# changelog

author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-72
changelog:
  - ub: don't check ers addr size is power of 2
  - ub: support process msg code exch
  - ub: replace malloc with g_malloc0
  - Migration/urma:explicitly set URMA JFS tp_type to URMA_CTP
  - MAINTAINERS: add me as maintainer to virtio-snd
  - virtio-snd: remove TODO comments
  - virtio-snd: handle 5.14.6.2 for PCM_INFO properly(CVE-2026-3196)
  - virtio-snd: fix max_size bounds check in input cb(CVE-2026-3195)
  - virtio-snd: tighten read amount in in_cb(CVE-2026-3195)
  - hw/arm: Close unreleased out_fault_fd
  - pci: avoid the info qtree crash caused by arm-smmuv3-accel


author: Donghua Huang <huangdonghua3@h-partners.com> - 50.0-32
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: libhns: Increase input parameter checks and adjust inline data size.


author: Donghua Huang <huangdonghua3@h-partners.com> - 50.0-36
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: libhns: Fix wrong WQE data in new post send API when QP wraps around


author: jinlun<jinlun@huawei.com> - 40.7-1
changelog:
  - update version to 40.7
    - Allow chronyd-restricted read chronyd key files
    - Allow systemd-sleep set attributes of efivarfs files
    - Make name_zone_t and named_var_run_t a part of the mountpoint attribute
    - Update cifs interfaces to include fs_search_auto_mountpoints()
    - Allow map xserver_tmpfs_t files when xserver_clients_write_xshm is on
    - Add map_read map_write to kernel_prog_run_bpf
    - Add policy for nvme-stas
    - Make new virt drivers permissive
    - Allow named and ndc use the io_uring api
    - Allow sssd send SIGKILL to passket_child running in ipa_otpd_t


author: xinghe <xingheyd@163.com> - 7:6.6-8
changelog:
  - Type:cves
  - ID:CVE-2026-33526 CVE-2026-33515 CVE-2026-32748
  - SUG:NA
  - DESC:fix CVE-2026-33526 CVE-2026-33515 CVE-2026-32748


author: shixuantong <shixuantong1@h-partners.com> - 1.0.3-25
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix residual files exist after the rpms is uninstalled
         merge pyxalarm to sysSentry rpm


author: shixuantong <shixuantong1@h-partners.com> - 1.0.3-28
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix potential overflow in report_result()
         fix potential memory leak issues in sentry_msg_monitor
         set log level in sentry_msg_monitor
         fix the problem of checking the return value of the pthread_create()
         xalarm: add sysSentry.service status monitoring
         Implement systemd socket activation for xalarm and fix socket permission issues
         refact xalarm_unregister_event and xalarm_report_event API
         refact sentryctl set cmd
         implement systemd socket activation for sysSentry


author: shixuantong <shixuantong1@h-partners.com> - 1.0.3-29
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix potential resource leak in get_debugfs_dir()
         fix potential buffer overflow in create_trace_instance()
         fix potential double free in sentry_msg_monitor
         add cmd security check
         add exception handling for sentryCollector
         fix potential DoS attack risks and resource leaks
         change some msg log level
         fix memset usage
         fix potential memory leak in print_map_res()
         fix potential null pointer reference in extract_device_name()
         fix crash in cpu_alarm
         use snprintf instead of sprintf/strcpy/strncpy
         fix build warning
         check cpu info in parse_patrol_result()
         fix potential null pointer reference in catlib
         fix socket fd leaks
         fix NameError in task_get_alarm()


author: shixuantong <shixuantong1@h-partners.com> - 1.0.3-30
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix fd leaks in get_socket_id()
         fix resource leaks in ebpf_collector
         fix fd leaks in sysSentry and xalarmd service
         fix potential overflow which cause the allocated memory to be too small
         fix fd leaks in sentry_msg_monitor


author: huwentao <huwentao19@h-partners.com> - 1.0.3-31
changelog:
  - Type:feature
  - CVE:NA
  - SUG:NA
  - DESC:rename bmc_block_io to bmc_ras_sentry
         BMC Ras Sentry add config bmc_events
         Support report bmc block ras sentry
         bmc_ras_sentry add new way to get disk SN to block name mapping
         bmc_ras_sentry add way to get disk SN


author: wangkai <13474090681@163.com> - 1:9.0.100-1
changelog:
  - Update to 9.0.100 for fix CVE-2024-56337
  - Add a check to ensure that, if one or more web applications are potentially vulnerable to CVE-2024-56337,
    the JVM has been configured to protect against the vulnerability and to configure the JVM correctly if not.


author: gaihuiying <eaglegai@163.com> - 1.17.1-15
changelog:
  - Type:CVE
  - CVE:CVE-2025-11411
  - SUG:NA
  - DESC:Additional fix for CVE-2025-11411 to include YXDOMAIN and non-referral nodata answers in the mitigation


author: cenhuilin <cenhuilin@kylinos.cn> - 2.39.1-29
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:lsblk: fix memory leak [coverity scan]
         lsblk: fix possible use-after-free


author: yixiangzhike <yixiangzhike007@163.com> - 2.39.1-31
changelog:
  - backport community patches
      fix columns reduction
      fix memory leak issue in read_Subid_range
      fix off-by-one in maximum last sector calculation
      fix memory corruption in size calculation
      fix memory corruption in read buffers


author: Funda Wang <fundawang@yeah.net> - 1.20.11-37
changelog:
  - fix CVE-2025-26594, CVE-2025-26595, CVE-2025-26596,
    CVE-2025-26597, CVE-2025-26598, CVE-2025-26599
    CVE-2025-26600, CVE-2025-26601


author: Wang Kui <wangkui35@h-partners.com> - 1.20.11-41
changelog:
  - Fix CVE-2025-49176 CVE-2025-49179 CVE-2025-49180 CVE-2022-49737
    CVE-2025-62229 CVE-2025-62230 CVE-2025-62231


author: lingsheng <ultra_planet@qq.com> - 1.20.11-42
changelog:
  - fix CVE-2022-49737 CVE-2025-49175 CVE-2025-49176 CVE-2025-49178 CVE-2025-49179 CVE-2025-49180 CVE-2025-62229 CVE-2025-62230 CVE-2025-62231


