# changelog

author: yaoxin <yao_xin001@hoperun.com> - 3.1.1-1
changelog:
  - Update to 3.1.1
    * Security fix for CVE-2024-6237,CVE-2024-5953,CVE-2024-3657,CVE-2024-2199
    * Issue 6172 - RFE: improve the performance of evaluation of filter component 
      when tested against a large valueset (like group members) #6173
    * Issue 6181 - RFE - Allow system to manage uid/gid at startup
    * Issue 6238 - RFE - add option to write audit log in JSON format
    * Issue 6241 - Add support for CRYPT-YESCRYPT #6242
    * Issue 5772 - ONE LEVEL search fails to return sub-suffixes #6219
    * Issue 6123 - Allow DNA plugin to reuse global config for bind method and connection protocol #6124
    * Issue 6155 - ldap-agent fails to start because of permission error #6179
    * Issue 6170 - audit log buffering doesn’t handle large updates
    * Issue 6175 - Referential integrity plugin - in referint_thread_func does not handle null from ldap_utf8strtok #6168
    * Issue 6183 - Slow ldif2db import on a newly created BDB backend #6208
    * Issue 6199 - unprotected search query during certificate based authentication #6205
    * Issue 6224 - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes #6225
    * Issue 6229 - After an initial failure, subsequent online backups fail #6230
    * Issue 6254 - Enabling replication for a sub suffix crashes browser #6255
    * Issue 6256 - nsslapd-numlisteners limit is not enforced
    * Issue 6265 - lmdb - missing entries in range searches #6266
    * Please see log - https://www.port389.org/docs/389ds/releases/release-3-1-1


author: li-miaomiao_zhr<mmlidc@isoftstone.com> - 1.0.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix wrong file name referenced in spec file causing build failure,remove spec file from the source package


author: wangkai <13474090681@163.com> - 0.22.1-1
changelog:
  - Update to 0.22.1
  - Fix CVE-2026-20884, CVE-2026-20889, CVE-2026-20911, CVE-2026-21413,
    CVE-2026-24450, CVE-2026-24660, CVE-2026-5318, CVE-2026-5342


author: panchenbo <panchenbo@kylinsec.com.cn> - 1.22.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix build error: add missing BuildRequires:pkgconfig(polkit-gobject-1)


author: qinxue <qinxue6@h-partners.com> - 1:1.44.2-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:mptcp fix error handling rp_filter when kernel don't support mptcp


author: yaoxin <yao_xin001@hoperun.com> - 1.2.24-1
changelog:
  - Update to 1.2.24:
    * Fixed formatting of ipsec.conf snippet. This is a security
    issue with severity of "Important." (CVE-2024-9050)
    * Added support for "require-id-on-certificate" setting.
    * Updated Georgian, Slovenian and Ukrainian translations.


author: lingsheng <lingsheng1@h-partners.com> - 1.2.8-3
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: Revert PkClient: Replace the GSimpleAsyncResult with the GTask API


author: Funda Wang <fundawang@yeah.net> - 1.2.8-4
changelog:
  - move dbus interface to main package
  - split out gtk module from devel sub package
  - cleanup buildrequires


author: yinsist <jianhui.oerv@isrc.iscas.ac.cn> - 4.0.5-4
changelog:
  - Valgrind does not support certain architectures like RISC-V, Before depending on Valgrind, first check if Valgrind supports the architecture


author: yixiangzhike <yixiangzhike007@163.com> - 2.3.1-7
changelog:
  - Fix CVE-2026-54369 CVE-2026-54370
  - New API acl_get_file_at, acl_set_file_at, acl_extended_file_at, acl_delete_def_file_at
  - New provided symbol LIBACL_1_3 for new API in libacl
  - The change that commands like 'getfacl -P symlink' or 'setfacl -P symlink' will fail now


author: yixiangzhike <yixiangzhike007@163.com> - 0.18.6-3
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: backport upstream patch to fix parsing of lowercase group names


author: yixiangzhike <yixiangzhike007@163.com> - 0.18.6-4
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: backport upstream patch to fix concurrent reading of extended attributes


author: Wenlong Zhang <zhangwenlong@loongson.cn> - 36.16.5-52
changelog:
  - Type:bugfix
   - ID:NA
   - SUG:NA
   - DESC:Fixed the issue of "D_isable root account" not being translated

   * Fri Feb 27 2026 zhaoyognhao <zhaoyonghao10@h-partners.com> - 36.16.5-51
   - Type:feature
   - ID:NA
   - SUG:NA
   - DESC: enable ssh login checkbox


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 36.16.5-54
changelog:
  - Type:feature
  - ID:NA
  - SUG:NA
  - DESC: add kernel 64k page size and kernel options Chinese translation support

   * Mon Mar 9 2026 zhaoyonghao <zhaoyognhao10@h-partners.com> - 36.16.5-53
   - Type:requirement
   - ID:NA
   - SUG:NA
   - DESC:Port GUI kernel switcher for ARM 64k


author: yueyuankun <yueyuankun@kylinos.cn> - 36.16.5-55
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix permissions of the ssh config created by Anaconda
          fix(users): ensure SSH config directory exists before writing


author: mapengyuan <mapengyuan@xfusion.com> - 5.3.1-16
changelog:
  - Type:CVE
  - CVE:CVE-2025-2754 CVE-2025-2756 CVE-2025-5200
  - SUG:NA
  - DESC:fix CVE-2025-2754 CVE-2025-2756 CVE-2025-5200


author: majianhan <majianhan@kylinos.cn> - 5.3.1-17
changelog:
  - Type:CVE
  - CVE:CVE-2025-2752 CVE-2025-2755 CVE-2025-5201 CVE-2025-5202 CVE-2025-5203 CVE-2025-5204
  - SUG:NA
  - DESC:fix CVE-2025-2752 CVE-2025-2755 CVE-2025-5201 CVE-2025-5202 CVE-2025-5203 CVE-2025-5204


author: shaojiansong <shaojiansong@kylinos.cn> - 6.0.5-3
changelog:
  - Backport security and robustness fixes: replace unsafe strncpy in 5 loaders, migrate OBJ parser to std::string, harden aiGetMaterialString, and validate Assbin allocation sizes.


author: yaoxin <1024769339@qq.com> - 6.0.5-4
changelog:
  - Fix some CVEs: CVE-2025-70067, CVE-2025-70069, CVE-2025-70070,
    CVE-2025-70071, CVE-2025-70072, CVE-2026-10200, CVE-2026-10232,
    CVE-2026-14610


author: yanglongkang<yanglongkang@h-partners.com> - 3.2.2-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Adding Patching Operations
         provides relibility and self-healing capabilities for service


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 3.2.5-2
changelog:
  - Type：update
  - ID：NA
  - SUG:NA
  - DESC: Modify the license to SPDX format
          Delete MIT and Public Domain license because it no longer appears in the upstream source


author: zhangpan <zhangpan103@h-partners.com> - 2.51.0-5
changelog:
  - add macros to control if need /usr/bin/xprop
  - at-spi2-core-help package provided at-spi2-atk-help


author: baizhonggui <baizhonggui@huawei.com> - 0.2.92-3
changelog:
  - Fix building error: File must begin with "/": /usr/lib/systemd/system/attest_ra_server.service
  - Add systemd in BuildRequires


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 1:3.1.2-12
changelog:
  - backport patches for fixing Wimplicit-function-declaration, Wbuiltin-declaration-mismatch when building with newer compilers


author: Ge Wang <wang__ge@126.com> - 1.0-0.34
changelog:
  - Replace buildrequire kde-filesystem with kde4-filesystem due to kde-filesytem updated to version 5-1


author: Funda Wang <fundawang@yeah.net> - 1.5.11-4
changelog:
  - Add patch to fix python segfault with swig >= 4.3
  - Add patch to print a clear error with CTF-2 traces


author: wangyuhang <wangyuhang27@huawei.com> -5.2.15-13
changelog:
  - remove the log message for failing to open cmdline,
    and ensure that the mayexec function does not modify the value of errno.


author: yixiangzhike <yixiangzhike007@163.com> - 5.2.15-16
changelog:
  - sync patches from bash community:
     fix default file descriptor for <> redirection when printing command
     update BASH_COMMAND for subshells
     fix potential file descriptor leak in here document pipes


author: liequan che <cheliequan@inspur.com> - 1.1-4
changelog:
  - add bcache-export-cached to export CACHED_UUID and CACHED_LABEL,so that 69-bcache.rules
  udev rules can correctly create uuid and label links for bcache devices


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-4
changelog:
  - Type:CVE
  - CVE:CVE-2024-11187,CVE-2024-12705
  - SUG:NA
  - DESC:fix CVE-2024-111878 and CVE-2024-12705


author: tangce<tangce1@huawei.com> - 32:9.18.21-5
changelog:
  - Type:CVE
  - CVE:CVE-2025-8677,CVE-2025-40778,CVE-2025-40780
  - SUG:NA
  - DESC:fix CVE-2025-8677,CVE-2025-40778,CVE-2025-40780


author: tangce <tangce1@h-partners.com> - 32:9.18.21-9
changelog:
  - Type:CVE
  - CVE:CVE-2026-3039,CVE-2026-3592,CVE-2026-5946
  - SUG:NA
  - DESC:fix CVE-2026-3039,CVE-2026-3592,CVE-2026-5946


author: tangce <tangce1@h-partners.com> - 32:9.18.21-10
changelog:
  - Type:CVE
  - CVE:CVE-2026-10822,CVE-2026-11331,CVE-2026-12617,CVE-2026-13204
  - SUG:NA
  - DESC:fix CVE-2026-10822,CVE-2026-11331,CVE-2026-12617,CVE-2026-13204


author: tangce <tangce1@h-partners.com> - 32:9.18.21-11
changelog:
  - Type:CVE
  - CVE:CVE-2026-10723,CVE-2026-11721,CVE-2026-13321
  - SUG:NA
  - DESC:fix CVE-2026-10723,CVE-2026-11721,CVE-2026-13321


author: yueyuankun <yueyuankun@kylinos.cn> - 3.8.2-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix syntax error on SymbolKind.toString method
         fix interface syntax error


author: liuh <liuhuan01@kylinos.cn> - 6.6.3-12
changelog:
  - btrfs-progs: convert: insert a dummy inode item before inode ref for ext2/4
  - btrfs-progs: convert: for ext2, fix possible tree-checker error when converting a large fs


author: liuh <liuhuan01@kylinos.cn> - 6.6.3-17
changelog:
  - sync patch from community
    btrfs-progs: fix the wrong size from device_get_partition_size_sysfs()


author: liuh <liuhuan01@kylinos.cn> - 6.6.3-19
changelog:
  - sync patch from community
    btrfs-progs: subvolume: fix a bug that leads to unnecessary error message


author: lijian <lijian2@kylinos.cn> - 1:1.36.1-21
changelog:
  - Type:cves
  - ID:CVE-2026-38754
  - SUG:NA
  - DESC:re-fix CVE-2026-38754, clear stale IFS state on expansion error


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1.18.0-2
changelog:
  - Type:CVE
  - ID:CVE-2025-50422
  - SUG:NA
  - DESC:Fix a NULL access in active_edges_to_traps()
         Add unlikely() to test for x == INT32_MAX for the NULL reference


author: lvgenggeng <lvgenggeng@uniontech.com> - 1.18.0-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix "out of memory" when using linear gradient
          Fix a memory leak


author: yangyun <yangyun50@huawei.com> - 1.5.5-1
changelog:
  - update to 1.5.5 version
  	- add support of readers (see README.md)
  	- configure.ac: disable the use of --disabele-usbdropdir
  	- parse: create output.bin file
  	- udev: Disable USB-persist for CCID devices
  	- configure: fail if flex is not found
  	- some other minor improvments


author: openeuler_bot <infra@openeuler.sh> - 0.6.2.4-1
changelog:
  - fix memory leak in ECDH-ES JWE encryption/decryption (version:0.6.2.4).
  - fix rsa_q = NULL initialization in _RSA_private_fields (version:0.6.2.4).
  - fix memory allocation check (typo) in jwk.c (version:0.6.2.4).
  - fix gcc10 errors for -Werror=ignored-qualifiers and remove unused includes (version:0.6.2.4).
  - re-generate automake/autoconf files with automake v1.17 and libtool v2.5.4 (version:0.6.2.4).


author: Funda Wang <fundawang@yeah.net> - 1.4.6-1
changelog:
  - Update to 1.4.6 for fix CVEs: CVE-2026-20345, CVE-2026-20339,
    CVE-2026-20346, CVE-2026-20347, CVE-2026-20348, CVE-2025-8088


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 309-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: remove incorrect provides cockpit-machines and cockpit-machines-ovirt
          remove require libvirt and libvirt-client


author: shaojiansong <shaojiansong@kylinos.cn> - 309-8
changelog:
  - Fix networking: renaming of bridges and other groups (upstream fdba746e4, RHEL-131249, backport to openEuler-24.03-LTS-Next cockpit 309, keep member activation consistent when group name is changed.)


author: shaojiansong <shaojiansong@kylinos.cn> - 309-9
changelog:
  - Fix ws: only hand out the saved password to authorize messages once. Prevents account lockout via pam_faillock when sudo sends a 'Try again' prompt, by poisoning the password after the first use.


author: liweigang <liweiganga@gmail.com> - 1.22.8-4
changelog:
  - Format and tidy the spec file
  - Convert License to SPDX expression: MIT AND BSD-3-Clause AND SGI-B-2.0
  - Update URL to upstream GitLab repository


author: Qin Fandong <qinfandong@kylinos.cn> - 9.4-23
changelog:
  - Type:CVE
  - ID:CVE-2026-56392
  - SUG:NA
  - DESC:fix heap overflow in unexpand with large tab stop values


author: fuanan <fuanan3@h-partners.com> - 2.13-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert fix CVE-2015-1197 because it causes AT testcases problems


author: shenzhongwei <shenzhongwei@kylinos.cn> - 8.0.4-10
changelog:
  - remove the architecture judgment in the patches section;
  - include all patches in the source package.


author: wangxiao <wangxiao184@h-partners.com> - 8.0.4-15
changelog:
  - remove the arch judgment, include all patches in the src package
  - use patch command to apply patches for consistency in context


author: lijian1 <lijian1@kylinos.cn> - 8.0.4-17
changelog:
  - fix loongarch64 support so file extension error for elf64 lack the branch while elf32 do not need.


author: lijian <lijian2@kylinos.cn> - 1.8.7-1
changelog:
  - update to 1.8.7
  - crun: new command "crun features".
  - linux: support io_priority from the OCI specs.
  - cgroup: allow setting swap to 0.
  - cgroup, systemd: set the memory limit on the system scope.


author: Funda Wang <fundawang@yeah.net> - 1:2.4.7-7
changelog:
  - fix CVE-2025-58060, CVE-2025-58364
  - move www files into main package due to requirement by web interface


author: gaihuiying <eaglegai@163.com> - 1:2.4.7-15
changelog:
  - fix handling of multiple PPD: keywords from filters related to CVE-2026-34980
    fix a regression in shared printing from non-local accounts related to CVE-2026-27447


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-25
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:urlapi: avoid null deref if setting blank host to url
         urlapi: skip appending NULL pointer query


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-26
changelog:
  - Type:CVE
  - CVE:CVE-2025-14017 CVE-2025-14524 CVE-2025-14819 CVE-2025-15079 CVE-2025-15224
  - SUG:NA
  - DESC:fix CVE-2025-14017 CVE-2025-14524 CVE-2025-14819 CVE-2025-15079 CVE-2025-15224


author: zhouyihang <zhouyihang_z@163.com> - 8.4.0-27
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:formdata: validate callback is non-NULL before use
         tftp: correct the filename length check


author: zhouyihang <zhouyihang_z@163.com> - 8.4.0-28
changelog:
  - Type:CVE
  - CVE:CVE-2026-1965 CVE-2026-3783 CVE-2026-3784
  - SUG:NA
  - DESC:fix CVE-2026-1965 CVE-2026-3783 CVE-2026-3784


author: zhouyihang <zhouyihang_z@163.com> - 8.4.0-29
changelog:
  - Type:CVE
  - CVE:CVE-2026-4873 CVE-2026-5545 CVE-2026-5773 CVE-2026-6253 CVE-2026-6276 CVE-2026-6429 CVE-2026-7168
  - SUG:NA
  - DESC:fix CVE-2026-4873 CVE-2026-5545 CVE-2026-5773 CVE-2026-6253 CVE-2026-6276 CVE-2026-6429 CVE-2026-7168


author: zhouyihang <zhouyihang_z@163.com> - 8.4.0-30
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:http1: fix potential NULL dereference in Curl_h1_req_parse_read
         mqtt: fix EOF handling


author: zhouyihang <zhouyihang_z@163.com> - 8.4.0-32
changelog:
  - Type:CVE
  - CVE:CVE-2026-8286 CVE-2026-8924 CVE-2026-8927 CVE-2026-9547 CVE-2026-10536 CVE-2026-12064
  - SUG:NA
  - DESC:fix CVE-2026-8286 CVE-2026-8924 CVE-2026-8927 CVE-2026-9547 CVE-2026-10536 CVE-2026-12064


author: zhouyihang <zhouyihang_z@163.com> - 8.4.0-34
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:urlapi: fix memleaks on error in parse_hostname_login()
         telnet: fix old copy-paste typo in variable name
         mime.c: avoid integer overflow in base64 size calculation
         tool_cb_prg: avoid integer overflows


author: wangkai <13474090681@163.com> - 1.11.23-54
changelog:
  - Add patches from fedora, improve C compatibility and fix build failures caused by higher gcc versions


author: hongjinghao <hongjinghao@huawei.com> - 1:1.14.8-3
changelog:
  - sync patch from upstream
  	backport-bus-Don-t-crash-if-bus_context_create_client_policy-.patch
  	backport-bus-When-failing-to-reload-client-policy-continue-it.patch
  	backport-test-Add-a-targeted-test-for-_dbus_unix_groups_from_.patch
  	backport-userdb-Add-proper-error-reporting-when-getting-group.patch


author: liuyumeng <liuyumeng5@huawei.com> - 0.40.0-2
changelog:
  - add patch:dconf read random contents of memory causing discrepancy,initialize memory to eliminate discrepancy


author: lingsheng <lingsheng1@h-partners.com> - 2.90-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Update DNS records after pruning DHCP leases
         cache: Fix potential NULL deref in arcane situations.
         Fix potential memory leak
         Fix possible SIGSEGV in bpf.c
         allow binding mac with ip6


author: Liu Qingtao <liu.qingtao2@zte.com.cn> - 2.90-5
changelog:
  - Type:bugfix
  - CVE:
  - SUG:NA
  - DESC:Ignore Wincompatible-pointer-types error when compiling with gcc-14.3


author: luoguocui <luoguouci@h-partners.com> - 2.90-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix bounds checking in check_ia()
         Fix SEGV in Dbus code
         More fixes for DHCP ops in Dbus when DHCP not configured


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 2.90-9
changelog:
  - Type:CVE
  - CVE:CVE-2026-4890 CVE-2026-4891 CVE-2026-4892 CVE-2026-4893 CVE-2026-5172
  - SUG:NA
  - DESC:Fix NSEC bitmap parsing infinite loop
         Verify rdlen field in RRSIG packets
         Fix buffer overflow in helper.c with large CLIDs
         Fix broken client subnet validation
         Fix buffer overflow vulnerability in extract_addresses()


author: zhongjiawei<zhongjiawei1@huawei.com> - 2:18.09.0-347
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:delete redundant characters to prevent make failure in golang 1.24


author: jade_t<yzd50036@gmail.com> - 2:18.09.0-351
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix the installation conflict between docker-engine and containerd


author: wangkai <13474090681@163.com> - 1:2.3.20-4
changelog:
  - Fix CVE-2025-59031, CVE-2025-59032, CVE-2026-27855, CVE-2026-27856,
    CVE-2026-27857, CVE-2026-27858, CVE-2026-27859, CVE-2026-0394


author: huangdengdui <huangdengui@huawei.com> - 23.11-33
changelog:
  Sync some bugfixes for hns3 pmd and modifications are as follow:
   - net/hns3: fix Rx packet without CRC data
   - net/hns3: fix CRC data segment
   - net/hns3: check requirement for hardware GRO
   - net/hns3: allow use of Tx vector when fast free not enabled
   - net/hns3: allow use of Rx vector mode with VLAN filter


author: huangdengdui <huangdengui@huawei.com> - 23.11-34
changelog:
  Sync some patches about support TSO for packets with
   IPv6 extension header and modifications are as follow:
   - net: add tunnel packet type parsing
   - app/testpmd: use packet type parsing API
   - app/testpmd: fix VLAN parsing in checksum engine
   - net: fix offset in GENEVE packet parsing
   - app/testpmd: fix packet type parsing
   - net: fix GTP packet parsing
   - net: add tunnel length in UDP tunnel parsing
   - app/testpmd: fix tunnel inner info


author: huangdonghua <huangdonghua3@h-partners.com> - 23.11-36
changelog:
  Unify locks, fix Rx path and resource release:
   - net/hns3: fix inconsistent lock
   - net/hns3: fix overwrite mbuf in vector path
   - net/hns3: fix unrelease VLAN resource when init fail


author: huangdonghua <huangdonghua3@h-partners.com> - 23.11-37
changelog:
  Fix unrelease VLAN resource and L4 protocol retrieval from L3 header:
   - net/hns3: fix unrelease VLAN resource when init fail
   - app/testpmd: fix L4 protocol retrieval from L3 header


author: huangdonghua <huangdonghua3@h-partners.com> - 23.11-38
changelog:
  Upload some patches of VF multiple TC and others:
   - app/testpmd: handle IEEE1588 init failure
   - examples/l3fwd: add option to set Rx burst size
   - examples/eventdev: fix queue crash with generic pipeline
   - examples/l3fwd: add Tx burst size configuration option
   - net/hns3: remove duplicate struct field
   - net/hns3: refactor DCB module
   - net/hns3: parse max TC number for VF
   - net/hns3: support multi-TCs capability for VF
   - net/hns3: fix queue TC configuration on VF
   - net/hns3: support multi-TCs configuration for VF
   - app/testpmd: avoid crash in DCB config
   - app/testpmd: show all DCB priority TC map
   - app/testpmd: relax number of TCs in DCB command
   - app/testpmd: reuse RSS config when configuring DCB
   - app/testpmd: add prio-tc map in DCB command
   - app/testpmd: add queue restriction in DCB command
   - app/testpmd: add command to disable DCB
   - examples/l3fwd: force link speed
   - examples/l3fwd-power: force link speed
   - net/hns3: log invalid MAC address from firmware
   - config/arm: add HiSilicon HIP12
   - app/testpmd: fix DCB Tx port
   - app/testpmd: fix DCB Rx queues
   - app/testpmd: set DCB forwarding TCs
   - app/testpmd: support multi-cores process one TC
   - app/testpmd: fix inner UDP checksum offload fail


author: huangdonghua <huangdonghua3@h-partners.com> - 23.11-39
changelog:
  fix L2 length for GRE packets:
   - net: fix L2 length for GRE packets
   - net/hns3: fix outer UDP checksum fail with simple BD


author: huangdonghua <huangdonghua3@h-partners.com> - 23.11-40
changelog:
  testpmd DCB Forwarding Enhancements and hns3 Tunnel Checksum Fix:
   - app/testpmd: check start for DCB forwarding TC commands
   - app/testpmd: show DCB forwarding TC list and cores
   - net/hns3: fix L4 checksum incorrect for tunnel packets


author: xinghe <xinghe2@h-partners.com> - 2.0.11-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix ebtables-restore --noflush failed when ebtables is uninstall


author: chenchen <chen_aka_jan@163.com> - 1:4.11-4
changelog:
  - switch to the new httpclient45 ECF provider
  - remove ECF httpclient dependency from p2 test
  - build failed with compilation failure in org.eclipse.test


author: liyanan <liyanan32@h-partners.com> - 1:4.11-8
changelog:
  - Add security compile options pie, relro and -fstack-protector-strong
  - Add glassfish-jsp and glassfish-servlet-api and glassfish-el-api version limit


author: malike <malike@kylinos.cn> - 202308-48
changelog:
  - Fix the issue on ARM64 platforms where virtual machines created
  - via the `virt-install` command with the `--location` parameter
  - pointing to an ISO fail to boot into the ISO installation interface
  - normally and drop directly into the UEFI Shell. This regression
  - was introduced by patches addressing CVE-2025-2296 that
  - refactored the QemuKernelLoaderFsDxe driver.


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 18-4
changelog:
  - Fix segfault when passed --index is greater than current boot order size
    Add missing short option handling for --index (-I)


author: zhangxingrong <zhangxingrong@uniontech.com> - 18-5
changelog:
  - Fix the incorrect long parameter in help messages
  - efibootmgr: delete_bootnext is just a boolean, not an entry id


author: shixuantong <shixuantong1@huawei.com> - 0.190-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:move /usr/lib64/libdebuginfod.so from debuginfod-client-devel to debuginfod-client


author: yuanchicheng <chicheng.oerv@isrc.iscas.ac.cn> - 0.190-10
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: backport-fix-riscv64-return-value-location-retrieval-implementation.patch


author: zhang_jian <zhang_jian7@hoperun.com> - 5.8-1
changelog:
  - Upgrade to 5.8
  - Add usage hint and '-h' flag to display option summary
  - Linux: return correct status if poll(2) is interrupted
  - Add return value checks for malloc(3) and pipe(2)


author: wangkai <13474090681@163.com> - 25.3.2.6-18
changelog:
  - Fix CVE-2026-48855, CVE-2026-48858, CVE-2026-49759, CVE-2026-49760, CVE-2026-53422,
    CVE-2026-54886, CVE-2026-54887, CVE-2026-54891, CVE-2026-55950, CVE-2026-55952


author: yanglu <yanglu72@h-partners.com> - 2:6.6-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:ethtool:hibmcge:fix wrong register address in pretty print of ethtool -d command


author: andy <liuyang01@kylinos.cn> - 2:6.6-6
changelog:
  - Type:requirement
  - Id:NA
  - SUG:NA
  - DESC:ethtool: Fix SFF-8472 transceiver module identification
          ethtool: Add default branch to sff8636_show_all_ioctl switch
          qsfp: Better handling of Page 03h netlink read failure
          module-eeprom: treat zero arguments like any other arguments for hex dump
          qsf: Better handling of Page A2h netlink read failure


author: zhangyaqi <zhangyaqi@kylinos.cn> - 2:6.6-7
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:add NULL check before jsonw_string_field() in print_string()
         netlink: add NULL check for get_string() in features.c


author: Fengyan Mu <mufengyan@huawei.com> - 2:6.6-8
changelog:
  - Type:requirement
  - Id:NA
  - SUG:NA
  - DESC:ethtool: Add support the printer for the registers of unic driver
         through the command -d


author: fly_fzc <2385803914@qq.com> - 2.8.1-4
changelog:
  - fix CVE-2026-56403 CVE-2026-56404 CVE-2026-56405 CVE-2026-56406 CVE-2026-56407
        CVE-2026-56408 CVE-2026-56409 CVE-2026-56410 CVE-2026-56411 CVE-2026-56412


author: laokz <zhangkai@iscas.ac.cn> - 1.6.2-2
changelog:
  - Let valgrind BuildRequire following system i386 i486 i586 i686 pentium3 pentium4 athlon geode x86_64 armv3l armv4b armv4l armv4tl armv5tl armv5tel armv5tejl armv6l armv6hl armv7l armv7hl armv7hnl armv8l armv8hl armv8hnl armv8hcnl aarch64 loongarch64 powerpc64le ppc64le sw_64


author: liupei <liupei@kylinos.cn> - 4.12.1-8
changelog:
  - fence_scsi: Automatically detect devices for shared VGs
  - fence_scsi: Add support for space-separated devices and update in meta-data


author: liupei <liupei@kylinos.cn> - 4.12.1-9
changelog:
  - fence_azure_arm:add stack cloud support
  - azure_fence: use correct credential_scope and profile for stack hub


author: liupei <liupei@kylinos.cn> - 4.12.1-11
changelog:
  - fence_aliyun: support filter for list-action
  - fence_aliyun: add credentials file support
  - fence_aliyun: update order for new parameters


author: Liu Wang <1823363429@qq.com> - 140.13.0-2
changelog:
  - Add StartupWMClass=firefox so that GNOME can correctly recognize the Firefox window and associate it with the icon.


author: zhangxingrong <zhangxingrong@uniontech.cn> - 1.4.3-3
changelog:
  - Limit the number of clock() calls
  - Documentation (man/flac.md); fix typo 
  - flac: foreign_metadata: fix -Walloc-size
  - Fix format ending up with wrong subformat


author: lvgenggeng <lvgenggeng@uniontech.com> - 1.4.3-5
changelog:
  - backport: Refind import cuesheet op after appending seekpoints
  - backport: Make UTF-8 decoder more restrictive
  - backport: Fix endless loop in foreign metadata handling
  - backport: Fix overflow when skipping over raw input


author: wangkai <13474090681@163.com> - 2:2.11.8-1
changelog:
  - Update to 2.11.8
  - Fix CVE-2026-22852, CVE-2026-22856, CVE-2026-22859, CVE-2026-23530, CVE-2026-23531,
    CVE-2026-23532, CVE-2026-23534, CVE-2026-24491, CVE-2026-24675, CVE-2026-24676,
    CVE-2026-24679, CVE-2026-24681, CVE-2026-24682, CVE-2026-24683, CVE-2026-24684,
    CVE-2026-25997, CVE-2026-26271, CVE-2026-26986, CVE-2026-27015, CVE-2026-25941,
    CVE-2026-22855, CVE-2026-22857, CVE-2026-23533, CVE-2026-23732, CVE-2026-23883,
    CVE-2026-23884


author: wangkai <13474090681@163.com> - 2:2.11.8-3
changelog:
  - Fix CVE-2026-26955, CVE-2026-26965, CVE-2026-31806, CVE-2026-31883, CVE-2026-31885,
    CVE-2026-33984, CVE-2026-33983


author: wangkai <13474090681@163.com> - 2:2.11.8-5
changelog:
  - Fix CVE-2026-25942, CVE-2026-25952, CVE-2026-25953, CVE-2026-25954, CVE-2026-27951,
    CVE-2026-29774, CVE-2026-29775, CVE-2026-31884, CVE-2026-33985


author: yangyun <yangyun50@huawei.com> -3.16.2-1
changelog:
  - upgrade to 3.16.2
  	- fix some issues (see: https://github.com/libfuse/libfuse/releases) 
  	- improved support for some less common systems (32bit, alternative libcs)
  	- unsupported mount options are no longer silently accepted
  	- auto_unmount is now compatible with allow_other
  	- readdir kernel cache can be enabled from high-level API


author: Qin Fandong <qinfandong@kylinos.cn> - 1.8.17-9
changelog:
  - Remove build requires protobuf-c* and disable plugin logitech-bulkcontroller
    which to upgrade the firmware on Logitech Video Collaboration products.


author: Chenzhen <chenzhen126@huawei.com> - 2.0.2-4
changelog:
  - fix restart thread block by resetting probe pid
    fix service failed when cmd server thread starts late
    fix OOB write when getting proc cmdline
    fix restart gopher failed for check gopher pid multi times
    fix run sig hander core for probe mng create later
    fix potential nullptr dereference in libevent openssl cb
    ipc: reset probe_flags to 0 when restarting probes
    tcpprobe: do not flush snooped procs to avoid deleting tcp link by accident
    fix buffer overflow in sscanf
    fix buffer overflow and ret value of sscanf
    snooper: enlarge channel map and shorten poll timeout to ease event loss
    system_infos: fix oob of arrays and double free
    Refactor to reduce memory usage of metric record
    bugfix: path parsing error when gala-gopher running in container
    fix strdup relative error
    tcpprobe: fix incorret struct type of tracepoint event
    fix UAF of probe bin after parsing invalid config
    snooper: fix opposite judgment logic of container info


author: JDLihoo <donglihao1@huawei.com> - 2.0.2-6
changelog:
  - restore the pristine source tarball and package upstream changes as patches
  - consolidate upstream changes into 25 Git-formatted patches
  - exclude build artifacts, IDE metadata, profiling images, and unrelated line-ending churn


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-79
changelog:
  - cfg: notify that it's unsupported, when stack_num > 1
  - fix errno == ETIMEFOUT
  - fix epoll and recv threads blocked on the same semaphore. data cannot be read in recv thread.
  - fix rpc pool leak, when thread exits
  - remove app_bind_numa check from exclude_cpus
  - openGauss: fix connection attempt failed
  - openGauss: fix gs_ctl switchover failed


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-80
changelog:
  - Connect: execute lwip connect if dst_ip and host_ip are in the same network.
  - kernerl bind: add ipv6 add check
  - openGauss unsupport_tcp_optname
  - fix a contention issue when rpc pools are added to rpc_pool_array


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-82
changelog:
  - DUMP: fix abnomal printing in the dump process.
  - SIGNAL: Adjust hijack sigal table to hijack SIGABRT SIGQUIT and delet SIGKILL
  - SIGNAL: Adjust sigaction function to keep lstack signal function executed successfully.


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-83
changelog:
  - SIGNAL: block SIGSEGV during exit process
  - Stack: unset stack_stop, while stacks exit by rpc message.
  - fix the memory leak when using strdup


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-84
changelog:
  - update gazelle max numa nodes 8
  - Protocal: fixing deathlock between protocol threads and app thread
  - Connect: fix benchmark_dws connect failed
  - RTC-mode: fix gazellectl can't print connenct info
  - add xdp tx checksum/tso offload


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-85
changelog:
  - sockio: fix rpc_send coredump after RPC_MSG_EXIT
  - sockio: fix tcp_write not remove EPOLLOUT
  - fix 20.03-LTS build failed
  - sk_wait: igonre mem_thread flush signal
  - sockio: fix sendmbox full return EWOULDBLOCK
  - sockio: fix callback_tcp_send output too many at once
  - mempool: increase MEM_THREAD_MANAGER_FREE_S to avoid poll
  - sockctl: fix rtw broadcast close and shutdown
  - poll: fix do_lwip_connected_callback not delete poll kernel fd
  - sk_event: fix rtw epoll wrong event notify and remove
  - sockio: fix rtw_stack_tcp_write wrong copied_total after append
  - epoll: fix do_lwip_connected_callback
  - sk_wait: fix lwip_wait_foreach_notify coredump at startup
  - socket: fix stack_udp_readmsg return len
  - sk_wait: fix sock_wait_common_free socket: simplify calling free_count in rtw_stack_tcp_write
  - mbox: fix mbox_ring_common_free coredump when rte_ring_create failed
  - sk_wait: fix lwip_tcp_allow_send coredump
  - mempool: stop using cache when too many threads
  - mempool: fix pthread_tryjoin_np coredump when mysqld shutdown
  - mempool: mem_get_rpc add reserve limit
  - mempool: fix mbox_ring free not call recv_finish_burst
  - mempool: modify mbuf num and rpc_msg num
  - socket: fix sk_wait cannot be interrupted by signals
  - socket: fix tcp closed
  - tcp: add GAZELLE_TCP_ASYNC_RECVD      fix mbuf OOM caused by untimely sockio_peek_recv_free
  - socket: fix stack_tcp_read do not recv_finish_burst
  - socket: fix connect blocking
  - mempool: fix copy_mbuf_private
  - dfx: support sk_wait stat
  - mempool: add mem_thread_cache_flush          fix PBUF_POOL_PREINIT
  - cfg: add mem_async_mode
  - cfg: add mem_cache_max and change default rpc_msg_max
  - socket: adapt to tcp and udp
  - socket: refactor tcp and udp
  - socket: adapt to sock_event
  - socket: refactor sock_event
  - cleancode: remove get_stack_tid DPDK_PKT_BURST_SIZE PACKET_READ_SIZE
  - cleancode: remove gazelle_light_ring
  - cleancode: add GAZELLE_SAME_NODE
  - RTC: fixing program stuck while gazelle exit in multi-threads envirement


author: Peng Fan <fanpeng@loongson.cn> - 12.3.1-110
changelog:
  - Type: BUGFIX
  - DESC:
  - LoongArch: sync fix from upstream.
  - Adjusting the sequence number and name of the patches


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 3.7.3-1
changelog:
  - Update to 3.7.3
    CheckDependentLibraries.cmake: don't use libjpeg if disabled
    frmts/mrf/CMakeLists.txt: ignore HAVE_JPEGTURBO_DUAL_MODE_8_12 if GDAL_USE_JPEG is OFF
    FindPostgreSQL.cmake: Update the list of released PgSQL versions
    Add support for PoDoFo >= 0.10.0
    Add support for TileDB 2.17
    Fix build with -DRENAME_INTERNAL_SHAPELIB_SYMBOLS=OFF


author: yaoxin <yao_xin001@hoperun.com> - 0.4.50-1
changelog:
  - Update to 0.4.50:
  - Core:
    * Better Gobject Introspection annotation coverage.
    * Improved error handling for gegl chain processing.
    * Added accessors for pad meta-data, to be able to show names and descriptions in UIs.
    * GeglColor: more lax parameters for g_arapm_values_cmp
    * exr-save: store 16bpc files as half, fixing gimp#10778
    * ff-load, ff-save: fix build with FFmpeg 7
    * dither: do processing in linear when all levels==2


author: Funda Wang <fundawang@yeah.net> - 9.56.1-14
changelog:
  - Type:CVE
  - ID:NA
  - SUG:NA
  - DECS: Fix CVE-2025-27830, CVE-2025-27832, CVE-2025-27833, CVE-2025-27834, CVE-2025-27835, CVE-2025-27836


author: hdliu <dev03108@linx-info.com> - 9.56.1-15
changelog:
  - Add font mappings so that the PS interpreter can rasterize Chinese content using the two fonts STKaiti-Regular and STheiti-Regular.


author: dillon chen <dillon.chen@gmail.com> - 9.56.1-20
changelog:
  - Type:CVE
  - ID:NA
  - SUG:NA
  - DESC:fix CVE-2025-7462
  - sync PR patch from Mon Mar 30 2026 majianhan <majianhan@kylinos.cn>


author: yaoxin <1024769339@qq.com> - 2:3.2.4-6
changelog:
  - Fix CVE-2026-18301, CVE-2026-18302, CVE-2026-18303, CVE-2026-18304,
    CVE-2026-18305, CVE-2026-18306, CVE-2026-18308 and CVE-2026-18309


author: fuanan <fuanan3@h-partners.com> - 2.43.0-7
changelog:
  - Type:CVE
  - ID:CVE-2025-48384 CVE-2025-48385 CVE-2025-48386
  - SUG:NA
  - DESC:Fix CVE-2025-48384 CVE-2025-48385 CVE-2025-48386


author: fuanan <fuanan3@h-partners.com> - 2.43.0-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix malformed patch:
         backport-CVE-2025-48385-bundle-uri-fix-arbitrary-file-writes-via-parameter-i.patch


author: fuanan <fuanan3@h-partners.com> - 2.43.0-9
changelog:
  - Type:CVE
  - ID:CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835
  - SUG:NA
  - DESC:Fix CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835


author: fuanan <fuanan3@h-partners.com> - 2.43.0-10
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch
         config.mak.uname: set CSPRNG_METHOD to getrandom on Linux


author: Funda Wang <fundawang@yeah.net> - 1.76.3-1
changelog:
  - update to 1.76.3
  - disable Regress test for now as it failed with:
    TypeError: can't redefine non-configurable property "name_conflict" in testRegress.js (line 923)


author: zhaoyonghao10 <zhaoyonghao10@h-partners.com> - 2.78.6-2
changelog:
  - apply 3 patches: backport-gsocks4aproxy--Fix-a-buffer-leak-when-finishing-co.patch, backport-tests--Add-thread-pool-stress-test-to-task-c.patch, backport-test--cleanup-trailing-spaces-task-c.patch


author: zhusicong <zhusicong@h-partners> - 2.78.6-3
changelog:
  - fix CVE-2026-58010, CVE-2026-58011, CVE-2026-58012, CVE-2026-58013, CVE-2026-58014, CVE-2026-58015, CVE-2026-58016


author: panzhe <panzhe@kylinos.cn> - 2.38-107
changelog:
  - Sw64: Fix getpriority error

   * Fri May 29 2026 zhongxuan2 <zhongxuan2@h-partners.com> - 2.38-106
   - fix-cve-2026-5435
   - fix-CVE-2026-6238


author: litenglong <litenglong@kylinos.cn> - 2.38-115
changelog:
  - aarch64: delete revert-aarch64-Use-memcpy_simd-as-the-default-memcpy.patch to align with the upstream community.


author: wuguanghao <wuguanghao3@huawei.com> - 11.1-1
changelog:
  - upgrade to 11.1
    - add simple-quota xattr to afr and ec ignore list
    - fix asan use-after-free bug
    - fix error not supported for ipv6
    - support OpenSSL 3.0
    - drop libglusterd
    - O_PATH support over protocol
    - Enable AES cipher for SSL by default
    - glusterd: add stripe_count in volume info
    - snapshots: Support for ZFS Snapshots
    - gfapi: Add support for 'AT_EMPTY_PATH' and 'AT_REMOVEDIR' flag


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 11.1-2
changelog:
  - fix upgrade error that {_mandir}/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.


author: Linux_zhang <244695981@qq.com> - 3.8.2-13
changelog:
  - fix CVE-2026-33846,CVE-2026-3833,CVE-2026-42009,CVE-2026-42010,CVE-2026-42014,CVE-2026-42015,CVE-2026-5260.


author: Xu Raoqing <609179072@qq.com> - 3.8.2-16
changelog:
  - buffers: simplify and tighten parse_handshake_header checks
  - lib/auth/psk_passwd: limit the length of the comparison
  - x509/name_constraints: fix intersecting empty constraints
  - datum, mem, str: add helper functions to steal pointers
  - mem,str,datum: rename _steal_* to _take_*
  - x509/virt-san: a small OOM-correctness fix
  - x509: add bare-bones awareness of SRV virtual SAN
  - x509/hostname-verify: make URI/SRV SAN preclude CN fallback
  - fix CVE-2026-42012


author: laokz <zhangkai@iscas.ac.cn> - 2.15-2
changelog:
  - riscv64: force --enable-frame-pointers due to unsupported
    -momit-leaf-frame-pointer compile option until gcc14


author: yixiangzhike <yixiangzhike007@163.com> - 1.17.0-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix the failure of testcase when building with python-setuptools>=66.0.0


author: yixiangzhike <yixiangzhike007@163.com> - 1.23.0-4
changelog:
  - Delete duplicate files between groff and groff-x11
  - Detete Obsoletes and Provides about groff-x11 from groff


author: yechao-w <wang.yechao255@zte.com.cn> - 1:2.12-45
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: kern/riscv/efi/init: Use time register in grub_efi_get_time_ms()


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1:2.12-47
changelog:
  - Type:CVE
  - CVE:CVE-2025-61661,CVE-2025-61662,CVE-2025-54771,CVE-2025-54770,CVE-2025-61663,CVE-2025-61664
  - SUG:NA
  - DESC:commands/usbtest: Ensure string length is sufficient in usb string processing
         commands/usbtest: Use correct string length field
         tests/lib/functional_test: Unregister commands on module unload
         normal/main: Unregister commands on module unload
         gettext/gettext: Unregister gettext command on module unload
         net/net: Unregister net_set_vlan command on unload
         kern/file: Call grub_dl_unref() after fs->fs_close()
         commands/test: Fix error in recursion depth calculation


author: Han Gao <gaohan@iscas.ac.cn> - 1:2.12-48
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:configure: Add -mno-relax on riscv*
         configure: Defer check for -mcmodel=large until PIC/PIE checks are done


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 1:2.12-50
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: workaround the BuildRequires mis-preinstallation issue on build systems


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1:2.12-51
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:loader/i386/pc/linux: Fix resource leak
         Revert "lzma: Make sure we don't dereference past array
         loader/efi/linux: Correctly terminate load_options member
         loader/efi/linux: Use sizeof() instead of constant
         loader/efi/linux: Use proper type for len variable
         loader/efi/linux: Do not pass excessive size for source string
         loader/efi/linux: Remove useless assignment
         loader/efi/linux: Reuse len variable
         loader/efi/linux: Unload previous Linux kernel/initrd before updating kernel size
         normal/charset: Fix underflow and overflow in loop init
         lib/LzmaEnc: Validate len before subtracting
         osdep/unix/hostdisk: Fix signed integer overflow
         fs/zfs: Fix another memory leak in ZFS code
         fs/xfs: Fix large extent counters incompat feature support


author: lvgenggeng <lvgenggeng@uniontech.com> - 1:2.12-53
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: mmap/mmap: Add missing grub_malloc() failure check
          mmap/mmap: Fix resource leak
          mmap/mmap: Fix integer overflow in binary search


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1:2.12-54
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:grub-mkimage: Do not generate empty SBAT metadata
         efi: Fix several memory leaks of UEFI handles
         script/execute: Add a NULL check after grub_calloc() call
         normal/cmdline: Add grub_calloc() failure check and fix hist_lines state loss
         osdep/linux/ofpath: Add missing strdup() failure checks
         lib/relocator: Fix dereference after NULL check
         osdep/linux/getroot: Add missing strdup() failure checks
         script/execute: Add missing grub_strdup() failure check


author: Funda Wang <fundawang@yeah.net> - 1.22.5-2
changelog:
  - fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
    CVE-2024-47607, CVE-2024-47615, CVE-2024-47835


author: yaoxin <yao_xin001@hoperun.com> - 1.20.3-3
changelog:
  - Fix cves:
    CVE-2024-47606,CVE-2024-47599,CVE-2024-47613,CVE-2024-47775
    CVE-2024-47776,CVE-2024-47777,CVE-2024-47778,CVE-2024-47774
    CVE-2024-47540,CVE-2024-47602,CVE-2024-47601,CVE-2024-47603
    CVE-2024-47834,CVE-2024-47537,CVE-2024-47597,CVE-2024-47543
    CVE-2024-47596,CVE-2024-47539,CVE-2024-47546,CVE-2024-47598


author: Jia Chao <jiac13@chinaunicom.cn> - 3.3.4-4
changelog:
  - fix: use $HOME rather than /home/abuild, suit for all buildtools.
  - fix: yarn have ELF bin, not noarch at all.


author: Dingli Zhang <dingli@iscas.ac.cn> - 3.3.6-3
changelog:
  - Fix build on riscv64
  - Upgrade os-maven-plugin to 1.7.1
  - Remove settings.xml and use ${HOME}/.m2/repository as maven repo


author: yanglu <yanglu72@h-partners.com> - 2.9.5-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:queues:Do not use pendconn_grab_from_px
         queues:Make sure we call process_srv_queue when leaving
         queue:Make process_srv_queue return the number of streams


author: xinghe <xinghe2@h-partners.com> - 2.9.5-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:haproxy: only tid 0 must not sleep if got signal
         server/addr: fix tune.events.max-events-at-once event miss and leak


author: yaoxin <yao_xin001@hoperun.com> - 1.14.5-1
changelog:
  - Update to 1.14.5:
    * Added signed Windows msi binary and signed Apple dmg binary files.
    * Moved examples to the HDF5Examples folder in the source tree.
    * Added support for using zlib-ng package as the zlib library
    * Disable CMake UNITY_BUILD for hdf5
    * Removed "function/code stack" debugging configuration option
    * Added configure options for enabling/disabling non-standard programming language features
    * Added the CMake variable HDF5_ENABLE_ROS3_VFD to the HDF5 CMake config
      file hdf5-config.cmake. This allows it to easily detect if the library
      has been built with or without read-only S3 functionality.
    * Fixed many CVE:
      CVE-2024-29157,CVE-2024-29158,CVE-2024-29159,CVE-2024-29160,CVE-2024-29161,CVE-2024-29162
      CVE-2024-29163,CVE-2024-29164,CVE-2024-29165,CVE-2024-29166,CVE-2024-32605,CVE-2024-32606
      CVE-2024-32607,CVE-2024-32608,CVE-2024-32609,CVE-2024-32610,CVE-2024-32611,CVE-2024-32612
      CVE-2024-32613,CVE-2024-32614,CVE-2024-32615,CVE-2024-32616,CVE-2024-32617,CVE-2024-32618
      CVE-2024-32619,CVE-2024-32620,CVE-2024-32621,CVE-2024-32622,CVE-2024-32623,CVE-2024-32624
      CVE-2024-33873,CVE-2024-33874,CVE-2024-33875,CVE-2024-33876,CVE-2024-33877,CVE-2018-13871
      CVE-2018-13875,CVE-2018-14034


author: Funda Wang <fundawang@yeah.net> - 1.14.5-2
changelog:
  - add patches from azure linux for fixing CVE-2025-2153, CVE-2025-2310,
    CVE-2025-2914, CVE-2025-2926, CVE-2025-6816, CVE-2025-2925,
    CVE-2025-2924, CVE-2025-44905, CVE-2025-6269, CVE-2025-6750,
    CVE-2025-6857, CVE-2025-7067, CVE-2025-7068, CVE-2025-6858,
    CVE-2025-2923, CVE-2025-2913, CVE-2025-6516, CVE-2025-6818,
    CVE-2025-6817, CVE-2025-6856, CVE-2025-7069


author: baizhonggui <baizhonggui@huawei.com> - 540.1.linux3-18
changelog:
  - Fix building error: make[1]: cc: No such file or directory
  - Add gcc in BuildRequires 
  - Add hfsplus-tools-sysctl.patch


author: yixiangzhike <yixiangzhike007@163.com> - 3.3.0-1
changelog:
  - Update version to 3.3.0
    - htop add '-n/--max-itrations' option
    - implement zswap support
    - add IRQ PSI meter
    - refactor /proc/<pid>/status parsing
    - add option to shadow path prefixes
    - fix linux Platform_getProcessLocks() for file-description locks
    - fix format specifier warning on 32 bit
    - prevent null pointer dereference on ealy error


author: tangce <tangce1@h-partners.com> - 2.4.58-11
changelog:
  - Type:CVE
  - CVE:CVE-2025-58098,CVE-2025-65082,CVE-2025-66200
  - SUG:NA
  - DESC:fix CVE-2025-58098,CVE-2025-65082,CVE-2025-66200


author: tangce <tangce1@h-partners.com> - 2.4.58-14
changelog:
  - Type:CVE
  - CVE:CVE-2026-24072,CVE-2026-29168,CVE-2026-29169,CVE-2026-33006,CVE-2026-34059
  - SUG:NA
  - DESC:fix CVE-2026-24072,CVE-2026-29168,CVE-2026-29169,CVE-2026-33006,CVE-2026-34059


author: tangce <tangce1@h-partners.com> - 2.4.58-15
changelog:
  - Type:CVE
  - CVE:CVE-2026-33007,CVE-2026-33523,CVE-2026-33857,CVE-2026-34032
  - SUG:NA
  - DESC:fix CVE-2026-33007,CVE-2026-33523,CVE-2026-33857,CVE-2026-34032


author: tangce <tangce1@h-partners.com> - 2.4.58-17
changelog:
  - Type:CVE
  - CVE:CVE-2026-29167,CVE-2026-42535,CVE-2026-44631
  - SUG:NA
  - DESC:fix CVE-2026-29167,CVE-2026-42535,CVE-2026-44631


author: tangce <tangce1@h-partners.com> - 2.4.58-18
changelog:
  - Type:CVE
  - CVE:fix CVE-2026-48913,CVE-2026-44186,CVE-2026-44185,CVE-2026-44119,CVE-2026-43951
  - SUG:NA
  - DESC:fix CVE-2026-48913,CVE-2026-44186,CVE-2026-44185,CVE-2026-44119,CVE-2026-43951


author: tangce <tangce1@h-partners.com> - 2.4.58-19
changelog:
  - Type:CVE
  - CVE:fix CVE-2026-42536,CVE-2026-34356,CVE-2026-34355,CVE-2026-29170
  - SUG:NA
  - DESC:fix CVE-2026-42536,CVE-2026-34356,CVE-2026-34355,CVE-2026-29170


author: wujichao <wujichao1@huawei.com> - 2.1.5-12
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: combine ten similar submissions into one(0125-fix-clang-build-error.patch) and Upgrade from upstream


author: jingxiaolu<lujingxiao@huawei.com> - 2.1.5-18
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: sync patches from upstream for refactoring sandbox and bugfixing


author: zhangxingrong <zhangxingrong@uniontech.com> - 3.16-4
changelog:
  - iperf3 now builds correctly on architectures without native support for 64-bit atomic types, by linking with the libatomic library


author: wangkai <13474090681@163.com> - 3.17.1-1
changelog:
  - Update to 3.17.1
  - iperf3 no longer changes its current working directory in --daemon mode. This results in more 
    predictable behavior with relative paths, in particular finding key and credential files for authentication.
  - A new --json-stream option has been added to enable a streaming output format, consisting of 
    a series of JSON objects (for the start of the test, each measurement interval, and the end of the test) separated by newlines
  - UDP tests now work correctly between different endian hosts
  - The --fq-rate parameter now works for --reverse tests
  - The statistics reporting interval is now available in the --json start test object


author: Huang Yang <huangyang@loongson.cn> - 1.8.18-22
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Resolve malloc aborted error raised when executing ipmitool fru.


author: xinghe <xinghe2@h-partners.com> - 1:6.6.0-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ss: fix expired time format of timer
         route: filter by interface on multipath routes
         lib: names: check calloc return value in db_names_alloc
         remove redundant patches


author: mufengyan <mufengyan@huawei.com> - 1:6.6.0-10
changelog:
  - Type:feature
  - ID:NA
  - SUG:NA
  - DESC:This patch adds ARPHRD_UB for iproute2 and support name
         parse for it and deletes the display of vf address
         information in the pf


author: liweigang <liweiganga@uniontech.com> - 1.8.9-5
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: libxtables: Fix memleak of matches' udata
          xshared: Fix parsing of empty string arg in '-c' option


author: yanglu <yanglu72@h-partners.com> - 1.8.9-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:extensions:recent:Fix format string for unsigned values
         nft:cmd:Init struct nft_cmd::head early


author: Liu Chao <liuchao173@huawei.com> - 3:1.9.2-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC: use hint->name in get_usr_irq_policy to reduce the time spent on obtaining interrupt names when use --rulesconfig


author: daisicheng <daisicheng@huawei.com> - 0.9.6-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix the problem that isula-build service did not stop after it removed


author: luofeng <luofeng13@huawei.com> - 0.9.6-22
changelog:
  - Type: bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix the problem that it failed when applying patches in RISCV architecture


author: DXwangg <wangjiawei80@huawei.com> -1:1.8.0.482.b08-0
changelog:
  - update to 8u482
  - modified 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch
  - modified Fix-LineBuffer-vappend-when-buffer-too-small.patch
  - modified add-missing-test-case.patch
  - add Fix-KAEProvider-SM2-Code.patch


author: Dingli Zhang <dingli@iscas.ac.cn> -1:1.8.0.482.b08-8
changelog:
  - Fix build errors for riscv64 due to missed patch408 removal
  - Fix patch apply failure due to 8269668


author: DXwangg <wangjiawei80@huawei.com> -1:11.0.29.7-0
changelog:
  - update to 11.0.29+7(GA)
  - modify delete_expired_certificates.patch
  - modify G1-interate-region-by-bitmap-rather-than-obj-size-in.patch
  - add Enable-optimizations-upon-detecting-Phytium-CPU.patch


author: douyiwang <douyiwang@huawei.com> -1:11.0.29.7-2
changelog:
  - add fix-libpng-API-allow-reading-up-to-1012-bytes-beyond-the-png-sRGB-bbase-array-bug.patch to fix CVE-2025-66293


author: BenShuai5D <benshuai5d@163.com> 1:17.0.18.8-0
changelog:
  - upgrade to 17.0.18
  - modify Backport-Important-Fixed-Issues.patch
  - modify downgrade-the-glibc-symver-of-memcpy.patch
  - modify puyuan-jdk17.0.9-patch.patch
  - modify add-version-txt.patch
  - modify jdk17-Add-KAE-provider.patch
  - add huawei-Fix-KAEProvider-SM2-Code.patch


author: chenyanpanHW <chenyanpan@huawei.com> - 1.1.15-17
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/jfsutils-1.1.15-linux-headers.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/jfsutils_sysmacros.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/backport-fix-building-against-gcc-10.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/jfsutils-reslove-build-error.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


author: yaoxin <1024769339@qq.com> - 1.8.0-4
changelog:
  - Fix CVE-2026-40612,CVE-2026-41256,CVE-2026-41257,CVE-2026-43894,
    CVE-2026-43895,CVE-2026-43896 and CVE-2026-44777


author: liweigang <liweiganga@uniontech.com> - 0.17-3
changelog:
  - add backport-Handle-yet-another-out-of-memory-condition.patch
  - add backport-Issue-857-fix-a-few-places-where-json_tokener-should.patch


author: yueyuankun <yueyuankun@kylinos.cn> - 0.17-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Disallow control characters in strict mode
          Fix the expected output for test_parse
          Fix causing the strict-mode control characters check to incorrectly trigger


author: sunhai <sunhai10@huawei.com> - 0.17-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix the apps/json_parse "-s" (strict) option so it actually does something, and default to non-strict.


author: sunhai <sunhai10@huawei.com> - 0.17-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Handle NULL gracefully in json_tokener_free
          Issue 881 don t allow json_tokener_new_ex with a dep


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-164.0.0.149.20260731.c5db09427020
changelog:
  - !25529  Fix CVE-2026-64352
  - !25524  NFSv4: include MAY_WRITE in open permission mask for O_TRUNC
  - !25523  udf: validate VAT header length against the VAT inode size
  - !25521  isofs: bound Rock Ridge symlink components to the SL record
  - !25520  udf: validate free block extents against the partition length
  - !25188 [OLK-6.6][linux-6.6.y sync] Backport 6.6.143-6.6.144 LTS Patches
  - !25519  iov_iter: Fix potential underflow in iov_iter_extract_xarray_pages()
  - !25511 ub: ub_fwctl: Support providing universal semantic interfaces.
  - bpf: Allow LPM map access from sleepable BPF programs
  - bpf: Consistently use bpf_rcu_lock_held() everywhere
  - config: arm64: update CONFIG_FTRACE_STARTUP_TEST not set
  - crypto: qat - Return pointer directly in adf_ctl_alloc_resources
  - crypto: qat - Replace kzalloc() + copy_from_user() with memdup_user()
  - drivers/base/memory: set mem->altmap after successful device registration
  - serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails
  - serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is zero
  - NFS: Prevent resource leak in nfs_alloc_server()
  - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  - nfsd: check get_user() return when reading princhashlen
  - fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  - fbdev: modedb: fix a possible UAF in fb_find_mode()
  - fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var
  - power: reset: linkstation-poweroff: fix use-after-free in the linkstation_poweroff_init()
  - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  - KVM: x86: hyper-v: Bound the bank index when querying sparse banks
  - 9p: avoid putting oldfid in p9_client_walk() error path
  - ocfs2: reject oversized group bitmap descriptors
  - rpmsg: char: Fix use-after-free on probe error path
  - fpga: region: fix use-after-free in child_regions_with_firmware()
  - irqchip/imgpdc: Fix resource leak, add missing chained handler cleanup on remove
  - pNFS: Fix use-after-free in pnfs_update_layout()
  - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  - hdlc_ppp: sync per-proto timers before freeing hdlc state
  - gfs2: fix use-after-free in gfs2_qd_dealloc
  - exfat: fix potential use-after-free in exfat_find_dir_entry()
  - MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  - bpf: use kvfree() for replaced sysctl write buffer
  - f2fs: keep atomic write retry from zeroing original data
  - f2fs: fix incorrect FI_NO_EXTENT handling in __destroy_extent_node()
  - f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  - f2fs: fix to round down start offset of fallocate for pin file
  - f2fs: validate compress cache inode only when enabled
  - wifi: iwlwifi: mvm: fix race condition in PTP removal
  - wifi: rtw88: usb: fix memory leaks on USB write failures
  - wifi: rtw88: increase TX report timeout to fix race condition
  - wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  - wifi: ath11k: fix warning when unbinding
  - wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  - keys: Pin request_key_auth payload in instantiate paths
  - KEYS: fix overflow in keyctl_pkey_params_get_2()
  - err.h: use __always_inline on all error pointer helpers
  - fbdev: fix use-after-free in store_modes()
  - NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and CONFIG share BAR
  - apparmor: mediate the implicit connect of TCP fast open sendmsg
  - net: skmsg: preserve sg.copy across SG transforms
  - mac802154: llsec: add skb_cow_data() before in-place crypto
  - af_unix: Set gc_in_progress to true in unix_gc().
  - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC
  - udf: validate VAT header length against the VAT inode size
  - isofs: bound Rock Ridge symlink components to the SL record
  - udf: validate free block extents against the partition length
  - iov_iter: Fix potential underflow in iov_iter_extract_xarray_pages()
  - ub: ub_fwctl: Support providing universal semantic interfaces.
  - ntfs3: reject direct userspace writes to reserved $LX* xattrs
  - ipv4: account for fraggap on the paged allocation path
  - inet: add indirect call wrapper for getfrag() calls
  - ipv6: account for fraggap on the paged allocation path
  - batman-adv: tvlv: avoid race of cifsnotfound handler state
  - batman-adv: tvlv: enforce 2-byte alignment
  - batman-adv: dat: prevent false sharing between VLANs
  - batman-adv: tt: track roam count per VID
  - batman-adv: tt: don't merge change entries with different VIDs
  - batman-adv: tp_meter: handle overlapping packets
  - batman-adv: tp_meter: prevent parallel modifications of last_recv
  - batman-adv: tp_meter: annotate last_recv_time access with READ/WRITE_ONCE
  - batman-adv: tp_meter: restrict number of unacked list entries
  - batman-adv: v: prevent OGM aggregation on disabled hardif
  - batman-adv: frag: avoid underflow of TTL
  - batman-adv: frag: ensure fragment is writable before modifying TTL
  - batman-adv: fix (m|b)cast csum after decrementing TTL
  - batman-adv: ensure bcast is writable before modifying TTL
  - batman-adv: tp_meter: initialize last_recv_time during init
  - batman-adv: prevent ELP transmission interval underflow
  - batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  - batman-adv: tp_meter: add only finished tp_vars to lists
  - batman-adv: tp_meter: handle seqno wrap-around for fast recovery detection
  - batman-adv: tp_meter: fix fast recovery precondition
  - batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  - batman-adv: tp_meter: avoid window underflow
  - batman-adv: tp_meter: initialize dec_cwnd explicitly
  - batman-adv: tp_meter: initialize dup_acks explicitly
  - batman-adv: tp_meter: keep unacked list in ascending ordered
  - eventpoll: rename ep_remove_safe() back to ep_remove()
  - file: add fput() cleanup helper
  - media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  - ksmbd: reject non-VALID session in compound request branch
  - scripts/sorttable: Fix endianness handling in build-time mcount sort
  - scripts/sorttable: Allow matches to functions before function entry
  - scripts/sorttable: Use normal sort if theres no relocs in the mcount section
  - ftrace: Check against is_kernel_text() instead of kaslr_offset()
  - ftrace: Test mcount_loc addr before calling ftrace_call_addr()
  - ftrace: Do not over-allocate ftrace memory
  - ftrace: Have ftrace pages output reflect freed pages
  - ftrace: Update the mcount_loc check of skipped entries
  - scripts/sorttable: Zero out weak functions in mcount_loc table
  - scripts/sorttable: Always use an array for the mcount_loc sorting
  - scripts/sorttable: Have mcount rela sort use direct values
  - arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64
  - scripts/sorttable: Use a structure of function pointers for elf helpers
  - scripts/sorttable: Get start/stop_mcount_loc from ELF file directly
  - scripts/sorttable: Move code from sorttable.h into sorttable.c
  - scripts/sorttable: Use uint64_t for mcount sorting
  - scripts/sorttable: Add helper functions for Elf_Sym
  - scripts/sorttable: Add helper functions for Elf_Shdr
  - scripts/sorttable: Add helper functions for Elf_Ehdr
  - scripts/sorttable: Convert Elf_Sym MACRO over to a union
  - scripts/sorttable: Replace Elf_Shdr Macro with a union
  - scripts/sorttable: Convert Elf_Ehdr to union
  - scripts/sorttable: Make compare_extable() into two functions
  - scripts/sorttable: Have the ORC code use the _r() functions to read
  - scripts/sorttable: Remove unneeded Elf_Rel
  - scripts/sorttable: Remove unused write functions
  - scripts/sorttable: Remove unused macro defines
  - fuse: re-lock request before replacing page cache folio
  - slimbus: qcom-ngd-ctrl: Balance pm_runtime enablement for NGD
  - slimbus: qcom-ngd-ctrl: Fix up platform_driver registration
  - rxrpc: Fix the ACK parser to extract the SACK table for parsing
  - net: phonet: free phonet_device after RCU grace period
  - phonet: Pass net and ifindex to phonet_address_notify().
  - phonet: Pass ifindex to fill_addr().
  - Drivers: hv: vmbus: Improve the logic of reserving fb_mmio on Gen2 VMs
  - hv: utils: handle and propagate errors in kvp_register
  - regulator: core: fix locking in regulator_resolve_supply() error path
  - ring-buffer: Remove ring_buffer_read_prepare_sync()
  - selftests/bpf: Update comments find_equal_scalars->sync_linked_regs
  - af_unix: Reject SIOCATMARK on non-stream sockets
  - selftests/bpf: Add test to ensure kprobe_multi is not sleepable
  - agp/amd64: Fix broken error propagation in agp_amd64_probe()
  - net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink()
  - i2c: stub: Reject I2C block transfers with invalid length
  - RDMA/bnxt_re: zero shared page before exposing to userspace
  - KVM: VMX: Update SVI during runtime APICv activation
  - ARM: fix branch predictor hardening
  - ARM: fix hash_name() fault
  - ARM: allow __do_kernel_fault() to report execution of memory faults
  - ARM: group is_permission_fault() with is_translation_fault()
  - debugobjects: Dont call fill_pool() in early boot hardirq context
  - debugobjects: Do not fill_pool() if pi_blocked_on
  - debugobjects: Use LD_WAIT_CONFIG instead of LD_WAIT_SLEEP
  - debugobjects: Allow to refill the pool before SYSTEM_SCHEDULING
  - batman-adv: tt: prevent TVLV entry number overflow
  - drm/v3d: Skip CSD when it has zeroed workgroups
  - drm/v3d: Store the active job inside the queue's state


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-164.0.0.149.20260803.145abda29400
changelog:
  - !25632 v2  bpf mainline
  - !24961  i2c: core: fix adapter registration race
  - !25633  ALSA: hda/cs35l41: Fix firmware load work teardown
  - !25635  vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc
  - !25636  iommufd: Break the loop on failure in iommufd_fault_fops_read()
  - !25605  posix-cpu-timers: Prevent UAF caused by non-leader exec() race
  - !25600 Fix CVE-2026-64496
  - !25602 Fix CVE-2026-64456
  - iommufd: Break the loop on failure in iommufd_fault_fops_read()
  - vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc
  - !25272 [OLK-6.6] Fix CVE-2026-64306
  - !25274 [OLK-6.6] Fix CVE-2026-64313
  - !25273 [OLK-6.6] Fix CVE-2026-64312
  - !25472 [OLK-6.6] Fix CVE-2026-64531
  - ALSA: hda/cs35l41: Fix firmware load work teardown
  - bpf: Clear rb node linkage when freeing bpf_rb_root
  - bpf: Add validation for bpf_set_retval argument
  - bpf: Reject sleepable BPF_LSM_CGROUP programs at load time
  - bpf: Fix setting retval to -EPERM for cgroup hooks not returning errno
  - bpf: Guard __get_user acesss with access_ok for uprobe_multi data
  - !25608  nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page
  - !25490  e1000e: Fix out-of-bounds MMIO access by validating BAR0 size
  - !25619 v2  bpf: Support for hardening against JIT spraying
  - !25618 sched/xsched: fix permission issues
  - !25504  i2c: stub: Reject I2C block transfers with invalid length
  - !25625 rme: use DMA API for virtio in realm world
  - !25612  udf: validate sparing table length as an entry count, not a byte count
  - !25611  smb: client: harden POSIX SID length parsing
  - !25610  smb: client: mask server-provided mode to 07777 in modefromsid
  - !25609  smb: client: Fix next buffer leak in receive_encrypted_standard()
  - !25607  nvmet-auth: validate reply message payload bounds against transfer length
  - !25131  bpf: Reject fragmented frames in devmap
  - !25064  bpf: use kvfree() for replaced sysctl write buffer
  - !25074  bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized
  - !24412 [OLK-6.6] Fix CVE-2026-53189
  - !24427 [OLK-6.6] Fix CVE-2026-53225
  - !24471 [OLK-6.6] Fix CVE-2026-53154
  - !24540 [OLK-6.6] Fix CVE-2026-52929
  - rme: use DMA API for virtio in realm world
  - !25429  Fix CVE-2026-64448
  - !25229 Fix CVE-2026-64425
  - !25416 v2  Fix CVE-2026-64378
  - !25179 Fix CVE-2026-64326
  - !25178 Fix CVE-2026-64294
  - !25584  tracing: Bound synthetic-field strings with seq_buf
  - !25517  perf/core: Detach event groups during remove_on_exec
  - bpf: Support for hardening against JIT spraying
  - xsched: enforce permissions on attribute access
  - xsched: restrict vstream management to privileged users
  - udf: validate sparing table length as an entry count, not a byte count
  - smb: client: harden POSIX SID length parsing
  - smb: client: mask server-provided mode to 07777 in modefromsid
  - smb: client: Fix next buffer leak in receive_encrypted_standard()
  - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page
  - nvmet-auth: validate reply message payload bounds against transfer length
  - posix-cpu-timers: Prevent UAF caused by non-leader exec() race
  - hwrng: virtio: clamp device-reported used.len at copy_data()
  - iio: event: Fix event FIFO reset race
  - tracing: Bound synthetic-field strings with seq_buf
  - perf/core: Detach event groups during remove_on_exec
  - i2c: stub: Reject I2C block transfers with invalid length
  - e1000e: Fix out-of-bounds MMIO access by validating BAR0 size
  - net: openvswitch: reject oversized nested action attrs
  - smb: client: reject overlapping data areas in SMB2 responses
  - smb: client: restrict implied bcc[0] exemption to responses without data area
  - writeback: drop now-unnecessary rcu_barrier() in cgroup_writeback_umount()
  - writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs()
  - writeback: Fix use after free in inode_switch_wbs_work_fn()
  - writeback: Avoid contention on wb->list_lock when switching inodes
  - crypto: ecc - Fix carry overflow in vli multiplication
  - crypto: pcrypt - restore callback for non-parallel fallback
  - crypto: drbg - Fix returning success on failure in CTR_DRBG
  - io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item
  - block: skip sync_blockdev() on surprise removal in bdev_mark_dead()
  - mm: do file ownership checks with the proper mount idmap
  - bpf: Reject fragmented frames in devmap
  - bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized
  - bpf: use kvfree() for replaced sysctl write buffer
  - i2c: core: fix adapter registration race
  - sctp: stream: fully roll back denied add-stream state
  - mm/hugetlb: restore reservation on error in hugetlb folio copy paths
  - sctp: fix uninit-value in __sctp_rcv_asconf_lookup()
  - mm/huge_memory: update file PMD counter before folio_put()


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-164.0.0.149.20260804.9e43d70e7ad5
changelog:
  - !25627 Fix CVE-2026-64539
  - !25567 [OLK-6.6] Fix CVE-2026-64546
  - !25641  proc: protect ptrace_may_access() with exec_update_lock (FD links)
  - !25637  vfio/pci: Latch disable_idle_d3 per device
  - !25649  mainline bpf
  - bpf: Fix UAF in sock clone early bailouts
  - bpf: Disable xfrm_decode_session hook attachment
  - bpf,fork: wipe ->bpf_storage before bailouts that access it
  - !25048  KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned()
  - !25593 Fix CVE-2026-64304
  - proc: protect ptrace_may_access() with exec_update_lock (FD links)
  - vfio/pci: Latch disable_idle_d3 per device
  - Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  - crypto: qat - validate RSA CRT component lengths
  - drm/edid: fix OOB read in drm_parse_tiled_block()
  - KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned()


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-165.0.0.150
changelog:
  - !25666 Fix some security issues
  - !24043 ACPI: CPPC: Move reference performance to capabilities
  - !25230 [OLK-6.6] Fix CVE-2026-64226
  - !25678 Fix: adapt DYNAMIC_AFFINITY for cgroup v2
  - !25683 Fix CVE-2026-64206
  - !25703  crypto: qat - fix VF2PF work teardown race in adf_disable_sriov()
  - !25615 [OLK-6.6][linux-6.6.y sync] Backport 6.6.144-6.6.145 LTS Patches
  - usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect
  - serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms
  - proc: Fix broken error paths for namespace links
  - selftests/bpf: Add simple strscpy() implementation
  - tools/testing: add linux/args.h header and fix radix, VMA tests
  - jiffies: Cast to unsigned long in secs_to_jiffies() conversion
  - jiffies: Define secs_to_jiffies()
  - xfs: fix stupid compiler warning
  - Bluetooth: btmtk: Fix btmtk.c undefined reference build error harder
  - selftests/hid: ensure CKI can compile our new tests on old kernels
  - Bluetooth: 6lowpan: Fix using chan->conn as indication to no remote netdev
  - ksmbd: fix durable reconnect double-bind race in ksmbd_reopen_durable_fd
  - seqlock: fix scoped_seqlock_read kernel-doc
  - KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers
  - !25686 Subject: [PATCH] x86/cpu/hygon: fix performance regression for hygon platform
  - x86/cpu/hygon: fix performance regression for hygon platform
  - !25218 [OLK-6.6] Fix CVE-2026-64076
  - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov()
  - Bluetooth: hci_core: Enable buffer flow control for SCO/eSCO
  - exfat: preserve benign secondary entries during rename and move
  - exfat: move exfat_chain_set() out of __exfat_resolve_path()
  - exfat: add exfat_get_dentry_set_by_ei() helper
  - exfat: rename argument name for exfat_move_file and exfat_rename_file
  - exfat: remove unnecessary read entry in __exfat_rename()
  - exfat: move free cluster out of exfat_init_ext_entry()
  - regulator: scmi: fix of_node refcount leak in scmi_regulator_probe()
  - regulator: scmi: Simplify with scoped for each OF child loop
  - audit: fix potential integer overflow in audit_log_n_hex()
  - audit: add audit_log_nf_skb helper function
  - crypto: qat - fix restarting state leak on allocation failure
  - btrfs: check and set EXTENT_DELALLOC_NEW before clearing EXTENT_DELALLOC
  - usb: gadget: f_fs: Tie read_buffer lifetime to ffs_epfile
  - nvmet: remove superfluous initialization
  - usb: gadget: f_fs: initialize reset_work at allocation time
  - crypto: atmel-sha204a - drop hwrng quality reduction for ATSHA204A
  - crypto: atmel - Drop explicit initialization of struct i2c_device_id::driver_data to 0
  - usb: typec: tcpm: Fix VDM type for Enter Mode commands
  - usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect()
  - serial: 8250_mid: Disable DMA for selected platforms
  - serial: 8250_mid: Remove 8250_pci usage
  - HID: appleir: fix UAF on pending key_up_timer in remove()
  - treewide: Switch/rename to timer_delete[_sync]()
  - proc: protect ptrace_may_access() with exec_update_lock (part 1)
  - seqlock: Change do_task_stat() to use scoped_seqlock_read()
  - seqlock: Introduce scoped_seqlock_read()
  - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled
  - HID: add haptics page defines
  - perf/x86/intel/uncore: Defer ADL global PMON enable to enable_box()
  - ksmbd: track the connection owning a byte-range lock
  - ksmbd: centralize ksmbd_conn final release to plug transport leak
  - ksmbd: use opener credentials for FSCTL mutations
  - smb: client: resolve SWN tcon from live registrations
  - smb: client: Improve unlocking of a mutex in cifs_get_swn_reg()
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb()
  - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister
  - netfilter: ebtables: zero chainstack array
  - netfilter: ebtables: Use vmalloc_array() to improve code
  - media: nxp: imx8-isi: Fix use-after-free on remove
  - media: nxp: imx8-isi: use devm_pm_runtime_enable() to simplify code
  - media: nxp: imx8-isi: Convert to platform remove callback returning void
  - gpio: sch: use raw_spinlock_t in the irq startup path
  - coresight: etb10: restore atomic_t for shared reading state
  - mm/shrinker: do not hold RCU lock in shrinker_debugfs_count_show()
  - staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr()
  - staging: rtl8723bs: fix spaces around binary operators
  - staging: rtl8723bs: core: move constants to right side in comparison
  - PCI: Free saved list without holding pci_bus_sem
  - PCI: Prevent resource tree corruption when BAR resize fails
  - PCI: mediatek: Fix IRQ domain leak when port fails to enable
  - PCI: mediatek: Use generic MACRO for TPVPERL delay
  - PCI: mediatek: Convert bool to single quirks entry and bitmap
  - PCI: controller: Use dev_fwnode() instead of of_fwnode_handle()
  - PCI: imx6: Fix IMX6SX_GPR12_PCIE_TEST_POWERDOWN handling
  - vfio/mlx5: Fix racy bitfields and tighten struct layout
  - PCI: altera: Fix resource leaks on probe failure
  - ALSA: aoa: check snd_ctl_new1() return value
  - iio: common: st_sensors: honour channel endianness in read_axis_data
  - iio: pressure: mpl115: fix runtime PM leak on read error
  - iio: imu: inv_icm42600: fix timestamping by limiting FIFO reading
  - iio: imu: inv_icm42600: stabilized timestamp in interrupt
  - iio: invensense: fix timestamp glitches when switching frequency
  - iio: invensense: remove redundant initialization of variable period
  - iio: hid-sensor-rotation: Fix stale or zero output when reading raw values
  - iio: imu: adis: add IRQF_NO_THREAD to non-FIFO trigger IRQ
  - ACPI: NFIT: core: Fix possible deadlock and missing notifications
  - ACPI: NFIT: core: Use devm_acpi_install_notify_handler()
  - ACPI: bus: Introduce devm_acpi_install_notify_handler()
  - ACPI: driver: Check ACPI_COMPANION() against NULL during probe
  - ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup
  - perf/x86/amd/brs: Fix kernel address leakage
  - mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout
  - mtd: rawnand: lpc32xx_mlc: fail DMA transfers on timeout
  - mtd: rawnand: fsl_ifc: return errors for failed page reads
  - mmc: vub300: defer reset until cmd_mutex is unlocked
  - mtd: mchp23k256: use SPI match data for chip caps
  - mtd: onenand: samsung: report DMA completion timeouts
  - wifi: mwifiex: fix permanently busy scans after multiple roam iterations
  - wifi: mac80211: free ack status frame on TX header build failure
  - powerpc/spufs: fix out-of-bounds access in spufs_mem_mmap_access()
  - reset: sunxi: fix memory region leak on ioremap failure
  - ipvs: reload ip header after head reallocation
  - ipvs: fix more places with wrong ipv6 transport offsets
  - memstick: ms_block: reject a card that reports too many blocks
  - macsec: fix promiscuity refcount leak in macsec_dev_open()
  - llc: fix SAP refcount leak when creating incoming sockets
  - Bluetooth: btrtl: validate firmware patch bounds
  - regulator: ltc3676: Fix incorrect IRQSTAT bit offsets
  - wifi: mac80211: fix memory leak in ieee80211_register_hw()
  - wifi: rt2x00: avoid full teardown before work setup in probe
  - powerpc/pseries: fix memory leak on krealloc failure in papr_init
  - pmdomain: imx: Fix i.MX8MP VC8000E power up sequence
  - pmdomain: imx: Fix i.MX8MP power notifier
  - cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed
  - tracing/osnoise: Call synchronize_rcu() when unregistering
  - riscv: Prevent NULL pointer dereference in machine_kexec_prepare()
  - drbd: reject data replies with an out-of-range payload size
  - macsec: don't read an unset MAC header in macsec_encrypt()
  - ipvs: reset full ip_vs_seq structs in ip_vs_conn_new
  - ipvs: use parsed transport offset in SCTP state lookup
  - llc: fix SAP refcount leak in llc_ui_autobind()
  - mac802154: remove interfaces with RCU list deletion
  - s390/monwriter: Reject buffer reuse with different data length
  - riscv: probes: save original sp in rethook trampoline
  - hwmon: (asus_atk0110) Check package count before accessing element
  - net: wwan: iosm: bound device offsets in the MUX downlink decoder
  - ata: pata_pxa: Fix DMA channel leak on probe error
  - orangefs: keep the readdir entry size 64-bit in fill_from_part()
  - tracing/probes: Fix double addition of offset for @+FOFFSET
  - net/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peeked
  - net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked
  - net: lan743x: Initialize eth_syslock spinlock before use
  - fsl/fman: Free init resources on KeyGen failure in fman_init()
  - hwmon: (occ) unregister sysfs devices outside occ lock
  - net: liquidio: fix BAR resource leak on PF number failure
  - hwmon: (w83793) remove vrm sysfs file on probe failure
  - hwmon: (w83627hf) remove VID sysfs files on error and remove
  - rtc: mpfs: fix counter upload completion condition
  - bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp()
  - espintcp: use sk_msg_free_partial to fix partial send
  - LoongArch: Fix missing dirty page tracking in {pte,pmd}_wrprotect()
  - batman-adv: clean untagged VLAN on netdev registration failure
  - batman-adv: ensure minimal ethernet header on TX
  - batman-adv: retrieve ethhdr after potential skb realloc on RX
  - net/sched: sch_teql: move rcu_read_lock()/spin_lock() from _bh variants
  - ieee802154: ca8210: fix pointer truncation in kfifo on 64-bit
  - ieee802154: ca8210: fix cas_ctl leak on spi_async failure
  - ieee802154: allow legacy LLSEC ADD/DEL ops to pass strict validation
  - ieee802154: admin-gate legacy LLSEC dump operations
  - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink
  - net: ipip: require CAP_NET_ADMIN in the device netns for changelink
  - net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink
  - net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink
  - net: ena: clean up XDP TX queues when regular TX setup fails
  - net/sched: act_ct: preserve tc_skb_cb across defragmentation
  - net: ixp4xx_hss: fix duplicate HDLC netdev allocation
  - net: wwan: t7xx: destroy DMA pool on CLDMA late init failure
  - net: sit: require CAP_NET_ADMIN in the device netns for changelink
  - gpios: palmas: add .get_direction() op
  - gpio-f7188x: Add support for NCT6126D version B
  - cpu: hotplug: Bound hotplug states sysfs output
  - cpu: hotplug: Preserve per instance callback errors
  - posix-cpu-timers: Use u64 multiplication in update_rlimit_cpu()
  - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete
  - Input: ims-pcu - fix type confusion in CDC union descriptor parsing
  - Input: ims-pcu - fix race condition in reset_device sysfs callback
  - Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing
  - Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq() debug logging
  - Input: ims-pcu - fix DMA mapping violation in line setup
  - Input: ims-pcu - add response length checks
  - Input: ims-pcu - validate control endpoint type
  - Input: ims-pcu - release data interface on disconnect
  - Input: ims-pcu - fix use-after-free and double-free in disconnect
  - scsi: elx: efct: Fix I/O leak on unsupported additional CDB
  - scsi: elx: efct: Fix refcount leak in efct_hw_io_abort()
  - scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE
  - scsi: target: Bound PR-OUT TransportID parsing to the received buffer
  - scsi: xen: scsiback: Free unsubmitted command instead of double-putting it
  - scsi: xen: scsiback: Free the command tag on the TMR submit-failure path
  - scsi: sg: Report request-table problems when any status is set
  - scsi: lpfc: Fix memory leak in lpfc_sli4_driver_resource_setup()
  - scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path
  - dm-verity: increase sprintf buffer size
  - dm-verity: fix a possible NULL pointer dereference
  - dm-integrity: don't increment hash_offset twice
  - dm_early_create: fix freeing used table on dm_resume failure
  - dm-stats: fix merge accounting
  - dm-stats: fix dm_jiffies_to_msec64
  - dm-log: fix a bitset_size overflow on 32bit machines
  - dm-ioctl: fix a possible overflow in list_version_get_info
  - dm-bufio: fix wrong count calculation in dm_bufio_issue_discard
  - dm era: fix out-of-bounds memory access for non-zero start sector
  - dm thin metadata: fix metadata snapshot consistency on commit failure
  - dm thin metadata: fix superblock refcount leak on snapshot shadow failure
  - net: sparx5: unregister blocking notifier on init failure
  - bpf: Add missing access_ok call to copy_user_syms
  - can: bcm: add missing rcu list annotations and operations
  - can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure
  - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF
  - can: isotp: use unconditional synchronize_rcu() in isotp_release()
  - can: esd_usb: kill anchored URBs before freeing netdevs
  - nvmet-rdma: handle inline data with a nonzero offset
  - sctp: validate STALE_COOKIE cause length before reading staleness
  - spi: uniphier: Fix completion initialization order before devm_request_irq()
  - tpm: Make the TPM character devices non-seekable
  - tpm: fix event_size output in tpm1_binary_bios_measurements_show
  - xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink
  - xfrm: use compat translator only for u64 alignment mismatch
  - xen/gntdev: fix error handling in ioctl
  - ice: fix ice_init_link() error return preventing probe
  - i2c: mlxbf: Fix use-after-free in mlxbf_i2c_init_resource()
  - i2c: mediatek: fix WRRD for SoCs without auto_restart option
  - hwmon: (ltc2992) add missing 'select REGMAP_I2C' to Kconfig
  - ksmbd: fix integer overflow in set_file_allocation_info()
  - smb: client: use kvzalloc() for megabyte buffer in simple fallocate
  - platform/x86/amd/pmc: Delay suspend for some Lenovo Laptops
  - platform/x86/amd/pmc: Check for intermediate wakeup in function
  - dmaengine: dw-edma: Add spinlock to protect DONE_INT_MASK and ABORT_INT_MASK
  - dmaengine: tegra: Fix burst size calculation
  - tpm: tpm_tis_spi: Use wait_woken() in wait_for_tmp_stat()
  - irqchip/crossbar: Use correct index in crossbar_domain_free()
  - mtd: maps: vmu-flash: fix NULL pointer dereference in initialization
  - mtd: spi-nor: swp: Improve locking user experience
  - fpga: microchip-spi: fix zero header_size OOB read in mpf_ops_parse_header()
  - net: thunderbolt: Fix frags[] overflow by bounding frame_count
  - bus: mhi: ep: Protect mhi_ep_handle_syserr() in the error path
  - fpga: dfl: add bounds check in dfh_get_param_size()
  - ocfs2: reject non-inline dinodes with i_size and zero i_clusters
  - ocfs2: reject dinodes whose i_rdev disagrees with the file type
  - ocfs2: reject dinodes with non-canonical i_mode type
  - ocfs2: add journal NULL check in ocfs2_checkpoint_inode()
  - ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits
  - ocfs2: avoid moving extents to occupied clusters
  - mtd: rawnand: fix condition in 'nand_select_target()'
  - net/9p: fix infinite loop in p9_client_rpc on fatal signal
  - mtd: rawnand: pl353: fix probe resource allocation
  - ocfs2: use kzalloc for quota recovery bitmap allocation
  - scsi: sas: Skip opt_sectors when DMA reports no real optimization hint
  - scsi: smartpqi: Use shost_to_hba() in pqi_scan_finished()
  - 9p: skip nlink update in cacheless mode to fix WARN_ON
  - mtd: slram: remove failed entries from the device list
  - mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE
  - proc: only bump parent nlink when registering directories
  - mm/damon/sysfs-schemes: put stats for scheme_add_dirs() internal error
  - mm/damon/sysfs-schemes: fix dir put orders in access_pattern_add_dirs()
  - riscv: cacheinfo: Fix node reference leak in populate_cache_leaves
  - mips: sched: Fix CPUMASK_OFFSTACK memory corruption
  - power: supply: charger-manager: fix refcount leak in is_full_charged()
  - ntfs3: fix out-of-bounds read in decompress_lznt
  - ntfs3: validate split-point offset in indx_insert_into_buffer
  - ntfs3: bound to_move in indx_insert_into_root before hdr_insert_head
  - ntfs3: cap RESTART_TABLE free-chain walker at rt->used
  - fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation}
  - fs/ntfs3: add depth limit to indx_find_buffer to prevent stack overflow
  - fs/ntfs3: validate lcns_follow in log_replay conversion
  - fs/ntfs3: bound attr_off in UpdateResidentValue against data_off
  - fs/ntfs3: bound copy_lcns dp->page_lcns[] index in analysis pass
  - fs/ntfs3: bound DeleteIndexEntryAllocation memmove length
  - fs/ntfs3: fix syncing wrong inode on DIRSYNC cross-directory rename
  - mm/damon/core: make charge_addr_from aware of end-address exclusivity
  - power: supply: cpcap-battery: Fix missing nvmem_device_put() causing reference leak
  - MIPS: DEC: Ensure 32-bit stack location for o32 prom_printf()
  - MIPS: ip22-gio: fix device reference leak in probe
  - MIPS: ip22-gio: fix kfree() of static object
  - MIPS: ip22-gio: fix gio device memory leak
  - remoteproc: qcom: Fix leak when custom dump_segments addition fails
  - SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing
  - lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure
  - lockd: Plug nlm_file leak when nlm_do_fopen() fails
  - sunrpc: wait for in-flight TLS handshake callback when cancel loses race
  - sunrpc: pin svc_xprt across the asynchronous TLS handshake callback
  - nvdimm/btt: Free arena sub-allocations on discover_arenas() error path
  - nvdimm/btt: Free arenas on btt_init() error paths
  - jbd2: fix integer underflow in jbd2_journal_initialize_fast_commit()
  - Bluetooth: SCO: hold sk properly in sco_conn_ready
  - Bluetooth: SCO: fix sleeping under spinlock in sco_conn_ready
  - HID: playstation: validate num_touch_reports in DualShock 4 reports
  - mfd: tps6586x: Fix OF node refcount
  - cifs: invalidate cfid on unlink/rename/rmdir
  - batman-adv: tt: prevent TVLV OOB check overflow
  - batman-adv: frag: fix primary_if leak on failed linearization
  - batman-adv: frag: free unfragmentable packet
  - batman-adv: fix VLAN priority offset
  - batman-adv: tt: avoid request storms during pending request
  - batman-adv: dat: fix tie-break for candidate selection
  - batman-adv: dat: ensure accessible eth_hdr proto field
  - batman-adv: bla: reacquire gw address after skb realloc
  - batman-adv: dat: acquire ARP hw source only after skb realloc
  - batman-adv: access unicast_ttvn skb->data only after skb realloc
  - batman-adv: gw: acquire ethernet header only after skb realloc
  - s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init()
  - perf/x86/amd/lbr: Fix kernel address leakage
  - x86/boot: Reject too long acpi_rsdp= values
  - x86/boot: Validate console=uart8250 baud rate to fix early boot hang
  - tools/power/x86/intel-speed-select: Harden daemon pidfile open
  - mfd: sm501: Fix reference leak on failed device registration
  - leds: uleds: Fix potential buffer overread
  - selinux: fix incorrect execmem checks on overlayfs
  - selinux: check connect-related permissions on TCP Fast Open
  - soc: fsl: qe: panic on ioremap() failure in qe_reset()
  - soc: ti: k3-ringacc: Fix access mode for k3_ringacc_ring_pop_tail_io/proxy
  - gpu: host1x: Fix device reference leak in host1x_device_parse_dt() error path
  - netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment()
  - netfilter: xt_nat: reject unsupported target families
  - netfilter: ecache: fix inverted time_after() check
  - netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag
  - netfilter: nf_nat_sip: reload possible stale data pointer
  - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst
  - netfilter: xt_cluster: reject template conntracks in hash match
  - netfilter: nfnl_cthelper: apply per-class values when updating policies
  - netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read
  - ASoC: qcom: q6apm: fix NULL pointer dereference in graph_callback
  - ASoC: mediatek: mt8183: Release reserved memory on cleanup
  - ASoC: mediatek: mt8192: Release reserved memory on cleanup
  - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  - fbdev: tridentfb: fix potential memory leak in trident_pci_probe()
  - fbdev: nvidia: fix potential memory leak in nvidiafb_probe()
  - fbdev: vesafb: fix memory leak in vesafb_probe()
  - fbdev: carminefb: fix potential memory leak in alloc_carmine_fb()
  - fbdev: tdfxfb: fix potential memory leak in tdfxfb_probe()
  - fbdev: uvesafb: fix potential memory leak in uvesafb_probe()
  - fbdev: s3fb: fix potential memory leak in s3_pci_probe()
  - fbdev: i740fb: fix potential memory leak in i740fb_probe()
  - fbdev: radeon: fix potential memory leak in radeonfb_pci_register()
  - fbdev: sm712: Fix operator precedence in big_swap macro
  - fbdev: hecubafb: fix potential memory leak in hecubafb_probe()
  - fbdev: broadsheetfb: fix potential memory leak in broadsheetfb_probe()
  - fbdev: metronomefb: fix potential memory leak in metronomefb_probe()
  - KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs
  - KVM: s390: pci: Fix handling of AIF enable without AISB
  - KVM: arm64: vgic: Check the interrupt is still ours before migrating it
  - KVM: s390: pci: Fix GISC refcount leak on AIF enable failure
  - arm64: dts: qcom: sdm630: describe adsp_mem region properly
  - arm64: fpsimd: Fix type mismatch in sve_{save,load}_state()
  - net: ife: require ETH_HLEN to be pullable in ife_decode()
  - net: atm: reject out-of-range traffic classes in QoS validation
  - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post()
  - ASoC: SOF: topology: validate vendor array size before parsing
  - ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  - ASoC: SOF: ipc3-control: Use overflow checks in control_update size calc
  - ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  - vduse: Fix race in vduse_dev_msg_sync and vduse_dev_read_iter
  - mlxsw: fix refcount leak in mlxsw_sp_vrs_lpm_tree_replace()
  - mlxsw: fix refcount leak in mlxsw_sp_port_lag_join()
  - smb: client: fix overflow in passthrough ioctl bounds check
  - octeontx2-af: fix VF bringup affecting PF promiscuous state
  - net/mlx5: Fix L3 tunnel entropy refcount leak
  - selftests/net: fix EVP_MD_CTX leak in tcp_mmap
  - regulator: core: regulator_lock_two() should test for EDEADLK not EDEADLOCK
  - dm era: fix NULL pointer dereference in metadata_open()
  - SUNRPC: pin upper rpc_clnt across the TLS connect_worker
  - SUNRPC: release lower rpc_clnt if killed waiting for XPRT_LOCKED
  - cifs: validate DFS referral string offsets
  - s390/zcrypt: Remove the empty file
  - ipvs: ensure inner headers in ICMP errors are in headroom
  - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors
  - ipvs: use parsed transport offset in TCP state lookup
  - ipvs: pass parsed transport offset to state handlers
  - ipv6: mcast: Fix potential UAF in MLD delayed work
  - ipv6: mcast: Replace locking comments with lockdep annotations.
  - ipv4: igmp: Fix potential UAF in igmp_gq_start_timer()
  - octeontx2-pf: check DMAC extraction support before filtering
  - net/sched: cake: reject overhead values that underflow length
  - net: usb: lan78xx: disable VLAN filter in promiscuous mode
  - net: usb: lan78xx: move functions to avoid forward definitions
  - net/tls: Consume empty data records in tls_sw_read_sock()
  - ring-buffer: Fix event length with forced 8-byte alignment
  - Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup()
  - Bluetooth: ISO: exclude RFU bits from ISO_SDU_Length
  - Bluetooth: MGMT: Fix adv monitor add failure cleanup
  - Bluetooth: 6lowpan: hold L2CAP conn across debugfs control
  - amt: fix size calculation in amt_get_size()
  - net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket
  - net/sched: act_pedit: fix TOCTOU heap OOB write in tc offload
  - net: qualcomm: rmnet: validate MAP frame length before ingress parsing
  - qede: fix off-by-one in BD ring consumption on build_skb failure
  - net: microchip: vcap: fix races on the shared Super VCAP block
  - net/mlx5e: Fix HV VHCA stats agent registration race
  - net/mlx5e: Fix HV VHCA stats zero-sized buffer allocation
  - netfilter: xt_connmark: reject invalid shift parameters
  - netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop
  - netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()
  - netfilter: xt_u32: reject invalid shift counts
  - gue: validate REMCSUM private option length
  - net: usb: net1080: validate packet_len before pad-byte access in rx_fixup
  - selftests/hid: Cover hid_bpf_get_data() size overflow
  - selftests/hid: convert the hid_bpf selftests with struct_ops
  - selftests/hid: force using our compiled libbpf headers
  - selftests/hid: do not manually call headers_install
  - selftests/hid: ensure we can compile the tests on kernels pre-6.3
  - HID: picolcd: prevent NULL pointer dereference in picolcd_send_and_wait()
  - ata: sata_gemini: unwind clocks on IDE pinctrl errors
  - minix: avoid overflow in bitmap block count calculation
  - afs: Fix unchecked-length string display in debug statement
  - afs: Fix the volume AFS_VOLUME_RM_TREE is set on
  - afs: Fix vllist leak
  - afs: Fix callback service message parsers to pass through -EAGAIN
  - afs: use kvfree() to free memory allocated by kvcalloc()
  - afs: Fix error code in afs_extract_vl_addrs()
  - fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid
  - net/sched: hhf: clear heavy-hitter state on reset
  - pinctrl: meson: restore non-sleeping GPIO access
  - gpio: timberdale: Return -ENOMEM on dynamic memory allocation in probe
  - ksmbd: fix use-after-free of fp->owner.name in durable handle owner check
  - smb: move some duplicate definitions to common/cifsglob.h
  - net/sched: act_bpf: use rcu_dereference_bh() to read the filter
  - cxgb4: Fix decode strings dump for T6 adapters
  - virtio_net: disable cb when NAPI is busy-polled
  - irqchip/ts4800: Fix missing chained handler cleanup on remove
  - irqchip/gic-v3-its: Fix OF node reference leak
  - tracing: eprobe: read the complete FILTER_PTR_STRING pointer
  - tracing/events: Fix to check the simple_tsk_fn creation
  - bridge: stp: Fix a potential use-after-free when deleting a bridge
  - net/sched: sch_teql: Introduce slaves_lock to avoid race condition and UAF
  - net: gianfar: dispose irq mappings on probe failure and device removal
  - net: phy: sfp: free mii_bus in sfp_i2c_mdiobus_destroy
  - usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup()
  - hwmon: (pmbus) Fix passing events to regulator core
  - hwmon: adm1275: Prevent reading uninitialized stack
  - MIPS: DEC: Ensure RTC platform device deregistration upon failure
  - sctp: fix SCTP_RESET_STREAMS stream list length limit
  - net: enetc: check the number of BDs needed for xdp_frame
  - qede: fix out-of-bounds check for cqe->len_list[]
  - seg6: validate SRH length before reading fixed fields
  - gpio: htc-egpio: use managed gpiochip registration
  - gpio: mvebu: fail probe if gpiochip registration fails
  - spi: sh-msiof: abort transfers when reset times out
  - tracing: probes: fix typo in a log message
  - dt-bindings: net: renesas,ether: Drop example "ethernet-phy-ieee802.3-c22" fallback
  - ASoC: fsl_asrc_dma: fix eDMA maxburst misalignment with channel count
  - net: ethernet: sunplus: spl2sw: fix phy_node refcount leak in remove
  - net: sungem: fix probe error cleanup
  - net: mvneta: re-enable percpu interrupt on resume
  - rtc: cmos: unregister HPET IRQ handler on probe failure
  - rtc: ds1307: Fix off-by-one issue with wday for rx8130
  - smb/client: preserve errors from smb2_set_sparse()
  - ipv6: fix error handling in disable_policy sysctl
  - ipv6: fix error handling in forwarding sysctl
  - ipv6: fix error handling in ignore_routes_with_linkdown sysctl
  - ipv6: fix error handling in disable_ipv6 sysctl
  - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle
  - veth: fix NAPI leak in XDP enable error path
  - net: dsa: sja1105: round up PTP perout pin duration
  - net, bpf: check master for NULL in xdp_master_redirect()
  - alpha/PCI: Fix __pci_mmap_fits() overflow for zero-length BARs
  - alpha/PCI: Add security_locked_down() check to pci_mmap_resource()
  - NTB: epf: Fix doorbell bitmask and IRQ vector handling
  - NTB: epf: Report 0-based doorbell vector via ntb_db_event()
  - NTB: epf: Make db_valid_mask cover only real doorbell bits
  - netfilter: nft_compat: ebtables emulation must reject non-bridge targets
  - netfilter: nft_synproxy: stop bypassing the priv->info snapshot
  - netfilter: nf_nat: avoid invalid nat_net pointer use on failed nf_nat_init()
  - ipv4: fib: Don't ignore error route in local/main tables.
  - ipv6: Fix null-ptr-deref in fib6_nh_mtu_change().
  - ksmbd: fix use-after-free of conn->preauth_info in concurrent SMB2 NEGOTIATE
  - rtc: msc313: fix NULL deref in shared IRQ handler at probe
  - i40e: Fix i40e_debug() to use struct i40e_hw argument
  - ice: fix AQ error code comparison in ice_set_pauseparam()
  - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs()
  - PCI: endpoint: pci-epf-ntb: Add check to detect 'db_count' value of 0
  - PCI: endpoint: pci-epf-vntb: Add check to detect 'db_count' value of 0
  - bpf: zero-initialize the fib lookup flow struct
  - bpf: Fix stack slot index in nospec checks
  - rtc: ds1307: handle oscillator stop flag for ds1337/ds1339/ds3231
  - rtc: abx80x: fix the RTC_VL_CLR clearing all status flags
  - octeontx2-pf: mcs: Fix mcs resources free on PF shutdown
  - octeontx2-pf: Clear stats of all resources when freeing resources
  - octeontx2-af: mcs: Fix unsupported secy stats read
  - net: ethernet: mtk_ppe: Fix rhashtable leak in mtk_ppe_init error paths
  - tipc: fix use-after-free of the discoverer in tipc_disc_rcv()
  - net: marvell: prestera: initialize err in prestera_port_sfp_bind
  - selftests/mm: fix exclusive_cow test fork() handling
  - selftests/mm: allow PUD-level entries in compound testcase of hmm tests
  - selftests/mm: clarify alternate unmapping in compaction_test
  - irqchip/crossbar: Fix parent domain resource leak
  - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak
  - netfilter: nf_reject: skip iphdr options when looking for icmp header
  - netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer()
  - netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types
  - netfilter: ipset: annotate "pos" for concurrent readers/writers
  - netfilter: ipset: Fix data race between add and dump in all hash types
  - md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry
  - ieee802154: fix kernel-infoleak in dgram_recvmsg()
  - ieee802154: Remove WARN_ON() in cfg802154_pernet_exit()
  - ACPI: IPMI: Fix inverted interface check in ipmi_bmc_gone()
  - ACPI: resource: Amend kernel-doc style
  - thermal: intel: Fix dangling resources on thermal_throttle_online() failure
  - arm64/hw_breakpoint: reject unaligned watchpoints that would truncate BAS
  - ALSA: usb-audio: Kill MIDI 2.0 URBs before freeing endpoints
  - flow_dissector: check device type before reading ETH_ADDRS
  - devlink: Fix parent ref leak in devl_rate_node_create()
  - dpaa2-switch: fix VLAN upper check not rejecting bridge join
  - virtio-net: fix len check in receive_big()
  - spi: rpc-if: Use correct device for hardware reinitialization on resume
  - PCI: iproc: Restore .map_irq() for the platform bus driver
  - sctp: hold socket lock when dumping endpoints in sctp_diag
  - net: psample: fix info leak in PSAMPLE_ATTR_DATA
  - octeontx2-pf: Fix leak of SQ timestamp buffer on teardown
  - drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm
  - drm/amdkfd: Avoid double-unpin of DOORBELL/MMIO BOs on free
  - ASoC: tlv320aic3x: restrict CLKDIV bypass Q values in dual-rate mode
  - xfrm: validate selector family and prefixlen during match
  - xfrm: annotate data-races around xfrm_policy_count[] and xfrm_policy_default[]
  - xfrm: Support crypto offload for inbound IPv6 ESP packets not in GRO path
  - xfrm: Use the XFRM_GRO to indicate a GRO call on input
  - spi: dw: fix wrong BAUDR setting after resume
  - gpio: mlxbf3: fail probe if gpiochip registration fails
  - sparc: led: avoid trimming a newline from empty writes
  - apparmor: fix label can not be immediately before a declaration
  - i3c: master: Prevent reuse of dynamic address on device add failure
  - apparmor: put secmark label after secid lookup
  - apparmor: aa_getprocattr free procattr leak on format failure
  - apparmor: fix potential UAF in aa_replace_profiles
  - apparmor: grab ns lock and refresh when looking up changehat child profiles
  - apparmor: fix rawdata_f_data implicit flex array
  - apparmor: aa_label_alloc use aa_label_free on alloc failure
  - apparmor: check label build before no_new_privs test
  - security/apparmor/apparmorfs.c: conditionally compile get_loaddata_common_ref()
  - Revert "PCI/MSI: Unmap MSI-X region on error"
  - PCI: mediatek: Use actual physical address instead of virt_to_phys()
  - PCI: mediatek: Fix possible truncation in mtk_pcie_parse_port()
  - tools lib api: Fix mount_overload() snprintf truncation and toupper range
  - tools lib api: Fix filename__write_int() writing uninitialized stack data
  - tools lib api: Fix missing null termination in filename__read_int/ull()
  - xprtrdma: Return sendctx slot after Send preparation failure
  - xprtrdma: Repost Receive buffers for malformed replies
  - xprtrdma: Sanitize the reply credit grant after parsing
  - xprtrdma: Fix bcall rep leak and unbounded peek
  - xprtrdma: Resize reply buffers before reposting receives
  - xprtrdma: Document and assert reply-handler invariants
  - xprtrdma: Check frwr_wp_create() during connect
  - PCI: rcar-host: Remove unused LIST_HEAD(res)
  - fs/ntfs3: resize log->one_page_buf when adopting on-disk page size
  - PCI: meson: Propagate devm_add_action_or_reset() failure
  - PCI: mediatek: Fix operator precedence in PCIE_FTS_NUM_L0 macro
  - NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS in pg_get_mirror_count_write
  - NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS on fatal DS connect errors
  - nfs: keep PG_UPTODATE clear after read errors in page groups
  - NFSv4/pnfs: defer return_range callbacks until after inode unlock
  - xprtrdma: Decouple req recycling from RPC completion
  - xprtrdma: Use sendctx DMA state for Send signaling
  - xprtrdma: Post receive buffers after RPC completion
  - xprtrdma: Close lost-wakeup race in xprt_rdma_alloc_slot
  - xprtrdma: Avoid 250 ms delay on backlog wakeup
  - xprtrdma: Remove temp allocation of rpcrdma_rep objects
  - pNFS/filelayout: fix cheking if a layout is striped
  - clk: qcom: a53: Corrected frequency multiplier for 1152MHz
  - dmaengine: Fix possible use after free
  - dmaengine: qcom: gpi: set DMA_PRIVATE capability
  - perf: Fix off-by-one stack buffer overflow in kallsyms__parse()
  - dmaengine: imx-sdma: Refine spba bus searching in probe
  - drm/amd/display: Add missing kdoc for ALLM parameters
  - fs/ntfs3: fix mount failure on 64K page-size kernels
  - fs/ntfs3: add bounds check to run_get_highest_vcn()
  - HID: logitech-hidpp: remove excess kernel-doc member in hidpp_scroll_counter
  - clk: at91: keep securam node alive while mapping it
  - iio: tcs3472: power down chip on probe failure
  - iio: accel: mma8452: handle I2C read error(s) in mma8452_read()
  - iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling
  - iio: magnetometer: ak8975: fix potential kernel stack memory leak
  - iio: light: si1133: prevent race condition on timeout
  - iio: light: si1133: reset counter to prevent race condition
  - char: tlclk: fix use-after-free in tlclk_cleanup()
  - usb: host: max3421: Reject hub port requests for non-existent ports
  - usb: host: max3421: Fix shift-out-of-bounds in max3421_hub_control()
  - staging: most: video: avoid double free on video register failure
  - mailbox: mtk-adsp: fix UAF during device teardown
  - phy: phy-can-transceiver: Check driver match and driver data against NULL
  - bus: mhi: ep: Fix potential deadlock in mhi_ep_reset_worker()
  - platform/x86: xo15-ebook: Fix wakeup source and GPE handling
  - x86/platform/olpc: xo15: Drop wakeup source on driver removal
  - PCI/ASPM: Don't reconfigure ASPM entering low-power state
  - coresight: etm4x: Correct TRCVMIDCCTLR1 save and restore
  - coresight: cti: Fix DT filter signals silently ignored
  - staging: nvec: fix use-after-free in nvec_rx_completed()
  - net/9p: fix race condition on rdma->state in trans_rdma.c
  - ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write
  - mfd: cs42l43: Sanity check firmware size
  - ksmbd: fix use-after-free in same_client_has_lease()
  - ionic: Fix check in ionic_get_link_ext_stats
  - tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF)
  - tipc: fix UAF in tipc_l2_send_msg()
  - KEYS: Use acquire when reading state in keyring search
  - powerpc/kexec: fix double get_cpu() imbalance in kexec_prepare_cpus
  - powerpc/powernv: fix preempt count leak in pnv_kexec_wait_secondaries_down
  - MIPS: mm: Fix out-of-bounds write in maar_res_walk()
  - bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check
  - bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data()
  - bpf: Fix bpf_get/setsockopt to tos for ipv4-mapped ipv6 socket
  - selftests/bpf: Initialize operation name before use
  - smb/client: always return a value for FS_IOC_GETFLAGS
  - cifs: remove all cifs files before kill super
  - ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  - netfilter: nf_conncount: callers must hold rcu read lock
  - kcm: use WRITE_ONCE() when changing lower socket callbacks
  - net: bcmgenet: Use weighted round-robin TX DMA arbitration
  - net: wwan: t7xx: check skb_clone in control TX
  - net/mlx5: Check max_macs devlink param value against max capability
  - bpf: Run generic devmap egress prog on private skb
  - net: mana: guard TX wq object destroy with INVALID_MANA_HANDLE check
  - net: mana: initialize gdma queue id to INVALID_QUEUE_ID
  - net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen
  - net/sched: sch_fq_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen
  - handshake: Require admin permission for DONE command
  - power: supply: core: fix supplied_from allocations
  - ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset GPIO
  - spi: xilinx: use FIFO occupancy register to determine buffer size
  - crypto: rng - Free default RNG on module exit
  - crypto: cavium/cpt - fix DMA cleanup using wrong loop index
  - crypto: marvell/octeontx - fix DMA cleanup using wrong loop index
  - cxl/test: Add check after kzalloc() memory in alloc_mock_res()
  - tipc: reject inverted service ranges from peer bindings
  - tipc: prevent snt_unacked underflow on CONN_ACK
  - tipc: require net admin for TIPCv2 netlink mutators
  - net/sched: sch_hfsc: Don't make class passive twice
  - sctp: validate embedded address parameter length
  - bridge: cfm: reject invalid CCM interval at configuration time
  - net: fib_rules: Don't dump dying fib_rule in fib_rules_dump().
  - net/sched: cls_flow: Dont expose folded kernel pointers
  - ASoC: tegra: tegra210_ahub: Validate written enum value
  - ASoC: fsl: fsl_audmix: Validate written enum values
  - ASoC: codecs: hdac_hdmi: Validate written enum value
  - RDMA/mlx5: Release the HW‑provided UAR index rather than the SW one
  - RDMA/mlx5: Fix undefined shift of user RQ WQE size
  - RDMA/mlx5: Remove raw RSS QP restrack tracking
  - fs: efs: remove unneeded debug prints
  - Bluetooth: vhci: validate devcoredump state before side effects
  - Bluetooth: hci: validate codec capability element length
  - Bluetooth: hci_qca: fix NULL pointer dereference in qca_dmp_hdr() for non-serdev device
  - s390/process: Fix kernel thread function pointer type
  - bpf: Tighten cgroup storage cookie checks for prog arrays
  - of: cpu: add check in __of_find_n_match_cpu_property()
  - cxl/test: Zero out LSA backing memory to avoid leaking to user
  - cxl/test: Fix integer overflow in mock LSA bounds checks
  - selftests/bpf: Fix bpf_iter/task_vma test
  - ext4: fix kernel BUG in ext4_write_inline_data_end
  - bonding: 3ad: fix mux port state on oper down
  - ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend fails
  - tools/virtio: check mmap return value in vringh_test
  - vhost/net: complete zerocopy ubufs only once
  - vduse: Requeue failed read to send_list head
  - vhost/vdpa: validate virtqueue index in mmap and fault paths
  - vduse: hold vduse_lock across IDR lookup in open path
  - ASoC: codecs: aw88261: fix incorrect masks for boost regs
  - spi: meson-spifc: fix runtime PM leak on remove
  - IB/mlx4: Fill in the access_flags if IB_MR_REREG_ACCESS is not specified
  - btrfs: zoned: don't account data relocation space-info in statfs free space
  - hwmon: (it87) Clamp negative values to zero in set_fan()
  - fbdev: sm501fb: Fix buffer errors in OF binding code
  - btrfs: fix invalid pointer dereference in __btrfs_run_delayed_refs()
  - wifi: mt76: mt7921: fix potential tx_retries underflow
  - wifi: mt76: mt7915: fix potential tx_retries underflow
  - wifi: mt76: fix argument to ieee80211_is_first_frag()
  - hwspinlock: qcom: avoid uninitialized struct members
  - vmalloc: fix NULL pointer dereference in is_vm_area_hugepages()
  - pinctrl: mediatek: mt8167: Fix Schmitt trigger register offset of pins 34-39
  - pinctrl: mediatek: mt8516: Fix Schmitt trigger register offset of pins 34-39
  - scsi: target: Remove tcm_loop target reset handling
  - watchdog: unregister PM notifier on watchdog unregister
  - configfs: fix lockless traversals of ->s_children
  - firmware_loader: Fix recursive lock in device_cache_fw_images()
  - spi: ep93xx: fix double-free of zeropage on DMA setup failure
  - IB/mlx5: Properly support implicit ODP rereg_mr
  - IB/mlx5: Don't take the rereg_mr fallback without a new translation
  - ACPI: IPMI: Fix message kref handling on dead device
  - ALSA: seq: Clear variable event pointer on read
  - riscv: stacktrace: Remove bogus -0x4 offset in non-FP walk_stackframe
  - ALSA: seq: Fix partial userptr event expansion
  - wifi: wcn36xx: fix OOB read from short trigger BA firmware response
  - wifi: wcn36xx: fix OOB read from firmware count in PRINT_REG_INFO indication
  - wifi: wcn36xx: fix heap overflow from oversized firmware HAL response
  - bpf: Update transport_header when encapsulating UDP tunnel in lwt
  - arm64: dts: tqma8mpql-mba8mpxl: configure sai clock in audio codec as well
  - RDMA/irdma: Initialize iwmr->access during MR registration
  - RDMA/irdma: Fix OOB read during CQ MR registration
  - IB/cm: Fix av cm device leak on an error path in cm_init_av_by_path()
  - netfilter: conntrack: call nf_ct_gre_keymap_destroy() if master helper is pptp
  - netfilter: synproxy: protect nf_ct_seqadj_init() with conntrack lock
  - netfilter: nfnetlink_osf: fix mss parsing on big-endian architectures
  - ocfs2: fix race between ocfs2_control_install_private() and ocfs2_control_release()
  - ocfs2/dlm: require a ref for locking_state debugfs open
  - ocfs2: reject FITRIM ranges shorter than a cluster
  - ocfs2: fix buffer head management in ocfs2_read_blocks()
  - ocfs2: rebase copied fsdlm LVB pointers in locking_state
  - perf/x86/amd/core: Always use the NMI latency mitigation
  - bpftool: Use libbpf error code for flow dissector query
  - drm/amdgpu: set sub_block_index for mca ras sub-blocks
  - configfs_lookup(): don't leave ->s_dentry dangling on failure
  - lib/test_meminit: use && for bools
  - sched: restore timer_slack_ns when resetting RT policy on fork
  - ext2: fix ignored return value of generic_write_sync()
  - mm/fake-numa: fix under-allocation detection in uniform split
  - scsi: ufs: Fix wrong value printed in unexpected UPIU response case
  - scsi: pm8001: Fix error code in non_fatal_log_show()
  - scsi: Revert "scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans"
  - nvdimm/btt: Handle preemption in BTT lane acquisition
  - ARM: imx31: Fix IIM mapping leak in revision check
  - ata: libata: Fix ata_exec_internal()
  - HID: wiimote: Fix table layout and whitespace errors
  - ARM: imx3: Fix CCM node reference leak
  - ASoC: rsnd: Fix RSND_SOC_MASK width to single nibble
  - ext4: fix LOGFLUSH shutdown ordering to allow ordered-mode data writeback
  - md/raid10: reset read_slot when reusing r10bio for discard
  - rpmsg: use generic driver_override infrastructure
  - media: qcom: venus: relax encoder frame/blur step size on v6
  - media: qcom: venus: relax encoder frame/blur dimension steps on v4
  - media: qcom: venus: drop extra padding in NV12 raw size calculation
  - RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path
  - RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe
  - EDAC/{skx_common,skx}: Fix UBSAN shift-out-of-bounds in skx_get_dimm_info
  - drm/msm/dp: Fix the ISR_* enum values
  - drm/msm/dp: fix HPD state status bit shift value
  - ocfs2: kill osb->system_file_mutex lock
  - ocfs2: don't BUG_ON an invalid journal dinode
  - rapidio/tsi721: prevent a bad dereference in tsi721_db_dpc()
  - dax/kmem: account for partial discontiguous resource upon removal
  - libbpf: Fix UAF in strset__add_str()
  - libbpf: Harden parse_vma_segs() path parsing
  - drm/nouveau/bios: specify correct display fuse register for Ampere and Ada
  - drm/tegra: Fix iommu_map_sgtable() return value check
  - gpu: host1x: Fix iommu_map_sgtable() return value check
  - drm/tegra: dc: Fix device node reference leak in tegra_dc_has_output()
  - gpu: host1x: Allow entries in BO caches to be freed
  - drm/tegra: gr2d/gr3d: Contain PM in the gr*d_probe/gr*d_remove
  - drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered
  - net/sched: cls_bpf: prevent unbounded recursion in offload rollback
  - ipv6: guard against possible NULL deref in __in6_dev_stats_get()
  - workqueue: drop spurious '*' from print_worker_info() fn declaration
  - nvme-multipath: fix flex array size in struct nvme_ns_head
  - pinctrl: cs42l43: Fix polarity on debounce
  - ALSA: seq: midi: Serialize output teardown with event_input
  - mtd: spi-nor: Drop duplicate Kconfig dependency
  - mips: n64: add __iomem for writel call
  - mips: ralink: mt7621: add missing __iomem
  - MIPS: DEC: Remove do_IRQ() call indirection
  - MIPS: Fix big-endian stack argument fetching in o32 wrapper
  - PM: sleep: Use complete() in device_pm_sleep_init()
  - RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup
  - IB/mlx4: Fix refcount leak in add_port() error path
  - RDMA/rxe: Fix a use-after-free problem in rxe_mmap
  - RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs
  - bus: sunxi-rsb: Always check register address validity
  - pwm: imx27: Fix variable truncation in .apply()
  - device property: fix fwnode reference leak in fwnode_graph_get_endpoint_by_id()
  - arm64: dts: qcom: sm8450: Add power-domain and iface clk for ice node
  - firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  - media: rockchip: rga: fix too small buffer size
  - net/sched: sch_drr: annotate data-races around cl->deficit
  - regulator: dt-bindings: mt6359: Drop regulator-name pattern restrictions
  - bitops: use common function parameter names
  - sysfs: clamp show() return value in sysfs_kf_read()
  - firmware: arm_scmi: Read sensor config as 32-bit value
  - media: atomisp: Fix memory leak in atomisp_fixed_pattern_table()
  - RDMA/srpt: fix integer overflow in immediate data length check
  - RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference
  - RDMA/hns: Fix arithmetic overflow in calc_hem_config()
  - IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier
  - ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD
  - net/sched: sch_htb: annotate data-races (I)
  - net/sched: sch_htb: do not change sch->flags in htb_dump()
  - crypto: ccp - Treat zero-length cert chain as query for blob lengths
  - net/sched: sch_hfsc: annotate data-races in hfsc_dump_class_stats()
  - clk: scpi: Unregister child clock providers on remove
  - thermal: hwmon: Fix critical temperature attribute removal
  - evm: terminate and bound the evm_xattrs read buffer
  - drm/hisilicon/hibmc: use clock to look up the PLL value
  - drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  - arm64: dts: qcom: sm8450: Fix ICE reg size
  - clk: scmi: Fix clock rate rounding
  - arm64: dts: mediatek: mt8192-asurada: Move PCIe DMA bounce buffer to host
  - iommu/amd: Fix a stale comment about which legacy mode is user visible
  - nilfs2: fix backing_dev_info reference leak
  - dlm: fix add msg handle in send_queue ordered
  - crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents
  - crypto: ecrdsa - fix unknown OID check in ecrdsa_param_curve
  - crypto: atmel-sha204a - fix blocking and non-blocking rng logic
  - vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive().
  - arm64: dts: imx8x-colibri: Correct SODIMM PAD settings
  - arm64: dts: rockchip: fix rk809 interrupt pin on rk3566-roc-pc
  - pinctrl: sunxi: fix regulator leak in sunxi_pmx_request() error path
  - media: v4l2-common: Add YUV24 format info
  - media: cedrus: Fix failure to clean up hardware on probe failure
  - watchdog: sprd_wdt: Remove redundant sprd_wdt_disable() on register failure
  - watchdog: sama5d4_wdt: Fix WDDIS detection on SAM9X60 and SAMA7G5
  - watchdog: sp5100_tco: Use EFCH MMIO for newer Hygon FCH
  - ARM: dts: am335x-sl50: Fix audio bitclock and frame master endpoint
  - wifi: ath9k: fix OOB access from firmware tx status queue ID
  - kconfig: fix potential NULL pointer dereference in conf_askvalue
  - wifi: rtw88: fix OOB read from firmware RX descriptor exceeding DMA buffer
  - wifi: rtw89: Correct data type for scan index to avoid infinite loop
  - driver core: use READ_ONCE() for dev->driver in dev_has_sync_state()
  - drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  - dt-bindings: pinctrl: nvidia,tegra234: Add missing required block
  - arm64: tegra: Fix Tegra234 MGBE PTP clock
  - wifi: cfg80211: fix grammar in MLO group key error message
  - arm64: dts: qcom: sdm845-mezzanine: Fix camss ports unit_address_vs_reg warning
  - arm64: dts: rockchip: Fix gmac0 reset pin for NanoPi R5S
  - Documentation: proc: fix section numbering in table of contents
  - libbpf: Report error when a negative kprobe offset is specified
  - drm/radeon: fix memory leak in radeon_ring_restore() on lock failure
  - drm/radeon: fix integer overflow in radeon_align_pitch()
  - drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  - drm/tidss: Drop extra drm_mode_config_reset() call
  - drm/rockchip: Test for imported buffers with drm_gem_is_imported()
  - clocksource/drivers/sun5i: Handle error returns from devm_reset_control_get_optional_exclusive()
  - afs: Fix further netns teardown to cancel the preallocation charger
  - afs: fix NULL pointer dereference in afs_get_tree()
  - afs: Fix netns teardown to cancel the preallocation charger
  - rxrpc: Fix leak of released call in recvmsg(MSG_PEEK)
  - serial: 8250_omap: clear rx_running on zero-length DMA completes
  - serial: msm: Disable DMA for kernel console UART
  - dt-bindings: power: imx93: Add MIPI PHY power domain
  - dt-bindings: media: sun4i-a10-video-engine: Add interconnect properties
  - media: uvcvideo: Fix sequence number when no EOF
  - media: uvcvideo: Fix buffer sequence in frame gaps
  - media: uvcvideo: Avoid partial metadata buffers
  - crypto: crypto4xx - Remove insecure and unused rng_alg
  - crypto: crypto4xx - Remove ahash-related code
  - crypto: sun4i-ss - Remove insecure and unused rng_alg
  - nvmet-tcp: Fix potential UAF when ddgst mismatch
  - KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU
  - crypto: algif_skcipher - force synchronous processing on trees without ctx->state
  - fuse: re-lock request before returning from fuse_ref_folio()
  - fuse: fix device node leak in cuse_process_init_reply()
  - RDMA/siw: bound Read Response placement to the RREAD length
  - RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg
  - Input: maplecontrol - set driver data before registering input device
  - Input: maplemouse - set driver data before registering input device
  - Input: maple_keyb - set driver data before registering input device
  - Input: mms114 - fix multi-touch slot corruption
  - Input: maplemouse - fix NULL pointer dereference in open()
  - Input: mms114 - reject an oversized device packet size
  - Input: touchwin - reset the packet index on every complete packet
  - Input: mms114 - fix touch indexing for MMS134S and MMS136
  - Input: iforce - bound the device-reported force-feedback effect index
  - Input: goodix - clamp the device-reported contact count
  - Input: elan_i2c - prevent division by zero and arithmetic underflow
  - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count
  - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count
  - Input: synaptics-rmi4 - unregister function handlers on physical driver registration failure
  - i2c: stm32f7: truncate clock period instead of rounding it
  - i2c: mpc: Fix timeout calculations
  - udmabuf: fix DMA direction mismatch in release_udmabuf()
  - KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode
  - KVM: VMX: Refresh GUEST_PENDING_DBG_EXCEPTIONS.BS on all injected #DBs
  - NTB: epf: Fix request_irq() unwind in ntb_epf_init_isr()
  - exfat: bound uniname advance in exfat_find_dir_entry()
  - module: decompress: check return value of module_extend_max_pages()
  - watchdog: apple: Add "apple,t8103-wdt" compatible
  - EDAC/i10nm: Don't fail probing if ADXL is missing
  - spi: fsl-lpspi: terminate the RX channel on TX prepare failure path
  - spi: fsl-lpspi: replace dmaengine_terminate_all() with dmaengine_terminate_sync()
  - arm64: fpsimd: Fix type mismatch in sme_{save,load}_state()
  - crypto: talitos/hash - fix SEC2 64k - 1 ahash request limitation
  - crypto: talitos/hash - remove useless wrapper
  - crypto: talitos/hash - rename first_desc/last_desc to first_request/last_request
  - crypto: talitos/hash - drop workqueue mechanism for SEC1
  - crypto: talitos/hash - use descriptor chaining for SEC1 instead of workqueue
  - crypto: talitos/hash - prepare SEC1 descriptor chaining, remove additional descriptor
  - crypto: talitos - move code in current_desc_hdr() into a standalone function
  - crypto: talitos - move dma mapping code in talitos_submit() into a standalone dma_map_request() function
  - crypto: talitos - move dma unmapping code in flush_channel() into a standalone dma_unmap_request() function
  - crypto: talitos - add chaining of arbitrary number of descriptor for the SEC1
  - crypto: talitos - use dma_sync_single_for_cpu() before reading descriptor header
  - crypto: drbg - Fix the fips_enabled priority boost
  - crypto: drbg - Fix drbg_max_addtl() on 64-bit kernels
  - crypto: caam - use print_hex_dump_devel to guard key hex dumps again
  - crypto: caam - use print_hex_dump_devel to guard key hex dumps
  - crypto: af_alg - Remove zero-copy support from skcipher and aead
  - partitions: aix: bound the pp_count scan to the ppe array
  - btrfs: do not trim a device which is not writeable
  - nvme-multipath: set BIO_REMAPPED on bios remapped to per-path namespace disks
  - dm-ioctl: report an error if a device has no table
  - hwrng: jh7110 - fix refcount leak in starfive_trng_read()
  - iio: temperature: ltc2983: Fix n_wires default bypassing rotation check
  - usb: typec: ucsi: cancel pending work on system suspend
  - usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove
  - usb: typec: ucsi: Pass full DP config payload in SET_NEW_CAM for DP alt mode
  - usb: typec: ucsi: Invert DisplayPort role assignment
  - usb: typec: tcpm: Validate SVID index in svdm_consume_modes()
  - usb: typec: class: drop PD lookup reference
  - usb: typec: anx7411: use devm_pm_runtime_enable()
  - usbip: vudc: fix NULL deref in vep_dequeue()
  - usbip: tools: support SuperSpeedPlus devices
  - USB: usb-storage: ene_ub6250: restore media-ready check
  - USB: ulpi: fix memory leak on registration failure
  - USB: serial: digi_acceleport: fix write buffer corruption
  - USB: serial: digi_acceleport: fix hard lockup on disconnect
  - USB: serial: digi_acceleport: fix broken rx after throttle
  - USB: serial: option: add Telit Cinterion FE990D50 compositions
  - USB: serial: keyspan_pda: fix information leak
  - usb: mtu3: unmap request DMA on queue failure
  - USB: misc: uss720: unregister parport on probe failure
  - USB: storage: include US_FL_NO_SAME in quirks mask
  - usb: sl811-hcd: disable controller wakeup on remove
  - USB: legousbtower: fix use-after-free on disconnect race
  - USB: quirks: add NO_LPM for the Samsung T5 EVO Portable SSD
  - USB: ldusb: fix use-after-free on disconnect race
  - USB: idmouse: fix use-after-free on disconnect race
  - usb: gadget: f_printer: take kref only for successful open
  - usb: gadget: udc: Fix use-after-free in gadget_match_driver
  - usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler
  - usb: free iso schedules on failed submit
  - usb: dwc3: meson-g12a: fix refcount leak in dwc3_meson_g12a_resume()
  - USB: core: add USB_QUIRK_NO_LPM for VIA Labs USB 2.0 hub
  - usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info()
  - usb: cdc_acm: Add quirk for Uniden BC125AT scanner
  - net: usb: kalmia: bound RX frame length in kalmia_rx_fixup()
  - bpf: Restore sysctl new-value from 1 to 0
  - xfs: fix unreachable BIGTIME check in dquot flush validation
  - xfs: use null daddr for unset first bad log block
  - media: mtk-jpeg: cancel workqueue on release for supported platforms only
  - nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers
  - hfs/hfsplus: zero-initialize buffer in hfs_bnode_read
  - HID: sensor-hub: Add sensor_hub_input_attr_read_values() for multi-byte reads
  - HID: letsketch: fix UAF on inrange_timer at driver unbind
  - HID: wacom: stop hardware after post-start probe failures
  - tools/mm/slabinfo: fix total_objects attribute name
  - tools/mm/slabinfo: Fix trace disable logic inversion
  - X.509: Fix validation of ASN.1 certificate header
  - clocksource/drivers/timer-tegra186: Fix support for multiple watchdog instances
  - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path
  - cpufreq: pcc: fix use-after-free and double free in _OSC evaluation
  - cpufreq: Fix hotplug-suspend race during reboot
  - cpufreq: intel_pstate: Sync policy->cur during CPU offline
  - firmware_loader: fix device reference leak in firmware_upload_register()
  - OPP: of: Fix potential memory leak in opp_parse_supplies()
  - smb: client: use unaligned reads in parse_posix_ctxt()
  - smb: client: fix query directory replay double-free
  - ksmbd: use opener credentials for delete-on-close
  - ksmbd: enforce FILE_READ_ATTRIBUTES on SMB_FIND_FILE_POSIX_INFORMATION
  - ksmbd: run set info with opener credentials
  - ksmbd: require source read access for duplicate extents
  - ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellation
  - ksmbd: serialize QUERY_DIRECTORY requests per file
  - ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE
  - smb/client: Fix error code in smb2_aead_req_alloc()
  - coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer()
  - fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked()
  - fs/ntfs3: zero-fill folios beyond i_valid in ntfs_read_folio()
  - fs/ntfs3: handle attr_set_size() errors when truncating files
  - fs/ntfs3: fsync files by syncing parent inodes
  - Bluetooth: L2CAP: validate option length before reading conf opt value
  - Bluetooth: fix UAF in bt_accept_dequeue()
  - Bluetooth: btnxpuart: Fix out-of-bounds firmware read in nxp_recv_fw_req_v3()
  - Bluetooth: bnep: pin L2CAP connection during netdev registration
  - Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  - netfilter: ebtables: terminate table name before find_table_lock()
  - netfilter: ebtables: module names must be null-terminated
  - mm: shrinker: fix NULL pointer dereference in debugfs
  - mfd: cros_ec: Delay dev_set_drvdata() until probe success
  - net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes
  - ipv4: igmp: remove multicast group from hash table on device destruction
  - gpio: eic-sprd: use raw_spinlock_t in the irq startup path
  - NTB: epf: Avoid calling pci_irq_vector() from hardirq context
  - fs/ntfs3: validate Dirty Page Table capacity in log_replay copy_lcns
  - debugobjects: Plug race against a concurrent OOM disable
  - Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_complete
  - audit: Fix data races of skb_queue_len() readers on audit_queue
  - net: af_key: initialize alg_key_len for IPComp states
  - crypto: amlogic - avoid double cleanup in meson_crypto_probe()
  - staging: rtl8723bs: fix OOB write in HT_caps_handler()
  - staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop
  - staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl()
  - staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop
  - staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop
  - staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth()
  - staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie()
  - staging: media: atomisp: reduce load_primary_binaries() stack usage
  - media: staging: ipu3-imgu: Add range check for imgu_css_cfg_acc_stripe
  - staging: vme_user: fix location monitor leak in tsi148 bridge
  - staging: vme_user: fix location monitor leak in fake bridge
  - staging: vme_user: bound slave read/write to the kern_buf size
  - tipc: fix out-of-bounds read in broadcast Gap ACK blocks
  - 6lowpan: fix NHC entry use-after-free on error path
  - usb: dwc3: run gadget disconnect from sleepable suspend context
  - USB: chaoskey: Fix slab-use-after-free in chaoskey_release()
  - virtio-mmio: fix device release warning on module unload
  - netfilter: ipset: fix race between dump and ip_set_list resize
  - mm/damon/ops-common: handle extreme intervals in damon_hot_score()
  - PCI: host-common: Request bus reassignment when not probe-only
  - PCI: altera: Do not dispose parent IRQ mapping
  - usb: typec: tcpci_rt1711h: unregister TCPCI port with devres
  - usb: xhci: Fix sleep in atomic context in xhci_free_streams()
  - binder: fix UAF in binder_free_transaction()
  - binder: fix UAF in binder_thread_release()
  - Bluetooth: btusb: fix wakeup source leak on probe failure
  - Bluetooth: btusb: fix use-after-free on marvell probe failure
  - Bluetooth: btusb: fix use-after-free on registration failure
  - Bluetooth: btusb: Add USB ID 2c4e:0128 for Mercusys MA60XNB
  - vfio/pci: Release the VGA arbiter client on register_device() failure
  - ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after successful writes
  - ALSA: usb-audio: Update Babyface Pro control caches only after successful writes
  - ALSA: usb-audio: Roll back quirk control caches on write errors
  - ALSA: usb-audio: Propagate US-16x08 write errors in route/mix EQ-switch put callbacks
  - ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  - ALSA: usb-audio: avoid kobject path lookup in DualSense match
  - ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup()
  - ALSA: ice1712: check snd_ctl_new1() return value
  - ALSA: gus: check snd_ctl_new1() return value
  - ALSA: firewire: isight: bound the sample count to the packet payload
  - ALSA: es1938: check snd_ctl_new1() return value
  - ALSA: cmipci: check snd_ctl_new1() return value
  - ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser
  - ALSA: ymfpci: check snd_ctl_new1() return value
  - ALSA: virtio: Add missing 384 kHz PCM rate mapping
  - iio: temperature: ltc2983: Fix reinit_completion() called after conversion start
  - iio: magnetometer: ak8975: Add missed pm_runtime_put_autosuspend() call
  - iio: light: veml6030: fix channel type when pushing events
  - iio: light: tsl2591: return actual error from probe IRQ failure
  - iio: light: opt3001: fix missing state reset on timeout
  - iio: light: gp2ap002: fix runtime PM leak on read error
  - iio: light: al3010: fix incorrect scale for the highest gain range
  - iio: imu: st_lsm6dsx: deselect shub page before reading whoami
  - iio: imu: inv_icm42600: fix timestamp clock period by using lower value
  - iio: imu: bmi160: add IRQF_NO_THREAD to data-ready trigger IRQ
  - iio: gyro: bmg160: wait full startup time after mode change at probe
  - iio: gyro: bmg160: bail out when bandwidth/filter is not in table
  - iio: chemical: scd30: Cleanup initializations and fix sign-extension bug
  - iio: adc: ti-ads124s08: Return reset GPIO lookup errors
  - iio: adc: spear: Initialize completion before requesting IRQ
  - iio: adc: lpc32xx: Initialize completion before requesting IRQ
  - iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error
  - iio: accel: bmc150: clamp the device-reported FIFO frame count
  - usb: gadget: function: rndis: add length check for header
  - usb: gadget: function: rndis: add length check to response query
  - !25689 backport minios patches from linux mainline
  - !25661 Fix CVE-2026-64544
  - ACPI: CPPC: Fix uninitialized ref variable in cppc_get_perf_caps()
  - ACPI: CPPC: Move reference performance to capabilities
  - crypto: talitos - rename first/last to first_desc/last_desc
  - crypto: talitos - fix SEC1 32k ahash request limitation
  - crypto: talitos - stop using crypto_ahash::init
  - Revert "crypto: talitos - fix SEC1 32k ahash request limitation"
  - Revert "crypto: talitos - rename first/last to first_desc/last_desc"
  - ACPI: NFIT: core: Fix possible NULL pointer dereference
  - ACPI: CPPC: Suppress UBSAN warning caused by field misuse
  - perf trace beauty fcntl: Fix build with older kernel headers
  - Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID
  - xfs: move ->iop_recover to xfs_defer_op_type
  - xfs: use xfs_defer_finish_one to finish recovered work items
  - xfs: dump the recovered xattri log item if corruption happens
  - xfs: recreate work items when recovering intent items
  - net: add a common function to compute features for upper devices
  - bonding: Correctly support GSO ESP offload
  - bonding: add ESP offload features when slaves support
  - bonding: Fix initial {vlan,mpls}_feature set in bond_compute_features
  - net, team, bonding: Add netdev_base_features helper
  - net: team: rename team to team_core for linking
  - nfsd: change nfs4_client_to_reclaim() to allocate data
  - nfsd: move name lookup out of nfsd4_list_rec_dir()
  - apparmor: advertise the tcp fast open fix is applied
  - nfsd: Don't reset the write verifier on a commit EAGAIN
  - NFSv4/flexfiles: reject zero filehandle version count
  - fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font()
  - i2c: core: fix irq domain leak on adapter registration failure
  - block: Avoid mounting the bdev pseudo-filesystem in userspace
  - f2fs: fix listxattr handling of corrupted xattr entries
  - f2fs: fix potential deadlock in gc_merge path of f2fs_balance_fs()
  - f2fs: fix potential deadlock in f2fs_balance_fs()
  - f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  - f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  - f2fs: validate orphan inode entry count
  - device property: initialize the remaining fields of fwnode_handle in fwnode_init()
  - drm/amd: Fix set but not used warnings
  - slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngd
  - slimbus: Convert to platform remove callback returning void
  - slimbus: qcom-ngd-ctrl: Correct PDR and SSR cleanup ownership
  - slimbus: qcom-ngd-ctrl: Fix probe error path ordering
  - userfaultfd: gate must_wait writability check on pte_present()
  - Bluetooth: btusb: mediatek: return error for failed reg access
  - Bluetooth: btusb: mediatek: remove the unnecessary goto tag
  - Bluetooth: btusb: mediatek: add MT7922 subsystem reset
  - Bluetooth: btusb: mediatek: reset the controller before downloading the fw
  - Bluetooth: btmtk: apply the common btmtk_fw_get_filename
  - nfsd: reset write verifier on deferred writeback errors
  - nfsd: release layout stid on setlease failure
  - bpf, arm64: Reject out-of-range B.cond targets
  - ia64: Make acpi_cpufreq_cpu_exit return void
  - drivers/ub/sentry: avoid unaligned cast in cis_ubios_remote_msg_cb()
  - drivers/ub/sentry: add NULL check for g_kbuf_server_cna in proc show handler
  - arm64/hwcap: Define hwcaps for 2023 DPISA features
  - arm64/cpufeature: Hook new identification registers up to cpufeature
  - arm64/sysreg: Update ID_AA64SMFR0_EL1 definition for DDI0601 2023-09
  - arm64/sysreg: Update ID_AA64ISAR2_EL1 defintion for DDI0601 2023-09
  - arm64/sysreg: Update SCTLR_EL1 for DDI0601 2023-09
  - arm64/sysreg: Add definition for FPMR
  - arm64/sysreg: Add definition for ID_AA64FPFR0_EL1
  - arm64/sysreg: Add definition for ID_AA64ISAR3_EL1
  - arm64/sysreg: Add definition for ID_AA64PFR2_EL1
  - !25080  netfilter: ebtables: move to two-stage removal scheme
  - !25685  nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path
  - !25631  crypto: qat - protect service table iterations with service_lock
  - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path
  - Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock
  - drivers/ub/sentry: add count == 0 check in proc write handlers
  - drivers/ub/sentry: add bounds check for reason in oom_rate_limit_check()
  - drivers/ub/sentry: fix NULL pointer dereference in str_to_eid() error path
  - cgroup/cpuset.c: Adapt schduler dynamic affinity for hotplug scenarios with cgroup v2
  - cgroup/cpuset.c: Comment out early when prefer_cpus cpumask equals
  - cpuset: Fix prefer_cpus ineffectiveness by tracking prefer_cpus
  - crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents
  - crypto: qat - protect service table iterations with service_lock
  - sched_ext: Avoid UAF in scx_root_enable_workfn() init failure path
  - netfilter: bridge: eb_tables: close module init race
  - netfilter: ebtables: move to two-stage removal scheme


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-165.0.0.150.20260806.8a97fe374529
changelog:
  - !25764  KVM: SEV: Ignore Port I/O requests of length '0'
  - !25624  firmware_loader: fix device reference leak in firmware_upload_register()
  - !25741  net/mlx5e: xsk: Fix unlocked writing to ICOSQ
  - KVM: SEV: Ignore Port I/O requests of length '0'
  - !25744  Bluetooth: ISO: Fix data-race on iso_pi fields in hci_get_route calls
  - !25734  *** CVE-2026-64513 ***
  - !25563 [OLK-6.6] Fix CVE-2026-64542
  - !25712 Fix CVE-2026-64435
  - !25743  bpf: Copy per-CPU map value padding in copy_map_value_long()
  - !25243 [OLK-6.6] Fix CVE-2026-64265
  - !25120 [OLK-6.6] Fix CVE-2026-53393
  - !25121 [OLK-6.6] Fix CVE-2026-53399
  - Bluetooth: ISO: Fix data-race on iso_pi fields in hci_get_route calls
  - !25735  nbd: skip the capacity-change printk on device bringup and release
  - bpf: Copy per-CPU map value padding in copy_map_value_long()
  - net/mlx5e: xsk: Fix unlocked writing to ICOSQ
  - !25721  ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser
  - !25714  vfio: Remove device debugfs before releasing devres
  - !25647  i2c: i801: fix hardware state machine corruption in error path
  - !25244 [OLK-6.6] Fix CVE-2026-64266
  - !25558 [OLK-6.6] Fix CVE-2026-64537
  - !25387 [OLK-6.6] Fix CVE-2026-64411
  - !25069 [OLK-6.6] Fix CVE-2026-64189
  - !25566 [OLK-6.6] Fix CVE-2026-64545
  - !25569 [OLK-6.6] Fix CVE-2026-64548
  - !25575 [OLK-6.6] Fix CVE-2026-64554
  - !25394 [OLK-6.6] Fix CVE-2026-64422
  - !25573 [OLK-6.6] Fix CVE-2026-64552
  - !25396 [OLK-6.6] Fix CVE-2026-64424
  - !25388 [OLK-6.6] Fix CVE-2026-64412
  - !25470 [OLK-6.6] Fix CVE-2026-64530
  - !25404 [OLK-6.6] Fix CVE-2026-64436
  - !25395 [OLK-6.6] Fix CVE-2026-64423
  - !25559 [OLK-6.6] Fix CVE-2026-64538
  - nbd: skip the capacity-change printk on device bringup and release
  - KVM: x86: Unconditionally recompute CR8 intercept on PPR update
  - KVM: x86: Move update_cr8_intercept() to lapic.c
  - ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser
  - vfio: Remove device debugfs before releasing devres
  - audit: Fix data races of skb_queue_len() readers on audit_queue
  - i2c: i801: fix hardware state machine corruption in error path
  - firmware_loader: fix device reference leak in firmware_upload_register()
  - netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment()
  - virtio-net: fix len check in receive_big()
  - bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data()
  - net, bpf: check master for NULL in xdp_master_redirect()
  - ipv6: ndisc: fix NULL deref in accept_untracked_na()
  - ipv6: Fix null-ptr-deref in fib6_nh_mtu_change().
  - bridge: cfm: reject invalid CCM interval at configuration time
  - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle
  - net: af_key: initialize alg_key_len for IPComp states
  - netpoll: fix a use-after-free on shutdown path
  - ipv4: igmp: remove multicast group from hash table on device destruction
  - net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes
  - netfilter: ebtables: module names must be null-terminated
  - netfilter: ebtables: terminate table name before find_table_lock()
  - fuse: re-lock request before returning from fuse_ref_folio()
  - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req
  - netfilter: ipset: fix race between dump and ip_set_list resize
  - nfsd: release layout stid on setlease failure
  - nfsd: reset write verifier on deferred writeback errors


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-165.0.0.150.20260807.7863d54f9740
changelog:
  - !25766 obmm: fix few potential problems by code scan
  - !25777 [OLK-6.6] ub: ubase&unic: 8 related changes
  - !25784  CVE-2026-64405 fixes
  - !25537 ub: cdma: fix UAF in mmu notifier release/unregister path
  - !24200 【OLK-6.6】drm: add display driver for NEW H3C SEMI EG210 chip
  - !25621 Fix CVE-2026-64540
  - !25620 Fix CVE-2026-64553
  - !24839 ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then SMB2_CANCEL
  - !23915 [OLK-6.6] Fix CVE-2026-46275
  - !23148 [OLK-6.6] Fix CVE-2026-31462
  - !20584 [OLK-6.6] Fix CVE-2025-68736
  - !25778 ethtool: rss: fix indir_table and hkey leak on get_rxfh failure
  - !25141 [OLK-6.6] Fix CVE-2026-63807
  - !25073 [OLK-6.6] Fix CVE-2026-64146
  - !25260 [OLK-6.6] Fix CVE-2026-64284
  - !25262 [OLK-6.6] Fix CVE-2026-64287
  - Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn()
  - Bluetooth: hci_sync: Fix attempting to send HCI_Disconnect to BIS handle
  - Bluetooth: hci_core: Remove check of BDADDR_ANY in hci_conn_hash_lookup_big_state
  - Bluetooth: separate CIS_LINK and BIS_LINK link types
  - ub: cdma: fix ioctl vs remove race by widening ctx_mutex scope
  - ub: cdma: revert cdma_ioctl to pre-security-fix version
  - obmm: bound the local-node iterator and gatekeeper predicate by OBMM_MAX_LOCAL_NUMA_NODES
  - obmm: register /dev/obmm after subsystem init
  - obmm: mirror selected helpers' Kconfig dependencies
  - obmm: log preimport rollback and resource-release failures
  - obmm: accumulate nr_freed across reclaim notifiers
  - obmm: fix use-after-free in conti_free_memory debug print
  - ethtool: rss: fix indir_table and hkey leak on get_rxfh failure
  - !25765  fix amdgpu_hmm_range_get_pages
  - !25774  crypto: qat - remove unused character device and IOCTLs
  - !25723 irqchip/irq-gic-v4: Fix state inconsistency in same_affinity_group
  - !25216 [OLK-6.6] Fix CVE-2026-64036
  - crypto: qat - remove unused character device and IOCTLs
  - irqchip/irq-gic-v4: Fix state inconsistency in same_affinity_group
  - !25742  l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname
  - !25768 sched/soft_domain: Fix NULL deref in unset and move ctx inheritance to online
  - sched/soft_domain: Fix NULL deref in unset and move ctx inheritance to online
  - drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  - drm/amdgpu: fix amdgpu_hmm_range_get_pages
  - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname
  - drm-engiant: fix: correct formatting issues reported by checkpatch
  - usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup()
  - net: psample: fix info leak in PSAMPLE_ATTR_DATA
  - ub: cdma: fix UAF in mmu notifier release/unregister path
  - ub: cdma: fix security vulnerabilities in event/ioctl paths
  - ub: cdma: fix security vulnerabilities in ioctl/mmap/event/mmu paths
  - ub: cdma: add a process to update the adev status in cdma_probe
  - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU
  - KVM: x86: Ensure vendor's exit handler runs before fastpath userspace exits
  - erofs: fix metabuf leak in inode xattr initialization
  - cgroup/rstat: validate cpu before css_rstat_cpu() access
  - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level
  - ub: ubase&unic: fix an issue where logs are printed in
  - ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then SMB2_CANCEL
  - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled
  - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths
  - ub: ubase: Resolve the EQ destruction timeout issue
  - ub: ubase: Resolved the issue that the cmdq resources are
  - net: unic: Error scenarios in the IP management need to
  - net: unic: Abnormal cqe debugfs does not show status 0x0
  - ub: ubase: Add UNIC/CDMA support for DTU init
  - ub: ubase: Resolve working queue may be scheduled after
  - net: unic: JFC Destroy Process Adaptation
  - drm: Add build config to compile H3C SEMI display drivers
  - drm: add H3C SEMI display drivers, including Display Controller and DisplayPort phy driver
  - drm/amdgpu: replace PASID IDR with XArray
  - drm/amdgpu: fix the idr allocation flags
  - drm/amdgpu: prevent immediate PASID reuse case
  - drm/amdgpu: Remove usage of the deprecated ida_simple_xx() API
  - landlock: Fix handling of disconnected directories
  - landlock: Fix cosmetic change
  - landlock: Optimize file path walks and prepare for audit support
  - landlock: Optimize the number of calls to get_access_mask slightly
  - selftests/landlock: Add tests for FS topology changes with network rules
  - landlock: Refactor layer helpers
  - landlock: Refactor landlock_find_rule/insert_rule helpers
  - landlock: Move and rename layer helpers
  - landlock: Allow FS topology changes for domains without such rule type
  - landlock: Make ruleset's access masks more generic


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-165.0.0.150.20260808.48b7ad3037cd
changelog:
  - !25810  x86/bugs: Enable IBPB flush on BPF JIT allocation
  - !24886 arm64: rsi: skip NS IPA alias addresses in arm64_rsi_is_protected
  - x86/bugs: Enable IBPB flush on BPF JIT allocation
  - !25205 [OLK-6.6] Fix CVE-2026-63963
  - !25202 Fix CVE-2026-64424
  - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers
  - netpoll: fix a use-after-free on shutdown path
  - arm64: rsi: skip NS IPA alias addresses in arm64_rsi_is_protected


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-165.0.0.150.20260809.62211c5707a3
changelog:
  - !25111 Fix CVE-2026-63872
  - !25823 Fix CVE-2026-64116
  - ipv6: ioam: add NULL check for idev in ipv6_hop_ioam()
  - ipv6/addrconf: annotate data-races around devconf fields (II)
  - esp: fix page frag reference leak on skb_to_sgvec failure
  - Revert "esp: fix page frag reference leak on skb_to_sgvec failure"
  - esp: fix page frag reference leak on skb_to_sgvec failure


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-165.0.0.150.20260810.0c12d91f028e
changelog:
  - !25828  mm: refactor mm_access() to not return NULL
  - !25834  bpf, cgroup: Fix storage null-ptr-deref after replacing prog
  - bpf, cgroup: Fix storage null-ptr-deref after replacing prog
  - !24789 [OLK-6.6][linux-6.6.y sync] Backport 6.6.78-6.6.79 LTS conflict Patches
  - mm: refactor mm_access() to not return NULL
  - md/raid5: implement pers->bitmap_sector()
  - nvme: move error logging from nvme_end_req() to __nvme_end_req()
  - block: change blk_mq_add_to_batch() third argument type to bool
  - block: cleanup and fix batch completion adding conditions


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-165.0.0.150.20260811.329ccfac7afe
changelog:
  - !25880  net: core: synchronize link-watch when carrier is queried
  - !25883  x86,fs/resctrl: Prevent out-of-bounds access while offlining CPU when SNC enabled
  - !25194 [OLK-6.6] Fix CVE-2026-63950
  - !25710 [OLK-6.6] Fix CVE-2026-64562
  - !25709 [OLK-6.6] Fix CVE-2026-64561
  - x86,fs/resctrl: Prevent out-of-bounds access while offlining CPU when SNC enabled
  - !25795  Backport CVE-2026-64361 fixes from 6.6 LTS
  - net: sysfs: fix locking in carrier read
  - net: core: synchronize link-watch when carrier is queried
  - !25850 sched: Add the qos scheduler's cgroup v2 interface
  - !25852  Fix ringbuffer swap cpu buffer issue
  - !25785  CVE-2026-53120
  - sched: Add the qos scheduler's cgroup v2 interface
  - ring-buffer: Use current_context for safe per-CPU buffer swap
  - ring-buffer: Remove jump to out label in ring_buffer_swap_cpu()
  - hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length
  - hfs/hfsplus: prevent getting negative values of offset/length
  - PCI: Initialize temporary device in new_id_store()
  - PCI: fix kabi breakage due to driver_override removal
  - PCI: use generic driver_override infrastructure
  - KVM: nVMX: Hide shadow VMCS right after VMCLEAR
  - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available
  - mm/rmap: initialize nr_pages to 1 at loop start in try_to_unmap_one


author: Funda Wang <fundawang@yeah.net> - 2.0.26-20
changelog:
  - sync all branches
  - update makedumpfile to 1.7.9
  - reorder arch-dependent patches
  - cherry picked MR:
    * https://atomgit.com/src-openeuler/kexec-tools/pull/121
    * https://atomgit.com/src-openeuler/kexec-tools/pull/148
    * https://atomgit.com/src-openeuler/kexec-tools/pull/150
    * https://atomgit.com/src-openeuler/kexec-tools/pull/163


author: Liu Chao <liuchao173@huawei.com> - 30-7
changelog:
  - disable make test because cannot find /lib/modules/`uname -r`/build
  - add extramodules to depmod search path


author: jinsaihang <jinsaihang@h-partners.com> - 1:0.9.9-13
changelog:
  - Type:bugfix
  - CVE:NA  
  - SUG:NA  
  - DESC:check whether the directory is a user source code directory


author: fuanan <fuanan3@h-partners.com> - 1:0.9.9-19
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patch
         backport-lookup-fix-local-bind-check.patch


author: qujingling <qujingling@huawei.com> - 1:0.9.9-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:remove __find_parent_obj_in_dir_for_oot and support link in changed_obj


author: qujingling <qujingling@huawei.com> - 1:0.9.9-21
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:remove CONFIG_LIVEPATCH_PER_TASK_CONSISTENCY, which is not in 6.6 kernel anymore


author: zhangbinqin <zhangbinqin@h-partners.com> - 1:0.9.9-22
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:prevent global var ptr kpl relocation being removed by objcopy


author: yaoxin <1024769339@qq.com> - 1.28-3
changelog:
  - Fix CVE-2026-15811, CVE-2026-15812 and CVE-2026-15813
  - Add patches to make the tests of previous fixes run on 1.28


author: Linux_zhang <244695981@qq.com> - 2:1.0.8-2
changelog:
  - fix CHILD_MAX at build time to prevent BEP discrepancies caused by varying CHILD_MAX values across repeated builds


author: wangli <3214053332@qq.com> - 1.1.0-1
changelog:
  -   add some test files
  -   prepare corresponding script for ras\rac\rahub to deploy config file respectively
  -   update part of file paths
  -   update to 1.1.0


author: gwei3 <11015100@qq.com> - 1.1.2-1
changelog:
  -   update to 1.1.2
  -   add slice length checks to avoid buffer overflow while extracting and verifying
  -   update integration test data to meet restapi parameter check requirement
  -   modify raagent/main.go file, change log to logger, os.Exit returns different values based on diff errors
  -   close RAS restapi server in signal handler
  -   Add parameter format checking for pcr/bios/ima in POST {id}/newbasevalue API
  -   Fix bugs in v1.1.1
      bug 1: hostintegritytool.sh can only add the 2nd part of ima policy into /etc/ima/ima-policy.
      bug 2: running hostintegritytool.sh multiple times will add duplicated linux cmdlines in /etc/default/grub.
      bug 3: rahub config path was assigned wrong values, which is caused by copy/paste
  -   fix the issue that Makefile not sync vendor
  -   modify readme file


author: gwei3 <11015100@qq.com> - 1.1.2-2
changelog:
  -   update BuildRequires & Requires to replace openssl* with compat-openssl11* to adapt to latest Mainline
  -   remove redundent clean label in spec file


author: leezhenxiang <1172294056@qq.com> - 2.0.0-1
changelog:
  -   update to 2.0.0
  -   add qcaserver, attester, and tas packages
  -   add BuildRequires itrustee_sdk-devel, cjson-devel and Requires itrustee_sdk, cjson
  -   modify makefile to adapt to different architectures
  -   specify the build requires in rac and attester package


author: wujie <wujie@nj.iscas.ac.cn> - 1.0.13-3
changelog:
  - Add riscv64 support from http://fedora.riscv.rocks/koji/buildinfo?buildID=24988
    Author is David Abdurachmanov <david.abdurachmanov@gmail.com>


author: liliguang <liliguang@baidu.com> - 2.9-1
changelog:
  - update to 2.9
  - dwarf-reader: Avoid adding declarations-only global vars to IR
  - libxml-utils: Pass paramater to xml_char_sptr_to_string by reference
  - ctf-reader: Fix memory leak in lookup_symbol_in_ctf_archive


author: lingsheng <lingsheng1@h-partners.com> - 3.7.1-7
changelog:
  - Type:CVE
  - ID:CVE-2025-5914,CVE-2025-5915,CVE-2025-5916,CVE-2025-5917,CVE-2025-5918
  - SUG:NA
  - DESC:fix CVE-2025-5914 CVE-2025-5915 CVE-2025-5916 CVE-2025-5917 CVE-2025-5918


author: Weifeng Su <suweifeng1@huawei.com> - 7.8.2-1
changelog:
  - upgrade to version 7.8.2:
    -Resolve warning in GCC11
    -Fix comparison warning in add_chunk_as
    -Address Clang 16 AO_pt_lock issue
    -Handle Mingw64-GCC _atomic_errors
    -Fix linker errors in OpenBSD build
    -Update get_chunk for mmap placement
    -Correct typos in names/comments
    -Update CMake version to 3.5


author: wangzhiqiang <swangzhiqiang95@huawei.com> - 3.0.4-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Add BDPluginSpec constructor and use it in plugin_specs_from_names


author: tianmuyang <tianmuyang@huawei.com> 2:1.2.2-11
changelog:
  - Adaption for sched type eBPF program:
    backport-libbpf-Adaption-for-sched-type-eBPF-program.patch


author: yezengruan <yezengruan@huawei.com> 1.0.0-12
changelog:
  - kpatch_process: fix possible double free.
  - ptrace: fix NULL pointer access problem
  - fix patched process crashing when acccess the global var
  - fix probably restore cc symbol link fail when kill patch building uncourteous
  - optimize: Remove unnecessary comparison code


author: Zhipeng Lu <luzhipeng8@h-partners.com> - 1.0.1-0
changelog:
  - add version and fix some format and add doc to devel package
  - change the compile command and the usage of so


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 3.21.0.27-1
changelog:
  - Update package to version 3.21.0.27
    Added libdap::Array::rename_dim() for HK-247
    Added new Direct I/O support so that modules written using libdap can pass compressed data buffers
    Fix handling of libtirpc pkg-config files with -L flags
    Moved the functionality of is_dap4_projected() into libdap4
    Added support for 64-bit sized arrays


author: laokz <zhangkai@iscas.ac.cn> - 3.21.0.27-2
changelog:
  - let BuildRequire valgrind depend on system i386 i486 i586 i686 pentium3 pentium4 athlon geode x86_64 armv3l armv4b armv4l armv4tl armv5tl armv5tel armv5tejl armv6l armv6hl armv7l armv7hl armv7hnl armv8l armv8hl armv8hnl armv8hcnl aarch64 loongarch64 powerpc64le ppc64le sw_64


author: zhaoyonghao10 <zhaoyonghao10@h-partners.com> - 0.70.2-7
changelog:
  - apply 2 patches: backport-Mark-all-protected-packages-as-user-installed-for-.patch, backport-fix--compare-RPMItem-in-transaction-with-rpmvercmp.patch


author: liujing <liujing144@huawei.com> - 1.0.0-30
changelog:
  - update patches from https://code.foxkit.us/adelie/aports-old/blob/50de7d785d5500a14ed00fa12e483e8ceaf4f06a/main/libdv


author: doupengda <doupengda@loongson.cn> 1.0.1-7
changelog:
  - update config.guess and config.sub
  - fix SOURCE1 file autoconf.h '__loongarch64__' to '__loongarch64'


author: yuanchao <1050706328@qq.com> - 2.1.12-13
changelog:
  - Fix function undeclared,incompatible pointer and parameter lack in 'add-testcases-for-event.c-apis.patch',support clang build


author: andy <liuyang01@kylinos.cn> - 2.1.12-14
changelog:
  - Fix leak in evbuffer_add_file() on empty files
  - evthread: fix NULL dereference in evthread_setup_global_lock_()
  - Fix potential null dereference in http-server


author: shixuantong <shixuantong1@h-partners.com> - 2.1.12-15
changelog:
  - fix: arc4_getword integer overflow, detected by -fsanitize=undefined
  - Fix divide-by-zero in ev_token_bucket_get_tick_
  - fixed missing check for null after strdup in evutil_inet_pton_scope
  - Fix integer-overflow in ev_token_bucket_cfg_new
  - Fix integer overflow in HTTP version
  - Fix potential Null pointer dereference in bufferevent_openssl.c
  - Fix potential Null pointer dereference in dns-example.c
  - Fix potential Null pointer dereference in event-read-fifo.c
  - Fix unlikely (for libevent) UB in HT_GROW()


author: Funda Wang <fundawang@yeah.net> - 2.1.12-16
changelog:
  - Don't use deprecated functions when building against OpenSSL 3.0
  - fix linkage of shared libraries


author: yanglongkang <yanglongkang@h-partners.com> - 3.4.4-5
changelog:
  - Fix x86/ffi64 calls with 6 gp and some sse registers
    Robustify floating point comparison in test
    Fix floating point compare


author: Wenlong Ding <wenlong.ding@turbolinux.com.cn> - 2.6.4-22
changelog:
  - Remove /usr/lib64/libglade-2.0.so.* from libglade2-devel package which already exists in libglade2 package.


author: wangkai <13474090681@163.com> - 2.5.31-3
changelog:
  - Fix CVE-2026-40334, CVE-2026-40334, CVE-2026-40338, CVE-2026-40339,
    CVE-2026-40340, CVE-2026-40341


author: Kai Liu <kai.liu@windriver.com> - 1:1.49.5-5
changelog:
  - Replace patch support_OPENEULER_to_configure.patch by backport-support-openEuler.patch
    which is backported from upstream, fix issue of detecting openEuler.
  - Add provide-openEuler-appliance-package-list.patch after correctly detected openEuler.
    It was using REDHAT list before.


author: yanglu <yanglu72@h-partners.com> - 3.0.17-2
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:avoid crashing in icalcomponent_normalize
         fix a memleak in icalcomponent_normalize


author: wangxiao <wangxiao184@qq.com> - 1.24.0-4
changelog:
  - add fix patch for CVE-2026-50292
  - CVE-2026-50265 is an invalid CVE, so delete the related information.


author: Funda Wang <fundawang@yeah.net> - 1.5.8-2
changelog:
  - backport upstream patches
    * Bug fix: iso_image_set_ignore_aclea() inverted the setting
      for reading the XFS-style project id from disk files
    * Silenced error messages about ioctl(FS_IOC_FSGETXATTR)


author: yixiangzhike <yixiangzhike007@163.com> - 1.4.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:refix the failure of building with cppcheck>=2.11 by using upstream patch


author: echo <2220386943@qq.com> - 1.2-2
changelog:
  - update version to 1.2-2
  - support new create thread
  - description of supplementary documents
  - support event grouping
  - add the mangleName in symbol.h


author: yixiangzhike <yixiangzhike007@163.com> - 1.6.4-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch to fix possible uninitialized variable


author: chengyechun <chengyechun1@huawei.com> - 3.7.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:prevent segfault in af_request_type
         fix bridge info parsing


author: xinghe <xinghe2@h-partners.com> - 2:1.6.40-2
changelog:
  - Type:cves
  - CVE:CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720
  - SUG:NA
  - DESC:fix CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720


author: lvgenggeng <lvgenggeng@uniontech.com> - 0.6-2
changelog:
  - backport: Fixed issue where y was used instead of h.
  - backport: Fix the strcmps on the cgroup hierarchies.


author: yixiangzhike <yixiangzhike007@163.com> - 1.4.5-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch to remove redundant inclusion of libintl.h


author: bixiaoyan <bixiaoyan@kylinos.cn> - 2.0.8-2
changelog:
  - Change assert in ringbuffer to a return code
    Community Patch Link:
    https://github.com/ClusterLabs/libqb/pull/492/commits/88d3eeacc64a059fcb8e2d329ddeafa63b24edfb


author: zouzhimin <zouzhimin@kylinos.cn> - 2.0.8-5
changelog:
  - Check returns from setsockopt() calls, also fix doxygen comment for qb_util_timespec_from_epoch_get()


author: litenglong <litenglong@kylinos.cn> - 2.0.8-6
changelog:
  - Fix file conflicts among the help package, main package, and devel package by deleting the duplicated content during upgrades.


author: chenyanpanHW <chenyanpan@huawei.com> - 0.9.4-19
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/libquvi-0.9.4-lua-5.2.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yixiangzhike <yixiangzhike007@163.com> - 1.15.2-3
changelog:
  - backport patches from upstream
      Fix a memory leak of the glib slist
      Add missing end callback for already downloaded zchunk files
      Fix memory leak of repo and repomd
      Fix a crash when the gnupghomedir is NULL or not specified on Python API


author: yuanchao <1050706328@qq.com> - 0.20.5-3
changelog:
  - fix `incompatible function pointer types passing`errors in test-vala-unstable.vala and test-vala-lang.vala


author: nickyang <nickyang228@163.com> - 2.74.3-13
changelog:
  - Type:cves
  - ID:CVE-2026-1760 CVE-2026-1801 CVE-2026-2369
  - SUG:NA
  - DESC:fix CVE-2026-1760 CVE-2026-1801 CVE-2026-2369


author: zhangbinqin <zhangbinqin@h-partners.com> - 0.10.5-9
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:fix CVE-2026-0968 CVE-2026-0967 CVE-2026-0966 CVE-2026-0965 CVE-2026-0964 CVE-2025-14821


author: zhangbinqin <zhangbinqin@h-partners.com> - 1.11.0-6
changelog:
  - Type:CVE
  - CVE:CVE-2026-7598
  - SUG:NA
  - DESC:add username_len bounds checking to fix CVE-2026-7598


author: jiayuzhe <jiayuzhe@kylinos.cn> - 1.11.0-8
changelog:
  - Type:CVE
  - CVE:CVE-2026-66032,CVE-2026-66033,CVE-2026-66034
  - SUG:NA
  - DESC:fix CVE-2026-66032,CVE-2026-66033,CVE-2026-66034


author: laokz <zhangkai@iscas.ac.cn> - 1.9.6-2
changelog:
  - make with_mem_leak_test option following i386 i486 i586 i686 pentium3 pentium4 athlon geode x86_64 armv3l armv4b armv4l armv4tl armv5tl armv5tel armv5tejl armv6l armv6hl armv7l armv7hl armv7hnl armv8l armv8hl armv8hnl armv8hcnl aarch64 loongarch64 powerpc64le ppc64le sw_64


author: chenyanpanHW <chenyanpan@huawei.com> - 1.2.20-20
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/libtar-1.2.11-missing-protos.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/libtar-1.2.11-mem-deref.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/libtar-1.2.20-fix-resource-leaks.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/libtar-1.2.11-bz729009.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/libtar-1.2.20-no-static-buffer.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/CVE-2013-4420.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/openEuler-CVE-2021-33643-CVE-2021-33644.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/openEuler-CVE-2021-33645-CVE-2021-33646.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/CVE-2021-33640-fix-memory-leak-and-use-after-free-bugs.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: jiangsihui <jiangsihui@huawei.com> - 1.0.0-1
changelog:
  - Supports permission table management functions, including
    the creation, release, and invalidation of permission tables,
    while also supporting context maintenance for operating
    permission tables.


author: Liming An <anliming1@h-partners.com> - 1.0.0-2
changelog:
  - Remove the x86 support from the source code and specify the
    aarch64 in the spec.
    Change indent.


author: Liming An <anliming1@h-partners.com> - 1.0.1-0
changelog:
  - Add UMMU library doc and readme.
    Delete unused readme files.
    Modify cmake version from cmakelist.
    Modify build add debuginfo


author: Liming An <anliming1@h-partners.com> - 1.0.2-1
changelog:
  - Adjust PLB Refresh Timing in grant
    Fix log level initialization issue.
    Synchronized the changes in the kernel header file ummu_core.h.
    The README file is adapted to the code repository address change.
    Widen userspace lock scope to prevent deadlock with kernfs.


author: Funda Wang <fundawang@yeah.net> - 1.5-2
changelog:
  - add upstream patch supporting tracing for AV1 picture info
  - requires x11 as pkgconfig private, since vdpau_x11.h refers X11/Xlib.h
  - cleanup spec


author: Pengrui Zhang <zhangpengrui@huawei.com> - 9.10.0-33
changelog:
  - conf: Fix error message in virNetworkForwardDefParseXML
  - qemu: Fix guest-sync response time in qga command
  - virthreadpool: create threads from the newly expanded workers
  - qemu: Use g_autoptr in qemuProcessInit
  - qemu: Add kvm-vtimer-status support for AArch64 KVM guests


author: Pengrui Zhang <zhangpengrui@huawei.com> - 9.10.0-34
changelog:
  - qemu_driver: Don't handle the EOF event if vm get restarted
  - conf: add the hugepage allocation option
  - qemu: cgroup: Add /dev/ubmempfd to default device ACL


author: Fei Xu <xufei30@huawei.com> - 9.10.0-35
changelog:
  - qemu: Add capability for PCI high memory MMIO size
  - qemu: Add command line support for PCI high memory MMIO size
  - qemu: Relax check for memory device coldplug
  - qemu: migration: Validate migration XML
  - qemuMigrationDstPrecreateStorage: Improve error messages
  - qemuMonitorJSONQueryRxFilter: Allow @filter to be NULL
  - qemuMigrationDstPrecreateStorage: Refactor cleanup
  - qemuDomainStorageOpenStat: Remove unused 'driver' argument and untangle callers
  - qemuDomainChangeNet: Reflect trustGuestRxFilters change
  - qemu_monitor_json: Report error in error paths in SEV related code
  - conf: Move some members of virDomainSEVDef into virDomainSEVCommonDef
  - conf: Drop needless NULL checks guarding virBufferEscapeString()
  - conf: Separate SEV formatting into a function
  - Drop needless typecast to virDomainLaunchSecurity
  - src: Convert some _virDomainSecDef::sectype checks to switch()
  - qemu_monitor: Allow querying SEV-SNP state in 'query-sev'
  - qemu: Report snp-policy in virDomainGetLaunchSecurityInfo()
  - qemu: capabilities: Introduce QEMU_CAPS_VIRTIO_BLK_IOTHREAD_MAPPING
  - qemu_capabilities: Introduce QEMU_CAPS_SEV_SNP_GUEST
  - conf: Introduce SEV-SNP support
  - qemu: Build cmd line for SEV-SNP
  - qemu_firmware: Pick the right firmware for SEV-SNP guests
  - domain_validate: Add missing 'break' in virDomainDefLaunchSecurityValidate()
  - virtcca/cca: Fix CVM launch security fall-through in switch statements


author: lvgenggeng <lvgenggeng@uniontech.com> - 0.1.2-2
changelog:
  - backport: 0001-Fix-hsync_start-computation.patch
  - backport: 0002-Fix-too-small-back-porch-at-very-low-resolutions.patch
  - spec: move license file to the right dir


author: eastb233 <xiezhiheng@huawei.com> 17.0.6-7
changelog:
  - Type: cherry-pick
  - ID:NA
  - SUG:NA
  - DESC: cherry-pick
  -    Add toolchain_clang build support
  -    Part of adopt to new cmake macro
  -    build with clang


author: eastb233 <xiezhiheng@huawei.com> 17.0.6-8
changelog:
  - Type: Update
  - ID:NA
  - SUG:NA
  - DESC: Update https://gitee.com/openeuler/llvm-project/archive/refs/tags/llvm-for-oE-17.0.6-2509.0.1.tar.gz


author: eastb233 <xiezhiheng@huawei.com> 17.0.6-9
changelog:
  - Update https://gitee.com/openeuler/llvm-project/archive/refs/tags/llvm-for-oE-17.0.6-2509.0.2.tar.gz


author: liyufnei <liyunfei33@huawei.com> - 17.0.6-58
changelog:
  - update to llvm-for-oe-17.0.6-2603.0.1
  - release-note https://gitcode.com/openeuler/llvm-project/releases/llvm-for-oE-17.0.6-2603.0.1


author: liyufnei <liyunfei33@huawei.com> - 17.0.6-60
changelog:
  - update to llvm-for-oe-17.0.6-2603.0.2
  - release-note https://gitcode.com/openeuler/llvm-project/releases/llvm-for-oE-17.0.6-2603.0.2


author: eastb233 <xiezhiheng@huawei.com> - 17.0.6-64
changelog:
  - update to llvm-for-oe-17.0.6-2606.0.1
  - release-note https://atomgit.com/openeuler/llvm-project/releases/llvm-for-oE-17.0.6-2606.0.1


author: liyunfei <liyunfei33@huawei.com> - 19.1.7-17
changelog:
  - update to llvm-for-oE-19.1.7-2512.0.1
  - release note: https://gitee.com/openeuler/llvm-project/releases/tag/llvm-for-oE-19.1.7-2512.0.1


author: liyunfei <liyunfei33@huawei.com> - 19.1.7-19
changelog:
  - update to llvm-for-oE-19.1.7-2512.0.2
  - release note: https://gitee.com/openeuler/llvm-project/releases/tag/llvm-for-oE-19.1.7-2512.0.2


author: eastb233 <xiezhiheng@huawei.com> - 20.1.8-8
changelog:
  - update to llvm-for-oE-20.1.8-2606.0.2
  - release note: https://atomgit.com/openeuler/llvm-project/releases/llvm-for-oE-20.1.8-2606.0.2


author: Funda Wang <fundawang@yeah.net> - 4.99.6-1
changelog:
  - update to 4.99.6
  - switch to autotools based build system per suggested by upstream
   - new devel sub package, due to switching to autotools
   - add two security-related build switches from archlinux:
     - only allow root to list all open files
     - allow anyone to list anyone else's socket files


author: liuchao <liuchao173@huawei.com> - 2.13.7-1
changelog:
  - Update to 2.13.7:
    - fix: invoke MKDIR_P before changing directories
    - fix: -Wsingle-bit-bitfield-constant-conversion with clang16
    - fix: clean java inner class files in examples
    - Introduce sync vs unsync enablers
    - Fix: misaligned urcu reader accesses
    - ustfork: Fix warning about volatile qualifier
    - ustfork: Fix possible race conditions
    - Fix: tracepoint: Remove trailing \ at the end of macro
    - fix: python agent: use stdlib distutils when setuptools is installed
    - fix: python agent: install on Debian python >= 3.10
    - fix: python agent: Add a dependency on generated files
    - python: use setuptools with python >= 3.12


author: yuanchao <1050706328@qq.com> - 5.0.2-16
changelog:
  - Type: bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix error of cc.compiles in meson.build on aarch cased by '-fstack-clash-protection' and '-Werror'


author: wujichao <wujichao1@huawei.com> - 0.3-36
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:bugfix: Information in cpu directory is overwritten after lxcfs restart


author: Liu Qingtao <liu.qingtao2@zte.com.cn> - 1.9.4-3
changelog:
  - Add patch riscv_zicclsm_lz4_force_mem_access_2.patch to configure LZ4_FORCE_MEMORY_ACCESS=2 for RISC-V with Zicclsm extension


author: xu_ping <707078654@qq.com> - 0.46.2-1
changelog:
  - Update to 0.46.2:
    * M2Crypto closes SSL connection on closing HTTPS Connection, and
      some other related issues
    * Modernize C API by eliminating use of deprecated
      PyBytes_AsStringAndSize and related functions with Python
      Buffer Protocol
    * Add logging support to C extension code sending messages to the
      Python logging
    * Reverted removal of demo/ subdirectory
    * Correct license to BSD-2-Clause and update references
    * Specify in setup.cfg that we require Python >= 3.6


author: chenyanpanHW <chenyanpan@huawei.com> - 12.5-33
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/nail-11.25-config.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.3-pager.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-lzw.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-fname-null.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-collect.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-usage.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-man-page-fixes.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-outof-Introduce-expandaddr-flag.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-fio.c-Unconditionally-require-wordexp-support.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-globname-Invoke-wordexp-with-WRDE_NOCMD-CVE-2004-277.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-unpack-Disable-option-processing-for-email-addresses.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-empty-from.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-nss-hostname-matching.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-encsplit.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-openssl.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/backport-mailx-12.5-no-SSLv3.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/set-mail-defualt-did-not-record-failsend.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yaoxin <1024769339@qq.com> - 2.4.16.6-1
changelog:
  - Update to 2.4.16.6:
    * metadata: fix caching of JWKs from jwks_uri when using the default expiry setting
    * info: fix requests to the info hook with extend_session=false
    * cookie: OIDCCookieSameSite default behaviour Lax
    * cookie: apply OIDCCookieSameSite Off/None properly to state cookies instead of always setting Lax
    * cache: avoid segfault and improve error reporting in case apr_temp_dir_get fails when a temp directory
      cannot be found on the system upon initaliizing cache mutexes and the file cache
    * metadata: allow plain HTTP URLs in metadata elements jwks_uri and signed_jwks_uri to ensure backwards
      compatibility with <=2.4.15.7 and to support private/test deployments
    * code: address warnings from static code analysis tool CodeChecker


author: yaoxin <yao_xin001@hoperun.com> - 1.27.4-1
changelog:
  - Update to 1.27.4 for fix CVE-2024-6381 and CVE-2024-6383
  - libbson Fixes:
    * Fix build with Visual Studio 2013.
    * Fix parsing of colon in timezone.
    * Error on failure to init subdocument in bson_iter_visit_all.
    * Fix string handling in bson_string_new and bson_string_append.
    * Fix iteration in bson_strfreev.
    * Use aligned alloc for bson_array_builder_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Fix conversion warning with GCC 12.
    * Fixes to some format strings in trace logs.
    * Allow mongoc_buffer_t to be larger than INT_MAX.
    * Add bson_array_builder_t.
  - libmongoc Fixes:
    * Fix possible crash reading malformed wire protocol message.
    * Upgraded bundled Zlib from 1.2.3 to 1.3.1
    * Close leftover connections to removed servers.
    * Fix possible crash when client is configured with empty password.
    * Fix possible hang if mongoc_gridfs_file_readv is called with a corrupt chunk with incomplete data.
    * Fix 32-bit compile with 64-bit time_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Disable shared libmongoc targets if ENABLE_SHARED=OFF
    * Fix documentation build with Python 3.9.
    * Fix data race in mongoc_cursor_get_host.
    * Add back support for BUILD_VERSION CMake option. BUILD_VERSION was unintentionally removed in 1.25.0.
    * Send recoveryToken in transactions when connected to a load balancer.


author: Funda Wang <fundawang@yeah.net> - 102.9.0-9
changelog:
  - set CC and CXX so that clang won't be selected automatically
  - fix compilation errors in sw_64 support


author: yanglu <yanglu72@h-partners.com> - 2:0.95-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Change UDP and ICMP sockets binding to accept a source IP from the -a CLI option


author: zhangxingrong <zhangxingrong@uniontech.com> - 5:2.2.12-3
changelog:
  - Fix smtp client to respect $use_envelope_from option.
  - Fix smtp client $envelope_from_address possible dangling pointer.


author: yaoxin <1024769339@qq.com> - 8.0.42-1
changelog:
  - Update to 8.0.42 for fix CVEs(CVE-2025-21574,CVE-2025-21575,CVE-2025-21577,
    CVE-2025-21580,CVE-2025-21581,CVE-2025-21584,CVE-2025-21585,CVE-2025-30681,
    CVE-2025-30682,CVE-2025-30683,CVE-2025-30684,CVE-2025-30685,CVE-2025-30687,
    CVE-2025-30688,CVE-2025-30689,CVE-2025-30693,CVE-2025-30695,CVE-2025-30696,
    CVE-2025-30699,CVE-2025-30703,CVE-2025-30704,CVE-2025-30705,CVE-2025-30710,
    CVE-2025-30715,CVE-2025-30721,CVE-2025-30722


author: yaoxin <1024769339@qq.com> - 8.0.43-1
changelog:
  - Update to 8.4.6 for fix CVEs (CVE-2025-50068,CVE-2025-50077,CVE-2025-50078,
    CVE-2025-50079,CVE-2025-50080,CVE-2025-50081,CVE-2025-50082,CVE-2025-50083,
    CVE-2025-50084,CVE-2025-50085,CVE-2025-50086,CVE-2025-50087,CVE-2025-50091,
    CVE-2025-50092,CVE-2025-50093,CVE-2025-50094,CVE-2025-50096,CVE-2025-50097,
    CVE-2025-50098,CVE-2025-50099,CVE-2025-50100,CVE-2025-50101,CVE-2025-50102,
    CVE-2025-50104,CVE-2025-53023)


author: wangkai <13474090681@163.com> - 8.0.44-1
changelog:
  - Update to 8.0.44 for fix CVEs (CVE-2025-53069,CVE-2025-53062,CVE-2025-53054,
    CVE-2025-53053,CVE-2025-53045,CVE-2025-53044,CVE-2025-53042,CVE-2025-53040)


author: yaoxin <1024769339@qq.com> - 8.0.45-1
changelog:
  - Update to 8.0.45 for fix CVEs (CVE-2026-21936,CVE-2026-21937,
    CVE-2026-21941,CVE-2026-21948,CVE-2026-21964,CVE-2026-21968)


author: wangkai <13474090681@163.com> - 8.0.46-1
changelog:
  - Update to 8.0.46 for fix CVEs (CVE-2026-21998, CVE-2026-22001, CVE-2026-22002,
    CVE-2026-22004, CVE-2026-22005, CVE-2026-22009, CVE-2026-22015, CVE-2026-22017,
    CVE-2026-34267, CVE-2026-34270, CVE-2026-34271, CVE-2026-34276, CVE-2026-34278,
    CVE-2026-34293, CVE-2026-34303, CVE-2026-34304, CVE-2026-34308, CVE-2026-35236,
    CVE-2026-35237, CVE-2026-35238, CVE-2026-35239, CVE-2026-35240)


author: wuyifeng <wuyifeng10@huawei.com> - 78-1
changelog:
  - upgrade to version 78:
  	-incorporate up to 6.5 kernel
  	-add new cxl commands
  	-fix some bugs detail see:github.com/pmem/ndctl


author: gaihuiying <eaglegai@163.com> - 1:5.9.3-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Customized the anti-attacki/reset-last_engineTime function for IdeaUI
         change the permissions of passtest


author: xingwei <xingwei14@h-partners.com> - 1:5.9.3-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Migration patch from upstream, add compatibility to parse
  Linux 6.7 Ip header while keep support for previous versions.


author: chenyanpanHW <chenyanpan@huawei.com> - 0.2.8-19
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0000-netcf-call-aug_load-at-most-once-per-second.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0001-netcf-optimize-aug_match-query-for-all-ifcfg-files-related.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0002-netcf-linux-include-bond-element-for-bonds-with-no-slaves.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0003-netcf-Properly-classify-bond-devices-with-no-slaves.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Fix-memory-leak-in-aug-match-mac.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: lingsheng <lingsheng1@h-partners.com> - 1:1.0.8-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:datatype: don't return a const string from cgroupv2_get_path()
  datatype: fix leak and cleanup reference counting for struct datatype
  datatype: initialize TYPE_CT_EVENTBIT slot in datatype array
  datatype: initialize TYPE_CT_LABEL slot in datatype array
  evaluate: do not remove anonymous set with protocol flags and single element
  evaluate: don't crash if object map does not refer to a value
  evaluate: error out when expression has no datatype
  evaluate: error out when store needs more than one 128bit register of align fixup
  evaluate: fix check for truncation in stmt_evaluate_log_prefix()
  evaluate: fix double free on dtype release
  evaluate: fix memleak in prefix evaluation with wildcard interface name
  evaluate: reject set in concatenation
  evaluate: revisit anonymous set with single element optimization
  evaluate: skip anonymous set optimization for concatenations
  evaluate: stmt_nat: set reference must point to a map
  evaluate: tproxy: move range error checks after arg evaluation
  evaluate: validate chain max length
  evaluate: validate maximum log statement prefix length
  exthdr: prefer raw_type instead of desc->type
  json: expose dynamic flag
  json: fix use after free in table_flags_json()
  libnftables: Drop cache in -c/--check mode
  meta: fix tc classid parsing out-of-bounds access
  netlink: don't crash if prefix for < byte is requested
  netlink: fix leaking typeof_expr_data/typeof_expr_key in netlink_delinearize_set()
  netlink: handle invalid etype in set_make_key()
  parser_bison: fix ct scope underflow if ct helper section is duplicated
  parser_bison: fix memleak in meta set error handling
  parser_bison: make sure obj_free releases timeout policies
  parser_json: Catch nonsense ops in match statement
  parser_json: Default meter size to zero
  parser_json: Fix flowtable prio value parsing
  parser_json: Fix synproxy object mss/wscale parsing
  parser_json: Fix typo in json_parse_cmd_add_object()
  parser_json: Proper ct expectation attribute parsing
  parser_json: Wrong check in json_parse_ct_timeout_policy()
  py: fix exception during cleanup of half-initialized Nftables
  rule: fix sym refcount assertion


author: liweigang <liweiganga@uniontech.com> - 1:1.0.8-4
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: evaluate: guard against NULL basetype
  evaluate: error out if basetypes are different
  evaluate: reject attempt to update a set
  evaluate: release mpz type in expr_evaluate_list() error path
  expression: missing line in describe command with invalid expression
  evaluate: handle invalid mapping expressions in stateful object statements gracefully


author: gaihuiying <eaglegai@163.com> - 1:1.0.8-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         evaluate: disable meta set with ranges
         src: reject large raw payload and concat expressions
         evaluate: fix stack overflow with huge priority string
         tcpopt: don't create exthdr expression without datatype
         src: do not allow to chain more than 16 binops
         rule: fix ASAN errors in chain priority to textual names
         tests: shell: add regression test for double-free crash bug
         evaluate: handle invalid mapping expressions in stateful object
         evaluate: Fix incorrect checking the `base` variable in case of IPV6


author: gaihuiying <eaglegai@163.com> - 1:1.0.8-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:ct expectation: fix 'list object x' vs. 'list objects in table' confusion
         tests: shell: connect chains to hook point


author: gaihuiying <eaglegai@163.com> - 1:1.0.8-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         parser_json: release buffer returned by json_dumps
         parser_json: fix crash in json_parse_set_stmt_list
         parser_json: fix handle memleak from error path
         parser_json: fix several expression memleaks from error path
         libnftables: Zero ctx->vars after freeing it


author: eaglegai <eaglegai@163.com> - 1:1.0.8-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         evaluate: don't allow nat map with specified protocol
         rule: return error if table does not exist
         json: make sure timeout list is initialised
         evaluate: don't update cache for anonymous chains
         json: return error if table does not exist
         json: don't BUG when asked to list synproxies
         evaluate: compact STMT_F_STATEFUL checks
         evaluate: only allow stateful statements in set and map definitions
         optimize: expand expression list when merging into concatenation
         netlink: fix stack overflow due to erroneous rounding
         netlink: bogus concatenated set ranges with netlink message overrun
         netlink: fix crash when ops doesn't support udata
         netlink: Catch unknown types when deserializing objects
         netlink: Avoid potential NULL-ptr deref parsing set elem expressions
         netlink: Avoid crash upon missing NFTNL_OBJ_CT_TIMEOUT_ARRAY
         evaluate: don't BUG on unexpected base datatype
         src: BASECHAIN flag no longer implies presence of priority expression
         parser_bison: only reset by name is supported by now


author: gaihuiying <eaglegai@163.com> - 1:1.0.8-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         segtree: fix string data initialisation
         src: netlink: netlink_delinearize_table() may return NULL
         src: ensure chain policy evaluation when specified
         src: fix memory leak in anon chain error handling
         mnl: silence compiler warning
         datatype: Increase symbolic constant printer robustness
         evaluate: follow prefix expression recursively if needed


author: Ge Wang <wang__ge@126.com> - 1:20.12.1-3
changelog:
  - CVE-2023-45853 - Reject overflows of zip header fields in minizip
  - CVE-2024-5274 - Using FunctionParsingScope for parsing class static
  - CVE-2024-5535 - Fix SSL_select_next_proto
  - CVE-2024-7971 - Spill all loop inputs before entering loop


author: wangkai <13474090681@163.com> - 1:20.18.2-1
changelog:
  - Update to 20.18.2
  - Fix CVE-2025-23083 CVE-2025-23085 CVE-2025-23084 CVE-2024-36137
    CVE-2024-22018 CVE-2024-22020


author: wangkai <13474090681@163.com> - 1:20.18.2-5
changelog:
  - Fix CVE-2025-55130, CVE-2025-55131, CVE-2025-55132,
    CVE-2025-59465, CVE-2025-59466, CVE-2026-21637


author: wangkai <13474090681@163.com> - 1:20.18.2-7
changelog:
  - Followup fix CVE-2026-21637 and fix CVE-2026-21710, CVE-2026-21713,
    CVE-2026-21714, CVE-2026-21715, CVE-2026-21716, CVE-2026-21717


author: Qin Fandong <qinfandong@kylinos.cn> - 3.94.0-10
changelog:
  - Type:CVE
  - ID:CVE-2026-16389
  - SUG:NA
  - DESC:fix CVE-2026-16389: guard against integer overflow in CERT_Hexify


author: yixiangzhike <yixiangzhike007@163.com> - 0.9.12-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Move temporary files from /var/run to /run to delete warning in installing


author: wangkai <13474090681@163.com> - 2:2022.10.3-4
changelog:
  - Fix CVE-2026-42616, CVE-2026-42617, CVE-2026-42618, CVE-2026-46569,
    CVE-2026-46570, CVE-2026-46571, CVE-2026-46572, CVE-2026-56135, CVE-2026-56136


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p15-8
changelog:
  - Type:CVE
  - ID:CVE-2023-26551
  - SUG:NA
  - DESC:make sure the buffer has enough room for the input extra characters


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p15-10
changelog:
  - Type:CVE
  - ID:CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26554,CVE-2023-26555
  - SUG:NA
  - DESC:change the patch of CVE-2023-26551 and fix CVE-2023-26555


author: andy <liuyang01@kylinos.cn> - 2.0.16-12
changelog:
  - backport patches from upstream
  - libnuma: Make numa_available respect EPERM
  - libnuma: fix nodemask allocation size for get_mempolicy


author: shixuantong <shixuantong1@huawei.com> - 1:1.24.3-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:remove f2py form python3-numpy package. It is in python3-numpy-f2py
         Do not pack open-source test case files


author: Ruozhu Li <liruozhu@huawei.com> - 1.00.029-1
changelog:
  - Added the function of sending a notification message to the switch when the software starts, and the switch sending domain members to the host, improving the reliability of software upgrade scenarios.
  - Add more connection parameter support, consistent with nvme cli.
  - Bond ports can join the domain and automatically establish a connection.


author: yanglongkang <yanglongkang@h-partners.com> - 0.34.7-4
changelog:
  - Replace SELinux deprecated functions
  - Replace deprecated libxml2 calls
  - Fix implicit cast from const to non const


author: LHesperus <liuchanggeng@huawei.com> -v2.1.0-1
changelog:
  - remove the logger.h interface and add TRACE interface, increase safe_queue wait time to 5s
  - support reload log-level online
  - adapt analysis on riscv
  - add load base sched instance
  - v2.0.6-3 add adapt dynamicsmt analysis if smt is not enable
  - fix code check
  - add trace log and change level intf and delete logger
  - smc-d analysis fix inconsistency in the display of zero connection
  - v2.0.6-2 add realtime compile macro
  - v2.0.6-1 add smc_acc.yaml check and some logs
  - add net_hardirq_tune_data.h
  - fux binary coredump
  - v2.0.5-3 fix xcall analysis issues
  - v2.0.5-2 improve some output format
  - add xcall prefetch
  - network interface plugin : adapt same nic with different ifindex
  - v2.0.5-1 fix issues
  - v2.0.4-1 add docker coordination burst tune
  - add multi net path tune and analysis
  - add error log and params check
  - v2.0.3-3 oeaware-sdk enhances user permissions
  - v2.0.3-2 Fixed memory leak issues:
    - Fixed unsubscribeHandler topic deserialize memory leak
    - Fixed analysis module memory leak
  - Enhanced eBPF functionality:
    - Set memory lock limit to infinity for eBPF
    - Used eBPF to collect thread information
  - Network improvements:
    - Fixed ntoh port error
    - Added support for attaching all network interfaces
    - Used tcp-set-state to adapt k8s docker
  - New features:
    - Added xcall parameters
    - Added support for docker coordination burst analysis
    - Added parameter validation
    - Added NUMA parallel scheduler tuning support
  - Other improvements:
    - Fixed header files and added CI test
  - v2.0.3-1: Refactored and enhanced the analysis module:
    - Added scenario-aware analysis for multiple optimization plugins
    - Introduced command-line result viewing capability
    - Implemented Markdown format output support
  - Add new plugin: smt,binary,hirq


author: fly_1997 <flylove7@outlook.com> -v2.1.1-1
changelog:
  - add hwprobe_analysis for RISC-V
  - fix error logger info
  - support kernel cluster scheduler
  - adapt for kylin-v10-sp3
  - realtime tune add new tuning item
  - fix smc insmod err
  - realtime tune skip grubby update
  - add hwprobe_tune hwprobe_ext_zbb_tune for RISC-V
  - add high_load value check


author: wangshuai <wangshuai321@huawei.com> - 1.1.6-3
changelog:
  - Update the pci.ids file
  - Remove unused variable in cdrom test suite
  - Update test_guide doc
  - Unify the location for downloading kernel source RPMs
  - Optimize kabiwhitelist and system test


author: xiaochn <xiaochuannan@inspur.com> - 1.1.7-1
changelog:
  - Add KylinSec 3.5.3 support
  - Fix the problem of disk size calculation
  - Fix bcm57414 nic test failed issue
  - Change the format of date
  - Fixed a bug where a non-existent logger level was used
  - Update README.md
  - Fix vgpu testing issue


author: hewanhan <hewanhan@h-partners.com> - 1.1.10-0
changelog:
  - Add kernel support of openeEuler 24.03 LTS SP4
  - Fix false positives in the system testsuite on x86


author: liuqingtao <liu.qingtao2@zte.com.cn> - 1.1.10-1
changelog:
  - cherry picked from openeuler/oec-hardware PR#325 commit:24e6c49b
  - Modify ipmi item to support more common BMC detection scenarios


author: JofDiamonds <kwb0523@163.com> - 1.1-5
changelog:
  - fix some review issues:
    1.fix segment fault triggered by unsupported command operations
    2.fix incorrect use of securec function parameters
    3.remove redundant cmd option 'V'


author: Kai Liu <kai.liu@windriver.com> - 0.3.25-5
changelog:
  - Don't run make tasks in background sub-shell, as this causes
    severe issue. Use the _smp_mflags macro instead. See issue
    IB3EV0 for more detail.


author: xu_ping <707078654@qq.com> - 3.24.0-1
changelog:
  - Upgrade version to 3.24.0
    * Add support for FIPS-session mode
    * Updates to harden against RSA timing attacks
    * Add option to show the master key verification patterns of secure keys
    * Add support for exporting a key or certificate as URI-PEM file
    * Performance improvements for attribute retrieval
    * Add support for SHA-2 mechanisms
    * Experimental support for IBM Dilithium via OpenSSL OQS provider
    * Support live guest relocation for protected key (PKEY) operations
    * Add support for CKA_ALWAYS_AUTHENTICATE
    * Add support for CKD_*_SP800 KDFs for ECDH
    * Add support for SHA based key derivation mechanisms
    * Add support for PKCS#11 v3.0 SHA3 mechanisms
    * Add support for building Opencryptoki on the IBM AIX platform
    * Add support for the CCA token on non-IBM Z platforms (x86_64, ppc64)
    * Add support for protecting tokens with a token specific user group
    * Add support for combined CKA_EXTRACTABLE and CKA_IBM_PROTKEY_EXTRACTABLE
    * Add support for Koblitz curve secp256k1. Requires CCA v7.2 or later


author: zhang_wenyu <zhang_wenyu@hoperun.com> - 3.25.0-1
changelog:
  - Upgrade version to 3.25.0
    * Add support for PKCS#11 v3.0 SHAKE key derivation
    * Add support for PKCS#11 v3.0 SHA3 and SHA3-HMAC mechanisms
    * Add support for PKCS#11 v3.0 SHA3 mechanisms and MGFs for RSA-OAEP
    * Add support for PKCS#11 v3.0 SHA3 variants of RSA-PKCS and ECDSA mechanisms
    * Add support for CCA AES CIPHER secure key types
    * Add support for the CKM_ECDH1_DERIVE mechanism
    * Add support for the CKM_AES_KEY_WRAP[_*] mechanisms
    * Add support for the CKM_RSA_AES_KEY_WRAP mechanism
    * Add support for the CKM_ECDH_AES_KEY_WRAP mechanism
    * Add a tool for import and exporting PKCS#11 keys to a KMIP server
    * Add support for opaque secure key blob import via C_CreateObject
    * Add support for key wrapping with AES-GCM
    * Add support for newer CCA versions on s390x and non-s390x platforms
    * Add support for CKM_AES_GCM (single-part operations only)


author: Funda Wang <fundawang@yeah.net> - 0.23.0-7
changelog:
  - fix CVE-2024-8443, CVE-2024-45615, CVE-2024-45616,
    CVE-2024-45617, CVE-2024-45618, CVE-2024-45619, CVE-2024-45620


author: chenyanpanHW <chenyanpan@huawei.com> - 2.0.0-26
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-multicast-set.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-notify-systemd-of-start-up.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-null-pointer-deref.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-openssl-1.1-fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-cve-2016-7567.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-cve-2017-17833.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/CVE-2012-4428-fix-handling-of-string-list-in-slp_common-c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Fix-slp_iface-c-comma-expression-so-it-works-as-designed.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Daemon-sends-wrong-service-reply-when-security-is-enabled.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Fix-DAAddresses-hostname-resolution-issue.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Change-default-slpreg-connection-from-UDP-to-TCP.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Fix-interface-parsing-code-to-look-for-null-ifc-addrs.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Fix-broadcast-functionality.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Properly-initialize-xcastsocks-for-error-exit.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Fix-xrealloc-to-properly-free-original-pointer-on-resize.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/CVE-2019-5544.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: xingwei <xingwei14@h-partners.com> - 2.0.0-27
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Introduce epoch command to slove package upgrade failure problem


author: zhangbinqin<zhangbinqin@h-partners.com> - 9.6p1-13
changelog:
  - Type:CVE
  - CVE:CVE-2026-35414 CVE-2026-35385 CVE-2026-35386 CVE-2026-35387 CVE-2026-35388 
  - SUG:NA
  - DESC:fix CVE-2026-35414 CVE-2026-35385 CVE-2026-35386 CVE-2026-35387 CVE-2026-35388


author: wangkai <13474090681@163.com> - 2.6.9-8
changelog:
  - Fix CVE-2026-11771, CVE-2026-12932, CVE-2026-12996,
    CVE-2026-13117, CVE-2026-13122, CVE-2026-13698


author: baiguo <baiguo@kylinos.cn> - 0.4.34-2
changelog:
  - Use vasprintf() if available for error messages and otherwise vsnprintf();orccompiler, orcparse: Use secure UCRT printing functions on Windows


author: chenyanpanHW <chenyanpan@huawei.com> - 2.4.13-14
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0001-Drop-module-long-test.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: liweigang <liweiganga@uniontech.com> - 3.6-2
changelog:
  - remove patch support gpt_sync_mbr
  - file: huawei-bugfix-add-support-of-gpt_sync_mbr.patch
  - file: add support for gpt_sync_mbr and fix failure of it.


author: wangkai <13474090681@163.com> - 6.2.2-4
changelog:
  - Fix CVE-2024-45769,CVE-2024-45770
  - Fix buffer sizing checks in pmstore PDU handling (RHEL-57805)
  - Guard against symlink attacks in pmpost program (RHEL-57810)
  - Fix libpcp_web webgroup slow request refcounting (RHEL-58306)
  - Updated pmdahacluster for newer crm_mon versions (RHEL-50693)


author: hugel <gengqihu2@h-partners.com> - 10.42-12
changelog:
  - DESC:sync patches from upstream
         backport-Further-ASCII-tests-and-minor-bugfix-plus-ChangeLog-.patch
         backport-avoid-inconsistency-between-d-and-digit-when-using-a.patch
         backport-Fix-the-lookahead-after-d-or-posix-to-skip-whitespac.patch
         backport-Improve-error-offsets-for-character-classes-548.patch
         backport-Non-recursive-scan-prefix-in-JIT-560.patch


author: tangyuchen <tangyuchen5@huawei.com> - 2.0.0-1
changelog:
  - update to 2.0.0
    - Adjust USB drivers path at run-time via environment variable PCSCLITE_HP_DROPDIR
    - Add '--disable-polkit' option
    - Reset eventCounter when a reader is removed
    - Add "polkit" in "pcscd -v" output if enabled
    - Doxygen: document SCARD_E_INVALID_VALUE for some functions
    - use secure_getenv(3) if available
    - Some other minor improvements


author: Guofeng Yue <yueguofeng@h-partners.com> - 4.5-12
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: modify "--source_ip" to "--bind_source_ip" to fix init connection establishment with specific interface


author: chenyanpanHW <chenyanpan@huawei.com> - 4.050-2
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/backport-DBD-mysql-4.050-Remove-a-useless-shebang-from-DBD-mysql.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: sqfu <dev01203@linx-info.com> - 1.647-1
changelog:
  - update version to 1.647
  - Fix Makefile rules for Changes
  - Another example to bind columns 
  - Fix fetchall_arrayref for undefined NAME


author: pengjian <pengjian23@mails.ucas.ac.cn> - 1:0.82-3
changelog:
  - Introduced environment variable-controlled polling timeouts 
  for the close and connection-keeping functions in the os_unix.c file.


author: lichaoran <pkwarcraft@hotmail.com> 1.3293-3
changelog:
  - add buildRequires: add gcc as we using it to compile
  - and perl-generators to auto-generate perl module provides


author: wujie <wujie@nj.iscas.ac.cn> - 0.61-20
changelog:
  - Add riscv64 support from http://fedora.riscv.rocks/koji/buildinfo?buildID=186681
    Author is David Abdurachmanov <david.abdurachmanov@sifive.com>


author: kywqs <weiqingsong@kylinos.cn> - 1:0.908.0-1
changelog:
  - Update perl-YAML-LibYAML to v0.908.0
  - fix(OOP interface): Improve handling of mapping keys, for example numbers


author: Funda Wang <fundawang@yeah.net> - 4:5.38.0-11
changelog:
  - split out patch adding link to libperl.so into two separated patches,
    and sync it with mageia, which is a better version than fedora
  - disable cleaning empty perl directories
  - use git lfs storage


author: zhangyao <zhangyao108@huawei.com> - 2:2.36-1
changelog:
  - DESC: Upgrade version to 2.36, test code modify, build optimization, avoid the use of magic numbers, deal compilation warning


author: gaihuiying <eaglegai@163.com> - 0.9.5-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add macros to control if need libdrm, pango, libpng and if need to exclude bootlog


author: shiptux <shiptux@gmail.com> - 1.12.5p2-2
changelog:
  - Backport upstream b33e02d2 (issue #4347): use 96-bit IV in testEncryptDecryptGCM
    so it passes under OpenSSL 3


author: duyiwei <duyiwei@kylinos.cn> - 1:4.9.4-10
changelog:
  - Type:bugfix
  - CVE:CVE-2024-9355、CVE-2019-9514、CVE-2024-24791、CVE-2022-32189、CVE-2022-41715、CVE-2022-2880、CVE-2022-1962、CVE-2023-45290、CVE-2024-24783、CVE-2024-24785
  - SUG:NA
  - DESC: Optimize spec files and fix CVE in batches through rebuild


author: duyiwei <duyiwei@kylinos.cn> - 1:4.9.4-11
changelog:
  - Type:bugfix
  - CVE:CVE-2024-9676,CVE-2024-9675, CVE-2024-9407,CVE-2024-9341
  - SUG:NA
  - DESC: fix CVE-2024-9676,CVE-2024-9675, CVE-2024-9407, and CVE-2024-9341


author: shaojiansong <shaojiansong@kylinos.cn> - 3.5-5
changelog:
  - Drop seunshare -k/--kill support; the killall() helper is racy and redundant with killall -Z, replace the call site with an error message recommending killall -Z.


author: zhangxingrong <zhangxingrong@uniontech.cn> - 1.19-4
changelog:
  - Fix poptCallbackType documentation
  - Fix multiple typos in comments
  - Fix potential double-free in test3.c


author: wuzhaomin <wuzhaomin@kylinos.cn> - 16.00.0000-1
changelog:
  - update to 16.00.0000
  - Use autoconf to check for stdbool.h.
  - Make it possible to use standard bool on Windows.


author: heppen <hepeng68@huawei.com> - 1.1.0-3
changelog:
  - Bug fix: fix build warning.
  - Bug fix: export PWR_SYS_GetRtPowerInfo.
  - Bug fix: data collection task intercept invalid task type.


author: heppen <hepeng68@huawei.com> - 1.1.0-4
changelog:
  - Bug fix: memcpy null pointer, array out of bounds, struct align.
  - Bug fix: get watt state will failed at the first time.
  - Bug fix: use process name to query pid but return all pids.
  - Bug fix: mismatch fopen/pclose and popen/fclose, useless if statement.


author: heppen <hepeng68@huawei.com> - 1.1.0-5
changelog:
  - Bug fix: SIGPIPE cause powerapi server exit.
  - Bug fix: pstree command is too slow to get all pid.
  - Bug fix: set smart grid state failed.
  - Bug fix: get watt attr and task list is not correct.


author: Zihao Xue <xuezihao@huawei.com> - 1.1.0-6
changelog:
  - Bug fix: heap buffer overflow caused by sending incomplete strings.
  - Bug fix: too long strings into QueryProcs causes services broke down.


author: Funda Wang <fundawang@yeah.net> - 2.15-2
changelog:
  - fix build with latest gettext
  - harden systemd service file from openSUSE
  - add patch regarding risc-v arch support


author: gaihuiying <eaglegai@163.com> - 2.5.0-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:pre-created upstream default lock dir
         Openssl engine API is deprecated for a while thus disable it


author: gaihuiying <eaglegai@163.com> - 2.5.0-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream
         Fixing up parsing in radiusclient.conf
         Add configure check to see if we have struct sockaddr_ll


author: chenyanpanHW <chenyanpan@huawei.com> - 3.22-52
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/procmail-3.24-rhconfig.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/procmail-3.15.1-man.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/procmail-3.22-truncate.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/procmail-3.24-ipv6.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Zhu Jin <zhujin18@huawei.com> - 4.0.4-8
changelog:
  - library: address a potential race resulting in a fault and avoid strdup() calls in sd2proc() if possible


author: shenzhongwei <shenzhongwei@kylinos.cn> - 1.3.8b-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix: %patchN is deprecated (7 usages found), use %patch N (or %patch -P N)


author: wangkai <13474090681@163.com> - 1.3.9a-1
changelog:
  - Update to 1.3.9a for fix CVE-2026-42167
  - Add 'proxy' sub-package with unbundled mod_proxy
  - Use libsodium to provide ed25519 key support for mod_sftp
  - Update logrotate snippet to use try-reload-or-restart rather than reload
    for distributions with systemd 229 or later


author: liuchao <liuchao173.huawei.com> - 1.5.0-1
changelog:
  - upgrade to 1.5.0:
    - Makefile.am: change link order
    - GitHub actions fail on Windows due to missing unzip command
    - Export and install CMake targets
    - Use CMAKE_CURRENT_BINARY_DIR instead of CMAKE_BINARY_DIR
    - remove deprecated functionality
    - Avoid "unused variable" compiler warning
    - Update autotools
    - Support for new Google protobuf 22.x, 23.x releases
    - Miscellaneous fixes
    - Remove protobuf 2.x support
    - Silence some compiler diagnostics
    - Fixing MSVC build for Msbuild and Makefile generators


author: dongyuzhen <dongyuzhen@h-partners.com> - 25.1-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: distinguish between statically and dynamically compiled pc files and cmake dir to prevent BEP binary differences


author: Funda Wang <fundawang@yeah.net> - 25.1-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: fix build with wrong permission
  - DESC: fix conflicts with protobuf2
  - DESC: revert:distinguish between statically and dynamically compiled pc files and cmake dir to prevent BEP binary differences


author: zhengxiaoxiao <zhengxiaoxiao2@huawei.com> - 25.1-13
changelog:
  - Type:CVE
  - CVE:CVE-2026-0994
  - SUG:NA
  - DESC:Fix Any recursion depth bypass in Python json_format.ParseDict


author: Funda Wang <fundawang@yeah.net> - 17.0-2
changelog:
  - add upstream patch fixing running tests with impossible alignments
  - move language files into lib package
  - cleanup spec


author: wangkai <13474090681@163.com> - 3.13.5-1
changelog:
  - Update to 3.13.5
    * Fix CVE-2026-22815, CVE-2026-34513, CVE-2026-34514, CVE-2026-34516,
      CVE-2026-34517, CVE-2026-34518, CVE-2026-34519, CVE-2026-34520, CVE-2026-34525


author: yaoxin <1024769339@qq.com> - 3.14.1-1
changelog:
  - Update to 3.14.1 for fix CVEs: CVE-2026-54273,CVE-2026-54274,CVE-2026-54275
    CVE-2026-54276,CVE-2026-54277,CVE-2026-54278,CVE-2026-54279,CVE-2026-54280


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 1.2.0-1
changelog:
  - Upgrade package with version 1.2.0
    Support running LibCST on Python 3.12 and drop support for running it on 3.8
    Allow Element::codegen to be used by external users
    Fix parsing list matchers without explicit brackets
    Fix filepathprovider generic type


author: Shinwell Hu <micromotive@qq.com> - 1.11.1.1-4
changelog:
  - Python-ninja should never obsolate ninja-build.
  - Rename /usr/bin/ninja shipped in this package to /usr/bin/python-ninja


author: zhaojingyu <zhaojingyu@kylinos.cn> - 2.2.2-1
changelog:
  - Update to 2.2.2
  - Avoid issuing a spurious DeprecationWarning when a custom DataFrame or Series subclass method is called


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 2.27.2-1
changelog:
  - Update package to version 2.27.2
    Fix linux PGO wheel build
    Forward default_value calls to the underlying schema for DefinitionRefValidator
    Include JSON Schema input core schema in function schemas


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 3.7.0-1
changelog:
  - Update version to 3.7.0
    Drop GIL during long-running proj database calls
    Add is_deprecated and get_non_deprecated() to CRS
    Add runtime & compiled PROJ versions
    Add Windows system path to delvewheel add-path
    Adds codespell to pre-commit hooks


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 0.7.0-1
changelog:
  - Update package to version 0.7.0
    Add support for extensionless Python files for server
    Fix configuration inheritance for configurations specified in the LSP settings
    Fix placement of inline parameter comments
    Add a subcommand to generate dependency graphs
    Add Python version support to ruff analyze CLI
    Add exclude support to ruff analyze
    Fix parentheses around return type annotations
    Fix codeblock dynamic line length calculation for indented docstring examples
    Refurb implement hardcoded-string-charset
    Refurb Count codepoints not bytes for slice-to-remove-prefix-or-suffix


author: zhangxianting <zhangxianting@uniontech.com> - 3.19.2-1
changelog:
  - Update to 3.19.2:
  - Updated test & build matrix to include Python 3.12 and use GitHub Actions as a Trusted Publisher (OIDC) https://github.com/simplejson/simplejson/pull/317


author: wangkai <13474090681@163.com> - 3.19.2-2
changelog:
  - Fixed the packaging process does not include __pycache__ tests
  - Obsoletes empty package python-simplejson-help


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 2.13.0-1
changelog:
  - Update package to version 2.13.0
    Add support for datetime.timedelta to time_machine.travel().
    Add shift() method to the time_machine pytest fixture.
    Fix documentation about using local time for naive date(time) strings.


author: Qin Fandong <qinfandong@kylinos.cn> - 3.11.6-42
changelog:
  - Type:CVE
  - CVE:CVE-2026-6879
  - SUG:NA
  - DESC:fix CVE-2026-6879: avoid quadratic behavior in xml.etree.ElementPath index predicates


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-76
changelog:
  - target/arm: Conditionally add KVM writable properties based on RME
  - Migration/urma:adapt urma to use udma device to process iterative migration
  - Migration/urma: drop unused index in qemu_urma_init_ram_blocks
  - ub_ummu: default uninstall all tecte when cfgi all invalidate and free vdev when tecte uninstall
  - ub ummu: realize mapt_cmdq_ctxt_attr regster process
  - vfio ub: support config fd for vfio-ub device
  - hw/core/machine-smp: Deprecate unsupported "parameter=1" SMP configurations
  - hw/core/machine-smp: Calculate total CPUs once in machine_parse_smp_config()
  - hw/core/machine: Introduce the module as a CPU topology level
  - hw/core/machine: Support modules in -smp
  - hw/core: Introduce module-id as the topology subindex
  - hw/core: Support module-id in numa configuration
  - hw/i386: split x86.c in multiple parts
  - i386/cpu: Fix i/d-cache topology to core level for Intel CPU
  - i386/cpu: Use APIC ID info to encode cache topo in CPUID[4]
  - i386/cpu: Use APIC ID info get NumSharingCache for CPUID[0x8000001D].EAX[bits 25:14]
  - i386/cpu: Consolidate the use of topo_info in cpu_x86_cpuid()
  - i386/cpu: Introduce bitmap to cache available CPU topology levels
  - i386: Split topology types of CPUID[0x1F] from the definitions of CPUID[0xB]
  - i386/cpu: Decouple CPUID[0x1F] subleaf with specific topology level
  - i386: Introduce module level cpu topology to CPUX86State
  - i386: Support modules_per_die in X86CPUTopoInfo
  - i386: Expose module level in CPUID[0x1F]
  - i386: Support module_id in X86CPUTopoIDs
  - i386/cpu: Introduce module-id to X86CPU
  - tests: Add test case of APIC ID for module level parsing
  - hw/i386/pc: Support smp.modules for x86 PC machine
  - i386: Add cache topology info in CPUCacheInfo
  - i386/cpu: Use CPUCacheInfo.share_level to encode CPUID[4]
  - i386/cpu: Use CPUCacheInfo.share_level to encode CPUID[0x8000001D].EAX[bits 25:14]
  - i386: Add support for SUCCOR feature
  - i386/cpu: fixup number of addressable IDs for processor cores in the physical package
  - kvm: Allow kvm_arch_get/put_registers to accept Error**
  - i386/cpu: Don't enumerate the "invalid" CPU topology level
  - hw/core: Make CPU topology enumeration arch-agnostic
  - qapi/qom: Define cache enumeration and properties for machine
  - hw/core: Check smp cache topology support for machine
  - hw/core: Add a helper to check the cache topology level
  - hw/core/machine-smp: Initialize caches_bitmap before reading
  - hw/core/machine-smp: Fix error message parameter
  - i386/cpu: Extract a common fucntion to setup value of MSR_CORE_THREAD_COUNT
  - i386/cpu: Drop the variable smp_cores and smp_threads in x86_cpu_pre_plug()
  - i386/cpu: Drop cores_per_pkg in cpu_x86_cpuid()
  - i386/topology: Update the comment of x86_apicid_from_topo_ids()
  - i386/topology: Introduce helpers for various topology info of different level
  - target/i386/cpu: Consolidate the use of warn_report_once()
  - i386/cpu: Track a X86CPUTopoInfo directly in CPUX86State
  - i386/cpu: Hoist check of CPUID_EXT3_TOPOEXT against threads_per_core
  - cpu: Remove nr_cores from struct CPUState
  - i386/cpu: Set up CPUID_HT in x86_cpu_expand_features() instead of cpu_x86_cpuid()
  - i386/cpu: Set and track CPUID_EXT3_CMP_LEG in env->features[FEAT_8000_0001_ECX]
  - hw/core/machine: Reject thread level cache
  - i386/cpu: Support module level cache topology
  - i386/cpu: Update cache topology with machine's configuration
  - i386/pc: Support cache topology in -machine for PC machine
  - i386/cpu: add has_caches flag to check smp_cache configuration
  - i386/cpu: Introduce enable_cpuid_0x1f to force exposing CPUID 0x1f
  - i386/cpu: Move adjustment of CPUID_EXT_PDCM before feature_dependencies[] check
  - i386/cpu: Rename enable_cpuid_0x1f to force_cpuid_0x1f
  - i386/cpu: Refine comment of CPUID2CacheDescriptorInfo
  - i386/cpu: Add descriptor 0x49 for CPUID 0x2 encoding
  - i386/cpu: Add default cache model for Intel CPUs with level < 4
  - i386/cpu: Present same cache model in CPUID 0x2 & 0x4
  - i386/cpu: Consolidate CPUID 0x4 leaf
  - i386/cpu: Drop CPUID 0x2 specific cache info in X86CPUState
  - i386/cpu: Add x-vendor-cpuid-only-v2 option for compatibility
  - i386/cpu: Mark CPUID[0x80000005] as reserved for Intel
  - i386/cpu: Rename AMD_ENC_ASSOC to X86_ENC_ASSOC
  - i386/cpu: Fix CPUID[0x80000006] for Intel CPU
  - i386/cpu: Add legacy_intel_cache_info cache model
  - i386/cpu: Add legacy_amd_cache_info cache model
  - i386/cpu: Select legacy cache model based on vendor in CPUID 0x2
  - i386/cpu: Select legacy cache model based on vendor in CPUID 0x4
  - i386/cpu: Select legacy cache model based on vendor in CPUID 0x80000005
  - i386/cpu: Select legacy cache model based on vendor in CPUID 0x80000006
  - i386/cpu: Select legacy cache model based on vendor in CPUID 0x8000001D
  - i386/cpu: Use a unified cache_info in X86CPUState
  - i386/cpu: Introduce cache model for SierraForest
  - i386/cpu: Introduce cache model for GraniteRapids
  - i386/cpu: Introduce cache model for SapphireRapids
  - i386/cpu: Add a "x-force-cpuid-0x1f" property
  - i386/cpu: Enable 0x1f leaf for SierraForest by default
  - i386/cpu: Enable 0x1f leaf for SierraForest by default
  - i386/cpu: Enable 0x1f leaf for GraniteRapids by default
  - i386/cpu: Enable 0x1f leaf for SapphireRapids by default
  - i386/cpu: Mark EBX/ECX/EDX in CPUID 0x80000000 leaf as reserved for Intel
  - i386/cpu: Mark CPUID 0x80000007[EBX] as reserved for Intel
  - i386/cpu: Mark CPUID 0x80000008 ECX bits[0:7] & [12:15] as reserved for Intel/Zhaoxin
  - i386/cpu: Reorder CPUID leaves in cpu_x86_cpuid()
  - i386/cpu: Fix number of addressable IDs field for CPUID.01H.EBX[23:16]
  - i386/cpu: Fix cpu number overflow in CPUID.01H.EBX[23:16]
  - i386/cpu: Honor maximum value for CPUID.8000001DH.EAX[25:14]
  - hw/core: allow parameter=1 for SMP topology on any machine
  - docs/deprecated: Remove undeprecated SMP description
  - i386/tcg: Make CPUID_HT and CPUID_EXT3_CMP_LEG supported
  - i386/hvf: Make CPUID_HT supported
  - target/i386/cpu: Move addressable ID encoding out of compat property in CPUID[0x1]
  - target/i386: add compatibility property for pdcm feature


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-77
changelog:
  - system/physmem: Fix possible double free when destroy cpu address space
  - Migration: add virtcca secure CVM live migration support
  - Migration: add virtcca secure CVM live migration support
  - virtcca migration: bugfix, meson option 'virtcca_migration' default value set to disabled
  - ub: update VFIO UB IRQ index enum definitions
  - ub: add VFIO_UB_REINIT_IRQ_INDEX for reinit interrupt support
  - ub: return error code to vm
  - ub: fix passthrough errno to vm
  - ub: reinit irq set failed don't stop vm
  - migration/cgs: fix some function name spell error
  - migration/cgs: Fix mismatched allocator in write_numa_info_to_sysfs
  - ub: fix fill_rq_cq not checking fill_cq return value
  - ub: fix ub cq depth
  - ub: pass ub feature to guest os
  - migration/cgs: bugfix, adding poison ignore CONFIG_VIRTCCA_MIGRATION when building non-aarch64 target to avoid error


author: Fei Xu <xufei30@huawei.com> - 11:8.2.0-78
changelog:
  - system/physmem: disable guest RAM core dump for cca
  - vhost: Remove unused log_fd variable in vhost_dev_log_resize()
  - i386/cpu: Allow cache to be shared at thread level
  - hw/vfio: Allow multiple vfio devices migration if none support P2P_MIGRATION


author: Fei Xu <xufei30@huawei.com> - 11:8.2.0-79
changelog:
  - migration/cgs:fix stream leak on error in virtcca_mig_stream_setup
  - hw/ub:remove check after g_malloc0 in line_generator
  - target/i386: Add support for CPUID leaf 0x8000001A
  - target/i386: Add support for CPUID leaf 0x8c860000
  - target/i386: Add Hygon Chengdu-v2 CPU model
  - target/i386: Add Hygon Dharma-v2 CPU model
  - target/i386: Add tsc-adjust to Hygon Chengdu‑v2
  - target/i386: Add avx512-vp2intersect to Chengdu‑v2
  - target/i386: Expose CPUID 0x8000001A values to Dharma-v2 and Chengdu-v2
  - target/i386: Add xsaves to Dharma-v2 and Chengdu-v2
  - hw/arm/virt: Support larger highmem MMIO regions
  - vfio/pci: Ascend910B change to bar2 quirk
  - vfio/pci: support guest numa node for Ascend910B devices by bar quirk
  - vfio/pci: add NORMALNC bar quirk feature for Ascend910B
  - lsi53c895a: clear tag byte when processing messages
  - lsi53c895a: fix use-after-free of cancelled request
  - virtio-gpu: fix overflow check when allocating 2d image (CVE-2026-3886)
  - ui/vnc: fix OOB read updating VNC update frequency stats(CVE-2026-48003)
  - target/loongarch: Fix compilation errors when enabling the UB function
  - virtio-blk: add missing VIRTIO_BLK_T_SCSI_CMD size check (CVE-2026-48914)


author: Fei Xu <xufei30@huawei.com> - 11:8.2.0-80
changelog:
  - hw/net/rocker_of_dpa: Check group ID pointers are not NULL(CVE-2022-36648)
  - hw/net/rocker_of_dpa: Avoid unaligned accesses in _of_dpa_flow_match()
  - ub: support --enable-ub/--disable-ub configure option and update unit tests with reference ACPI tables
  - hw/ub: fix wrong log message in fill_cq/msgq_rq_init
  - block/graph-lock: fix missed wakeup in bdrv_graph_co_rdunlock()
  - target/riscv: clear mseccfg on reset for all dependent extensions
  - target/riscv: rvv: Handle source overlap of vector widening reduction instructions
  - hw/loongarch/virt: fix cpu hotplug issue
  - Fix compatibility issues with the upstream kernel
  - tests/avocado: Update LoongArch bios file
  - hw/mips/loongson3_virt: Emulate suspend function
  - hw/intc/loongarch_ipi: Remove pointless MAX_CPU check
  - hw/intc/loongarch_ipi: Rename as loongson_ipi
  - hw/intc/loongson_ipi: Implement IOCSR address space for MIPS
  - hw/intc: Remove loongarch_ipi.c
  - hw/intc/loongson_ipi: Provide per core MMIO address spaces
  - hw/intc/loongson_ipi: Replace ipi_getcpu with cpu_by_arch_id
  - hw/mips/loongson3_virt: Wire up loongson_ipi device
  - util/bufferiszero: Remove SSE4.1 variant
  - util/bufferiszero: Remove AVX512 variant
  - util/bufferiszero: Reorganize for early test for acceleration
  - util/bufferiszero: Remove useless prefetches
  - util/bufferiszero: Optimize SSE2 and AVX2 variants
  - util/bufferiszero: Improve scalar variant
  - util/bufferiszero: Introduce biz_accel_fn typedef
  - util/bufferiszero: Simplify test_buffer_is_zero_next_accel
  - util/bufferiszero: Add simd acceleration for aarch64
  - tests/bench: Add bufferiszero-bench
  - util/bufferiszero: Split out host include files
  - util/bufferiszero: Add loongarch64 vector acceleration
  - MAINTAINERS: Add myself as a reviewer of LoongArch virt machine
  - qemu/timer: Add host ticks function for LoongArch
  - target/loongarch/gdbstub: Add vector registers support
  - hw/intc/loongson_ipi: Access memory in little endian
  - hw/intc/loongson_ipi: Fix resource leak
  - hw/intc/loongson_ipi: Declare QOM types using DEFINE_TYPES() macro
  - docs: Correct Loongarch -> LoongArch
  - qapi/machine: Belatedly document target loongarch64 is since 7.1
  - hw/intc/loongson_ipi: Rename LoongsonIPI -> LoongsonIPIState
  - hw/intc/loongson_ipi: Extract loongson_ipi_common_realize()
  - hw/intc/loongson_ipi: Add TYPE_LOONGSON_IPI_COMMON stub
  - hw/intc/loongson_ipi: Move common definitions to loongson_ipi_common.h
  - hw/intc/loongson_ipi: Move IPICore::mmio_mem to LoongsonIPIState
  - hw/intc/loongson_ipi: Move IPICore structure to loongson_ipi_common.h
  - hw/intc/loongson_ipi: Pass LoongsonIPICommonState to send_ipi_data()
  - hw/intc/loongson_ipi: Add LoongsonIPICommonClass::get_iocsr_as handler
  - hw/intc/loongson_ipi: Add LoongsonIPICommonClass::cpu_by_arch_id handler
  - hw/intc/loongson_ipi: Expose loongson_ipi_core_read/write helpers
  - hw/intc/loongson_ipi: Move common code to loongson_ipi_common.c
  - hw/intc/loongarch_ipi: Add loongarch IPI support
  - hw/loongarch/virt: Replace Loongson IPI with LoongArch IPI
  - hw/intc/loongson_ipi: Restrict to MIPS
  - hw/intc/loongson_ipi: Remove unused headers
  - roms: Support compile the efi bios for loongarch
  - hw/loongarch/fw_cfg: Build in common_ss[]
  - linux-headers: Update to Linux v6.12-rc5
  - hw/intc/loongarch_extioi: Use set_bit32() and clear_bit32() for s->isr
  - MAINTAINERS: add myself as the maintainer for LoongArch VirtMachine
  - include: Add loongarch_pic_common header file
  - include: Move struct LoongArchPCHPIC to loongarch_pic_common header file
  - hw/intc/loongarch_pch: Merge instance_init() into realize()
  - hw/intc/loongarch_pch: Rename LoongArchPCHPIC with LoongArchPICCommonState
  - hw/intc/loongarch_pch: Move some functions to file loongarch_pic_common
  - hw/intc/loongarch_pch: Inherit from loongarch_pic_common
  - hw/intc/loongarch_pch: Add pre_save and post_load interfaces
  - hw/intc/loongarch_pch: Code cleanup about loongarch_pch_pic
  - include: Add loongarch_extioi_common header file
  - include: Move struct LoongArchExtIOI to header file loongarch_extioi_common
  - include: Rename LoongArchExtIOI with LoongArchExtIOICommonState
  - hw/intc/loongarch_extioi: Rename LoongArchExtIOI with LoongArchExtIOICommonState
  - hw/intc/loongarch_extioi: Add common realize interface
  - hw/intc/loongarch_extioi: Add unrealize interface
  - hw/intc/loongarch_extioi: Add common file loongarch_extioi_common
  - hw/intc/loongarch_extioi: Inherit from loongarch_extioi_common
  - hw/intc/loongarch_extioi: Add pre_save interface
  - hw/intc/loongarch_extioi: Code cleanup about loongarch_extioi
  - hw/acpi: Upgrade ACPI SPCR table to support SPCR table revision 4 format
  - hw/loongarch/virt: Create fdt table on machine creation done notification
  - hw/loongarch/virt: Improve fdt table creation for CPU object
  - target/loongarch: Use auto method with LSX feature
  - target/loongarch: Use auto method with LASX feature
  - hw/core/loader: Use ssize_t for efi zboot unpacker
  - hw/loongarch/boot: Support Linux raw boot image
  - hw/intc/loongarch_extioi: Get cpu number from possible_cpu_arch_ids
  - hw/intc/loongarch_extioi: Remove num-cpu property
  - hw/intc/loongarch_extioi: Add irq routing support from physical id
  - hw/loongarch/virt: Checkpatch cleanup
  - hw/intc/loongarch_ipi: Implement realize interface
  - hw/intc/loongson_ipi: Remove num_cpu from loongson_ipi_common
  - hw/intc/loongson_ipi: Remove property num_cpu from loongson_ipi_common
  - hw/intc/loongarch_ipi: Get cpu number from possible_cpu_arch_ids
  - hw/intc/loongson_ipi: Add more input parameter for cpu_by_arch_id
  - hw/intc/loongarch_ipi: Use alternative implemation for cpu_by_arch_id
  - target/loongarch: Add dynamic function access with CSR register
  - target/loongarch: Add generic csr function type
  - target/loongarch: Add common header file for CSR registers
  - target/loongarch: Dump all generic CSR registers
  - hw/loongarch/virt: Rename filename acpi-build with virt-acpi-build
  - hw/loongarch/virt: Rename function prefix name
  - hw/loongarch/virt: Add separate file for fdt building
  - hw/loongarch/virt: Set iocsr address space when CPU is created
  - hw/loongarch/virt: Remove unused ipistate
  - hw/loongarch/virt: CPU irq line connection improvement
  - target/loongarch/gdbstub: Fix gdbstub incorrectly handling some registers
  - target/loongarch: Correct maximum physical address in KVM mode
  - target/loongarch: Add post init function for kvm mode
  - target/loongarch: Move kvm specified vCPU property to kvm directory
  - target/loongarch: Add vCPU property for paravirt ipi feature
  - target/loongarch: Add paravirt ipi feature detection
  - target/loongarch: Add vCPU property for kvm steal time feature
  - target/loongarch: Add kvm steal time feature detection
  - target/loongarch: Enable virtual extioi feature
  - hw/intc/loongarch_ipi: Add basic hotplug framework
  - hw/intc/loongarch_ipi: Implment cpu hotplug interface
  - hw/intc/loongarch_ipi: Notify ipi object when cpu is plugged
  - hw/intc/loongarch_extioi: Move gpio irq initial to common code
  - hw/intc/loongarch_extioi: Add basic hotplug framework
  - hw/intc/loongarch_extioi: Implment cpu hotplug interface
  - hw/intc/loongarch_extioi: Use cpu plug notification
  - hw/loongarch/virt: Add CPU topology support
  - hw/loongarch/virt: Add topo properties on CPU object
  - hw/loongarch/virt: Add basic cpu plug interface framework
  - hw/loongarch/virt: Implement cpu unplug interface
  - hw/loongarch/virt: Implement cpu plug interface
  - hw/loongarch/virt: Update the ACPI table for hotplug cpu
  - hw/loongarch/virt: Enable cpu hotplug feature on virt machine
  - target/loongarch: fix make check-functional failed
  - target/loongarch: check tlb_ps
  - qemu/atomic: Rename atomic128-cas.h headers using .h.inc suffix
  - qemu/atomic: Rename atomic128-ldst.h headers using .h.inc suffix
  - qemu/atomic128: Include missing qemu/atomic.h header
  - host/include/loongarch64: Fix inline assembly compatibility with Clang
  - docs/system: Add entry for LoongArch system
  - target/loongarch: Fix error handling of KVM feature checks
  - hw/loongarch/virt: Eliminate error_propagate()
  - target/loongarch: Clean up virt_cpu_irq_init() error handling
  - target/loongarch: Fix the cpu unplug resource leak
  - hw/loongarch/virt: Fix cpuslot::cpu set at last in virt_cpu_plug()
  - hw/loongarch/virt: Replace destination error with error_abort
  - hw/intc/loongarch_pch_msi: Remove gpio input handler
  - linux-user/loongarch64: Decode BRK break codes for FPE signals
  - target/loongarch: Add CRC feature flag and use it to gate CRC instructions
  - target/loongarch: Guard BCEQZ/BCNEZ instructions with FP feature
  - hw/intc/loongarch_ipi: Add reset support
  - hw/intc/loongarch_extioi: Add reset support
  - hw/intc/loongarch_extioi: Replace legacy reset callback with new api
  - hw/intc/loongarch_pch: Add reset support
  - hw/intc/loongarch_pch: Replace legacy reset callback with new api
  - hw/loongarch/virt: Get physical entry address with elf file
  - hw/loongarch/virt: Replace RSDT with XSDT table
  - hw/loongarch/virt: Allow user to customize OEM ID and OEM table ID
  - hw/intc/loongarch_pch: Modify name of some registers
  - hw/intc/loongarch_pch: Modify register name PCH_PIC_xxx_OFFSET with PCH_PIC_xxx
  - hw/intc/loongarch_pch: Remove some duplicate macro
  - hw/intc/loongarch_pch: Set version information at initial stage
  - hw/intc/loongarch_pch: Use relative address in MemoryRegionOps
  - hw/intc/loongarch_pch: Discard write operation with ISR register
  - hw/intc/loongarch_pch: Use generic read callback for iomem32_low region
  - hw/intc/loongarch_pch: Use generic read callback for iomem32_high region
  - hw/intc/loongarch_pch: Use generic read callback for iomem8 region
  - hw/intc/loongarch_pch: Use generic write callback for iomem32_low region
  - hw/intc/loongarch_pch: Use generic write callback for iomem32_high region
  - hw/intc/loongarch_pch: Use generic write callback for iomem8 region
  - hw/intc/loongarch_pch: Use unified trace event for memory region ops
  - hw/intc/loongarch_pch: Rename memory region iomem32_low with iomem
  - hw/intc/loongarch_pch: Set flexible memory access size with iomem region
  - hw/intc/loongarch_pch: Merge three memory region into one
  - hw/loongarch/boot: Adjust the loading position of the initrd
  - hw/loongarch/virt: Fix big endian support with MCFG table
  - hw/intc/loongarch_pch: Convert to little endian with ID register
  - hw/intc/loongarch_extioi: Fix typo issue about register EXTIOI_COREISR_END
  - hw/loongarch/virt: inform guest of kvm
  - hw/loongarch/virt: Remove global variables about initrd
  - hw/loongarch/virt: Remove global variables about memmap tables
  - hw/intc/loongarch_extioi: Add kernel irqchip realize function
  - hw/intc/loongarch_extioi: Add kernel irqchip save and restore function
  - hw/intc/loongarch_ipi: Add kernel irqchip realize function
  - hw/intc/loongson_ipi: Add load and save interface with ipi_common class
  - hw/intc/loongarch_ipi: Add kernel irqchip save and restore function
  - hw/intc/loongarch_pch_msi: Inject MSI interrupt to kernel
  - hw/intc/loongarch_pch: Add kernel irqchip realize function
  - hw/intc/loongarch_pch: Add kernel irqchip save and restore function
  - hw/intc/loongarch_pch: Inject irq line interrupt to kernel
  - hw/loongarch/virt: Add reset support for kernel irqchip
  - target/loongarch: Report error with split kernel_irqchip option
  - hw/loongarch/virt: Disable emulation with IOCSR misc register
  - hw/loongarch/virt: Add kernel irqchip support
  - hw/intc/loongarch_extioi: Move unrealize function to common code
  - target/loongarch: Fix CSR STLBPS register write emulation
  - tests/acpi: Add empty ACPI data files for LoongArch
  - tests/qtest/bios-tables-test: Add basic testing for LoongArch
  - rebuild-expected-aml.sh: Add support for LoongArch
  - tests/acpi: Remove stale allowed tables
  - acpi: Add machine option to disable SPCR table
  - hw/intc/loongarch_extioi: Remove unnecessary qemu/typedefs.h include
  - hw/intc/loongarch_ipi: Fix start fail with smp cpu < smp maxcpus on KVM
  - target/loongarch: Guard 64-bit-only insn translation with TRANS64 macro
  - hw/intc/loongarch_pch_pic: Fix ubsan warning and endianness issue
  - target/loongarch: Move some function definition to kvm directory
  - target/loongarch: Define function loongarch_cpu_post_init as static
  - hw/loongarch/virt: Add BSP support with aux boot code
  - hw/loongarch/virt: Remove unnecessay pre-boot setting with BSP
  - hw/loongarch/virt: Register reset interface with cpu plug callback
  - target/loongarch: move some machine define to virt.h
  - hw/loongarch: add virt feature dmsi support
  - hw/loongarch: add misc register support dmsi
  - loongarch: add a direct interrupt controller device
  - target/loongarch: add msg interrupt CSR registers
  - hw/loongarch: DINTC add a MemoryRegion
  - hw/loongarch: Implement dintc realize and unrealize
  - hw/loongarch: Implement dintc set irq
  - target/loongarch: Add CSR_ESTAT.bit15 and CSR_ECFG.bit15 for msg interrupts.
  - hw/loongarch: Implement DINTC plug/unplug interfaces
  - target/loongarch: Fix page size set issue with CSR_STLBPS
  - bios-tables-test-allowed-diff.h: Allow LoongArch DSDT.*
  - hw/loongarch/virt: Align VIRT_GED_CPUHP_ADDR to 4 bytes
  - tests/data/acpi/loongarch64: Update expected DSDT.*
  - hw/loongarch/virt: Remove header file ls7a.h
  - hw/loongarch/virt: Sort order by hardware device base address
  - target/loongarch: Replace VMSTATE_UINTTL() -> VMSTATE_UINT64()
  - target/loongarch: Remove target_ulong use in gdb_write_register handler
  - target/loongarch: Use auto method with PTW feature
  - hw/int/loongarch: Include missing system/memory.h header
  - linux-headers: Update to Linux v6.18-rc3
  - target/loongarch: Add PTW feature support in KVM mode
  - target/loongarch: Add PMU migration support in KVM mode
  - target/loongarch: Call function loongarch_la464_init_csr() after realized
  - target/loongarch: Add PMU register dump support in KVM
  - hw/loongarch/virt: Add field ram_end in LoongArchVirtMachineState
  - hw/loongarch/virt: Add field gpex in LoongArchVirtMachineState
  - hw/loongarch/virt: Get irq number from gpex config info
  - hw/loongarch/virt: Get PCI info from gpex config info
  - hw/loongarch/virt: Add property highmem_mmio with virt machine
  - hw/loongarch/virt: Add high MMIO support with GPEX host
  - hw/loongarch/virt: Add property highmem-mmio-size with virt machine
  - hw/loongarch: Use explicit little-endian LD/ST API
  - hw/loongarch/virt: Modify the interrupt trigger type in fdt table
  - hw/loongarch/virt: Fix irq allocation failure with pci device from fdt
  - hw/loongarch/virt: Dont abort on access to unimplemented IOCSR
  - configs/targets: Forbid LoongArch to use legacy native endianness APIs
  - target/loongarch: Add LA v1.1 instructions to max cpu
  - target/loongarch: Fix query-cpu-model-expansion to reject props
  - target/loongarch: Add missing vCPU features with QMP method
  - target/loongarch: Add full type support with query-cpu-model-expansion
  - target/loongarch: Add property set with query-cpu-model-expansion
  - target/loongarch: Add detailed information with CPU Product ID
  - target/loongarch: Add default cpucfg3 with LA464 CPU
  - target/loongarch: Add generic CPU model information
  - target/loongarch: Add host CPU model in kvm mode
  - target/loongarch: Add some CPUCFG bits with host CPU model
  - hw/loongarch: Use loongarch_palen_mask()
  - bios-tables-test-allowed-diff.h: Allow LoongArch DSDT.*
  - hw/loongarch: add rtc acpi table
  - tests/qtest/bios-tables-test: Update DSDT blobs after loongarch rtc change
  - hw/loongarch: modify rtc fdt table
  - fix compile error
  - target/loongarch: Enable paravirt ipi feature
  - linux-headers: update loongarch linux headers from OLK-6.6
  - target/loongarch: disable msgint and dmsi features
  - add loongarch binaries for edk2-stable202408
  - qemu/atomic: Finish renaming atomic128-cas.h headers
  - Migration/urma: use uvs_get_path_set to replace uvs_get_route_list
  - migration/virtcca: add forward declaration for virtcca_mig_cleanup
  - ub_ummu: support CMD_TLBI_OS_ASID_U and CMD_TLBI_HYP_ASID_U command
  - Revert "target/riscv: clear mseccfg on reset for all dependent extensions"


author: Fei Xu <xufei30@huawei.com> - 11:8.2.0-81
changelog:
  - i386/kvm: Move architectural CPUID leaf generation to separate helper
  - pci-host/q35: Move PAM initialization above SMRAM initialization
  - q35: Introduce smm_ranges property for q35-pci-host
  - hw/i386/acpi: Set PCAT_COMPAT bit only when pic is not disabled
  - confidential guest support: Add kvm_init() and kvm_reset() in class
  - i386/sev: Switch to use confidential_guest_kvm_init()
  - ppc/pef: switch to use confidential_guest_kvm_init/reset()
  - s390: Switch to use confidential_guest_kvm_init()
  - scripts/update-linux-headers: Add setup_data.h to import list 
  - scripts/update-linux-headers: Add bits.h to file imports
  - linux-headers: Update to Linux v6.8-rc6
  - linux-headers: update to current kvm/next
  - runstate: skip initial CPU reset if reset is not actually possible
  - KVM: remove kvm_arch_cpu_check_are_resettable 
  - target/i386: introduce x86-confidential-guest
  - target/i386: Implement mc->kvm_type() to get VM type
  - target/i386: SEV: use KVM_SEV_INIT2 if possible
  - i386/pc: Drop pc_machine_kvm_type()
  - i386/sev: Add legacy-vm-type parameter for SEV guest objects
  - hw: Add compat machines for 9.0
  - hw: Add compat machines for 9.1
  - target/i386: add guest-phys-bits cpu property
  - hw/i386/sev: Use legacy SEV VM types for older machine types
  - trace/kvm: Split address space and slot id in trace_kvm_set_user_memory()
  - migration: prevent migration when VM has poisoned memory
  - kvm: Introduce support for memory_attributes
  - RAMBlock: Add support of KVM private guest memfd
  - kvm: Enable KVM_SET_USER_MEMORY_REGION2 for memslot
  - kvm/memory: Make memory type private by default if it has guest memfd backend
  - backends: Use g_autofree in HostMemoryBackendClass::alloc() handlers
  - backends: Simplify host_memory_backend_memory_complete()
  - HostMem: Add mechanism to opt in kvm guest memfd via MachineState
  - RAMBlock: make guest_memfd require uncoordinated discard
  - physmem: Introduce ram_block_discard_guest_memfd_range()
  - kvm: handle KVM_EXIT_MEMORY_FAULT 
  - linux-headers: riscv: add ptrace.h
  - scripts/update-linux-header.sh: be more src tree friendly
  - linux-headers: Update to current kvm/next
  - update-linux-headers: import linux/kvm_para.h header
  - machine: allow early use of machine_require_guest_memfd
  - i386/sev: Replace error_report with error_setg
  - i386/sev: Introduce "sev-common" type to encapsulate common SEV state
  - i386/sev: Move sev_launch_update to separate class method
  - i386/sev: Move sev_launch_finish to separate class method
  - i386/sev: Introduce sev-snp-guest object
  - i386/sev: Add a sev_snp_enabled() helper
  - i386/sev: Add sev_kvm_init() override for SEV class
  - i386/sev: Add snp_kvm_init() override for SNP class
  - i386/cpu: Set SEV-SNP CPUID bit when SNP enabled
  - i386/sev: Dont return launch measurements for SEV-SNP guests
  - i386/sev: Add a class method to determine KVM VM type for SNP guests
  - i386/sev: Update query-sev QAPI format to handle SEV-SNP
  - i386/sev: Add the SNP launch start context
  - i386/sev: Add handling to encrypt/finalize guest launch data
  - i386/sev: Set CPU state to protected once SNP guest payload is finalized
  - hw/i386/sev: Add function to get SEV metadata from OVMF header
  - i386/sev: Add support for populating OVMF metadata pages
  - i386/sev: Add support for SNP CPUID validation
  - system/cpus: rename qemu_mutex_lock_iothread() to bql_lock()
  - i386/tcg: implement x2APIC registers MSR access
  - apic: add support for x2APIC mode
  - hw/i386/x86: Reverse if statement
  - hw/i386/x86: Fix PIC interrupt handling if APIC is globally disabled
  - hw/i386/q35: Simplify pc_q35_init() since PCI is always enabled
  - hw/i386/x86: Let ioapic_init_gsi() take parent as pointer
  - hw/core: Declare CPUArchId::cpu as CPUState instead of Object
  - hw/i386/pc_sysfw: Remove unused parameter from pc_isa_bios_init()
  - hw/i386/x86: Eliminate two if statements in x86_bios_rom_init()
  - hw/i386: Have x86_bios_rom_init() take X86MachineState rather than MachineState
  - hw/i386/x86: Dont leak "isa-bios" memory regions
  - hw/i386/x86: Dont leak "pc.bios" memory region
  - hw/i386/x86: Extract x86_isa_bios_init() from x86_bios_rom_init()
  - hw/i386/sev: Add support to encrypt BIOS when SEV-SNP is enabled
  - i386/sev: Invoke launch_updata_data() for SEV class
  - i386/sev: Invoke launch_updata_data() for SNP class
  - i386/kvm: Add KVM_EXIT_HYPERCALL handling for KVM_HC_MAP_GPA_RANGE
  - i386/sev: Enable KVM_HC_MAP_GPA_RANGE hcall for SNP guests
  - i386/sev: Extract build_kernel_loader_hashes
  - i386/sev: Reorder struct declarations
  - i386/sev: Allow measured direct kernel boot on SNP
  - memory: Have memory_region_init_ram_flags_nomigrate() return a boolean
  - memory: Have memory_region_init_ram_nomigrate() handler return a boolean
  - memory: Have memory_region_init_rom_nomigrate() handler return a boolean
  - memory: Simplify memory_region_init_rom_nomigrate() calls
  - memory: Simplify memory_region_init_ram_from_fd() calls
  - memory: Have memory_region_init_ram() handler return a boolean
  - memory: Have memory_region_init_rom() handler return a boolean
  - memory: Have memory_region_init_rom_device_nomigrate() return a boolean
  - memory: Simplify memory_region_init_rom_device_nomigrate() calls
  - memory: Have memory_region_init_rom_device() handler return a boolean
  - memory: Have memory_region_init_resizeable_ram() return a boolean
  - memory: Have memory_region_init_ram_from_file() handler return a boolean
  - memory: Have memory_region_init_ram_from_fd() handler return a boolean
  - memory: Introduce memory_region_init_ram_guest_memfd()
  - hw/i386/pc_sysfw: Alias rather than copy isa-bios region
  - hw/i386/sev: Use guest_memfd for legacy ROMs
  - hw/i386: Add support for loading BIOS using guest_memfd
  - i386/sev: fix unreachable code coverity issue
  - i386/sev: Move SEV_COMMON null check before dereferencing
  - i386/sev: Return when sev_common is null
  - target/i386: SEV: do not assume machine->cgs is SEV
  - target/i386: SEV: rename sev_snp_guest->id_block
  - target/i386: SEV: store pointer to decoded id_block in SevSnpGuest
  - target/i386: SEV: rename sev_snp_guest->id_auth
  - target/i386: SEV: store pointer to decoded id_auth in SevSnpGuest
  - target/i386/sev: Use size_t for object sizes
  - target/i386/sev: Fix printf formats
  - target/i386: SEV: fix formatting of CPUID mismatch message
  - i386/sev: Fix error message in sev_get_capabilities()
  - i386/sev: Fallback to the default SEV device if none provided in sev_get_capabilities()
  - target/i386: add support for masking CPUID features in confidential guests
  - target/i386/SEV: implement mask_cpuid_features
  - i386/sev: Dont allow automatic fallback to legacy KVM_SEV*_INIT
  - target/i386: SEV: fix mismatch in vcek-disabled property name
  - scripts/update-linux-headers.sh: Fix the path of setup_data.h
  - accel/kvm: Zero out mem explicitly in kvm_set_user_memory_region()
  - backends/hostmem: Fix block comments style (checkpatch.pl warnings)
  - system/physmem: use return value of ram_block_discard_require() as errno
  - hw/intc/apic: fix memory leak
  - virtio-scsi: pass the same cdb_size to virtio_scsi_pop_req and virtio_scsi_handle_cmd_req_prepare(CVE-2026-5763)
  - target/i386/csv: include exec/hwaddr.h to fix CONFIG_CSV=off build


author: Fei Xu <xufei30@huawei.com> - 11:8.2.0-82
changelog:
  - tcg: move free_tcg_plugin_context to the correct macro range
  - hw/arm/virt: Fix build error on ARM
  - virtio-blk: fix zone report buffer out-of-memory (CVE-2026-5761)
  - vfio/spapr: Add some content to sPAPR VFIOIOMMU QOM interface
  - iotests/copy-before-write: lower throttle rate to fix cbw-timeout flakiness


author: Fei Xu <xufei30@huawei.com> - 11:8.2.0-83
changelog:
  - backport: accel/kvm: check for KVM_CAP_READONLY_MEM on VM
  - net/slirp: libslirp 4.9.0 compatibility
  - docs: fix invalid footnote syntax


author: Fei Xu <xufei30@huawei.com> - 11:8.2.0-84
changelog:
  - hw/arm: virt: Add CPU cache topology support for ACPI PPTT
  - hw/usb/hcd-xhci-sysbus: Fix OOB heap access in xhci_sysbus_intr_raise() (CVE-2026-16043)
  - hw/9pfs: add xattr FID limit to prevent memory exhaustion (CVE-2026-8348)
  - ui/vnc: validate SetPixelFormat field ranges (CVE-2026-15578)
  - usbredir: fix use-after-free on buffered bulk packet overflow (CVE-2026-15705)
  - usbredir: fix infinite loop and SIGFPE with zero max_packet_size (CVE-2026-63319)
  - hw/9pfs: add response_buffer_size transport callback
  - 9pfs/virtio: implement response_buffer_size callback
  - 9pfs/xen: implement response_buffer_size callback
  - hw/9pfs: cap Treaddir allocation (CVE-2026-9238)
  - ui/vnc: fix OOB write in VNC stats array (CVE-2026-48002)
  - ui/vnc: fix OOB write in lossy rect worker code (CVE-2026-48002)
  - ui/vnc: fix OOB write in vnc_refresh_lossy_rect (CVE-2026-48002)
  - ui/vnc: fix out-of-bounds write in lossy refresh dirty marking (CVE-2026-61475)
  - ui/vnc: remove redundant rows computation
  - hw/9pfs: fix O_TRUNC bypass on read-only export (CVE-2026-63318)
  - ub: support UBUS-FIRMWARE version exchange function
  - hw/arm: virt: Support configurable cache size via smp-cache option


author: Fei Xu <xufei30@huawei.com> - 11:8.2.0-85
changelog:
  - hw/arm/virt: add legacy_cpu_hotplug for virt-6.2 and older board
  - arm_gicv3: handle GICR propbaser correctly in cross-version migration


author: Jingwiw <wangjingwei@iscas.ac.cn> - 5.2.0+git6.3-1
changelog:
  - Init package from openSUSE: https://build.opensuse.org/package/show/home:neochapay:nemo:mw/qt5-qtfeedback


author: panchenbo <panchenbo@kylinsec.com.cn> - 5.15.10-5
changelog:
  - Backport ffmpeg: avcodec/x86/mathops: clip constants used with shift instructions within inline assembly


author: lifeifei <lifeifei@kylinos.cn> - 2.19-3
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Add the socket option IPV6_MULTICAST_LOOP to prevent the interface from autoconfiguring using RA messages sent by itself.


author: andy <liuyang01@kylinos.cn> - 0.8.0-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patches
         Use the right dev_t decoding for diskerror handler


author: Donghua Huang <huangdonghua3@h-partners.com> - 50.0-36
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: libhns: Fix wrong WQE data in new post send API when QP wraps around


author: Donghua Huang <huangdonghua3@h-partners.com> - 50.0-45
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: Inline set_extend_atomic_seg() and optimize memory allocation to reduce page faults.


author: shixuantong <shixuantong1@huawei.com> - 8.2-4
changelog:
  - Add shell command to switch bracketed-paste mode from on to off to keep consistent with realine-8.0


author: zouzhimin <zouzhimin@kylinos.cn> - 4.13.0-13
changelog:
  - nfsserver: fix "server scope" functionality for both potentially other dropins AND multiple ExecStart


author: zouzhimin <zouzhimin@kylinos.cn> - 4.15.1-1
changelog:
  - update to 4.15.1
  - IPaddr2: dont fail with "IPv4 does not support lvs_ipv6_addrlabel"
    error, as the parameter is not used in IPv4 scenarioes


author: zhouyihang <zhouyihang3@h-partners.com> - 0.9.1-4
changelog:
  - Type:requirements
  - Id:NA
  - SUG:NA
  - DESC:use libsoup2 instead of libsoup3 for build when no libsoup3 provided


author: sunsuwan <sunsuwan3@huawei.com> - 1.2.6-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:add a user directory when the rpc user directory does not exist


author: Funda Wang <fundawang@yeah.net> - 4.18.2-34
changelog:
  - disable automatic maintenance when autopatching with git
    https://github.com/git/git/commit/1942d48380fec53f76361e9adebef15b5db9628a
  - sync patches within branches


author: Funda Wang <fundawang@yeah.net> - 3.2.7-6
changelog:
  - fix CVE-2024-12084, CVE-2024-12085, CVE-2024-12086, CVE-2024-12087,
    CVE-2024-12088, CVE-2024-12747


author: zhangyaqi <zhangyaqi@kylinos.cn> - 8.2312.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memory leak in omazureeventhubs on accepted PN_DELIVERY event


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 8.2312.0-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix passing the value to EscapeChar
         Do not free the uninitialized cstring
         Keep original free pattern
         network subsystem: improve connection failure error message
         Fix runConf NULL pointer refence
         rainerscript: do not try to call a function if it does not exist
         nsd_ptcp regression fix: remove debugging messages emited to stderr
         Fix legacy $ActionQueueDiscardMark parameter


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 8.2312.0-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:gnutls bugfix: Avoid blocking sockets during TLS handshake
         gnutls bugfix: Add timeout to GnuTLS handshake
         core: fix potential NULL ptr access on HUP in very early startup phase
         omfwd: fix segfault in UDP freeaddrinfo
         gnutls TLS driver: fix small memory leak
         rsyslog startup bugfix: cosmetic memory leak
         core: fix potential misadressing in sigmask
         covscan: remove defect type of RESOURCE_LEAK
         Fix a buffer overflow when the argument to replace is empty


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 8.2312.0-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:omusrmsg bugfix: potential null pointer dereference causes segfault
         omusrmsg bugfix: potential double free, which can cause segfault
         imjournal: fix double sd_journal_close() during thread cancellation
         imuxsock: Add statistics counter for discarded messages
         omjournal: Fix priority value
         fix stringop-overread warning in omusrmsg
         fix hashtable realloc memset range
         fix off-by-one buffer overflow


author: qujingling <qujingling@huawei.com> - 8.2312.0-10
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:imjournal: initialize instance fields to avoid invalid free
         imjournal: fix vulnerability in state file creation


author: xinghe <xingheyd@163.com> - 4.19.3-9
changelog:
  - Type:cves
  - ID:CVE-2026-3238 CVE-2026-3012 CVE-2026-4480 CVE-2026-4408
  - SUG:NA
  - DESC:fix CVE-2026-3238 CVE-2026-3012 CVE-2026-4480 CVE-2026-4408


author: xinghe <xingheyd@163.com> - 4.19.3-10
changelog:
  - Type:cves
  - ID:CVE-2026-6949 CVE-2026-58224 CVE-2026-58216 CVE-2026-58218 CVE-2026-58221 CVE-2026-58222
  - SUG:NA
  - DESC:fix CVE-2026-6949 CVE-2026-58224 CVE-2026-58216 CVE-2026-58218 CVE-2026-58221 CVE-2026-58222


author: xinghe <xinghe2@h-partners.com> - 8.17.2-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:extending the certificate validate period
         remove redundant patches


author: zhengxiaoxiao <zhengxiaoxiao2@huawei.com> - 2:4.14.3-1
changelog:
  - update version to 4.14.3
    -Avoid null pointer dereference
    -Update utmp at an initial login
    -Merge libshadow and libmisc into a single libshadow
    -Adding the userdel and groupdel hooks to release tarball


author: yueyuankun <yueyuankun@kylinos.cn> - 15.7-21
changelog:
  - spec: Remove debugsource requirement from debuginfo
  - Allow debuginfo to be installed alone without pulling in the debugsource package.


author: wjiang <app@cameyan.com> -15.7-22
changelog:
  - Backport bugfix patches from upstream
  - Fix build with binutils 2.46 (c4665d2)
  - Fix memory leak on TPM log error in mirror_one_mok_variable (92630f2)


author: liuqingtao <liu.qingtao2@zte.com.cn> -1.1.10-3
changelog:
  - optimized-RV-FindMatchLength-improving-compress-speed--upstream-accepted
  - DESC:Use-high-performance-FindMatchLength-to-Optimize for RV


author: zhengziyang <zheng.ziyang@zte.com.cn> -1.1.10-5
changelog:
  - backport：add rvv support for MemCopy64，upstream accepted
  - DESC:This PR add RVV to  optimize Memcopy64 function , improving compression speed


author: zhengziyang <zheng.ziyang@zte.com.cn> -1.1.10-6
changelog:
  - backport：gate__builtin_ctzll-behind-Zbb-to-avoid-10
  - DESC:RISC-V: use __builtin_ctzll only when Zbb is present


author: zhengziyang <zheng.ziyang@zte.com.cn> -1.1.10-7
changelog:
  - backport：refactor-Align-RISC-V-implementation-with-AArch64-branchless-mask-extraction
  - DESC:Align RISC-V with AArch64 by using the same branchless mask extraction
   	technique instead of the previous else-branch implementation.


author: zhengziyang <zheng.ziyang@zte.com.cn> -1.1.10-8
changelog:
  - backport:RISC-V-Optimize-decompression-with-branchless-AdvanceToNextTagRVOptimized.patch
  - DESC:Optimize decompression for RISC-V with branchless tag advancement


author: Maodi Ma <mamaodi@hygon.cn> -1.1.10-9
changelog:
  - Vendor-check-and-CMOV-opt-in-EmitCopy-for-Hygon.patch
  - CMOV-opt-in-AdvanceToNextTag-for-Hygon.patch
  - AVX-wildcopy-in-decompress-for-Hygon.patch
  - Change-hash-func-for-Hygon.patch
  - DESC:Optimization for Hygon CPU


author: yaqiangchen <chenyaqiang@huawei.com> - 14.4.2.0-29
changelog:
  - Fix CVE-2021-33844,CVE-2023-32627,CVE-2021-23159,CVE-2023-34432
  - CVE-2023-34318,CVE-2021-23172,CVE-2021-3643,CVE-2021-23210
  - CVE-2022-31650,CVE-2023-26590,CVE-2022-31651,CVE-2023-32627
  - CVE-2017-18189


author: xinghe <xingheyd@163.com> - 7:6.6-8
changelog:
  - Type:cves
  - ID:CVE-2026-33526 CVE-2026-33515 CVE-2026-32748
  - SUG:NA
  - DESC:fix CVE-2026-33526 CVE-2026-33515 CVE-2026-32748


author: Xu Raoqing <609179072@qq.com> - 2.9.4-19
changelog:
  - oidc_child: fix wrong usage of printf format (a2bd434)
  - ad: use right memory context in GPO code (723a30b)
  - Responder: fix passkey auth when user-verification is off (4c6c010)
  - KRB5: fix mem leak in authenticate_stored_users (8b452b3)
  - KCM: fix use-after-free in kcm_read_options (50ae35f)
  - NSS: Fix wrong condition invalidating an optimization (6d71291)


author: Qin Fandong <qinfandong@kylinos.cn> - 2.9.4-22
changelog:
  - Type:CVE
  - ID:CVE-2026-14474
  - SUG:NA
  - DESC:fix CVE-2026-14474: warn when ldap_sudo_search_base falls back to root DN to prevent privilege escalation


author: yixiangzhike <yixiangzhike007@163.com> - 1.9.15p5-7
changelog:
  - apply 2 patches: backport-sudo_rfc1938_setup--fix-out-of-bounds-read-if-the-.patch, backport-sudo_auth_init--Fix-setting-FLAG_ONEANDONLY-if-onl.patch


author: shixuantong <shixuantong1@h-partners.com> - 1.0.3-43
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix(xalarm): fix service stop timeout and PID lock release issues


author: shixuantong <shixuantong1@h-partners.com> - 1.0.3-46
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix sysSentry service restart issues: PID lock release and socket init


author: shixuantong <shixuantong1@h-partners.com> - 1.0.3-47
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix event switch invalidation after sysSentry service restart
         verify event switch state by reading proc file before skipping re-open


author: shixuantong <sxt1001@qq.com> - 1.0.3-48
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix PYNAME define
         cleanup: uninstall log_utils.h file
         Fix the issue of missing security compilation options
         fix bmc_ras_sentry compile failed on old gcc
         fix(script): check if driver exists before removing it
         feat(sentry_msg_monitor): add kernel-driver version compatibility check on startup


author: shixuantong <sxt1001@qq.com> - 1.0.3-49
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix potential overflow in  xalarm_report_event()
         Fix CTL message length overflow when data exceeds 3 digits


author: shixuantong <sxt1001@qq.com> - 1.0.3-50
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix partial send/recv/write in socket communication
         fix build warning
         Remove unnecessary operations for creating /var/run/sysSentry directory and modifying its permissions
         Create the socket object only after checking if the '/var/run/xalarm' directory exists
         add validation to prevent path traversal attacks
         fix codecheck warning
         improve error handling
         check sock value in create_unix_socket
         install rasdaemon.mod config file
         delete the RPATH from libxalarm.so
         Enable CMAKE_VERBOSE_MAKEFILE to show detailed compilation logs
         Do not allow users to configure unsafe environment variables
         add lock to protect ALARM_REGISTER_INFO
         Check whether the pointer passed to report_result is NULL
         Fix potential memory leak in report_result
         Return failure when an exception occurs while parsing data in the task_get_alarm
         add command string validation to prevent command injection


author: renoseven<dev@renoseven.net> - 1.2.2-4
changelog:
  - bugfix: fix rust 1.84 compile failure
  - bugfix: fix cannot find working directory
  - bugfix: fix set signal handler failure
  - bugfix: fix active accepted patch failure


author: renoseven<dev@renoseven.net> - 1.2.2-5
changelog:
  - feature: support riscv64
  - feature: support 'syscare rescan' command
  - feature: support patch blacklist / blocklist
  - feature: support custom kernel config
  - feature: support log config
  - feature: add metadata viewer
  - feature: add metadata generator
  - bugfix: supress rpm signature warnings
  - bugfix: remove build id check
  - bugfix: ignore useless sections
  - bugfix: fix attach non-exist process failure
  - bugfix: fix remote mmap failure
  - bugfix: fix some symbol resolving issue
  - bugfix: remove upatch failure process list
  - bugfix: remove root permission check


author: renoseven<dev@renoseven.net> - 1.2.2-6
changelog:
  - feature: upatch supports overridding line macros
  - bugfix: fix upatch id parsing error
  - bugfix: fix upatch object linker detection failure
  - bugfix: fix kernel module build failure
  - bugfix: fix kernel patch name length limitation
  - bugfix: fix multiple upatch-diff issues
  - bugfix: fix multiple upatch-manage issues
  - rpm: extract vendor from syscare-1.2.2.tar.gz to vendor.tar.gz


author: renoseven<dev@renoseven.net> - 1.2.2-7
changelog:
  - change: add debuginfo package version verification in syscare-build
  - change: rename "--keep-line-macros" to "--override-line-macros" in syscare-build
  - change: rename "--keep-line-macros" to "--override-line-macros" in upatch-build
  - bugfix: fix special section correlation failure
  - bugfix: fix compilation command misdetection
  - bugfix: fix incorrect upatch object lookup when upatch ID conflicts
  - bugfix: fix patch file disorder when building cumulative patches
  - bugfix: fix abnormal syscare CLI return value when external command failure
  - bugfix: fix stack check false warnings under boundary conditions
  - bugfix: fix build failure under Rust 1.89


author: eshiner<zengfuliangjx@sina.cn> - 1.2.2-9
changelog:
  - change: rewrite parse_patches
  - bugfix: fix parse target version string error
  - bugfix: fix older compiler versions compatibility issue
  - bugfix: update Cargo.lock
  - bugfix: fix kernel configuration compatibility issue
  - bugfix: fix apply patch to source error
  - change: optimize compiler error display and add execution of clean-cmd
  - bugfix: fix override_line_macros scope and add auto-recovery
  - bugfix: fix read_stack segmentation fault
  - bugfix: fix wrong variable check in parse_section_metadata
  - change: implement lock-free patch manager
  - bugfix: fix patch monitor watch mapping and event handling edge cases
  - bugfix: add NULL check for sec->rela before dereferencing
  - bugfix: fix variable name errors in section info parsing
  - bugfix: fix symbol type filter inversion in resolve_rela_plt
  - change: move upatch_find_patch out of retry loop in upatch_unapply_prepare
  - bugfix: fix off-by-one buffer overflow in readlink


author: zhangxianting <zhangxianting@uniontech.com> - 0.9-64
changelog:
  - Type:patch
  - CVE:NA
  - SUG:NA
  - DESC:patch hunk FAILED bacause of the arch judgement of sw_64 and loongarch64


author: laokz <zhangkai@iscas.ac.cn> - 0.9-67
changelog:
  - Type:fix
  - CVE:NA
  - SUG:NA
  - DESC:riscv64: reverse -static-pie patch due to unsupported tool-chains


author: zhang_chunjing<zhang_chunjing@hoperun.com> - 1.3.2-1.1
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC: add systemd to BuildRequires to fix install/uninstall errors


author: wjiang <app@cameyan.com> - 255-52
changelog:
  - backport community patches and skip bios_version test:
        backport-login-user-runtime-dir-free-ignored-sd_bus_error-avo.patch
        backport-login-user-runtime-dir-use-STRLEN-where-appropriate.patch
        backport-systemctl-gracefully-adjust-bus-transport-and-runtim.patch
        backport-journal-do-not-rotate-journal-when-MaxRetentionSec-i.patch
        backport-nspawn-use-strv_extend-and-friends-to-build-director.patch
        backport-nspawn-only-remount-usr-with-idmap-when-volatile-yes.patch
        backport-nspawn-mount-var-after-remount_idmap-when-volatile-s.patch
        backport-compress-avoid-a-bunch-of-div-by-zeroes.patch


author: Linux_zhang <244695981@qq.com> - 255-53
changelog:
  - sync community patches
    backport-journal-use-EBADMSG-for-invalid-data-in-file-mmap.patch
    backport-journal-replace-a-bunch-of-assert-with-friendlier-ch.patch


author: wulinfeng <wulinfeng@xfusion.com> - 255-55
changelog:
  - fix coredump generation when systemd-resolved and systemd-networkd service is started then uninstalled


author: Yu Peng <yupeng@kylinos.cn> - 5.0-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Make autoconf-utrace-via-tracepoints.c work with struct folio.


author: Funda Wang <fundawang@yeah.net> - 0.8.2-15
changelog:
  - move glib schemas into main package
  - drop static lib as it was not used by any other packages
  - drop uselss scriptlets as they are handled by rpm file trigger already


author: Yu Peng <yupeng@kylinos.cn> - 1:0.17-81
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix telnet crashes on stack overflow due to infinite recursion.


author: zhangxianting <zhangxianting@unionech.com> - 2.12.1-1
changelog:
  - Increase the upper limit version of typing_extensions to fix install, typing_extensions>=3.6.6,<4.6.0 to typing_extensions>=3.6.6,<=4.10.0


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com>- 0.6-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:The "cc:No such file or directroy" error message is displayed during compilation.Therefore,add buildrequires gcc.
         The macro unitdir is used.Therefore,add buildrequires systemd


author: chench <chench@hygon.cn> - 4.0.1-5
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:add SM4 algorithm support
    - Add support for udev to create tcm devices
    - add ecc encrypt/decrypt support
    - add bootstrap file from upstream


author: lizhuo <lizhuo@xfusion.com> - 4.0.1-6
changelog:
  - FAPI: Fix missing scanf checks.
    In several cases the return value of scanf was not checked.
    Thus afterwards acces to variables not initialized was possible.


author: lizhuo <lizhuo@xfusion.com> - 4.0.1-7
changelog:
  - FAPI: TCTI Device: Fix using of C string for byte array.
    On arch linux gcc did produce an error because a null terminator
    was added.


author: renmingshuai <renmingshuai@huawei.com> - 4.4.2-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:add a test case for PXE to support ipv6
         support lease time config for ipv6


author: Yang Qi <yangqi124@h-partners.com> - 1.0.2-3
changelog:
  - update source from openeuler/ubs-mem master commit 835f17e
  - add IPC suspend/resume APIs, lifecycle protection, and daemon disconnect cleanup protection
  - sync the latest UBSE headers


author: fundawang <fundawang@yeah.net> - 2.10.1-10
changelog:
  - Fix CVE-2026-7867 (as-user mount authorization bypass, local privilege escalation)
  - Normalize License field to SPDX identifiers (GPL-2.0-or-later, LGPL-2.0-or-later)
  - Drop unused 
  - Align BuildRequires versions with upstream configure.ac (systemd 209, libmount >= 2.30, add libblkid-devel)
  - Convert pkg-config style BuildRequires to pkgconfig() form
  - Drop unused intltool BuildRequires (i18n uses GNU gettext)


author: luyizhou <luyizhou1@huawei.com> - 26.06.0-B002
changelog:
  -urma: add Bazel build support.
  -urpc: enhance ums agent security proxy.
  -urpc: umq shared flow-control jfr.
  -urma: enhance bonding multi-path.


author: luyizhou <luyizhou1@huawei.com> - 26.06.0-B003
changelog:
  -urma: support get jfce fd list by usr ctl.
  -urma: add register log API and refactor user dfx.
  -urma: fix bonding dev context, jetty import and bondp_import_jetty mem leak.
  -urma: add bondp_create_jfc/jfr extended interface and port validation.
  -urma: fix bazel compile and rename liburma-udma.so output.
  -urpc: fetch umdk headers from gitcode when build.
  -umq: update imm data to 64bit and support ctp.
  -umq: improve buffer rollback, batch size, jfr/jfc port and IMM handling.
  -ums: implement secure UB token exchange via ums_agent.
  -ums: add netlink token exchange framework and agent fixes.
  -ums: improve token proxy and TLS connection handling.
  -dlock: fix peer_type, header len, batch lock and SSL buffer issues.
  -cam: fix mask calculation error in combine.
  -ub: udma support st64b_en function.
  -umdk: add umdk main package.


author: wangxin <wangxin554@huawei.com> - 26.06.0-B004
changelog:
  -urma: performance optimization post wr
  -umq: alloc a id for umq
  -urma: add main_ue_eid admin command support
  -ums: remove auto-learn mode and enforce strict identity verification
  -umq: support register ext_func for log
  -urma: topology supports parallel planes
  -urma: allow disabling of msn deduplication


author: wangxin <luyicai1994@yeah.net> - 26.06.0-B005
changelog:
  -umq: modify qbuf default config in ctp mode
  -urma: performance optimization post wr
  -urma: add dfx log for bondp implement.
  -urma: Refactored the URMA Bazel build to emit layered shared libraries.
  -urma: support get tp list.
  -urpc: add param validation
  -umq: add ext_func for log_config_get
  -urma: fix log for bondp implement.
  -ums: remove auto-learn mode and enforce strict identity verification
  -umdk:modify umdk package version to 26.06.0
  -urma: increase topo max node limit to 1024
  -urma: fix umdk urma IPoURMA case fail
  -umq: flow control sge manage
  -urma: add background worker thread for bond device
  -umq: fix param validation and string terminator issues
  -umq: remove redundant code
  -fix umdk urma dev not correct
  -ums:fix codecheck issues
  -dlock:fixup update_locks_response processing out of bound bug
  -urma: enhance URMA Bazel build configuration
  -urma: Add DFX functionality for link removal and resource destruction
  -urma: improve urma_ping arg parsing and EID logging
  -umdk: fix ip over urma cases fail


author: gaihuiying <eaglegai@163.com> - 1.17.1-15
changelog:
  - Type:CVE
  - CVE:CVE-2025-11411
  - SUG:NA
  - DESC:Additional fix for CVE-2025-11411 to include YXDOMAIN and non-referral nodata answers in the mitigation


author: gaihuiying <eaglegai@163.com> - 1.17.1-16
changelog:
  - Type:cves
  - CVE:CVE-2026-33278,CVE-2026-42944,CVE-2026-41292,CVE-2026-42959,CVE-2026-42960
  - SUG:NA
  - DESC:fix CVE-2026-33278,CVE-2026-42944,CVE-2026-41292,CVE-2026-42959,CVE-2026-42960


author: gaihuiying <eaglegai@163.com> - 1.17.1-17
changelog:
  - Type:cves
  - CVE:CVE-2026-32792,CVE-2026-42923,CVE-2026-40622,CVE-2026-42534,CVE-2026-44390,CVE-2026-44608
  - SUG:NA
  - DESC:fix CVE-2026-32792,CVE-2026-42923,CVE-2026-40622,CVE-2026-42534,CVE-2026-44390,CVE-2026-44608


author: gaihuiying <eaglegai@163.com> - 1.17.1-19
changelog:
  - Type:CVE
  - CVE:CVE-2026-46582,CVE-2026-40691,CVE-2026-42955,CVE-2026-44621,CVE-2026-44687,CVE-2026-44690,CVE-2026-50046,CVE-2026-50243,CVE-2026-50248,CVE-2026-50251,CVE-2026-55708,CVE-2026-55717,CVE-2026-55990,CVE-2026-56416
  - SUG:NA
  - DESC:fix CVE-2026-46582,CVE-2026-40691,CVE-2026-42955,CVE-2026-44621,CVE-2026-44687,CVE-2026-44690,CVE-2026-50046,CVE-2026-50243,CVE-2026-50248,CVE-2026-50251,CVE-2026-55708,CVE-2026-55717,CVE-2026-55990,CVE-2026-56416


author: liuchao <liuchao173@huawei.com> - 1.90.2-1
changelog:
  - Update to 1.90.2:
    - Fix wireless devices not disappearing from Settings when disconnected
    - Require a newer libgudev to avoid bugs related to newline stripping when reading sysfs attributes
    - Add installed-tests files for use with gnome-desktop-testing
    - Fix integration test to work with system installed upower binary and under jhbuild
    - Detect headsets with kernel batteries such as Logitech and Steelseries headsets, and make them automatically disappear if the headset is turned off (if the kernel driver supports the wireless_status attribute)
    - Hide duplicate Logitech Bluetooth devices (Bolt-compatible devices connected through Bluetooth would show as 2 batteries)
    - Hide duplicate Logitech wireless devices when they get connected through USB as well
    - Fix Bluetooth device names not synchronising, and use user-chosen names when available
    - Handle the "present" sysfs attribute changing
    - Fix iDevices not appearing
    - Fix reading capacity_level with newer libgudev
    - Fix OpenBSD backend
    - Refactor internal battery handling into separate classes
    - Guess charging/discharging state based on energy rate (#196)
    - Fix polling after resume (#198)
    - Fix battery state guessing (#146)
    - Reload history when battery ID changes
    - Test fixes
    - Move state guessing into DisplayDevice
    - Always use 90% threshold to consider a battery full
    - Various test improvements
    - Fix mice showing up as keyboards (#189)
    - Allow unit test inspector to fail (#187)
    - Fix test cases when daemon shuts down too slowly (#188)
    - Remove broken wakeup DBus API
    - Tag UPS hid devices using hwdb and update list from upstream
    - Only permit Refresh method when in debug mode
    - Refactor device polling
    - Refactor udev device discovery and sibling detection
    - Improved testing and CI
    - Handle SIGTERM to trigger a clean shutdown
    - Improve polling of batteries after line-power "online" status change
    - Multiple wacom tablet detection fixes
    - Fix updates after a BT hid power supply moves in sysfs
    - Fix enumeration of "Whats Up!" devices on startup
    - Accept USB power supplies without warning
    - Allow building without gtk-doc


author: yaoxin <1024769339@qq.com> - 0.9.9-1
changelog:
  - Update to 0.9.9:
    * Changed: Require CMake >=3.10.0
    * Fixed: Dissolve undefined behavior in parsing of URIs
    * Fixed: Normalized percent-encoded octets should have uppercase letters
      in the host
    * Fixed: Fix macros URI_VER_SUFFIX_UNICODE and URI_VER_UNICODE
    * Improved: CMake: Compile with -std=c90 by default
    * Improved: Convert remaining DOS (CR/LF) newlines to Unix newlines


author: zhanghongtao <zhanghongtao22@huawei.com> - 017-1
changelog:
  - update package to usbutils-017
  - lsusb: add fallback names for 'lsusb -v' output
  - Honor system libdir and includedir
  - usbutils: lsusb-t: print entries for devices with no interfaces
  - lsusb -t: sort in bus order, not reverse order
  - susb-t: if a driver is not bound to an interface, report "[none]"
  - Generate usbutils.pc pkgconfig file
  - usbreset: Allow idProduct and idVendor to be 0
  - susb: Add function that sorts the output by device ID.
  - lsusb: Additional sorting by bus number.
  - lsusb: This is a more compact implementation of the device list sort implemented within this pull request. The output remains the same as the one demonstrated in the previous commit.


author: liuchao <liuchao173@huawei.com> - 0.14.0-1
changelog:
  - upgrade to 0.14.0:
    - Fix: urcu-bp: only teardown call-rcu worker in destructor
    - Fix: rculfhash: urcu_die() takes positive error value
    - Fix: call_rcu: teardown default call_rcu worker on application exit
    - Fix: join worker thread in call_rcu_data_free
    - Docs: clarify grace period polling API
    - Document grace period polling in rcu-api.md
    - Implement poll rcu stress test in rcutorture
    - urcu-memb,mb,signal: Implement grace period polling
    - Fix: auto-resize hash table destroy deadlock
    - Fix building on MSYS2
    - rculfhash: Include rculfhash-internal.h from local directory
    - Remove "Darwin" from "should also work on list"
    - Merge branch 'adah1972-improve-md'
    - Add semicolons at the end of function prototypes
    - Wrap a file name in backticks
    - Wrap command-line options in backticks
    - Fix a wrong format
    - Wrap URLs in angle brackets
    - Fix Markdown issues
    - Fix: Always check pthread_create for failures
    - Disable signals in URCU background threads
    - Fix: futex.h: include headers outside extern C
    - Fix: add missing unused attribute to _rcu_dereference
    - Fix: change method used by _rcu_dereference to strip type constness
    - Fix: remove type constness in URCU_FORCE_CAST's C++ version
    - Move extern "C" down in include/urcu/urcu-bp.h
    - fix: ifdef linux specific cpu count compat
    - Add unit tests for possible_cpus_array_len
    - fix: sysconf(_SC_NPROCESSORS_CONF) can be less than max cpu id
    - Fix: revise obsolete command in README.md
    - Fix: workqueue: remove unused variable "ret"
    - Fix: urcu-qsbr: futex wait: handle spurious futex wakeups
    - Fix: urcu: futex wait: handle spurious futex wakeups
    - Fix: urcu-wait: futex wait: handle spurious futex wakeups
    - Fix: defer_rcu: futex wait: handle spurious futex wakeups
    - Fix: call_rcu: futex wait: handle spurious futex wakeups
    - Fix: workqueue: futex wait: handle spurious futex wakeups
    - Fix: Use %lu rather than %ld to print count
    - Update ABI definition files
    - Bump version current and age
    - alpha: allocate membarrier system call number
    - Bump version to 0.14.0-pre
    - Improved test framework
    - rculfhash: introduce cds_lfht_node_init_deleted
    - Fix: changelog: v0.13.0 was released in 2021
    - cleanup: i386 arch detection
    - fix: properly detect 'cmpxchg' on x86-32
    - fix: use urcu-tls compat with c++ compiler
    - Fix typo
    - fix: remove autoconf features default value in help message
    - fix: add missing pkgconfig file for memb flavour lib
    - Cleanup: Tests: Remove useless pre-C99 compatibility code from tap.h
    - Document C99 and C++11 requirement in README.md
    - Always use '__thread' for Thread local storage except on MSVC
    - Fix: powerpc32: transparent unions alter calling convention
    - fix: don't use C++ thread_local on MacOs
    - wfcqueue API: implement overloaded wrappers with templates
    - wfcqueue: combine C++ API cds_wfcq_head_cast with overloading
    - wfstack C++ API: implement overloaded wrappers with templates
    - lfstack C++ API: implement overloaded wrappers with templates
    - wfstack: combine C++ API cds_wfs_stack_cast with overloading
    - lfstack: combine C++ API cds_lfs_stack_cast with overloading
    - fix: test_build tap plan
    - Test C++ build of list head init
    - Fix order of initializers in CDS_LIST_HEAD_INIT
    - unit tests: test wfcqueue, wfstack, lfstack empty check functions in C++
    - wfcqueue: implement C++ API based on function overloading
    - wfstack: implement C++ API based on function overloading
    - lfstack: implement C++ API based on function overloading
    - Fix tap.h: remove extra semicolon in pass/fail macros
    - Add C++ build tests
    - Build and run regression and unit tests as C++ programs
    - Add --enable-Werror configure switch
    - Add `urcu_posix_assert()` as `assert()` replacement
    - Rename `urcu_assert()` to `urcu_assert_debug()`
    - cleanup: spelling fixes in comments
    - Make temporary variable in _rcu_dereference non-const
    - (tls-ie2) Fix: x86 and s390: uatomic __hp() macro C++ support
    - Fix: x86 and s390: uatomic __hp() macro clang support
    - Fix: x86 and s390 uatomic: __hp() macro warning with gcc 11


author: yueyuankun <yueyuankun@kylinos.cn> - 0.14.0-3
changelog:
  - Type: compile
  - ID: NA
  - SUG: NA
  - DESC: Fix compilation errors in loongarch architecture
          Replace setup with autosetup


author: yixiangzhike <yixiangzhike007@163.com> - 2.39.1-31
changelog:
  - backport community patches
      fix columns reduction
      fix memory leak issue in read_Subid_range
      fix off-by-one in maximum last sector calculation
      fix memory corruption in size calculation
      fix memory corruption in read buffers


author: herengui <herengui@kylinsec.com.cn> - 7.4.3-5
changelog:
  - Fix CVE-2026-34475: Fix http/1.1 absolute form dissection edge case leading to cache poisoning or authentication bypass


author: lutong <lutong14@huawei.com> - 1.1-9
changelog:
  - bugfix:fixed display error caused by missing signal_exits & revert change method of getting domain id


author: yangzhuangzhuang<yangzhuangzhuang1@huawei.com> - 0.3.12-3
changelog:
  - The "no acceptable C compiler found" error message is displayed during compilation.Therefore,add buildrequires gcc.


author: chenyanpan <chenyanpan@xfusion.com> - 1.21.4-4
changelog:
  - Fix CVE-2026-15146
  - Fix CVE-2026-58469
  - Fix CVE-2026-58470
  - Fix CVE-2026-58471
  - Fix CVE-2026-58472


author: zhengziyang <zheng.ziyang@zte.com.cn> - 0.164-15.20231001git31e19f92_bootstrap
changelog:
  - riscv64:Add RVV-optimized implementation of SAD x4 to accelerate simultaneous four-reference sum of absolute differences.


author: zhengziyang <zheng.ziyang@zte.com.cn> - 0.164-16.20231001git31e19f92_bootstrap
changelog:
  - riscv64:Add RVV-optimized implementation of SSD to accelerate sum of squared differences computation for motion estimation.


author: zhengziyang <zheng.ziyang@zte.com.cn> - 0.164-17.20231001git31e19f92_bootstrap
changelog:
  - riscv64:Add RVV-optimized implementation of VAR and VAR2 to accelerate variance computation for rate-distortion optimization.


author: zhengziyang <zheng.ziyang@zte.com.cn> - 0.164-18.20231001git31e19f92_bootstrap
changelog:
  - riscv64:Add RVV-optimized implementation of VSAD and ASD8 to accelerate vector SAD and accumulated SAD computation.


author: zhengziyang <zheng.ziyang@zte.com.cn> - 0.164-19.20231001git31e19f92_bootstrap
changelog:
  - riscv64:Add RVV-optimized implementation of SATD to accelerate sum of absolute transformed differences for motion estimation.


author: zhengziyang <zheng.ziyang@zte.com.cn> - 0.164-20.20231001git31e19f92_bootstrap
changelog:
  - riscv64:Add RVV-optimized implementation of SSD NV12, SA8D, Hadamard AC and SSIM to accelerate multi-format distortion metrics.


author: zhengziyang <zheng.ziyang@zte.com.cn> - 0.164-21.20231001git31e19f92_bootstrap
changelog:
  - riscv64:Add RVV-optimized implementation of 8x8c intra prediction to accelerate chroma intra prediction for 8x8 blocks.


author: zhengziyang <zheng.ziyang@zte.com.cn> - 0.164-22.20231001git31e19f92_bootstrap
changelog:
  - riscv64:Add RVV-optimized implementation of 8x8 intra prediction to accelerate luma intra prediction for 8x8 blocks.


author: zhengziyang <zheng.ziyang@zte.com.cn> - 0.164-23.20231001git31e19f92_bootstrap
changelog:
  - riscv64:Add RVV-optimized implementation of 8x16c intra prediction to accelerate chroma intra prediction for 8x16 blocks.


author: zhengziyang <zheng.ziyang@zte.com.cn> - 0.164-24.20231001git31e19f92_bootstrap
changelog:
  - riscv64:Add RVV-optimized implementation of 16x16 intra prediction to accelerate luma intra prediction for 16x16 blocks.


author: liliguang <liliguang@baidu.com> - 1.4.30-1
changelog:
  - update to 1.4.30
  - Fix compiler warnings in testsuite when building on AIX.
  - The API docs still said DatabaseError was thrown for operations on a closed
    database, but since 1.4.10 we throw its subclass DatabaseClosedError instead.


author: Funda Wang <fundawang@yeah.net> - 1.2.42-1
changelog:
  - update to 1.2.42
  - disable md5 and ripemd160 per upstream
  - disable gcrypt backend per upstream
    (https://github.com/lsh123/xmlsec/pull/848)


author: Wang Kui <wangkui35@h-partners.com> - 1.20.11-41
changelog:
  - Fix CVE-2025-49176 CVE-2025-49179 CVE-2025-49180 CVE-2022-49737
    CVE-2025-62229 CVE-2025-62230 CVE-2025-62231


author: lingsheng <ultra_planet@qq.com> - 1.20.11-42
changelog:
  - fix CVE-2022-49737 CVE-2025-49175 CVE-2025-49176 CVE-2025-49178 CVE-2025-49179 CVE-2025-49180 CVE-2025-62229 CVE-2025-62230 CVE-2025-62231


author: lingsheng <ultra_planet@qq.com> - 1.20.11-45
changelog:
  - fix CVE-2026-50256 CVE-2026-50257 CVE-2026-50258 CVE-2026-50259 CVE-2026-50260 CVE-2026-50261 CVE-2026-50262 CVE-2026-50263 CVE-2026-50264


author: xingwei <xingwei14@h-partners.com> - 4.2.3-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add haveged requires and optimize random number function replacement patch


author: yanglu <yanglu72@huawei.com> - 4.1-6
changelog:
  - DESC:delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-2.5-nfsnobody2.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-2.13-ypxfr-zeroresp.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-2.13-nonedomain.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-2.19-slp-warning.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-4.0-manfix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-2.24-aliases.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-2.27-confpost.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-2.31-netgrprecur.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-4.0-headers.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-4.0-selinux-context.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  ,and delete BuildRequires git


author: xu_ping <707078654@qq.com> - 0.2.44-2
changelog:
  - Remove redundant fc-cache scriptlets, fontconfig provides global %transfiletrigger 
    to refresh font cache automatically


author: yuanchao <1050706328@qq.com> - 0.13.72-4
changelog:
  - backport:disable zzip_use_file_header_zip64_offset,and fix wrong format in changelog,to support clang build


