# changelog

author: Qinyun Tan <qinyuntan@linux.alibaba.com> [6.6.88-4_rc2.an23]
changelog:
  - anolis: sched: Remove fast path for SCHED_COOKIE_MATCH_UNSET (Tianchen Ding)
  - anolis: riscv: config: enable THEAD ERRATA (Ruidong Tian)
  - anolis: riscv: config: enable qemu related config (Ruidong Tian)
  - anolis: Loongarch:Fixed up panic cause by a NULL-pmd (zhangtianyang)
  - LoongArch: Fix early_numa_add_cpu() usage for FDT systems (Huacai Chen)
  - anolis: tpm: Add a driver for Loongson TPM device (Juxin Gao)
  - anolis: LoongArch: 2K3000 GMAC support. (Juxin Gao)
  - LoongArch: Prevent cond_resched() occurring within kernel-fpu (Tianyang Zhang)
  - anolis: drm/amdgpu: Delete multiple defined but unused variables. (Juxin Gao)
  - anolis: iommu: Fixed build warning about la_iommu_setup (Juxin Gao)
  - anolis: mm: Fixed build warning when disable CONFIG_FS_DAX_PMD (Juxin Gao)
  - anolis: Loongarch: Fixed warning about legacy_boot.h when build kernel (Juxin Gao)
  - anolis: irqchip/irq-loongson-eiointc: Delete unused variable (Juxin Gao)
  - selftests: memcg: increase error tolerance of child memory.current check in test_memcg_protection() (Waiman Long)
  - selftests: memcg: allow low event with no memory.low and memory_recursiveprot on (Waiman Long)
  - anolis: sw64: perf: fix perf test 'import perf' in python failed (He Chuyue)
  - mm/hugetlb: fix kernel NULL pointer dereference when replacing free hugetlb folios (Ge Yang)
  - selftests/mincore: Allow read-ahead pages to reach the end of the file (Qiuxu Zhuo)
  - KVM: selftests: access_tracking_perf_test: Add option to skip the sanity check (Maxim Levitsky)
  - KVM: selftests: Extract guts of THP accessor to standalone sysfs helpers (Sean Christopherson)
  - anolis: riscv: config: disable KABI in debug config (Ruidong Tian)
  - anolis: riscv: config: init debug config (Ruidong Tian)
  - anolis: riscv: config: disable kfence on riscv (Ruidong Tian)
  - anolis: arm64: Fix the CPPC ioremap failure (Baolin Wang)
  - anolis: drm/virtio: implement virtio_gpu_shutdown (Xianglai Li)
  - virtgpu: don't reset on shutdown (Michael S. Tsirkin)
  - virtio: break and reset virtio devices on device_shutdown() (Michael S. Tsirkin)
  - anolis: LoongArch: sync kvm head file from upstream (Xianglai Li)
  - anolis: LoongArch: fix migrate issue (Song Gao)
  - anolis: LoongArch: Save and restore CSR.CNTC for hibernation (Xianglai Li)
  - anolis: block: fix request d2c time accouting (Joseph Qi)
  - net: ethtool: Fix the panic caused by dev being null when dumping coalesce (Heng Qi)
  - anolis: ext4: fix typo in mount warning message (Joseph Qi)
  - anolis: mm: duptext: Fix xas_store use-after-free error in the dedup path. (Guanjun)
  - anolis: KVM: SVM: CSV is unsupported if both the firmware with a build ID < 1878 and SME is not in use (hanliyang)
  - anolis: KVM: SVM: The ASID range available for CSV2 guests vary across different firmware (hanliyang)


author: Qinyun Tan <qinyuntan@linux.alibaba.com> [6.6.88-4_rc2.1.an23]
changelog:
  - anolis: mm: Do not flush tlb if async fork is not enabled (Zelin Deng)
  - anolis: sched/fair: fix the bug of task_is_idle() (Cruz Zhao)


author: Qinyun Tan <qinyuntan@linux.alibaba.com> [6.6.88-4.an23]
changelog:
  - anolis: driver/cxl: detect and report cxl fatal event (Mengting Lu)
  - arm64/mm: Drop setting PTE_TYPE_PAGE in pte_mkcont() (Anshuman Khandual)
  - arm64/mm: Re-organize arch_make_huge_pte() (Anshuman Khandual)


author: Qinyun Tan <qinyuntan@linux.alibaba.com> [6.6.88-4.1.1.an23]
changelog:
  - anolis: drivers/iommu: Fix the initialization failure issue of the iommu module (Xianglai Li)
  - anolis: iommu/loongarch: fix potential hung task when error occurred (Hongchen Zhang)
  - anolis: riscv: Fix map all memory to linear space without fixed map size (luohaiyang)


author: NewStart <os@gd-linux.com> - 1.4.0-3
changelog:
  - Fix overly-optimistic kernel version checks
  - https://github.com/smuellerDD/libkcapi/commit/c2af62dcc7a287f3c14f6aaec5724401c1ea470a


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 3.6.5-1
changelog:
  - Update to 3.6.5 to fix CVE-2025-32914 CVE-2025-32906 CVE-2025-32908 
    CVE-2025-32913 CVE-2025-2784


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 4.6.0-1
changelog:
  - Update to 4.6.0 from 4.5.1
  - Remove libtiff-opengl by reason of tiffgt been removed
  - Fix CVE-2023-52355
  - Add patches to fix CVE-2024-7006
  - Remove patch as the new version of tarball already includes changes.
  - Remove patches as this version removes a big number of utilities that 
    have suffered from lack of maintenance over the years
    [Patches cherry-pick from c10s. Original changelog:
    - fix CVE-2024-7006 a null pointer dereference in tif_dirinfo(4.6.0-4)]


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 4.6.0-2
changelog:
  - to #IAGL52
  - Add patch to fix CVE-2023-52356
  - project: TC2024080204
  - Signed-off-by: mgb01105731 <mgb01105731@alibaba-inc.com>


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 2.11.5-5
changelog:
  - to #IBHBVL
  - add patch to fix CVE-2024-40896
  - Project: TC2024080204
  - Signed-off-by: mgb01105731 mgb01105731@alibaba-inc.com


author: Kaiqiang Wang <wangkaiqiang@inspur.com> - 8.0.37-1
changelog:
  - update to 8.0.37
  - fix CVE-2024-21096
  - fix CVE-2024-21062
  - fix CVE-2024-21054
  - fix CVE-2024-21102
  - fix CVE-2024-21008
  - fix CVE-2024-21060
  - fix CVE-2024-21051
  - fix CVE-2024-21057
  - fix CVE-2024-21013
  - fix CVE-2024-21015
  - fix CVE-2024-21055
  - fix CVE-2024-21053
  - fix CVE-2024-20994
  - fix CVE-2024-21056
  - fix CVE-2024-21052
  - fix CVE-2024-20998
  - fix CVE-2024-21047
  - fix CVE-2024-21087
  - fix CVE-2024-20993
  - fix CVE-2024-21061
  - fix CVE-2024-21009
  - fix CVE-2024-21069
  - fix CVE-2024-21000
  - fix CVE-2024-21049
  - fix CVE-2024-21050


author: tomcruiseqi <10762123+tomcruiseqi@user.noreply.gitee.com> - 8.0.42-1
changelog:
  - Update to 8.0.42 to fix CVE-2024-21134 CVE-2024-21130 CVE-2024-21179 CVE-2024-21177 CVE-2024-21173 CVE-2024-21171 CVE-2024-21165 CVE-2024-21163 CVE-2024-21162 CVE-2024-21142 CVE-2024-21125 CVE-2024-21129 CVE-2024-21127 CVE-2024-20996 CVE-2025-24375 CVE-2024-21198 CVE-2024-21203


author: wenxin <wx02272781@alibaba-inc.com> - 8.0.43-1
changelog:
  - update 8.0.43
  - fix cve CVE-2025-50081
  - fix cve CVE-2025-50100
  - fix cve CVE-2025-50104
  - fix cve CVE-2025-50077
  - fix cve CVE-2025-50078
  - fix cve CVE-2025-50079
  - fix cve CVE-2025-50080
  - fix cve CVE-2025-50082
  - fix cve CVE-2025-50083
  - fix cve CVE-2025-50084
  - fix cve CVE-2025-50085
  - fix cve CVE-2025-50086
  - fix cve CVE-2025-50087
  - fix cve CVE-2025-50091
  - fix cve CVE-2025-50093
  - fix cve CVE-2025-50094
  - fix cve CVE-2025-50097
  - fix cve CVE-2025-50099
  - fix cve CVE-2025-50101
  - fix cve CVE-2025-53023


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 3.112-1
changelog:
  - Update to 3.112 for new firefox
  - Remove patch as sw patch Unavailable
  - Add patch to fix build err


author: Hong Wei Qin <qhw01063182@alibaba-inc.com> - 2.5.2-1
changelog:
  - Update to 2.5.0 from 2.5.2
  - Remove patches because bugs are not exist in new version.
  - Add patches to fix CVE-2024-56826 and CVE-2024-52827
  - [Patches cherry-picked from c10s. Original changelog:
    - Fix precedence of casts. (2.5.2-4)]
  - Add patchs to fix build failed


author: Cheng Yang <yc02267530@alibaba-inc.com> - 9.6p1-1
changelog:
  - update to 9.6p1
  - The patch was removed because the new version already included the patch content


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 1:3.0.12-8
changelog:
  - to #IB7HPL
  - add patch to fix CVE-2024-6119
  - Project: TC2024080204
  - Signed-off-by: mgb01105731 mgb01105731@alibaba-inc.com


author: happy_orange <songnannan@linux.alibaba.com> - 5.36.1-13
changelog:
  - rollback to 5.36.1-11 because the CVE-2023-31484 and CVE-2023-31486 has been fixed in perl-CPAN and perl-HTTP-Tiny package.


author: Zhao Hang <wb-zh951434@alibaba-inc.com> - 8.3.15-1
changelog:
  - Update to 8.3.15-1 from 8.2.27-1
  - Migrated to SPDX license
  - Remove patches which already exist in code
  - enable command history in phpdbg, add internal UTC if tzdata is missing and backport Argon2 password hashing in OpenSSL ext
    [Patches cherry-pick from c10s. Original changelog:
    - rebase to 8.3.7
      backport Argon2 password hashing in OpenSSL ext
    - update to 8.3.0RC3 https://fedoraproject.org/wiki/Changes/php83
      add internal UTC if tzdata is missing
      bump to final API/ABI
      switch to nikic/php-parser version 5
      openssl: always warn about missing curve_name
    - rebase to 8.3.12
      enable command history in phpdbg
  ]


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 23.05.0-4
changelog:
  - to #IBHHXM
  - add patch for CVE-2024-56378
  - Project: TC2024080204
  - Signed-off-by: mgb01105731 mgb01105731@alibaba-inc.com


author: Zhao Hang <wb-zh951434@alibaba-inc.com> - 24.02.0-1
changelog:
  - Update to 24.02.0-1 from 23.05.0-4
  - Migrated to SPDX license
  - Remove patch which already exist in code
  - Backport fix for issues found by Coverity
    [Patches cherry-pick from c10s. Original changelog:
     - Backport fix for issues found by Coverity]


author: Funda Wang <fundawang@yeah.net> - 15.4-1
changelog:
  - New version 15.4
  - Add requirement on system-rpm-config for /usr/bin/pg_config,
    as it produces flags linked to /usr/lib/rpm/anolis/anolis-annobin-cc1 &
    /usr/lib/rpm/anolis/anolis-hardened-cc1


author: Bo Ren <rb01097748@alibaba-inc.com> - 3.11.6-9
changelog:
  - fix CVE-2024-9287
  - fix CVE-2024-0450
  - fix CVE-2024-4032
  - fix CVE-2025-4517
  - fix CVE-2024-3219
  - fix CVE-2024-7592
  - fix CVE-2024-8088
  - fix CVE-2023-27043
  - fix CVE-2024-6232
  - fix CVE-2024-6923


author: Xin Jiang <jiangxin@hygon.cn> - 15:7.2.6-2
changelog:
  - Patch0002: 0002-anolis-csv-i386-add-CSV-context.patch
  - Patch0003: 0003-anolis-csv-i386-add-command-to-initialize-CSV-contex.patch
  - Patch0004: 0004-anolis-csv-i386-add-command-to-load-data-to-guest-me.patch
  - Patch0005: 0005-anolis-csv-i386-add-command-to-load-vmcb-to-guest-me.patch
  - Patch0006: 0006-anolis-cpu-i386-populate-CPUID-0x8000_001F-when-CSV-.patch
  - Patch0007: 0007-anolis-csv-i386-CSV-guest-do-not-need-register-unreg.patch
  - Patch0008: 0008-anolis-target-i386-csv-load-initial-image-to-private.patch
  - Patch0009: 0009-anolis-vga-force-full-update-for-CSV-guest.patch
    (Support Hygon CSV3 feature)


author: Liyang Han <hanliyang@hygon.cn> - 15:7.2.6-4
changelog:
  - Patch0010: 0010-doc-update-AMD-SEV-to-include-Live-migration-flow.patch
  - Patch0011: 0011-migration.json-add-AMD-SEV-specific-migration-parame.patch
  - Patch0012: 0012-confidential-guest-support-introduce-ConfidentialGue.patch
  - Patch0013: 0013-target-i386-sev-provide-callback-to-setup-outgoing-c.patch
  - Patch0014: 0014-target-i386-sev-do-not-create-launch-context-for-an-.patch
  - Patch0015: 0015-target-i386-sev-add-support-to-encrypt-the-outgoing-.patch
  - Patch0016: 0016-target-i386-sev-add-support-to-load-incoming-encrypt.patch
  - Patch0017: 0017-kvm-Add-support-for-SEV-shared-regions-list-and-KVM_.patch
  - Patch0018: 0018-migration-add-support-to-migrate-shared-regions-list.patch
  - Patch0019: 0019-migration-ram-add-support-to-send-encrypted-pages.patch
  - Patch0020: 0020-migration-ram-Force-encrypted-status-for-flash0-flas.patch
  - Patch0021: 0021-migration-for-SEV-live-migration-bump-downtime-limit.patch
  - Patch0022: 0022-kvm-Add-support-for-userspace-MSR-filtering-and-hand.patch
  - Patch0023: 0023-anolis-migration-ram-Force-encrypted-status-for-VGA-.patch
  - Patch0024: 0024-anolis-target-i386-sev-Clear-shared_regions_list-whe.patch
  - Patch0025: 0025-anolis-migration-ram-Fix-calculation-of-gfn-correpon.patch
  - Patch0026: 0026-anolis-target-i386-csv-Move-is_hygon_cpu-to-header-f.patch
  - Patch0027: 0027-anolis-target-i386-csv-Read-cert-chain-from-file-whe.patch
  - Patch0028: 0028-anolis-target-i386-csv-add-support-to-queue-the-outg.patch
  - Patch0029: 0029-anolis-target-i386-csv-add-support-to-encrypt-the-ou.patch
  - Patch0030: 0030-anolis-target-i386-csv-add-support-to-queue-the-inco.patch
  - Patch0031: 0031-anolis-target-i386-csv-add-support-to-load-incoming-.patch
  - Patch0032: 0032-anolis-migration-ram-Accelerate-the-transmission-of-.patch
  - Patch0033: 0033-anolis-migration-ram-Accelerate-the-loading-of-CSV-g.patch
  - Patch0034: 0034-anolis-target-i386-csv-Add-support-for-migrate-VMSA-.patch
  - Patch0035: 0035-anolis-target-i386-get-set-migrate-GHCB-state.patch
  - Patch0036: 0036-anolis-target-i386-kvm-Return-resettable-when-emulat.patch
  - Patch0037: 0037-anolis-kvm-Add-support-for-CSV2-reboot.patch
    (Support Hygon CSV/CSV2 live migration, CSV2 reboot)


author: Xin Jiang <jiangxin@hygon.cn> - 15:7.2.6-5
changelog:
  - Patch0038: 0038-anolis-vfio-only-map-shared-region-for-CSV-virtual-m.patch
  - Patch0039: 0039-anolis-linux-headers-update-kernel-headers-to-includ.patch
  - Patch0040: 0040-anolis-csv-i386-add-support-to-migrate-the-outgoing-.patch
  - Patch0041: 0041-anolis-csv-i386-add-support-to-migrate-the-incoming-.patch
  - Patch0042: 0042-anolis-csv-i386-add-support-to-migrate-the-outgoing-.patch
  - Patch0043: 0043-anolis-csv-i386-add-support-to-migrate-the-incoming-.patch
    (Support CSV3 live migration)


author: Liyang Han <hanliyang@hygon.cn> - 15:7.2.6-7
changelog:
  - Patch0045: 0045-anolis-target-i386-sev-Add-support-for-reuse-ASID-fo.patch
    (Support reuse ASID for CSV guests)


author: Liyang Han <hanliyang@hygon.cn> - 15:7.2.6-8
changelog:
  - Patch0046: 0046-target-i386-sev-Fix-incompatibility-between-SEV-and-.patch
    (Fix incompatibility between SEV and CSV on the GET_ID API)


author: Jacob Wang <yungao.wjb@alibaba-inc.com> - 2:8.2.0-1
changelog:
  - Update to 8.2.0
    Remove subpackage of virtiofsd since QEMU upstream deleted the C impl of
    virtiofsd entirely. The alternative is to rewrite it separately in rust.


author: Aubrey Li <aubrey.li@linux.intel.com> - 2:8.2.0-3
changelog:
  - Patch1001: 1001-i386-cpu-Clear-FEAT_XSAVE_XSS_LO-HI-leafs-when-CPUID.patch
  - Patch1002: 1002-i386-cpu-Mask-with-XCR0-XSS-mask-for-FEAT_XSAVE_XCR0.patch
  - Patch1003: 1003-i386-cpuid-Decrease-cpuid_i-when-skipping-CPUID-leaf.patch
  - Patch1004: 1004-i386-cpuid-Move-leaf-7-to-correct-group.patch
    (Backport i386/cpu fixes from upstream 8.2.2)


author: Song Gao <gaosong@loongson.cn> - 2:8.2.0-5
changelog:
  - Patch0003: 0003-hw-loongarch-virt-Align-high-memory-base-address-wit.patch
  - Patch0004: 0004-target-loongarch-Add-timer-information-dump-support.patch
  - Patch0005: 0005-target-loongarch-meson-move-gdbstub.c-to-loongarch.s.patch
  - Patch0006: 0006-target-loongarch-move-translate-modules-to-tcg.patch
  - Patch0007: 0007-linux-headers-Update-to-Linux-v6.7-rc5.patch
  - Patch0008: 0008-linux-headers-Synchronize-linux-headers-from-linux-v.patch
  - Patch0009: 0009-target-loongarch-Define-some-kvm_arch-interfaces.patch
  - Patch0010: 0010-target-loongarch-Supplement-vcpu-env-initial-when-vc.patch
  - Patch0011: 0011-target-loongarch-Implement-kvm-get-set-registers.patch
  - Patch0012: 0012-target-loongarch-Implement-kvm_arch_init-function.patch
  - Patch0013: 0013-target-loongarch-Implement-kvm_arch_init_vcpu.patch
  - Patch0014: 0014-target-loongarch-Implement-kvm_arch_handle_exit.patch
  - Patch0015: 0015-target-loongarch-Restrict-TCG-specific-code.patch
  - Patch0016: 0016-target-loongarch-Implement-set-vcpu-intr-for-kvm.patch
  - Patch0017: 0017-target-loongarch-Add-loongarch-kvm-into-meson-build.patch
  - Patch0018: 0018-hw-intc-loongarch_ipi-Use-MemTxAttrs-interface-for-i.patch
  - Patch0019: 0019-hw-loongarch-virt-Set-iocsr-address-space-per-board-.patch
  - Patch0020: 0020-hw-intc-loongarch_extioi-Add-dynamic-cpu-number-supp.patch
  - Patch0021: 0021-hw-intc-loongarch_extioi-Add-vmstate-post_load-suppo.patch
  - Patch0022: 0022-configure-Add-linux-header-compile-support-for-Loong.patch
  - Patch0023: 0023-target-loongarch-Set-cpuid-CSR-register-only-once-wi.patch
  - Patch0024: 0024-target-loongarch-kvm-Enable-LSX-LASX-extension.patch
  - Patch0025: 0025-target-loongarch-Fix-qtest-test-hmp-error-when-KVM-o.patch
  - Patch0026: 0026-loongarch-Change-the-UEFI-loading-mode-to-loongarch.patch
  - Patch0027: 0027-target-loongarch-Fix-tlb-huge-page-loading-issue.patch
  - Patch0028: 0028-target-loongarch-Fix-qemu-loongarch64-hang-when-exec.patch
  - Patch0029: 0029-target-loongarch-kvm-Add-software-breakpoint-support.patch
  - Patch0030: 0030-hw-intc-loongarch_extioi-Add-virt-extension-support.patch
  - Patch0031: 0031-target-loongarch-kvm-sync-kernel-header-files.patch
  - Patch0032: 0032-hw-intc-loongarch_extioi-Add-virt-extension-support-.patch
  - Patch0033: 0033-target-loongarch-kvm-Add-pmu-support.patch
  - Patch0034: 0034-target-loongarch-Fix-qemu-system-loongarch64-assert-.patch
    (Add LoongArch features and bugfixes)


author: Liyang Han <hanliyang@hygon.cn> - 2:8.2.0-9
changelog:
  - Patch1005: 1005-doc-update-AMD-SEV-to-include-Live-migration-flow.patch
  - Patch1006: 1006-migration.json-add-AMD-SEV-specific-migration-parame.patch
  - Patch1007: 1007-confidential-guest-support-introduce-ConfidentialGue.patch
  - Patch1008: 1008-target-i386-sev-provide-callback-to-setup-outgoing-c.patch
  - Patch1009: 1009-target-i386-sev-do-not-create-launch-context-for-an-.patch
  - Patch1010: 1010-target-i386-sev-add-support-to-encrypt-the-outgoing-.patch
  - Patch1011: 1011-target-i386-sev-add-support-to-load-incoming-encrypt.patch
  - Patch1012: 1012-kvm-Add-support-for-SEV-shared-regions-list-and-KVM_.patch
  - Patch1013: 1013-migration-add-support-to-migrate-shared-regions-list.patch
  - Patch1014: 1014-migration-ram-add-support-to-send-encrypted-pages.patch
  - Patch1015: 1015-migration-ram-Force-encrypted-status-for-flash0-flas.patch
  - Patch1016: 1016-kvm-Add-support-for-userspace-MSR-filtering-and-hand.patch
  - Patch1017: 1017-target-i386-sev-Return-0-if-sev_send_get_packet_len-.patch
  - Patch1018: 1018-migration-ram-Force-encrypted-status-for-VGA-vram.patch
  - Patch1019: 1019-target-i386-sev-Clear-shared_regions_list-when-reboo.patch
  - Patch1020: 1020-migration-ram-Fix-calculation-of-gfn-correpond-to-a-.patch
  - Patch1021: 1021-target-i386-Introduce-header-file-csv.h.patch
  - Patch1022: 1022-target-i386-csv-Read-cert-chain-from-file-when-prepa.patch
  - Patch1023: 1023-target-i386-csv-add-support-to-queue-the-outgoing-pa.patch
  - Patch1024: 1024-target-i386-csv-add-support-to-encrypt-the-outgoing-.patch
  - Patch1025: 1025-target-i386-csv-add-support-to-queue-the-incoming-pa.patch
  - Patch1026: 1026-target-i386-csv-add-support-to-load-incoming-encrypt.patch
  - Patch1027: 1027-migration-ram-Accelerate-the-transmission-of-CSV-gue.patch
  - Patch1028: 1028-migration-ram-Accelerate-the-loading-of-CSV-guest-s-.patch
  - Patch1029: 1029-target-i386-csv-Add-support-for-migrate-VMSA-for-CSV.patch
  - Patch1030: 1030-target-i386-get-set-migrate-GHCB-state.patch
  - Patch1031: 1031-target-i386-kvm-Fix-the-resettable-info-when-emulate.patch
  - Patch1032: 1032-kvm-Add-support-for-CSV2-reboot.patch
    (Support CSV/CSV2 live migration, CSV2 reboot)


author: Liyang Han <hanliyang@hygon.cn> - 2:8.2.0-10
changelog:
  - Patch1033: 1033-target-i386-csv-Add-CSV3-context.patch
  - Patch1034: 1034-target-i386-csv-Add-command-to-initialize-CSV3-conte.patch
  - Patch1035: 1035-target-i386-csv-Add-command-to-load-data-to-CSV3-gue.patch
  - Patch1036: 1036-target-i386-csv-Add-command-to-load-vmcb-to-CSV3-gue.patch
  - Patch1037: 1037-target-i386-cpu-Populate-CPUID-0x8000_001F-when-CSV3.patch
  - Patch1038: 1038-target-i386-csv-Do-not-register-unregister-guest-sec.patch
  - Patch1039: 1039-target-i386-csv-Load-initial-image-to-private-memory.patch
  - Patch1040: 1040-vga-Force-full-update-for-CSV3-guest.patch
  - Patch1041: 1041-vfio-Only-map-shared-region-for-CSV3-virtual-machine.patch
  - Patch1042: 1042-linux-headers-update-kernel-headers-to-include-CSV3-.patch
  - Patch1043: 1043-target-i386-csv-Add-support-to-migrate-the-outgoing-.patch
  - Patch1044: 1044-target-i386-csv-Add-support-to-migrate-the-incoming-.patch
  - Patch1045: 1045-target-i386-csv-Add-support-to-migrate-the-outgoing-.patch
  - Patch1046: 1046-target-i386-csv-Add-support-to-migrate-the-incoming-.patch
    (Support boot CSV3 guest, CSV3 live migration)


author: Liyang Han <hanliyang@hygon.cn> - 2:8.2.0-11
changelog:
  - Patch1047: 1047-target-i386-sev-Fix-incompatibility-between-SEV-and-.patch
  - Patch1048: 1048-target-i386-sev-Add-support-for-reuse-ASID-for-diffe.patch
    (Fix GET_ID API incompatibility issue, support CSV reuse ASID)


author: Yanjing Zhou <zhouyanjing@hygon.cn> - 2:8.2.0-12
changelog:
  - Patch1049: 1049-target-i386-Add-Hygon-Dhyana-v3-CPU-model.patch
  - Patch1050: 1050-target-i386-Add-new-Hygon-Dharma-CPU-model.patch
    (Add Hygon Dhyana-v3 and Dharma CPU model)


author: Song Gao <gaosong@loongson.cn> -2.8.2.0-14
changelog:
  - Patch0036: 0036-target-loongarch-kvm-Fix-VM-recovery-from-disk-failu.patch
  - Patch0037: 0037-target-loongarch-kvm-fpu-save-the-vreg-registers-hig.patch
    (Fix migration bugs and remove unused requires)


author: Depei Yang <yangdepei@hygon.cn> -2.8.2.0-15
changelog:
  - Patch1051: 1051-vfio-Add-vfio-based-mediated-hct-support.patch
    (Add HCT support for hygon platform)


author: Wencheng Yang <yangwencheng@hygon.cn> - 2:8.2.0-16
changelog:
  - Patch1052: 1052-hw-net-virtio-net-Update-event-idx-if-guest-has-made.patch
    (Update virtio-net event idx after double check)


author: Wencheng Yang <yangwencheng@hygon.cn> - 2:8.2.0-17
changelog:
  - Patch1053: 1053-target-i386-csv-Release-CSV3-shared-pages-after-unma.patch
    (Release CSV3 shared pages after unmapping DMA)


author: Wencheng Yang <yangwencheng@hygon.cn> - 2:8.2.0-18
changelog:
  - Patch1054: 1054-virtio-net-Fix-network-stall-at-the-host-side-waitin.patch
    (Fix network stall at the host side waiting for kick)


author: wh02252983 <wh02252983@alibaba-inc.com> - 2:8.2.0-31
changelog:
  - Backport multifd live migration acceleration using HW accelerators
  - add patch to fix CVE-2024-7409
  - add rtc acpi table
  - add patch to fix  CVE-2024-3446


author: wh02252983 <wh02252983@alibaba-inc.com> - 2:8.2.0-32
changelog:
  - update-linux-headers.sh related patches
  - fetch patches about configure and meson from upstream
  - add patch to fix CVE-2024-3567


author: wh02252983 <wh02252983@alibaba-inc.com> - 2:8.2.0-34
changelog:
  - block: Parse filenames only when explicitly requested
  - hw/usb/hcd-ohci: Fix #1510, #303: pid not IN or OUT
  - target/riscv/kvm.c: Fix the hart bit setting of AIA
  - target/riscv/kvm.c: remove group setting of KVM AIA if the machine only has 1 socket
  - target/riscv/kvm: Fix the group bit setting of AIA


author: wh02252983 <wh02252983@alibaba-inc.com> - 2:8.2.0-35
changelog:
  - RISC-V: ACPI: Enable AIA and update RHCT
  - update hct device, to support latest HCT version (HCT2.1)


author: Xiaoping Liu <lxp01404969@alibaba-inc.com> - 3.3.7-1
changelog:
  - update to 3.3.7 from 3.3.6
  - Migrated to SPDX license
  - Fix CVE-2024-41946 CVE-2024-43398 CVE-2024-41123
  - add BuildRequires systemtap-sdt-devel to Fix _systemtap_datadir


author: wh02252983 <wh02252983@alibaba-inc.com> - 3.3.8-1
changelog:
  - update to 3.3.8 to Fix CVE-2025-25186
  - The patch was removed because the new version already included the patch content


author: zhoujiajia111 <zjl02254423@alibaba-inc.com> 4.19.5-4
changelog:
  - add patch to fix CVE-2025-10230,CVE-2025-9640
  - update Source0,Source1 to fix Source download fail


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 1.13.1-5
changelog:
  - Rebuild with xorg-x11-server to fix CVE-2025-49175,CVE-2025-49176,
    CVE-2025-49178,CVE-2025-49179,CVE-2025-49180
  - Delete patch as xorg-x11-server has fix CVE-2025-49175,CVE-2025-49176


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 1:9.0.98-1
changelog:
  - to #IBGRS9 , #IBGRSC , #IBGRSI
  - Update to version 9.0.98 for CVE-2024-56337,CVE-2024-50379,CVE-2024-54677
  - Project: TC2024080204
  - Signed-off-by: mgb01105731 mgb01105731@alibaba-inc.com


author: wh02252983 <wh02252983@alibaba-inc.com> - 1:9.0.105-1
changelog:
  - update to 9.0.105
  - Fix CVE-2025-46701
  - The patch was removed because the new version already included the patch content


author: Xiaoping Liu <lxp01404969@alibaba-inc.com> - 2.10.90-1
changelog:
  - update to 2.10.90 from 2.9.4
  - Remove the patch because the changes already exist upstream
  - lvm2: Try opening for unused device detection harder
  - mdraid: Avoid acquiring system inhibit lock for external array operations
    [Patches cherry-pick from c10s. Original changelog:
    - mdraid: Avoid acquiring system inhibit lock for external array operations. ( 2.10.90-5 )]


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 1.17.1-3
changelog:
  - to #IBGLMU
  - add patch to fix CVE-2024-33655
  - Project: TC2024080204
  - Signed-off-by: mgb01105731 mgb01105731@alibaba-inc.com


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 1:3.24.0-1
changelog:
  - Update to 3.24.0 from 3.21.0
  - Remove patch as the new version of tarball already includes changes


author: wh02252983 <wh02252983@alibaba-inc.com> - 2.48.5-1
changelog:
  - update to 2.48.5 to fix CVE-2025-31273 CVE-2025-31278 CVE-2025-43212
  - CVE-2025-43216 CVE-2025-6558 CVE-2025-43211 CVE-2025-43227 CVE-2025-43228
  - CVE-2025-43240 CVE-2025-43265


author: wenyuzifang <lzx02244079@alibaba-inc.com> - 23.2.5-3
changelog:
  - fix CVE-2024-9632
  - fix CVE-2025-26601
  - fix CVE-2025-26596
  - fix CVE-2025-26594
  - fix CVE-2025-26597
  - fix CVE-2025-26598
  - fix CVE-2025-26600
  - fix CVE-2025-26595
  - fix CVE-2025-26599


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 23.2.5-4
changelog:
  - Add patches to fix CVE-2025-49175,CVE-2025-49176,CVE-2025-49177,
    CVE-2025-49178,CVE-2025-49179,CVE-2025-49180


