# changelog

author: zhuyunfei <zhuyunfei@nfschina.com> [6.6.25-103]
changelog:
  - fix: #8919 loongarch fcoe service start fail
  - configs: loongarch64: support QLogic FastLinQ 4xxx FCoE Module


author: minglei <minglei@nfschina.com> [6.6.25-105]
changelog:
  - sec: #12202 merge cve patches.
  -      CVE-2024-57949, CVE-2025-21684, CVE-2025-21687, CVE-2025-21689,
  -      CVE-2025-21690, CVE-2025-21691, CVE-2025-21692, CVE-2025-21694,
  -      CVE-2025-21697, CVE-2025-21699, CVE-2025-21700, CVE-2025-21701, 
  -      CVE-2025-21688


author: chunchao <chunchao@nfschina.com> [6.6.25-112]
changelog:
  - fix: #13003, lvcreate -m1 failed
  - md: fix deadlock between mddev_suspend and flush bio
  -md: do not delete safemode_timer in mddev_suspend
  -dm-raid: delay flushing event_work() after reconfig_mutex is released
  -md: split MD_RECOVERY_NEEDED out of mddev_resume
  -md: synchronize flush io with array reconfiguration --part
  -md/md-multipath: remove rcu protection to access rdev from conf
  -md/raid5: remove rcu protection to access rdev from conf
  -md/raid1: remove rcu protection to access rdev from conf
  -md/raid10: remove rcu protection to access rdev from conf
  -md: remove flag RemoveSynchronized
  -md: cleanup pers->prepare_suspend()
  -md: rename __mddev_suspend/resume() back to mddev_suspend/resume()
  -md: remove old apis to suspend the array
  -md: suspend array in md_start_sync() if array need reconfiguration
  -md/raid5: replace suspend with quiesce() callback
  -md/md-linear: cleanup linear_add()
  -md: cleanup mddev_create/destroy_serial_pool()
  -md: use new apis to suspend array before mddev_create/destroy_serial_pool
  -md: use new apis to suspend array for ioctls involed array reconfiguration
  -md: use new apis to suspend array for adding/removing rdev from state_store()
  -md: use new apis to suspend array for sysfs apis
  -md/raid5: use new apis to suspend array
  -md/raid5-cache: use new apis to suspend array
  -md/md-bitmap: use new apis to suspend array for location_store()
  -md: replace is_md_suspended() with 'mddev->suspended' in md_check_recovery()
  -md/raid5-cache: use READ_ONCE/WRITE_ONCE for 'conf->log'
  -md: use READ_ONCE/WRITE_ONCE for 'suspend_lo' and 'suspend_hi'
  -md/raid1: don't split discard io for write behind
  -md: simplify md_seq_ops
  -md: factor out a helper from mddev_put()
  -md: don't check 'mddev->pers' and 'pers->quiesce' from suspend_lo_store()
  -md: don't check 'mddev->pers' from suspend_hi_store()
  -md-bitmap: suspend array earlier in location_store()
  -md-bitmap: remove the checking of 'pers->quiesce' from location_store()
  -md: initialize 'writes_pending' while allocating mddev
  -md: initialize 'active_io' while allocating mddev
  -md: delay remove_and_add_spares() for read only array to md_start_sync()
  -md: factor out a helper rdev_addable() from remove_and_add_spares()
  -md: factor out a helper rdev_is_spare() from remove_and_add_spares()
  -md: factor out a helper rdev_removeable() from remove_and_add_spares()
  -md: delay choosing sync action to md_start_sync()
  -md: factor out a helper to choose sync action from md_check_recovery()


author: xunian <xunian@nfschina.com> [6.6.25-113]
changelog:
  - arch: #12981 update phytium patch to version '2025-02-06 6.6.0.2'
  -       update aarch64 config for phytium-patch v6.6.0.2.
  -       buildin:PHYTIUM_BASE_CTRL SMMU_BYPASS_DEV MTD_PHYSMAP_ACPI SERIAL_PHYTIUM_UART_V2 PSWIOTLB RESET_PHYTIUM
  -       modules:PHYTIUM_SNOOP_CTRL I2C_V2_PLATFORM USB_PHYTIUM_V2 USB_PHYTIUM_PCI_V2 USB_PHYTIUM_V2 USB_GADGET


author: minglei <minglei@nfschina.com> [6.6.25-115]
changelog:
  - arch: #12980 update hygon4 patchset.
  -       pinctrl: Add device HID for Hygon GPIO controller
  -       Add set_guest_pat_wb parameter for non-passthrough application scenarios
  -       x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
  -       EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
  -       EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
  -       EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
  -       EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
  -       EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
  -       x86/amd_nb: Get DF ID from F5 device for Hygon family 18h model 7h
  -       iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
  -       x86/amd_nb: Add helper function to identify Hygon family 18h model 10h
  -       EDAC/amd64: Adjust address translation for Hygon family 18h model 10h
  -       EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
  -       EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
  -       EDAC/amd64: Get instance id for Hygon family 18h model 10h
  -       x86/amd_nb: Add support for Hygon family 18h model 8h
  -       EDAC/amd64: Add support for Hygon family 18h model 8h
  -       perf/x86/amd/core: Fix performance monitor for Hygon family 18h processor


author: minglei <minglei@nfschina.com> [6.6.25-116]
changelog:
  - sec: #13129 merge cve patches.
  -      CVE-2024-58051, CVE-2024-58052, CVE-2024-58053, CVE-2024-58054,
  -      CVE-2024-58055, CVE-2024-58056, CVE-2024-58058, CVE-2024-58061,
  -      CVE-2024-58063, CVE-2024-58068, CVE-2024-58069, CVE-2024-58070,
  -      CVE-2024-58071, CVE-2024-58072, CVE-2024-58076, CVE-2024-58077,
  -      CVE-2024-58078, CVE-2024-58079, CVE-2024-58080, CVE-2024-58083,
  -      CVE-2024-58085, CVE-2024-58086, CVE-2025-21826, CVE-2025-21828,
  -      CVE-2025-21829, CVE-2025-21830, CVE-2025-21831, CVE-2025-21832,
  -      CVE-2025-21835, CVE-2025-21836


author: chunchao <chunchao@nfschina.com> [6.6.25-117]
changelog:
  - fix: #13003, lvcreate -m1 failed (release 112,114,117)
  -    revert: dm-raid: really frozen sync_thread during suspend --fix
  -    md: clean up invalid BUG_ON in md_ioctl
  -    md: use RCU lock to protect traversal in md_spares_need_change()
  -    dm-unstriped: cast an operand to sector_t to prevent potential uint32_t overflow
  -    dm resume: don't return EINVAL when signalled
  -    dm-integrity: fix a race condition when accessing recalc_sector
  -    dm init: Handle minors larger than 255
  -    dm cache: fix potential out-of-bounds access on the first resume
  -    dm cache: optimize dirty bit checking with find_next_bit when resizing
  -    dm cache: correct the number of origin blocks to match the target length
  -    Revert dm: requeue IO if mapping table not yet available
  -    dm suspend: return -ERESTARTSYS instead of -EINTR
  -    bcache: Fixup error handling in register_cache()
  -    md: Convert to bdev_open_by_dev()
  -    md: factor out a helper exceed_read_errors() to check read_errors
  -    md-cluster: check for timeout while a new disk adding
  -    dm ioctl: add DMINFO() to track dm device create/remove
  -    bcache: Convert to bdev_open_by_path()


author: minglei <minglei@nfschina.com> [6.6.25-118]
changelog:
  - sec: #13374 merge cve patches.
  -      CVE-2024-58088, CVE-2025-21844, CVE-2025-21846, CVE-2025-21847,
  -      CVE-2025-21848, CVE-2025-21855, CVE-2025-21856, CVE-2025-21857,
  -      CVE-2025-21858, CVE-2025-21859, CVE-2025-21862, CVE-2025-21863,
  -      CVE-2025-21864, CVE-2025-21866


author: minglei <minglei@nfschina.com> [6.6.25-130]
changelog:
  - fix: #14250 fix mrc array overflow.
  - fix: fix dcp null pointer dereference.
  - chore: update comments and kabi.
  - chore: remove CFLAGS for nfssec


author: chunchao <chunchao@nfschina.com> [6.6.25-133]
changelog:
  - feat: #9641 add arm64 && loongarch livepatch support and fix conflicts
  - upstream pr: https://gitee.com/anolis/cloud-kernel/pulls/3299
  - upstream pr: https://gitee.com/anolis/cloud-kernel/pulls/4069
  - LoongArch: Update Loongson-3 default config file
  - compiler.h: specify correct attribute for .rodata..c_jump_table
  - LoongArch: Set AS_HAS_THIN_ADD_SUB as y if AS_IS_LLVM
  - LoongArch: Enable objtool for Clang
  - objtool: Handle frame pointer related instructions
  - LoongArch: Add ifdefs to fix LSX and LASX related warnings
  - LoongArch: Only allow OBJTOOL & ORC unwinder if toolchain supports -mthin-add-sub
  - LoongArch: Add kernel livepatching support
  - LoongArch: Fix definition of ftrace_regs_set_instruction_pointer()
  - LoongArch: Add ORC stack unwinder support
  - objtool: Check local label in read_unwind_hints()
  - objtool: Check local label in add_dead_ends()
  - objtool/LoongArch: Enable orc to be built
  - objtool/x86: Separate arch-specific and generic parts
  - objtool/LoongArch: Implement instruction decoder
  - objtool/LoongArch: Enable objtool to be built


author: minglei <minglei@nfschina.com> [6.6.25-135]
changelog:
  - sec: #14398 merge cve patches.
  -      CVE-2024-50246, CVE-2025-22008, CVE-2025-22009, CVE-2025-22010,
  -      CVE-2025-22013, CVE-2025-22014
  - sec: #14343 merge cve patches.
  -      CVE-2025-21895, CVE-2025-21898, CVE-2025-21899, CVE-2025-21905,
  -      CVE-2025-21908, CVE-2025-21909, CVE-2025-21910, CVE-2025-21912,
  -      CVE-2025-21913, CVE-2025-21914, CVE-2025-21915, CVE-2025-21916,
  -      CVE-2025-21917, CVE-2025-21918, CVE-2025-21919, CVE-2025-21920,
  -      CVE-2025-21922, CVE-2025-21924, CVE-2025-21925, CVE-2025-21926,
  -      CVE-2025-21928, CVE-2025-21934, CVE-2025-21935, CVE-2025-21936,
  -      CVE-2025-21937, CVE-2025-21938, CVE-2025-21943, CVE-2025-21944,
  -      CVE-2025-21945, CVE-2025-21946, CVE-2025-21947, CVE-2025-21948,
  -      CVE-2025-21950, CVE-2025-21951, CVE-2025-21957, CVE-2025-21960,
  -      CVE-2025-21962, CVE-2025-21963, CVE-2025-21964, CVE-2025-21966,
  -      CVE-2025-21970, CVE-2025-21971, CVE-2025-21975, CVE-2025-21978,
  -      CVE-2025-21979, CVE-2025-21980, CVE-2025-21981, CVE-2025-21986,
  -      CVE-2025-21991, CVE-2025-21992, CVE-2025-21993, CVE-2025-21994,
  -      CVE-2025-21995, CVE-2025-21996, CVE-2025-21997, CVE-2025-21999,
  -      CVE-2025-22004, CVE-2025-22005, CVE-2025-22007
  - sec: #13374 merge cve patches.
  -      CVE-2024-58090, CVE-2025-21867, CVE-2025-21868, CVE-2025-21871,
  -      CVE-2025-21872, CVE-2025-21873, CVE-2025-21875, CVE-2025-21877,
  -      CVE-2025-21878, CVE-2025-21881, CVE-2025-21887, CVE-2025-21889


author: fenghui <fenghui@nfschina.com> [6.6.25-138]
changelog:
  - sec: #15034 merge cve patches.
  	CVE-2024-50179, CVE-2024-50201, CVE-2024-50189,
  	CVE-2024-50258, CVE-2024-50216.


author: fenghui <fenghui@nfschina.com> [6.6.25-141]
changelog:
  - sec: #14611 merge cve patches.
  	CVE-2023-53034 CVE-2025-22058 CVE-2025-22060
  	CVE-2025-22062 CVE-2025-22063 CVE-2025-22064
  	CVE-2025-22070 CVE-2024-58093 CVE-2024-58096
  	CVE-2024-58097 CVE-2025-22018 CVE-2025-22021
  	CVE-2025-22025 CVE-2025-22027 CVE-2025-22028
  	CVE-2025-22029 CVE-2025-22033 CVE-2025-22035
  	CVE-2025-22038 CVE-2025-22040 CVE-2025-22041
  	CVE-2025-22042 CVE-2025-22043 CVE-2025-22044
  	CVE-2025-22045 CVE-2025-22048 CVE-2025-22049
  	CVE-2025-22053 CVE-2025-22055 CVE-2025-22056
  	CVE-2025-22057 CVE-2025-22088 CVE-2025-22089
  	CVE-2025-22090 CVE-2025-22094 CVE-2025-22095
  	CVE-2025-22097 CVE-2025-22101 CVE-2025-22102
  	CVE-2025-22103 CVE-2025-22104 CVE-2025-22106
  	CVE-2025-22107 CVE-2025-22108 CVE-2025-22111
  	CVE-2025-22115 CVE-2025-23133 CVE-2025-23136
  	CVE-2025-23138 CVE-2025-22119 CVE-2025-22120
  	CVE-2025-22124 CVE-2025-22125 CVE-2025-22126
  	CVE-2025-23129 CVE-2025-22074 CVE-2025-22075
  	CVE-2025-22077 CVE-2025-22079 CVE-2025-22080
  	CVE-2025-22081 CVE-2025-22083 CVE-2025-22086
  	CVE-2025-37785 CVE-2025-37860 CVE-2025-37893
  	CVE-2025-38152 CVE-2025-38240 CVE-2025-38575
  	CVE-2025-38637 CVE-2025-40014 CVE-2025-40325
  	CVE-2025-40364


author: fenghui <fenghui@nfschina.com> [6.6.25-142]
changelog:
  - fix: #15394 CONFIG_RAS_CEC enabled will cause mcelog and \
    OE-offline unavailable, so disable it.


author: chunchao <chunchao@nfschina.com> [6.6.25-143]
changelog:
  - fix: #15394, ltp syscall futex_wake04 core dump
  - revert: 80 version commit
  - mm/filemap: clarify filemap_fault() comments for not uptodate case
  - mm/filemap: remove hugetlb special casing in filemap.c
  - lib/xarray: introduce a new helper xas_get_order
  - mm/filemap: return early if failed to allocate memory for split
  - mm/filemap: clean up hugetlb exclusion code
  - mm/filemap: optimize filemap folio adding


author: minglei <minglei@nfschina.com> [6.6.25-145]
changelog:
  - sec: #14968 20250506 cve fix.
          CVE-2025-37838 CVE-2024-58099 CVE-2025-23139 CVE-2025-23140
          CVE-2025-23141 CVE-2025-23142 CVE-2025-23144 CVE-2025-23145
          CVE-2025-23146 CVE-2025-23147 CVE-2025-23148 CVE-2025-23150
          CVE-2025-23151 CVE-2025-23155 CVE-2025-23156 CVE-2025-23157
          CVE-2025-23158 CVE-2025-23159 CVE-2025-23161 CVE-2025-23163
          CVE-2025-37738 CVE-2025-37748 CVE-2025-37749 CVE-2025-37754
          CVE-2025-37755 CVE-2025-37756 CVE-2025-37757 CVE-2025-37765
          CVE-2025-37772 CVE-2025-37773 CVE-2025-37775 CVE-2025-37778
          CVE-2025-37780 CVE-2025-37781 CVE-2025-37782 CVE-2025-37786
          CVE-2025-37787 CVE-2025-37788 CVE-2025-37789 CVE-2025-37790
          CVE-2025-37792 CVE-2025-37793 CVE-2025-37794 CVE-2025-37795
          CVE-2025-37796


author: minglei <minglei@nfschina.com> [6.6.25-146]
changelog:
  - sec: #15089 20250515 cve fix.
          CVE-2025-37801 CVE-2025-37803 CVE-2025-37804 CVE-2025-37805
          CVE-2025-37808 CVE-2025-37810 CVE-2025-37812 CVE-2025-37815
          CVE-2025-37817 CVE-2025-37818 CVE-2025-37819 CVE-2025-37820
          CVE-2025-37823 CVE-2025-37824 CVE-2025-37826 CVE-2025-37828
          CVE-2025-37829 CVE-2025-37830 CVE-2025-37831 CVE-2025-37833
          CVE-2025-37836 CVE-2025-37839 CVE-2025-37840 CVE-2025-37841
          CVE-2025-37844 CVE-2025-37849 CVE-2025-37850 CVE-2025-37857
          CVE-2025-37859 CVE-2025-37862 CVE-2025-37863 CVE-2025-37864
          CVE-2025-37865 CVE-2025-37867 CVE-2025-37871 CVE-2025-37889
          CVE-2025-37874 CVE-2025-37875 CVE-2025-37878 CVE-2025-37881
          CVE-2025-37884 CVE-2025-37885


author: fenghui <fenghui@nfschina.com> [6.6.25-147]
changelog:
  - sec: #15420 20250529 cve fix.
  	CVE-2025-37890 CVE-2025-37891 CVE-2025-37892 CVE-2025-37901 
  	CVE-2025-37905 CVE-2025-37909 CVE-2025-37911 CVE-2025-37913 
  	CVE-2025-37914 CVE-2025-37915 CVE-2025-37918 CVE-2025-37921 
  	CVE-2025-37923 CVE-2025-37927 CVE-2025-37928 CVE-2025-37933 
  	CVE-2025-37935 CVE-2025-37936 CVE-2025-37940 CVE-2025-37943 
  	CVE-2025-37947 CVE-2025-37949 CVE-2025-37951 CVE-2025-37952 
  	CVE-2025-37954 CVE-2025-37956 CVE-2025-37960 CVE-2025-37961 
  	CVE-2025-37962 CVE-2025-37969 CVE-2025-37970 CVE-2025-37972 
  	CVE-2025-37973 CVE-2025-37976 CVE-2025-37980 CVE-2025-37982 
  	CVE-2025-37983 CVE-2025-37988 CVE-2025-37989 CVE-2025-37990 
  	CVE-2025-37992


author: fenghui <fenghui@nfschina.com> [6.6.25-148]
changelog:
  - sec: #15420 20250529 cve fix.
  	CVE-2024-26618 CVE-2025-37897 CVE-2025-37899 CVE-2025-37917
  	CVE-2025-37924 CVE-2025-37926 CVE-2025-37930 CVE-2025-37932
  	CVE-2025-37938 CVE-2025-37945 CVE-2025-37953 CVE-2025-37959
  	CVE-2025-37968 CVE-2025-37985 CVE-2025-37987


author: minglei <minglei@nfschina.com> [6.6.25-55.nfs6]
changelog:
  - feat: sync hygon family 18h patch.
  - 1.Add DF PMU support for Hygon family 18h model 4h and model 6h.
  - 2.Add DF PMU support for Hygon family 18h model 5h,7h and 10h.


author: minglei <minglei@nfschina.com> [6.6.25-56.nfs6]
changelog:
  - feat: add hisi raid and 3snic raid support
  - 1. Add support SPxxx RAID/HBA controllers.
  -    RAID controllers support RAID 0/1/5/6/10/50/60 modes.
  -    HBA controlllers support RAID 0/1/10 modes.
  -    RAID/HBA support SAS/SATA HDD/SSD.
  - 2. Add support 3SNIC 3S5XX RAID/HBA controllers.
  -    RAID controllers support RAID 0/1/5/6/10/50/60 modes.
  -    HBA controlllers support RAID 0/1/10 modes.
  -    RAID/HBA support SAS/SATA HDD/SSD.


author: fenghui <fenghui@nfschina.com> [6.6.25-76.nfs6]
changelog:
  - perf:#10589. Add sched optimization patch from nfs-4.0.
  - kernel-4.19.113-unixbench-optimiztion.patch


author: fenghui <fenghui@nfschina.com> [6.6.25-80.nfs6]
changelog:
  - chore:With the Large Portfolio feature enabled, the XFS \ 
  	file system has a probability of experiencing downtime \
  	caused by cache corruption.
  - patch form kernel.org. commit id:
  	de60fd8ddeda2b41fbe11df11733838c5f684616
  	b2ebcf9d3d5a0108f640d8c8200ece8848045725
  	a4864671ca0bf51c8e78242951741df52c06766f
  	6758c1128ceb45d1a35298912b974eb4895b7dd9


author: minglei <minglei@nfschina.com> [6.6.25-81.nfs6]
changelog:
  - feat:#10962 backport from upstream, ext4 use iomap.
    backport the following patches:
    iomap: treat inline data in iomap_writepage_map as an I/O error
    iomap: move the io_folios field out of struct iomap_ioend
    iomap: move the PF_MEMALLOC check to iomap_writepages
    iomap: factor out a iomap_writepage_handle_eof helper
    iomap: move all remaining per-folio logic into iomap_writepage_map
    iomap: clean up the iomap_alloc_ioend calling convention
    iomap: move the iomap_sector sector calculation out of iomap_add_to_ioend
    iomap: dont chain bios
    iomap: only call mapping_set_error once for each failed bio
    iomap: factor out a iomap_writepage_map_block helper
    iomap: submit ioends immediately
    iomap: map multiple blocks at a time
    iomap: pass the length of the dirty region to ->map_blocks
    iomap: add pos and dirty_len into trace_iomap_writepage_map
    xfs: match lock mode in xfs_buffered_write_iomap_begin()
    xfs: make the seq argument to xfs_bmapi_convert_delalloc() optional
    xfs: make xfs_bmapi_convert_delalloc() to allocate the target offset
    xfs: convert delayed extents to unwritten when zeroing post eof blocks
    iomap: drop the write failure handles when unsharing and zeroing
    iomap: don't increase i_size if it's not a write operation
    iomap: use a new variable to handle the written bytes in iomap_write_iter()
    iomap: make iomap_write_end() return a boolean
    iomap: do some small logical cleanup in buffered write
    ext4: refactor ext4_da_map_blocks()
    ext4: convert to exclusive lock while inserting delalloc extents
    ext4: add a hole extent entry in cache after punch
    ext4: make ext4_map_blocks() distinguish delalloc only extent
    ext4: make ext4_set_iomap() recognize IOMAP_DELALLOC map type
    ext4: factor out a common helper to query extent map
    ext4: check the extent status again before inserting delalloc block
    ext4: trim delalloc extent
    ext4: drop iblock parameter
    ext4: make ext4_es_insert_delayed_block() insert multi-blocks
    ext4: make ext4_da_reserve_space() reserve multi-clusters
    ext4: factor out check for whether a cluster is allocated
    ext4: make ext4_insert_delayed_block() insert multi-blocks
    ext4: make ext4_da_map_blocks() buffer_head unaware
    ext4: use reserved metadata blocks when splitting extent on endio
    ext4: factor out ext4_map_create_blocks() to allocate new blocks
    ext4: introduce seq counter for the extent status entry
    ext4: add a new iomap aops for regular file's buffered IO path
    ext4: implement buffered read iomap path
    ext4: implement buffered write iomap path
    ext4: implement writeback iomap path
    ext4: implement mmap iomap path
    ext4: implement zero_range iomap path
    ext4: writeback partial blocks before zeroing out range
    ext4: fall back to buffer_head path for defrag
    ext4: partial enable iomap for regular file's buffered IO path
    filemap: support disable large folios on active inode
    ext4: enable large folio for regular file with iomap buffered IO path
    ext4: don't mark IOMAP_F_DIRTY for buffer write
    ext4: add mount option for buffered IO iomap path


author: Wenlong Zhang<zhangwenlong@loongson.cn> - 17.2.5-5
changelog:
  - add loongarch64 support for double-conversion
  - add loongarch64 support for fast_float
  - add loongarch64 support for ARROW_CPU_FLAG
  - add loongarch64 support for boost 1.74
  - add loongarch64 support for pmdk in ceph-17.2.5


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.21-8
changelog:
  - fix sieve crash when there are two missing optional scripts
  - Do not use deprecated OpenSSL v3 ENGINE API
  - Drop dependency on libstemmer on RHEL


author: huangdengdui <huangdengui@huawei.com> - 23.11-19
changelog:
  Support more VLAN fields matching for hns3 and sync a bugfix
   - net/hns3: add Rx DMA address align check
   - net/hns3: support more VLAN fields matching


author: huangdengdui <huangdengui@huawei.com> - 23.11-24
changelog:
  Sync some patchs from upstreaming, includind some bugfixes, hns3 pmd
   flow rule priority feature, hns3 pmd outer VLAN flow match feature,
   and support dump reigser names and filter.
   This patch set is modified as follows:
   - net/hns3: fix cannot fully use hardware flow director table
   - net/hns3: fix error code for repeatedly create counter
   - net/hns3: support flow rule priority
   - common/nfp: use new kvargs process API
   - net/tap: use new kvargs process API
   - net/sfc: use new kvargs process API
   - kvargs: rework process API
   - net/hns3: fix variable type
   - net/hns3: fix pointer offset
   - net/hns3: fix error log
   - net/hns3: support filtering registers by module names
   - net/hns3: support reporting names of registers
   - net/hns3: refactor register dump
   - net/hns3: remove separators between register module
   - net/hns3: fix dump counter of registers
   - net/hns3: remove some basic address dump
   - telemetry: register command with private argument
   - ethdev: fix race on ports in telemetry endpoints
   - ethdev: add telemetry command for registers
   - ethdev: add report of register names and filter
   - net/hns3: support outer VLAN flow match
   - net/hns3: register VLAN flow match mode parameter
   - net/hns3: support general tunnel flow match
   - net/hns3: restrict tunnel flow rule to one header
   - net/hns3: remove ROH devices
   - net/hns3: dump queue head and tail pointer info
   - dmadev: fix potential null pointer access
   - net/hns3: verify reset type from firmware
   - ethdev: verify queue ID in Tx done cleanup


author: Xiaotian Wu <wuxiaotian@loongson.cn> - 202402-6
changelog:
  - chore: Update LoongArch virtual machine
  - patch from anolis 0023-Platform-Loongson-Remove-minimium-memory-size-limita.patch
  - patch from anolis 0024-Platform-Loongson-Modify-loongarch-uefi-firmware-siz.patch


author: gaochang <gc-taifu@linux.alibaba.com> - 202402-7
changelog:
  - chore: Fix CVE-2023-45236/45237 regression
  - patch form anolis Fix boot failure on aarch64 platform


author: Jiannan Yin <jiannan@nfs-hlj.com> - 4.15.0-2
changelog:
  - Remove fence-agents-amt due to missing amtterm
  - Remove fence-agents-amt-ws due to missing python3-openwsman
  - Remove fence-agents-aws due to missing python3-boto3
  - Remove fence-agents-azure-arm due to missing
    python3-azure-common
    python3-azure-identity
    python3-azure-mgmt-compute
    python3-azure-mgmt-network
    python3-msrestazure
  - Remove fence-agents-gce due to missing python3-google-api-python-client


author: yinbin <yinbin8@huawei.com> - 1.0.2-77
changelog:
  - openGauss: support kernel connnect
  - xdp: support stack bind numa
  - CFG: fix xdp iface check error
  - fix build error in 2003SP4
  - cfg: show dpdk args after dpdk_adjust_args
  - fix free null pointer when no matching device is found
  - update test/unitest/ltran/ltran_param_test.c.
  - Fix the wrong spelling description in the notes and logs
  - LWIP: adjust position of shutdown in callback of connect
  - fix socket of control thread is overwirtten due to another primary process start


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-79
changelog:
  - cfg: notify that it's unsupported, when stack_num > 1
  - fix errno == ETIMEFOUT
  - fix epoll and recv threads blocked on the same semaphore. data cannot be read in recv thread.
  - fix rpc pool leak, when thread exits
  - remove app_bind_numa check from exclude_cpus
  - openGauss: fix connection attempt failed
  - openGauss: fix gs_ctl switchover failed


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-80
changelog:
  - Connect: execute lwip connect if dst_ip and host_ip are in the same network.
  - kernerl bind: add ipv6 add check
  - openGauss unsupport_tcp_optname
  - fix a contention issue when rpc pools are added to rpc_pool_array


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-82
changelog:
  - DUMP: fix abnomal printing in the dump process.
  - SIGNAL: Adjust hijack sigal table to hijack SIGABRT SIGQUIT and delet SIGKILL
  - SIGNAL: Adjust sigaction function to keep lstack signal function executed successfully.


author: tingfu <tingfu@nfs-hlj.com> 10.02.1-2.2
changelog:
  - sec: #10659,fix CVE-2024-46951 CVE-2024-46952 CVE-2024-46953
  - CVE-2024-46954 CVE-2024-46956 CVE-2024-29506 CVE-2024-29509


author: tingfu <tingfu@nfs-hlj.com> 10.02.1-2.3
changelog:
  - sec: #14031,fix CVE-2024-46955 CVE-2025-27830 CVE-2025-27831
  - CVE-2025-27832 CVE-2025-27833 CVE-2025-27834 CVE-2025-27835
  - CVE-2025-27836


author: Meidan Li <limeidan@loongson.cn> - 1.20.9-2
changelog:
  - cmd/asm: add RDTIME{L,H}.W, RDTIME.D support for loong64
  - runtime: implement cputicks with the stable counter on loong64
  - runtime: remove the fake mstart caller in systemstack on linux/loong64
  - cmd/internal/obj/loong64: save LR after decrementing SP
  - runtime: refactor the linux/loong64 entrypoint
  - cmd/internal/obj/loong64: remove invalid branch delay slots
  - runtime: calculate nanoseconds in usleep on linux/loong64
  - cmd/internal/obj: remove redundant cnames on loong64
  - runtime: save/fetch g register during VDSO on loong64
  - runtime: save/restore callee-saved registers in loong64's sigtramp
  - runtime: add comment for sys_linux_loong64
  - runtime: mark morestack_noctxt SPWRITE for linux/loong64
  - cmd/internal/obj/loong64: add the PCALAU12I instruction for reloc use
  - cmd/internal/obj/loong64, cmd/link/internal/loong64: switch to LoongArch ELF psABI v2 relocs
  - runtime: add support for --buildmode=c-shared on loong64
  - cmd/compile: add support for --buildmode=c-shared on loong64
  - cmd/internal/obj/loong64, cmd/internal/objabi: add c-shared relocations on loong64
  - cmd/link: add support for --buildmode=c-shared on loong64
  - cmd/internal/sys: enable c-shared feature on loong64
  - cmd/dist, misc/cgo/testcshared: enable c-shared test on loong64
  - cmd/link, cmd/internal: in shared mode, change to use IE mode to access TLS variables
  - cmd/compile, cmd/dist, cmd/go, internal: enable buildmode=pie for linux/loong64
  - net: disable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV
  - enable c-archive test on linux/loong64
  - cmd/internal, cmd/link: remove invalid GOT relative relocations
  - runtime: no need to save these registers in load_g&save_g
  - cmd/internal/obj/loong64: add support for movgr2cf and movcf2gr instructions
  - runtime: save and restore fcc registers in async preempt on loong64
  - cmd,cmd/vendor: pick up updates for golang.org/x/arch/loong64
  - cmd/internal/objfile: add loong64 disassembler support
  - cmd/{compile,link,internal},runtime: support -buildmode=shared for loong64
  - cmd/{link,internal}: support -buildmode=plugin for loong64
  - cmd/dist/test: enable buildmode={shared,plugin} test for loong64
  - runtime: enable memory sanitizer on loong64
  - runtime: enable address sanitizer on loong64
  - cmd/link: workaround linkshared test errors on loong64.
  - runtime: remove the meaningless offset of 8 for duffzero on loong64
  - cmd/compiler: remove the meaningless offset of 8 for Lowered{Zero,Move} on loong64
  - cmd/compile/internal, runtime: use NOOP for hardware NOPs on loong64
  - cmd/link/internal/loong64: use BREAK 0 as the code pad sequence
  - cmd/asm, runtime: remove the RSB register from loong64
  - cmd/internal/obj/loong64: realize all unconditional jumps with B/BL
  - cmd/internal/obj/loong64: clean up code for short conditional branches
  - cmd/internal/obj/loong64: assemble BEQ/BNEs comparing with 0 as beqz/bnez
  - cmd/internal/obj/loong64: remove Optab.family and reorganize operand class fields
  - cmd/asm: support the PCALIGN directive on loong64
  - internal/bytealg, runtime: align some loong64 asm loops to 16-byte boundaries
  - cmd/link: bump loong64 function alignment to 16 bytes
  - cmd/compile: optimize multiplication on loong64
  - cmd/compile: split DIVV/DIVVU op on loong64
  - cmd/internal/obj/loong64: auto-align loop heads to 16-byte boundaries
  - cmd/internal/obj/loong64: add atomic memory access instructions support
  - cmd/compiler,runtime/internal/atomic: optimize xchg and xchg64 on loong64
  - cmd/compiler,runtime/internal/atomic: optimize xadd and xadd64 on loong64
  - cmd/compiler,runtime/internal/atomic: optimize And{32,8} and Or{32,8} on loong64
  - Revert "cmd/link: workaround linkshared test errors on loong64."
  - syscall: implement Ptrace{Set,Get}Regs using PTRACE_{GET,SET}REGSET on all linux platforms
  - cmd/internal/obj/loong64: remove the invalid plan9 format of the BREAK instruction


author: Meidan Li <limeidan@loongson.cn> - 1.20.9-3
changelog:
  - api: add new relocations numbered 101 to 109 for loong64
  - cmd/link: add new relocations numbered 101 to 109 for loong64
  - cmd/link/internal/loadelf: add additional relocations for loong64
  - cmd/link/internal/loadelf: remove useless relocation size information of loong64
  - cmd/internal, cmd/link: unify the relocation naming style of loong64
  - cmd/internal/obj/loong64: using LookupABI to find duff{copy,zero} when rewriting GOT
  - all: delete loong64 non-register ABI fallback path
  - internal/abi, internal/buildcfg: always enable register ABI on loong64
  - cmd/compile, internal/buildcfg: enable regABI on loong64, and add loong64 in test func hasRegisterABI
  - runtime/internal/syscall: use ABIInternal for Syscall6 on loong64
  - cmd/compile: fix If lowering on loong64
  - cmd/internal/obj: set morestack arg spilling and regabi prologue on loong64
  - runtime: add regABI support in memclr and memmove functions on loong64
  - internal/bytealg: add regABI support in bytealg functions on loong64
  - reflect, runtime: add reflect support for regABI on loong64
  - runtime: support regABI and add spill functions in runtime for loong64
  - runtime: make duff device as ABIInternal for loong64
  - cmd/compile: update loong64 CALL* ops
  - cmd/compile/internal: add spill support for loong64 regABI
  - cmd/compile/internal: add register info for loong64 regABI
  - internal/abi: define loong64 regABI constants
  - cmd/compile,cmd/internal,runtime: change registers on loong64 to avoid regABI arguments
  - cmd/compile: add ABI register definations for loong64
  - cmd/compile, cmd/internal, runtime: change the registers used by the duff device for loong64
  - cmd/link/internal/loadelf: correct the relocation size of R_LARCH_64
  - cmd/link/internal/loong64: correct the glibc dynamic linker path.
  - cmd/internal/obj/loong64: recheck jump offset boundary after auto-aligning loop heads
  - cmd/internal/obj/loong64: correct the instruction format of plan9 assembly NOOP
  - cmd/compiler,runtime/internal/atomic: Implementing {And,Or}{32,8} using am{and,or}dbw on loong64
  - cmd/compiler,runtime/internal/atomic: Implementing xadd{,64} using amadddb{w,d} on loong64
  - cmd/compiler,runtime/internal/atomic: Implementing xchg{,64} using amswapdb{w,d} on loong64
  - internal/sysinfo: print cpu type from cpuinfo when internal cpu name is empty on Linux


author: chenguoqi <chenguoqi@loongson.cn> - 1.21.10-2
changelog:
  - add buildmode={plugin,shared} support on linux/loong64
  - asan and msan support on linux/loong64
  - loong64 disassembler support
  - add atomic memory access instructions support
  - optimize atomic xchg and xchg64 on loong64
  - optimize atomic xadd and xadd64 on loong64
  - optimize atomic And{32,8} and Or{32,8} on loong64
  - asm: recheck jump offset boundary after auto-aligning loop heads
  - cmd/link/internal/loadelf: correct the relocation size of R_LARCH_64
  - enable regabi support on loong64
  - add race support on loong64


author: shangyb <yibin@nfschina.com> - 2.12-16
changelog:
  - sec: #12526,fix CVE-2024-45781 CVE-2024-45782 CVE-2024-56737
        CVE-2024-45780 CVE-2024-45783 CVE-2024-49504 CVE-2025-0624
        CVE-2024-45774 CVE-2024-45775 CVE-2025-0622 CVE-2024-45776
        CVE-2024-45777 CVE-2025-0690 CVE-2025-1118 CVE-2024-45778
        CVE-2024-45779 CVE-2025-0677 CVE-2025-0684 CVE-2025-0685
        CVE-2025-0686 CVE-2025-0689 CVE-2025-0678 CVE-2025-1125


author: Zhou Nan <zhounan@nfschina.com> 1.0-8
changelog:
  - build: update URL address
  - Remove dependency packages such as ansible
  - Resolved the UI freeze issue when executing commands in the G510 environment.
  - Modified Ansible command execution to run asynchronously, improving responsiveness 
  - and overall user experience.
  - Removed or disabled configuration items that are not applicable to the G510 environment, 
  - reducing potential errors and confusion.


author: shangyb <yibin@nfschina.com> - 2.44.3-1.2
changelog:
  - sec: #13962,fix CVE-2025-24150
  - webkitgtk-2.44.3-Disable-DMABuf-renderer-for-NVIDIA-proprietary-drivers.patch


author: zhuyunfei <zhuyunfei@nfschina.com> - 1.0.0-m5.4
changelog:
  - build: add Requires hwinfo acpi cups
  - feat: #1940 system interface selftest and fix bugs on virtual machine


author: chunchao <chunchao@nfschina.com> - 2.57.1-1.1
changelog:
  - build: #14297, fix undeclared binary references
  - backport from anolis stream
  - Update to 2.57.1 from 2.56.3
  - Migrated to SPDX license
  - Add patches to fix FTBFS by updating time crate
    [Patches cherry-pick from c10s. Original changelog:
    - Fix FTBFS by updating time crate(2.57.1-9)]


author: shangyb <yibin@nfschina.com> - 2.74.3-1.4
changelog:
  - sec: #14913,fix  CVE-2025-32906 CVE-2025-32908 CVE-2025-32909
  - CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913
  - CVE-2025-32914 CVE-2025-46420


author: shangyb <yibin@nfschina.com> 3.4.2-1.2
changelog:
  - choer: Modify the macro %{EVR} for 3.4.2-1.5.1nfs6
    remove %generate_compatibility_deps
    remove libsoup-3.0.dump


author: shangyb <yibin@nfschina.com> 3.4.2-1.2
changelog:
  - choer: Modify the macro %{EVR} for 3.4.2-1.6.1nfs6
    remove %generate_compatibility_deps
    remove libsoup-3.0.dump


author: shangyb <yibin@nfschina.com> - 3.4.2-1.6
changelog:
  - sec: #14659,fix CVE-2025-32906 CVE-2025-32908 CVE-2025-32909 CVE-2025-32910
  - CVE-2025-32911 CVE-2025-32912 CVE-2025-32913 CVE-2025-32914 CVE-2025-46420
  - CVE-2025-46421


author: shangyb <yibin@nfschina.com> 3.4.2-1.2
changelog:
  - choer: Modify the macro %{EVR} for 3.4.2-1.7.1nfs6
    remove %generate_compatibility_deps
    remove libsoup-3.0.dump


author: gcdota930915 <taifu.gc@alibaba-inc.com> 37.0-3
changelog:
  - Remove nano-default-editor requirement in runtime-install.tmpl by patch
  - Enable dbus_daemon service by patch
  - Edit the previous changelog record


author: Kaiqiang Wang <wangkaiqiang@inspur.com> - 8.0.37-1
changelog:
  - update to 8.0.37
  - fix CVE-2024-21096
  - fix CVE-2024-21062
  - fix CVE-2024-21054
  - fix CVE-2024-21102
  - fix CVE-2024-21008
  - fix CVE-2024-21060
  - fix CVE-2024-21051
  - fix CVE-2024-21057
  - fix CVE-2024-21013
  - fix CVE-2024-21015
  - fix CVE-2024-21055
  - fix CVE-2024-21053
  - fix CVE-2024-20994
  - fix CVE-2024-21056
  - fix CVE-2024-21052
  - fix CVE-2024-20998
  - fix CVE-2024-21047
  - fix CVE-2024-21087
  - fix CVE-2024-20993
  - fix CVE-2024-21061
  - fix CVE-2024-21009
  - fix CVE-2024-21069
  - fix CVE-2024-21000
  - fix CVE-2024-21049
  - fix CVE-2024-21050


author: tingfu <tingfu@nfs.hlj.com> - 8.0.41-1
changelog:
  - sec: #12155,update to 8.0.41 fix CVE-2024-21193 CVE-2024-21194 CVE-2024-21196 
  CVE-2024-21197 CVE-2024-21198 CVE-2024-21199 CVE-2024-21200 CVE-2024-21201
  CVE-2024-21203 CVE-2024-21204 CVE-2024-21207 CVE-2024-21209 CVE-2024-21212
  CVE-2024-21213 CVE-2024-21218 CVE-2024-21219 CVE-2024-21230 CVE-2024-21231
  CVE-2024-21232 CVE-2024-21236 CVE-2024-21237 CVE-2024-21238 CVE-2024-21239
  CVE-2024-21241 CVE-2024-21243 CVE-2024-21244 CVE-2024-21247 CVE-2024-20996
  CVE-2024-21125 CVE-2024-21127 CVE-2024-21129 CVE-2024-21130 CVE-2024-21134
  CVE-2024-21135 CVE-2024-21137 CVE-2024-21142 CVE-2024-21157 CVE-2024-21159
  CVE-2024-21160 CVE-2024-21162 CVE-2024-21163 CVE-2024-21165 CVE-2024-21166
  CVE-2024-21171 CVE-2024-21173 CVE-2024-21176 CVE-2024-21177 CVE-2024-21179
  CVE-2024-21185 CVE-2025-21490 CVE-2025-21491 CVE-2025-21492 CVE-2025-21493
  CVE-2025-21494 CVE-2025-21497 CVE-2025-21499 CVE-2025-21566 CVE-2025-21567
  CVE-2025-21500 CVE-2025-21501 CVE-2025-21503 CVE-2025-21504 CVE-2025-21505
  CVE-2025-21518 CVE-2025-21519 CVE-2025-21522 CVE-2025-21523 CVE-2025-21525
  CVE-2025-21529 CVE-2025-21531 CVE-2025-21534 CVE-2025-21536 CVE-2025-21540
  CVE-2025-21543 CVE-2025-21555 CVE-2025-21559


author: shangyb <yibin@nfschina.com> - 8.0.42-1.1
changelog:
  - sec: #14660,update to 8.0.42
  - fix CVE-2025-21574 CVE-2025-30683 CVE-2025-30684 CVE-2025-30685
  - CVE-2025-21575 CVE-2025-21577 CVE-2025-21579 CVE-2025-21580 CVE-2025-21581
  - CVE-2025-21588 CVE-2025-21583 CVE-2025-21584 CVE-2025-21585 CVE-2025-30682
  - CVE-2025-30687 CVE-2025-30688 CVE-2025-30689 CVE-2025-30693 CVE-2025-30695
  - CVE-2025-30696 CVE-2025-30699 CVE-2025-30704 CVE-2025-30705 CVE-2025-30706
  - CVE-2025-30710 CVE-2025-30714 CVE-2025-30715 CVE-2025-30721 CVE-2025-30722


author: chaodong <chaodong@nfschina.com> - 2.10-3.3
changelog:
  - fix: #13783, add nmcli connection up/down ifr_name to ifconfig ifr_name up/down. net-tools-2.10-fix-task#13783.patch


author: ziming <ziming@nfschina.com> - 6.2411.0.14.1nfs6
changelog:
  - Backend Date:    Mon Dec 09 14:16:57 2024 +0800
  - Frontend Date:   Mon Dec 09 14:16:57 2024 +0800
  - 脚本策略、文件管理、镜像管理等


author: wangxiuyan <xiuyan@nfschina.com> - 6.2411.0.15.1nfs6
changelog:
  - Backend Date:    Mon Dec 16 13:29:41 2024 +0800
  - Frontend Date:   Fri Dec 13 18:12:21 2024 +0800
  - 构建iso bug修复


author: wangxiuyan <xiuyan@nfschina.com> - 6.2412.0.1.1nfs6
changelog:
  - Backend Date:   Fri Jan 3 17:07:25 2025 +0800
  - Frontend Date:   Fri Jan 3 17:31:14 2025 +0800
  - 策略重构
  - 任务优化
  - bug修复


author: wangxiuyan <xiuyan@nfschina.com> - 6.2412.0.2.1nfs6
changelog:
  - Backend Date:   Tue Jan 7 11:19:22 2025 +0800
  - Frontend Date:   Tue Jan 7 11:28:59 2025 +0800
  - 策略bug修复


author: wangxiuyan <xiuyan@nfschina.com> - 6.2412.0.3.1nfs6
changelog:
  - Backend Date:   Tue Jan 8 11:19:22 2025 +0800
  - Frontend Date:   Tue Jan 8 11:28:59 2025 +0800
  - 策略bug修复


author: wangxiuyan <xiuyan@nfschina.com> - 6.2412.0.4.1nfs6
changelog:
  - Backend Date:   Tue Jan 9 11:19:22 2025 +0800
  - Frontend Date:   Tue Jan 9 11:28:59 2025 +0800
  - bug修复


author: wangxiuyan <xiuyan@nfschina.com> - 6.2412.0.5.1nfs6
changelog:
  - Backend Date:   Fri Jan 10 18:39:28 2025 +0800
  - Frontend Date:   Fri Jan 10 18:08:09 2025 +0800
  - bug修复


author: wangxiuyan <xiuyan@nfschina.com> - 2501.1.1nfs6
changelog:
  - Backend Date:   Fri Jan 10 18:39:28 2025 +0800
  - Frontend Date:   Fri Jan 10 18:08:09 2025 +0800
  - adaptation-for-6.0


author: wangxiuyan <xiuyan@nfschina.com> - 2501.2.1nfs6
changelog:
  - Backend Date:   Thu Jan 16 00:44:46 2025 +0800
  - Frontend Date:   Fri Jan 10 18:08:09 2025 +0800
  - 适配arm loongarch


author: zhouchang <zhouchang@nfschina.com> - 1.0-2
changelog:
  - add Run dependencies grafana prometheus mariadb-server expect.
  - add init django、init grafana、init mariadb


author: zhouchang <zhouchang@nfschina.com> - 1.0-4
changelog:
  - feat:#12047 #11567,新增硬件兼容性检测功能、vnc server初始化功能 syslog初始化功能
  - add-hardware-compatibility-check.patch


author: fgq <guoqing@nfschina.com> - 1.0-5
changelog:
  * feat:#11568,#12109 新增软件兼容性检测功能、操作系统跨版本兼容性分析功能
  - add add-software-compatibility-detection.patch
  - add add-os-Compatibility-version-check.patch


author: zhouchang<zhouchang@nfschina.com> -1.0-8
changelog:
  - feat:#13067 新增一键诊断功能及内置脚本
  - add add-diag-auto.patch
  - add add-fix-shell-script.patch
  - add add-ipmitool-event-log.patch


author: yangxinyu <yangxinyu@nfschina.com> - 1.0-34
changelog:
  - 修复软件包安装不上问题，修复卸载时程序卡住问题，增加图形和配置界面通过配置文件开启关闭功能
  - nfs-solncenter-fix-installfaild-uninstalltolong-ConfigGNUswitch.patch


author: chenyanpanHW <chenyanpan@huawei.com> - 2.0.0-26
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/openslp-2.0.0-multicast-set.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/openslp-2.0.0-notify-systemd-of-start-up.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/openslp-2.0.0-null-pointer-deref.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/openslp-2.0.0-openssl-1.1-fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/openslp-2.0.0-cve-2016-7567.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/openslp-2.0.0-cve-2017-17833.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2012-4428-fix-handling-of-string-list-in-slp_common-c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/Fix-slp_iface-c-comma-expression-so-it-works-as-designed.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/Daemon-sends-wrong-service-reply-when-security-is-enabled.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/Fix-DAAddresses-hostname-resolution-issue.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/Change-default-slpreg-connection-from-UDP-to-TCP.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/Fix-interface-parsing-code-to-look-for-null-ifc-addrs.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/Fix-broadcast-functionality.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/Properly-initialize-xcastsocks-for-error-exit.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/Fix-xrealloc-to-properly-free-original-pointer-on-resize.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2019-5544.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: xingwei <xingwei14@h-partners.com> - 2.0.0-27
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Introduce epoch command to slove package upgrade failure problem


author: David Sommerseth <davids@openvpn.net> - 2.6.3-1
changelog:
  - Update to upstream OpenVPN 2.6.3
  - Remove BF-CBC from the --data-ciphers list in openvpn-server@.service
  - Add Recommends dependency to kmod-ovpn-dco (external Copr repo)


author: David Sommerseth <davids@openvpn.net> - 2.6.7-1
changelog:
  - Update to upstream OpenVPN 2.6.7
  - Fixes CVE-2023-46849, CVE-2023-46850
  - Fix false exit status on pre runtime scriptlet (Elkhan Mammadli <elkhan@almalinux.org>, RHBZ#2239722)
  - Fix regression of systemctl scriptlet globbing issues (RHBZ#1887984); reintroduced in openvpn-2.6.0-1


author: David Sommerseth <davids@openvpn.net> - 2.6.8-1
changelog:
  - Update to upstream OpenPVN 2.6.7
  - Fixes a regression from 2.6.7 resulting in a SIGSEGV (GitHub#449)


author: weiliuhu <liuhu@nfschina.com> -1.5.3-5
changelog:
  - feat: #6388, 0001-add-haitai-ukey-verify.patch
  - feat: #6388, 0001-add-certfile-verify.patch
  - feat: #6389, 0001-add-otpw-verify.patch
  - feat: #6389, 0001-print-cert-info-and-ukey-get-other-user.patch


author: cunshunxia <cunshunxia@tencent.com> - 10.0.0-2
changelog:
  - remove runtime dependence pyOpenSSL which is only used when test.
  - remove six which is not needed anymore.


author: weiliuhu <liuhu@nfschina.com> - 4.18.2-6
changelog:
  - feat: #8008, 0001-gm-rpm-add-sm2-sm3.patch
  - feat: #8008, 0001-gm-change-print-info.patch
  - feat: #8008, 0001-gm-changeprintinfo-rpmconfigfile.patch
  - feat: #8008, 0001-gm-change-sigfile_exist_toverify-gm_logwriteinfile.patch
  - feat: #8008, 0001-gm-add-get-rpmpkg-file-path.patch
  - feat: #8008, 0001-gm-add-sig-switch-to-control-verify.patch
  - feat: #8008, 0001-gm-change-log-and-change-get-cfg-key.patch
  - feat: #8008, 0001-gm-add-install-verify-secadm-passwd.patch
  - feat: #8008, 0001-gm-repair-transaction-rpmtsPrepareEx.patch
  - feat: #8008, 0001-gm-add-two-signinfo.patch
  - feat: #8008, 0001-gm-exec-replace-system.patch
  - feat: #8008, 0001-gm-add-nfssecsdk.patch
  - feat: #8008, 0001-gm-add-bjca-verify.patch
  - feat: #8008, 0001-add-new-sanyuan.patch
  - feat: #8008, 0001-add-read-rpmpkg-calc-sm3-and-then-sm2.patch


author: Zeng Yi <zengyi@nfschina.com> 37.18-2.1
changelog:
  - feat: #9274 add secsysaudit users role and base DAC
  - 0001-secadmsysadmauditadm.patch
  - 0002-loginpriv-secadmsysadmauditadm.patch 
  - 0001-secuseexec.patch


author: weiliuhu <liuhu@nfschina.com> - 2.14.3-6
changelog:
  - feat: #12935, 四级增强, shadow-4.14.3-fix-usermod-not-change.patch
  - feat: #12935, 四级增强, shadow-4.14.3-userdel-s.patch


author: Michel Lind <salimma@fedoraproject.org> - 22.05.9-4
changelog:
  - Consistently use rpmautospec by using %autorelease
  - Fix license: GPLv2 should be GPLv2 or later
  - Use SPDX license identifiers


author: Neil Hanlon <neil@fedoraproject.org> - 22.05.11-1
changelog:
  - Update to 22.05.11 (#2155310)
  - Closes CVE-2023-49933 through CVE-2023-49938; RHBZ bugs:
  - #2254496, #2254499, #2254502, #2254505, #2254507, #2254509


author: zhang_chunjing<zhang_chunjing@hoperun.com> - 1.3.2-1.1
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC: add systemd to BuildRequires to fix install/uninstall errors


author: zhouchang <zhouchang@nfschina.com> - 2.2-2
changelog:
  - add fix-digital_envelope_routines_unsupported.patch
  - fix "Error: error:0308010C:digital envelope routines::unsupported"


author: xunian <xunian@nfschina.com> - 255-9
changelog:
  - fix: #11114 disable networkd in systemd, because of the network has been provided by networkmanager


author: tingfu <tingfu@nfs-hlj.com> - 1:1.20.14-13.3
changelog:
  - sec: #12895,fix CVE-2025-26594 CVE-2025-26595 CVE-2025-26596 CVE-2025-26597
  - CVE-2025-26598 CVE-2025-26599 CVE-2025-26600 CVE-2025-26601


