-47344,CVE-2021-47358,CVE-2021-47236,CVE-2021-47294,CVE-2023-52756,CVE-2023-52774,CVE-2023-52705,CVE-2023-52764,CVE-2023-52754,CVE-2023-52708,CVE-2021-47424,CVE-2021-47409,CVE-2021-47460,CVE-2021-47468,CVE-2021-47479,CVE-2021-47478,CVE-2021-47476,CVE-2023-52803,CVE-2023-52864,CVE-2023-52871,CVE-2023-52855,CVE-2023-52865,CVE-2021-47315,CVE-2021-47329,CVE-2021-47336,CVE-2021-47538,CVE-2021-47544,CVE-2021-47499,CVE-2021-47547,CVE-2024-36017,CVE-2024-36883,CVE-2024-36029,CVE-2024-36924,CVE-2024-36933,CVE-2024-36903,CVE-2024-36954,CVE-2024-39488,CVE-2024-27399,CVE-2024-35822,CVE-2024-35808,CVE-2024-35823,CVE-2023-52693,CVE-2023-52669,CVE-2024-35904,CVE-2024-35877,CVE-2023-52699,CVE-2024-35925,CVE-2024-35995,CVE-2024-36004,CVE-2021-47356,CVE-2021-47353,CVE-2021-47350,CVE-2021-47355,CVE-2021-47357,CVE-2021-47265,CVE-2021-47297,CVE-2021-47275,CVE-2021-47237,CVE-2021-47277,CVE-2023-52750,CVE-2022-48708,CVE-2023-52703,CVE-2023-52752,CVE-2023-52759,CVE-2021-47361,CVE-2021-47401,CVE-2021-47423,CVE-2021-47405,CVE-2021-47408,CVE-2021-47388,CVE-2021-47397,CVE-2021-47427,CVE-2021-47362,CVE-2021-47395,CVE-2021-47404,CVE-2021-47407,CVE-2021-47459,CVE-2021-47445,CVE-2021-47442,CVE-2021-47443,CVE-2021-47458,CVE-2021-47438,CVE-2021-47495,CVE-2021-47475,CVE-2021-47477,CVE-2023-52878,CVE-2023-52799,CVE-2023-52845,CVE-2023-52819,CVE-2023-52796,CVE-2021-47407,CVE-2023-52789,CVE-2023-52831,CVE-2023-52805,CVE-2023-52804,CVE-2021-47314,CVE-2021-47549,CVE-2021-47330,CVE-2024-36015,CVE-2024-36917,CVE-2024-27403,CVE-2024-27428,CVE-2024-27419,CVE-2024-27426,CVE-2024-27427,CVE-2024-35806,CVE-2024-35805,CVE-2024-35847,CVE-2024-35835,CVE-2023-52691,CVE-2023-52698,CVE-2024-35898,CVE-2024-35886,CVE-2024-35936,CVE-2024-35922,CVE-2024-35930,CVE-2024-35976,CVE-2024-35950,CVE-2021-47269,CVE-2021-47284,CVE-2022-48710,CVE-2021-47393,CVE-2023-52867,CVE-2021-47473,CVE-2021-47455,CVE-2021-47496,CVE-2021-47497,CVE-2023-52840,CVE-2023-52835,CVE-2023-52840,CVE-2023-52818,CVE-2023-52868,CVE-2023-52867,CVE-2023-52847,CVE-2021-47335,CVE-2024-26886,CVE-2024-26921,CVE-2024-26957,CVE-2023-52675,CVE-2024-24858,CVE-2021-47184,CVE-2024-26846,CVE-2024-26897,CVE-2023-52644,CVE-2024-26920,CVE-2024-26934,CVE-2024-26984,CVE-2024-27000,CVE-2023-52653,CVE-2024-27062,CVE-2024-27388,CVE-2024-27078,CVE-2024-27077,CVE-2024-27024,CVE-2023-52650,CVE-2024-26984,CVE-2022-48704,CVE-2022-48695,CVE-2021-47183,CVE-2024-26880,CVE-2024-26904,CVE-2024-26852,CVE-2023-6270,CVE-2024-24861,CVE-2024-26663,CVE-2023-52638,CVE-2024-26733,CVE-2024-26764,CVE-2024-26793,CVE-2024-26801,CVE-2024-26805,CVE-2024-26908,CVE-2024-26920,CVE-2024-35811,CVE-2024-35815,CVE-2024-40947,CVE-2024-26704,CVE-2024-26697,CVE-2024-26687,CVE-2024-26740,CVE-2024-26759,CVE-2024-26743,CVE-2024-26772,CVE-2024-26777,CVE-2024-26754,CVE-2024-26779,CVE-2024-26771,CVE-2024-26778,CVE-2024-26735,CVE-2024-26804,CVE-2021-47201,CVE-2024-26641,CVE-2024-26633,CVE-2021-47144,CVE-2021-47150,CVE-2021-47153,CVE-2021-47160,CVE-2021-47167,CVE-2024-26644,CVE-2024-26645,CVE-2023-52629,CVE-2021-47239,CVE-2021-47086,CVE-2023-52600,CVE-2023-52595,CVE-2024-26615,CVE-2021-47114,CVE-2021-47112,CVE-2023-52609,CVE-2024-26752,CVE-2021-47506,CVE-2023-52507,CVE-2023-52524,CVE-2022-48630,CVE-2022-48629,CVE-2023-52607,CVE-2024-26625,CVE-2023-52486,CVE-2021-47040,CVE-2020-36783,CVE-2021-47020,CVE-2021-47078,CVE-2021-47077,CVE-2023-52510,CVE-2023-52504,CVE-2023-52522,CVE-2023-52500,CVE-2023-52623,CVE-2024-26675,CVE-2024-26679,CVE-2023-52683,CVE-2023-52679,CVE-2024-22099,CVE-2020-36782,CVE-2021-47049,CVE-2021-47006,CVE-2023-52477,CVE-2023-52475,CVE-2024-26614,CVE-2023-52919,CVE-2021-33630,CVE-2021-33631,CVE-2023-35827,CVE-2023-52509,CVE-2021-47082
  - DESC:sync to sp4


author: wangyong2 <wangyong2@xfusion.com> - 4.19.90-2411.2.0.0302.u206
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Set the default value of kernel_id to 0 to solve the problem that the root password cannot be set through chpasswd in the Live CD environment due to kernel_id=1 during image installation.


author: os-sync <os-sync@xfusion.com> - 4.19.90-2412.3.0.0308.u208
changelog:
  - Type:CVE
  - CVE:CVE-2024-50301,CVE-2024-47745,CVE-2024-50117,CVE-2024-50115,CVE-2024-50195,CVE-2024-50210,CVE-2024-50237,CVE-2024-53060,CVE-2024-50154,CVE-2024-50179,CVE-2024-50202,CVE-2024-50273,CVE-2024-53066,CVE-2024-53061,CVE-2024-50148,CVE-2024-50262,CVE-2024-50236,CVE-2024-50230,CVE-2024-50299,CVE-2024-50265,CVE-2024-53052,CVE-2024-53101,CVE-2024-50150,CVE-2024-50287,CVE-2024-50278,CVE-2024-50267,CVE-2024-50302,CVE-2024-53104,CVE-2024-50125,CVE-2024-50167,CVE-2024-50168,CVE-2024-50251,CVE-2024-53057,CVE-2024-53131,CVE-2024-53142
  - DESC:update and fix CVEs


author: wangyong2 <wangyong2@xfusion.com> - 4.19.90-2503.1.0.0318.u209
changelog:
  - Type:CVE
  - CVE:CVE-2024-56551,CVE-2025-21648,CVE-2024-56650,CVE-2024-56658,CVE-2024-26689,CVE-2024-56614,CVE-2024-50051,CVE-2024-57887,CVE-2024-56604,CVE-2024-56605,CVE-2024-53227,CVE-2024-57893,CVE-2024-57892,CVE-2024-56631,CVE-2024-56615,CVE-2024-56780,CVE-2024-56777,CVE-2024-53150,CVE-2024-53157,CVE-2024-53155,CVE-2024-56570,CVE-2024-56662,CVE-2024-56603,CVE-2024-56619,CVE-2024-56642,CVE-2024-56739,CVE-2024-47684,CVE-2024-50142,CVE-2024-50264,CVE-2024-53103,CVE-2024-53140,CVE-2024-53141,CVE-2024-53146,CVE-2024-53158,CVE-2022-49034,CVE-2024-56539,CVE-2024-53239,CVE-2024-53165,CVE-2024-53183,CVE-2024-53184,CVE-2024-53217,CVE-2024-53194,CVE-2024-53197,CVE-2024-53173,CVE-2024-53214,CVE-2024-56531,CVE-2024-56532,CVE-2024-56700,CVE-2024-56704,CVE-2024-56681,CVE-2024-56746,CVE-2024-56747,CVE-2022-49035,CVE-2024-56532,CVE-2024-53183,CVE-2024-53184,CVE-2024-53158,CVE-2024-57931,CVE-2024-57977,CVE-2023-52568,CVE-2024-39508,CVE-2024-46733,CVE-2024-50218,CVE-2024-50194,CVE-2024-53095,CVE-2024-53168,CVE-2024-56647,CVE-2024-56688,CVE-2022-49091,CVE-2021-47652,CVE-2022-49073,CVE-2022-49394
  - DESC:update and fix CVEs


author: xiechengliang<xiechengliang1@huawei.com> - 1:1.31.1-10
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC: fix CVE-2021-42378 CVE-2021-42379 CVE-2021-42380 CVE-2021-42381 CVE-2021-42382 CVE-2021-42383 CVE-2021-42384 CVE-2021-42385 and CVE-2021-42386


author: maxin <maxin@xfusion.com> - 1.31.1-23.u5
changelog:
  - Type:CVE
  - CVE:CVE-2023-42363,CVE-2023-42364,CVE-2023-42365,CVE-2023-42366
  - DESC:fix CVE-2023-42363,CVE-2023-42364,CVE-2023-42365,CVE-2023-42366


author: hutianxue <hutianxue@xfusion.com> - 1.16.1-7.u4
changelog:
  - Type:CVE
  - CVE:CVE-2023-31130,CVE-2023-31124,CVE-2023-31147
  - DESC:fix CVE-2023-31130 CVE-2023-31124 CVE-2023-31147


author: hutianxue <hutianxue@xfusion.com> - 1.1.11-49.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:fix build fail on gcc-10
         delete -S git from 
  %setup       -q




  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/cdrkit-1.1.8-werror.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/cdrkit-1.1.9-efi-boot.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/cdrkit-1.1.9-no_mp3.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/cdrkit-1.1.9-buffer_overflow.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/cdrkit-1.1.10-build-fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/cdrkit-1.1.11-manpagefix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/cdrkit-1.1.11-rootstat.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/cdrkit-1.1.11-usalinst.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/cdrkit-1.1.11-readsegfault.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/cdrkit-1.1.11-format.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/cdrkit-1.1.11-handler.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/cdrkit-1.1.11-dvdman.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/cdrkit-1.1.11-paranoiacdda.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/cdrkit-1.1.11-utf8.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/cdrkit-1.1.11-cmakewarn.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/cdrkit-1.1.11-memset.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/cdrkit-1.1.11-ppc64le_elfheader.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/cdrkit-1.1.11-werror_gcc5.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/cdrkit-1.1.11-devname.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/cdrkit-1.1.11-sysmacros.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-cdrkit-1.1.11-gcc10.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git
         rebuild for next release
         add sw64 patch
         fix empty link
         fix spell error


author: hutianxue <hutianxue@xfusion.com> - 1.1.11-49.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:fix build fail on gcc-10
         delete -S git from autosetup, and delete BuildRequires git
         rebuild for next release
         add sw64 patch
         fix empty link
         fix spell error


author: wutao <wutao1@xfusion.com> - 1:12.2.8-16.u5
changelog:
  - Type:bugfix
  - CVE:
  - DESC:fix misuse of safe_read_file return value and incorrect conditional initialization of LDAPEngine


author: liubo <liubo1@xfusion.com> - 2:16.2.7-3.u5
changelog:
  - Type:bugfix
  - CVE:NA
  - DESC:fix remove ceph bug "cephadm mail spool (/var/spool/mail/cephadm) not found"


author: hutianxue <hutianxue@xfusion.com> - 2:16.2.7-16.u7
changelog:
  - Type:CVE
  - CVE:CVE-2022-3650
  - DESC:cmake: add support python 3.10
         fix ceph-volume lvm api function undefined error
         fix ceph-volume lvm list calls many times pvs
         fix osd read superblock error
         Add sw64 architecture
         rename sw64 patch and reduce compilation threads
         fix CVE-2022-3650
         use vendor macro in buildrequire package
         add loongarch support for ceph
         fix error for uninstall cephadm


author: Li Qiang <liqiang64@huawei.com> - 1:12.2.8-16
changelog:
  - Synchronize the performance optimization of the pick_a_shard
  - function in the upstream community.


author: wenbailin<wenbailin@xfusion.com> - 1:12.2.8-16.u2
changelog:
  - Type:CVE
  - CVE:CVE-2021-3979
  - DESC:fix CVE-2021-3979
         correct ceph-mgr requires python2-jinja2 and python2-werkzeug
         fix ceph dh function unavailable


author: mengwenhua <mengwenhua@xfusion.com> - 0.12.0-6.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Add warning on floating point eq and ne assertions & Fixed typo in ck_assert_str_eq doc


author: haowenchao <haowenchao@huawei.com> - 6.10-3
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0000-Add-missing-position-handling-to-mount-parameters-gi.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0001-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0002-CVE-2021-20208.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0003-cifs-utils-fix-probabilistic-compiling-error.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0004-mount.cifs-fix-max-buffer-size-when-parsing-snapshot.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0005-cifs.upcall-update-the-cap-bounding-set-only-when-CA.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0006-mount.cifs-update-the-cap-bounding-set-only-when-CAP.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0007-CVE-2022-27239.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0008-CVE-2022-29869.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0009-mount.cifs-fix-crash-when-mount-point-does-not-exist.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0010-cifs.upcall-fix-regression-in-kerberos-mount.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: hutianxue <hutianxue@xfusion.com> - 6.10-6.u2
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Add missing position handling to mount parameters gid/backup_gid/snapshot
         fix probabilistic compiling error
  	   fix max buffer size when parsing snapshot option
  	   fix crash when mount point does not exist
  	   fix regression in kerberos mount


author: maoyanping <maoyanping@xfusion.com> - 0.103.8-1.u1
changelog:
  - Type:CVE
  - CVE:CVE-2023-20032,CVE-2023-20052
  - DESC:Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052


author: maxin <maxin@xfusion.com> - 0.103.12-1.u3
changelog:
  - Type:CVE
  - CVE:CVE-2023-20197,CVE-2024-20506,CVE-2024-20505
  - DESC:update to 1.103.12 fix CVE-2023-20197,CVE-2024-20506,CVE-2024-20505


author: hutianxue <hutianxue@xfusion.com> - 0.103.6-1
changelog:
  - Type:CVE
  - CVE:CVE-2022-20698,CVE-2022-20785,CVE-2022-20771,CVE-2022-20770,CVE-2022-20792
  - DESC:Upgrade to 0.103.6 version for fix CVES & Fix start clamav-clamonacc-service


author: wangzeping<wangzeping@xfusion.com> - 2.0.7-3.u2
changelog:
  - Type:bugfix
  - CVE: 
  - DESC:add required package lcr lower and upper version
             fix changelog date
             remove rpath by cmake


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 19.4-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix the error level logs displayed for the cloud-init-local service


author: hutianxue <hutianxue@xfusion.com> - 19.4-13.u6
changelog:
  - Type:CVE
  - CVE:CVE-2022-2084,CVE-2023-1786
  - DESC:Fix a unitest error
         fix CVE-2022-2084
         fix CVE-2023-1786


author: maxin <maxin@xfusion.com> - 19.4-15.u10
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Ensure random passwords contain multiple character types
         feat: Ensure random passwords contain multiple
         test: Fix duplicate judgment conditions in password


author: maoyanping <maoyanping@xfusion.com> - 254-1.u14
changelog:
  - Type:CVE
  - CVE:CVE-2020-35850,CVE-2024-6126
  - DESC:backport to fix CVE-2020-35850 and CVE-2024-6126


author: yuboyun <yuboyun@huawei.com> - 33.6-2
changelog:
  - Do not use '--loglevel' option when running Anaconda
    Improve Imc no-virt error handling
    Add POSTIN scriptlet error to the log monitor list
    Remove LD_PRELOAD libgomp.so.1 from Imc --no-virt


author: xiadanni<xiadanni1@huawei.com> - 1.2.0-200
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:sync bugfix and bump version to 200, bugfix include
         1. check task list to avoid unnecessary cleanup.
         2. fix dead loop
         3. cleanup dangling shim by brand new context
         4. fix potential panic for task in unknown state


author: xiadanni<xiadanni1@huawei.com> - 1.2.0-201
changelog:
  - Type:bugfix                                          
  - ID:NA                                                   
  - SUG:NA
  - DESC:reduce permissions for bundle dir to fix CVE-2021-41103


author: hupeixi<hupeixi@xfusion.com> - 1.2.0-208.u5
changelog:
  - Type:bugfix
  - CVE:
  - DESC:add ctr binary into package
  -      Fix goroutine leak in Exec
         fix k8s build fail without import context


author: hutianxue <hutianxue@xfusion.com> - 1.2.0-211.u7
changelog:
  - Type:bugfix
  - CVE:
  - DESC:fix journald stop container shim log stuck bug & remove socket file when get file fd failed


author: mengwenhua <mengwenhua@xfusion.com> - 1.2.0-213.u8
changelog:
  - Type:bugfix
  - CVE:
  - DESC:diff/walking: fix defer cleanup
         fix invalid validation error checking
         fix Implicit memory aliasing in for loop
         fix: cio.Cancel() should close the pipes
         fix unable to checkpoint the container more than once
         bugfix: add nil pointer check for cgroup v1 mem usage
         fix: allow attaching to any combination of stdin/stdout/stderr
         bump ttrpc to fix containerd-shim socket connect increase leak after restart docker


author: mengwenhua <mengwenhua@xfusion.com> - 8.32-10.u5
changelog:
  - Type:bugfix
  - CVE:
  - DESC:sync patches from community
         skip testcase inotify-rotate-resources.sh for overlay filesystem in docker
         fix basenc using wrong decoding buffer length
         cat: with -E fix handling of \r\n spanning buffers
         pr: fix infinite loop when double spacing
         wc: ensure we update file offset
         doc: od --strings: clarify operation
         setenv: Don't crash if malloc() returns NULL.
         tac: handle short reads on input
         Avoid signed integer overflow
         who: fix only-theoretical overflow


author: fuanan <fuanan3@huawei.com> - 2.13-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add 'autoconf automake' to BuildRequires to use autoreconf command


author: hutianxue <hutianxue@xfusion.com> - 2.13-7.u3
changelog:
  - Type:CVE
  - CVE:CVE-2015-1197
  - DESC:Fix CVE-2015-1197, delete revert-CVE-2015-1197.patch because new patch
         will fix the problem brought by old-CVE-2015-1197.patch, so we delete
         revert-CVE-2015-1197.patch


author: eastb233 <xiezhiheng@huawei.com> - 7.3.0-20210628.41
changelog:
  - fix-PR83666-punt-BLKmode-when-expand_debug_expr.patch: New patch for bugfix
  - fix-AArch64-128-bit-immediate-ICEs.patch: Likewise
  - gcc.spec: Add new patch


author: wenbailin<wenbailin@xfusion.com> - 7.3.0-20211123.43.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Add file libstdc++fs.a to package libstdc++-static
         Return the ownership of gdb/auto-load folder to gdb-headless


author: mengwenhua <mengwenhua@xfusion.com> - 7.3.0-2020033101.49.u3
changelog:
  - Type:bugfix
  - CVE:
  - DESC:
  - Remove date info and add some unpackaged files
  - Remove %post and %postun for package gdb-plugin
  - Add patch Remove-_GLIBCXX_USE_INT128-autoconf-macro.patch to resolve int128 related compile issue
  - refer to https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=ad0a3be4df5eecc79075d899fd79179d0f61270e
             https://gcc.gnu.org/git/?p=gcc.git;a=commitdiff;h=29a9de9b40277af98515eabebb75be1f154e9505
             https://www.mail-archive.com/gcc-patches@gcc.gnu.org/msg259436.html
  - gcc.spec: Bugfix for removing Date in release version, use a const number instead.


author: zhangliangpengkun <zhangliangpengkun@xfusion.com> - 7.3.0-2020033101.51.u7
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Place a link to libatomic libubsan libasan into the corresponding subpackage to prevent setting an empty link when the subpackage is not installed


author: leiyansong<leiyansong@xfusion.com> - 2.9.7-6.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:fix issue of truncating dict file without input data,fix error length about simplistic password


author: yanglongkang <yanglongkang@huawei.com> - 2.3.3-4
changelog:
  - add buildrequire gcc
    add make check
    backport upstream patches to solve several problems -epoch2


author: chenyanpanHW <chenyanpan@huawei.com> - 2.3.3-5
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0001-cryptsetup-add-system-library-paths.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0002-fix-compat-test.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0003-Check-segment-gaps-regardless-of-heap-space.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0004-Fix-posible-buffer-overflows-in-LUKS-conversion.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0005-Fix-a-memleak-in-blockwise-test.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-6000-CVE-2021-4122.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: zengwefeng <zwfeng@huawei.com> - 4.11.12-5
changelog:
  - Type:cves
  - ID:CVE-2020-14318 CVE-2020-14323 CVE-2020-14383
  - SUG:NA
  - DESC:fix CVE-2020-14318 CVE-2020-14323 CVE-2020-14383


author: dongxianxin<dongxianxin@xfusion.com> - 4.11.12-6.u1
changelog:
  - Type:CVE
  - CVE:CVE-2020-25717,CVE-2020-25718,CVE-2020-25719,CVE-2020-25721,CVE-2020-25722,CVE-2016-2124,CVE-2021-3738,CVE-2021-43566,CVE-2021-44142,CVE-2022-0366
  - DESC:fix CVE-2020-25717,CVE-2020-25718,CVE-2020-25719,CVE-2020-25721,CVE-2020-25722,CVE-2016-2124,CVE-2021-3738 
         backport patches to fix CVE-2021-43566:
         s3/lib: add parent_smb_fname function
         smbd: use parent_smb_fname in check_parent_access
         smbd: use parent_smb_fname in inherit_new_acl
         s3/VFS: Add SMB_VFS_MKDIRAT
         vfs_full_audit: pass conn to smb_fname_str_do_log
         s3/VFS: change connection_struct cwd_fname to cwd_fsp
         s3/smbd: Change mkdir_internal to call SMB_VFS_MKDIRAT
         smbd: use parent_smb_fname in mkdir_internal
         fix CVE-2021-43566
         backport to fix CVE-2021-44142
         backport to fix CVE-2022-0366


author: miaokaibo<miaokaibo@xfusion.com> - 4.11.12-6.u2
changelog:
  - Type:CVE
  - CVE:CVE-2021-23192
  - DESC:fix flaw which was found in the way samba implemented DCE/RPC


author: hupeixi<hupeixi@xfusion.com> - 4.11.12-12.u4
changelog:
  - Type:CVE
  - CVE:CVE-2022-32746,CVE-2022-32744,CVE-2022-2031,CVE-2022-32742
  - DESC:fix CVE-2022-32746,CVE-2022-32744,CVE-2022-2031,CVE-2022-32742


author: hutianxue <hutianxue@xfusion.com> - 4.11.12-30.u20
changelog:
  - Type:CVE
  - CVE:CVE-2022-2127,CVE-2023-34966,CVE-2023-34967
  - DESC:add Obsoletes '< version' and Provides '= version' in spec & fix CVE-2022-2127 CVE-2023-34966 CVE-2023-34967


author: maxin <maxin@xfusion.com> - 1.26.1-6.u2
changelog:
  - Type:CVE
  - CVE:CVE-2024-47076,CVE-2024-47175,CVE-2024-47176,CVE-2024-47850
  - DESC:Fix CVE-2024-47076,CVE-2024-47175,CVE-2024-47176,CVE-2024-47850


author: yanglu <yanglu72@huawei.com> - 7.71.1-11
changelog:
  - Type:CVE
  - CVE:CVE-2021-22945 CVE-2021-22946 CVE-2021-22947
  - SUG:NA
  - DESC:fix CVE-2021-22945 CVE-2021-22946 CVE-2021-22947


author: wangxinjian <wangxinjian@xfusion.com> - 7.71.1-11.u1
changelog:
  - Type:CVE
  - CVE:CVE-2021-22922,CVE-2021-22923
  - DESC:disable metalink to fix CVE-2021-22922 and CVE-2021-22923


author: hutianxue <hutianxue@xfusion.com> - 7.71.1-11.u2
changelog:
  - Type:CVE
  - CVE:CVE-2022-22576,CVE-2022-27774,CVE-2022-27775,CVE-2022-27776
  - DESC:fix CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776


author: hutianxue <hutianxue@xfusion.com> - 7.71.1-11.u4
changelog:
  - Type:CVE
  - CVE:CVE-2022-32205,CVE-2022-32206,CVE-2022-32207,CVE-2022-32208
  - DESC: fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208


author: chenweihua<chenweihua@xfusion.com> - 7.71.1-23.u11
changelog:
  - Type:CVE
  - CVE:CVE-2023-27533,CVE-2023-27534,CVE-2023-27535,CVE-2023-27536,CVE-2023-27538
  - DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538


author: hutianxue <hutianxue@xfusion.com> - 7.71.1-26.u12
changelog:
  - Type:bugfix
  - CVE:
  - DESC:backport to fix build error when user don't use glibc
         Patch optimization for CVE-2023-27536
         Fix patch optimization for CVE-2023-27535


author: maxin <maxin@xfusion.com> - 7.71.1-37.u19
changelog:
  - Type:CVE
  - CVE:CVE-2024-7264,CVE-2024-8096
  - DESC:fix CVE-2024-7264,CVE-2024-8096 and backport some patches


author: liuhaipeng <liuhaipeng@xfusion.com> - 68-4.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Fix ndctl delete namespace exception
         correct License: add LGPLv2.1, MIT, CC0-1.0


author: hupeixi<hupeixi@xfusion.com> - 1:1.12.16-20.u2
changelog:
  - Type:CVE
  - CVE:CVE-2022-42010,CVE-2022-42011,CVE-2022-42012
  - DESC:fix CVE-2022-42010,CVE-2022-42011,CVE-2022-42012


author: lixinhong <lixinhong@xfusion.com> - 1:1.12.16-20.u3
changelog:
  - Type:bugfix
  - CVE:
  - DESC:add the configuration file vnc_limit.conf to limit the number of vncserver


author: hutianxue <hutianxue@xfusion.com> - 1:1.12.16-22.u6
changelog:
  - Type:bugfix
  - CVE:
  - DESC:sync patches from dbus community
         bus: Don't crash if bus_context_create_client_policy() fails
         bus: When failing to reload client policy, continue iteration
         test: Add a targeted test for _dbus_unix_groups_from_uid()
         userdb: Add proper error reporting when getting groups from a uid


author: hupeixi<hupeixi@xfusion.com> - 3.6.2-5.u1
changelog:
  - Type:CVE
  - CVE:CVE-2005-1849,CVE-2016-9840,CVE-2016-9841,CVE-2016-9843,CVE-2018-25032,CVE-2022-37434
  - DESC:backport patchs fix zlib cves: CVE-2005-1849 CVE-2016-9840
         CVE-2016-9841 CVE-2016-9843 CVE-2018-25032 CVE-2022-37434
         backport-fix-CVE-2005-1849.patch
         backport-fix-CVE-2016-9840.patch
         backport-fix-CVE-2016-9841.patch
         backport-fix-CVE-2016-9843.patch
         backport-fix-CVE-2018-25032.patch
         backport-fix-CVE-2022-37434-1.patch
         backport-fix-CVE-2022-37434-2.patch


author: wangxiao <wangxiao65@huawei.com> - 10.13.1.1-2
changelog:
  - fix CVE-2018-1313
  - a specially-crafted network packet can be used to request the
  - Derby Network Server to boot a database whose location and contents
  - are under the user's control.


author: wenbailin<wenbailin@xfusion.com> - 8.2.03.09-5.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:code reduce cyclomatic complexity
         dev_name() determine whether the dev->aliases linked list is
         empty before obtaining the dev name
         check DM_NAME before creating symlink in 13-dm-disk.rules
         %check: add make run-unit-test
         lvreduce support --yes option
         revert commit of fix VERSION issue when packaging


author: liuhaipeng <liuhaipeng@xfusion.com> - 8:2.03.09-13.u4
changelog:
  - Type:bugfix
  - CVE:
  - DESC:backport patches:18-22 for supporting intel vroc raid(virtual raid on cpu)


author: goutao <goutao@xfusion.com> - 8:2.03.09-13.u5
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Add a warning message to this package to prevent this package from being deleted The system fails to recognize the user partition and goes into emergency mode


author: mengwenhua <mengwenhua@xfusion.com> - 8:2.03.09-15.u7
changelog:
  - Type:bugfix
  - CVE:
  - DESC:toollib: fix segfault if using -S|--select with log/report_command_log=1 setting


author: mengwenhua <mengwenhua@xfusion.com> - 8:2.03.09-18.u8
changelog:
  - Type:bugfix
  - CVE:
  - DESC:dm-event: release buffer on dm_event_get_version & fix an double free in the error path from _stats_creat_group


author: wangzeping<wangzeping@xfusion.com> - 12:4.4.2-8.u3
changelog:
  - Type:CVE
  - CVE:CVE-2021-25214,CVE-2021-25215,CVE-2021-25219,CVE-2021-25220
  - DESC:Fix CVE-2021-25214 CVE-2021-25215 CVE-2021-25219 CVE-2021-25220


author: mengwenhua <mengwenhua@xfusion.com> - 12:4.4.2-10.u5
changelog:
  - Type:CVE
  - CVE:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
  - DESC:Fix CVE-2022-2795,CVE-2022-38177,CVE-2022-38178


author: Roberto Sassu <roberto.sassu@huawei.com> - 0.3.94-1
changelog:
  - Add obj_label attribute in file list
  - Replace hard coded permission
  - Set user.digest_list xattr
  - Bug fixes


author: gaihuiying <gaihuiying1@huawei.com> - 4.2.23-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:remove recommends rpm-plugins-systemd-inhibit
         backport community patches and fix CVE-2021-3445
         delete duplicate python3-libdnf dependency


author: yangzhuangzhuang<yangzhuangzhuang@xfusion.com> - 4.2.23-6.u1
changelog:
  - Type:bugfix
  - CVE:NA
  - DESC:Add fail_fast parameter to _download_remote_payloads() method
         fix dnf error when history sqlite missing


author: hutianxue <hutianxue@xfusion.com> - 4.2.23-11.u3
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Switch install/remove parts of swap command
         Set default value for variable to prevent crash
         Pass whole URL in relativeUrl to PackageTarget for RPM URL download
         Ignore processing variable files with unsupported encoding
         Fix remove when no repos are enabled
         fix AttributeError when io busy and press ctrl c


author: gaihuiying <gaihuiying1@huawei.com> - 4.2.23-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix errors when use "yum module remove --all per:common" command
         fix test test_mode_tty failed


author: wangxinjian <wangxinjian@xfusion.com> - 4.0.17-2.u1
changelog:
  - Type:requirement
  - CVE:NA
  - DESC:Reposync does not stop downloading packages
         fix bug playground command doesn't work


author: mengwenhua <mengwenhua@xfusion.com> - 2.82-14.u4
changelog:
  - Type:bugfix
  - CVE:
  - DESC:backport some patches
         Fix parsing of IPv6 addresses with peer from netlink
         Reduce code duplication, reuse existing functions
         Fix memory leak when using --dhcp-optsfile with DHCPv6 options


author: liulong <liulong20@huawei.com> - 2.82-4
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:fix CVE-2020-25681 CVE-2020-25682 CVE-2020-25683 CVE-2020-25684 CVE-2020-25685 CVE-2020-25686 
  CVE-2020-25687


author: zengwefeng <zwfeng@huawei.com> - 2.82-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Add missing check for NULL return from allocate_rfd
         Fix DNS reply when asking for DNSSEC and a validated


author: gaihuiying <gaihuiying1@huawei.com> - 2.82-8
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC: Handle caching with EDNS options better
          Fix to 75e2f0aec33e58ef5b8d4d107d821c215a52827c
          Fix for 12af2b171de0d678d98583e2190789e544440e02
          Fix problem with DNS retries in 2.83 2.84 version
          Simplify preceding fix
          Update to new struct frec fields in conntrack code
          Use the values of min port and max port in TCP connection
          Correct occasional bind dynamic synchronization
          Move fd into frec_src fixes 15b60ddf935a531269bb8c68
          fix CVE-2021-3448


author: xiadanni<xiadanni1@huawei.com> - 18.09.0-202
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:prevent an invalid image from crashing docker daemon(CVE-2021-21285)


author: hutianxue <hutianxue@xfusion.com> - 18.09.0-206.u2
changelog:
  - Type:CVE
  - CVE:CVE-2021-41091,CVE-2021-41089,CVE-2021-41092
  - DESC:fix "Up 292 years" in status in docker ps -a
         fix "endpoint with name container_xx already exists in network none" error
         fix container exited after docker restart when processEvent hang
         change log level when containerd return "container not found" err
         add log for easy debug in exit event handler
         adding logs for debugging in docker stop
         add info log for pulling image
         do not check result of issueDiscard
         fix bug where failed kills didnt fallback to unix kill
         fix time Ticker leak
         add timeout for IO.Wait
         fix dangling unpigz
         check db file size before start containerd
         fix ProcessEvent block when CloseStreams block
         fix runc data and dm left when periodically kill containerd
         fix race condition in cmdStream
         Unexport testcase.Cleanup to fix Go 1.14
         Don't fail on two concurrent reference.store.AddDigest calls
         Fix for lack of synchronization in daemon/update.go
         rollback if docker restart when doing BlkDiscard
         use info level for create stop command
         fix unittest case error
         fix docker kill command block
         fix hijack hang
         fix container status not consistent with its shim process status
         sync from internal
         fix CVE-2021-41092
         fix CVE-2021-41091
         fix CVE-2021-41089
         close channel in write side to avoid panic in docker stats
         fix status inconsistent after restart container


author: zhaoang<zhaoang@xfusion.com> - 1:18.09.0-244.u11
changelog:
  - Type:bugfix
  - CVE:
  - DESC:change runc original install location (/usr/local/bin --> /usr/bin) to fix compile problem


author: hupeixi<hupeixi@xfusion.com> - 1:18.09.0-247.u12
changelog:
  - Type:bugfix
  - CVE:
  - DESC:cleanup netns file when stop docker daemon
  -      fix dockerd core when release network
  -      using VERSION-vendor to record version


author: hutianxue <hutianxue@xfusion.com> - 1:18.09.0-253.u17
changelog:
  - Type:CVE
  - CVE:CVE-2023-28840,CVE-2023-28841,CVE-2023-28842
  - DESC:try http for docker manifest insecure
         sync some patches
         fix CVE-2023-28840,CVE-2023-28841,CVE-2023-28842


author: hutianxue <hutianxue@xfusion.com> - 1:18.09.0-258.u20
changelog:
  - Type:bugfix
  - CVE:
  - DESC:repalce unix.Rmdir with os.RemoveAll when remove mount point dir
         remove invalid libcgroup dependencies
         define a dummy hostname to use for local connections


author: mengwenhua <mengwenhua@xfusion.com> - 1:18.09.0-261.u22
changelog:
  - Type:bugfix
  - CVE:
  - DESC:docker:fix COPY --from should preserve ownership & add delay after freeze


author: yangbo <yangbo2@xfusion.com> - 1:18.09.0-262.u23
changelog:
  - Type:bugfix
  - CVE:
  - DESC:sync patches from upstream
         Fix possible nil pointer exception It is possible that the node is not yet present in the node list map.
         Fix error handling for bind mount spec parser.
         Fixed the inconsistence and also a potential data
         daemon/ProcessEvent: make sure to cancel the contexts
         Fix possible runtime panic in Lgetxattr
         vendor: vishvananda/netns
         Update daemon_linux.go for preventing off-by-one Array length should be bigger than 5, when accessing index 4
         Fix deadlock
         Update daemon/daemon.go: resume healthcheck on restore Call updateHealthMonitor for alive non-paused containers


author: maxin <maxin@xfusion.com> - 1:18.09.0-268.u25
changelog:
  - Type:CVE
  - CVE:CVE-2024-24557,CVE-2024-29018,CVE-2024-32473,CVE-2024-41110
  - DESC:fix CVE-2024-24557,CVE-2024-29018,CVE-2024-32473,CVE-2024-41110
         Ignore SIGURG on Linux
         add clone3 seccomp whitelist for arm64


author: changhan<changhan@xfusion.com> - 1:18.09.0-271.u26
changelog:
  - Type:CVE
  - CVE:CVE-2024-36623
  - DESC:try to reconnect when containerd grpc return unexpected EOF
         fix missing lock in ensurelayer
         fix CVE-2024-36623


author: xiadanni<xiadanni1@huawei.com> - 1.0.0.rc3-104
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:don't deny all devices when update cgroup resource
         do not permit /proc mounts to non-directories
         fix permission denied


author: xiadanni<xiadanni1@huawei.com> - 1.0.0.rc3-200
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:sync bugfix and bump version to 200, bugfix include
         1. add cpu and memory info when print cgroup info
         2. fix freezing race


author: xiadanni<xiadanni1@huawei.com> - 1.0.0.rc3-201
changelog:
  - Type:CVE
  - CVE:CVE-2021-30465
  - SUG:NA
  - DESC:add mount destination validation(fix CVE-2021-30465)


author: yangbo <yangbo1@xfusion.com> - 1.0.0.rc3-209.u10
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Make sure signalAllProcesses is invoked in the function of destroy when container shares pid namespace


author: hutianxue <hutianxue@xfusion.com> - 1.0.0.rc3-212.u11
changelog:
  - Type:bugfix
  - CVE:
  - DESC:fix tmpfs mount bug and blkio do not set bug
         Prohibit /proc and /sys to be symlinks
         seccomp prepend ENOSYS stub to all filters


author: mengwenhua <mengwenhua@xfusion.com> - 1.0.0.rc3-218.u13
changelog:
  - Type:bugfix
  - CVE:
  - DESC:freezer add delay after freeze & fix init error return logic & fix update rt-runtime-us and rt-period-us failed & fix the bug when runc syscall.Exec cmd not exist cause panic


author: mengwenhua <mengwenhua@xfusion.com> - 1.0.0.rc3-221.u14
changelog:
  - Type:bugfix
  - CVE:
  - DESC:fix the bug when runc failed to update fat container memory value & create cwd when it does not exist & runc delete do not ignore error from destroy


author: maoyanping <maoyanping@xfusion.com> - 1.0.0.rc3-221.u15
changelog:
  - Type:CVE
  - CVE:CVE-2024-21626
  - DESC:libct: Destroy: don't proceed in case of errors and fix RootDir fd leaks


author: Zhiqiang Liu <liuzhiqiang26@huawei.com> - 4.1-10
changelog:
  - backport patches to fix two memory leak problems, rename patch names,
    and set release num to 9 for CI.


author: chenyanpanHW <chenyanpan@huawei.com> - 4.1-11
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0000-Fix-signed-integer-overflow-in-FSTART.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0001-Avoid-returning-deleted-directory-entries-as-labels.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0002-src-check.c-Fix-up-mtools-created-bad-dir-entries.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0003-Remove-long-file-name-when-changing-short-file-name.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0004-Fix-gcc-sprintf-length-warnings.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0005-fsck.fat-Fix-Year-2038-Bug.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0006-mkfs.fat-Fix-parsing-of-block-number.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0007-device_info-Fix-parsing-partition-number.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0008-Fix-memory-leaks-in-read_fat-function.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0009-Turn-label-in-struct-DOS_FS-into-char-array-from-poi.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: mengwenhua <mengwenhua@xfusion.com> - 4.1-13.u2
changelog:
  - Type:bugfix
  - CVE:
  - DESC:mkfs.fat: Fix calculation of FAT32 cluster size on non 512 bytes sector disks


author: mengwenhua <mengwenhua@xfusion.com> - 1.3-25.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:fix possible buffer overflow in get_path and remove extra carriage returns


author: maxin <maxin@xfusion.com> - 1:2.3.15-6.u2
changelog:
  - Type:CVE
  - CVE:CVE-2015-3420,CVE-2016-8652,CVE-2020-10957,CVE-2020-10958,CVE-2020-10967,CVE-2020-12100,CVE-2020-12673,CVE-2020-12674,CVE-2020-24386,CVE-2020-25275,CVE-2022-30550,CVE-2024-23184,CVE-2024-23185
  - DESC:Fix CVE-2015-3420,CVE-2016-8652,CVE-2020-10957,CVE-2020-10958,CVE-2020-10967,CVE-2020-12100,CVE-2020-12673,CVE-2020-12674,CVE-2020-24386,CVE-2020-25275,CVE-2022-30550,CVE-2024-23184,CVE-2024-23185


author: hutianxue <hutianxue@xfusion.com> - 1:1.8.17-8.u1
changelog:
  - Type:CVE
  - CVE:CVE-2020-11022,CVE-2020-11023,CVE-2020-23064
  - DESC:fix CVE-2020-11022,CVE-2020-11023,CVE-2020-23064


author: hutianxue <hutianxue@xfusion.com> - 19.11-18.u5
changelog:
  - Type:bugfix
  - CVE:
  - DESC:enable mlx4 mlx5 pmd driver and mv so lib in main package from devel-package


author: hutianxue<hutianxue@xfusion.com> - 19.11-22.u9
changelog:
  - Type:bugfix
  - CVE:
  - DESC:gro: fix chain index for more than 2 packets
         gro: trim tail padding bytes
         gro: check payload length after trim


author: hutianxue <hutianxue@xfusion.com> - 19.11-31.u16
changelog:
  - Type:bugfix
  - CVE:
  - DESC:pdump: fix pcap_dump coredump caused by incorrect pkt_len
    gro: fix gro with tcp push flag
    remove gazelle-proc-info, it function the same as gazellectl -x


author: mengwenhua <mengwenhua@xfusion.com> - 19.11-32.u17
changelog:
  - Type:bugfix
  - CVE:
  - DESC:backport bond patch
         net/bonding: change state machine to defaulted
         net/bonding: fix LACP negotiation
         net/bonding: fix LACP system address check
         net/bonding: fix MAC address when one port resets
         net/bonding: fix MAC address when switching active port
         net/bonding: fix dead loop on RSS RETA update
         net/bonding: fix promiscuous and allmulticast state


author: panxiaohe <panxiaohe@huawei.com> - 050-5
changelog:
  - [add] backport patches from upstream
    backport-fix-always-use-mkdir-p.patch
    backport-fix-dracut.sh-omission-is-an-addition-to-other-omiss.patch


author: mengwenhua <mengwenhua@xfusion.com> - 050-7.u4
changelog:
  - Type:bugfix
  - CVE:
  - DESC:backport patchs from upstream
         95resume: Do not resume on iSCSI, FCoE or NBD
         cryptroot-ask: no warn if /run/cryptsetup exist
         dracut-functions: add ip_params_for_remote_addr() helper
         dracut-functions: fix find_binary() to return full path
         dracut.sh: add check for invalid configuration files
         fix(base): tr needs to be installed
         fix(crypt-gpg): execute --card-status on each try
         fix(dracut-install): tweaks to get_real_file()
         fix(dracut.sh): handle '-i' option to include files beginning
         fix(dracut.sh): handle symlinks appropriately while using
         fix(install): handle $LIB in ldd output parsing
         fix(install): sane default --kerneldir
         fix(install): segfault on popen error
         fix(man): default value of rd.retry was increased to 180
         fix(mdraid): allow UUID comparison for more than one UUID
         fix(multipath): revise multipathd-stop
         fix(network): add errors and warnings when network interface
         fix(qeth_rules): check the existence of
         fix(qeth_rules): shellcheck for modules.d/95qeth_rules
         fix(resume): check for presence of /sys/power/resume
         fix(shutdown): be robust against forced shutdown
         fix(url-lib): make pre-pivot hook separetely per nfs mount


author: os-sync <os-sync@xfusion.com> - 0.13-2.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:fix some memory leaks
         Fix low-mem memory leak
         Fix memory leak in build_abbrevs
         Fix memory leak in write_multifile


author: wuguanghao<wuguanghao3@huawei.com> - 1.45.6-4
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0001-e2fsprogs-set-hugefile-from-4T-to-1T-in-hugefile-tes.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0002-e2fsck-fix-off-by-one-check-when-validating-depth-of.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0003-mke2fs-fix-up-check-for-hardlinks-always-false-if-in.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0004-add-device-check-in-ismount-process.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0005-libss-add-newer-libreadline.so.8-to-dlopen-path.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0006-e2fsck-fix-indexed-dir-rehash-failure-with-metadata_.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0007-libext2fs-retry-reading-superblock-on-open-when-chec.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0008-libext2fs-fix-potential-buffer-overrun-in-__get_dire.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0009-tune2fs-reset-MMP-state-on-error-exit.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0010-e2fsck-use-size_t-instead-of-int-in-string_copy.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0011-libext2fs-fix-incorrect-negative-error-return-in-uni.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0012-debugfs-fix-double-free-in-realloc-error-path-in-rea.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0013-tune2fs-fix-resource-leak-in-handle_quota_options.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0014-libext2fs-fix-UBSAN-warning-in-ext2fs_mmp_new_seq.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0015-libext2fs-fix-segault-when-setting-an-xattr-with-an-.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0016-mke2fs-fix-a-importing-a-directory-with-an-ACL-and-i.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0017-mke2fs-fix-resource-leak-on-error-path-when-creating.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0018-libext2fs-fix-incorrect-error-code-return-in-ext2fs_.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0019-debugfs-fix-memory-allocation-failures-when-parsing-.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0020-debugfs-fix-logdump-on-file-systems-with-block-sizes.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0021-libext2fs-fix-crash-when-ext2fs_mmp_stop-is-called-b.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0022-debugfs-fix-dump_metadata_block-for-block-sizes-8192.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0023-debugfs-fix-memory-leak-problem-in-read_list.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0024-debugfs-fix-rdump-and-ls-to-handle-uids-and-gids-655.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0025-e2image-fix-overflow-in-l2-table-processing.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0026-e2fsck-fix-last-mount-write-time-when-e2fsck-is-forc.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0027-profile_create_node-set-magic-before-strdup-name-to-.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0028-tdb_transaction_recover-fix-memory-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0029-zap_sector-fix-memory-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0030-misc-fix-potential-segmentation-fault-problem-in-sca.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0031-ext2ed-fix-potential-NULL-pointer-dereference-in-dup.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0032-ss_add_info_dir-fix-error-handling-when-memory-alloc.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0033-ss_create_invocation-fix-error-handling-when-memory-.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0034-ss_create_invocation-fix-potential-unititalized-refe.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0035-libext2fs-fix-unexpected-NULL-variable.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0036-libsupport-fix-potental-NULL-pointer-dereferences-in.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0037-libext2fs-fix-coverity-nits-in-tdb.c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-6000-e2fsck-exit-journal-recovery-when-find-EIO-ENOMEM-er.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-6001-e2fsck-exit-journal-recovery-when-jounral-superblock.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-6002-e2fsck-add-env-param-E2FS_UNRELIABLE_IO-to-fi.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0041-e2fsck-do-not-clean-up-file-acl-if-the-inode-is-trun.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0042-e2fsck-handle-level-is-overflow-in-ext2fs_extent_get.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0043-libext2fs-add-sanity-check-to-extent-manipulation.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0044-tune2fs-do-not-change-j_tail_sequence-in-journal-sup.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0045-debugfs-teach-logdump-the-n-num_trans-option.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequire git


author: wangxinjian <wangxinjian@xfusion.com> - 1.45.6-7.u1
changelog:
  - Type:requirement
  - CVE:NA
  - DESC:fix three issues:
    - e2fsck: exit journal recovery when find EIO, ENOMEM errors
      Fix issue: https://gitee.com/src-openeuler/e2fsprogs/issues/I4RZUT?from=project-issue
    - e2fsck: exit journal recovery when jounral superblock fails to update
      Fix issue: https://gitee.com/src-openeuler/e2fsprogs/issues/I4S0SD?from=project-issue
    - e2fsck: add env param E2FS_UNRELIABLE_IO to fix unreliable io case
      Fix issue: https://gitee.com/src-openeuler/e2fsprogs/issues/I4RZVX?from=project-issue


author: sunguoshuai <sunguoshuai@xfusion.com> - 1.45.6-7.u2
changelog:
  - Type:bugfix
  - CVE:NA
  - DESC:e2fsck: do not clean up file acl if the inode is truncating type
         e2fsck: handle->level is overflow in ext2fs_extent_get.


author: wuguanghao<wuguanghao3@huawei.com> - 1.45.6-4
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0001-e2fsprogs-set-hugefile-from-4T-to-1T-in-hugefile-tes.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0002-e2fsck-fix-off-by-one-check-when-validating-depth-of.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0003-mke2fs-fix-up-check-for-hardlinks-always-false-if-in.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0004-add-device-check-in-ismount-process.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0005-libss-add-newer-libreadline.so.8-to-dlopen-path.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0006-e2fsck-fix-indexed-dir-rehash-failure-with-metadata_.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0007-libext2fs-retry-reading-superblock-on-open-when-chec.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0008-libext2fs-fix-potential-buffer-overrun-in-__get_dire.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0009-tune2fs-reset-MMP-state-on-error-exit.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0010-e2fsck-use-size_t-instead-of-int-in-string_copy.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0011-libext2fs-fix-incorrect-negative-error-return-in-uni.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0012-debugfs-fix-double-free-in-realloc-error-path-in-rea.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0013-tune2fs-fix-resource-leak-in-handle_quota_options.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0014-libext2fs-fix-UBSAN-warning-in-ext2fs_mmp_new_seq.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0015-libext2fs-fix-segault-when-setting-an-xattr-with-an-.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0016-mke2fs-fix-a-importing-a-directory-with-an-ACL-and-i.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0017-mke2fs-fix-resource-leak-on-error-path-when-creating.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0018-libext2fs-fix-incorrect-error-code-return-in-ext2fs_.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0019-debugfs-fix-memory-allocation-failures-when-parsing-.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0020-debugfs-fix-logdump-on-file-systems-with-block-sizes.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0021-libext2fs-fix-crash-when-ext2fs_mmp_stop-is-called-b.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0022-debugfs-fix-dump_metadata_block-for-block-sizes-8192.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0023-debugfs-fix-memory-leak-problem-in-read_list.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0024-debugfs-fix-rdump-and-ls-to-handle-uids-and-gids-655.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0025-e2image-fix-overflow-in-l2-table-processing.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0026-e2fsck-fix-last-mount-write-time-when-e2fsck-is-forc.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0027-profile_create_node-set-magic-before-strdup-name-to-.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0028-tdb_transaction_recover-fix-memory-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0029-zap_sector-fix-memory-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0030-misc-fix-potential-segmentation-fault-problem-in-sca.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0031-ext2ed-fix-potential-NULL-pointer-dereference-in-dup.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0032-ss_add_info_dir-fix-error-handling-when-memory-alloc.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0033-ss_create_invocation-fix-error-handling-when-memory-.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0034-ss_create_invocation-fix-potential-unititalized-refe.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0035-libext2fs-fix-unexpected-NULL-variable.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0036-libsupport-fix-potental-NULL-pointer-dereferences-in.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0037-libext2fs-fix-coverity-nits-in-tdb.c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-6000-e2fsck-exit-journal-recovery-when-find-EIO-ENOMEM-er.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-6001-e2fsck-exit-journal-recovery-when-jounral-superblock.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-6002-e2fsck-add-env-param-E2FS_UNRELIABLE_IO-to-fi.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0041-e2fsck-do-not-clean-up-file-acl-if-the-inode-is-trun.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0042-e2fsck-handle-level-is-overflow-in-ext2fs_extent_get.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0043-libext2fs-add-sanity-check-to-extent-manipulation.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0044-tune2fs-do-not-change-j_tail_sequence-in-journal-sup.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0045-debugfs-teach-logdump-the-n-num_trans-option.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0046-tune2fs-fix-tune2fs-segfault-when-ext2fs_run_ext3_jo.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0047-tune2fs-tune2fs_main-should-return-rc-when-some-erro.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0048-tune2fs-exit-directly-when-fs-freed-in-ext2fs_run_ext3_journal.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequire git


author: lingsheng <lingsheng@xfusion.com> - 2.0.11-2.u1
changelog:
  - Type:bugfix
  - CVE:NA
  - DESC:fix string-icase can not work
    revert ebtables-config file access permission 
    remove runpath of ebtables


author: hutianxue <hutianxue@xfusion.com> - 2.0.11-7.u4
changelog:
  - Type:bugfix
  - CVE:
  - DESC:fix install error & fix post error "No such file or directory" & replace with tar from source0


author: zhangliangpengkun <zhangliangpengkun@xfusion.com> - 2.0.11-7.u5
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Fix the empty link contained in the ebtables package and move the link to the corresponding subpackage


author: wangyong2 <wangyong2@xfusion.com> - 111-29.u2
changelog:
  - Type:requirement
  - CVE:
  - DESC:- support configuring cipher and keybytes in mount private
         - delete documentation in Private
         - decrease fh_counter when abnormal exit and enter loginpass for each mount
         - set cipher and keybytes for filename encryption
         - cancel the default algorithm to sm4


author: wangxinjian <wangxinjian@xfusion.com> - 202002-6.u1
changelog:
  - Type:CVE
  - CVE:CVE-2021-38575,CVE-2021-38576
  - DESC:sync from sp2 for CVE-2021-38575 and fix CVE-2021-38576


author: wangzeping<wangzeping@xfusion.com> - 202002-15.u5
changelog:
  - Type:CVE
  - CVE:CVE-2022-4450,CVE-2023-0401,CVE-2023-0215,CVE-2023-0286
  - DESC:fix CVE-2022-4450,CVE-2023-0401,CVE-2023-0215,CVE-2023-0286


author: mengwenhua <mengwenhua@xfusion.com> - 202002-17.u8
changelog:
  - Type:CVE
  - CVE:CVE-2023-0464,CVE-2023-0465,CVE-2023-0466,CVE-2023-2650,CVE-2023-3446,CVE-2023-3817,CVE-2024-0727
  - DESC:Fix CVE-2023-0464,CVE-2023-0465,CVE-2023-0466,CVE-2023-2650,CVE-2023-3446,CVE-2023-3817,CVE-2024-0727


author: mengwenhua <mengwenhua@xfusion.com> - 202002-19.u9
changelog:
  - Type:CVE
  - CVE:CVE-2022-36763,CVE-2022-36764,CVE-2022-36765,CVE-2023-45229,CVE-2023-45230,CVE-2023-45231,CVE-2023-45232,CVE-2023-45233,CVE-2023-45234,CVE-2023-45235
  - DESC:Fix CVE-2022-36763,CVE-2022-36764,CVE-2022-36765,CVE-2023-45229,CVE-2023-45230,CVE-2023-45231,CVE-2023-45232,CVE-2023-45233,CVE-2023-45234,CVE-2023-45235


author: maxin <maxin@xfusion.com> - 202002-26.u12
changelog:
  - Type:CVE
  - CVE:CVE-2024-1298,CVE-2024-5535,CVE-2021-3712,CVE-2022-0778,CVE-2024-38796,CVE-2023-45236,CVE-2023-45237
  - DESC:Fix CVE-2024-1298,CVE-2024-5535,CVE-2021-3712,CVE-2022-0778,CVE-2024-38796,CVE-2023-45236,CVE-2023-45237


author: panxiaohe <panxiaohe@huawei.com> - 0.180-3
changelog:
  - detach subpackages elfutils-libs, elfutils-libelf,
    elfutils-libelf-devel, elfutils-default-yama-scope


author: mengwenhua <mengwenhua@xfusion.com> - 0.180-8.u5
changelog:
  - Type:bugfix
  - CVE:
  - DESC:get instance correctly for eu-ar -N, use make macros and upstream patch for no stdin flag


author: mengwenhua <mengwenhua@xfusion.com> - 0.180-9.u6
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Fix /usr/lib64/libdebuginfod.so.1 not found when uninstall elfutils-debuginfod-client-devel and Fix Obsoletes in spec


author: os-sync <os-sync@xfusion.com> - 0.180-16.u9
changelog:
  - Type:bugfix
  - CVE:
  - DESC:correctly fix libdebuginfod.so requirement
         Use upstream patch for Fix error of parsing object file perms


author: os-sync <os-sync@xfusion.com> - 0.180-17.u10
changelog:
  - Type:CVE
  - CVE:CVE-2025-1352,CVE-2025-1372,CVE-2025-1376,CVE-2025-1377
  - DESC:Fix CVE-2025-1352,CVE-2025-1372,CVE-2025-1376,CVE-2025-1377


author: liuhaipeng <liuhaipeng@xfusion.com> - 1:27.1-8.u2
changelog:
  - Type:CVE
  - CVE:CVE-2022-48337,CVE-2022-48338,CVE-2022-48339
  - DESC:fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339


author: maxin <maxin@xfusion.com> - 1:27.1-14.u5
changelog:
  - Type:CVE
  - CVE:CVE-2024-30203,CVE-2024-30204,CVE-2024-30205,CVE-2024-39331
  - DESC:fix CVE-2024-30203,CVE-2024-30204,CVE-2024-30205,CVE-2024-39331


author: wangkerong <wangkerong@huawei.com> - 1:27.1-5
changelog:
  - Type: improvement
  - DESC: use /usr/bin/make -O -j32 V=1 VERBOSE=1 instead of make for building bootstrap


author: yangcheng <yangcheng87@huawei.com> - 1:27.1-6
changelog:
  - fixed the upgrade error caused by the info file in the emacs-common software package being repackaged


author: wangkerong <wangkerong@huawei.com> - 1:27.1-5
changelog:
  - Type: improvement
  - DESC: use /usr/bin/make -O -j8 V=1 VERBOSE=1 instead of make for building bootstrap


author: mengwenhua <mengwenhua@xfusion.com> - 1.51-2
changelog:
  - Type:CVE
  - CVE:CVE-2023-49990,CVE-2023-49991,CVE-2023-49992,CVE-2023-49993,CVE-2023-49994
  - DESC:Update to version 1.51 and Fix CVE-2023-49990~CVE-2023-49994


author: liningjie <liningjie@xfusion.com> - 1.0-0.u10
changelog:
  - Type:bugfix
  - CVE:
  - DESC:revert commit u9, put implementation of "use auditadm to run logrotate" to security-tools package.


author: shikemeng <shikemeng@huawei.com> 1.0-8
changelog:
  - Add missing Requires
  - Remove write permssion in %file after strip
  - Change Requires numactl to numactl-libs


author: mengwenhua <mengwenhua@xfusion.com> - 2.4.5-5.u1
changelog:
  - Type:CVE
  - CVE:CVE-2020-18651,CVE-2020-18652,CVE-2021-36048,CVE-2021-39847,CVE-2021-42530,CVE-2021-36046,CVE-2021-36055,CVE-2021-40716,CVE-2018-12648,CVE-2021-36054,CVE-2021-36047,CVE-2021-36052,CVE-2021-36058,CVE-2021-36045,CVE-2021-42531,CVE-2021-36064,CVE-2021-42529,CVE-2021-42528,CVE-2021-36050,CVE-2021-40732,CVE-2021-36056,CVE-2021-42532,CVE-2021-36053,CVE-2021-36051
  - DESC:fix CVE-2020-18651,CVE-2020-18652,CVE-2021-36048,CVE-2021-39847,CVE-2021-42530,CVE-2021-36046,CVE-2021-36055,CVE-2021-40716,CVE-2018-12648,CVE-2021-36054,CVE-2021-36047,CVE-2021-36052,CVE-2021-36058,CVE-2021-36045,CVE-2021-42531,CVE-2021-36064,CVE-2021-42529,CVE-2021-42528,CVE-2021-36050,CVE-2021-40732,CVE-2021-36056,CVE-2021-42532,CVE-2021-36053,CVE-2021-36051


author: wangkerong <wangkerong@huawei.com> - 0.26-26
changelog:
  - Type:cves
  - ID:CVE-2021-29463 CVE-2021-29464 CVE-2021-29473
  - SUG:NA
  - DESC:fix CVE-2021-29463,CVE-2021-29464,CVE-2021-29473


author: wangxinjian <wangxinjian@xfusion.com> - 2.2.9-3.u1
changelog:
  - Type:CVE
  - CVE:CVE-2021-45960 CVE-2021-46143 CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827 CVE-2022-23852 CVE-2022-23990
  - DESC:fix CVE-2021-45960 CVE-2021-46143 CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827 CVE-2022-23852 CVE-2022-23990


author: lingsheng <lingsheng@xfusion.com> - 2.2.9-3.u2
changelog:
  - Type:CVE
  - CVE:CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315
  - DESC:Fix CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315


author: maxin <maxin@xfusion.com> - 2.2.9-15.u7
changelog:
  - Type:CVE
  - CVE:CVE-2023-52425,CVE-2024-45490,CVE-2024-45491,CVE-2024-45492,CVE-2024-50602
  - DESC:fix CVE-2023-52425,CVE-2024-45490,CVE-2024-45491,CVE-2024-45492,CVE-2024-50602


author: mengwenhua <mengwenhua@xfusion.com> - 1.0.32-9.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:fcoe-utils: Fix get_ctlr_num() for large ctlr_* indices and fipvlan: fixup return value on error


author: liqiuyu <liqiuyu@kylinos.cn> - 0.4.0-10
changelog:
  - add bz1766993-fence_virtd-1-fix-segfault-no-domains.patch
  - add bz1766993-fence_virtd-2-return-mainloop-on-interrupt.patch


author: maxin <maxin@xfusion.com> - 4.2.4-13.u2
changelog:
  - Type:CVE
  - CVE:CVE-2021-28429,CVE-2021-38171,CVE-2022-3109,CVE-2022-3341,CVE-2023-51794,CVE-2024-31578,CVE-2023-50010,CVE-2023-51793,CVE-2023-51798
  - DESC:Fix CVE-2021-28429,CVE-2021-38171,CVE-2022-3109,CVE-2022-3341,CVE-2023-51794,CVE-2024-31578,CVE-2023-50010,CVE-2023-51793,CVE-2023-51798


author: maxin <maxin@xfusion.com> - 4.2.4-18.u4
changelog:
  - Type:CVE
  - CVE:CVE-2024-32230,CVE-2022-1475,CVE-2020-35965
  - DESC:fix CVE-2024-32230,CVE-2022-1475,CVE-2020-35965


author: sunguoshuai<sunguoshuai@xfusion.com> - 79.0-7.u2
changelog:
  - Type:CVE
  - CVE:CVE-2022-25235,CVE-2022-25236,CVE-2022-25315
  - DESC:Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315


author: hutianxue <hutianxue@xfusion.com> - 79.0-12.u7
changelog:
  - Type:CVE
  - CVE:CVE-2021-45960,CVE-2021-46143,CVE-2022-22822,CVE-2022-22823,CVE-2022-22824,CVE-2022-22825,CVE-2022-22826,CVE-2022-22827
  - DESC: fix CVE-2021-45960,CVE-2021-46143,CVE-2022-22822,CVE-2022-22823,CVE-2022-22824,CVE-2022-22825,CVE-2022-22826,CVE-2022-22827


author: maxin <maxin@xfusion.com> - 79.0-34.u12
changelog:
  - Type:CVE
  - CVE:CVE-2022-22755,CVE-2022-1802,CVE-2023-44488,CVE-2020-26950,CVE-2020-26971,CVE-2021-29946,CVE-2022-34481,CVE-2020-26979,CVE-2023-6209,CVE-2022-45406,CVE-2020-15675,CVE-2021-23972,CVE-2021-23954,CVE-2021-29984,CVE-2021-29988,CVE-2021-23998,CVE-2022-29912,CVE-2024-0745,CVE-2023-1945,CVE-2021-29970,CVE-2021-43539
  - DESC:fix CVEs


author: wangxiao <wangxiao65@huawei.com> - 79.0-4
changelog:
  - Fix CVE-2020-15664 CVE-2020-15665 CVE-2020-15666 CVE-2020-15667
    CVE-2020-15668 CVE-2020-15676 CVE-2020-15677 CVE-2020-15678


author: wangxiao <wangxiao65@huawei.com> - 79.0-5
changelog:
  - Fix CVE-2020-15969 CVE-2020-15999 CVE-2020-16012 CVE-2020-26951
    CVE-2020-26953 CVE-2020-26956 CVE-2020-26957 CVE-2020-26958
    CVE-2020-26959 CVE-2020-26960 CVE-2020-26961 CVE-2020-26963
    CVE-2020-26965 CVE-2020-25966 CVE-2020-26967


author: yangzhuangzhuang<yangzhuangzhuang1@huawei.com> - 2.6.4-3
changelog:
  - The autoreconf command is used during compilation.
    Therefore,the automake and autoconf compilation dependencies need to added.


author: mengwenhua <mengwenhua@xfusion.com> - 1.6.2-7.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Fix manpage SDR English typo and Fix corner case libipmimonitoring-sensors output


author: liuhaipeng <liuhaipeng@xfusion.com> - 2:2.8.1-1.u1
changelog:
  - Type:CVE
  - CVE:CVE-2022-39282,CVE-2022-39283
  - DESC:Update to 2.8.1 to fix CVE-2022-39282 and CVE-2022-39283


author: hupeixi<hupeixi@xfusion.com> - 2:2.8.1-2.u2
changelog:
  - Type:CVE
  - CVE:CVE-2022-39316,CVE-2022-39318,CVE-2022-39319,CVE-2022-39347,CVE-2022-41877
  - DESC:Fix CVE-2022-39316,CVE-2022-39318,CVE-2022-39319,CVE-2022-39347,CVE-2022-41877


author: wangyong2<wangyong2@xfusion.com> - 2:2.8.1-3.u4
changelog:
  - Type:CVE
  - CVE:CVE-2023-40589,CVE-2023-40569,CVE-2023-39353,CVE-2023-39354,CVE-2023-39351,CVE-2023-39350,CVE-2023-40186,CVE-2023-40188,CVE-2023-40181,CVE-2023-39352,CVE-2023-40567,CVE-2023-39356
  - DESC:fix CVE-2023-40589,CVE-2023-40569,CVE-2023-39353,CVE-2023-39354,CVE-2023-39351,CVE-2023-39350,
             CVE-2023-40186,CVE-2023-40188,CVE-2023-40181,CVE-2023-39352,CVE-2023-40567,CVE-2023-39356


author: guowentao <guowentao@xfusion.com> - 2:2.11.7-2.u5
changelog:
  - Type:CVE
  - CVE:CVE-2024-32039,CVE-2024-32040,CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,CVE-2024-32658,CVE-2024-32659,CVE-2024-32660,CVE-2024-32661
  - DESC:Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,CVE-2024-32658,CVE-2024-32659,CVE-2024-32660,CVE-2024-32661


author: yangfu <yangfu@xfusion.com> - 2.10.2-3.u1
changelog:
  - Type:CVE
  - CVE:CVE-2022-27404,CVE-2022-27405,CVE-2022-27406
  - DESC:Fix CVE-2022-27404 CVE-2022-27405 CVE-2022-27406


author: zhaoang<zhaoang@xfusion.com> - 1.0.10-2.u1
changelog:
  - Type:CVE
  - CVE:CVE-2022-25308,CVE-2022-25309,CVE-2022-25310
  - DESC:fixn CVE-2022-25308,CVE-2022-25309,CVE-2022-25310


author: hutianxue <hutianxue@xfusion.com> - 3.9.2-11.u3
changelog:
  - Type:bugfix
  - CVE:
  - DESC:fuse3: backport two upstream patches
  - Fix use-after-free warning
  - Disable leak suppression (#773)


author: hutianxue <hutianxue@xfusion.com> - 1.2.9-4.u1
changelog:
  - Type:CVE
  - CVE:CVE-2020-10759
  - DESC:Solve compilation failure issues due to assert errors
         Fix CVE-2020-10759


author: hutianxue <hutianxue@xfusion.com> - 1.18.1-3.u2
changelog:
  - Type:bugfix
  - CVE:
  - DESC:gdbm_dump-fix-command-line-error-detection & Fix location tracking in gdbmtool. Fix the recover command & fix semantics of gdbm_load -r. improve handling of -u in gdbm_load


author: maxin <maxin@xfusion.com> - 1.0.5-7.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:fix problem that caused sgdisk to crash when using the latest popt
         Fix failure & crash of sgdisk when compiled with latest popt
         Fix NULL dereference when duplicating string argument


author: sunguoshuai <sunguoshuai@xfusion.com> - 1:3.30.1-10.u5
changelog:
  - Type:bugfix
  - CVE:
  - DESC: revert gdm-should-recover-automatically.patch which is not a perfect solution


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.38.2-1
changelog:
  - Upgrade to 3.38.2
  - Update Epoch, Version, Release, Source0, BuildRequires, Requires
  - Add patch 'python3-install-path-fix.patch', change files list


author: chenyanpanHW <chenyanpan@huawei.com> - 3.38.2-2
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-python3-install-path-fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


author: mengwenhua <mengwenhua@xfusion.com> - 3.2.0-8.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:backport libgfs2: Fix pointer cast byte order issue & libgfs2: Fix gfs[2]_log_header metadata description & fsck.gfs2: Fix segfault in build_and_check_metalist


author: sunguoshuai <sunguoshuai@xfusion.com> - 9.52-5.u2
changelog:
  - Type:bugfix
  - CVE:CVE-2021-3781
  - DESC:Fix pdfwrite d mode with file permissions
         Coverity 361429 move break to correct place
         Fix CVE-2021-3781, BUg 704342 Include device specifier strings in acces


author: haolei <haolei@xfusion.com> - 9.52-5.u3
changelog:
  - Type:CVE
  - CVE:CVE-2023-28879
  - DESC:fix-CVE-2023-28879
         Graphics library - prevent buffer overrun in (T)BCP encoding


author: maxin <maxin@xfusion.com> - 9.52-20.u10
changelog:
  - Type:CVE
  - CVE:CVE-2024-29510,CVE-2024-33869,CVE-2024-33870,CVE-2024-29508,CVE-2024-33871,CVE-2024-46953,CVE-2024-46956,CVE-2024-46955,CVE-2024-46951
  - DESC:fix CVE-2024-29510,CVE-2024-33869,CVE-2024-33870,CVE-2024-29508,CVE-2024-33871,CVE-2024-46953,CVE-2024-46956,CVE-2024-46955,CVE-2024-46951


author: panxiaohe <panxiaohe@huawei.com> - 2.27.0-4
changelog:
  - Fix CVE-2021-29468
  - Add gcc and gettext to BuildRequires
    - necessary for building and msgfmt command


author: hupeixi<hupeixi@xfusion.com> - 2.27.0-14.u7
changelog:
  - Type:CVE
  - CVE:CVE-2022-23521,CVE-2022-41903,CVE-2022-41953
  - DESC:Fix CVE-2022-23521,CVE-2022-41903,CVE-2022-41953


author: hutianxue <hutianxue@xfusion.com> - 2.27.0-17.u10
changelog:
  - Type:CVE
  - CVE:CVE-2023-25652,CVE-2023-29007,CVE-2023-25815
  - DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
         enable multithreading compilation and installation,
         move Git.3pm.gz to perl-Git,avoid installation conflicts,
         change BuildRequires from pcre-devel to pcre2-devel.


author: hutianxue <hutianxue@xfusion.com> - 2.27.0-18.u11
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts. Delete git-core-doc from git, git-core-doc is provided by git-help.


author: hutianxue <hutianxue@xfusion.com> - 2.27.0-20.u12
changelog:
  - Type:CVE
  - CVE:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465,CVE-2024-32002
  - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465,CVE-2024-32002


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 2.27.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Resolved the problem that a failure message is displayed when the git-daemon package is uninstalled


author: yangcheng <yangcheng87@huawei.com> - 2.66.8-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESE:remove the installation dependency of the main pakage on the help package


author: hupeixi<hupeixi@xfusion.com> - 2.66.8-8.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:fixed the fileutils testcase failure when the rpmbuild -ba command is used to building
  -      fix issues found by svace static code analyzer;fix segfault,memory leak,EOF,arguments leak
         backport some patches from community
         fix failed tests


author: changhan<changhan@xfusion.com> - 2.66.8-17.u7
changelog:
  - Type:CVE
  - CVE:CVE-2024-52533,CVE-2024-34397
  - DESC:fix filesystem type ext err and Correct translation information and CVE-2024-52533 and  CVE-2024-34397


author: Yang yanchao <yangyanchao6@huawei.com> - 2.28-83
changelog:
  - iconv: revert Add missing brackets
    Rewrite iconv option parsing [BZ #19519]
    intl: Handle translation output codesets with suffixes [BZ #26383]


author: wangxinjian <wangxinjian@xfusion.com> - 2.28-84.u3
changelog:
  - Type:CVE
  - CVE:CVE-2022-23218,CVE-2022-23219,CVE-2021-3999
  - DESC:fix CVE-2022-23218,CVE-2022-23219,CVE-2021-3999
         Fix __cscncmp_avx2 in strcmp-avx2.S [BZ#28755]


author: jiangliguang <jiangliguang@xfusion.com> - 2.28-84.u4
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Add two ILP32 machine types, yyparse function performs alignment
         remove politically sensitive information, add the -pie
         compilation option to lddlibc4


author: mengwenhua <mengwenhua@xfusion.com> - 2.28-97.u11
changelog:
  - Type:CVE
  - CVE:CVE-2023-4813,CVE-2023-4806,CVE-2023-5156
  - DESC:fix CVE-2023-4813,CVE-2023-4806,CVE-2023-5156


author: zhangliangpengkun <zhangliangpengkun@xfusion.com> - 2.28-97.u12
changelog:
  - Type:CVE
  - CVE:CVE-2024-2961,CVE-2024-33599,CVE-2024-33600,CVE-2024-33601
  - DESC:fix CVE-2024-2961,CVE-2024-33599,CVE-2024-33600,CVE-2024-33601


author: wangweichao<wangweichao@xfusion.com> - 3.30.1-11.u4
changelog:
  - Type:requirement
  - CVE:
  - DESC:auto setup refersh on gnome desktop
         display network MAC by default
         show refresh rate and fix display problem and revert add auto setup refersh on gnome in system env commit


author: hutianxue <hutianxue@xfusion.com> - 3.30.1-17.u9
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Fix double-free when closing the input chooser dialog
         - power: set no-show-all to TRUE on wifi and mobile rows
         - power: correctly lookup or insert new items into combobox
         - settings: some Chinese adaptations in the gnome system settings
         - settings: some Chinese adaptations in Thunderbolt panels in devices tab
         - seetings: some Chinese adaptations in combobox of power options


author: wangweichao<wangweichao@xfusion.com> - 3.30.0-2.u1
changelog:
  - Type:bugfix
  - CVE:N/A
  - DESC: No-updates's exit shield signal 'repo-list-changed' to fix the stuck window


author: wangxiao<wangxia65@huawei.com> -3.30.1-6
changelog:
  - move the libcroco sources directly under src/st
    remove the libcroco dependency from the meson.build files


author: ruanweidong <ruanweidong@xfusion.com> - 3.30.1-10.u1
changelog:
  - Type:bugfix
  - CVE:NA
  - DESC:(1)revert fix CVE-2020-17489
         (2)fix userlist page--scrollview-out-of-controll


author: chenquanlong<chenquanlong@xfusion.com> - 3.30.1-10.u3
changelog:
  - Type:bugfix
  - CVE:NA
  - DESC:fix keyboard: Do not call KeyboardManager.holdKeyboard() with set-content-type


author: hupeixi<hupeixi@xfusion.com> - 3.6.14-10.u1
changelog:
  - Type:CVE
  - CVE:CVE-2022-2509,CVE-2021-4209,CVE-2023-0361
  - DESC:fix CVE-2022-2509,CVE-2021-4209,CVE-2023-0361


author: mengwenhua <mengwenhua@xfusion.com> - 3.6.14-13.u2
changelog:
  - Type:CVE
  - CVE:CVE-2023-5981
  - DESC:Fix CVE-2023-5981
         x86 add detection of instruction set on Zhaoxin CPU


author: jiawenhao <jiawenhao@xfusion.com> - 3.6.14-16.u4
changelog:
  - Type:CVE
  - CVE:CVE-2024-28834
  - DESC:fix CVE-2024-28834 and Detach the sub package gnutls-utils from gnutls and update patch to remove function declare in header file


author: sunguoshuai<sunguoshuai@xfusion.com> - 1.15.7-5.u2
changelog:
  - Type:CVE
  - CVE:CVE-2021-41771,CVE-2022-23772,CVE-2022-23806
  - DESC:fix CVE-2021-41771,CVE-2022-23772,CVE-2022-23806


author: yangfu<yangfu@xfusion.com> - 1.15.7-5.u5
changelog:
  - Type:CVE
  - CVE:CVE-2022-28327 CVE-2022-24675 CVE-2021-44717
  - DESC:Fix CVE-2022-28327 CVE-2022-24675 CVE-2021-44717


author: hutianxue <hutianxue@xfusion.com> - 1.15.7-14.u6
changelog:
  - Type:CVE
  - CVE:CVE-2022-32148,CVE-2022-1962,CVE-2022-1705,CVE-2022-30633,CVE-2022-30635,CVE-2022-30632,CVE-2022-28131,CVE-2022-30631,CVE-2022-30629,CVE-2022-30634
  - DESC:fix CVE-2022-32148,CVE-2022-1962,CVE-2022-1705,CVE-2022-30633,CVE-2022-30635,CVE-2022-30632,CVE-2022-28131,CVE-2022-30631,CVE-2022-30629,CVE-2022-30634


author: mengwenhua <mengwenhua@xfusion.com> - 1.15.7-17.u9
changelog:
  - Type:bugfix
  - CVE:
  - DESC:golang.spec: modify the golang.spec to remove unnecessary files from golang-help package


author: mengwenhua <mengwenhua@xfusion.com> - 1.15.7-21.u13
changelog:
  - Type:CVE
  - CVE:CVE-2022-41715,CVE-2022-2880,CVE-2022-2879
  - DESC:fix CVE-2022-41715,CVE-2022-2880,CVE-2022-2879


author: sunyanni <sunyanni@xfusion.com> - 1.15.7-24.u16
changelog:
  - Type:CVE
  - CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
  - DESC:fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725


author: hutianxue <hutianxue@xfusion.com> - 1.15.7-26.u17
changelog:
  - Type:CVE
  - CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
  - DESC:fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538 & fix a deadlock issue when a signal is received.


author: yangfu <yangfu@xfusion.com> - 1.15.7-26.u18
changelog:
  - Type:bugfix
  - CVE:
  - DESC:fix error which don't crash when running "go version" in deleted directory.


author: hutianxue <hutianxue@xfusion.com> - 1.15.7-27.u19
changelog:
  - Type:CVE
  - CVE:CVE-2023-24539,CVE-2023-24540,CVE-2023-29400
  - DESC:fix CVE-2023-24539,CVE-2023-24540,CVE-2023-29400


author: hutianxue <hutianxue@xfusion.com> - 1.15.7-29.u20
changelog:
  - Type:CVE
  - CVE:CVE-2023-29402,CVE-2023-29404,CVE-2023-29405,CVE-2023-29403
  - DESC:fix CVE-2023-29402,CVE-2023-29404,CVE-2023-29405,CVE-2023-29403


author: maoyanping <maoyanping@xfusion.com> - 1.15.7-46.u27
changelog:
  - Type:CVE
  - CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289,CVE-2024-24784,CVE-2023-45288,CVE-2024-24787,CVE-2024-24789,CVE-2024-24791
  - DESC:backport patch to fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289,CVE-2024-24784,CVE-2023-45288,CVE-2024-24787,CVE-2024-24789,CVE-2024-24791


author: os-sync <os-sync@xfusion.com> - 1.15.7-50.u31
changelog:
  - Type:CVE
  - CVE:CVE-2024-45341
  - DESC:Fix CVE-2024-45341 and remove 0001-drop-hard-code-cert.patch and modify CVE-2024-45336


author: miaokaibo<miaokaibo@xfusion.com> - 2.8-1.u1
changelog:
  - Type:CVE
  - CVE:CVE-2018-13420
  - DESC: Instead of dynamically malloc memory for current_instance, add a static global variable malloc_extension_instance for it.


author: zhaoang<zhaoang@xfusion.com> - 1.31.0-6.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:fix adjust to abseil-cpp 20210324,since it dont provides absl_dynamic_annotations library anymore


author: hutianxue <hutianxue@xfusion.com> - 2.04-21.u4
changelog:
  - Type:CVE
  - CVE:CVE-2021-3697 CVE-2022-28735 CVE-2022-28736 CVE-2022-28734 CVE-2022-28733 CVE-2021-3695 CVE-2021-3696
  - DESC:FIX CVE-2021-3697 CVE-2022-28735 CVE-2022-28736 CVE-2022-28734 CVE-2022-28733 CVE-2021-3695 CVE-2021-3696


author: hupeixi<hupeixi@xfusion.com> - 1:2.04-25.u6
changelog:
  - Type:bugfix
  - CVE:
  - DESC:tests: Disable blkid cache usage
         disk/efi/efidisk: Pass buffers with higher ailgnment


author: hutianxue <hutianxue@xfusion.com> - 1:2.04-32.u10
changelog:
  - Type:bugfix
  - CVE:
  - DESC:disk/diskfilter: Check calloc() result for NULL
         kern/buffer: Handle NULL input pointer in grub_buffer_free()
         disk/diskfilter: Don't make a RAID array with more than 1024 disks
         loader/multiboot_elfxx: Fix memory leak
         loader/linux: Ensure the newc pathname is NULL-terminated
         term/i386/pc/vga_text: Prevent out-of-bounds writes to VGA text buffer
         normal/cmdline: Fix two related integer underflows
         fs/iso9660: Fix memory leaks in grub_iso9660_susp_iterate()
         fs/squash4: Fix memory leaks in grub_squash_iterate_dir()
         fs/xfs: Fix memory leaks in XFS module
         kern/file: Fix error handling in grub_file_open()
         osdep/linux/hostdisk: Modify sector by sysfs as disk sector
         net/bootp: Fix unchecked return value
         fs/iso9660: Avoid reading past the entry boundary
         fs/iso9660: Incorrect check for entry boundary
         fs/iso9660: Prevent skipping CE or ST at start of continuation area
         fs/iso9660: Prevent read past the end of system use area
         fs/iso9660: Add check to prevent infinite loop
         gentpl.py: Remove .interp section from .img files
         kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
         font: Reject fonts with negative max_char_width or max_char_height
         font: Assign null_font to unknown_glyph
         font: Check return value of grub_malloc() in ascii_glyph_lookup()


author: mengwenhua <mengwenhua@xfusion.com> - 1:2.04-36.u11
changelog:
  - Type:CVE
  - CVE:CVE-2023-4692,CVE-2023-4693
  - DESC:fs/ntfs: Make code more readable
         fs/ntfs: Fix an OOB read when parsing a volume label
         fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
         fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
         fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
         fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file


author: os-sync <os-sync@xfusion.com> - 1:2.04-40.u13
changelog:
  - Type:CVE
  - CVE:CVE-2024-45781,CVE-2024-45782,CVE-2024-56737,CVE-2024-45780,CVE-2024-45783,CVE-2024-49504,CVE-2025-0624,CVE-2024-45774,CVE-2024-45775,CVE-2025-0622,CVE-2025-0622,CVE-2025-0622,CVE-2024-45776,CVE-2024-45777,CVE-2025-0690,CVE-2025-1118,CVE-2024-45778,CVE-2024-45779,CVE-2025-0677,CVE-2025-0684,CVE-2025-0685,CVE-2025-0686,CVE-2025-0689,CVE-2025-0678,CVE-2025-1125
  - DESC:backport some patches from upstream and fix CVEs


author: mengwenhua <mengwenhua@xfusion.com> - 1.16.2-3.u2
changelog:
  - Type:CVE
  - CVE:CVE-2023-40474,CVE-2023-40475,CVE-2023-40476
  - DESC:Fix CVE-2023-40474,CVE-2023-40475,CVE-2023-40476


author: changhan<changhan@xfusion.com> - 1.16.2-6.u4
changelog:
  - Type:CVE
  - CVE:CVE-2023-37328,CVE-2024-47538,CVE-2024-47541,CVE-2024-47542,CVE-2024-47600,CVE-2024-47607,CVE-2024-47615,CVE-2024-47835
  - DESC:Compatible with gstreamer-plugins-base packages
         subparse end_tag and CVE-2023-37328
         fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, 
         CVE-2024-47600, CVE-2024-47607, CVE-2024-47615, CVE-2024-47835


author: hutianxue <hutianxue@xfusion.com> - 1.16.2-2.u1
changelog:
  - Type:CVE
  - CVE:CVE-2022-1920,CVE-2022-2122,CVE-2022-1921,CVE-2022-1922,CVE-2022-1923,CVE-2022-1924,CVE-2022-1925
  - DESC:Fix CVE-2022-2122 CVE-2022-1920-to-CVE-2022-1925


author: os-sync <os-sync@xfusion.com> - 1.16.2-8.u4
changelog:
  - Type:CVE
  - CVE:CVE-2024-47537,CVE-2024-47539,CVE-2024-47540,CVE-2024-47543,CVE-2024-47546,CVE-2024-47596,CVE-2024-47597,CVE-2024-47601,CVE-2024-47602,CVE-2024-47606,CVE-2024-47834,CVE-2024-47774,CVE-2024-47778,CVE-2024-47777,CVE-2024-47776,CVE-2024-47775,CVE-2024-47613,CVE-2024-47544,CVE-2024-47545,CVE-2024-47599,CVE-2024-47603
  - DESC:Fix cves


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.2.4-1
changelog:
  - Upgrade to 1.2.4
  - Update Version, Release, Source0, BuildRequires
  - Delete sed operation which existed in this version
  - Add patch for fix CVE-2021-33516
  - Update stage 'prep', 'build', 'install', 'check', 'files'


author: mafei <mafei@xfusion.com> - 3.3.4-1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:update version, fix CVE-2021-37404 CVE-2021-33036 CVE-2022-25168 CVE-2021-25642


author: mafei <mafei@xfusion.com> - 3.3.4-1.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:add dependencies of common jar and hdfs jar and  add chrpath to solve check_rpath warning


author: sunguoshuai<sunguoshuai@xfusion.com> - 2.2.16-2.u1
changelog:
  - Type:CVE
  - CVE:CVE-2022-0711
  - DESC:Fix CVE-2022-0711,prevent unbounded loop in http_manage_server_side_cookies


author: caodongxia <caodongxia@huawei.com> - 1.8.20-12
changelog:
  - add sub packages hdf5-openmpi-static, hdf5-openmpi-devel, hdf5-openmpi,
  - hdf5-mpich-static, hdf5-mpich-devel, hdf5-mpich


author: hutianxue <hutianxue@xfusion.com> - 1.8.20-13.u2
changelog:
  - Type:CVE
  - CVE:CVE-2018-13867,CVE-2018-16438,CVE-2019-8396,CVE-2021-37501
  - DESC:CVE-2018-13867,CVE-2018-16438,CVE-2019-8396,CVE-2021-37501


author: sunguoshuai<sunguoshuai@xfusion.com> - 2.4.43-12.u4
changelog:
  - Type:CVE
  - CVE:CVE-2022-22719,CVE-2022-22720,CVE-2022-22721,CVE-2022-23934
  - DESC:fix CVE-2022-22719 CVE-2022-22720 CVE-2022-22721 CVE-2022-23934


author: dujuan <jane.du@xfusion.com> - 2.4.51-5.u7
changelog:
  - Type:CVE
  - CVE:CVE-2022-31813,CVE-2022-28614,CVE-2022-29404,CVE-2022-26377,CVE-2022-30522,CVE-2022-30556
  - DESC:fix CVEs and switch from PCRE to PCRE2


author: hupeixi<hupeixi@xfusion.com> - 2.4.51-12.u10
changelog:
  - Type:CVE
  - CVE:CVE-2022-36760,CVE-2006-2001,CVE-2022-37436
  - DESC:change default value of HeartbeatMaxServers
         fix setting and comparison of IPs fileds
         avoid voerflow in case of indecently large session
         make ap_escape_quotes() work correctly
         fix lua_request with cast first
         Handle children killed pathologically
         mod_md do not interfere with requests if challenge type http-01
  -      fix CVE-2022-36760,CVE-2006-2001,CVE-2022-37436


author: hupeixi<hupeixi@xfusion.com> - 2.4.51-15.u11
changelog:
  - Type:CVE
  - CVE:CVE-2023-27522,CVE-2023-25690
  - DESC:fix build error for loongarch64
  - open the lock database read-only when possible 
  - fix CVE-2023-27522, CVE-2023-25690


author: hutianxue <hutianxue@xfusion.com> - 2.4.51-16.u12
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Report an error if the AJP backend sends an invalid number of headers
         handled a negative value when parsing the config
         avoid delimiting the query with a backreference
         fix missing APLOGNO


author: hutianxue <hutianxue@xfusion.com> - 2.4.51-17.u13
changelog:
  - Type:bugfix
  - CVE:
  - DESC:sync some patches from upstream
  - mod_proxy:Check before forwarding that a nocanon path has not been
  - mod_proxy:In case that AllowEncodedSlashes is set to NoDecode do not
  - mod_proxy: Fix double encoding of the uri-path of the request forwarded
  - mod_mime: Do not match the extention against possible query string


author: yangbo <yangbo@xfusion.com> - 2.4.51-21.u16
changelog:
  - Type:CVE
  - CVE:CVE-2023-38709,CVE-2024-24795,CVE-2024-27316
  - DESC:Fix CVE-2023-38709,CVE-2024-24795,CVE-2024-27316


author: zhangliangpengkun <zhangliangpengkun@xfusion.com> - 2.4.51-21.u17
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Block HTTP TRACE and TRACK methods
  - Don't return the server version information


author: zhangliangpengkun <zhangliangpengkun@xfusion.com> - 2.4.51-21.u18
changelog:
  - Type:CVE
  - CVE:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
  - DESC:fix CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573


author: likang<likang@xfusion.com> - 2.0.14-1.u3
changelog:
  - Type:bugfix
  - CVE:
  - DESC:iSulad:fix type convert,add null pointer check,remove unuse macro,sync from upstream openeuler/iSulad


author: likang<likang@xfusion.com> - 2.0.15-2.u8
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Do not use tmpfile() for safe
         Use only TLS v1.2 or later
         Don't mount shareable dirs if user set mount for dev shm
         Fix that running containers without schema information in seccomp configuration fails
         Fix the thread leak of cri attach when stdout and stderr are false


author: likang<likang@xfusion.com> - 2.0.15-3.u10
changelog:
  - Type:bugfix
  - CVE:
  - DESC:fix cpu quota out of range when update to 1
         stop health check monitor before stopping container
         set dup_option null after free
         ensure read string must have space store null char
         remove unused include files
         fix lose override flag
         Add read and execute permissions for libhttpclient.s
         fix exec_request_to_rest forgot to handle suffix
         add fuzz dict


author: hupeixi<hupeixi@xfusion.com> - 2.0.17-1.u12
changelog:
  - Type:bugfix
  - CVE:
  - DESC:sycn patches from openeuler/iSulad,add patch
         invalid free default-runtime and cri-runtime after free json-confs
         calculate timezone by tm_gmtoff
         shield upgrade error if lcrd not exist
         change libisulad_tools.so mode
         sync from openEuler
         update iSulad version to 2.0.17-1


author: hupeixi<hupeixi@xfusion.com> - 2.0.17-3.u13
changelog:
  - Type:bugfix
  - CVE:
  - DESC:use epoll instead of select for wait_exit_fifo
         add required package lcr clibcni lower and upper version


author: mengwenhua <mengwenhua@xfusion.com> - 2.0.17-11.u22
changelog:
  - Type:CVE
  - CVE:CVE-2021-33638,CVE-2021-33637,CVE-2021-33636,CVE-2021-33635
  - DESC:retry call runtime ops
         add ut test for retry macro
         set inspect_container timeout * update function inspect_container timeout
         add adaption code for musl. * add adaption code for musl.
         deleting broken rootfs
         fix leftover devicemapper mnt dir * fix leftover devicemapper mnt dir
         check file system ro before merge network for syscontainer
         isulad shim wait for all child process
         When run options rm is set, delete the stoped container's fifo directory.
         recheck kill command exit status
         start sandbox before setup network by default
         compatibility for manage pods which created by old iSulad
         remove clean_module_fill_ctx for libisulad_img.so
         fix stuck health check blocking container stop bugs
         restore health check fix
         bugfix for implicit_digest
         fix loading of nsswitch based config inside chroot under glibc * fix loading of nsswitch based config inside chroot under glibc
         Added restrictions on container health checks
         modify the help information of health-timeout


author: liuhaipeng <liuhaipeng@xfusion.com> - 1.9.21-6.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Modify homepage url
         Add exist_ok=True in os.makedirs to avoid failure due to race condition


author: hupeixi <hupeixi@xfusion.com> - 1.3.1-7.u2
changelog:
  - Type:bugfix
  - CVE:NA
  - DESC:Fix caps parameter cannot be parsed
  -      Bump release for sp2 release


author: wenbailin<wenbailin@xfusion.com> - 10.04-2.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:ifup-eth: add a new PERSISTENT_DHCLIENT_IPV6 option for IPv6 dhclient daemon


author: yuxiating<yuxiating@xfusion.com> - 1.0.0-67.u3
changelog:
  - Type:bugfix
  - CVE:NA
  - DESC:Fix the problem that the old process of restarting the service does not exit


author: liusong<liusong1@xfusion.com> - 1.0.0-67.u5
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Fix the problem that the permission is insufficient and an error is reported


author: lingsheng<lingsheng@xfusion.com> - 1.0.0-67.u6
changelog:
  - Type:cleancode
  - CVE:NA
  - DESC:Convert text encoding to utf-8 to fix Chinese garbled characters and clean up code


author: maxin <maxin@xfusion.com> - 3.16-3.u2
changelog:
  - Type:CVE
  - CVE:CVE-2023-7250,CVE-2024-26306
  - DESC:Upgrade to 3.16 for fix CVE-2023-7250,CVE-2024-26306


author: chengycehun <chengycehun1@huawei.com> - 5.5.0-7
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:lib/bpf:fix bpffs mount when /sys/fs/bpf exists
             tc/f_flower:fix port range parsing


author: wenbailin<wenbailin@xfusion.com> - 5.5.0-9.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:tc flowerr Fix buffer overflow on large labels
         q_cake allow changing to diffserv3


author: miaokaibo<miaokaibo@xfusion.com> - 5.5.0-9.u2
changelog:
  - Type:bugfix
  - CVE:
  - DESC:fix genl;fix ip route show table xxx empty;fix rdma and add output message for help;use strtoi instead of atoi for checking value


author: zhaoang<zhaoang@xfusion.com> - 5.5.0-11.u4
changelog:
  - Type:bugfix
  - CVE:
  - DESC:fix devlink health dump command without arg
         tc: em_u32: fix offset parsing
         l2tp: fix typo in AF_INET6 checksum JSON print
         bridge: fix memory leak when doing fdb get
         ip neigh: fix memory leak when doing 'get'
         ip address: fix memory leak when specifying device


author: sunyanni <sunyanni@xfusion.com> - 5.5.0-14.u9
changelog:
  - Type:bugfix
  - CVE:
  - DESC:delete feature-iproute-limit-operation-ip-netns-del.patch
         In earlier kernel versions, when a namespace is deleted when a port is available, that while maske the system panic;
         The current kernel version uses the workaround. The upper-layer service deletes the port in the namespace and then deletes the namespace. Therefore, this problem does not occur. Delete the patch file.


author: mengwenhua <mengwenhua@xfusion.com> - 5.5.0-17.u10
changelog:
  - Type:bugfix
  - CVE:
  - DESC:backport bugfix patch
         libnetlink: fix socket leak in rtnl_open_byproto()
         lnstat: fix strdup leak in -w argument parsing
         tc_util: Fix parsing action control with space and slash
         remove libcap dependency
         nexthop: fix error reporting in filter dump
         bridge: report correct version
         q_cake: Make fwmark uint instead of int
         tc: m_action: check cookie hex string len
         iproute2: fix MPLS label parsing
         tc_util: detect overflow in get_size
         Revert "bpf: replace snprintf with asprintf when dealing with long buffers"
         tc/m_estimator: Print proper value for estimator interval in raw.
         iproute2: ip maddress: Check multiaddr length
         iproute2: ip addr: Organize flag properties structurally
         addr: Fix noprefixroute and autojoin for IPv4
         devlink: fix memory leak in cmd_dev_flash()
         tipc: bail out if algname is abnormally long
         tipc: bail out if key is abnormally long
         utils: Fix BIT() to support up to 64 bits on all architectures
         ipmonitor: Fix recvmsg with ancillary data
         devlink: fix infinite loop on flash update for drivers without status
         tc: u32: Fix key folding in sample option
         lnstat: fix buffer overflow in header output
         nstat: print useful error messages in abort() cases


author: miaokaibo<miaokaibo@xfusion.com> - 1.8.5-2.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC: add null check for fw in X_entry If the fw pointer is empty, a core dump occurs.


author: fandehui<fandehui@xfusion.com> - 20190709-7.u3
changelog:
  - Type:bugfix
  - CVE:
  - DESC: fix when the number of CPUs exceeds 32, exit program when count of ping processes exceeds 10.


author: fandehui<fandehui@xfusion.com> - 20190709-7.u4
changelog:
  - Type:bugfix
  - CVE:
  - DESC: fix when the number of CPUs exceeds 32 and the ping command is used with the -f option, 
          exit program when count of ping processes exceeds 10.


author: <hutianxue@xfusion.com> - 3:1.7.0-20.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:add keep_going check to prevent irqbalance from failing to exit after SIGTERM
         parse_proc_interrupts: fix parsing interrupt counts
         Add '\0' to the end of strings to avoid heap buffer overflow
         Add return value check of opendir in do_one_cpu
         Hotplug may occur again during sleep, so wait until there is no hotplug
         Also fetch node info for non-PCI devices
         log correctly for isolated and nohz_full cpus
         activate_mapping: activate only online CPUs


author: lixiang <lixiang172@huawei.com> - 0.9.5-15
changelog:
  - Type:requirement
  - CVE:NA
  - SUG:restart
  - DESC:support save/load separated image, add relative test cases and bugfixes as well


author: DCCooper <1866858@gmail.com> - 0.9.5-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:optimize function IsExist and add more testcase for filepath.go


author: jingxiaolu <lujingxiao@huawei.com> - 0.9.5-21
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:restart
  - DESC:add repo to local image when output transporter is docker://


author: wenbailin<wenbailin@xfusion.com> - 0.9.5-21.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:add syscall "statx" in seccomp
         fix apply patch failing before compiling
         refactor image separator related
         sync upstream patches


author: mengwenhua <mengwenhua@xfusion.com> - 2.0.4-8.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:fix Can't apply preserveSpace to an attribute & Auto update to INSTALL file & Make DocBook keyword element within text


author: zhangliangpengkun <zhangliangpengkun@xfusion.com> - 2.9.8-7.u2
changelog:
  - Type:CVE
  - CVE:CVE-2022-42004
  - DESC:fix CVE-2022-42004
    Add check in BeanDeserializer._deserializeFromArray() to prevent use of deeply nested arrays


author: haolei <haolei@xfusion.com> - 2.9.8-7.u3
changelog:
  - Type:CVE
  - CVE:CVE-2020-36518
  - DESC:fix CVE-2020-36518
    Throw JsonMappingException for deeply nested JSON.


author: mengwenhua <mengwenhua@xfusion.com> - 2.9.8-10.u6
changelog:
  - Type:CVE
  - CVE:CVE-2020-36518,CVE-2022-42003,CVE-2022-42004
  - DESC:Fix CVE-2020-36518,CVE-2022-42003,CVE-2022-42004


author: zhouyitao<zhouyitao@xfusion.com> - 1:1.8.0.322-b06.4.u1
changelog:
  - Type:bugfix
  - CVE:NA
  - DESC:upgrade to 8u322-b06(ga)
         modified fast-serializer-jdk8.patch to adopt openjdk
         modified update-cacerts-and-VerifyCACerts.java-test.patch
         deleted 8182036.patch
         deleted 8183543-Aarch64-C2-compilation-often-fails-with-fail--last.patch
         deleted Delete-expired-certificate-globalsignr2ca.patch
         deleted inline-optimize-for-aarch64.patch
         add add-system-property-swing.JComboBox.useLegacyMode.patch
         add debuginfo.diz-should-not-contain-the-path-after-unzip.patch
         add 8173361-various-crashes-in-JvmtiExport-post_compiled.patch
         add fix-TestUseCompressedOopsErgo-run-failed.patch
         add fix-testme-Test6929067-run-faild.patch
         add penetration_testing_vulnerability_fix.patch
         add 8136577_Make_AbortVMOnException_available_in_product_builds.patch
         add add-environment-variable-ZIP_INVALID_LOC_HEADER_EXIT.patch
         add print-fd-and-file-path-when-a-zip-invalid-loc-header.patch
         add 8207011-Remove-uses-of-the-register-storage-class-specifier.patch
         modified implementation_of_Blas_hotspot_function_in_Intrinsics.patch
         modified 8233280-Remove-GCLockerInvokesConcurrent-relative-logic-for-G1.patch
         add 8268819-SA-Remove-libthread_db-dependency-on-Linux.patch


author: likang<likang@xfusion.com> - 1:1.8.0.342.b07-0.u2
changelog:
  - Type:bugfix
  - CVE:
  - DESC:del 8168926.patch
         del 8194154.patch
         del 8202142-jfr-event-io-TestInstrumentation-is-unstable.patch
         del 8266187_Memory_leak_in_appendBootClassPath.patch
         del debuginfo.diz-should-not-contain-the-path-after-unzip.patch
         del remove-gnu-debuglink-when-using-enable-debug-.patch
         del backport-0001-fix-make-bugs-when-git-and-hg-not-exist.patch
         modified 7092821-java.security.Provider.getService-is-synchro.patch
         modified 8268819-SA-Remove-libthread_db-dependency-on-Linux.patch
         modified fix-log-bug-enhance-aes-hmac-performance.patch
         add 8067941-TESTBUG-Fix-tests-for-OS-with-64K-page-size.patch
         add 8173339-AArch64-Fix-minimum-stack-size-computations.patch
         add 7092821-java.security.Provider.getService-is-synchro.patch
         add change-sa-jdi.jar-make-file-for-BEP.patch


author: hutianxue <hutianxue@xfusion.com> - 1:1.8.0.342.b07-0.u3
changelog:
  - Type:CVE
  - CVE:CVE-2022-21628,CVE-2022-21624,CVE-2022-21619
  - DESC:fix CVE-2022-21628,CVE-2022-21624,CVE-2022-21619


author: maoyanping <maoyanping@xfusion.com> - 1:1.8.0.342.b07-0.u4
changelog:
  - Type:CVE
  - CVE:CVE-2023-21930,CVE-2023-21967,CVE-2023-21968,CVE-2023-21938,CVE-2023-21939,CVE-2023-21937,CVE-2023-21954
  - DESC:fix CVE-2023-21930,CVE-2023-21967,CVE-2023-21968,CVE-2023-21938,CVE-2023-21939,CVE-2023-21937,CVE-2023-21954


author: mengwenhua <mengwenhua@xfusion.com> - 1:1.8.0.342.b07-0.u6
changelog:
  - Type:CVE
  - CVE:CVE-2023-22045,CVE-2023-21843,CVE-2023-21830
  - DESC:fix CVE-2023-22045,CVE-2023-21843,CVE-2023-21830


author: maoyanping <maoyanping@xfusion.com> - 1:1.8.0.342.b07-0.u8
changelog:
  - Type:CVE
  - CVE:CVE-2024-21147,CVE-2024-20952,CVE-2024-20918
  - DESC:fix CVE-2024-21147,CVE-2024-20952,CVE-2024-20918


author: maxin <maxin@xfusion.com> - 1:1.8.0.422.b05-11.u9
changelog:
  - Type:CVE
  - CVE:CVE-2022-37434,CVE-2022-21619,CVE-2022-21624,CVE-2022-39399,CVE-2022-21628,CVE-2022-40433,CVE-2023-22049,CVE-2023-22045,CVE-2023-21967,CVE-2023-21954,CVE-2023-21937,CVE-2023-21930,CVE-2023-21938,CVE-2023-21968,CVE-2023-21939,CVE-2023-21843,CVE-2023-21830,CVE-2022-21549,CVE-2023-22067,CVE-2023-22081,CVE-2024-20922,CVE-2024-20918,CVE-2024-20945,CVE-2024-20952,CVE-2024-20926,CVE-2024-20925,CVE-2024-20919,CVE-2024-20921,CVE-2024-20923,CVE-2024-21085,CVE-2024-21094,CVE-2024-21011,CVE-2024-21005,CVE-2024-21068,CVE-2024-21131,CVE-2024-21140,CVE-2024-21138,CVE-2024-21145,CVE-2024-21144,CVE-2024-21147
  - DESC:Update to fix CVEs


author: kuenking111 <wangkun49@huawei.com> - 1:11.0.13.7-2
changelog:
  - add 8273111-Default-timezone-should-return-zone-ID-if-locatiome-is-valid-but-not-canonicalization-on-linux.patch


author: zhouyitao<zhouyitao@xfusion.com> - 1:11.0.14.9-1.u1
changelog:
  - Type:bugfix
  - CVE:NA
  - DESC:Update to 11.0.14+9 (GA)
         add fix-error-in-build-core-variants.patch


author: qiushigang <qiushigang@xfusion.com> - 1:11.0.15.10-2.u1
changelog:
  - Type:CVE
  - CVE:CVE-2022-21360,CVE-2022-21294,CVE-2022-21277,CVE-2022-21296,CVE-2022-21299,CVE-2022-21291,CVE-2022-21365,CVE-2022-21340,CVE-2022-21341,CVE-2022-21283,CVE-2022-21282,CVE-2022-21366,CVE-2022-21293,CVE-2022-21305
  - DESC:Merge master & downgrade copy-jdk-configs from 3.9 to 3.3 in Requires


author: hupeixi<hupeixi@xfusion.com> - 1:11.0.16.8-0.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
         modified ZGC-Redesign-C2-load-barrier-to-expand-on-th.patch
         modified fast-serializer-jdk11.patch
         modified dfx-enhancement-of-FastSerializer.patch
         modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
         modified src-openeuler-openjdk-11-resolve-code-inconsistencies.patch
         modified add-missing-inline.patch
         modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
         delete backport-0002-fix_X509TrustManagerImpl_symantec_distrust.patch
         add backport-fix_Internal_and_external_code_inconsistency.patch


author: chenzhigang <chenzhigang@xfusion.com> - 1:11.0.16.8-0.u3
changelog:
  - Type:CVE
  - CVE:CVE-2023-21930,CVE-2023-21937,CVE-2023-21938,CVE-2023-21939,CVE-2023-21954,CVE-2023-21967,CVE-2023-21968
  - DESC:fix CVE-2023-21930,CVE-2023-21937,CVE-2023-21938,CVE-2023-21939,CVE-2023-21954,CVE-2023-21967,CVE-2023-21968


author: maoyanping <maoyanping@xfusion.com> - 1:11.0.16.8-0.u4
changelog:
  - Type:CVE
  - CVE:CVE-2023-22045,CVE-2023-22041,CVE-2023-22006,CVE-2023-21843,CVE-2022-40433
  - DESC:fix CVE-2023-22045,CVE-2023-22041,CVE-2023-22006,CVE-2023-21843,CVE-2022-40433


author: mengwenhua <mengwenhua@xfusion.com> - 1:11.0.16.8-0.u6
changelog:
  - Type:bugfix
  - CVE:
  - DESC:fix CPUBench kmeans random fails & SSLEngine throws NPE parsing CertificateRequests


author: maoyanping <maoyanping@xfusion.com> - 1:11.0.16.8-0.u7
changelog:
  - Type:CVE
  - CVE:CVE-2024-21147,CVE-2024-20952,CVE-2024-20918

  - DESC:fix CVE-2024-21147,CVE-2024-20952,CVE-2024-20918


author: maxin <maxin@xfusion.com> - 1:11.0.25.9-3.u8
changelog:
  - Type:CVE
  - CVE:CVE-2023-22081,CVE-2023-22025,CVE-2023-22067,CVE-2024-20918,CVE-2024-20919,CVE-2024-20952,CVE-2024-20945,CVE-2024-20921,CVE-2024-20926,CVE-2024-21094,CVE-2024-21085,CVE-2024-21012,CVE-2024-21068,CVE-2024-21011,CVE-2024-21147,CVE-2024-21144,CVE-2024-21145,CVE-2024-21138,CVE-2024-21140,CVE-2024-21131,CVE-2024-21210,CVE-2024-21235,CVE-2024-21217,CVE-2024-21211,CVE-2024-21208
  - DESC:Update to fix CVEs


author: noah <hedongbo@huawei.com> - 1:17.0.0.35-0.0.ea.rolling
changelog:
  - Update to jdk-17.0.0.0+35
  - change path to the version-numbers.conf
  - removed JAVAC_FLAGS=-g from make command, as it breaks the build since JDK-8258407
  - removed rmid binary from files and from slaves
  - renamed lib/security/blacklisted.certs to lib/security/blocked.certs
  - add lib/libsvml.so for intel
  - add lib/libsyslookup.so to files


author: qiushigang <qiushigang@xfusion.com> - 1:18.0.1.10-0.rolling.u1
changelog:
  - Type:CVE
  - CVE:CVE-2022-21299,CVE-2022-21365,CVE-2022-21341,CVE-2022-21248,CVE-2022-21296,CVE-2022-21282,CVE-2022-21305,CVE-2022-21294,CVE-2022-21366,CVE-2022-21293,CVE-2022-21291,CVE-2022-21360,CVE-2021-35556,CVE-2021-35561,CVE-2021-35578,CVE-2021-35603,CVE-2021-35559,CVE-2021-35564,CVE-2021-35586,CVE-2022-21434,CVE-2021-35567,CVE-2022-21496,CVE-2022-21426,CVE-2022-21476,CVE-2022-21283,CVE-2022-21340,CVE-2022-21443,CVE-2022-21277,CVE-2021-2161,CVE-2021-2163,CVE-2022-21449,CVE-2021-2388,CVE-2021-2369,CVE-2021-35550,CVE-2021-35565,CVE-2021-2341
  - DESC:Update to jdk-18.0.1+10
  - downgrade copy-jdk-configs from 3.9 to 3.3 in Requires
  - Update to jdk-18.0.1+10
  - downgrade copy-jdk-configs from 3.9 to 3.3 in Requires
  - set build jdk to 18
  - Update to jdk-18.0.0.0+37
  - adjust rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch
  - Downgrade symbols to provide compalibility to lower glibc
  - add openjdk-latest.yaml


author: maxin <maxin@xfusion.com> - 1:23.0.1.11-1.u4
changelog:
  - Type:CVE
  - CVE:CVE-2022-40433,CVE-2023-22043,CVE-2023-22041,CVE-2023-22006,CVE-2023-22044,CVE-2023-22049,CVE-2023-22045,CVE-2023-22036,CVE-2023-21967,CVE-2023-21954,CVE-2023-21937,CVE-2023-21930,CVE-2023-21938,CVE-2023-21968,CVE-2023-21939,CVE-2023-21843,CVE-2023-21830,CVE-2023-21835,CVE-2022-21549,CVE-2023-22081,CVE-2023-22025,CVE-2024-21217,CVE-2024-21211,CVE-2024-21208,CVE-2024-21210,CVE-2024-21235,CVE-2023-42950,CVE-2020-14562,CVE-2020-14573,CVE-2020-14664,CVE-2020-14581,CVE-2020-14621,CVE-2020-14556,CVE-2020-14578,CVE-2020-14577,CVE-2020-14593,CVE-2020-14593,CVE-2024-21147,CVE-2024-21144,CVE-2024-21145,CVE-2024-21138,CVE-2024-21140,CVE-2024-21131,CVE-2024-21011,CVE-2024-21005,CVE-2024-21003,CVE-2024-21068,CVE-2024-21004,CVE-2024-21085,CVE-2024-21094,CVE-2024-21012,CVE-2024-21002,CVE-2024-20955,CVE-2024-20932,CVE-2024-20945,CVE-2024-20919,CVE-2024-20922,CVE-2024-20918,CVE-2024-20952,CVE-2024-20926,CVE-2024-20925,CVE-2024-20921,CVE-2024-20923,CVE-2023-22081,CVE-2023-22025
  - DESC:update to fix CVEs


author: leizhe <leizhe@xfusion.com> - 1.1-1.u1
changelog:
  - Type:CVE
  - CVE:CVE-2014-125087
  - DESC:fix CVE-2014-125087
    XMLBuilder2 is vulnerable to XML External Entity (XXE) injection


author: zhangliangpengkun <zhangliangpengkun@xfusion.com> - 1.3.7-1.u3
changelog:
  - Type:CVE
  - CVE:CVE-2023-1436,CVE-2022-45685
  - DESC:fix CVE-2023-1436,Pre-patch Introducing new static methods to set the recursion depth limit,supplementary repair CVE-2022-45685


author: leizhe <leizhe@xfusion.com> - 1.5.4-1.u3
changelog:
  - Type:CVE
  - CVE:CVE-2022-40149,CVE-2022-40150,CVE-2022-45685,CVE-2022-45693,CVE-2023-1436
  - DESC:Upgrade to 1.5.4 for fix cves:CVE-2022-40149,CVE-2022-40150,CVE-2022-45685,CVE-2022-45693,CVE-2023-1436


author: zhangliangpengkun <zhangliangpengkun@xfusion.com> - 9.4.16-1.u1
changelog:
  - Type:CVE
  - CVE:CVE-2022-2047,CVE-2022-2048
  - DESC:fix CVE-2022-2047,CVE-2022-2048
  -      Now returning error handling code as a Runnable.
  -      Now always adding a "/" before the path, if not already present.Parse CONNECT URIs as Authority


author: maxin <maxin@xfusion.com> - 9.4.16-8.u6
changelog:
  - Type:CVE
  - CVE:CVE-2023-26048,CVE-2023-26049,CVE-2024-6762
  - DESC:fix CVE-2023-26048,CVE-2023-26049,CVE-2024-6762


author: maoyanping <maoyanping@xfusion.com> - 3.10.1-1.u1
changelog:
  - Type:CVE
  - CVE:CVE-2018-16487,CVE-2018-3721,CVE-2019-10744,CVE-2020-8203
  - DESC:fix CVE-2018-16487,CVE-2018-3721,CVE-2019-10744,CVE-2020-8203


author: leiyansong<leiyansong@xfusion.com> - 0.15-2.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:add backport-json-escape-str-avoid-harmless-unsigned-integer-overflow.patch


author: hutianxue <hutianxue@xfusion.com> - 1.9.3-6.u2
changelog:
  - Type:bugfix
  - CVE:
  - DESC:avoid isprint, because it is locale specific
         Add nullptr Json::Value constructor
         Fix generation of pkg-config file with absolute includedir/libdir


author: hutianxue <hutianxue@xfusion.com> - 1.9.3-7.u3
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Fix c++20 compilation problem for clang10 and fix potential bug due to compiler optimization


author: zhaoang<zhaoang@xfusion.com> - 2.8.2-1.u3
changelog:
  - Type:CVE
  - CVE:CVE-2021-38153,CVE-2022-34917
  - DESC:update version to fix CVE-2021-38153,CVE-2022-34917


author: zhaoang<zhaoang@xfusion.com> - 2.8.2-1.u4
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Modified spotbugsPlugin from 4.6.0 to 4.7.1 and testRetryPlugin from 1.2.0 to 1.3.1 to build successfully


author: wuwanli <wuwanli@xfusion.com> - 2.8.2-1.u5
changelog:
  - Type:CVE
  - CVE:CVE-2023-25194
  - DESC: Added a system property ("-Dorg.apache.kafka.disallowed.login.modules") to disable
          the problematic login modules usage in SASL JAAS configuration. And by default
          "com.sun.security.auth.module.JndiLoginModule" is disabled
          Fix CVE-2023-25194


author: yangfeiyu<yangfeiyu2@huawei.com> - 1.11.1-5
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:restart
  - DESC:directly copy kata binary files instead of building them


author: yangfeiyu<yangfeiyu2@huawei.com> - 1.11.1-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert the kata-containers.spec to still build kata-containers components into one package


author: jiangpengfei<jiangpengfei9@huawei.com> - 1.11.1-7
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:update
  - DESC:update kata-containers source forms of organization to move all kata-containers related source repo into one repo kata-containers


author: liuhaipeng <liuhaipeng@xfusion.com> - v1.11.1-13.u2
changelog:
  - Type:bugfix
  - CVE:
  - DESC:fix the problem that sandbox stratovirt with network devices fails to start


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 2.0.20-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix issue about iomem file that contains too many contens.As a result,the kdump service failed


author: snoweay <snoweay@163.com> - 2.0.20-15
changelog:
  - Add support for quick kexec
    kexec: Add quick kexec support
    arm64: Quick kexec implementation for arm64


author: yuxiangyang <yuxiangyang4@xfusion.com> - 1:1.0.0-40.u3
changelog:
  - Type:bugfix
  - CVE:
  - DESC: lru_iter_begin print too many log to console, raise softlockup. Now change system default loglevel when enter lru_iter_begin, and restore loglevel when exit.


author: yuxiangyang <yuxiangyang4@xfusion.com> - 1:1.0.0-40.u5
changelog:
  - Type:bugfix
  - CVE:
  - DESC: move change_console_loglevel() and restore_console_loglevel() to lru_iter_begin()


author: wutao<wutao1@xfusion.com> - 0.8.4-12.u1
changelog:
  - Type:bugfix 
  - CVE:
  - DESC:add-dfx-log-for-orphan_path-free_multipath
         add-dfx-log
         bugfix-multipathd-fix-check_path-could-not-resume-path-stat
         clear-path-in-mpp-pg-in-clear_ref_from_mpp       
         fix-memory-leak-in-check_path
         libmultipath-fix-daemon-memory-leak-in-disassemble_map
         libmultipath-fix-multipathd-coredump-in-disassemble_
         multipathd-fix-mpp-hwe-use-after-free-in-ev_remove_p
         multipathd-fix-no-checking-persistent-reservation-re
         tests-remove-hwtable-test


author: sunguoshuai<sunguoshuai@xfusion.com> - 0.8.4-12.u2
changelog:
  - Type:bugfix
  - CVE:NA
  - DESC:don't create local nvme multipath device when enable remove_local_path


author: mengwenhua <mengwenhua@xfusion.com> - 0.8.4-18.u6
changelog:
  - Type:CVE
  - CVE:CVE-2022-41974
  - DESC:fix CVE-2022-41974 cause mpathpersist and multipathd execute error


author: Xinpeng Liu<liuxp11@chinatelecom.cn> -1:0.9.1-14
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:modify the code stype in make_hotpatch and fix compile bug


author: Zhipeng Xie<xiezhipeng1@huawei.com> -1:0.9.1-16
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:create-diff-object: error on detect new/changed ALTINSTR_ENTRY_CB


author: Zhipeng Xie<xiezhipeng1@huawei.com> -1:0.9.1-18
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:kpatch: update sympos for duplicate symbols in vmlinux
         create-diff-object: fix segment fault when sec2->rela is NULL


author: yaoguangzhong<yaoguangzhong@xfusion.com> - 1:0.9.1-20.u3
changelog:
  - Type:bugfix
  - CVE:
  - DESC:revert patch:create-diff-object:error on detect new/changed ALTINSTR_ENTRY_CB


author: maxin <maxin@xfusion.com> - 1:0.9.1-23.u6
changelog:
  - Type:bugfix
  - CVE:
  - DESC:ignore sssnic module when building hotpatch to fix sssnic wrongly dependency of sssnic


author: zhangliangpengkun <zhangliangpengkun@xfusion.com> - 1.18.2-14.u5
changelog:
  - Type:CVE
  - CVE:CVE-2024-37370,CVE-2024-37371
  - DESC:backport patches to fix bugs and CVE-2024-37370 CVE-2024-37371
    Change krb5_get_credentials() endtime behavior
    Fix memory leak in OTP kdcpreauth module


author: mengwenhua <mengwenhua@xfusion.com> - 1:2020.0.0-7.u4
changelog:
  - Type:bugfix
  - CVE:
  - DESC:backport patches from upstream
         Fix handling of skipped directories
         Fix hist_nearend()
         Fix interactive restricted shell behavior
         `functions` with not loaded autoloaded functions


author: wangzeping<wangzeping@xfusion.com> - 2.0.8-6.u7
changelog:
  - Type:bugfix
  - CVE: 
  - DESC:remove unused daemon config args
             handle some warnings
             add required package lxc lower and upper version


author: mengwenhua <mengwenhua@xfusion.com> - 2.0.8-10.u13
changelog:
  - Type:CVE
  - CVE:CVE-2021-33634
  - DESC:fix CVE-2021-33634 & Fix potential log error, empty pointer reference and overflow


author: chengzeruizhi <chengzeruizhi@huawei.com> - 2.0.6-5
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC: add new fields in config v2 and inspect to support modifications on iSulad


author: fuanan <fuanan3@huawei.com> - 551-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:[add] backport patches from upstream
         Minor memory leak.
         Remove unnecessary and incorrectly used variable same_pos_bell.
         Fix erroneous EOF calculation when F command is interrupted.
         Create only one ifile when a file is opened under different names.
         Remove extraneous frees, associated with removed call to lrealpath.
         Fix crash when call set_ifilename with a pointer to the name that is
         Remove unnecessary call to pshift in pappend.
         Reset horizontal shift when opening a new file.
         Protect from buffer overrun.
         Make histpattern return negative value to indicate error.
         Lesskey: don't translate ctrl-K in an EXTRA string.
         Ignore SIGTSTP in secure mode.
         Fix "Tag not found" error while looking for a tag's location
         Fix minor memory leak with input preprocessor.


author: mengwenhua <mengwenhua@xfusion.com> - 1.6.9-8.u3
changelog:
  - Type:CVE
  - CVE:CVE-2023-43785,CVE-2023-43786,CVE-2023-43787
  - DESC:fix CVE-2023-43785,CVE-2023-43786,CVE-2023-43787


author: liuhaipeng <liuhaipeng@xfusion.com> - 3.5.13-2.u1
changelog:
  - Type:CVE
  - CVE:CVE-2022-44617,CVE-2022-46285,CVE-2022-4883
  - DESC:fix CVE-2022-44617,CVE-2022-46285,CVE-2022-4883


author: mengwenhua <mengwenhua@xfusion.com> - 3.5.13-3.u2
changelog:
  - Type:CVE
  - CVE:CVE-2023-43786,CVE-2023-43787,CVE-2023-43788,CVE-2023-43789
  - DESC:fix CVE-2023-43786,CVE-2023-43787,CVE-2023-43788,CVE-2023-43789


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 2.35.2-4
changelog:
  - Fix memleak in fdisk_script_read_file
    Fix heap-buffer-overflow in fdisk_partname
    Fix integer overflow in partno_from_devname


author: mengwenhua <mengwenhua@xfusion.com> - 2.35.2-14.u6
changelog:
  - Type:bugfix
  - CVE:
  - DESC:sync community patches
         chfn: flush stdout before reading stdin and fix uninitialized
         chfn: Make readline prompt for each field on a separate line
         chsh: fflush stdout before reading from stdin
         column: segmentation fault on invalid unicode input passed to
         fix #648 by ignoring EINVAL on-remount of proc
         Fix memory leaks in the chcpu
         libblkid: avoid buffer overflow in ocfs superblock parsing
         libblkid: cleanup indentation
         libblkid: fix jmicron checksum and LE to CPU
         libblkid: nvidia_raid: validate checksum
         libblkid: nvidia_raid: verify superblock size
         libblkid: use checksum for jmicron
         logger: fix --prio-prefix doesn't use --priority default
         logger: fix --size use for stdin
         logger: realloc buffer when header size changed
         login: Restore tty size after calling vhangup()
         lsblk: fix endless loop if device specified more than once
         lsblk: fix -T optional argument
         mcookie: fix infinite-loop when use -f
         su: (bash-completion) offer usernames rather than files
         vipw: flush stdout before getting answer.


author: maxin <maxin@xfusion.com> - 2.35.2-18.u11
changelog:
  - Type:bugfix
  - CVE:
  - DESC:sync some patchs and fixed incorrect macro usage in summary fields of devel and help subpackages


author: Lv Ying<lvying6@huawei.com> - 0.1.1-2
changelog:
  - support detecting and attaching of writable tracepoint program
    https://lore.kernel.org/bpf/20211004094857.30868-3-hotforest@gmail.com


author: hutianxue <hutianxue@xfusion.com> - 2:0.1.1-2.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Ensure functions with always_inline attribute are
         Fix the name of a reused map
         preserve errno across pr_warn/pr_info/pr_debug
         Fix determine_ptr_size() guessing
         Avoid unused function warning on bpf_tail_call_static
         Deal with section with no data gracefully
         Fix crash if SEC("freplace") programs don't have attach_prog_fd set
         Fix null-pointer dereference in find_prog_by_sec_insn()
         Fix overrun in netlink attribute iteration
         Fix the case of running as non-root with capabilities
         Fix use-after-free in btf_dump_name_dups
         Handle size overflow for ringbuf mmap
         Use page size as max_entries when probing ring buffer map
         start syncing include/uapi/linux/fcntl.h UAPI header
         add -Werror -Wl,-z,noexecstack options


author: maxin <maxin@xfusion.com> - 1.27.4-1
changelog:
  - Type:CVE
  - CVE:CVE-2023-0437,CVE-2024-6381,CVE-2024-6383
  - DESC:Update to 1.27.4 for fix CVE-2023-0437,CVE-2024-6381,CVE-2024-6383


author: yixiangzhike <yixiangzhike007@163.com> - 2.32-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: capsh better error handling for integer parsing
          setcap clean up error handling of the ns rootid argument


author: wenbailin<wenbailin@xfusion.com> - 2.32-3.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:If needed search PATH for capsh (==) self-execution
         Guarantee sufficient memory for scratch pathname


author: hutianxue <hutianxue@xfusion.com> - 2.32-7.u4
changelog:
  - Type:bugfix
  - CVE:
  - DESC:VFS_CAP_U32 can not ensure that XATTR_NAME_CAPS is defined, and failed to build


author: changhan<changhan@xfusion.com> - 2.1.12-6.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:fix potential Null pointer dereference in regress_finalize.c and Fix leak in evconnlistener_new_async()


author: zhaoang<zhaoang@xfusion.com> - 0.6.21-24.u1
changelog:
  - Type:CVE
  - CVE:CVE-2019-9278,CVE-2020-0181,CVE-2020-0198,CVE-2020-0093
  - DESC:fix CVE-2019-9278,CVE-2020-0181,CVE-2020-0198,CVE-2020-0093


author: haowenchao <haowenchao@huawei.com> - 1.19.0-6
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0001-iscsi-ls-Fix-iser-url-scheme-parsing.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0002-test-tool-Compare-Write-skip-InvalidDataOutSize-unle.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0003-test-tool-Compare-Write-override-driver-queue_pdu-ca.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0004-test-tool-iSCSICmdSnTooLow-override-driver-queue_pdu.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0005-test-tool-iSCSICmdSnTooHigh-override-driver-queue_pd.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0006-test-tool-iSCSIDataSnInvalid-override-driver-queue_p.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0007-test-tool-BlockEraseReserved-skip-unless-iSCSI.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0008-test-tool-BlockEraseReserved-override-driver-queue_p.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0009-test-tool-CryptoEraseReserved-skip-unless-iSCSI.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0010-test-tool-CryptoEraseReserved-override-driver-queue_.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0011-test-tool-OverwriteReserved-skip-unless-iSCSI.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0012-test-tool-OverwriteReserved-override-driver-queue_pd.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0013-test-tool-remove-unused-iscsi_queue_pdu-symbol-overl.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0014-iser-remove-__packed-from-struct-iser_cm_hdr-declaration.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0015-test-tools-use-extern-init-in-headers.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0016-iscsi-inq-handle-setting-of-debug_level-correctly.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0017-Updata-iscsi-dd.c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0018-iscsi-swp-handle-setting-of-debug_level-correctly.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0019-fix-iscsi-ls-parameter-parse.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0020-Check-return-value-of-scsi_malloc-in-order-to.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0021-Fix-segmentation-fault-problem.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0022-init-fix-memory-leak-in-iscsi_create_context.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0023-iscsi-command-Fix-leak-in-iscsi_send_data_out.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: hutianxue <hutianxue@xfusion.com> - 1.19.0-6.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:solve command parameter parse problem and deference null pointer problem and handle setting of debug_level correctly


author: haowenchao <haowenchao@huawei.com> - 1.19.0-2
changelog:
  - Split rpm package to avoid main rpm package CUnit dependency
    Previous implement place executable files in main package which leading
    to dependency of CUnit. This change add a package utils and move
    these executable files to utils package to avoid main package's CUnit
    dependency, making main package weak depend on libiscsi-utils


author: haowenchao <haowenchao@huawei.com> - 1.19.0-6
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0001-iscsi-ls-Fix-iser-url-scheme-parsing.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0002-test-tool-Compare-Write-skip-InvalidDataOutSize-unle.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0003-test-tool-Compare-Write-override-driver-queue_pdu-ca.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0004-test-tool-iSCSICmdSnTooLow-override-driver-queue_pdu.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0005-test-tool-iSCSICmdSnTooHigh-override-driver-queue_pd.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0006-test-tool-iSCSIDataSnInvalid-override-driver-queue_p.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0007-test-tool-BlockEraseReserved-skip-unless-iSCSI.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0008-test-tool-BlockEraseReserved-override-driver-queue_p.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0009-test-tool-CryptoEraseReserved-skip-unless-iSCSI.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0010-test-tool-CryptoEraseReserved-override-driver-queue_.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0011-test-tool-OverwriteReserved-skip-unless-iSCSI.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0012-test-tool-OverwriteReserved-override-driver-queue_pd.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0013-test-tool-remove-unused-iscsi_queue_pdu-symbol-overl.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0014-iser-remove-__packed-from-struct-iser_cm_hdr-declaration.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0015-test-tools-use-extern-init-in-headers.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0016-iscsi-inq-handle-setting-of-debug_level-correctly.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0017-Updata-iscsi-dd.c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0018-iscsi-swp-handle-setting-of-debug_level-correctly.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0019-fix-iscsi-ls-parameter-parse.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0020-Check-return-value-of-scsi_malloc-in-order-to.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0021-Fix-segmentation-fault-problem.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: liuhaipeng <liuhaipeng@xfusion.com> - 1.2.0-6.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Use macro to control whether to enable make check
         Enable make check


author: yuxiating<yuxiating@xfusion.com> - 3.7.0-3.u1
changelog:
  - Type:bugfix
  - CVE:NA
  - DESC:Remove restrictions on which characters/cells can be used in translation rules


author: mengwenhua <mengwenhua@xfusion.com> - 3.7.0-5.u3
changelog:
  - Type:CVE
  - CVE:CVE-2022-26981,CVE-2022-31783,CVE-2023-26767,CVE-2023-26768
  - DESC:fix CVE-2022-26981,CVE-2022-31783,CVE-2023-26767,CVE-2023-26768


author: yangbo <yangbo1@xfusion.com> - 8.16.1-8.u3
changelog:
  - Type:bugfix
  - CVE:
  - DESC:fix newaliases command error and postfix service start execption after sendmail install


author: chenweihua <chenweihua@xfusion.com> - 1.8.22-2.u2
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Modify the prompt for cloning MAC addresses and the prompt for waking up LAN passwords


author: zhangliangpengkun <zhangliangpengkun@xfusion.com> - 1.0.5-2.u1
changelog:
  - Type:CVE
  - CVE:CVE-2023-39976
  - DESC:fix CVE-2023-39976 and Pre-patch Allow customisable log line length


author: os-sync <os-sync@xfusion.com> - 2.1.2-11.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Replaced declaration of help subpackage with the 'package_help' macro.
         remove rpath for the commond


author: mengwenhua <mengwenhua@xfusion.com> - 0.11.4-5.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:tests: skip tests on Win32 that rely on kafka-topics.sh & Missing return on error causes use-after-free in SASL code


author: leizhe <leizhe@xfusion.com> - 3.6.4-2.u1
changelog:
  - Type:CVE
  - CVE:CVE-2022-26592,CVE-2022-43358,CVE-2022-43357
  - DESC:Fix CVE-2022-26592,CVE-2022-43358,CVE-2022-43357


author: hutianxue <hutianxue@xfusion.com> - 2.5.0-5.u2
changelog:
  - Type:bugfix
  - CVE:
  - DESC:backport patches from upstream
  - all: only request the userspace notification fd once
  - system: change our notification fd handling


author: liuhaipeng <liuhaipeng@xfusion.com> - 3.1-9.u3
changelog:
  - Type:CVE
  - CVE:CVE-2021-36084,CVE-2021-36085,CVE-2021-36087
  - DESC:Fix CVE-2021-36084,CVE-2021-36085,CVE-2021-36087


author: maoyanping <maoyanping@xfusion.com> - 3.1-10.u5
changelog:
  - Type:bugfix
  - CVE:
  - DESC:backport bugfix from upstream and Add null value judgment to prevent segment errors


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 3.1-3
changelog:
  - fix heap-use-after-free in cil_yy_switch_to_buffer
  - fix heap-use-after-free in __class_reset_perm_values()
  - fix heap-buffer-overflow in cil_print_recursive_blockinherit


author: sunguoshuai<sunguoshuai@xfusion.com> - 0.7.14-5.u1
changelog:
  - Type:CVE
  - CVE:CVE-2021-3200,CVE-2021-44568,CVE-2021-44569,CVE-2021-44571,CVE-2021-44573,CVE-2021-44574,CVE-2021-44575,CVE-2021-44576,CVE-2021-44577
  - DESC:rename from CVE-2021-3200.patch to backport-testcase-read.patch. Fix CVE-2021-3200,CVE-2021-44568,CVE-2021-44569,CVE-2021-44571,CVE-2021-44573,CVE-2021-44574,CVE-2021-44575,CVE-2021-44576,CVE-2021-44577


author: maxin <maxin@xfusion.com> - 0.7.14-8.u3
changelog:
  - Type:bugfix
  - CVE:
  - DESC:libsolv:Handle installed packages in three passes and Fix a couple small static analysis findings for uninitialized structs
         Fix a couple small static analysis findings for uninitialized
         Handle installed packages in three passes
         Move special updaters handling into its own function
         resolve_installed: remove dead code


author: maxin <maxin@xfusion.com> - 2.71.0-4.u2
changelog:
  - Type:CVE
  - CVE:CVE-2024-52530,CVE-2024-52531,CVE-2024-52532
  - DESC:Fix CVE-2024-52530,CVE-2024-52531,CVE-2024-52532


author: hutianxue <hutianxue@xfusion.com> - 0.2.8-10.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:state what lib is printing the error & Fix crash with malformed document


author: hupeixi<hupeixi@xfusion.com> - 0.9.4-6.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:backport upstream patches:
         add errno while reset with strtoul call
         fix error returned in ssh_userauth_try_publicke
         client do not close the socket if it was set via opt
         fix openForward to not set sourcehost to NULL
         fix the length calculation of packet in sftp_write


author: mengwenhua <mengwenhua@xfusion.com> - 0.9.4-9.u4
changelog:
  - Type:CVE
  - CVE:CVE-2023-6004,CVE-2023-48795,CVE-2023-6918
  - DESC:fix CVE-2023-6004,CVE-2023-48795,CVE-2023-6918


author: likang<likang@xfusion.com> - 1.2.20-19.u1
changelog:
  - Type:CVE
  - CVE:CVE-2021-33643,CVE-2021-33644,CVE-2021-33645,CVE-2021-33646
  - DESC:Fix CVE-2021-33643,CVE-2021-33644,CVE-2021-33645,CVE-2021-33646


author: zhouyitao<zhouyitao@xfusion.com> - 4.1.0-3.u3
changelog:
  - Type:CVE
  - CVE:CVE-2022-0907,CVE-2022-0865,CVE-2022-0909,CVE-2022-0924
  - DESC:fix CVE-2022-0907 CVE-2022-0865 CVE-2022-0909 CVE-2022-0924


author: likang<likang@xfusion.com> - 4.3.0-3.u5
changelog:
  - Type:CVE
  - CVE:CVE-2022-1622,CVE-2022-1623,CVE-2022-1354
  - DESC:fix CVE-2022-1622,CVE-2022-1623,CVE-2022-1354


author: wangzeping<wangzeping@xfusion.com> - 4.3.0-3.u6
changelog:
  - Type:CVE
  - CVE:CVE-2022-2867,CVE-2022-2868,CVE-2022-2869
  - DESC:fix CVE-2022-2867,CVE-2022-2868,CVE-2022-2869


author: wangzeping<wangzeping@xfusion.com> - 4.3.0-4.u7
changelog:
  - Type:CVE
  - CVE:CVE-2022-2953,CVE-2022-2519,CVE-2022-2520,CVE-2022-2521
  - DESC:fix CVE-2022-2953,CVE-2022-2519,CVE-2022-2520,CVE-2022-2521


author: wangzeping<wangzeping@xfusion.com> - 4.3.0-5.u8
changelog:
  - Type:CVE
  - CVE:CVE-2022-2056,CVE-2022-2057,CVE-2022-2058
  - DESC:fix CVE-2022-2056,CVE-2022-2057,CVE-2022-2058


author: wangzeping<wangzeping@xfusion.com> - 4.3.0-6.u9
changelog:
  - Type:CVE
  - CVE: CVE-2022-3570,CVE-2022-3597,CVE-2022-3598,CVE-2022-3599,CVE-2022-3626,CVE-2022-3627
  - DESC:fix CVE-2022-3570,CVE-2022-3597,CVE-2022-3598,CVE-2022-3599,CVE-2022-3626,CVE-2022-3627


author: mengwenhua <mengwenhua@xfusion.com> - 4.3.0-10.u12
changelog:
  - Type:CVE
  - CVE:CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804,CVE-2022-48281
  - DESC:fix CVE-2023-0795~0804 & modified backport-CVE-2022-48281.patch


author: haolei <haolei@xfusion.com> - 4.3.0-11.u14
changelog:
  - Type:CVE
  - CVE:CVE-2023-1916
  - DESC:fix CVE-2023-1916
         Fix heap-buffer-overflow in function extractImageSection.


author: hutianxue <hutianxue@xfusion.com> - 4.3.0-14.u15
changelog:
  - Type:CVE
  - CVE:CVE-2023-26965,CVE-2023-3316,CVE-2023-25433,CVE-2023-26966,CVE-2023-2908
  - DESC:fix CVE-2023-26965,CVE-2023-3316,CVE-2023-25433,CVE-2023-26966,CVE-2023-2908


author: sunguoshuai<sunguoshuai@xfusion.com> - 4.1.0-3.u1
changelog:
  - Type:CVE
  - CVE:CVE-2022-22844 CVE-2022-0561 CVE-2022-0562
  - DESC:fix CVE-2022-22844 CVE-2022-0561 CVE-2022-0562


author: likang<likang@xfusion.com> - 1.1.0-1.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Modify libtommath's spec file to depend on libtiff instead of libtiff-tools


author: zhaoang <zhaoang@xfusion.com> - 2.9.0-5.u2
changelog:
  - Type:bugfix
  - CVE:
  - DESC:rectify errors in the spec file
         correct License
         fix coredump with stop udisks2


author: hutianxue <hutianxue@xfusion.com> - 2:1.3.1-6.u2
changelog:
  - Type:bugfix
  - CVE:
  - DESC:backport upstream patch to fix failed run-ptrace-mapper testcase & fix some test fail


author: Huawei Technologies Co., Ltd <alex.chen@huawei.com>
changelog:
  - util: Move virIsDevMapperDevice() to virdevmapper.c
  - virdevmapper: Don't use libdevmapper to obtain dependencies


author: Chen Qun <kuhn.chenqun@huawei.com>
changelog:
  - libvirt: Add 'retry' support for error policy
  - qemu: Support 'retry' BLOCK_IO_ERROR event.
  - libvirt/conf: Set default values of retry fileds


author: Euler Robot <euler.robot@huawei.com>
changelog:
  - storage_driver: Unlock object on ACL fail in storagePoolLookupByTargetPath
  - security: fix SELinux label generation logic


author: Euler Robot <euler.robot@huawei.com>
changelog:
  - virDevMapperGetTargets: Don't ignore EBADF
  - virdevmapper: Don't cache device-mapper major
  - virdevmapper: Handle kernel without device-mapper support


author: hutianxue <hutianxue@xfusion.com> - 6.2.0-16.u2
changelog:
  - Type:CVE
  - CVE:CVE-2022-0897
  - DESC:build without dtrace & fix crash when counting number of network filters (CVE-2022-0897)


author: wangzeping<wangzeping@xfusion.com> - 6.2.0-20.u3
changelog:
  - Type:CVE
  - CVE:CVE-2021-3975
  - DESC:Add missing lock in qemuProcessHandleMonitorEOF (CVE-2021-3975)


author: zhangliangpengkun <zhangliangpengkun@xfusion.com> - 6.2.0-21.u5
changelog:
  - Type:CVE
  - CVE:CVE-2024-1441,CVE-2024-2494,CVE-2024-2496
  - DESC:fix CVE-2024-1441,CVE-2024-2494,CVE-2024-2496


author: wenbailin<wenbailin@xfusion.com> - 2.9.10-24.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:use upstream patch refix heap-use-after-free in xmlAddNextSibling and xmlAddChild


author: sunguoshuai<sunguoshuai@xfusion.com> - 2.9.10-24.u2
changelog:
  - Type:CVE
  - CVE:CVE-2022-23308
  - DESC:fix CVE-2022-23308
         fix valgrind errors in xmlParseBalancedChunkMemoryRecover


author: liuhaipeng <liuhaipeng@xfusion.com> - 1.4.56-2.u1
changelog:
  - Type:CVE
  - CVE:CVE-2022-37797
  - DESC:Update to 1.4.56 and fix CVE-2022-37797 and Fix excuting systemctl start lighttpd.service error


author: hutianxue <hutianxue@xfusion.com> - 20211027-1
changelog:
  - Type:CVE
  - CVE:CVE-2020-12321
  - DESC:Upgrade linux-firmware version to 20211027, and fix CVE-2020-12321 btw.


author: maxin <maxin@xfusion.com> - 20241017-1
changelog:
  - Type:CVE
  - CVE:CVE-2023-31315,CVE-2023-31356,CVE-2023-20584
  - DESC:Update to version 20241017 for fix CVE-2023-31315,CVE-2023-31356,CVE-2023-20584


author: yangbo <yangbo1@xfusion.com> - 2.17.0-4.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Add Obsoletes log4j-nosql for fix upgrade failure
         rebuild for upgrade


author: mengwenhua <mengwenhua@xfusion.com> - 1.2.8-3.u1
changelog:
  - Type:CVE
  - CVE:CVE-2023-6378,CVE-2023-6481
  - DESC:Fix CVE-2023-6378,CVE-2023-6481 and License compliance rectification


author: wutao <wutao1@xfusion.com> - 3.16.0-3.u1
changelog:
  - Type:bugfix
  - CVE:NA
  - DESC:fix switch_user_permanently: skip switchback check if switched to root


author: wangzeping<wangzeping@xfusion.com> - 9-5.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:delete -Sgit from 
  %setup       -q




  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0001-Relax-content-tests-in-test-suite.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0002-Force-creation-of-LUKS1-containers-in-test-suite.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0003-Define-log-callback-function-to-use-with-libcryptset.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: liuhouqi<liuhouqi@xfusion.com> - 2.1.2-6.u5
changelog:
  - Type:bugfix
  - CVE:
  - DESC:modify EISCONN path condition 
         add in_send and send_flag value for gazelle


author: liuhouqi<liuhouqi@xfusion.com> - 2.1.2-12.u7
changelog:
  - Type:bugfix
  - CVE:
  - DESC:alloc socket fail clean sock;
         fix EISCONN conditon err
         remove same customized modification;
         fix multithread duplicate port num
         support select appropriate port num to rss same as nic;
         refactor add event
         limit send pkts num max 10;
         fix miss data due to free pbuf
         close debug;


author: liuhaipeng <liuhaipeng@xfusion.com> - 2.1.2-17.u10
changelog:
  - Type:bugfix
  - CVE:
  - DESC:  add huge snd buf
           add tso define
           enable ARP QUEUE to avoid packet dropped


author: liuhaipeng <liuhaipeng@xfusion.com> - 2.1.2-23.u12
changelog:
  - Type:bugfix
  - CVE:
  - DESC:  fix dataack is always lower than 256
           add dataack when recv too many acks with data
           add variable in struct sock
           skip unnecessary tcp_route
           expand rcv wnd size and prefetch


author: wangzeping<wangzeping@xfusion.com> - 2.1.2-27.u13
changelog:
  - Type:bugfix
  - CVE:  
  - DESC: do not update cwnd when send dataack
  	reduce struct pbuf size
  	move pcb_if to ip_pcb to let listen pcb use it
  	expand recv mbox size


author: zhaoang <zhaoang@xfusion.com> - 2.1.2-31.u16
changelog:
  - Type:bugfix
  - CVE:
  - DESC:lwip_fnctl only suport F_SETFL,F_GETFL, other opt return 0 for compitable


author: hutianxue <hutianxue@xfusion.com> - 2.1.2-40.u17
changelog:
  - Type:bugfix
  - CVE:
  - DESC:- reduce cpu usage when send
         - fix tso small packet drop in kernel server
         - fix last_unsent/last_unacked error
         - optimize: avoid too many empty acks in tcp_input


author: hutianxue <hutianxue@xfusion.com> - 2.1.2-40.u18
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Replace gettid() with syscall(SYS_gettid)
         add fs secure compilation option
         fix pbuf leak in udp connection
         adapt to dpdk-19.11 and dpdk-21.11


author: mengwenhua <mengwenhua@xfusion.com> - 2.1.2-40.u19
changelog:
  - Type:bugfix
  - CVE:
  - DESC:pbuf: fix pbuf->tot_len incorrect after pbuf_split_64k is called  & fix recvmsg return EINVAL & posix_api support select & add lwip log: tcp_rst & tcp_abandon & tcp_abort


author: mengwenhua <mengwenhua@xfusion.com> - 2.1.2-40.u20
changelog:
  - Type:bugfix
  - CVE:
  - DESC:backport some patches
         fix the coredump issue when UDP traffic is sent
         tcp_send_fin: add the fin to the last unsent segment
         tcp_in : fix ooseq update error


author: hejunhui <hejunhui@xfusion.com> - 4.0.3-2021112501.u4
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Refactor the way to convert selinux label to shared mode & do not free the pointer returned by dirname


author: qiushigang <qiushigang@xfusion.com> - 4.0.3-2021112501.u5
changelog:
  - Type:bugfix
  - CVE:NA
  - DESC:add x permission when create directory; do not operate playload and attach cgroup if no controller found;


author: mengwenhua <mengwenhua@xfusion.com> - 4.0.3-2022102408.u20
changelog:
  - Type:bugfix
  - CVE:
  - DESC:fix cve CVE-2022-47952 log leaks root information
         add sscanf adapation code for musl
         rollback strprint code modified


author: maxin <maxin@xfusion.com> - 1.4.18-17.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:backport patch from upstream and fix test_localeconv fail in aarch64 machine


author: zhouyitao<zhouyitao@xfusion.com> - 3:10.3.34-1.u1
changelog:
  - Type:CVE
  - CVE:CVE-2021-46659,CVE-2021-46664,CVE-2021-46665,CVE-2021-46663,CVE-2021-46662,CVE-2021-46666,CVE-2021-46667,CVE-2021-46661,CVE-2021-46669,CVE-2021-46657
  - DESC:Bump version to latest 10.3.34 version
         For resolving the CVEs, which includes:
         CVE-2021-46659
         CVE-2021-46664
         CVE-2021-46665
         CVE-2021-46663
         CVE-2021-46662
         CVE-2021-46666
         CVE-2021-46667
         CVE-2021-46661
         CVE-2021-46669
         CVE-2021-46657
         Above all CVEs needs to bump to the latest version for resolve.
         Refresh all patches relies on the latest tar package.


author: wangchao<wangchao3@xfusion.com> - 1.u1-1.u2
changelog:
  - Type:CVE
  - CVE:CVE-2022-27379 CVE-2022-27386 CVE-2022-27447 CVE-2022-27448 CVE-2022-27449 CVE-2022-27445 CVE-2022-27456 CVE-2022-27458 CVE-2022-27452 CVE-2022-27376 CVE-2022-27378 CVE-2022-27377 CVE-2022-27381 CVE-2022-27383 CVE-2022-27380 CVE-2022-27384 CVE-2022-27387
  - DESC:update to 10.3.35 vesion, fix some cves


author: mengwenhua <mengwenhua@xfusion.com> - 3:10.3.39-1.u2
changelog:
  - Type:CVE
  - CVE:CVE-2023-5157,CVE-2022-47015,CVE-2022-38791,CVE-2022-0778,CVE-2022-32087,CVE-2022-32091,CVE-2022-32085,CVE-2022-32084,CVE-2022-32088,CVE-2022-32083,CVE-2020-28912,CVE-2021-2144
  - DESC:Bump to 10.3.39


author: changhan<changhan@xfusion.com> - 3.1-3.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Avoid NULL dereferences on allocaiton failure and Free constraint in error branch


author: liuhaipeng <liuhaipeng@xfusion.com> - 4.1-rc2.0.13.u3
changelog:
  - Type:bugfix
  - CVE:
  - DESC: Fix NULL dereference in super_by_fd
          mdadm Don't open md device for CREATE and ASSEMBLE
          mdadm block creation with long names
          Monitor use devname as char array instead of pointer
          Fix possible NULL ptr dereferences and memory leaks


author: maoyanping <maoyanping@xfusion.com> - 78.4.0-7.u1
changelog:
  - Type:CVE
  - CVE:CVE-2023-23599,CVE-2023-23601,CVE-2023-23602,CVE-2021-29946,CVE-2022-34481,CVE-2023-29532,CVE-2022-22740
  - DESC:fix CVE-2023-23599,CVE-2023-23601,CVE-2023-23602,CVE-2021-29946,CVE-2022-34481,CVE-2023-29532,CVE-2022-22740


author: yuxiangyang<yuxiangyang4@xfusion.com> - 8.0.28-1.u3
changelog:
  - Type:bugfix
  - CVE:NA
  - DESC:FusionOS have two versions of mysql, add mysql version to mysql-server.rpm requires, otherwise the upgrade will conflict.


author: guowentao <guowentao@xfusion.com> - 8.0.37-1.u2
changelog:
  - Type:CVE
  - CVE:CVE-2022-21427,CVE-2022-21451,CVE-2022-21454,CVE-2022-21460,CVE-2023-21911,CVE-2023-21912,CVE-2023-21913,CVE-2023-21917,CVE-2023-21919,CVE-2023-21920,CVE-2023-21929,CVE-2023-21933,CVE-2023-21935,CVE-2023-21940,CVE-2023-21945,CVE-2023-21946,CVE-2023-21947,CVE-2023-21953,CVE-2023-21955,CVE-2023-21962,CVE-2023-21963,CVE-2023-21966,CVE-2023-21972,CVE-2023-21976,CVE-2023-21977,CVE-2023-21980,CVE-2023-21982,CVE-2022-21412,CVE-2022-21414,CVE-2022-21417,CVE-2022-21418,CVE-2022-21423,CVE-2022-21436,CVE-2022-21437,CVE-2022-21438,CVE-2022-21440,CVE-2022-21444,CVE-2022-21452,CVE-2022-21455,CVE-2022-21457,CVE-2022-21459,CVE-2022-21462,CVE-2022-21478,CVE-2022-21479,CVE-2022-21509,CVE-2022-21515,CVE-2022-21517,CVE-2022-21522,CVE-2022-21525,CVE-2022-21526,CVE-2022-21527,CVE-2022-21528,CVE-2022-21529,CVE-2022-21530,CVE-2022-21531,CVE-2022-21534,CVE-2022-21537,CVE-2022-21538,CVE-2022-21539,CVE-2022-21547,CVE-2022-21553,CVE-2022-21556,CVE-2022-21569,CVE-2022-21592,CVE-2022-21594,CVE-2022-21599,CVE-2022-21604,CVE-2022-21605,CVE-2022-21607,CVE-2022-21608,CVE-2022-21611,CVE-2022-21617,CVE-2022-21625,CVE-2022-21632,CVE-2022-21633,CVE-2022-21635,CVE-2022-21637,CVE-2022-21638,CVE-2022-21640,CVE-2022-21641,CVE-2022-39400,CVE-2022-39408,CVE-2022-39410,CVE-2023-21836,CVE-2023-21863,CVE-2023-21864,CVE-2023-21865,CVE-2023-21866,CVE-2023-21867,CVE-2023-21868,CVE-2023-21869,CVE-2023-21870,CVE-2023-21871,CVE-2023-21872,CVE-2023-21873,CVE-2023-21874,CVE-2023-21875,CVE-2023-21876,CVE-2023-21877,CVE-2023-21878,CVE-2023-21879,CVE-2023-21880,CVE-2023-21881,CVE-2023-21882,CVE-2023-21883,CVE-2023-21887,CVE-2023-22005,CVE-2023-22007,CVE-2023-22008,CVE-2023-22033,CVE-2023-22038,CVE-2023-22046,CVE-2023-22048,CVE-2023-22053,CVE-2023-22054,CVE-2023-22056,CVE-2023-22057,CVE-2023-22058,CVE-2022-1292,CVE-2022-21413,CVE-2022-21415,CVE-2022-21425,CVE-2022-21435,CVE-2022-21485,CVE-2022-21486,CVE-2022-27778,CVE-2022-32221,CVE-2023-22015,CVE-2023-22026,CVE-2023-22028,CVE-2023-22032,CVE-2023-22059,CVE-2023-22064,CVE-2023-22065,CVE-2023-22066,CVE-2023-22068,CVE-2023-22070,CVE-2023-22078,CVE-2023-22079,CVE-2023-22084,CVE-2023-22092,CVE-2023-22097,CVE-2023-22103,CVE-2023-22104,CVE-2023-22110,CVE-2023-22111,CVE-2023-22112,CVE-2023-22113,CVE-2023-22114,CVE-2023-22115,CVE-2024-20960,CVE-2024-20961,CVE-2024-20962,CVE-2024-20963,CVE-2024-20964,CVE-2024-20965,CVE-2024-20966,CVE-2024-20967,CVE-2024-20968,CVE-2024-20969,CVE-2024-20970,CVE-2024-20971,CVE-2024-20972,CVE-2024-20973,CVE-2024-20974,CVE-2024-20975,CVE-2024-20976,CVE-2024-20977,CVE-2024-20978,CVE-2024-20981,CVE-2024-20982,CVE-2024-20983,CVE-2024-20984,CVE-2024-20985,CVE-2024-20993,CVE-2024-20994,CVE-2024-20998,CVE-2024-21000,CVE-2024-21008,CVE-2024-21009,CVE-2024-21013,CVE-2024-21015,CVE-2024-21047,CVE-2024-21049,CVE-2024-21050,CVE-2024-21051,CVE-2024-21052,CVE-2024-21053,CVE-2024-21054,CVE-2024-21055,CVE-2024-21056,CVE-2024-21057,CVE-2024-21060,CVE-2024-21061,CVE-2024-21062,CVE-2024-21069,CVE-2024-21087,CVE-2024-21096,CVE-2024-21102
  - DESC:Upgrade to 8.0.37 from FusionOS 23


author: maxin <maxin@xfusion.com> - 8.0.40-1.u3
changelog:
  - Type:CVE
  - CVE:CVE-2024-21125,CVE-2024-21142,CVE-2024-21179,CVE-2024-21171,CVE-2024-21130,CVE-2024-21162,CVE-2024-21177,CVE-2024-20996,CVE-2024-21134,CVE-2024-21165,CVE-2024-21173,CVE-2024-21129,CVE-2024-21127,CVE-2024-21163,CVE-2024-21218,CVE-2024-21196,CVE-2024-21207,CVE-2024-21198,CVE-2024-21203,CVE-2024-21213,CVE-2024-21239,CVE-2024-21199,CVE-2024-21197,CVE-2024-21247,CVE-2024-21193,CVE-2024-21212,CVE-2024-21241,CVE-2024-21230,CVE-2024-21236,CVE-2024-21194,CVE-2024-21238,CVE-2024-21237,CVE-2024-21201,CVE-2024-21231,CVE-2024-21219,CVE-2024-21185
  - DESC:Update to 8.0.40 for fix CVEs


author: os-sync <os-sync@xfusion.com> - 8.0.41-1.u4
changelog:
  - Type:CVE
  - CVE:CVE-2025-21490,CVE-2025-21491,CVE-2025-21495,CVE-2025-21497,CVE-2025-21500,CVE-2025-21501,CVE-2025-21503,CVE-2025-21505,CVE-2025-21518,CVE-2025-21519,CVE-2025-21520,CVE-2025-21522,CVE-2025-21523,CVE-2025-21529,CVE-2025-21531,CVE-2025-21540,CVE-2025-21543,CVE-2025-21546,CVE-2025-21555,CVE-2025-21559
  - DESC:Update to 8.0.41 for fix CVEs


author: maxin <maxin@xfusion.com> - 2.15.05-1.u4
changelog:
  - Type:CVE
  - CVE:CVE-2020-21685
  - DESC:Update to 2.15.05 for fix CVE-2020-21685,CVE-2020-21686 and CVE-2020-21687


author: wangweichao<wangweichao@xfusion.com> - 3.33.90-3.u3
changelog:
  - Type:requirement
  - CVE:
  - DESC:display tooltip content
         translate some information to chinese
         Add right-click sort function
         Right-click to add new text document function


author: gaihuiying <gaihuiying1@huawei.com> - 5.9-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix undefined behavior in asn_build_int()
         libsnmp: Rework parse_imports()
         libsnmp: Increase MAX_IMPORTS
         libsnmp: Allocate the module import list on the heap
         libsnmp: Fix a memory leak in a MIB parser error path
         libsnmp: Fix the getoid() error path


author: wangzeping<wangzeping@xfusion.com> - 1:5.9-6.u2
changelog:
  - Type:CVE
  - CVE:CVE-2022-24805 CVE-2022-24806 CVE-2022-24807 CVE-2022-24808 CVE-2022-24809 CVE-2022-24810
  - DESC:fix CVE-2022-24805 CVE-2022-24806 CVE-2022-24807
             CVE-2022-24808 CVE-2022-24809 CVE-2022-24810


author: wangzeping<wangzeping@xfusion.com> - 1:5.9-8.u3
changelog:
  - Type:CVE
  - CVE:CVE-2022-44792,CVE-2022-44793
  - DESC: IF-MIB,IP-FORWARD-MIB: Improve robustness
          IF-MIB:pass the network interface index to net
          IF-MIB:fix a memory leak
          IF-MIB:fix a recently introduced use after free
          IF-MIB:add a trailing newline to an error message
  	fix CVE-2022-44792 CVE-2022-44793


author: maxin <maxin@xfusion.com> - 1:5.9-9.u4
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Sync upstream patches to fix Buffer overflow
         libsnmp: Fix a buffer overflow in setup_engineID()
         snmplib: Handle two oldEngineID lines in snmpd.conf. Fixes


author: qiushigang<qiushigang@xfusion.com> - 4.7.3-11.u2
changelog:
  - Type:bugfix
  - CVE:NA
  - DESC:according to github and RELEASE_NOTES.md, update the license from the home-brewed NetCDF license to the standard 3-Clause BSD License.


author: wangkai <wangkai385@huawei.com> - 4.1.13-13
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-44228 is fixed,the version needs to be rebuild.


author: wangkai <wangkai385@huawei.com> - 4.1.13-15
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-45105 is fixed,the version needs to be rebuild.


author: wangkai <wangkai385@huawei.com> - 4.1.13-16
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-44832 is fixed,the version needs to be rebuild.


author: wenbailin<wenbailin@xfusion.com> - 2.5.1-4.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:In order to be consistent with the old versions, here we set
         use-gss-proxy to true in nfs.conf.


author: zengwefeng<zwfeng@huawei.com> - 0.9.6-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:enable check while building
         parser_bison memleak symbol redefinition
         segtree memleaks in interval_map_decompose
         json Combining terse with json has no effect
         evaluate Reject quoted strings containing only wildcard
         Solves Bug 1462 nft j list set does not show counters
         json Fix memleak in set_dtype_json
         mnl reply netlink error message might be larger than MNL_SOCKET_BUFFER_SIZE


author: gaihuiying <gaihuiying1@huawei.com> - 0.9.6-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:evaluate disallow ct original s d ddr from maps
         evaluate disallow ct original s d ddr from concatena


author: zhaoang <zhaoang@xfusion.com> - 1:0.9.6-5.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:parser_json fix device parsing in netdev family
         src don't parse string as verdict in map


author: yangbo <yangbo1@xfusion.com> - 1:12.22.11-3.u2
changelog:
  - Type:CVE
  - CVE:CVE-2023-0286,CVE-2023-0215,CVE-2022-4304,CVE-2022-4450
  - DESC:Fix CVE-2023-0286 CVE-2023-0215 CVE-2022-4304 CVE-2022-4450


author: hutianxue <hutianxue@xfusion.com> - 1:12.22.11-4.u3
changelog:
  - Type:CVE
  - CVE:CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,CVE-2023-32559,CVE-2022-35256
  - DESC:fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,CVE-2023-32559,CVE-2022-35256


author: maxin <maxin@xfusion.com> - 1:12.22.11-8.u4
changelog:
  - Type:CVE
  - CVE:CVE-2023-0464,CVE-2023-0465,CVE-2023-44487,CVE-2023-46809,CVE-2024-22019,CVE-2024-22025,CVE-2024-27982,CVE-2024-27983
  - DESC:Fix CVE-2023-0464,CVE-2023-0465,CVE-2023-44487,CVE-2023-46809,CVE-2024-22019,CVE-2024-22025,CVE-2024-27982,CVE-2024-27983


author: haolei<haolei@xfusion.com> - 3.54.0-9.u3
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Fixed an issue where pointer array was not initialized in fuzz test code


author: yangzhuangzhuang<yangzhuangzhuang@xfusion.com> - 2:2022.5.17-1.u1
changelog:
  - Type:CVE
  - CVE:CVE-2021-46790 CVE-2022-30783 CVE-2022-30785 CVE-2022-30787 CVE-2022-30784 CVE-2022-30786 CVE-2022-30788 CVE-2022-30789
  - DESC:update to 2022.5.17 version, fix some cves


author: wutao<wutao1@xfusion.com> - 4.2.8p14-5.u1
changelog:
  - Type:bugfix
  - CVE:CVE-2020-15025 CVE-2020-13817
  - DESC:fix CVE-2020-15025 and CVE-2020-13817
  - Use-variant-to-control-is-use-random-timestamp
  - Introdule-random_timestamp-config-item
  - Update-auto-genernated-files-caused-by-new-random_ti
  - only-random-decimal-part


author: hutianxue <hutianxue@xfusion.com> - 4.2.8p14-8.u2
changelog:
  - Type:CVE
  - CVE:CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26554,CVE-2023-26555
  - DESC:make sure the buffer has enough room for the input extra characters and fix CVE-2023-26555


author: hutianxue <hutianxue@xfusion.com> - 4.2.8p14-9.u3
changelog:
  - Type:bugfix
  - CVE:
  - DESC:backport some patches from upstream
  - add NULL pointer check when ntpd deletes the last interface


author: sunguoshuai <sunguoshuai@xfusion.com> - 0.6-2
changelog:
  - Type:bugfix
  - CVE:NA
  - DESC:upgrade to 0.6 version to support nvmetcli to display shared disk information


author: haowenchao <haowenchao@huawei.com> - 2.1.1-8
changelog:
  - backport one patch for solving install problem, sync from branch openEuler-20.09
    which commit id is 81fd136


author: Wenchao Hao <haowenchao@huawei.com> - 0.100-7
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0001-Fix-the-issue-of-ignoring-the-return-value.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0002-Fix-compiler-issue-when-not-in-security-mode.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0003-Fix-586-compile-issue-and-remove-Werror.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0004-Do-not-install-isnsd.socket-in-isnsd.service.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0005-libisns-remove-sighold-and-sigrelse.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0006-isnsadm-Fix-unparse-command-line-options-V-and-r.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0007-isnsd-socket-Make-sure-to-create-IPv6-socket-default.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: os-sync <os-sync@xfusion.com> - 2.3.1-15.u6
changelog:
  - Type:CVE
  - CVE:CVE-2024-56826,CVE-2024-56827,CVE-2021-3575
  - DESC:Fix CVE-2024-56826,CVE-2024-56827,CVE-2021-3575


author: hutianxue <hutianxue@xfusion.com> - 2.1.1-20.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Modify the /usr/lib64/openmpi/bin path to /usr/bin
         change Buildrequire from java-devel to java-1.8.0-openjdk-devel


author: zhangliangpengkun <zhangliangpengkun@xfusion.com> - 1.1.1h-2.u5
changelog:
  - Type:CVE
  - CVE:CVE-2023-2650,CVE-2020-1971,CVE-2021-23840,CVE-2021-23841,CVE-2021-3449,CVE-2021-3450,CVE-2021-3711,CVE-2021-3712,CVE-2021-4160,CVE-2022-0778,CVE-2022-1292,CVE-2022-2068,CVE-2022-2097,CVE-2022-4450,CVE-2023-0215,CVE-2023-0465,CVE-2023-0466,CVE-2023-3446,CVE-2023-3817,CVE-2023-5678
  - DESC:fix CVE-2023-2650,CVE-2020-1971,CVE-2021-23840,CVE-2021-23841,CVE-2021-3449,CVE-2021-3450,CVE-2021-3711,CVE-2021-3712,CVE-2021-4160,CVE-2022-0778,CVE-2022-1292,CVE-2022-2068,CVE-2022-2097,CVE-2022-4450,CVE-2023-0215,CVE-2023-0465,CVE-2023-0466,CVE-2023-3446,CVE-2023-3817,CVE-2023-5678


author: changhan<changhan@xfusion.com> - 0.20.0-15.u7
changelog:
  - Type:CVE
  - CVE:CVE-2024-45615,CVE-2024-45616,CVE-2024-45617,CVE-2024-45618,CVE-2024-45619,CVE-2024-45620,CVE-2024-8443
  - DESC:Fix CVE-2024-45615,CVE-2024-45616,CVE-2024-45617,CVE-2024-45618,CVE-2024-45619,CVE-2024-45620,CVE-2024-8443


author: wutao<wutao1@xfusion.com> - 8.2P1-14.u2
changelog:
  - Type:bugfix
  - CVE:NA
  - DESC:skip-hostkey-message-sending
  - dump-space-around-euqal-and-argument-is-literal-string-for-shellcheck-sc2157-sc1068


author: wutao-<wutao1@xfusion.com> - 8.2P1-14.u3
changelog:
  - Type:bugfix
  - CVE:NA
  - DESC:disable insecure encryption algorithms ssh-rsa and 
         ecdsa-sha2-nistp256 on client and server side


author: wangzeping<wangzeping@xfusion.com> - 8.2p1-18.u12
changelog:
  - Type:bugfix
  - CVE:
  - DESC:enable make tests
         fix possible NULL deref when built without FIDO


author: wangyong2 <wangyong2@xfusion.com> - 8.2p1-20.u15
changelog:
  - Type:bugfix
  - CVE:
  - DESC:set crypto related options in sshd_config file to be the same as those in openEuler release


author: mengwenhua <mengwenhua@xfusion.com> - 8.2p1-29.u19
changelog:
  - Type:CVE
  - CVE:CVE-2023-48795
  - DESC:upstream: ssh-keygen -Y check-novalidate requires namespace or SEGV & fix CVE-2023-48795


author: yangbo <yangbo1@xfusion.com> - 1:1.1.1f-22.u9
changelog:
  - Type:CVE
  - CVE:CVE-2022-4304,CVE-2022-4450,CVE-2023-0215,CVE-2023-0286
  - DESC:fix CVE-2022-4304 CVE-2022-4450 CVE-2023-0215 CVE-2023-0286


author: hutianxue <hutianxue@xfusion.com> - 1:1.1.1f-23.u10
changelog:
  - Type:CVE
  - CVE:CVE-2023-0464,CVE-2023-0465,CVE-2023-0466
  - DESC:Fix CVE-2023-0464,CVE-2023-0465,CVE-2023-0466


author: mengwenhua <mengwenhua@xfusion.com> - 1:1.1.1f-28.u14
changelog:
  - Type:bugfix
  - CVE:
  - DESC:A null pointer dereference occurs when memory allocation fails & Make DH_check set some error bits in recently added error


author: mengwenhua <mengwenhua@xfusion.com> - 1:1.1.1f-30.u16
changelog:
  - Type:bugfix
  - CVE:
  - DESC:backport some upstream patches
         Add test for empty supported-groups extension
         Do not send an empty supported groups extension
         Fix a crash in asn1_item_embed_new
         Fix a crash in ssl_security_cert_chain
         Fix a memory leak in crl_set_issuers
         Fix a memory leak in ec_key_simple_oct2priv
         Fix Coverity 1201763 uninitialised pointer read
         Fix coverity 1498607: uninitialised value
         Fix Coverity 1498611 & 1498608: uninitialised read
         Fix integer overflow in evp_EncryptDecryptUpdate
         Fix issue where OBJ_nid2obj doesn't always raise an error
         Fix leakage when the cacheline is 32-bytes in
         Fix undefined behaviour in EC_GROUP_new_from_ecparameters
         Set protocol in init_client()
         x509: use actual issuer name if a CA is used


author: maxin <maxin@xfusion.com> - 0.4.31-4.u3
changelog:
  - Type:bugfix
  - CVE:
  - DESC:add some upstream patchs
         x86insn: Fix binutils warning when comparing with sized
         orctarget: Fix default target selection not applying when
         orc: Fix warning because of a mismatched OrcExecutor function


author: yangbo <yangbo1@xfusion.com> - 4.1.3-15.u2
changelog:
  - Type:bugfix
  - CVE: 
  - DESC:Fix out of range in pcp-mpstat And Fix error message when pmwebd starting


author: hutianxue <hutianxue@xfusion.com> - 10.35-4.u3
changelog:
  - Type:bugfix
  - CVE:
  - DESC:jit: fail early in ffcps_* if subject shorter than offs1
         jit: fix pcre2_jit_free_unused_memory() if sljit not using allocator


author: mengwenhua <mengwenhua@xfusion.com> - 10.35-7.u5
changelog:
  - Type:bugfix
  - CVE:
  - DESC:sync patches from upstream to fix some bugs
         fix a possible integer overflow in DFA matching (#305)
         Fix 32-bit quantifier following a character larger than the
         Fix accept and endanchored interaction in JIT
         Fix another oversight in c1306126
         Fix backreferences with unset backref and non-greedy
         Fix backref iterators when PCRE2_MATCH_UNSET_BACKREF is set
         Fix bad patch in 05206d66. The interpreter was handling
         Fix compile loop in 32-bit mode for characters above the
         Fix incorrect matching of 0xffffffff to any character with
         Fix incorrect patch in c1306126
         Fix oversight in DFA when changing OP_REVERSE; also add some
         Fix \X matching in 32 bit mode without UTF in JIT
         Fix \z behaviour when matching within invalid UTF


author: changhan<changhan@xfusion.com> - 9.26-1
changelog:
  - Type:CVE
  - CVE:CVE-2020-36829,CVE-2021-47208
  - DESC:Upgrade to version 9.26 for fix CVE-2020-36829,CVE-2021-47208


author: bikunyang <bikunyang@xfusion.com> - 0.113-5.u2
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Fixed the issue that pesign-client -k does not take effect probabilistically


author: hutianxue <hutianxue@xfusion.com> - 8.0.26-1.u4
changelog:
  - Type:CVE
  - CVE:CVE-2022-31631,CVE-2023-0567,CVE-2023-0568,CVE-2023-0662,CVE-2023-3823,CVE-2023-3824
  - DESC:fix CVE-2022-31631,CVE-2023-0567,CVE-2023-0568,CVE-2023-0662,CVE-2023-3823,CVE-2023-3824


author: maxin <maxin@xfusion.com> - 8.0.30-8.u7
changelog:
  - Type:CVE
  - CVE:CVE-2024-5458,CVE-2024-8925,CVE-2024-8926,CVE-2024-8927,CVE-2024-9026,CVE-2024-11233,CVE-2024-11234,CVE-2024-11236,CVE-2024-8983,CVE-2024-8929
  - DESC:Fix CVEs


author: mengwenhua <mengwenhua@xfusion.com> - 0.6.10-24.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:backport Gracefully handle missing indirect info nodes & Fix infinite loop when regexp-matching an empty string


author: os-sync <os-sync@xfusion.com> - 1:0.10.1-10.u3
changelog:
  - Type:CVE
  - CVE:CVE-2019-9514,CVE-2022-1962,CVE-2022-2880,CVE-2022-32189,CVE-2022-41715,CVE-2023-45290,CVE-2024-24783,CVE-2024-24785,CVE-2024-24791,CVE-2024-9355
  - DESC:Fix CVE-2019-9514,CVE-2022-1962,CVE-2022-2880,CVE-2022-32189,CVE-2022-41715,CVE-2023-45290,CVE-2024-24783,CVE-2024-24785,CVE-2024-24791,CVE-2024-9355


author: wangye <wangye70@huawei.com> - 0.67.0-6
changelog:
  - Type:cves
  - Id:NA
  - SUG:NA
  - DESC:fix CVE-2018-16646 CVE-2018-18897 CVE-2018-19060 CVE-2018-20481 CVE-2019-14494 CVE-2019-7310


author: hutianxue <hutianxue@xfusion.com> - 0.67.0-8.u3
changelog:
  - Type:CVE
  - CVE:CVE-2022-37050,CVE-2022-37051,CVE-2022-37052,CVE-2022-38349,CVE-2020-23804
  - DESC:fix CVE-2022-37050,CVE-2022-37051,CVE-2022-37052,CVE-2022-38349,CVE-2020-23804


author: os-sync <os-sync@xfusion.com> - 2.4.8-7.u6
changelog:
  - Type:bugfix
  - CVE:
  - DESC:fix up parsing in radiusclient.conf and add check for struct sockaddr_ll


author: wangyoukang<wangyoukang@xfusion.com> - 1.0-0.49
changelog:
  - Type:requirement
  - CVE:NA
  - DESC:reconstruction printk_buf_reserve_export and compatible nvram reserve ram export


author: liubo <liubo1@xfusion.com> - 3.36.1-2.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Fixed the rpmbuild -ba pygobject3.spec command execution compilation failure


author: hutianxue <hutianxue@xfusion.com> - 2023.7.22-1.u1
changelog:
  - Type:CVE
  - CVE:CVE-2023-37920,CVE-2022-23491
  - DESC:Update to 2023.7.22 for fix CVE-2023-37920 and CVE-2022-23491


author: wangzeping<wangzeping@xfusion.com> - 3.3.1-2.u1
changelog:
  - Type:bugfix
  - CVE: 
  - DESC:add SM4 symmetric block cipher and provide openssl apis related to SM for python


author: dongxianxin<dongxianxin@xfusion.com> - 4.5.2-3.u1
changelog:
  - Type:CVE
  - CVE:CVE-2021-43818
  - DESC:fix CVE-2021-43818
         enable check
         Cleaner: cover some more cases where scripts could sneak through in specially crafted style content.


author: mengwenhua <mengwenhua@xfusion.com> - 1:0.31.1-8.u3
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Fixed parsing of wheel file names with multiple platform tags & Add new Pytest cache directory to gitignore


author: maxin <maxin@xfusion.com> - 0.5.1-3.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:backport patch from upstream
         Add test capturing failure to traverse parent of a directory.
         Strip the trailing slash from directory entries. Fixes #7.


author: jiangjinjian<jiangjinjian@xfusion.com> - 2.7.18-1.u2
changelog:
  - Type:CVE
  - CVE:CVE-2021-23336,CVE-2022-45061,CVE-2023-24329
  - DESC:Fix CVE-2021-23336,CVE-2022-45061,CVE-2023-24329


author: jiangjinjian<jiangjinjian@xfusion.com> - 2.7.18-1.u4
changelog:
  - Type:CVE
  - CVE:CVE-2022-48560,CVE-2022-48565,CVE-2022-48566
  - DESC:Fix CVE-2022-48560,CVE-2022-48565,CVE-2022-48566


author: mengwenhua <mengwenhua@xfusion.com> - 0.12.13-21.u5
changelog:
  - Type:bugfix
  - CVE:
  - DESC:backport some patches
         fix #1115: Some modules set __file__ as None
         fix #1148: redirect() and non-ascii characters
         Bug fix of missing regex escaped back slashes
         Fix the Allow: header value in 405 "Method not allowed." response.
         Fix: Multipart file uploads with empty filename not detected as binary.
         The auth_basic() decorator doesn't use functools.wraps().
         Add ServerAdapter for CherryPy >= 9
         Added 'cheroot' server adapter to list of server names, so it can be selected from the command line and by name.
         fix: Cookie test falsely reports a failure for some python versions.


author: mengwenhua <mengwenhua@xfusion.com> - 0.12.13-22.u6
changelog:
  - Type:bugfix
  - CVE:
  - DESC:fix: view decorator does not forward default values if route result is None


author: mengwenhua <mengwenhua@xfusion.com> - 3.1.1-10.u3
changelog:
  - Type:bugfix
  - CVE:
  - DESC:fixes to as_completed and map iterators & Make Future.__repr__ subclass-friendly & Fixed tests hanging on PyPy


author: mengwenhua <mengwenhua@xfusion.com> - 0.9.5-8.u3
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Support old Python 2.7 releases & Fix the error in the code that causes a ValueError exception to be thrown


author: mengwenhua <mengwenhua@xfusion.com> - 1.1.0-6.u2
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Pass python_requires argument to setuptools & Make sure *.pyc files are not included in the tarball & Fix Python 3.7 Travis testing


author: mengwenhua <mengwenhua@xfusion.com> - 4.1.0-6.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:fix for python 3.7 deprecation warning about importing certain types from collections vs collections.abc


author: dongxianxin<dongxianxin@xfusion.com> - 1:1.16.5-3.u1
changelog:
  - Type:CVE
  - CVE:CVE-2021-41496,CVE-2021-34141,CVE-2021-41495
  - DESC:fix CVE-2021-41496
         fix CVE-2021-34141
         fix CVE-2021-41495


author: mengwenhua <mengwenhua@xfusion.com> - 0.6.0-8.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Fix typos & Mention that wrappers are still invoked when using firstresult


author: mengwenhua <mengwenhua@xfusion.com> - 5.4.3-13.u2
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Pass python_requires argument to setuptools & fix compatibility with python 2.6.x & give credit to @hexaclock


author: mengwenhua <mengwenhua@xfusion.com> - 0.1.18-7.u4
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Avoid annoying SystemExit breaks in vscode & Add a decoder implementing the `toml-test` protocol


author: shixuantong <shixuantong@huawei.com> - 4.15.1-27
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix data race in packageBinaries() function and prioritize large packages


author: leiyansong<leiyansong@xfusion.com> - 4.15.1-37.u4
changelog:
  - Type:CVE
  - CVE:CVE-2021-35937,CVE-2021-35938,CVE-2021-35939
  - DESC:fix CVE-2021-35937,fix CVE-2021-35938,fix CVE-2021-35939


author: zhaoang <zhaoang@xfusion.com> - 4.15.1-43.u6
changelog:
  - Type:bugfix
  - CVE:
  - DESC:unblock signals in forked scriptlets
         Fix regression on ctrl-c during transaction killing scriptlets
         sync patches from upstream


author: zhaoang <zhaoang@xfusion.com> - 4.15.1-47.u8
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Revert back to implicit database creation for now
         optimize digest list feature patch format


author: mengwenhua <mengwenhua@xfusion.com> - 4.15.1-48.u9
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Fix memleak when running %generate_buildrequires
         Fix *sbp leak when running rpmbuild with --quiet
         Fix elf leak in getElfColor
         Fix prog leak in parseScript
         Fix BANames leak in handlePreambleTag


author: hutianxue <hutianxue@xfusion.com> - 4.15.1-51.u12
changelog:
  - Type:bugfix
  - CVE:
  - DESC:backport some patches from upstream
  - Actually return an error in parseScript if parsing fails
  - Fix possible null pointer reference in ndb
  - Fix rpmDigestBundleFinal() and Update() return code on
  - Remove obscure check for package build time from --rebuilddb


author: mengwenhua <mengwenhua@xfusion.com> - 4.15.1-55.u15
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Fix potential segmentation fault & Fix file leak when src rpm in URL format is used for installation


author: huanghaitao <huanghaitao8@huawei.com> - 1.4.0-3
changelog:
  - Add Requires: python2-gobject-base libnotify >= 0.7.7
  - fix command subunit-notify subunit2gtk --help error
  - fix command subunit-notify warning


author: wangzeping<wangzeping@xfusion.com> - 1.4.0-3.u1
changelog:
  - Type:bugfix
  - CVE: 
  - DESC:In changelog, 1.4.0-3 already states that the patch needs to be added, but it is not added in spec


author: zhangpan <zhangpan3@xfusion.com> - 1.25.9-7.u2
changelog:
  - Type:bugfix
  - CVE:
  - DESC:modify HOST_PORT_PAT in backport-fixed-issue-with-port-0-returning-None.patch
         fix parse port error and add server_hostname to SSL_KEYWORDS
         modify RECENT_DATE in python-urllib3.spec to adapt time change


author: hehuazhen<hehuazhen@huawei.com> - 3.7.9-16
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix _PyEval_FiniThreads
         rewrite _PyObject_IsFreed unit tests
         get test_capi passing with address sanitize
         remove use after free reference in ctypes
         fix memory leak in _asynciomodule.c


author: dongxianxin<dongxianxin@xfusion.com> - 3.7.9-18.u1
changelog:
  - Type:CVE
  - CVE:CVE-2021-4189,CVE-2022-0391
  - DESC:disable profile guided optimizations for x86_64 and i686 architectures
         fix CVE-2021-4189 CVE-2022-0391
         bpo-43124: Fix smtplib multiple CRLF injection
         bpo-12800: tarfile: Restore fix from 011525ee9
         bpo-41815: SQLite: segfault if backup called on closed database
         bpo-42183: Fix a stack overflow error for asyncio Task or Future repr()
         bpo-45001: Make email date parsing more robust against malformed input


author: likang<likang@xfusion.com> - 3.7.9-18.u4
changelog:
  - Type:CVE
  - CVE:CVE-2015-20107
  - DESC:Modify the solution of CVE-2015-20107,
         Modify the License of python3 to Python-2.0


author: hutianxue <hutianxue@xfusion.com> - 3.7.9-33.u15
changelog:
  - Type:CVE
  - CVE:CVE-2023-27043
  - DESC:Fix CVE-2023-27043
         Detect email address parsing errors and return empty tuple to indicate the parsing error (old API)


author: wangye <wangye70@huawei.com> - 8.1.1-2
changelog:
  - Type:CVE
  - CVE:CVE-2021-27921 CVE-2021-27922 CVE-2021-27923
  - SUG:NA
  - DESC: fix CVE-2021-27921CVE-2021-27922CVE-2021-27923


author: hanhui <hanhui15@huawei.com> - 8.1.1-3
changelog:
  - Type:bugfix
  - CVE:CVE-2021-28675 CVE-2021-28676 CVE-2021-28677 CVE-2021-28678 CVE-2021-25287 CVE-2021-25288
  - SUG:NA
  - DESC: incorporate community patch


author: dongxianxin<dongxianxin@xfusion.com> - 8.1.1-6.u1
changelog:
  - Type:CVE
  - CVE:CVE-2021-23437,CVE-2022-22815,CVE-2022-22816,CVE-2022-22817,CVE-2022-24303
  - DESC:fix CVE-2021-23437
         fix CVE-2022-22815,CVE-2022-22816,CVE-2022-22817
         fix CVE-2022-24303


author: zhangpan <zhangpan3@xfusion.com> - 2.6.1-8.u4
changelog:
  - Type:bugfix
  - CVE:
  - DESC:fix CWE-394 issue and fix sssd_be process coredump and backport some patch


author: mengwenhua <mengwenhua@xfusion.com> - 2.6.1-11.u5
changelog:
  - Type:bugfix
  - CVE:
  - DESC:backport patches from upstream
         MONITOR: fix `socket_activated` flag initialization
         AD: Do not use the shortcut when filter_groups is set.
         ad: skip filtering if ad_enabled_domains is set
         ad: use sAMAccountName to lookup hosts
         CONFDB: check the return values
         fail_over: protect against a segmentation fault
         Fixed pid wrapping in sss_cli_check_socket
         Fixed the problem of calling getpid() and lstat() twice in
         ipa: correctly remove missing attributes on netgroup update
         KCM: Switch default caches only when there is no current
         KRB5: avoid another attempt to free 'cc' in 'done:' section
         KRB5: avoid FORWARD_NULL
         KRB5: avoid RESOURCE_LEAK
         KRB5: fixed RESOURCE_LEAK
         fix memory leak
         fix memory leak
         fixed leak of `kprinc`
         fixed RESOURCE_LEAK
         sbus: arm watchdog for sbus_connect_init_send()
         SUDO: fix mistype
         SYSDB: in case (ignore_group_members == true) group is
         UTILS: swap order of seteuid()/setegid()
         watchdog: add arm_watchdog() and disarm_watchdog() calls


author: maxin <maxin@xfusion.com> - 1.11.0-16.u7
changelog:
  - Type:CVE
  - CVE:CVE-2023-50387,CVE-2023-50868,CVE-2024-43167,CVE-2024-43168,CVE-2024-33655,CVE-2024-8508
  - DESC:Fix CVEs


author: dongxianxin<dongxianxin@xfusion.com> - 1.11.0-2.u1
changelog:
  - Type:bugfix
  - CVE:NA
  - DESC:fix undefine-shift in sldns_str2wire_hip_buf
         fix integer overflow in sldns_wire2str_pkt_scan


author: wutao <wutao1@xfusion.com> - 2:4.1.0-63.u1
changelog:
  - Type:CVE
  - CVE:CVE-2021-3582,CVE-2021-3607,CVE-2021-3608,CVE-2021-3930
  - DESC:hw/rdma: Fix possible mremap overflow in the pvrdma device (CVE-2021-3582)
         pvrdma: Ensure correct input on ring init (CVE-2021-3607)
         pvrdma: Fix the ring init error flow (CVE-2021-3608)
         hw/scsi/scsi-disk: MODE_PAGE_ALLS not allowed in MODE SELECT commands(fix CVE-2021-3930)


author: sunguoshuai <sunguoshuai@xfusion.com> - 4.1.0-63.u3
changelog:
  - Type:CVE
  - CVE:CVE-2021-3750,CVE-2021-20196,CVE-2021-4207,CVE-2021-4206
  - DESC:hw/intc/arm_gicv3_dist: Rename 64-bit accessors with 'q' suffix
         hw/intc/arm_gicv3: Replace mis-used MEMTX_* constants by booleans
         hw/intc/arm_gicv3: Check for !MEMTX_OK instead of MEMTX_ERROR (CVE-2021-3750)
         net/colo-compare.c: Check that colo-compare is active
         hw/block/fdc: Extract blk_create_empty_drive()
         hw/block/fdc: Kludge missing floppy drive to fix CVE-2021-20196
         tests/fdc-test: Add a regression test for CVE-2021-20196
         display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207)
         ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206)


author: yangzhuangzhuang <yangzhuangzhuang@xfusion.com> - 4.1.0-63.u4
changelog:
  - Type:CVE
  - CVE:CVE-2020-13253 CVE-2021-20257
  - DESC:Fix CVE-2020-13253 CVE-2021-20257
         Fix gcc 10.3.1 compile error


author: hupeixi<hupeixi@xfusion.com> - 10:4.1.0-73.u8
changelog:
  - Type:bugfix
  - CVE:
  - DESC:hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued
         scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216)
         scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216)


author: hupeixi<hupeixi@xfusion.com> - 10:4.1.0-74.u9
changelog:
  - Type:bugfix
  - CVE:
  - DESC:hw/usb/hcd-xhci: Fix unbounded loop in xhci_ring_chain_length() (CVE-2020-14394)


author: hupeixi<hupeixi@xfusion.com> - 10:4.1.0-75.u10
changelog:
  - Type:CVE
  - CVE:CVE-2021-3638
  - DESC:hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)


author: zhangliangpengkun <zhangliangpengkun@xfusion.com> - 10:4.1.0-76.u12
changelog:
  - Type:CVE
  - CVE:CVE-2020-35503,CVE-2021-20255
  - DESC:fix CVE-2020-35503,CVE-2021-20255
      check for NULL frame in megasas_command_cancelled
      net: eepro100: validate various address values


author: hutianxue <hutianxue@xfusion.com> - 10:4.1.0-77.u14
changelog:
  - Type:CVE
  - CVE:CVE-2022-1050
  - DESC:hw/pvrdma: Protect against buggy or malicious guest driver (CVE-2022-1050)


author: hutianxue <hutianxue@xfusion.com> - 10:4.1.0-78.u16
changelog:
  - Type:CVE
  - CVE:CVE-2023-0664,CVE-2023-2861
  - DESC:- qga/win32: Use rundll for VSS installation
         - qga/win32: Remove change action from MSI installer
         - 9pfs: prevent opening special files (CVE-2023-2861)


author: leizhe <leizhe@xfusion.com> - 10:4.1.0-79.u19
changelog:
  - Type:CVE
  - CVE:CVE-2023-0330,CVE-2023-1544,CVE-2023-3354
  - DESC:Fix CVE-2023-0330,CVE-2023-1544,CVE-2023-3354


author: mengwenhua <mengwenhua@xfusion.com> - 10:4.1.0-80.u20
changelog:
  - Type:CVE
  - CVE:CVE-2023-3354,CVE-2020-13791,CVE-2020-24165
  - DESC:fix CVE-2023-3354,CVE-2020-13791,CVE-2020-24165


author: mengwenhua <mengwenhua@xfusion.com> - 1:4.8.7-55.u6
changelog:
  - Type:CVE
  - CVE:CVE-2023-38197,CVE-2023-37369,CVE-2023-43114
  - DESC:Fix CVE-2023-38197,CVE-2023-37369,CVE-2023-43114


author: os-sync <os-sync@xfusion.com> - 2.18-5.u2
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Add the socket option IPV6_MULTICAST_LOOP to prevent the interface from autoconfiguring using RA messages sent by itself.


author: tanxiaofei<tanxiaofei@huawei.com> - 0.6.6-5
changelog:
  - Type:Bugfix
  - ID:NA
  - SUG:NA
  - DESC: Backport one patch, and some little fixes and add some modules
    support for kunpeng series:
    1. Modify non-standard error decoding interface using linked list
    2. Fix the issue of sprintf data type mismatch in uuid_le()
    3. Fix the issue of command option -r for hip08
    4. Fix some print format issues for hisi common error section
    5. Add some modules supported by hisi common error section


author: luoshengwei<luoshengwei@huawei.com> - 0.6.6-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Since the cpu logical index has been counted in kernel, remove
  - related code in ras.


author: zhouyitao<zhouyitao@xfusion.com> - 0.6.6-7.u1
changelog:
  - Type:bugfix
  - CVE:NA
  - DESC:ras page isolation do_page_offline always considers 
    ras page isolation page which is PAGE_OFFLINE_FAILED
    rasdaemon decode AER error according to PCIe specifi
    add env to support configure uptime use


author: dujuan <jane.du@xfusion.com> - 0.6.6-7.u2
changelog:
  - Type:bugfix
  - CVE:NA
  - DESC:resolve the fail of 'systemctl start ras-mc-ctl.service' when selinux is forcing.


author: hutianxue <hutianxue@xfusion.com> - 0.6.6-10.u5
changelog:
  - Type:bugfix
  - CVE:
  - DESC:backport libtraceevent patch to adapt to kernel ftrace ring buffer change


author: yaoxin <yaoxin30@huawei.com> - 5.0.14-1
changelog:
  - Upgrade redis5 to 5.0.14 for fix cves: CVE-2021-41099
    CVE-2021-32762 CVE-2021-32675 CVE-2021-32687 CVE-2021-32626
    CVE-2021-32627 CVE-2021-32628


author: likang<likang@xfusion.com> - 6.2.7-1
changelog:
  - Type:CVE
  - CVE:CVE-2022-24735,CVE-2022-24736,CVE-2021-29477,CVE-2021-32672
  - DESC:Upgrade to 6.2.7 for fix CVE-2022-24735,CVE-2022-24736,CVE-2021-29477,CVE-2021-32672


author: leizhe <leizhe@xfusion.com> - 6.2.7-1.u3
changelog:
  - Type:CVE
  - CVE:CVE-2022-35977,CVE-2022-3647,CVE-2023-22458,CVE-2023-25155
  - DESC:fix CVE-2022-35977,CVE-2022-3647,CVE-2023-22458,CVE-2023-25155


author: leizhe <leizhe@xfusion.com> - 6.2.7-1.u3
changelog:
  - Type:CVE
  - CVE:CVE-2023-28856,CVE-2022-3647,CVE-2023-22458,CVE-2023-25155
  - DESC:fix CVE-2023-28856,CVE-2022-3647,CVE-2023-22458,CVE-2023-25155


author: mengwenhua <mengwenhua@xfusion.com> - 1.10-22.u2
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Explicitly tell users how to set URL & Better details for wrong-script-interpreter


author: hutianxue<hutianxue@xfusion.com> - 2.15-3.u2
changelog:
  - Type:bugfix
  - CVE:
  - DESC:change the uid and gid of directories newly created when run with --change-files


author: maxin <maxin@xfusion.com> - 2.15-5.u4
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Avoid truncate trailer space and do not escape backslash when read filename


author: os-sync <os-sync@xfusion.com> - 3.1.3-11.u4
changelog:
  - Type:CVE
  - CVE:CVE-2024-12085,CVE-2024-12086,CVE-2024-12087,CVE-2024-12088,CVE-2024-12747
  - DESC:fix CVE-2024-12085, CVE-2024-12086, CVE-2024-12087, CVE-2024-12088, CVE-2024-12747


author: shixuantong <shixuantong@huawei.com> - 2.5.8-114
changelog:
  - Type:cves
  - ID:CVE-2021-31799 CVE-2021-31810 CVE-2021-32066
  - SUG:NA
  - DESC:fix CVE-2021-31799 CVE-2021-31810 CVE-2021-32066


author: maxin <maxin@xfusion.com> - 2.5.8-131.u6
changelog:
  - Type:CVE
  - CVE:CVE-2024-27280,CVE-2024-27281,CVE-2024-27282,CVE-2024-35221,CVE-2024-35176,CVE-2024-41946,CVE-2024-39908,CVE-2024-41123,CVE-2024-43398,CVE-2024-47220,CVE-2024-49761
  - DESC:Fix CVEs


author: os-sync <os-sync@xfusion.com> - 2.5.8-133.u8
changelog:
  - Type:CVE
  - CVE:CVE-2025-27219,CVE-2025-27220,CVE-2025-27221
  - DESC:Fix CVE-2025-27219,CVE-2025-27220,CVE-2025-27221


author: maxin <maxin@xfusion.com> - 1:5.2.4.4-6.u3
changelog:
  - Type:CVE
  - CVE:CVE-2022-23633,CVE-2024-41128,CVE-2024-47887
  - DESC:Fix CVE-2022-23633,CVE-2024-41128,CVE-2024-47887


author: likang<likang@xfusion.com> - 1:2.2.3.1-2.u1
changelog:
  - Type:CVE
  - CVE:CVE-2020-8184,CVE-2022-30122,CVE-2022-30123
  - DESC:Upgrade to 2.2.3.1 for fix CVE-2020-8184,CVE-2022-30122,CVE-2022-30123


author: maxin <maxin@xfusion.com> - 1:2.2.3.1-5.u7
changelog:
  - Type:CVE
  - CVE:CVE-2024-39316,CVE-2024-26141,CVE-2024-26146,CVE-2024-25126
  - DESC:Fix CVE-2024-39316,CVE-2024-26141,CVE-2024-26146,CVE-2024-25126


author: zhangliangpengkun <zhangliangpengkun@xfusion.com> - 1:2.0.3-2.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:HTTP ranges with non decimal characters is treated as range 0..0 as of Rack 2.2.6.2.


author: fandehui<fandehui@xfusion.com> - 1:1.0.0-u3
changelog:
  - Type:requirement
  - CVE:
  - DESC:feat(kernelspace): Add new kprobe for interface_authorized_store and refactor existing kprobes.
      - feat(userspace): Add the command-line tool sct_policy_adm
      - feat(userspace): add user space library code
      - Add the function of sending the current policy to the user-space program.


author: fandehui<fandehui@xfusion.com> - 1:1.0.0-u4
changelog:
  - Type:requirement
  - CVE:
  - DESC:Enhance USB Policy Traversal and Insertion
      - refactor: update handle_rm_action to search directly in last_line or cur_line, remove found parameter
      - feat: add processing for empty lines in write_comment_line_to_file function
      - refactor: modify found processing method in process_intf_section and process_usb_section functions, use item_find return value
      - fix: use strcpy_s in open_tmpfile to securely copy temporary file path
      - refactor: update sct_add_interface_policy to set rc to E_RENAME only when rc is not E_POLICY_NOEXIST
      - chore: improve error message format in print_usage function to print specific error information
      - pdate config comments and log rotation policy;
      - modify data structures and string handling functions.


author: fandehui<fandehui@xfusion.com> - 1:1.0.0-u5
changelog:
  - Type:requirement
  - CVE:
  - DESC:Add a whitelist for USB class=03 interface type (human-machine interface type) to the policy file. By default, USB devices of this type are allowed to be accessed. 
      - feat(USB): Enhance USB device authorization and disable logic


author: fandehui<fandehui@xfusion.com> - 1:1.0.0-u6
changelog:
  - Type:requirement
  - CVE:
  - DESC:fix(logging): update log rotation settings and improve serial file permission checks.


author: fandehui<fandehui@xfusion.com> - 1:1.0.0-u7
changelog:
  - Type:requirement
  - CVE:
  - DESC:feat(sct_usb): refactor USB authorization and device processing
      - Removed redundant authorization functions `g_sct_usb_authorize_device` and `g_sct_usb_deauthorize_device`.
      - Introduced `process_intf` function to handle interface authorization and deauthorization based on policy compliance.
      - Enhanced `is_hashed` function to `process_intf` for better readability and maintainability.
      - Updated `disable_usb` function to utilize `process_intf` for device authorization checks.
      - Refactored `print_config_descriptor` in `list_usb.c` to use GLib hash table for class aggregation and printing.


author: fandehui<fandehui@xfusion.com> - 1:1.0.0-u8
changelog:
  - Type:bugfix
  - CVE:
  - DESC:feat(sct): switch policy management to string-based configuration
      - Added new configuration file `conf/sct` with policy_switch parameter
      - Modified `module/sct_main.c` to use string-based policy_switch instead of integer all_permit
      - Updated `module/sct_intf.c` to check policy_switch string for serial file permission
      - Removed deprecated all_permit parameter and related code
      - Updated `module/sct_usb.c` to use policy_switch for USB device authorization
      - Modified `service/sctd.service` to include environment file for policy_switch configuration


author: fandehui<fandehui@xfusion.com> - 1:1.0.0-u10
changelog:
  - Type:bugfix
  - CVE:
  - DESC: feat(parser): add whitespace removal and colon count validation for USB string parsing


author: chenbo<chebo1@xfusion.com> - 2.0-1.75.u4
changelog:
  - Type:bugfix
  - CVE:NA
  - DESC:provide authentication for user login system for the system tailored by kiwi.


author: liningjie <liningjie@xfusion.com> - 2.0-1.76.u22
changelog:
  - Type:bugfix
  - CVE:
  - DESC:fix unexpected recursion due to mismatch of getcap and setcap for mv-chcon-iac_mgr.


author: liningjie <liningjie@xfusion.com> - 2.0-1.76.u29
changelog:
  - Type:bugfix
  - CVE:
  - DESC:since customer uses FusionOS 23, revert to commit 407a42fc7facfb9a615b6590e675d48bb962ff69.


author: luhuaxin <1539327763@qq.com> - 3.14.2-72
changelog:
  - backport some upstream patches
    backport-Allow-systemd-logind-dbus-chat-with-fwupd.patch
    backport-Allow-auditd-manage-kerberos-host-rcache-files.patch
    backport-Add-dev_lock_all_blk_files-interface.patch
    backport-Define-named-file-transition-for-sshd-on-tmp-krb5_0..patch
    backport-Allow-nsswitch_domain-to-connect-to-systemd-machined.patch
    backport-Allow-unconfined_t-to-node_bind-icmp_sockets-in-node.patch
    backport-Create-macro-corenet_icmp_bind_generic_node.patch
    backport-Allow-traceroute_t-and-ping_t-to-bind-generic-nodes.patch
    backport-Allow-passwd-to-get-attributes-in-proc_t.patch
    backport-Allow-login_pgm-attribute-to-get-attributes-in-proc_.patch
    backport-Allow-syslogd_t-domain-to-read-write-tmpfs-systemd-b.patch
    backport-Allow-all-users-to-connect-to-systemd-userdbd-with-a.patch
    backport-Add-new-devices-and-filesystem-interfaces.patch
    backport-Add-lvm_dbus_send_msg-lvm_rw_var_run-interfaces.patch
    backport-Allow-domain-write-to-an-automount-unnamed-pipe.patch
    backport-Allow-dyntransition-from-sshd_t-to-unconfined_t.patch
    backport-Allow-initrc_t-create-run-chronyd-dhcp-directory-wit.patch
    backport-Update-systemd_resolved_read_pid-to-also-read-symlin.patch
    backport-Allow-systemd-resolved-manage-its-private-runtime-sy.patch
    backport-Allow-systemd-logind-manage-init-s-pid-files.patch
    backport-Add-systemd_resolved_write_pid_sock_files-interface.patch
    backport-Allow-nsswitch-domain-write-to-systemd-resolved-PID-.patch
    backport-sysnetwork.if-avoid-directly-referencing-systemd_res.patch
    backport-Allow-stub-resolv.conf-to-be-a-symlink.patch
    backport-Allow-domain-stat-proc-filesystem.patch
    backport-Allow-domain-write-to-systemd-resolved-PID-socket-fi.patch
    backport-Allow-systemd-machined-manage-systemd-userdbd-runtim.patch
    backport-Allow-domain-stat-the-sys-filesystem.patch
    backport-Allow-login_userdomain-write-inaccessible-nodes.patch
    backport-Allow-local_login_t-get-attributes-of-tmpfs-filesyst.patch
    backport-Allow-dhcpc_t-domain-transition-to-chronyc_t.patch
    backport-Allow-nsswitch_domain-read-cgroup-files.patch
    backport-Allow-IPsec-and-certmonger-to-use-opencryptoki-servi.patch
    backport-Create-chronyd_pid_filetrans-interface.patch


author: likang<likang@xfusion.com> - 3.14.2-75.u1
changelog:
  - Type:CVE
  - CVE:CVE-2020-24612
  - DESC:fix CVE-2020-24612 in SP3,
         allow httpd to create files in /etc/httpd


author: dongxianxin<dongxianxin@xfusion.com> - 1.45-2.u1
changelog:
  - Type:bugfix
  - CVE:NA
  - DESC:add make check
         Fix grammar problems caused by patch 0003-sg3_utils-1.42-delete-lun-rescan-scsi-bus-report-error.patch
         delete -Sgit from 
  %setup       -q




  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0000-sg3_utils-1.37-rescan-scsi-findremapped-enhance.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0001-sg3_utils-1.37-rescan-downpress.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0002-bugfix-sg3_utils-fix-syntax-error.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0003-sg3_utils-1.42-delete-lun-rescan-scsi-bus-report-error.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-6000-0005-sg3_utils-rescan-scsi-bus-list-all-LUNs-in-one-line.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0004-sg_ses-fix-crash-when-m-LEN-252.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0006-rescan-scsi-bus-sgdevice26-do-not-traverse-sg-class-.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0007-rescan-scsi-bus.sh-add-option-no-lip-scan.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0008-rescan-scsi-bus.sh-speed-testonline.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0009-rescan-scsi-bus-speed-large-multipath-scans.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git
         sync each branch submit
         rescan scsi bus list all LUNs in one line


author: dongxianxin<dongxianxin@xfusion.com> - 1.45-2.u1
changelog:
  - Type:bugfix
  - CVE:NA
  - DESC:add make check
         Fix grammar problems caused by patch 0003-sg3_utils-1.42-delete-lun-rescan-scsi-bus-report-error.patch
         delete -Sgit from 
  %setup       -q




  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0000-sg3_utils-1.37-rescan-scsi-findremapped-enhance.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0001-sg3_utils-1.37-rescan-downpress.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0002-bugfix-sg3_utils-fix-syntax-error.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0003-sg3_utils-1.42-delete-lun-rescan-scsi-bus-report-error.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-6000-0005-sg3_utils-rescan-scsi-bus-list-all-LUNs-in-one-line.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0004-sg_ses-fix-crash-when-m-LEN-252.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0006-rescan-scsi-bus-sgdevice26-do-not-traverse-sg-class-.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0007-rescan-scsi-bus.sh-add-option-no-lip-scan.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0008-rescan-scsi-bus.sh-speed-testonline.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0009-rescan-scsi-bus-speed-large-multipath-scans.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/xfusion-Fix-rescan-scsi-bus-command-syntax-error.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git
         sync each branch submit
         rescan scsi bus list all LUNs in one line


author: dongxianxin<dongxianxin@xfusion.com> - 1.45-2.u1
changelog:
  - Type:bugfix
  - CVE:NA
  - DESC:add make check
         Fix grammar problems caused by patch 0003-sg3_utils-1.42-delete-lun-rescan-scsi-bus-report-error.patch
         delete -Sgit from 
  %setup       -q




  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0000-sg3_utils-1.37-rescan-scsi-findremapped-enhance.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0001-sg3_utils-1.37-rescan-downpress.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0002-bugfix-sg3_utils-fix-syntax-error.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0003-sg3_utils-1.42-delete-lun-rescan-scsi-bus-report-error.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-6000-0005-sg3_utils-rescan-scsi-bus-list-all-LUNs-in-one-line.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0004-sg_ses-fix-crash-when-m-LEN-252.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0006-rescan-scsi-bus-sgdevice26-do-not-traverse-sg-class-.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0007-rescan-scsi-bus.sh-add-option-no-lip-scan.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git
         sync each branch submit
         rescan scsi bus list all LUNs in one line


author: hutianxue <hutianxue@xfusion.com> - 2:4.8.1-7.u6
changelog:
  - Type:bugfix
  - CVE:
  - DESC:backport some patches
  - Read whole line in yes_or_no
  - commonio: free removed database entries
  - semanage: disconnect to free libsemanage internals


author: zhaomeng <zhaomeng@xfusion.com> - 15-21.u2
changelog:
  - Type:requirement
  - CVE:NA
  - DESC:use variable 'format_system_sign' instead of the inherited 'format_h*_sign' globally


author: ruanweidong <ruanweidong@xfusion.com> - 15-22.u4
changelog:
  - Type:bugfix
  - CVE:NA
  - DESC:Fix BOOTX64.CSV and BOOTAA64.CSV, use FusionOS to replace the word openeuler


author: mengwenhua <mengwenhua@xfusion.com> - 15-23.u5
changelog:
  - Type:CVE
  - CVE:CVE-2017-3735,CVE-2017-3737,CVE-2018-0732,CVE-2018-0737,CVE-2018-0739,CVE-2019-1563,CVE-2020-1971
  - DESC:fix CVE-2017-3735 CVE-2017-3737 CVE-2018-0732 CVE-2018-0737 CVE-2018-0739 CVE-2019-1563 CVE-2020-1971


author: mengwenhua <mengwenhua@xfusion.com> - 15-24.u6
changelog:
  - Type:CVE
  - CVE:CVE-2021-23840,CVE-2021-23841,CVE-2022-0778,CVE-2021-3712
  - DESC:fix CVE-2021-23840 CVE-2021-23841 CVE-2022-0778 CVE-2021-3712


author: hutianxue <hutianxue@xfusion.com> - 15-27.u11
changelog:
  - Type:bugfix
  - CVE:
  - DESC:revert  add tpcm support with ipmi channel to fix install fail with UEFI mode


author: miaokaibo <miaokaibo@xfusion.com> - 4.3-1.u2
changelog:
  - Type:requirement
  - CVE:
  - DESC: delete /lib/module and add /etc/FusionOS-latest for kbox and sysmonitor


author: jiangjinjian <jiangjinjian@xfusion.com> - 14.4.2.0-30.u2
changelog:
  - Type:CVE
  - CVE:CVE-2021-33844,CVE-2023-32627,CVE-2021-23159,CVE-2023-34432,CVE-2023-34318,CVE-2021-23172,CVE-2021-3643,CVE-2021-23210,CVE-2022-31650,CVE-2023-26590,CVE-2022-31651,CVE-2017-18189,CVE-2021-40426
  - DESC:fix CVE-2021-33844,CVE-2023-32627,CVE-2021-23159,CVE-2023-34432,CVE-2023-34318,CVE-2021-23172,CVE-2021-3643,CVE-2021-23210,CVE-2022-31650,CVE-2023-26590,CVE-2022-31651,CVE-2017-18189,CVE-2021-40426


author: os-sync <os-sync@xfusion.com> - 14.4.2.0-31.u3
changelog:
  - Type:CVE
  - CVE:CVE-2019-13590,CVE-2019-8354,CVE-2019-8355,CVE-2019-8356,CVE-2019-8357
  - DESC:Fix CVE-2019-13590,CVE-2019-8354,CVE-2019-8355,CVE-2019-8356,CVE-2019-8357


author: zhouyitao<zhouyitao@xfusion.com> - 3.2.0-1.u1
changelog:
  - Type:CVE
  - CVE:CVE-2021-38296
  - DESC:Upgrade to 3.2.0 version
         Fix CVE-2021-38296
         fix install problem
         Rebuild for fix log4j1.x cves


author: os-sync <os-sync@xfusion.com> - 21.01-10.u2
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Add setup.sh scripts during installation
         Fix build check rpaths error
         Fix build warning
         Add ctrlr_lock for cuse register and unregister
         scripts: Do msr existence check only on x86_64 machines


author: chenyanpanHW <chenyanpan@huawei.com> - 4.4-4
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0001-Fix-typos-update-URLs-in-squashfs-tools-Makefile.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0002-Support-creating-sockets-in-unsquashfs.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0003-squashfs-tools-fix-build-failure-against-gcc-10.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0004-xattr-Initialize-header-to-avoid-valgrind-warning.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-6000-0005-CVE-2021-40153.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-6001-0006-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-6002-0007-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-6003-0008-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-6004-0009-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-6005-0010-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: openEuler Buildteam <buildteam@openeuler.org> - 4.9-6
changelog:
  - Type:cves
  - ID:CVE-2020-14058,CVE-2020-15049,CVE-2020-15810,CVE-2020-15811,CVE-2020-24606
  - SUG:restart
  - DESC:fix CVE-2020-14058 CVE-2020-15049 CVE-2020-15810 CVE-2020-15811 CVE-2020-24606


author: xihaochen<xihaochen@huawei.com> - 4.9-8
changelog:
  - Type:cves
  - ID:CVE-2021-28651 CVE-2021-28652 CVE-2021-28662 CVE-2021-31806 CVE-2021-31808 CVE-2021-33620
  - SUG:NA
  - DESC:fix CVE-2021-28651 CVE-2021-28652 CVE-2021-28662 CVE-2021-31806 CVE-2021-31808 CVE-2021-33620


author: mengwenhua <mengwenhua@xfusion.com> - 7:4.9-15.u5
changelog:
  - Type:CVE
  - CVE:CVE-2023-46846,CVE-2023-46847,CVE-2023-46724
  - DESC:Fix CVE-2023-46846,CVE-2023-46847,CVE-2023-46724


author: chenyanpanHW <chenyanpan@huawei.com> - 2.1.0-32
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0001-Fix-issue-with-sysfs-name-comparisons.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0002-sysfsutils-2.1.0-get_link.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0003-sysfsutils-2.1.0-manpages.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0004-sysfsutils-aarch64.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0005-sysutils-modify-GPL-path-written-in-COPYING.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0006-fix-of-FUNC_TABLE_SIZE-mentioned-in-prev-commit.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0007-Fix-compiler-complain-about-multiple-defs-of-my_stdo.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0008-Use-stat-not-lstat-to-find-link-target.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0009-path_is_file-should-call-stat-not-lstat.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0010-lib-Fixed-a-memory-leak-in-lib-sysfs_driver.c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0011-lib-Fixed-memory-leaks-in-lib-sysfs_device.c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0012-lib-Fixed-memory-leaks-in-lib-sysfs_attr.c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: hutianxue <hutianxue@xfusion.com> - 2.1.0-34.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:correcting errors in 0009-path_is_file-should-call-stat-not-lstat.patch
         backport community patches to fix mem leak in sysfs_attr.c, sysfs_device.c, and sysfs_driver.c


author: mengwenhua <mengwenhua@xfusion.com> - 1.5.11-17.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Fix constructing the auth dialog & Set programe name for scp-dbus-service as well & Require proper version of GDK and GTK in scp-dbus-service as well


author: mengwenhua <mengwenhua@xfusion.com> - 1.5.11-21.u3
changelog:
  - Type:bugfix
  - CVE:
  - DESC:backport Fix TypeError raised by debugprint call & Fix bad use of NamedTemporaryFile & Fix bad call of cups connection getFile


author: mengwenhua <mengwenhua@xfusion.com> - 1.5.11-23.u4
changelog:
  - Type:bugfix
  - CVE:
  - DESC:backport Fix writing of advanced settings & Fix compatibility with python3 in putFile method


author: dongxianxin<dongxianxin@xfusion.com> - 243-50.u1
changelog:
  - Type:CVE
  - CVE:CVE-2021-3997,CVE-2020-13776
  - DESC:fix CVE-2021-3997
         fix some issue: 1.fix set blkio.bfq.weight 
                    2.udevadm fix --tag-match
                    3.fix check of Listen* arguments
         fix ConditionDirectoryNotEmpty,ConditionPathIsReadWrite and DirectoryNotEmpty
         fix CVE-2020-13776


author: zhouyitao<zhouyitao@xfusion.com> - 243-50.u2
changelog:
  - Type:bugfix
  - CVE:NA
  - DESC:disable-initialize_clock
         uvp-bugfix-also-stop-machine-when-a-machine-un
         check-whether-command_prev-is-null-before-assigning-
         treat-hyphen-as-valid-hostname-char
         set-kernel.kptr_restrict-1
         set-status_unit_format-when-reloading-the-manager
         let-the-child-of-one-unit-don-t-affect-each-other
         disable-importd-function-in-machinectl-and-function-
         print-the-real-reason-for-link-update


author: yaoguangzhong<yaoguangzhong@xfusion.com> - 243-50.u7
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Fix No print err info of anthentication when ordinary user change virtual terminal


author: hutianxue <hutianxue@xfusion.com> - 243-61.u13
changelog:
  - Type:bugfix
  - CVE:
  - DESC:tmpfiles: check the directory we were supposed to create, not its parent
         stat-util: replace is_dir() + is_dir_fd() by single is_dir_full() call
         shared/condition: avoid nss lookup in PID1
         resolve: mdns_packet_extract_matching_rrs() may return 0
         resolve: fix heap-buffer-overflow reported by ASAN with strict_string_checks=1
         logind: fix getting property OnExternalPower via D-Bus
         log: don't attempt to duplicate closed fd
         growfs: don't actually resize on dry-run
         dns-domain: make each label nul-terminated
         dhcp: fix potential buffer overflow
         coredump: Connect stdout/stderr to /dev/null before doing anything
         cgroups-agent: connect stdin/stdout/stderr to /dev/null
         analyze: add forgotten return statement


author: mengwenhua <mengwenhua@xfusion.com> - 243-74.u18
changelog:
  - Type:bugfix
  - CVE:
  - DESC:sync community patches
         conf-parser: fix line number in error message
         core: fix SIGABRT on empty exec command argv
         core, job: fix breakage of ordering dependencies by systemctl
         core: make sure we don't get confused when setting TERM for a
         core/path: fix spurious triggering of PathExists=
         core/path: serialize the previous_exists state
         core/service: also check path in exec commands
         core: transition to FINAL_SIGTERM state after ExecStopPost=
         core: when looping over mount/swap names, continue if we find
         resolved: actually check authenticated flag of SOA
         dissect: ext4 and loopback files are unimpressed by read-only
         errno: ETIMEDOUT is also a connection error
         execute: Make '+' exec prefix ignore
         Fix generator name in hibernate-resume-generator's
         fix journalctl regression (#15099)
         fs-util: make sure we output normalized paths in
         fs-util: when calling chase_symlinks() with root
         gdb: update accessors for bucket counts and entry sizes
         hibernate-resume-generator: wait "infinitely" for
         journalctl: allow running vacuum on remote
         journalctl: implement --facility=foo
         journalctl: never fail at flushing when the flushed flag is
         journalctl: show duplicate entries if they are from the same
         journalctl: verify that old entries are not sealed with too
         json: use unsigned for refernce counter
         libblkid: open device in nonblock mode.
         macro: check over flow in reference counter
         mount-setup: change the system mount propagation to shared by
         mount-until: make sure we'll exit
         network: ndisc: do not drop all prefixes when a prefix
         network,udev: use uint64_t for bit rate
         nspawn: fix handling of --console=help
         pstore: fix use after free
         pstore: rework memory handling for dmesg
         rules: go to the end of rules indeed when dm is suspended
         rules: import previous SYSTEMD_READY state for suspended DM
         sd-bus: break the loop in bus_ensure_running() if the bus is
         sd-bus: do not read unused value
         sd-bus: do not return negative errno when unknown name is
         sd-bus: fix reference counter to be incremented
         sd-bus: introduce ref/unref function for track_item
         sd-bus: switch to a manual overflow check in
         sd-bus: use hashmap_contains() and drop unnecessary cast
         sd-device: do no allocate strings of unknown length on the
         sd-device-enumerator: do not return error when a device is
         sd-device: minor optimization for
         sd-device: reject empty driver name
         sd-device: use memdupa_suffix0() where appropriate
         sd-device: use strjoina() more again in
         sd-event: refuse running default event loops in any
         sd-event: use usec_add()
         shared/install: fix error codes returned by
         systemctl: skip non-existent units in the 'cat'
         test: add several tests for track item
         test: add test for the non-resolving of
         test-condition: fix group check condition
         test: fix rename_noreplace() test
         test: make sure chase_symlink() returns normalized
         test: shorten code a bit
         timesync: fix wrong type for receiving timestamp in
         time-util: also use 32bit hack on EOVERFLOW
         time-util: deal with systems where userspace has 64bit time_t
         tmpfiles: use a entry in hashmap as ItemArray in
         udevadm: ignore EROFS and return earlier
         udevadm: missing initialization of descriptor
         udevadm: show more error message during exporting
         udevadm trigger: do not propagate EACCES and ENODEV
         udevadm: use usec_add()
         udev: also logs file permission
         udevd: don't kill worker in manager_kill_workers when it's
         udevd: don't use monitor after manager_exit()
         udev: do not append newline when write attributes
         udev: do not use exact match of file permission
         udevd: wait for workers to finish when exiting
         udev: fix error code in the log message
         udev: fix key name in debug log
         udev: fix memleak caused by wrong cleanup function
         udev: fix potential memleak
         udev: ignore ENOENT when chmod_and_chown() device node
         udev: ignore the case that the device is already removed
         udev: support by-path devlink for multipath nvme block
         unit: add AF_ALG to systemd-networkd.service
         verify: fix segmentation fault


author: changhan<changhan@xfusion.com> - 243-82.u21
changelog:
  - Type:CVE
  - CVE:CVE-2023-50387, CVE-2023-50868
  - DESC:add backport-core-add-possibility-to-not-track-certain-unit-types.patch
         sync patches from systemd community
         Update outdated URL
         fix CVE-2023-50387 and CVE-2023-50868
         cgtop: fix sscanf return code checks
         remove redundant patch
         fix nss deadlock between dbus-daemon and PID 1


author: maxin <maxin@xfusion.com> - 4.3-4.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Remove requires on gcc and systemtap-devel
         Added Buildarch:noarch to the help subpackage


author: Yao guangzhong<yaoguangzhong@xfusion.com> - 1.0.0-16
changelog:
  - Type:requirement
  - CVE:
  - DESC: use the project-defined macros to configure the vendor information


author: hutianxue <hutianxue@xfusion.com> - 7:20180414-31.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Fix the license error
         Remove useless BuildRequires poppler for fix build failure


author: maxin <maxin@xfusion.com> - 0.9.0-5.u2
changelog:
  - Type:bugfix
  - CVE:
  - DESC:backport bugfix patch from community
         Check consistency of thin_ids before running a regular dump
         [thin_repair/thin_dump] Fix sorting of data mapping
         [btree] Fix rebalancing checks
         [all] Fix resource leaks
         [thin_show_metadata] Fix out-of-bounds access
         [build] Fix customized emitter linkage
         [thin_dump] Fix leaked shared object handle
         [thin_show_duplicates] Fix potential errors
         [all] Fix uninitialized class members
         [thin_metadata_size] Fix potential string overflow
         [file_utils] Fix resource leak


author: wangyue <wangyue92@huawei.com> - 1:9.0.10-18
changelog:
  - Type:cve
  - ID: CVE-2021-25122 CVE-2021-25329
  - SUG:restart
  - DESC: fix CVE-2021-25122 CVE-2021-25329


author: zhangliangpengkun <zhangliangpengkun@xfusion.com> - 1:9.0.10-23.u4
changelog:
  - Type:CVE
  - CVE:CVE-2022-42252
  - DESC:fix CVE-2022-42252
  -      Requests with invalid content-length should always be rejected


author: jiangjinjian <jiangjinjian@xfusion.com> - 1:9.0.10-23.u5
changelog:
  - Type:CVE
  - CVE:CVE-2021-43980
  - DESC:fix CVE-2021-43980
    Improve the recycling of Processor objects to make it more robust.


author: jiawenhao <jiawenhao@xfusion.com> - 1:9.0.96-3.u1
changelog:
  - Type:CVE
  - CVE:CVE-2024-52318
  - DESC:Fix CVE-2024-52318 and Update to 9.0.96 and Add requires ecj for fix server error


author: Hugel<gengqihu1@huawei.com> - 3.0.3-1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:update version to 3.0.3
         use proper rundir tmpfilesdir and sysusersdir, so proper directories are used


author: dongxianxin<dongxianxin@xfusion.com> - 1.8.0-1.u1
changelog:
  - Type:bugfix
  - CVE:NA
  - DESC:delete -S git from 
  %setup       -q




  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-0000-Fix-tree-args-option-displayed-incomplete.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: yuxiangyang<yuxiangyang4@xfusion.com> - 2.10.0-9.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:split tuned-utils.rpm from tuned.rpm, in order to solve tuned.rpm indirect dependence to gcc.


author: wangzeping<wangzeping@xfusion.com> - 2022a-11.u3
changelog:
  - Type:bugfix
  - CVE: 
  - DESC: Much of Greenland still uses DST from 2024 on
  	Greenland change should affect only America/Nuuk; The northern edge of Chihuahua changes to US rules
  	Most of Greenland stops clock-changing after March
  	Fiji & most of Mexico will no longer observe DST
  	Syria and Jordan switch from 02/03 with DST to plain 03
          move the tzdata rearguard.tar.gz to build
  	Palestine DST transitions time change
  	Chile's DST is delayed by a week in September 2022
  	remake rearguard version of main.zi to fix check_zishrink_posix fail 
  	Iran will stop DST in 2023


author: zhaoang <zhaoang@xfusion.com> - 2022a-13.u4
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Egypt now uses DST again
         This year Morocco springs forward April 23, not April 30


author: mengwenhua <mengwenhua@xfusion.com> - 2022a-16.u7
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Fix Palestine predictions for 2072 through 2075; Ittoqqortoormiit (America/Scoresbysund) zone change.


author: maxin <maxin@xfusion.com> - 1:1.4.0-7.u2
changelog:
  - Type:CVE
  - CVE:CVE-2021-3690,CVE-2023-1973,CVE-2023-5379
  - DESC:Fix CVE-2021-3690,CVE-2023-1973,CVE-2023-5379


author: os-sync <os-sync@xfusion.com> - 1:1.4.0-9.u4
changelog:
  - Type:CVE
  - CVE:CVE-2017-12196,CVE-2019-10184,CVE-2019-10212
  - DESC:Fix CVE-2017-12196,CVE-2019-10184,CVE-2019-10212


author: mengwenhua <mengwenhua@xfusion.com> - 2.17-10.u2
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Support different data sources for unite_cur due to disappearance of Yahoo feed


author: chenyanpanHW <chenyanpan@huawei.com> - 012-4
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0001-usbmisc-initialize-string-buffer-before-reading-from.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: zhangliangpengkun <zhangliangpengkun@xfusion.com> - 1:3.13.0-29.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:If there is no 32-bit library installed in the 64 environment, remove the empty link to the 32-bit library


author: maxin <maxin@xfusion.com> - 7.4.3-1.u4
changelog:
  - Type:CVE
  - CVE:CVE-2023-44487,CVE-2024-30156
  - DESC:Update to 7.4.3 to fix CVE-2023-44487,CVE-2024-30156


author: yangbo <yangbo1@xfusion.com> - 2:9.0-3.u32
changelog:
  - Type:CVE
  - CVE:CVE-2022-4141 CVE-2022-3491 CVE-2022-3520 CVE-2022-3591
  - DESC:fix CVE-2022-4141
         fix CVE-2022-3491 CVE-2022-3520 CVE-2022-3591


author: zhaoang <zhaoang@xfusion.com> - 2:9.0-6.u34
changelog:
  - Type:CVE
  - CVE:CVE-2023-0049,CVE-2023-0051,CVE-2023-0054
  - DESC:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054


author: hutianxue <hutianxue@xfusion.com> - 2:9.0-15.u43
changelog:
  - Type:CVE
  - CVE:CVE-2023-4733,CVE-2023-4734,CVE-2023-4735,CVE-2023-4736
  - DESC:fix CVE-2023-4733,CVE-2023-4734,CVE-2023-4735,CVE-2023-4736


author: mengwenhua <mengwenhua@xfusion.com> - 2:9.0-16.u44
changelog:
  - Type:CVE
  - CVE:CVE-2023-4738,CVE-2023-4750,CVE-2023-4752,CVE-2023-4781
  - DESC:fix CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781


author: mengwenhua <mengwenhua@xfusion.com> - 2:9.0-18.u45
changelog:
  - Type:CVE
  - CVE:CVE-2023-5344,CVE-2023-5441,CVE-2023-5535
  - DESC:Fix CVE-2023-5344,CVE-2023-5441,CVE-2023-5535


author: mengwenhua <mengwenhua@xfusion.com> - 2:9.0-20.u46
changelog:
  - Type:CVE
  - CVE:CVE-2023-46246
  - DESC:Fix CVE-2023-46246 & fix garbled characters display with keywords of filename


author: mengwenhua <mengwenhua@xfusion.com> - 2:9.0-22.u47
changelog:
  - Type:CVE
  - CVE:CVE-2023-48231,CVE-2023-48233,CVE-2023-48234,CVE-2023-48235,CVE-2023-48236,CVE-2023-48237,CVE-2023-48706
  - DESC:CVE-2023-48231,CVE-2023-48233,CVE-2023-48234,CVE-2023-48235,CVE-2023-48236,CVE-2023-48237,CVE-2023-48706


author: changhan<changhan@xfusion.com> - 2:9.0-29.u49
changelog:
  - Type:CVE
  - CVE:CVE-2024-41957, CVE-2024-41965, CVE-2024-43374, CVE-2024-43802, CVE-2024-47814
  - DESC:fix-CVE-2024-41957 CVE-2024-41965 and CVE-2024-43374 and support newly introduced rpm tags and CVE-2024-43802 and CVE-2024-47814 and coredump when use vnew command


author: hupeixi<hupeixi@xfusion.com> - 0.7.0-2.u2
changelog:
  - Type:CVE
  - CVE:CVE-2022-0175
  - DESC:vrend: clear memory when allocating a host-backed memory resource (CVE-2022-0175)


author: zhaomeng <zhaomeng@xfusion.com> - 0.7.0-2.u3
changelog:
  - Type:CVE
  - CVE:CVE-2022-0135
  - DESC:vrend: Add test to resource OOB write and fix it (CVE-2022-0135)


author: nocjj <1250062498@qq.com>
changelog:
  - vcpustat: modify vcpu info acquirement from debugfs
  - display: expand %CPU display
  - display: add limit to usage display
  - vmtop: simplify print_domain_field


author: Jiajun Chen <1250062498@qq.com> -1.1-3
changelog:
  - vcpu_stat: add remaining kvm exits items to display
  - display: modify filter display to support more display fields items
  - vcp_stat: add Max Scheduling Delay time items to display
  - args: add -p option
  - key: add page up/down key response
  - vcpu_stat: get vcpu stat list once per display instead of per vcpu
  - proc: del /prc/pid/comm read
  - display: del screen clear after key response
  - codestyle: del unused var


author: maxin <maxin@xfusion.com> - 2.22.2-13.u2
changelog:
  - Type:CVE
  - CVE:CVE-2024-40779,CVE-2024-40780,CVE-2024-4558
  - DESC:Fix CVE-2024-40779,CVE-2024-40780,CVE-2024-4558


author: zhouyitao<zhouyitao@xfusion.com> - 2.6.2-20.u1
changelog:
  - Type:CVE
  - CVE:CVE-2021-22191,CVE-2021-22207,CVE-2021-4181,CVE-2021-4185
  - DESC:Fix CVE-2021-22191 CVE-2021-22207 CVE-2021-4181 CVE-2021-4185


author: mengwenhua <mengwenhua@xfusion.com> - 1:2.6.2-22.u4
changelog:
  - Type:CVE
  - CVE:CVE-2023-3649,CVE-2023-4511,CVE-2023-4513
  - DESC:fix CVE-2023-3649,CVE-2023-4511,CVE-2023-4513


author: mengwenhua <mengwenhua@xfusion.com> - 1.14-8.u5
changelog:
  - Type:bugfix
  - CVE:
  - DESC:xcbgen: Use xml.etree.ElementTree for Python >= 3.3. & xproto.xml: Update doc text for GrabKey


author: mengwenhua <mengwenhua@xfusion.com> - 0.3.9-17.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Modify spec URL & Update configure.ac bug URL for gitlab migration & Build xz tarballs instead of bzip2 & gitlab CI: add a basic build test


author: lufalong <lufalong@xfusion.com> - 5.6.0-7.u6
changelog:
  - Type:bugfix
  - CVE:
  - DESC:mkfs: fix missing validation of -l size against maximum internal log size
         mkfs: terminate getsubopt arrays properly
         mkfs: don't let internal logs bump the root dir inode chunk to AG 1


author: maxin <maxin@xfusion.com> - 7.5-26.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:fix license & Add version for provides and obsoletes, replace tabs with spaces


author: zhouyitao<zhouyitao@xfusion.com> - 1.20.8-9.u2
changelog:
  - Type:CVE
  - CVE:CVE-2021-4008,CVE-2021-4009,CVE-2021-4010,CVE-2021-4011
  - DESC:fix CVE-2021-4008 CVE-2021-4009 CVE-2021-4010 CVE-2021-4011
         rebuild for upgrade


author: hutianxue <hutianxue@xfusion.com> - 1.20.8-16.u5
changelog:
  - Type:CVE
  - CVE:CVE-2022-4283,CVE-2022-46340,CVE-2022-46341,CVE-2022-46342,CVE-2022-46343,CVE-2022-46344
  - DESC:- fix CVE-2022-4283,CVE-2022-46340,CVE-2022-46341,CVE-2022-46342,CVE-2022-46343,CVE-2022-46344
         - Fix openEuler hard code problem
         - use -git instead of .git as the filename, to avoid .git ignore
         - Fix changelog date
         - add missing patches


author: mengwenhua <mengwenhua@xfusion.com> - 1.20.8-22.u9
changelog:
  - Type:CVE
  - CVE:CVE-2023-5367,CVE-2023-5380
  - DESC:fix CVE-2023-5367,CVE-2023-5380,CVE-2023-5574 & Rollback CVE-2023-5574 patch


author: zhangliangpengkun <zhangliangpengkun@xfusion.com> - 1.20.8-23.u11
changelog:
  - Type:CVE
  - CVE:CVE-2024-21885,CVE-2024-21886,CVE-2024-0408,CVE-2024-0409,CVE-2024-6816,CVE-2024-0229
  - DESC:fix CVE-2024-21885,CVE-2024-21886,CVE-2024-0408,CVE-2024-0409,CVE-2024-6816,CVE-2024-0229


author: maoyanping <maoyanping@xfusion.com> - 1.20.8-27.u12
changelog:
  - Type:CVE
  - CVE:CVE-2024-31080,CVE-2024-31081,CVE-2024-31082,CVE-2024-31083
  - DESC:fix CVE-2024-31080,CVE-2024-31081,CVE-2024-31082,CVE-2024-31083


author: changhan<changhan@xfusion.com> - 1.20.8-31.u13
changelog:
  - Type:CVE
  - CVE:CVE-2023-5574,CVE-2024-9632
  - DESC:-fixed CVE-2023-5574 and CVE-2024-9632 and display error for ps23xx when using ast and pe2201 bmc card


author: maxin <maxin@xfusion.com> - 1.4.18-1.u6
changelog:
  - Type:CVE
  - CVE:CVE-2021-43859,CVE-2022-40151,CVE-2022-41966,CVE-2024-47072
  - DESC:Fix CVE-2021-43859,CVE-2022-40151,CVE-2022-41966,CVE-2024-47072


