# changelog

author: mgb01105731 <mgb01105731@alibaba-inc.com> - 8.4.0-6
changelog:
  - cherry-pick fix CVE-2024-2004 and add Epoch for requires and provides
  - Fix CVE-2023-46218 and CVE-2023-46219


author: lzq11122 <lzq02303433@alibaba-inc.com> - 8.4.0-13
changelog:
  - Add patch to fix CVE-2025-15224,CVE-2025-14017,CVE-2025-14819,CVE-2025-14524,CVE-2025-15079,CVE-2025-10966


author: Xiaotian Wu <wuxiaotian@loongson.cn> - 202402-6
changelog:
  - Update LoongArch virtual machine
  - 0023-Platform-Loongson-Remove-minimium-memory-size-limita.patch
  - 0024-Platform-Loongson-Modify-loongarch-uefi-firmware-siz.patch


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 2.5.0-3
changelog:
  - to #IAGL53:CVE-2023-52425
  - add patch to fix CVE-2023-52425
  - Project: TC2024080204
  - Signed-off-by: mgb01105731 mgb01105731@alibaba-inc.com


author: wh02252983 <wh02252983@alibaba-inc.com> - 2.5.0-4
changelog:
  - add patch to Fix cve-2024-45490 and cve-2024-45491 and cve-2024-45492
  - add patch to Fix cve-2024-50602 and cve-2024-28757


author: tomcruiseqi <10762123+tomcruiseqi@user.noreply.gitee.com> - 128.9.0-1
changelog:
  - Update to 128.9.0 to fix CVE-2024-8176 CVE-2024-26282 CVE-2024-10474 CVE-2025-1937 CVE-2025-2368 CVE-2025-2584 CVE-2025-29927 CVE-2025-3034 CVE-2025-2857 CVE-2025-3030 CVE-2025-3028 CVE-2025-3033 CVE-2025-3032 CVE-2025-3029 CVE-2025-3031 CVE-2025-0245 CVE-2025-0244 CVE-2025-0246 CVE-2025-30218 CVE-2025-3028 CVE-2025-3028 CVE-2025-3029 CVE-2024-51479 CVE-2025-3028 CVE-2024-7531


author: tomcruiseqi <tomcruiseqi@inspur.com> - 128.13.0-1
changelog:
  - Updade to 128.13.0 to fix CVE-2025-8034 CVE-2025-8028 CVE-2025-8035 CVE-2025-8027 CVE-2025-6965 CVE-2025-5283 CVE-2025-1943 CVE-2025-0247


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 140.3.0-1
changelog:
  - Update to 140.3.0 to fix CVE-2025-10527 CVE-2025-10528 CVE-2025-10533
    CVE-2025-10534 CVE-2025-10536 CVE-2025-10537 CVE-2025-10529 CVE-2025-10531
    CVE-2025-10532
  - Remove patches as loongarch patch disabled


author: wenxin <wx02272781@alibaba-inc.com> - 140.4.0-1
changelog:
  - update to 140.4.0
  - fix CVE-2025-11708, CVE-2025-11709, CVE-2025-11710, CVE-2025-11711,
    CVE-2025-11712, CVE-2025-11714, CVE-2025-11715


author: wenxin <wx02272781@alibaba-inc.com> - 140.5.0-1
changelog:
  - update to 140.5.0
  - fix CVE-2025-13012, CVE-2025-13013, CVE-2025-13014, CVE-2025-13015,
    CVE-2025-13016, CVE-2025-13017, CVE-2025-13018, CVE-2025-13019,
    CVE-2025-13020


author: wenxin <wx02272781@alibaba-inc.com> - 140.6.0-1
changelog:
  - Update to 140.6.0
  - Fix upgrade and downgrade err
  - Fix CVE-2025-14321,CVE-2025-14322,CVE-2025-14323,CVE-2025-14324,
    CVE-2025-14325,CVE-2025-14328,CVE-2025-14329,CVE-2025-14330,
    CVE-2025-14331.CVE-2025-14333


author: lzq11122 <lzq02303433@alibaba-inc.com> - 140.7.0-1
changelog:
  - Update to 140.7.0 to fix cves
  - CVE-2026-0887,CVE-2026-0891,CVE-2026-0883,CVE-2026-0884,CVE-2026-0886,CVE-2026-0890,
    CVE-2026-0880,CVE-2026-0878,CVE-2026-0882,CVE-2026-0885,CVE-2026-0879,CVE-2026-0877,
    CVE-2026-0892,CVE-2025-14327


author: tomcruiseqi <tomcruiseqi@inspur.com> - 20251009-1
changelog:
  - Update to 20251009
  - Fix CVE-2025-15280, CVE-2025-15277, CVE-2025-15275, CVE-2025-15273, CVE-2025-15272, CVE-2025-15271, CVE-2025-15270, CVE-2025-15269
  - Remove useless patches


author: xiajiamei <xiejiamei@hygon.cn> - 2.38-16
changelog:
  - Backport patches for hygon from upstream
  - x86: fix wmemset ifunc stray '!' (bug 33542)
  - x86: Disable AVX Fast Unaligned Load on Hygon 1/2/3
  - Set Prefer_No_AVX512 flag for hygon platform


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 9.0.0-1
changelog:
  - Update to 9.0.0 from 8.0.5
  - Add patches to fix build doxygen err
    [Patches cherry-pick from c10s. Original changelog:
    - Doxygen fix(9.0.0-1)]


author: zjl002254423 <zjl02254423@alibaba-inc.com> -2.12-15
changelog:
  - Fix CVE-2024-56738,CVE-2024-56737,CVE-2024-45774,CVE-2024-45775,CVE-2024-45776,CVE-2024-45777,CVE-2024-45778,CVE-2024-45779,CVE-2024-45780,CVE-2024-45781,CVE-2024-45782,CVE-2024-45783,CVE-2025-0622,CVE-2025-0624,CVE-2025-0677,CVE-2025-0678,CVE-2025-0684,CVE-2025-0685,CVE-2025-0686,CVE-2025-0689,CVE-2025-0690,CVE-2025-1118,CVE-2025-1125


author: Xiaoping Liu <lxp01404969@linux.alibaba.com> - 8.4.0-1
changelog:
  - update to 8.4.0 from 8.1.1
  - Migrated to SPDX license
  - add patches to fix SAST
    [Patches cherry-pick from c10s. Original changelog:
    - SAST Fix ( 8.4.0-3 )]


author: wh02252983 <wh02252983@alibaba-inc.com> - 2.48.5-1
changelog:
  - update to 2.48.5 to fix CVE-2025-31273 CVE-2025-31278 CVE-2025-43212
  - CVE-2025-43216 CVE-2025-6558 CVE-2025-43211 CVE-2025-43227 CVE-2025-43228
  - CVE-2025-43240 CVE-2025-43265


author: YangCheng <yc02267530@alibaba-inc.com> - 2.50.3-1
changelog:
  - update to 2.50.3 to fix CVE-2025-13502,CVE-2025-13947,CVE-2025-43392,CVE-2025-43419,CVE-2025-43425,CVE-2025-43427,CVE-2025-43429,CVE-2025-43430,CVE-2025-43431,CVE-2025-43434,CVE-2025-43440,CVE-2025-43443,CVE-2025-66287


author: YangCheng <yc02267530@alibaba-inc.com> - 2.50.4-1
changelog:
  - update to 2.50.4 to fix CVE-2025-43529,CVE-2025-43541,CVE-2025-43535,CVE-2025-43531,CVE-2025-43536,CVE-2025-43501,CVE-2025-14174


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 1.18.5-1
changelog:
  - to #IBHRLO
  - update to 1.18.5 for CVE-2024-7383
  - Project: TC2024080204
  - Signed-off-by: mgb01105731 mgb01105731@alibaba-inc.com


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 1.20.3-1
changelog:
  - Update to 1.20.3 from 1.18.5
  - Add patches to print the full error from the server during handshaking. 
    [Patches cherry-pick from c10s. Original changelog: 
    - Print full NBD error from server.]


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 1:1.6.40-1
changelog:
  - Update to 1.6.40 from 1.6.39
  - Add patches to fixes annoncheck on aarch64 as noeon asm prevents 
    some hardening protection
    [Patches cherry-pick from c10s. Original changelog:
    - fix hardening on aarch64(1.6.40-6)]


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 2.57.1-1
changelog:
  - Update to 2.57.1 from 2.56.3
  - Migrated to SPDX license
  - Add patches to fix FTBFS by updating time crate
    [Patches cherry-pick from c10s. Original changelog:
    - Fix FTBFS by updating time crate(2.57.1-9)]


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 1.2.2-1
changelog:
  - Update to 1.2.2 from 1.2.0
  - Migrated to SPDX license
  - Add patches to fix CVE-2024-50612
    [Patches cherry-pick from c10s. Original changelog:
    - fix crash in ogg vorbis (CVE-2024-50612)(1.2.2-5)]


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 3.6.5-1
changelog:
  - Update to 3.6.5 to fix CVE-2025-32914 CVE-2025-32906 CVE-2025-32908 
    CVE-2025-32913 CVE-2025-2784


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 1:1.49.2-1
changelog:
  - Update to 1.49.2 from 1.44.2
  - Remove patch as the new version of tarball already includes changes.


author: Kaiqiang Wang <wangkaiqiang@inspur.com> - 8.0.37-1
changelog:
  - update to 8.0.37
  - fix CVE-2024-21096
  - fix CVE-2024-21062
  - fix CVE-2024-21054
  - fix CVE-2024-21102
  - fix CVE-2024-21008
  - fix CVE-2024-21060
  - fix CVE-2024-21051
  - fix CVE-2024-21057
  - fix CVE-2024-21013
  - fix CVE-2024-21015
  - fix CVE-2024-21055
  - fix CVE-2024-21053
  - fix CVE-2024-20994
  - fix CVE-2024-21056
  - fix CVE-2024-21052
  - fix CVE-2024-20998
  - fix CVE-2024-21047
  - fix CVE-2024-21087
  - fix CVE-2024-20993
  - fix CVE-2024-21061
  - fix CVE-2024-21009
  - fix CVE-2024-21069
  - fix CVE-2024-21000
  - fix CVE-2024-21049
  - fix CVE-2024-21050


author: tomcruiseqi <10762123+tomcruiseqi@user.noreply.gitee.com> - 8.0.42-1
changelog:
  - Update to 8.0.42 to fix CVE-2024-21134 CVE-2024-21130 CVE-2024-21179 CVE-2024-21177 CVE-2024-21173 CVE-2024-21171 CVE-2024-21165 CVE-2024-21163 CVE-2024-21162 CVE-2024-21142 CVE-2024-21125 CVE-2024-21129 CVE-2024-21127 CVE-2024-20996 CVE-2025-24375 CVE-2024-21198 CVE-2024-21203


author: wenxin <wx02272781@alibaba-inc.com> - 8.0.43-1
changelog:
  - update 8.0.43
  - fix cve CVE-2025-50081
  - fix cve CVE-2025-50100
  - fix cve CVE-2025-50104
  - fix cve CVE-2025-50077
  - fix cve CVE-2025-50078
  - fix cve CVE-2025-50079
  - fix cve CVE-2025-50080
  - fix cve CVE-2025-50082
  - fix cve CVE-2025-50083
  - fix cve CVE-2025-50084
  - fix cve CVE-2025-50085
  - fix cve CVE-2025-50086
  - fix cve CVE-2025-50087
  - fix cve CVE-2025-50091
  - fix cve CVE-2025-50093
  - fix cve CVE-2025-50094
  - fix cve CVE-2025-50097
  - fix cve CVE-2025-50099
  - fix cve CVE-2025-50101
  - fix cve CVE-2025-53023


author: zhoujiajia111 <zjl02254423@alibaba-inc.com> - 8.0.44-1
changelog:
  - update 8.0.44 to fix CVE-2025-53069,CVE-2025-53062,CVE-2025-53054,CVE-2025-21490
    CVE-2025-53053,CVE-2025-53045,CVE-2025-53044,CVE-2025-53042,CVE-2025-53040


author: lzq11122 <lzq02303433@alibaba-inc.com> - 8.0.45-1
changelog:
  - Update to 8.0.45 to fix cves
  - CVE-2026-21964,CVE-2026-21937,CVE-2026-21948,CVE-2026-21941,CVE-2026-21968,CVE-2026-21936


author: wency <wx02272781@alibaba-inc.com> - 1:3.0.12-18
changelog:
  - Add patches to fix CVE-2025-69420, CVE-2025-69419, CVE-2026-2279, CVE-2026-22796,
    CVE-2025-68160, CVE-2025-69418, CVE-2025-69421


author: Zhao Hang <wb-zh951434@alibaba-inc.com> - 8.3.15-1
changelog:
  - Update to 8.3.15-1 from 8.2.27-1
  - Migrated to SPDX license
  - Remove patches which already exist in code
  - enable command history in phpdbg, add internal UTC if tzdata is missing and backport Argon2 password hashing in OpenSSL ext
    [Patches cherry-pick from c10s. Original changelog:
    - rebase to 8.3.7
      backport Argon2 password hashing in OpenSSL ext
    - update to 8.3.0RC3 https://fedoraproject.org/wiki/Changes/php83
      add internal UTC if tzdata is missing
      bump to final API/ABI
      switch to nikic/php-parser version 5
      openssl: always warn about missing curve_name
    - rebase to 8.3.12
      enable command history in phpdbg
  ]


author: Bo Ren <rb01097748@alibaba-inc.com> - 3.11.6-9
changelog:
  - fix CVE-2024-9287
  - fix CVE-2024-0450
  - fix CVE-2024-4032
  - fix CVE-2025-4517
  - fix CVE-2024-3219
  - fix CVE-2024-7592
  - fix CVE-2024-8088
  - fix CVE-2023-27043
  - fix CVE-2024-6232
  - fix CVE-2024-6923


author: Liyang Han <hanliyang@hygon.cn> - 15:7.2.6-7
changelog:
  - Patch0045: 0045-anolis-target-i386-sev-Add-support-for-reuse-ASID-fo.patch
    (Support reuse ASID for CSV guests)


author: Liyang Han <hanliyang@hygon.cn> - 15:7.2.6-8
changelog:
  - Patch0046: 0046-target-i386-sev-Fix-incompatibility-between-SEV-and-.patch
    (Fix incompatibility between SEV and CSV on the GET_ID API)


author: Jacob Wang <yungao.wjb@alibaba-inc.com> - 2:8.2.0-1
changelog:
  - Update to 8.2.0
    Remove subpackage of virtiofsd since QEMU upstream deleted the C impl of
    virtiofsd entirely. The alternative is to rewrite it separately in rust.


author: Aubrey Li <aubrey.li@linux.intel.com> - 2:8.2.0-3
changelog:
  - Patch1001: 1001-i386-cpu-Clear-FEAT_XSAVE_XSS_LO-HI-leafs-when-CPUID.patch
  - Patch1002: 1002-i386-cpu-Mask-with-XCR0-XSS-mask-for-FEAT_XSAVE_XCR0.patch
  - Patch1003: 1003-i386-cpuid-Decrease-cpuid_i-when-skipping-CPUID-leaf.patch
  - Patch1004: 1004-i386-cpuid-Move-leaf-7-to-correct-group.patch
    (Backport i386/cpu fixes from upstream 8.2.2)


author: Song Gao <gaosong@loongson.cn> - 2:8.2.0-5
changelog:
  - Patch0003: 0003-hw-loongarch-virt-Align-high-memory-base-address-wit.patch
  - Patch0004: 0004-target-loongarch-Add-timer-information-dump-support.patch
  - Patch0005: 0005-target-loongarch-meson-move-gdbstub.c-to-loongarch.s.patch
  - Patch0006: 0006-target-loongarch-move-translate-modules-to-tcg.patch
  - Patch0007: 0007-linux-headers-Update-to-Linux-v6.7-rc5.patch
  - Patch0008: 0008-linux-headers-Synchronize-linux-headers-from-linux-v.patch
  - Patch0009: 0009-target-loongarch-Define-some-kvm_arch-interfaces.patch
  - Patch0010: 0010-target-loongarch-Supplement-vcpu-env-initial-when-vc.patch
  - Patch0011: 0011-target-loongarch-Implement-kvm-get-set-registers.patch
  - Patch0012: 0012-target-loongarch-Implement-kvm_arch_init-function.patch
  - Patch0013: 0013-target-loongarch-Implement-kvm_arch_init_vcpu.patch
  - Patch0014: 0014-target-loongarch-Implement-kvm_arch_handle_exit.patch
  - Patch0015: 0015-target-loongarch-Restrict-TCG-specific-code.patch
  - Patch0016: 0016-target-loongarch-Implement-set-vcpu-intr-for-kvm.patch
  - Patch0017: 0017-target-loongarch-Add-loongarch-kvm-into-meson-build.patch
  - Patch0018: 0018-hw-intc-loongarch_ipi-Use-MemTxAttrs-interface-for-i.patch
  - Patch0019: 0019-hw-loongarch-virt-Set-iocsr-address-space-per-board-.patch
  - Patch0020: 0020-hw-intc-loongarch_extioi-Add-dynamic-cpu-number-supp.patch
  - Patch0021: 0021-hw-intc-loongarch_extioi-Add-vmstate-post_load-suppo.patch
  - Patch0022: 0022-configure-Add-linux-header-compile-support-for-Loong.patch
  - Patch0023: 0023-target-loongarch-Set-cpuid-CSR-register-only-once-wi.patch
  - Patch0024: 0024-target-loongarch-kvm-Enable-LSX-LASX-extension.patch
  - Patch0025: 0025-target-loongarch-Fix-qtest-test-hmp-error-when-KVM-o.patch
  - Patch0026: 0026-loongarch-Change-the-UEFI-loading-mode-to-loongarch.patch
  - Patch0027: 0027-target-loongarch-Fix-tlb-huge-page-loading-issue.patch
  - Patch0028: 0028-target-loongarch-Fix-qemu-loongarch64-hang-when-exec.patch
  - Patch0029: 0029-target-loongarch-kvm-Add-software-breakpoint-support.patch
  - Patch0030: 0030-hw-intc-loongarch_extioi-Add-virt-extension-support.patch
  - Patch0031: 0031-target-loongarch-kvm-sync-kernel-header-files.patch
  - Patch0032: 0032-hw-intc-loongarch_extioi-Add-virt-extension-support-.patch
  - Patch0033: 0033-target-loongarch-kvm-Add-pmu-support.patch
  - Patch0034: 0034-target-loongarch-Fix-qemu-system-loongarch64-assert-.patch
    (Add LoongArch features and bugfixes)


author: Liyang Han <hanliyang@hygon.cn> - 2:8.2.0-9
changelog:
  - Patch1005: 1005-doc-update-AMD-SEV-to-include-Live-migration-flow.patch
  - Patch1006: 1006-migration.json-add-AMD-SEV-specific-migration-parame.patch
  - Patch1007: 1007-confidential-guest-support-introduce-ConfidentialGue.patch
  - Patch1008: 1008-target-i386-sev-provide-callback-to-setup-outgoing-c.patch
  - Patch1009: 1009-target-i386-sev-do-not-create-launch-context-for-an-.patch
  - Patch1010: 1010-target-i386-sev-add-support-to-encrypt-the-outgoing-.patch
  - Patch1011: 1011-target-i386-sev-add-support-to-load-incoming-encrypt.patch
  - Patch1012: 1012-kvm-Add-support-for-SEV-shared-regions-list-and-KVM_.patch
  - Patch1013: 1013-migration-add-support-to-migrate-shared-regions-list.patch
  - Patch1014: 1014-migration-ram-add-support-to-send-encrypted-pages.patch
  - Patch1015: 1015-migration-ram-Force-encrypted-status-for-flash0-flas.patch
  - Patch1016: 1016-kvm-Add-support-for-userspace-MSR-filtering-and-hand.patch
  - Patch1017: 1017-target-i386-sev-Return-0-if-sev_send_get_packet_len-.patch
  - Patch1018: 1018-migration-ram-Force-encrypted-status-for-VGA-vram.patch
  - Patch1019: 1019-target-i386-sev-Clear-shared_regions_list-when-reboo.patch
  - Patch1020: 1020-migration-ram-Fix-calculation-of-gfn-correpond-to-a-.patch
  - Patch1021: 1021-target-i386-Introduce-header-file-csv.h.patch
  - Patch1022: 1022-target-i386-csv-Read-cert-chain-from-file-when-prepa.patch
  - Patch1023: 1023-target-i386-csv-add-support-to-queue-the-outgoing-pa.patch
  - Patch1024: 1024-target-i386-csv-add-support-to-encrypt-the-outgoing-.patch
  - Patch1025: 1025-target-i386-csv-add-support-to-queue-the-incoming-pa.patch
  - Patch1026: 1026-target-i386-csv-add-support-to-load-incoming-encrypt.patch
  - Patch1027: 1027-migration-ram-Accelerate-the-transmission-of-CSV-gue.patch
  - Patch1028: 1028-migration-ram-Accelerate-the-loading-of-CSV-guest-s-.patch
  - Patch1029: 1029-target-i386-csv-Add-support-for-migrate-VMSA-for-CSV.patch
  - Patch1030: 1030-target-i386-get-set-migrate-GHCB-state.patch
  - Patch1031: 1031-target-i386-kvm-Fix-the-resettable-info-when-emulate.patch
  - Patch1032: 1032-kvm-Add-support-for-CSV2-reboot.patch
    (Support CSV/CSV2 live migration, CSV2 reboot)


author: Liyang Han <hanliyang@hygon.cn> - 2:8.2.0-10
changelog:
  - Patch1033: 1033-target-i386-csv-Add-CSV3-context.patch
  - Patch1034: 1034-target-i386-csv-Add-command-to-initialize-CSV3-conte.patch
  - Patch1035: 1035-target-i386-csv-Add-command-to-load-data-to-CSV3-gue.patch
  - Patch1036: 1036-target-i386-csv-Add-command-to-load-vmcb-to-CSV3-gue.patch
  - Patch1037: 1037-target-i386-cpu-Populate-CPUID-0x8000_001F-when-CSV3.patch
  - Patch1038: 1038-target-i386-csv-Do-not-register-unregister-guest-sec.patch
  - Patch1039: 1039-target-i386-csv-Load-initial-image-to-private-memory.patch
  - Patch1040: 1040-vga-Force-full-update-for-CSV3-guest.patch
  - Patch1041: 1041-vfio-Only-map-shared-region-for-CSV3-virtual-machine.patch
  - Patch1042: 1042-linux-headers-update-kernel-headers-to-include-CSV3-.patch
  - Patch1043: 1043-target-i386-csv-Add-support-to-migrate-the-outgoing-.patch
  - Patch1044: 1044-target-i386-csv-Add-support-to-migrate-the-incoming-.patch
  - Patch1045: 1045-target-i386-csv-Add-support-to-migrate-the-outgoing-.patch
  - Patch1046: 1046-target-i386-csv-Add-support-to-migrate-the-incoming-.patch
    (Support boot CSV3 guest, CSV3 live migration)


author: Liyang Han <hanliyang@hygon.cn> - 2:8.2.0-11
changelog:
  - Patch1047: 1047-target-i386-sev-Fix-incompatibility-between-SEV-and-.patch
  - Patch1048: 1048-target-i386-sev-Add-support-for-reuse-ASID-for-diffe.patch
    (Fix GET_ID API incompatibility issue, support CSV reuse ASID)


author: Yanjing Zhou <zhouyanjing@hygon.cn> - 2:8.2.0-12
changelog:
  - Patch1049: 1049-target-i386-Add-Hygon-Dhyana-v3-CPU-model.patch
  - Patch1050: 1050-target-i386-Add-new-Hygon-Dharma-CPU-model.patch
    (Add Hygon Dhyana-v3 and Dharma CPU model)


author: Song Gao <gaosong@loongson.cn> -2.8.2.0-14
changelog:
  - Patch0036: 0036-target-loongarch-kvm-Fix-VM-recovery-from-disk-failu.patch
  - Patch0037: 0037-target-loongarch-kvm-fpu-save-the-vreg-registers-hig.patch
    (Fix migration bugs and remove unused requires)


author: Depei Yang <yangdepei@hygon.cn> -2.8.2.0-15
changelog:
  - Patch1051: 1051-vfio-Add-vfio-based-mediated-hct-support.patch
    (Add HCT support for hygon platform)


author: Wencheng Yang <yangwencheng@hygon.cn> - 2:8.2.0-16
changelog:
  - Patch1052: 1052-hw-net-virtio-net-Update-event-idx-if-guest-has-made.patch
    (Update virtio-net event idx after double check)


author: Wencheng Yang <yangwencheng@hygon.cn> - 2:8.2.0-17
changelog:
  - Patch1053: 1053-target-i386-csv-Release-CSV3-shared-pages-after-unma.patch
    (Release CSV3 shared pages after unmapping DMA)


author: Wencheng Yang <yangwencheng@hygon.cn> - 2:8.2.0-18
changelog:
  - Patch1054: 1054-virtio-net-Fix-network-stall-at-the-host-side-waitin.patch
    (Fix network stall at the host side waiting for kick)


author: wh02252983 <wh02252983@alibaba-inc.com> - 2:8.2.0-31
changelog:
  - Backport multifd live migration acceleration using HW accelerators
  - add patch to fix CVE-2024-7409
  - add rtc acpi table
  - add patch to fix  CVE-2024-3446


author: wh02252983 <wh02252983@alibaba-inc.com> - 2:8.2.0-32
changelog:
  - update-linux-headers.sh related patches
  - fetch patches about configure and meson from upstream
  - add patch to fix CVE-2024-3567


author: wh02252983 <wh02252983@alibaba-inc.com> - 2:8.2.0-34
changelog:
  - block: Parse filenames only when explicitly requested
  - hw/usb/hcd-ohci: Fix #1510, #303: pid not IN or OUT
  - target/riscv/kvm.c: Fix the hart bit setting of AIA
  - target/riscv/kvm.c: remove group setting of KVM AIA if the machine only has 1 socket
  - target/riscv/kvm: Fix the group bit setting of AIA


author: wh02252983 <wh02252983@alibaba-inc.com> - 2:8.2.0-35
changelog:
  - hw/vfio/hct: sharing CCP resources between host and virtual machines.
  - hw/vfio/hct: compatible with hct.ko modules in versions 0.5 and earlier.
  - hw/vfio/hct: fix ccp index error caused by uninitialized buf
  - hw/vfio/hct: remove the operation of reading the value of mdev index in qemu.
  - hw/riscv/virt-acpi-build.c: Add SRAT and SLIT ACPI tables


author: wh02252983 <wh02252983@alibaba-inc.com> - 2:8.2.0-36
changelog:
  - support live migrate for vpsp device
  - Support issuing the LAUNCH_FINISH_EX API with host-data for CSV3 guest
  - add migration support on hct device


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 2:8.2.0-37
changelog:
  - Fix yum update err with qemu-device-display-qxl 
  and qemu-device-display-virtio-vga and qemu-device-display-virtio-vga-gl


author: wh02252983 <wh02252983@alibaba-inc.com> - 2:8.2.0-38
changelog:
  - Establish MMIO mappings on IOMMU page table for PCIe devices passed through to CSV3 VM
  - Support 2MB THP for memfd-backed memory in CSV3 VMs
  - Remove all nodes within dma unmapping addr range
  - Support fine-grained shared memory management for CSV3 VM


author: wenxin <wx02272781@alibaba-inc.com> - 1:4.06-1
changelog:
  - Update to 4.06
  - fix CVE-2024-7868 CVE-2024-7866 CVE-2024-7867 CVE-2024-2971
    CVE-2024-3248 CVE-2024-3247 CVE-2024-3900 CVE-2024-4568 CVE-2024-4141
    CVE-2025-3154 CVE-2024-4976 CVE-2025-2574 CVE-2025-11896


