# changelog

author: wangkai <13474090681@163.com> - 0.22.1-1
changelog:
  - Update to 0.22.1
  - Fix CVE-2026-20884, CVE-2026-20889, CVE-2026-20911, CVE-2026-21413,
    CVE-2026-24450, CVE-2026-24660, CVE-2026-5318, CVE-2026-5342


author: panchenbo <panchenbo@kylinsec.com.cn> - 1.22.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix build error: add missing BuildRequires:pkgconfig(polkit-gobject-1)


author: qinxue <qinxue6@h-partners.com> - 1:1.44.2-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:mptcp fix error handling rp_filter when kernel don't support mptcp


author: lingsheng <lingsheng1@h-partners.com> - 1.2.8-3
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: Revert PkClient: Replace the GSimpleAsyncResult with the GTask API


author: Funda Wang <fundawang@yeah.net> - 1.2.8-4
changelog:
  - move dbus interface to main package
  - split out gtk module from devel sub package
  - cleanup buildrequires


author: yixiangzhike <yixiangzhike007@163.com> - 2.3.1-7
changelog:
  - Fix CVE-2026-54369 CVE-2026-54370
  - New API acl_get_file_at, acl_set_file_at, acl_extended_file_at, acl_delete_def_file_at
  - New provided symbol LIBACL_1_3 for new API in libacl
  - The change that commands like 'getfacl -P symlink' or 'setfacl -P symlink' will fail now


author: yixiangzhike <yixiangzhike007@163.com> - 0.18.6-3
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: backport upstream patch to fix parsing of lowercase group names


author: yixiangzhike <yixiangzhike007@163.com> - 0.18.6-4
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: backport upstream patch to fix concurrent reading of extended attributes


author: Wenlong Zhang <zhangwenlong@loongson.cn> - 36.16.5-52
changelog:
  - Type:bugfix
   - ID:NA
   - SUG:NA
   - DESC:Fixed the issue of "D_isable root account" not being translated

   * Fri Feb 27 2026 zhaoyognhao <zhaoyonghao10@h-partners.com> - 36.16.5-51
   - Type:feature
   - ID:NA
   - SUG:NA
   - DESC: enable ssh login checkbox


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 36.16.5-54
changelog:
  - Type:feature
  - ID:NA
  - SUG:NA
  - DESC: add kernel 64k page size and kernel options Chinese translation support

   * Mon Mar 9 2026 zhaoyonghao <zhaoyognhao10@h-partners.com> - 36.16.5-53
   - Type:requirement
   - ID:NA
   - SUG:NA
   - DESC:Port GUI kernel switcher for ARM 64k


author: yueyuankun <yueyuankun@kylinos.cn> - 36.16.5-55
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix permissions of the ssh config created by Anaconda
          fix(users): ensure SSH config directory exists before writing


author: Funda Wang <fundawang@yeah.net> - 3.2.5-3
changelog:
  - Update patches to match Fedora: add at-3.2.5-address-sast.patch, at-3.2.5-past-date.patch
  - Refresh other patches to their Fedora 3.2.x versions


author: zhangpan <zhangpan103@h-partners.com> - 2.51.0-5
changelog:
  - add macros to control if need /usr/bin/xprop
  - at-spi2-core-help package provided at-spi2-atk-help


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 1:3.1.2-12
changelog:
  - backport patches for fixing Wimplicit-function-declaration, Wbuiltin-declaration-mismatch when building with newer compilers


author: Funda Wang <fundawang@yeah.net> - 1.5.11-4
changelog:
  - Add patch to fix python segfault with swig >= 4.3
  - Add patch to print a clear error with CTF-2 traces


author: wangyuhang <wangyuhang27@huawei.com> -5.2.15-13
changelog:
  - remove the log message for failing to open cmdline,
    and ensure that the mayexec function does not modify the value of errno.


author: yixiangzhike <yixiangzhike007@163.com> - 5.2.15-16
changelog:
  - sync patches from bash community:
     fix default file descriptor for <> redirection when printing command
     update BASH_COMMAND for subshells
     fix potential file descriptor leak in here document pipes


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-3
changelog:
  - Type:CVE
  - CVE:CVE-2024-0760,CVE-2024-1737,CVE-2024-1975,CVE-2024-4076
  - SUG:NA
  - DESC:fix CVE-2024-0760,CVE-2024-1737,CVE-2024-1975,CVE-2024-4076


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-4
changelog:
  - Type:CVE
  - CVE:CVE-2024-11187,CVE-2024-12705
  - SUG:NA
  - DESC:fix CVE-2024-111878 and CVE-2024-12705


author: tangce<tangce1@huawei.com> - 32:9.18.21-5
changelog:
  - Type:CVE
  - CVE:CVE-2025-8677,CVE-2025-40778,CVE-2025-40780
  - SUG:NA
  - DESC:fix CVE-2025-8677,CVE-2025-40778,CVE-2025-40780


author: tangce <tangce1@h-partners.com> - 32:9.20.21-2
changelog:
  - Type:CVE
  - CVE:CVE-2026-3039,CVE-2026-3593,CVE-2026-3593,CVE-2026-5946,CVE-2026-5947
  ,CVE-2026-5950
  - SUG:NA
  - DESC:fix CVE-2026-3039,CVE-2026-3593,CVE-2026-3593,CVE-2026-5946,CVE-2026-5947,CVE-2026-5950


author: tangce <tangce1@h-partners.com> - 32:9.20.21-3
changelog:
  - Type:CVE
  - CVE:CVE-2026-13321,CVE-2026-11721,CVE-2026-10723,CVE-2026-11605
  - SUG:NA
  - DESC:fix CVE-2026-13321,CVE-2026-11721,CVE-2026-10723,CVE-2026-11605


author: tangce <tangce1@h-partners.com> - 32:9.20.21-4
changelog:
  - Type:CVE
  - CVE:CVE-2026-10822,CVE-2026-11331,CVE-2026-12617,CVE-2026-13204,CVE-2026-11622
  - SUG:NA
  - DESC:fix CVE-2026-10822,CVE-2026-11331,CVE-2026-12617,CVE-2026-13204,CVE-2026-11622


author: yueyuankun <yueyuankun@kylinos.cn> - 3.8.2-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix syntax error on SymbolKind.toString method
         fix interface syntax error


author: sunhai<sunhai10@huawei.com> - 1:3.8.2-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix expected exception type when activating devices in populor


author: liuh <liuhuan01@kylinos.cn> - 6.6.3-12
changelog:
  - btrfs-progs: convert: insert a dummy inode item before inode ref for ext2/4
  - btrfs-progs: convert: for ext2, fix possible tree-checker error when converting a large fs


author: liuh <liuhuan01@kylinos.cn> - 6.6.3-17
changelog:
  - sync patch from community
    btrfs-progs: fix the wrong size from device_get_partition_size_sysfs()


author: liuh <liuhuan01@kylinos.cn> - 6.6.3-19
changelog:
  - sync patch from community
    btrfs-progs: subvolume: fix a bug that leads to unnecessary error message


author: lijian <lijian2@kylinos.cn> - 1:1.36.1-21
changelog:
  - Type:cves
  - ID:CVE-2026-38754
  - SUG:NA
  - DESC:re-fix CVE-2026-38754, clear stale IFS state on expansion error


author: wangjiang <wangjiang37@h-partners.com> - 2023.2.64-2
changelog:
  - remove expired and sync new certificates
    Removing:
      Security Communication Root CA
    Adding:
      D-Trust SBR Root CA 1 2022
      D-Trust SBR Root CA 2 2022
      Telekom Security SMIME ECC Root 2021
      Telekom Security SMIME RSA Root 2023
      Telekom Security TLS ECC Root 2020
      Telekom Security TLS RSA Root 2023


author: wangjiang <app@cameyan.com> - 2023.2.64-4
changelog:
  - remove expired and sync new certificates
    Removing:
      Certificate "Explicitly Distrust DigiNotar Root CA"
      Certificate "Baltimore CyberTrust Root"
    Adding:
      Certificate "FIRMAPROFESIONAL CA ROOT-A WEB"
      Certificate "TWCA CYBER Root CA"
      Certificate "TWCA Global Root CA G2"
      Certificate "SecureSign Root CA12"
      Certificate "SecureSign Root CA14"
      Certificate "SecureSign Root CA15"
      Certificate "D-TRUST BR Root CA 2 2023"
      Certificate "D-TRUST EV Root CA 2 2023"


author: wjiang <cameyan@163.com> - 2023.2.64-6
changelog:
  - sync certificate from upstream
    Adding:
      Certificate "TrustAsia SMIME ECC Root CA"
      Certificate "TrustAsia SMIME RSA Root CA"
      Certificate "TrustAsia TLS ECC Root CA"
      Certificate "TrustAsia TLS RSA Root CA"
      Certificate "SwissSign RSA SMIME Root CA 2022 - 1"
      Certificate "SwissSign RSA TLS Root CA 2022 - 1"
      Certificate "OISTE Client Root ECC G1"
      Certificate "OISTE Client Root RSA G1"
      Certificate "OISTE Server Root ECC G1"
      Certificate "OISTE Server Root RSA G1"
      Certificate "e-Szigno TLS Root CA 2023"


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1.18.0-2
changelog:
  - Type:CVE
  - ID:CVE-2025-50422
  - SUG:NA
  - DESC:Fix a NULL access in active_edges_to_traps()
         Add unlikely() to test for x == INT32_MAX for the NULL reference


author: lvgenggeng <lvgenggeng@uniontech.com> - 1.18.0-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix "out of memory" when using linear gradient
          Fix a memory leak


author: yangyun <yangyun50@huawei.com> - 1.5.5-1
changelog:
  - update to 1.5.5 version
  	- add support of readers (see README.md)
  	- configure.ac: disable the use of --disabele-usbdropdir
  	- parse: create output.bin file
  	- udev: Disable USB-persist for CCID devices
  	- configure: fail if flex is not found
  	- some other minor improvments


author: liyufnei <liyunfei33@huawei.com> - 17.0.6-58
changelog:
  - update to llvm-for-oe-17.0.6-2603.0.1
  - release-note https://gitcode.com/openeuler/llvm-project/releases/llvm-for-oE-17.0.6-2603.0.1


author: liyufnei <liyunfei33@huawei.com> - 17.0.6-60
changelog:
  - update to llvm-for-oe-17.0.6-2603.0.2
  - release-note https://gitcode.com/openeuler/llvm-project/releases/llvm-for-oE-17.0.6-2603.0.2


author: eastb233 <xiezhiheng@huawei.com> - 17.0.6-64
changelog:
  - update to llvm-for-oe-17.0.6-2606.0.1
  - release-note https://atomgit.com/openeuler/llvm-project/releases/llvm-for-oE-17.0.6-2606.0.1


author: dongyuzhen <dongyuzhen@h-partners.com> - 23.4.1-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix(net): klibc ipconfig PROTO compatibility
         fix(openstack): Fix bond mac_address


author: shixuantong <shixuantong1@huawei.com> - 23.4.1-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:chore: set recursive=False for ensure_dir if parent path is "/"
         test(openstack): Test bond mac address
         fix: Ensure properties for bonded interfaces are properly translated


author: shixuantong <shixuantong1@huawei.com> - 23.4.1-13
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:net/sysconfig: do not remove all existing settings of /etc/sysconfig/network
         fix: typing for rsyslog, ubuntu_pro, power_state_change


author: shixuantong <shixuantong1@huawei.com> - 23.4.1-16
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: fix: Add get_connection_with_tls_context() for requests 2.32.2+


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 3.27.9-5
changelog:
  - Support 
    /usr/bin/cmake --build "x86_64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/cmake-3.31.12-2.oe2403next.x86_64" /usr/bin/cmake --install "x86_64-openEuler-linux-gnu".


author: fuanan <fuanan3@h-partners.com> - 3.27.9-6
changelog:
  - remove the architecture judgment in the patches section;
  - include all patches in the source package.


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 309-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: remove incorrect provides cockpit-machines and cockpit-machines-ovirt
          remove require libvirt and libvirt-client


author: shaojiansong <shaojiansong@kylinos.cn> - 309-8
changelog:
  - Fix networking: renaming of bridges and other groups (upstream fdba746e4, RHEL-131249, backport to openEuler-24.03-LTS-Next cockpit 309, keep member activation consistent when group name is changed.)


author: shaojiansong <shaojiansong@kylinos.cn> - 309-9
changelog:
  - Fix ws: only hand out the saved password to authorize messages once. Prevents account lockout via pam_faillock when sudo sends a 'Try again' prompt, by poisoning the password after the first use.


author: liweigang <liweiganga@gmail.com> - 1.22.8-4
changelog:
  - Format and tidy the spec file
  - Convert License to SPDX expression: MIT AND BSD-3-Clause AND SGI-B-2.0
  - Update URL to upstream GitLab repository


author: lijian <lijian2@kylinos.cn> - 2:2.230.0-1
changelog:
  - Update container-selinux to v2.230.0
  - Allow containers to unmount file systems
  - Add buildah as a container_runtime_exec_t label
  - Additional rules for container_user_t
  - Add some MLS rules to policy
  - Add container_file_t and container_ro_file_t as user_home_type


author: Qin Fandong <qinfandong@kylinos.cn> - 9.4-23
changelog:
  - Type:CVE
  - ID:CVE-2026-56392
  - SUG:NA
  - DESC:fix heap overflow in unexpand with large tab stop values


author: Peng Fan <fanpeng@loongson.cn> - 12.3.1-110
changelog:
  - Type: BUGFIX
  - DESC:
  - LoongArch: sync fix from upstream.
  - Adjusting the sequence number and name of the patches


author: yixiangzhike <yixiangzhike007@163.com> - 1.17.0-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix the failure of testcase when building with python-setuptools>=66.0.0


author: wangxiao <wangxiao184@h-partners.com> - 8.0.4-15
changelog:
  - remove the arch judgment, include all patches in the src package
  - use patch command to apply patches for consistency in context


author: lijian1 <lijian1@kylinos.cn> - 8.0.4-17
changelog:
  - fix loongarch64 support so file extension error for elf64 lack the branch while elf32 do not need.


author: lijian <lijian2@kylinos.cn> - 1.8.7-1
changelog:
  - update to 1.8.7
  - crun: new command "crun features".
  - linux: support io_priority from the OCI specs.
  - cgroup: allow setting swap to 0.
  - cgroup, systemd: set the memory limit on the system scope.


author: yixiangzhike <yixiangzhike007@163.com> - 20230614-1.git5f3458e
changelog:
  - update version to 20230614
    - DEFAULT policy drop DH<2048bits,TLS1.0,TLS1.1,SHA-1
    - Remove the CBC ciphers from DEFAULT policy in openssh
    - FIPS policy drop the CBC ciphersuites
    - Enable RSA-PSK algorithms in DEFAULT and LEGACY policies
    - Add the diffie-hellman-group14-sha256 to libssh
    - Add --check option to update-crypto-policies
    - Add AES-192 algorithms support
    - Use allowlisting config for gnutls
    - Enable SHAKE algorithms for gnutls,java and nss
    - Openssl disable SHA-1 signatures in FUTURE policy
    - Openssh add HostbasedAcceptedAlgorithms and RequiresRSASize config options


author: Funda Wang <fundawang@yeah.net> - 1:2.4.7-7
changelog:
  - fix CVE-2025-58060, CVE-2025-58364
  - move www files into main package due to requirement by web interface


author: gaihuiying <eaglegai@163.com> - 1:2.4.7-15
changelog:
  - fix handling of multiple PPD: keywords from filters related to CVE-2026-34980
    fix a regression in shared printing from non-local accounts related to CVE-2026-27447


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-25
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:urlapi: avoid null deref if setting blank host to url
         urlapi: skip appending NULL pointer query


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-26
changelog:
  - Type:CVE
  - CVE:CVE-2025-14017 CVE-2025-14524 CVE-2025-14819 CVE-2025-15079 CVE-2025-15224
  - SUG:NA
  - DESC:fix CVE-2025-14017 CVE-2025-14524 CVE-2025-14819 CVE-2025-15079 CVE-2025-15224


author: zhouyihang <zhouyihang_z@163.com> - 8.4.0-27
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:formdata: validate callback is non-NULL before use
         tftp: correct the filename length check


author: zhouyihang <zhouyihang_z@163.com> - 8.4.0-28
changelog:
  - Type:CVE
  - CVE:CVE-2026-1965 CVE-2026-3783 CVE-2026-3784
  - SUG:NA
  - DESC:fix CVE-2026-1965 CVE-2026-3783 CVE-2026-3784


author: zhouyihang <zhouyihang_z@163.com> - 8.4.0-29
changelog:
  - Type:CVE
  - CVE:CVE-2026-4873 CVE-2026-5545 CVE-2026-5773 CVE-2026-6253 CVE-2026-6276 CVE-2026-6429 CVE-2026-7168
  - SUG:NA
  - DESC:fix CVE-2026-4873 CVE-2026-5545 CVE-2026-5773 CVE-2026-6253 CVE-2026-6276 CVE-2026-6429 CVE-2026-7168


author: zhouyihang <zhouyihang_z@163.com> - 8.4.0-30
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:http1: fix potential NULL dereference in Curl_h1_req_parse_read
         mqtt: fix EOF handling


author: zhouyihang <zhouyihang_z@163.com> - 8.4.0-32
changelog:
  - Type:CVE
  - CVE:CVE-2026-8286 CVE-2026-8924 CVE-2026-8927 CVE-2026-9547 CVE-2026-10536 CVE-2026-12064
  - SUG:NA
  - DESC:fix CVE-2026-8286 CVE-2026-8924 CVE-2026-8927 CVE-2026-9547 CVE-2026-10536 CVE-2026-12064


author: zhouyihang <zhouyihang_z@163.com> - 8.4.0-34
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:urlapi: fix memleaks on error in parse_hostname_login()
         telnet: fix old copy-paste typo in variable name
         mime.c: avoid integer overflow in base64 size calculation
         tool_cb_prg: avoid integer overflows


author: wangkai <13474090681@163.com> - 1.11.23-54
changelog:
  - Add patches from fedora, improve C compatibility and fix build failures caused by higher gcc versions


author: wuyifeng <wuyifeng10@huawei.com> - 78-1
changelog:
  - upgrade to version 78:
  	-incorporate up to 6.5 kernel
  	-add new cxl commands
  	-fix some bugs detail see:github.com/pmem/ndctl


author: hongjinghao <hongjinghao@huawei.com> - 1:1.14.8-3
changelog:
  - sync patch from upstream
  	backport-bus-Don-t-crash-if-bus_context_create_client_policy-.patch
  	backport-bus-When-failing-to-reload-client-policy-continue-it.patch
  	backport-test-Add-a-targeted-test-for-_dbus_unix_groups_from_.patch
  	backport-userdb-Add-proper-error-reporting-when-getting-group.patch


author: liuyumeng <liuyumeng5@huawei.com> - 0.40.0-2
changelog:
  - add patch:dconf read random contents of memory causing discrepancy,initialize memory to eliminate discrepancy


author: LuWu <2398491106@qq.com> - 4.16.2-5
changelog:
  - Limit queries to nevra forms when provided by command and Update the man page entry for the countme option


author: majianhan <majianhan@kylinos.cn> - 4.16.2-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix dnf-automatic service to apply security updates the same way as dnf tool


author: chenhaixing <chenhaixing@huawei.com> - 4.3.1-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dnf-plugins-core:download plugin:respect install_weak_deps option value


author: lingsheng <lingsheng1@h-partners.com> - 2.90-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Update DNS records after pruning DHCP leases
         cache: Fix potential NULL deref in arcane situations.
         Fix potential memory leak
         Fix possible SIGSEGV in bpf.c
         allow binding mac with ip6


author: Liu Qingtao <liu.qingtao2@zte.com.cn> - 2.90-5
changelog:
  - Type:bugfix
  - CVE:
  - SUG:NA
  - DESC:Ignore Wincompatible-pointer-types error when compiling with gcc-14.3


author: luoguocui <luoguouci@h-partners.com> - 2.90-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix bounds checking in check_ia()
         Fix SEGV in Dbus code
         More fixes for DHCP ops in Dbus when DHCP not configured


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 2.90-9
changelog:
  - Type:CVE
  - CVE:CVE-2026-4890 CVE-2026-4891 CVE-2026-4892 CVE-2026-4893 CVE-2026-5172
  - SUG:NA
  - DESC:Fix NSEC bitmap parsing infinite loop
         Verify rdlen field in RRSIG packets
         Fix buffer overflow in helper.c with large CLIDs
         Fix broken client subnet validation
         Fix buffer overflow vulnerability in extract_addresses()


author: zhongjiawei<zhongjiawei1@huawei.com> - 2:18.09.0-347
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:delete redundant characters to prevent make failure in golang 1.24


author: jade_t<yzd50036@gmail.com> - 2:18.09.0-351
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix the installation conflict between docker-engine and containerd


author: huangdengdui <huangdengui@huawei.com> - 23.11-33
changelog:
  Sync some bugfixes for hns3 pmd and modifications are as follow:
   - net/hns3: fix Rx packet without CRC data
   - net/hns3: fix CRC data segment
   - net/hns3: check requirement for hardware GRO
   - net/hns3: allow use of Tx vector when fast free not enabled
   - net/hns3: allow use of Rx vector mode with VLAN filter


author: huangdengdui <huangdengui@huawei.com> - 23.11-34
changelog:
  Sync some patches about support TSO for packets with
   IPv6 extension header and modifications are as follow:
   - net: add tunnel packet type parsing
   - app/testpmd: use packet type parsing API
   - app/testpmd: fix VLAN parsing in checksum engine
   - net: fix offset in GENEVE packet parsing
   - app/testpmd: fix packet type parsing
   - net: fix GTP packet parsing
   - net: add tunnel length in UDP tunnel parsing
   - app/testpmd: fix tunnel inner info


author: huangdonghua <huangdonghua3@h-partners.com> - 23.11-36
changelog:
  Unify locks, fix Rx path and resource release:
   - net/hns3: fix inconsistent lock
   - net/hns3: fix overwrite mbuf in vector path
   - net/hns3: fix unrelease VLAN resource when init fail


author: huangdonghua <huangdonghua3@h-partners.com> - 23.11-37
changelog:
  Fix unrelease VLAN resource and L4 protocol retrieval from L3 header:
   - net/hns3: fix unrelease VLAN resource when init fail
   - app/testpmd: fix L4 protocol retrieval from L3 header


author: huangdonghua <huangdonghua3@h-partners.com> - 23.11-38
changelog:
  Upload some patches of VF multiple TC and others:
   - app/testpmd: handle IEEE1588 init failure
   - examples/l3fwd: add option to set Rx burst size
   - examples/eventdev: fix queue crash with generic pipeline
   - examples/l3fwd: add Tx burst size configuration option
   - net/hns3: remove duplicate struct field
   - net/hns3: refactor DCB module
   - net/hns3: parse max TC number for VF
   - net/hns3: support multi-TCs capability for VF
   - net/hns3: fix queue TC configuration on VF
   - net/hns3: support multi-TCs configuration for VF
   - app/testpmd: avoid crash in DCB config
   - app/testpmd: show all DCB priority TC map
   - app/testpmd: relax number of TCs in DCB command
   - app/testpmd: reuse RSS config when configuring DCB
   - app/testpmd: add prio-tc map in DCB command
   - app/testpmd: add queue restriction in DCB command
   - app/testpmd: add command to disable DCB
   - examples/l3fwd: force link speed
   - examples/l3fwd-power: force link speed
   - net/hns3: log invalid MAC address from firmware
   - config/arm: add HiSilicon HIP12
   - app/testpmd: fix DCB Tx port
   - app/testpmd: fix DCB Rx queues
   - app/testpmd: set DCB forwarding TCs
   - app/testpmd: support multi-cores process one TC
   - app/testpmd: fix inner UDP checksum offload fail


author: huangdonghua <huangdonghua3@h-partners.com> - 23.11-39
changelog:
  fix L2 length for GRE packets:
   - net: fix L2 length for GRE packets
   - net/hns3: fix outer UDP checksum fail with simple BD


author: huangdonghua <huangdonghua3@h-partners.com> - 23.11-40
changelog:
  testpmd DCB Forwarding Enhancements and hns3 Tunnel Checksum Fix:
   - app/testpmd: check start for DCB forwarding TC commands
   - app/testpmd: show DCB forwarding TC list and cores
   - net/hns3: fix L4 checksum incorrect for tunnel packets


author: xinghe <xinghe2@h-partners.com> - 2.0.11-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix ebtables-restore --noflush failed when ebtables is uninstall


author: malike <malike@kylinos.cn> - 202308-48
changelog:
  - Fix the issue on ARM64 platforms where virtual machines created
  - via the `virt-install` command with the `--location` parameter
  - pointing to an ISO fail to boot into the ISO installation interface
  - normally and drop directly into the UEFI Shell. This regression
  - was introduced by patches addressing CVE-2025-2296 that
  - refactored the QemuKernelLoaderFsDxe driver.


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 18-4
changelog:
  - Fix segfault when passed --index is greater than current boot order size
    Add missing short option handling for --index (-I)


author: zhangxingrong <zhangxingrong@uniontech.com> - 18-5
changelog:
  - Fix the incorrect long parameter in help messages
  - efibootmgr: delete_bootnext is just a boolean, not an entry id


author: shixuantong <shixuantong1@huawei.com> - 0.190-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:move /usr/lib64/libdebuginfod.so from debuginfod-client-devel to debuginfod-client


author: yuanchicheng <chicheng.oerv@isrc.iscas.ac.cn> - 0.190-10
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: backport-fix-riscv64-return-value-location-retrieval-implementation.patch


author: yanglu <yanglu72@h-partners.com> - 2:6.6-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:ethtool:hibmcge:fix wrong register address in pretty print of ethtool -d command


author: andy <liuyang01@kylinos.cn> - 2:6.6-6
changelog:
  - Type:requirement
  - Id:NA
  - SUG:NA
  - DESC:ethtool: Fix SFF-8472 transceiver module identification
          ethtool: Add default branch to sff8636_show_all_ioctl switch
          qsfp: Better handling of Page 03h netlink read failure
          module-eeprom: treat zero arguments like any other arguments for hex dump
          qsf: Better handling of Page A2h netlink read failure


author: zhangyaqi <zhangyaqi@kylinos.cn> - 2:6.6-7
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:add NULL check before jsonw_string_field() in print_string()
         netlink: add NULL check for get_string() in features.c


author: Fengyan Mu <mufengyan@huawei.com> - 2:6.6-8
changelog:
  - Type:requirement
  - Id:NA
  - SUG:NA
  - DESC:ethtool: Add support the printer for the registers of unic driver
         through the command -d


author: fly_fzc <2385803914@qq.com> - 2.8.1-4
changelog:
  - fix CVE-2026-56403 CVE-2026-56404 CVE-2026-56405 CVE-2026-56406 CVE-2026-56407
        CVE-2026-56408 CVE-2026-56409 CVE-2026-56410 CVE-2026-56411 CVE-2026-56412


author: zhouyihang <zhouyihang3@h-partners.com> - 1.2.6-8
changelog:
  - Type:bugfix
  - CVE:NA   
  - SUG:NA   
  - DESC:fix(icmp): fix check_icmpv6_name() to use correct IPv6 names
         fix(ipset): fix configuring IP range for ipsets with nftables
         fix(ipset): fix configuring "timeout","maxelem" values for
         fix(rich): validate service name of rich rule
         fix(rich): fix range check for large rule limit
         fix(nftables): use current pkttype keywords


author: zhangxingrong <zhangxingrong@uniontech.cn> - 1.4.3-3
changelog:
  - Limit the number of clock() calls
  - Documentation (man/flac.md); fix typo 
  - flac: foreign_metadata: fix -Walloc-size
  - Fix format ending up with wrong subformat


author: lvgenggeng <lvgenggeng@uniontech.com> - 1.4.3-5
changelog:
  - backport: Refind import cuesheet op after appending seekpoints
  - backport: Make UTF-8 decoder more restrictive
  - backport: Fix endless loop in foreign metadata handling
  - backport: Fix overflow when skipping over raw input


author: wangkai <13474090681@163.com> - 2:2.11.8-1
changelog:
  - Update to 2.11.8
  - Fix CVE-2026-22852, CVE-2026-22856, CVE-2026-22859, CVE-2026-23530, CVE-2026-23531,
    CVE-2026-23532, CVE-2026-23534, CVE-2026-24491, CVE-2026-24675, CVE-2026-24676,
    CVE-2026-24679, CVE-2026-24681, CVE-2026-24682, CVE-2026-24683, CVE-2026-24684,
    CVE-2026-25997, CVE-2026-26271, CVE-2026-26986, CVE-2026-27015, CVE-2026-25941,
    CVE-2026-22855, CVE-2026-22857, CVE-2026-23533, CVE-2026-23732, CVE-2026-23883,
    CVE-2026-23884


author: wangkai <13474090681@163.com> - 2:2.11.8-3
changelog:
  - Fix CVE-2026-26955, CVE-2026-26965, CVE-2026-31806, CVE-2026-31883, CVE-2026-31885,
    CVE-2026-33984, CVE-2026-33983


author: wangkai <13474090681@163.com> - 2:2.11.8-5
changelog:
  - Fix CVE-2026-25942, CVE-2026-25952, CVE-2026-25953, CVE-2026-25954, CVE-2026-27951,
    CVE-2026-29774, CVE-2026-29775, CVE-2026-31884, CVE-2026-33985


author: yangyun <yangyun50@huawei.com> -3.16.2-1
changelog:
  - upgrade to 3.16.2
  	- fix some issues (see: https://github.com/libfuse/libfuse/releases) 
  	- improved support for some less common systems (32bit, alternative libcs)
  	- unsupported mount options are no longer silently accepted
  	- auto_unmount is now compatible with allow_other
  	- readdir kernel cache can be enabled from high-level API


author: Qin Fandong <qinfandong@kylinos.cn> - 1.8.17-9
changelog:
  - Remove build requires protobuf-c* and disable plugin logitech-bulkcontroller
    which to upgrade the firmware on Logitech Video Collaboration products.


author: Funda Wang <fundawang@yeah.net> - 9.56.1-14
changelog:
  - Type:CVE
  - ID:NA
  - SUG:NA
  - DECS: Fix CVE-2025-27830, CVE-2025-27832, CVE-2025-27833, CVE-2025-27834, CVE-2025-27835, CVE-2025-27836


author: hdliu <dev03108@linx-info.com> - 9.56.1-15
changelog:
  - Add font mappings so that the PS interpreter can rasterize Chinese content using the two fonts STKaiti-Regular and STheiti-Regular.


author: dillon chen <dillon.chen@gmail.com> - 9.56.1-20
changelog:
  - Type:CVE
  - ID:NA
  - SUG:NA
  - DESC:fix CVE-2025-7462
  - sync PR patch from Mon Mar 30 2026 majianhan <majianhan@kylinos.cn>


author: yaoxin <yao_xin001@hoperun.com> - 5.2.2-1
changelog:
  - Update to 5.2.2
    * Fixes for CVE-2023-48161 (bsc#1217390), CVE-2022-28506 (bsc#1198880)
    * Address SF issue #151: A heap-buffer-overflow in gif2rgb.c:294:45
    * Address SF issue #166: a read zero page leads segment fault in
      getarg.c and memory leaks in gif2rgb.c and gifmalloc.c


author: fuanan <fuanan3@h-partners.com> - 2.43.0-7
changelog:
  - Type:CVE
  - ID:CVE-2025-48384 CVE-2025-48385 CVE-2025-48386
  - SUG:NA
  - DESC:Fix CVE-2025-48384 CVE-2025-48385 CVE-2025-48386


author: fuanan <fuanan3@h-partners.com> - 2.43.0-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix malformed patch:
         backport-CVE-2025-48385-bundle-uri-fix-arbitrary-file-writes-via-parameter-i.patch


author: fuanan <fuanan3@h-partners.com> - 2.43.0-9
changelog:
  - Type:CVE
  - ID:CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835
  - SUG:NA
  - DESC:Fix CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835


author: fuanan <fuanan3@h-partners.com> - 2.43.0-10
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch
         config.mak.uname: set CSPRNG_METHOD to getrandom on Linux


author: zhaoyonghao10 <zhaoyonghao10@h-partners.com> - 2.78.6-2
changelog:
  - apply 3 patches: backport-gsocks4aproxy--Fix-a-buffer-leak-when-finishing-co.patch, backport-tests--Add-thread-pool-stress-test-to-task-c.patch, backport-test--cleanup-trailing-spaces-task-c.patch


author: zhusicong <zhusicong@h-partners> - 2.78.6-3
changelog:
  - fix CVE-2026-58010, CVE-2026-58011, CVE-2026-58012, CVE-2026-58013, CVE-2026-58014, CVE-2026-58015, CVE-2026-58016


author: litenglong <litenglong@kylinos.cn> - 2.38-115
changelog:
  - aarch64: delete revert-aarch64-Use-memcpy_simd-as-the-default-memcpy.patch to align with the upstream community.


author: wuguanghao <wuguanghao3@huawei.com> - 11.1-1
changelog:
  - upgrade to 11.1
    - add simple-quota xattr to afr and ec ignore list
    - fix asan use-after-free bug
    - fix error not supported for ipv6
    - support OpenSSL 3.0
    - drop libglusterd
    - O_PATH support over protocol
    - Enable AES cipher for SSL by default
    - glusterd: add stripe_count in volume info
    - snapshots: Support for ZFS Snapshots
    - gfapi: Add support for 'AT_EMPTY_PATH' and 'AT_REMOVEDIR' flag


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 11.1-2
changelog:
  - fix upgrade error that {_mandir}/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.


author: Linux_zhang <244695981@qq.com> - 3.8.2-13
changelog:
  - fix CVE-2026-33846,CVE-2026-3833,CVE-2026-42009,CVE-2026-42010,CVE-2026-42014,CVE-2026-42015,CVE-2026-5260.


author: Xu Raoqing <609179072@qq.com> - 3.8.2-16
changelog:
  - buffers: simplify and tighten parse_handshake_header checks
  - lib/auth/psk_passwd: limit the length of the comparison
  - x509/name_constraints: fix intersecting empty constraints
  - datum, mem, str: add helper functions to steal pointers
  - mem,str,datum: rename _steal_* to _take_*
  - x509/virt-san: a small OOM-correctness fix
  - x509: add bare-bones awareness of SRV virtual SAN
  - x509/hostname-verify: make URI/SRV SAN preclude CN fallback
  - fix CVE-2026-42012


author: huzhangying <huzhangying@huawei.com> - 1.21.4-38
changelog:
  - Type:CVE
  - CVE:CVE-2025-58183,CVE-2025-58185, CVE-2025-58188, CVE-2025-58189, CVE-2025-61724
  - SUG:NA
  - DESC:fix CVE-2025-58183,CVE-2025-58185, CVE-2025-58188, CVE-2025-58189, CVE-2025-61724


author: huzhangying <huzhangying@huawei.com> - 1.21.4-42
changelog:
  - Type:CVE
  - CVE:fix CVE-2025-61732,CVE-2025-68119,CVE-2025-61731,CVE-2025-61728,CVE-2025-68121,CVE-2025-61723
  - SUG:NA
  - DESC:fix CVE-2025-61732,CVE-2025-68119,CVE-2025-61731,CVE-2025-61728,CVE-2025-68121,CVE-2025-61723


author: huzhangying <huzhangying@huawei.com> - 1.21.4-44
changelog:
  - Type:CVE
  - CVE:CVE-2026-27139,CVE-2026-27142,CVE-2026-25679
  - SUG:NA
  - DESC:fix CVE-2026-27139,CVE-2026-27142,CVE-2026-25679


author: huzhangying <huzhangying@huawei.com> - 1.21.4-46
changelog:
  - Type:CVE
  - CVE:CVE-2026-27143,CVE-2026-27144,CVE-2026-32288,CVE-2026-27140
  - SUG:NA
  - DESC:fix CVE-2026-27143,CVE-2026-27144,CVE-2026-32288,CVE-2026-27140


author: laokz <zhangkai@iscas.ac.cn> - 2.15-2
changelog:
  - riscv64: force --enable-frame-pointers due to unsupported
    -momit-leaf-frame-pointer compile option until gcc14


author: yixiangzhike <yixiangzhike007@163.com> - 1.23.0-4
changelog:
  - Delete duplicate files between groff and groff-x11
  - Detete Obsoletes and Provides about groff-x11 from groff


author: yechao-w <wang.yechao255@zte.com.cn> - 1:2.12-45
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: kern/riscv/efi/init: Use time register in grub_efi_get_time_ms()


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1:2.12-47
changelog:
  - Type:CVE
  - CVE:CVE-2025-61661,CVE-2025-61662,CVE-2025-54771,CVE-2025-54770,CVE-2025-61663,CVE-2025-61664
  - SUG:NA
  - DESC:commands/usbtest: Ensure string length is sufficient in usb string processing
         commands/usbtest: Use correct string length field
         tests/lib/functional_test: Unregister commands on module unload
         normal/main: Unregister commands on module unload
         gettext/gettext: Unregister gettext command on module unload
         net/net: Unregister net_set_vlan command on unload
         kern/file: Call grub_dl_unref() after fs->fs_close()
         commands/test: Fix error in recursion depth calculation


author: Han Gao <gaohan@iscas.ac.cn> - 1:2.12-48
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:configure: Add -mno-relax on riscv*
         configure: Defer check for -mcmodel=large until PIC/PIE checks are done


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 1:2.12-50
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: workaround the BuildRequires mis-preinstallation issue on build systems


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1:2.12-51
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:loader/i386/pc/linux: Fix resource leak
         Revert "lzma: Make sure we don't dereference past array
         loader/efi/linux: Correctly terminate load_options member
         loader/efi/linux: Use sizeof() instead of constant
         loader/efi/linux: Use proper type for len variable
         loader/efi/linux: Do not pass excessive size for source string
         loader/efi/linux: Remove useless assignment
         loader/efi/linux: Reuse len variable
         loader/efi/linux: Unload previous Linux kernel/initrd before updating kernel size
         normal/charset: Fix underflow and overflow in loop init
         lib/LzmaEnc: Validate len before subtracting
         osdep/unix/hostdisk: Fix signed integer overflow
         fs/zfs: Fix another memory leak in ZFS code
         fs/xfs: Fix large extent counters incompat feature support


author: lvgenggeng <lvgenggeng@uniontech.com> - 1:2.12-53
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: mmap/mmap: Add missing grub_malloc() failure check
          mmap/mmap: Fix resource leak
          mmap/mmap: Fix integer overflow in binary search


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1:2.12-54
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:grub-mkimage: Do not generate empty SBAT metadata
         efi: Fix several memory leaks of UEFI handles
         script/execute: Add a NULL check after grub_calloc() call
         normal/cmdline: Add grub_calloc() failure check and fix hist_lines state loss
         osdep/linux/ofpath: Add missing strdup() failure checks
         lib/relocator: Fix dereference after NULL check
         osdep/linux/getroot: Add missing strdup() failure checks
         script/execute: Add missing grub_strdup() failure check


author: Funda Wang <fundawang@yeah.net> - 1.22.5-2
changelog:
  - fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
    CVE-2024-47607, CVE-2024-47615, CVE-2024-47835


author: yaoxin <yao_xin001@hoperun.com> - 1.14.5-1
changelog:
  - Update to 1.14.5:
    * Added signed Windows msi binary and signed Apple dmg binary files.
    * Moved examples to the HDF5Examples folder in the source tree.
    * Added support for using zlib-ng package as the zlib library
    * Disable CMake UNITY_BUILD for hdf5
    * Removed "function/code stack" debugging configuration option
    * Added configure options for enabling/disabling non-standard programming language features
    * Added the CMake variable HDF5_ENABLE_ROS3_VFD to the HDF5 CMake config
      file hdf5-config.cmake. This allows it to easily detect if the library
      has been built with or without read-only S3 functionality.
    * Fixed many CVE:
      CVE-2024-29157,CVE-2024-29158,CVE-2024-29159,CVE-2024-29160,CVE-2024-29161,CVE-2024-29162
      CVE-2024-29163,CVE-2024-29164,CVE-2024-29165,CVE-2024-29166,CVE-2024-32605,CVE-2024-32606
      CVE-2024-32607,CVE-2024-32608,CVE-2024-32609,CVE-2024-32610,CVE-2024-32611,CVE-2024-32612
      CVE-2024-32613,CVE-2024-32614,CVE-2024-32615,CVE-2024-32616,CVE-2024-32617,CVE-2024-32618
      CVE-2024-32619,CVE-2024-32620,CVE-2024-32621,CVE-2024-32622,CVE-2024-32623,CVE-2024-32624
      CVE-2024-33873,CVE-2024-33874,CVE-2024-33875,CVE-2024-33876,CVE-2024-33877,CVE-2018-13871
      CVE-2018-13875,CVE-2018-14034


author: Funda Wang <fundawang@yeah.net> - 1.14.5-2
changelog:
  - add patches from azure linux for fixing CVE-2025-2153, CVE-2025-2310,
    CVE-2025-2914, CVE-2025-2926, CVE-2025-6816, CVE-2025-2925,
    CVE-2025-2924, CVE-2025-44905, CVE-2025-6269, CVE-2025-6750,
    CVE-2025-6857, CVE-2025-7067, CVE-2025-7068, CVE-2025-6858,
    CVE-2025-2923, CVE-2025-2913, CVE-2025-6516, CVE-2025-6818,
    CVE-2025-6817, CVE-2025-6856, CVE-2025-7069


author: tangce <tangce1@h-partners.com> - 2.4.58-11
changelog:
  - Type:CVE
  - CVE:CVE-2025-58098,CVE-2025-65082,CVE-2025-66200
  - SUG:NA
  - DESC:fix CVE-2025-58098,CVE-2025-65082,CVE-2025-66200


author: tangce <tangce1@h-partners.com> - 2.4.58-14
changelog:
  - Type:CVE
  - CVE:CVE-2026-24072,CVE-2026-29168,CVE-2026-29169,CVE-2026-33006,CVE-2026-34059
  - SUG:NA
  - DESC:fix CVE-2026-24072,CVE-2026-29168,CVE-2026-29169,CVE-2026-33006,CVE-2026-34059


author: tangce <tangce1@h-partners.com> - 2.4.58-15
changelog:
  - Type:CVE
  - CVE:CVE-2026-33007,CVE-2026-33523,CVE-2026-33857,CVE-2026-34032
  - SUG:NA
  - DESC:fix CVE-2026-33007,CVE-2026-33523,CVE-2026-33857,CVE-2026-34032


author: tangce <tangce1@h-partners.com> - 2.4.58-17
changelog:
  - Type:CVE
  - CVE:CVE-2026-29167,CVE-2026-42535,CVE-2026-44631
  - SUG:NA
  - DESC:fix CVE-2026-29167,CVE-2026-42535,CVE-2026-44631


author: tangce <tangce1@h-partners.com> - 2.4.58-18
changelog:
  - Type:CVE
  - CVE:fix CVE-2026-48913,CVE-2026-44186,CVE-2026-44185,CVE-2026-44119,CVE-2026-43951
  - SUG:NA
  - DESC:fix CVE-2026-48913,CVE-2026-44186,CVE-2026-44185,CVE-2026-44119,CVE-2026-43951


author: tangce <tangce1@h-partners.com> - 2.4.58-19
changelog:
  - Type:CVE
  - CVE:fix CVE-2026-42536,CVE-2026-34356,CVE-2026-34355,CVE-2026-29170
  - SUG:NA
  - DESC:fix CVE-2026-42536,CVE-2026-34356,CVE-2026-34355,CVE-2026-29170


author: wujichao <wujichao1@huawei.com> - 2.1.5-12
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: combine ten similar submissions into one(0125-fix-clang-build-error.patch) and Upgrade from upstream


author: jingxiaolu<lujingxiao@huawei.com> - 2.1.5-18
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: sync patches from upstream for refactoring sandbox and bugfixing


author: Donghua Huang <huangdonghua3@h-partners.com> - 50.0-36
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: libhns: Fix wrong WQE data in new post send API when QP wraps around


author: Donghua Huang <huangdonghua3@h-partners.com> - 50.0-45
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: Inline set_extend_atomic_seg() and optimize memory allocation to reduce page faults.


author: zhang_jian <zhang_jian7@hoperun.com> - 3.20-1
changelog:
  - Update to 3.20
  - A build failure with uClibc has been fixed.
  - Some memory handling errors in t_auth were fixed.


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 3.21-1
changelog:
  - Update to 3.21
  - Support has been added for Global Segmentation Offload (GSO) and Global Receive Offload (GRO) under Linux.
  - The iperf3 server provides more information about various error conditions to the client.
  - The maximum value for the --set-mss option is now 32K.
  - A race condition leading to a crash when closing sockets at the end of a test has been fixed.


author: Huang Yang <huangyang@loongson.cn> - 1.8.18-22
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Resolve malloc aborted error raised when executing ipmitool fru.


author: xinghe <xinghe2@h-partners.com> - 1:6.6.0-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ss: fix expired time format of timer
         route: filter by interface on multipath routes
         lib: names: check calloc return value in db_names_alloc
         remove redundant patches


author: mufengyan <mufengyan@huawei.com> - 1:6.6.0-10
changelog:
  - Type:feature
  - ID:NA
  - SUG:NA
  - DESC:This patch adds ARPHRD_UB for iproute2 and support name
         parse for it and deletes the display of vf address
         information in the pf


author: liweigang <liweiganga@uniontech.com> - 1.8.9-5
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: libxtables: Fix memleak of matches' udata
          xshared: Fix parsing of empty string arg in '-c' option


author: yanglu <yanglu72@h-partners.com> - 1.8.9-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:extensions:recent:Fix format string for unsigned values
         nft:cmd:Init struct nft_cmd::head early


author: Liu Chao <liuchao173@huawei.com> - 3:1.9.2-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC: use hint->name in get_usr_irq_policy to reduce the time spent on obtaining interrupt names when use --rulesconfig


author: DXwangg <wangjiawei80@huawei.com> -1:1.8.0.482.b08-0
changelog:
  - update to 8u482
  - modified 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch
  - modified Fix-LineBuffer-vappend-when-buffer-too-small.patch
  - modified add-missing-test-case.patch
  - add Fix-KAEProvider-SM2-Code.patch


author: Dingli Zhang <dingli@iscas.ac.cn> -1:1.8.0.482.b08-8
changelog:
  - Fix build errors for riscv64 due to missed patch408 removal
  - Fix patch apply failure due to 8269668


author: yaoxin <1024769339@qq.com> - 1.8.0-4
changelog:
  - Fix CVE-2026-40612,CVE-2026-41256,CVE-2026-41257,CVE-2026-43894,
    CVE-2026-43895,CVE-2026-43896 and CVE-2026-44777


author: liweigang <liweiganga@uniontech.com> - 0.17-3
changelog:
  - add backport-Handle-yet-another-out-of-memory-condition.patch
  - add backport-Issue-857-fix-a-few-places-where-json_tokener-should.patch


author: yueyuankun <yueyuankun@kylinos.cn> - 0.17-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Disallow control characters in strict mode
          Fix the expected output for test_parse
          Fix causing the strict-mode control characters check to incorrectly trigger


author: sunhai <sunhai10@huawei.com> - 0.17-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix the apps/json_parse "-s" (strict) option so it actually does something, and default to non-strict.


author: sunhai <sunhai10@huawei.com> - 0.17-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Handle NULL gracefully in json_tokener_free
          Issue 881 don t allow json_tokener_new_ex with a dep


author: jade_t <yzd50036@gmail.com> - 3.2.0-19
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:modify the git clone download address in kata_integration_clone


author: jade_t <yzd50036@gmail.com> - 3.2.0-20
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix the problem of self-compilation failure in the kata-containers source package


author: yanglu <yanglu72@h-partners.com> - 006-2
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC:Add crashkernel auto for Arm 
         enable kdump and set default reserve memory 512MB
         fix test failed due to default value change


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-164.0.0.149.20260804.9e43d70e7ad5
changelog:
  - !25627 Fix CVE-2026-64539
  - !25567 [OLK-6.6] Fix CVE-2026-64546
  - !25641  proc: protect ptrace_may_access() with exec_update_lock (FD links)
  - !25637  vfio/pci: Latch disable_idle_d3 per device
  - !25649  mainline bpf
  - bpf: Fix UAF in sock clone early bailouts
  - bpf: Disable xfrm_decode_session hook attachment
  - bpf,fork: wipe ->bpf_storage before bailouts that access it
  - !25048  KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned()
  - !25593 Fix CVE-2026-64304
  - proc: protect ptrace_may_access() with exec_update_lock (FD links)
  - vfio/pci: Latch disable_idle_d3 per device
  - Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  - crypto: qat - validate RSA CRT component lengths
  - drm/edid: fix OOB read in drm_parse_tiled_block()
  - KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned()


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-165.0.0.150
changelog:
  - !25666 Fix some security issues
  - !24043 ACPI: CPPC: Move reference performance to capabilities
  - !25230 [OLK-6.6] Fix CVE-2026-64226
  - !25678 Fix: adapt DYNAMIC_AFFINITY for cgroup v2
  - !25683 Fix CVE-2026-64206
  - !25703  crypto: qat - fix VF2PF work teardown race in adf_disable_sriov()
  - !25615 [OLK-6.6][linux-6.6.y sync] Backport 6.6.144-6.6.145 LTS Patches
  - usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect
  - serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms
  - proc: Fix broken error paths for namespace links
  - selftests/bpf: Add simple strscpy() implementation
  - tools/testing: add linux/args.h header and fix radix, VMA tests
  - jiffies: Cast to unsigned long in secs_to_jiffies() conversion
  - jiffies: Define secs_to_jiffies()
  - xfs: fix stupid compiler warning
  - Bluetooth: btmtk: Fix btmtk.c undefined reference build error harder
  - selftests/hid: ensure CKI can compile our new tests on old kernels
  - Bluetooth: 6lowpan: Fix using chan->conn as indication to no remote netdev
  - ksmbd: fix durable reconnect double-bind race in ksmbd_reopen_durable_fd
  - seqlock: fix scoped_seqlock_read kernel-doc
  - KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers
  - !25686 Subject: [PATCH] x86/cpu/hygon: fix performance regression for hygon platform
  - x86/cpu/hygon: fix performance regression for hygon platform
  - !25218 [OLK-6.6] Fix CVE-2026-64076
  - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov()
  - Bluetooth: hci_core: Enable buffer flow control for SCO/eSCO
  - exfat: preserve benign secondary entries during rename and move
  - exfat: move exfat_chain_set() out of __exfat_resolve_path()
  - exfat: add exfat_get_dentry_set_by_ei() helper
  - exfat: rename argument name for exfat_move_file and exfat_rename_file
  - exfat: remove unnecessary read entry in __exfat_rename()
  - exfat: move free cluster out of exfat_init_ext_entry()
  - regulator: scmi: fix of_node refcount leak in scmi_regulator_probe()
  - regulator: scmi: Simplify with scoped for each OF child loop
  - audit: fix potential integer overflow in audit_log_n_hex()
  - audit: add audit_log_nf_skb helper function
  - crypto: qat - fix restarting state leak on allocation failure
  - btrfs: check and set EXTENT_DELALLOC_NEW before clearing EXTENT_DELALLOC
  - usb: gadget: f_fs: Tie read_buffer lifetime to ffs_epfile
  - nvmet: remove superfluous initialization
  - usb: gadget: f_fs: initialize reset_work at allocation time
  - crypto: atmel-sha204a - drop hwrng quality reduction for ATSHA204A
  - crypto: atmel - Drop explicit initialization of struct i2c_device_id::driver_data to 0
  - usb: typec: tcpm: Fix VDM type for Enter Mode commands
  - usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect()
  - serial: 8250_mid: Disable DMA for selected platforms
  - serial: 8250_mid: Remove 8250_pci usage
  - HID: appleir: fix UAF on pending key_up_timer in remove()
  - treewide: Switch/rename to timer_delete[_sync]()
  - proc: protect ptrace_may_access() with exec_update_lock (part 1)
  - seqlock: Change do_task_stat() to use scoped_seqlock_read()
  - seqlock: Introduce scoped_seqlock_read()
  - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled
  - HID: add haptics page defines
  - perf/x86/intel/uncore: Defer ADL global PMON enable to enable_box()
  - ksmbd: track the connection owning a byte-range lock
  - ksmbd: centralize ksmbd_conn final release to plug transport leak
  - ksmbd: use opener credentials for FSCTL mutations
  - smb: client: resolve SWN tcon from live registrations
  - smb: client: Improve unlocking of a mutex in cifs_get_swn_reg()
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb()
  - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister
  - netfilter: ebtables: zero chainstack array
  - netfilter: ebtables: Use vmalloc_array() to improve code
  - media: nxp: imx8-isi: Fix use-after-free on remove
  - media: nxp: imx8-isi: use devm_pm_runtime_enable() to simplify code
  - media: nxp: imx8-isi: Convert to platform remove callback returning void
  - gpio: sch: use raw_spinlock_t in the irq startup path
  - coresight: etb10: restore atomic_t for shared reading state
  - mm/shrinker: do not hold RCU lock in shrinker_debugfs_count_show()
  - staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr()
  - staging: rtl8723bs: fix spaces around binary operators
  - staging: rtl8723bs: core: move constants to right side in comparison
  - PCI: Free saved list without holding pci_bus_sem
  - PCI: Prevent resource tree corruption when BAR resize fails
  - PCI: mediatek: Fix IRQ domain leak when port fails to enable
  - PCI: mediatek: Use generic MACRO for TPVPERL delay
  - PCI: mediatek: Convert bool to single quirks entry and bitmap
  - PCI: controller: Use dev_fwnode() instead of of_fwnode_handle()
  - PCI: imx6: Fix IMX6SX_GPR12_PCIE_TEST_POWERDOWN handling
  - vfio/mlx5: Fix racy bitfields and tighten struct layout
  - PCI: altera: Fix resource leaks on probe failure
  - ALSA: aoa: check snd_ctl_new1() return value
  - iio: common: st_sensors: honour channel endianness in read_axis_data
  - iio: pressure: mpl115: fix runtime PM leak on read error
  - iio: imu: inv_icm42600: fix timestamping by limiting FIFO reading
  - iio: imu: inv_icm42600: stabilized timestamp in interrupt
  - iio: invensense: fix timestamp glitches when switching frequency
  - iio: invensense: remove redundant initialization of variable period
  - iio: hid-sensor-rotation: Fix stale or zero output when reading raw values
  - iio: imu: adis: add IRQF_NO_THREAD to non-FIFO trigger IRQ
  - ACPI: NFIT: core: Fix possible deadlock and missing notifications
  - ACPI: NFIT: core: Use devm_acpi_install_notify_handler()
  - ACPI: bus: Introduce devm_acpi_install_notify_handler()
  - ACPI: driver: Check ACPI_COMPANION() against NULL during probe
  - ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup
  - perf/x86/amd/brs: Fix kernel address leakage
  - mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout
  - mtd: rawnand: lpc32xx_mlc: fail DMA transfers on timeout
  - mtd: rawnand: fsl_ifc: return errors for failed page reads
  - mmc: vub300: defer reset until cmd_mutex is unlocked
  - mtd: mchp23k256: use SPI match data for chip caps
  - mtd: onenand: samsung: report DMA completion timeouts
  - wifi: mwifiex: fix permanently busy scans after multiple roam iterations
  - wifi: mac80211: free ack status frame on TX header build failure
  - powerpc/spufs: fix out-of-bounds access in spufs_mem_mmap_access()
  - reset: sunxi: fix memory region leak on ioremap failure
  - ipvs: reload ip header after head reallocation
  - ipvs: fix more places with wrong ipv6 transport offsets
  - memstick: ms_block: reject a card that reports too many blocks
  - macsec: fix promiscuity refcount leak in macsec_dev_open()
  - llc: fix SAP refcount leak when creating incoming sockets
  - Bluetooth: btrtl: validate firmware patch bounds
  - regulator: ltc3676: Fix incorrect IRQSTAT bit offsets
  - wifi: mac80211: fix memory leak in ieee80211_register_hw()
  - wifi: rt2x00: avoid full teardown before work setup in probe
  - powerpc/pseries: fix memory leak on krealloc failure in papr_init
  - pmdomain: imx: Fix i.MX8MP VC8000E power up sequence
  - pmdomain: imx: Fix i.MX8MP power notifier
  - cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed
  - tracing/osnoise: Call synchronize_rcu() when unregistering
  - riscv: Prevent NULL pointer dereference in machine_kexec_prepare()
  - drbd: reject data replies with an out-of-range payload size
  - macsec: don't read an unset MAC header in macsec_encrypt()
  - ipvs: reset full ip_vs_seq structs in ip_vs_conn_new
  - ipvs: use parsed transport offset in SCTP state lookup
  - llc: fix SAP refcount leak in llc_ui_autobind()
  - mac802154: remove interfaces with RCU list deletion
  - s390/monwriter: Reject buffer reuse with different data length
  - riscv: probes: save original sp in rethook trampoline
  - hwmon: (asus_atk0110) Check package count before accessing element
  - net: wwan: iosm: bound device offsets in the MUX downlink decoder
  - ata: pata_pxa: Fix DMA channel leak on probe error
  - orangefs: keep the readdir entry size 64-bit in fill_from_part()
  - tracing/probes: Fix double addition of offset for @+FOFFSET
  - net/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peeked
  - net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked
  - net: lan743x: Initialize eth_syslock spinlock before use
  - fsl/fman: Free init resources on KeyGen failure in fman_init()
  - hwmon: (occ) unregister sysfs devices outside occ lock
  - net: liquidio: fix BAR resource leak on PF number failure
  - hwmon: (w83793) remove vrm sysfs file on probe failure
  - hwmon: (w83627hf) remove VID sysfs files on error and remove
  - rtc: mpfs: fix counter upload completion condition
  - bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp()
  - espintcp: use sk_msg_free_partial to fix partial send
  - LoongArch: Fix missing dirty page tracking in {pte,pmd}_wrprotect()
  - batman-adv: clean untagged VLAN on netdev registration failure
  - batman-adv: ensure minimal ethernet header on TX
  - batman-adv: retrieve ethhdr after potential skb realloc on RX
  - net/sched: sch_teql: move rcu_read_lock()/spin_lock() from _bh variants
  - ieee802154: ca8210: fix pointer truncation in kfifo on 64-bit
  - ieee802154: ca8210: fix cas_ctl leak on spi_async failure
  - ieee802154: allow legacy LLSEC ADD/DEL ops to pass strict validation
  - ieee802154: admin-gate legacy LLSEC dump operations
  - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink
  - net: ipip: require CAP_NET_ADMIN in the device netns for changelink
  - net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink
  - net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink
  - net: ena: clean up XDP TX queues when regular TX setup fails
  - net/sched: act_ct: preserve tc_skb_cb across defragmentation
  - net: ixp4xx_hss: fix duplicate HDLC netdev allocation
  - net: wwan: t7xx: destroy DMA pool on CLDMA late init failure
  - net: sit: require CAP_NET_ADMIN in the device netns for changelink
  - gpios: palmas: add .get_direction() op
  - gpio-f7188x: Add support for NCT6126D version B
  - cpu: hotplug: Bound hotplug states sysfs output
  - cpu: hotplug: Preserve per instance callback errors
  - posix-cpu-timers: Use u64 multiplication in update_rlimit_cpu()
  - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete
  - Input: ims-pcu - fix type confusion in CDC union descriptor parsing
  - Input: ims-pcu - fix race condition in reset_device sysfs callback
  - Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing
  - Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq() debug logging
  - Input: ims-pcu - fix DMA mapping violation in line setup
  - Input: ims-pcu - add response length checks
  - Input: ims-pcu - validate control endpoint type
  - Input: ims-pcu - release data interface on disconnect
  - Input: ims-pcu - fix use-after-free and double-free in disconnect
  - scsi: elx: efct: Fix I/O leak on unsupported additional CDB
  - scsi: elx: efct: Fix refcount leak in efct_hw_io_abort()
  - scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE
  - scsi: target: Bound PR-OUT TransportID parsing to the received buffer
  - scsi: xen: scsiback: Free unsubmitted command instead of double-putting it
  - scsi: xen: scsiback: Free the command tag on the TMR submit-failure path
  - scsi: sg: Report request-table problems when any status is set
  - scsi: lpfc: Fix memory leak in lpfc_sli4_driver_resource_setup()
  - scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path
  - dm-verity: increase sprintf buffer size
  - dm-verity: fix a possible NULL pointer dereference
  - dm-integrity: don't increment hash_offset twice
  - dm_early_create: fix freeing used table on dm_resume failure
  - dm-stats: fix merge accounting
  - dm-stats: fix dm_jiffies_to_msec64
  - dm-log: fix a bitset_size overflow on 32bit machines
  - dm-ioctl: fix a possible overflow in list_version_get_info
  - dm-bufio: fix wrong count calculation in dm_bufio_issue_discard
  - dm era: fix out-of-bounds memory access for non-zero start sector
  - dm thin metadata: fix metadata snapshot consistency on commit failure
  - dm thin metadata: fix superblock refcount leak on snapshot shadow failure
  - net: sparx5: unregister blocking notifier on init failure
  - bpf: Add missing access_ok call to copy_user_syms
  - can: bcm: add missing rcu list annotations and operations
  - can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure
  - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF
  - can: isotp: use unconditional synchronize_rcu() in isotp_release()
  - can: esd_usb: kill anchored URBs before freeing netdevs
  - nvmet-rdma: handle inline data with a nonzero offset
  - sctp: validate STALE_COOKIE cause length before reading staleness
  - spi: uniphier: Fix completion initialization order before devm_request_irq()
  - tpm: Make the TPM character devices non-seekable
  - tpm: fix event_size output in tpm1_binary_bios_measurements_show
  - xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink
  - xfrm: use compat translator only for u64 alignment mismatch
  - xen/gntdev: fix error handling in ioctl
  - ice: fix ice_init_link() error return preventing probe
  - i2c: mlxbf: Fix use-after-free in mlxbf_i2c_init_resource()
  - i2c: mediatek: fix WRRD for SoCs without auto_restart option
  - hwmon: (ltc2992) add missing 'select REGMAP_I2C' to Kconfig
  - ksmbd: fix integer overflow in set_file_allocation_info()
  - smb: client: use kvzalloc() for megabyte buffer in simple fallocate
  - platform/x86/amd/pmc: Delay suspend for some Lenovo Laptops
  - platform/x86/amd/pmc: Check for intermediate wakeup in function
  - dmaengine: dw-edma: Add spinlock to protect DONE_INT_MASK and ABORT_INT_MASK
  - dmaengine: tegra: Fix burst size calculation
  - tpm: tpm_tis_spi: Use wait_woken() in wait_for_tmp_stat()
  - irqchip/crossbar: Use correct index in crossbar_domain_free()
  - mtd: maps: vmu-flash: fix NULL pointer dereference in initialization
  - mtd: spi-nor: swp: Improve locking user experience
  - fpga: microchip-spi: fix zero header_size OOB read in mpf_ops_parse_header()
  - net: thunderbolt: Fix frags[] overflow by bounding frame_count
  - bus: mhi: ep: Protect mhi_ep_handle_syserr() in the error path
  - fpga: dfl: add bounds check in dfh_get_param_size()
  - ocfs2: reject non-inline dinodes with i_size and zero i_clusters
  - ocfs2: reject dinodes whose i_rdev disagrees with the file type
  - ocfs2: reject dinodes with non-canonical i_mode type
  - ocfs2: add journal NULL check in ocfs2_checkpoint_inode()
  - ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits
  - ocfs2: avoid moving extents to occupied clusters
  - mtd: rawnand: fix condition in 'nand_select_target()'
  - net/9p: fix infinite loop in p9_client_rpc on fatal signal
  - mtd: rawnand: pl353: fix probe resource allocation
  - ocfs2: use kzalloc for quota recovery bitmap allocation
  - scsi: sas: Skip opt_sectors when DMA reports no real optimization hint
  - scsi: smartpqi: Use shost_to_hba() in pqi_scan_finished()
  - 9p: skip nlink update in cacheless mode to fix WARN_ON
  - mtd: slram: remove failed entries from the device list
  - mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE
  - proc: only bump parent nlink when registering directories
  - mm/damon/sysfs-schemes: put stats for scheme_add_dirs() internal error
  - mm/damon/sysfs-schemes: fix dir put orders in access_pattern_add_dirs()
  - riscv: cacheinfo: Fix node reference leak in populate_cache_leaves
  - mips: sched: Fix CPUMASK_OFFSTACK memory corruption
  - power: supply: charger-manager: fix refcount leak in is_full_charged()
  - ntfs3: fix out-of-bounds read in decompress_lznt
  - ntfs3: validate split-point offset in indx_insert_into_buffer
  - ntfs3: bound to_move in indx_insert_into_root before hdr_insert_head
  - ntfs3: cap RESTART_TABLE free-chain walker at rt->used
  - fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation}
  - fs/ntfs3: add depth limit to indx_find_buffer to prevent stack overflow
  - fs/ntfs3: validate lcns_follow in log_replay conversion
  - fs/ntfs3: bound attr_off in UpdateResidentValue against data_off
  - fs/ntfs3: bound copy_lcns dp->page_lcns[] index in analysis pass
  - fs/ntfs3: bound DeleteIndexEntryAllocation memmove length
  - fs/ntfs3: fix syncing wrong inode on DIRSYNC cross-directory rename
  - mm/damon/core: make charge_addr_from aware of end-address exclusivity
  - power: supply: cpcap-battery: Fix missing nvmem_device_put() causing reference leak
  - MIPS: DEC: Ensure 32-bit stack location for o32 prom_printf()
  - MIPS: ip22-gio: fix device reference leak in probe
  - MIPS: ip22-gio: fix kfree() of static object
  - MIPS: ip22-gio: fix gio device memory leak
  - remoteproc: qcom: Fix leak when custom dump_segments addition fails
  - SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing
  - lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure
  - lockd: Plug nlm_file leak when nlm_do_fopen() fails
  - sunrpc: wait for in-flight TLS handshake callback when cancel loses race
  - sunrpc: pin svc_xprt across the asynchronous TLS handshake callback
  - nvdimm/btt: Free arena sub-allocations on discover_arenas() error path
  - nvdimm/btt: Free arenas on btt_init() error paths
  - jbd2: fix integer underflow in jbd2_journal_initialize_fast_commit()
  - Bluetooth: SCO: hold sk properly in sco_conn_ready
  - Bluetooth: SCO: fix sleeping under spinlock in sco_conn_ready
  - HID: playstation: validate num_touch_reports in DualShock 4 reports
  - mfd: tps6586x: Fix OF node refcount
  - cifs: invalidate cfid on unlink/rename/rmdir
  - batman-adv: tt: prevent TVLV OOB check overflow
  - batman-adv: frag: fix primary_if leak on failed linearization
  - batman-adv: frag: free unfragmentable packet
  - batman-adv: fix VLAN priority offset
  - batman-adv: tt: avoid request storms during pending request
  - batman-adv: dat: fix tie-break for candidate selection
  - batman-adv: dat: ensure accessible eth_hdr proto field
  - batman-adv: bla: reacquire gw address after skb realloc
  - batman-adv: dat: acquire ARP hw source only after skb realloc
  - batman-adv: access unicast_ttvn skb->data only after skb realloc
  - batman-adv: gw: acquire ethernet header only after skb realloc
  - s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init()
  - perf/x86/amd/lbr: Fix kernel address leakage
  - x86/boot: Reject too long acpi_rsdp= values
  - x86/boot: Validate console=uart8250 baud rate to fix early boot hang
  - tools/power/x86/intel-speed-select: Harden daemon pidfile open
  - mfd: sm501: Fix reference leak on failed device registration
  - leds: uleds: Fix potential buffer overread
  - selinux: fix incorrect execmem checks on overlayfs
  - selinux: check connect-related permissions on TCP Fast Open
  - soc: fsl: qe: panic on ioremap() failure in qe_reset()
  - soc: ti: k3-ringacc: Fix access mode for k3_ringacc_ring_pop_tail_io/proxy
  - gpu: host1x: Fix device reference leak in host1x_device_parse_dt() error path
  - netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment()
  - netfilter: xt_nat: reject unsupported target families
  - netfilter: ecache: fix inverted time_after() check
  - netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag
  - netfilter: nf_nat_sip: reload possible stale data pointer
  - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst
  - netfilter: xt_cluster: reject template conntracks in hash match
  - netfilter: nfnl_cthelper: apply per-class values when updating policies
  - netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read
  - ASoC: qcom: q6apm: fix NULL pointer dereference in graph_callback
  - ASoC: mediatek: mt8183: Release reserved memory on cleanup
  - ASoC: mediatek: mt8192: Release reserved memory on cleanup
  - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  - fbdev: tridentfb: fix potential memory leak in trident_pci_probe()
  - fbdev: nvidia: fix potential memory leak in nvidiafb_probe()
  - fbdev: vesafb: fix memory leak in vesafb_probe()
  - fbdev: carminefb: fix potential memory leak in alloc_carmine_fb()
  - fbdev: tdfxfb: fix potential memory leak in tdfxfb_probe()
  - fbdev: uvesafb: fix potential memory leak in uvesafb_probe()
  - fbdev: s3fb: fix potential memory leak in s3_pci_probe()
  - fbdev: i740fb: fix potential memory leak in i740fb_probe()
  - fbdev: radeon: fix potential memory leak in radeonfb_pci_register()
  - fbdev: sm712: Fix operator precedence in big_swap macro
  - fbdev: hecubafb: fix potential memory leak in hecubafb_probe()
  - fbdev: broadsheetfb: fix potential memory leak in broadsheetfb_probe()
  - fbdev: metronomefb: fix potential memory leak in metronomefb_probe()
  - KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs
  - KVM: s390: pci: Fix handling of AIF enable without AISB
  - KVM: arm64: vgic: Check the interrupt is still ours before migrating it
  - KVM: s390: pci: Fix GISC refcount leak on AIF enable failure
  - arm64: dts: qcom: sdm630: describe adsp_mem region properly
  - arm64: fpsimd: Fix type mismatch in sve_{save,load}_state()
  - net: ife: require ETH_HLEN to be pullable in ife_decode()
  - net: atm: reject out-of-range traffic classes in QoS validation
  - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post()
  - ASoC: SOF: topology: validate vendor array size before parsing
  - ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  - ASoC: SOF: ipc3-control: Use overflow checks in control_update size calc
  - ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  - vduse: Fix race in vduse_dev_msg_sync and vduse_dev_read_iter
  - mlxsw: fix refcount leak in mlxsw_sp_vrs_lpm_tree_replace()
  - mlxsw: fix refcount leak in mlxsw_sp_port_lag_join()
  - smb: client: fix overflow in passthrough ioctl bounds check
  - octeontx2-af: fix VF bringup affecting PF promiscuous state
  - net/mlx5: Fix L3 tunnel entropy refcount leak
  - selftests/net: fix EVP_MD_CTX leak in tcp_mmap
  - regulator: core: regulator_lock_two() should test for EDEADLK not EDEADLOCK
  - dm era: fix NULL pointer dereference in metadata_open()
  - SUNRPC: pin upper rpc_clnt across the TLS connect_worker
  - SUNRPC: release lower rpc_clnt if killed waiting for XPRT_LOCKED
  - cifs: validate DFS referral string offsets
  - s390/zcrypt: Remove the empty file
  - ipvs: ensure inner headers in ICMP errors are in headroom
  - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors
  - ipvs: use parsed transport offset in TCP state lookup
  - ipvs: pass parsed transport offset to state handlers
  - ipv6: mcast: Fix potential UAF in MLD delayed work
  - ipv6: mcast: Replace locking comments with lockdep annotations.
  - ipv4: igmp: Fix potential UAF in igmp_gq_start_timer()
  - octeontx2-pf: check DMAC extraction support before filtering
  - net/sched: cake: reject overhead values that underflow length
  - net: usb: lan78xx: disable VLAN filter in promiscuous mode
  - net: usb: lan78xx: move functions to avoid forward definitions
  - net/tls: Consume empty data records in tls_sw_read_sock()
  - ring-buffer: Fix event length with forced 8-byte alignment
  - Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup()
  - Bluetooth: ISO: exclude RFU bits from ISO_SDU_Length
  - Bluetooth: MGMT: Fix adv monitor add failure cleanup
  - Bluetooth: 6lowpan: hold L2CAP conn across debugfs control
  - amt: fix size calculation in amt_get_size()
  - net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket
  - net/sched: act_pedit: fix TOCTOU heap OOB write in tc offload
  - net: qualcomm: rmnet: validate MAP frame length before ingress parsing
  - qede: fix off-by-one in BD ring consumption on build_skb failure
  - net: microchip: vcap: fix races on the shared Super VCAP block
  - net/mlx5e: Fix HV VHCA stats agent registration race
  - net/mlx5e: Fix HV VHCA stats zero-sized buffer allocation
  - netfilter: xt_connmark: reject invalid shift parameters
  - netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop
  - netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()
  - netfilter: xt_u32: reject invalid shift counts
  - gue: validate REMCSUM private option length
  - net: usb: net1080: validate packet_len before pad-byte access in rx_fixup
  - selftests/hid: Cover hid_bpf_get_data() size overflow
  - selftests/hid: convert the hid_bpf selftests with struct_ops
  - selftests/hid: force using our compiled libbpf headers
  - selftests/hid: do not manually call headers_install
  - selftests/hid: ensure we can compile the tests on kernels pre-6.3
  - HID: picolcd: prevent NULL pointer dereference in picolcd_send_and_wait()
  - ata: sata_gemini: unwind clocks on IDE pinctrl errors
  - minix: avoid overflow in bitmap block count calculation
  - afs: Fix unchecked-length string display in debug statement
  - afs: Fix the volume AFS_VOLUME_RM_TREE is set on
  - afs: Fix vllist leak
  - afs: Fix callback service message parsers to pass through -EAGAIN
  - afs: use kvfree() to free memory allocated by kvcalloc()
  - afs: Fix error code in afs_extract_vl_addrs()
  - fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid
  - net/sched: hhf: clear heavy-hitter state on reset
  - pinctrl: meson: restore non-sleeping GPIO access
  - gpio: timberdale: Return -ENOMEM on dynamic memory allocation in probe
  - ksmbd: fix use-after-free of fp->owner.name in durable handle owner check
  - smb: move some duplicate definitions to common/cifsglob.h
  - net/sched: act_bpf: use rcu_dereference_bh() to read the filter
  - cxgb4: Fix decode strings dump for T6 adapters
  - virtio_net: disable cb when NAPI is busy-polled
  - irqchip/ts4800: Fix missing chained handler cleanup on remove
  - irqchip/gic-v3-its: Fix OF node reference leak
  - tracing: eprobe: read the complete FILTER_PTR_STRING pointer
  - tracing/events: Fix to check the simple_tsk_fn creation
  - bridge: stp: Fix a potential use-after-free when deleting a bridge
  - net/sched: sch_teql: Introduce slaves_lock to avoid race condition and UAF
  - net: gianfar: dispose irq mappings on probe failure and device removal
  - net: phy: sfp: free mii_bus in sfp_i2c_mdiobus_destroy
  - usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup()
  - hwmon: (pmbus) Fix passing events to regulator core
  - hwmon: adm1275: Prevent reading uninitialized stack
  - MIPS: DEC: Ensure RTC platform device deregistration upon failure
  - sctp: fix SCTP_RESET_STREAMS stream list length limit
  - net: enetc: check the number of BDs needed for xdp_frame
  - qede: fix out-of-bounds check for cqe->len_list[]
  - seg6: validate SRH length before reading fixed fields
  - gpio: htc-egpio: use managed gpiochip registration
  - gpio: mvebu: fail probe if gpiochip registration fails
  - spi: sh-msiof: abort transfers when reset times out
  - tracing: probes: fix typo in a log message
  - dt-bindings: net: renesas,ether: Drop example "ethernet-phy-ieee802.3-c22" fallback
  - ASoC: fsl_asrc_dma: fix eDMA maxburst misalignment with channel count
  - net: ethernet: sunplus: spl2sw: fix phy_node refcount leak in remove
  - net: sungem: fix probe error cleanup
  - net: mvneta: re-enable percpu interrupt on resume
  - rtc: cmos: unregister HPET IRQ handler on probe failure
  - rtc: ds1307: Fix off-by-one issue with wday for rx8130
  - smb/client: preserve errors from smb2_set_sparse()
  - ipv6: fix error handling in disable_policy sysctl
  - ipv6: fix error handling in forwarding sysctl
  - ipv6: fix error handling in ignore_routes_with_linkdown sysctl
  - ipv6: fix error handling in disable_ipv6 sysctl
  - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle
  - veth: fix NAPI leak in XDP enable error path
  - net: dsa: sja1105: round up PTP perout pin duration
  - net, bpf: check master for NULL in xdp_master_redirect()
  - alpha/PCI: Fix __pci_mmap_fits() overflow for zero-length BARs
  - alpha/PCI: Add security_locked_down() check to pci_mmap_resource()
  - NTB: epf: Fix doorbell bitmask and IRQ vector handling
  - NTB: epf: Report 0-based doorbell vector via ntb_db_event()
  - NTB: epf: Make db_valid_mask cover only real doorbell bits
  - netfilter: nft_compat: ebtables emulation must reject non-bridge targets
  - netfilter: nft_synproxy: stop bypassing the priv->info snapshot
  - netfilter: nf_nat: avoid invalid nat_net pointer use on failed nf_nat_init()
  - ipv4: fib: Don't ignore error route in local/main tables.
  - ipv6: Fix null-ptr-deref in fib6_nh_mtu_change().
  - ksmbd: fix use-after-free of conn->preauth_info in concurrent SMB2 NEGOTIATE
  - rtc: msc313: fix NULL deref in shared IRQ handler at probe
  - i40e: Fix i40e_debug() to use struct i40e_hw argument
  - ice: fix AQ error code comparison in ice_set_pauseparam()
  - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs()
  - PCI: endpoint: pci-epf-ntb: Add check to detect 'db_count' value of 0
  - PCI: endpoint: pci-epf-vntb: Add check to detect 'db_count' value of 0
  - bpf: zero-initialize the fib lookup flow struct
  - bpf: Fix stack slot index in nospec checks
  - rtc: ds1307: handle oscillator stop flag for ds1337/ds1339/ds3231
  - rtc: abx80x: fix the RTC_VL_CLR clearing all status flags
  - octeontx2-pf: mcs: Fix mcs resources free on PF shutdown
  - octeontx2-pf: Clear stats of all resources when freeing resources
  - octeontx2-af: mcs: Fix unsupported secy stats read
  - net: ethernet: mtk_ppe: Fix rhashtable leak in mtk_ppe_init error paths
  - tipc: fix use-after-free of the discoverer in tipc_disc_rcv()
  - net: marvell: prestera: initialize err in prestera_port_sfp_bind
  - selftests/mm: fix exclusive_cow test fork() handling
  - selftests/mm: allow PUD-level entries in compound testcase of hmm tests
  - selftests/mm: clarify alternate unmapping in compaction_test
  - irqchip/crossbar: Fix parent domain resource leak
  - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak
  - netfilter: nf_reject: skip iphdr options when looking for icmp header
  - netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer()
  - netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types
  - netfilter: ipset: annotate "pos" for concurrent readers/writers
  - netfilter: ipset: Fix data race between add and dump in all hash types
  - md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry
  - ieee802154: fix kernel-infoleak in dgram_recvmsg()
  - ieee802154: Remove WARN_ON() in cfg802154_pernet_exit()
  - ACPI: IPMI: Fix inverted interface check in ipmi_bmc_gone()
  - ACPI: resource: Amend kernel-doc style
  - thermal: intel: Fix dangling resources on thermal_throttle_online() failure
  - arm64/hw_breakpoint: reject unaligned watchpoints that would truncate BAS
  - ALSA: usb-audio: Kill MIDI 2.0 URBs before freeing endpoints
  - flow_dissector: check device type before reading ETH_ADDRS
  - devlink: Fix parent ref leak in devl_rate_node_create()
  - dpaa2-switch: fix VLAN upper check not rejecting bridge join
  - virtio-net: fix len check in receive_big()
  - spi: rpc-if: Use correct device for hardware reinitialization on resume
  - PCI: iproc: Restore .map_irq() for the platform bus driver
  - sctp: hold socket lock when dumping endpoints in sctp_diag
  - net: psample: fix info leak in PSAMPLE_ATTR_DATA
  - octeontx2-pf: Fix leak of SQ timestamp buffer on teardown
  - drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm
  - drm/amdkfd: Avoid double-unpin of DOORBELL/MMIO BOs on free
  - ASoC: tlv320aic3x: restrict CLKDIV bypass Q values in dual-rate mode
  - xfrm: validate selector family and prefixlen during match
  - xfrm: annotate data-races around xfrm_policy_count[] and xfrm_policy_default[]
  - xfrm: Support crypto offload for inbound IPv6 ESP packets not in GRO path
  - xfrm: Use the XFRM_GRO to indicate a GRO call on input
  - spi: dw: fix wrong BAUDR setting after resume
  - gpio: mlxbf3: fail probe if gpiochip registration fails
  - sparc: led: avoid trimming a newline from empty writes
  - apparmor: fix label can not be immediately before a declaration
  - i3c: master: Prevent reuse of dynamic address on device add failure
  - apparmor: put secmark label after secid lookup
  - apparmor: aa_getprocattr free procattr leak on format failure
  - apparmor: fix potential UAF in aa_replace_profiles
  - apparmor: grab ns lock and refresh when looking up changehat child profiles
  - apparmor: fix rawdata_f_data implicit flex array
  - apparmor: aa_label_alloc use aa_label_free on alloc failure
  - apparmor: check label build before no_new_privs test
  - security/apparmor/apparmorfs.c: conditionally compile get_loaddata_common_ref()
  - Revert "PCI/MSI: Unmap MSI-X region on error"
  - PCI: mediatek: Use actual physical address instead of virt_to_phys()
  - PCI: mediatek: Fix possible truncation in mtk_pcie_parse_port()
  - tools lib api: Fix mount_overload() snprintf truncation and toupper range
  - tools lib api: Fix filename__write_int() writing uninitialized stack data
  - tools lib api: Fix missing null termination in filename__read_int/ull()
  - xprtrdma: Return sendctx slot after Send preparation failure
  - xprtrdma: Repost Receive buffers for malformed replies
  - xprtrdma: Sanitize the reply credit grant after parsing
  - xprtrdma: Fix bcall rep leak and unbounded peek
  - xprtrdma: Resize reply buffers before reposting receives
  - xprtrdma: Document and assert reply-handler invariants
  - xprtrdma: Check frwr_wp_create() during connect
  - PCI: rcar-host: Remove unused LIST_HEAD(res)
  - fs/ntfs3: resize log->one_page_buf when adopting on-disk page size
  - PCI: meson: Propagate devm_add_action_or_reset() failure
  - PCI: mediatek: Fix operator precedence in PCIE_FTS_NUM_L0 macro
  - NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS in pg_get_mirror_count_write
  - NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS on fatal DS connect errors
  - nfs: keep PG_UPTODATE clear after read errors in page groups
  - NFSv4/pnfs: defer return_range callbacks until after inode unlock
  - xprtrdma: Decouple req recycling from RPC completion
  - xprtrdma: Use sendctx DMA state for Send signaling
  - xprtrdma: Post receive buffers after RPC completion
  - xprtrdma: Close lost-wakeup race in xprt_rdma_alloc_slot
  - xprtrdma: Avoid 250 ms delay on backlog wakeup
  - xprtrdma: Remove temp allocation of rpcrdma_rep objects
  - pNFS/filelayout: fix cheking if a layout is striped
  - clk: qcom: a53: Corrected frequency multiplier for 1152MHz
  - dmaengine: Fix possible use after free
  - dmaengine: qcom: gpi: set DMA_PRIVATE capability
  - perf: Fix off-by-one stack buffer overflow in kallsyms__parse()
  - dmaengine: imx-sdma: Refine spba bus searching in probe
  - drm/amd/display: Add missing kdoc for ALLM parameters
  - fs/ntfs3: fix mount failure on 64K page-size kernels
  - fs/ntfs3: add bounds check to run_get_highest_vcn()
  - HID: logitech-hidpp: remove excess kernel-doc member in hidpp_scroll_counter
  - clk: at91: keep securam node alive while mapping it
  - iio: tcs3472: power down chip on probe failure
  - iio: accel: mma8452: handle I2C read error(s) in mma8452_read()
  - iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling
  - iio: magnetometer: ak8975: fix potential kernel stack memory leak
  - iio: light: si1133: prevent race condition on timeout
  - iio: light: si1133: reset counter to prevent race condition
  - char: tlclk: fix use-after-free in tlclk_cleanup()
  - usb: host: max3421: Reject hub port requests for non-existent ports
  - usb: host: max3421: Fix shift-out-of-bounds in max3421_hub_control()
  - staging: most: video: avoid double free on video register failure
  - mailbox: mtk-adsp: fix UAF during device teardown
  - phy: phy-can-transceiver: Check driver match and driver data against NULL
  - bus: mhi: ep: Fix potential deadlock in mhi_ep_reset_worker()
  - platform/x86: xo15-ebook: Fix wakeup source and GPE handling
  - x86/platform/olpc: xo15: Drop wakeup source on driver removal
  - PCI/ASPM: Don't reconfigure ASPM entering low-power state
  - coresight: etm4x: Correct TRCVMIDCCTLR1 save and restore
  - coresight: cti: Fix DT filter signals silently ignored
  - staging: nvec: fix use-after-free in nvec_rx_completed()
  - net/9p: fix race condition on rdma->state in trans_rdma.c
  - ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write
  - mfd: cs42l43: Sanity check firmware size
  - ksmbd: fix use-after-free in same_client_has_lease()
  - ionic: Fix check in ionic_get_link_ext_stats
  - tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF)
  - tipc: fix UAF in tipc_l2_send_msg()
  - KEYS: Use acquire when reading state in keyring search
  - powerpc/kexec: fix double get_cpu() imbalance in kexec_prepare_cpus
  - powerpc/powernv: fix preempt count leak in pnv_kexec_wait_secondaries_down
  - MIPS: mm: Fix out-of-bounds write in maar_res_walk()
  - bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check
  - bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data()
  - bpf: Fix bpf_get/setsockopt to tos for ipv4-mapped ipv6 socket
  - selftests/bpf: Initialize operation name before use
  - smb/client: always return a value for FS_IOC_GETFLAGS
  - cifs: remove all cifs files before kill super
  - ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  - netfilter: nf_conncount: callers must hold rcu read lock
  - kcm: use WRITE_ONCE() when changing lower socket callbacks
  - net: bcmgenet: Use weighted round-robin TX DMA arbitration
  - net: wwan: t7xx: check skb_clone in control TX
  - net/mlx5: Check max_macs devlink param value against max capability
  - bpf: Run generic devmap egress prog on private skb
  - net: mana: guard TX wq object destroy with INVALID_MANA_HANDLE check
  - net: mana: initialize gdma queue id to INVALID_QUEUE_ID
  - net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen
  - net/sched: sch_fq_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen
  - handshake: Require admin permission for DONE command
  - power: supply: core: fix supplied_from allocations
  - ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset GPIO
  - spi: xilinx: use FIFO occupancy register to determine buffer size
  - crypto: rng - Free default RNG on module exit
  - crypto: cavium/cpt - fix DMA cleanup using wrong loop index
  - crypto: marvell/octeontx - fix DMA cleanup using wrong loop index
  - cxl/test: Add check after kzalloc() memory in alloc_mock_res()
  - tipc: reject inverted service ranges from peer bindings
  - tipc: prevent snt_unacked underflow on CONN_ACK
  - tipc: require net admin for TIPCv2 netlink mutators
  - net/sched: sch_hfsc: Don't make class passive twice
  - sctp: validate embedded address parameter length
  - bridge: cfm: reject invalid CCM interval at configuration time
  - net: fib_rules: Don't dump dying fib_rule in fib_rules_dump().
  - net/sched: cls_flow: Dont expose folded kernel pointers
  - ASoC: tegra: tegra210_ahub: Validate written enum value
  - ASoC: fsl: fsl_audmix: Validate written enum values
  - ASoC: codecs: hdac_hdmi: Validate written enum value
  - RDMA/mlx5: Release the HW‑provided UAR index rather than the SW one
  - RDMA/mlx5: Fix undefined shift of user RQ WQE size
  - RDMA/mlx5: Remove raw RSS QP restrack tracking
  - fs: efs: remove unneeded debug prints
  - Bluetooth: vhci: validate devcoredump state before side effects
  - Bluetooth: hci: validate codec capability element length
  - Bluetooth: hci_qca: fix NULL pointer dereference in qca_dmp_hdr() for non-serdev device
  - s390/process: Fix kernel thread function pointer type
  - bpf: Tighten cgroup storage cookie checks for prog arrays
  - of: cpu: add check in __of_find_n_match_cpu_property()
  - cxl/test: Zero out LSA backing memory to avoid leaking to user
  - cxl/test: Fix integer overflow in mock LSA bounds checks
  - selftests/bpf: Fix bpf_iter/task_vma test
  - ext4: fix kernel BUG in ext4_write_inline_data_end
  - bonding: 3ad: fix mux port state on oper down
  - ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend fails
  - tools/virtio: check mmap return value in vringh_test
  - vhost/net: complete zerocopy ubufs only once
  - vduse: Requeue failed read to send_list head
  - vhost/vdpa: validate virtqueue index in mmap and fault paths
  - vduse: hold vduse_lock across IDR lookup in open path
  - ASoC: codecs: aw88261: fix incorrect masks for boost regs
  - spi: meson-spifc: fix runtime PM leak on remove
  - IB/mlx4: Fill in the access_flags if IB_MR_REREG_ACCESS is not specified
  - btrfs: zoned: don't account data relocation space-info in statfs free space
  - hwmon: (it87) Clamp negative values to zero in set_fan()
  - fbdev: sm501fb: Fix buffer errors in OF binding code
  - btrfs: fix invalid pointer dereference in __btrfs_run_delayed_refs()
  - wifi: mt76: mt7921: fix potential tx_retries underflow
  - wifi: mt76: mt7915: fix potential tx_retries underflow
  - wifi: mt76: fix argument to ieee80211_is_first_frag()
  - hwspinlock: qcom: avoid uninitialized struct members
  - vmalloc: fix NULL pointer dereference in is_vm_area_hugepages()
  - pinctrl: mediatek: mt8167: Fix Schmitt trigger register offset of pins 34-39
  - pinctrl: mediatek: mt8516: Fix Schmitt trigger register offset of pins 34-39
  - scsi: target: Remove tcm_loop target reset handling
  - watchdog: unregister PM notifier on watchdog unregister
  - configfs: fix lockless traversals of ->s_children
  - firmware_loader: Fix recursive lock in device_cache_fw_images()
  - spi: ep93xx: fix double-free of zeropage on DMA setup failure
  - IB/mlx5: Properly support implicit ODP rereg_mr
  - IB/mlx5: Don't take the rereg_mr fallback without a new translation
  - ACPI: IPMI: Fix message kref handling on dead device
  - ALSA: seq: Clear variable event pointer on read
  - riscv: stacktrace: Remove bogus -0x4 offset in non-FP walk_stackframe
  - ALSA: seq: Fix partial userptr event expansion
  - wifi: wcn36xx: fix OOB read from short trigger BA firmware response
  - wifi: wcn36xx: fix OOB read from firmware count in PRINT_REG_INFO indication
  - wifi: wcn36xx: fix heap overflow from oversized firmware HAL response
  - bpf: Update transport_header when encapsulating UDP tunnel in lwt
  - arm64: dts: tqma8mpql-mba8mpxl: configure sai clock in audio codec as well
  - RDMA/irdma: Initialize iwmr->access during MR registration
  - RDMA/irdma: Fix OOB read during CQ MR registration
  - IB/cm: Fix av cm device leak on an error path in cm_init_av_by_path()
  - netfilter: conntrack: call nf_ct_gre_keymap_destroy() if master helper is pptp
  - netfilter: synproxy: protect nf_ct_seqadj_init() with conntrack lock
  - netfilter: nfnetlink_osf: fix mss parsing on big-endian architectures
  - ocfs2: fix race between ocfs2_control_install_private() and ocfs2_control_release()
  - ocfs2/dlm: require a ref for locking_state debugfs open
  - ocfs2: reject FITRIM ranges shorter than a cluster
  - ocfs2: fix buffer head management in ocfs2_read_blocks()
  - ocfs2: rebase copied fsdlm LVB pointers in locking_state
  - perf/x86/amd/core: Always use the NMI latency mitigation
  - bpftool: Use libbpf error code for flow dissector query
  - drm/amdgpu: set sub_block_index for mca ras sub-blocks
  - configfs_lookup(): don't leave ->s_dentry dangling on failure
  - lib/test_meminit: use && for bools
  - sched: restore timer_slack_ns when resetting RT policy on fork
  - ext2: fix ignored return value of generic_write_sync()
  - mm/fake-numa: fix under-allocation detection in uniform split
  - scsi: ufs: Fix wrong value printed in unexpected UPIU response case
  - scsi: pm8001: Fix error code in non_fatal_log_show()
  - scsi: Revert "scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans"
  - nvdimm/btt: Handle preemption in BTT lane acquisition
  - ARM: imx31: Fix IIM mapping leak in revision check
  - ata: libata: Fix ata_exec_internal()
  - HID: wiimote: Fix table layout and whitespace errors
  - ARM: imx3: Fix CCM node reference leak
  - ASoC: rsnd: Fix RSND_SOC_MASK width to single nibble
  - ext4: fix LOGFLUSH shutdown ordering to allow ordered-mode data writeback
  - md/raid10: reset read_slot when reusing r10bio for discard
  - rpmsg: use generic driver_override infrastructure
  - media: qcom: venus: relax encoder frame/blur step size on v6
  - media: qcom: venus: relax encoder frame/blur dimension steps on v4
  - media: qcom: venus: drop extra padding in NV12 raw size calculation
  - RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path
  - RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe
  - EDAC/{skx_common,skx}: Fix UBSAN shift-out-of-bounds in skx_get_dimm_info
  - drm/msm/dp: Fix the ISR_* enum values
  - drm/msm/dp: fix HPD state status bit shift value
  - ocfs2: kill osb->system_file_mutex lock
  - ocfs2: don't BUG_ON an invalid journal dinode
  - rapidio/tsi721: prevent a bad dereference in tsi721_db_dpc()
  - dax/kmem: account for partial discontiguous resource upon removal
  - libbpf: Fix UAF in strset__add_str()
  - libbpf: Harden parse_vma_segs() path parsing
  - drm/nouveau/bios: specify correct display fuse register for Ampere and Ada
  - drm/tegra: Fix iommu_map_sgtable() return value check
  - gpu: host1x: Fix iommu_map_sgtable() return value check
  - drm/tegra: dc: Fix device node reference leak in tegra_dc_has_output()
  - gpu: host1x: Allow entries in BO caches to be freed
  - drm/tegra: gr2d/gr3d: Contain PM in the gr*d_probe/gr*d_remove
  - drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered
  - net/sched: cls_bpf: prevent unbounded recursion in offload rollback
  - ipv6: guard against possible NULL deref in __in6_dev_stats_get()
  - workqueue: drop spurious '*' from print_worker_info() fn declaration
  - nvme-multipath: fix flex array size in struct nvme_ns_head
  - pinctrl: cs42l43: Fix polarity on debounce
  - ALSA: seq: midi: Serialize output teardown with event_input
  - mtd: spi-nor: Drop duplicate Kconfig dependency
  - mips: n64: add __iomem for writel call
  - mips: ralink: mt7621: add missing __iomem
  - MIPS: DEC: Remove do_IRQ() call indirection
  - MIPS: Fix big-endian stack argument fetching in o32 wrapper
  - PM: sleep: Use complete() in device_pm_sleep_init()
  - RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup
  - IB/mlx4: Fix refcount leak in add_port() error path
  - RDMA/rxe: Fix a use-after-free problem in rxe_mmap
  - RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs
  - bus: sunxi-rsb: Always check register address validity
  - pwm: imx27: Fix variable truncation in .apply()
  - device property: fix fwnode reference leak in fwnode_graph_get_endpoint_by_id()
  - arm64: dts: qcom: sm8450: Add power-domain and iface clk for ice node
  - firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  - media: rockchip: rga: fix too small buffer size
  - net/sched: sch_drr: annotate data-races around cl->deficit
  - regulator: dt-bindings: mt6359: Drop regulator-name pattern restrictions
  - bitops: use common function parameter names
  - sysfs: clamp show() return value in sysfs_kf_read()
  - firmware: arm_scmi: Read sensor config as 32-bit value
  - media: atomisp: Fix memory leak in atomisp_fixed_pattern_table()
  - RDMA/srpt: fix integer overflow in immediate data length check
  - RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference
  - RDMA/hns: Fix arithmetic overflow in calc_hem_config()
  - IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier
  - ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD
  - net/sched: sch_htb: annotate data-races (I)
  - net/sched: sch_htb: do not change sch->flags in htb_dump()
  - crypto: ccp - Treat zero-length cert chain as query for blob lengths
  - net/sched: sch_hfsc: annotate data-races in hfsc_dump_class_stats()
  - clk: scpi: Unregister child clock providers on remove
  - thermal: hwmon: Fix critical temperature attribute removal
  - evm: terminate and bound the evm_xattrs read buffer
  - drm/hisilicon/hibmc: use clock to look up the PLL value
  - drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  - arm64: dts: qcom: sm8450: Fix ICE reg size
  - clk: scmi: Fix clock rate rounding
  - arm64: dts: mediatek: mt8192-asurada: Move PCIe DMA bounce buffer to host
  - iommu/amd: Fix a stale comment about which legacy mode is user visible
  - nilfs2: fix backing_dev_info reference leak
  - dlm: fix add msg handle in send_queue ordered
  - crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents
  - crypto: ecrdsa - fix unknown OID check in ecrdsa_param_curve
  - crypto: atmel-sha204a - fix blocking and non-blocking rng logic
  - vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive().
  - arm64: dts: imx8x-colibri: Correct SODIMM PAD settings
  - arm64: dts: rockchip: fix rk809 interrupt pin on rk3566-roc-pc
  - pinctrl: sunxi: fix regulator leak in sunxi_pmx_request() error path
  - media: v4l2-common: Add YUV24 format info
  - media: cedrus: Fix failure to clean up hardware on probe failure
  - watchdog: sprd_wdt: Remove redundant sprd_wdt_disable() on register failure
  - watchdog: sama5d4_wdt: Fix WDDIS detection on SAM9X60 and SAMA7G5
  - watchdog: sp5100_tco: Use EFCH MMIO for newer Hygon FCH
  - ARM: dts: am335x-sl50: Fix audio bitclock and frame master endpoint
  - wifi: ath9k: fix OOB access from firmware tx status queue ID
  - kconfig: fix potential NULL pointer dereference in conf_askvalue
  - wifi: rtw88: fix OOB read from firmware RX descriptor exceeding DMA buffer
  - wifi: rtw89: Correct data type for scan index to avoid infinite loop
  - driver core: use READ_ONCE() for dev->driver in dev_has_sync_state()
  - drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  - dt-bindings: pinctrl: nvidia,tegra234: Add missing required block
  - arm64: tegra: Fix Tegra234 MGBE PTP clock
  - wifi: cfg80211: fix grammar in MLO group key error message
  - arm64: dts: qcom: sdm845-mezzanine: Fix camss ports unit_address_vs_reg warning
  - arm64: dts: rockchip: Fix gmac0 reset pin for NanoPi R5S
  - Documentation: proc: fix section numbering in table of contents
  - libbpf: Report error when a negative kprobe offset is specified
  - drm/radeon: fix memory leak in radeon_ring_restore() on lock failure
  - drm/radeon: fix integer overflow in radeon_align_pitch()
  - drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  - drm/tidss: Drop extra drm_mode_config_reset() call
  - drm/rockchip: Test for imported buffers with drm_gem_is_imported()
  - clocksource/drivers/sun5i: Handle error returns from devm_reset_control_get_optional_exclusive()
  - afs: Fix further netns teardown to cancel the preallocation charger
  - afs: fix NULL pointer dereference in afs_get_tree()
  - afs: Fix netns teardown to cancel the preallocation charger
  - rxrpc: Fix leak of released call in recvmsg(MSG_PEEK)
  - serial: 8250_omap: clear rx_running on zero-length DMA completes
  - serial: msm: Disable DMA for kernel console UART
  - dt-bindings: power: imx93: Add MIPI PHY power domain
  - dt-bindings: media: sun4i-a10-video-engine: Add interconnect properties
  - media: uvcvideo: Fix sequence number when no EOF
  - media: uvcvideo: Fix buffer sequence in frame gaps
  - media: uvcvideo: Avoid partial metadata buffers
  - crypto: crypto4xx - Remove insecure and unused rng_alg
  - crypto: crypto4xx - Remove ahash-related code
  - crypto: sun4i-ss - Remove insecure and unused rng_alg
  - nvmet-tcp: Fix potential UAF when ddgst mismatch
  - KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU
  - crypto: algif_skcipher - force synchronous processing on trees without ctx->state
  - fuse: re-lock request before returning from fuse_ref_folio()
  - fuse: fix device node leak in cuse_process_init_reply()
  - RDMA/siw: bound Read Response placement to the RREAD length
  - RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg
  - Input: maplecontrol - set driver data before registering input device
  - Input: maplemouse - set driver data before registering input device
  - Input: maple_keyb - set driver data before registering input device
  - Input: mms114 - fix multi-touch slot corruption
  - Input: maplemouse - fix NULL pointer dereference in open()
  - Input: mms114 - reject an oversized device packet size
  - Input: touchwin - reset the packet index on every complete packet
  - Input: mms114 - fix touch indexing for MMS134S and MMS136
  - Input: iforce - bound the device-reported force-feedback effect index
  - Input: goodix - clamp the device-reported contact count
  - Input: elan_i2c - prevent division by zero and arithmetic underflow
  - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count
  - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count
  - Input: synaptics-rmi4 - unregister function handlers on physical driver registration failure
  - i2c: stm32f7: truncate clock period instead of rounding it
  - i2c: mpc: Fix timeout calculations
  - udmabuf: fix DMA direction mismatch in release_udmabuf()
  - KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode
  - KVM: VMX: Refresh GUEST_PENDING_DBG_EXCEPTIONS.BS on all injected #DBs
  - NTB: epf: Fix request_irq() unwind in ntb_epf_init_isr()
  - exfat: bound uniname advance in exfat_find_dir_entry()
  - module: decompress: check return value of module_extend_max_pages()
  - watchdog: apple: Add "apple,t8103-wdt" compatible
  - EDAC/i10nm: Don't fail probing if ADXL is missing
  - spi: fsl-lpspi: terminate the RX channel on TX prepare failure path
  - spi: fsl-lpspi: replace dmaengine_terminate_all() with dmaengine_terminate_sync()
  - arm64: fpsimd: Fix type mismatch in sme_{save,load}_state()
  - crypto: talitos/hash - fix SEC2 64k - 1 ahash request limitation
  - crypto: talitos/hash - remove useless wrapper
  - crypto: talitos/hash - rename first_desc/last_desc to first_request/last_request
  - crypto: talitos/hash - drop workqueue mechanism for SEC1
  - crypto: talitos/hash - use descriptor chaining for SEC1 instead of workqueue
  - crypto: talitos/hash - prepare SEC1 descriptor chaining, remove additional descriptor
  - crypto: talitos - move code in current_desc_hdr() into a standalone function
  - crypto: talitos - move dma mapping code in talitos_submit() into a standalone dma_map_request() function
  - crypto: talitos - move dma unmapping code in flush_channel() into a standalone dma_unmap_request() function
  - crypto: talitos - add chaining of arbitrary number of descriptor for the SEC1
  - crypto: talitos - use dma_sync_single_for_cpu() before reading descriptor header
  - crypto: drbg - Fix the fips_enabled priority boost
  - crypto: drbg - Fix drbg_max_addtl() on 64-bit kernels
  - crypto: caam - use print_hex_dump_devel to guard key hex dumps again
  - crypto: caam - use print_hex_dump_devel to guard key hex dumps
  - crypto: af_alg - Remove zero-copy support from skcipher and aead
  - partitions: aix: bound the pp_count scan to the ppe array
  - btrfs: do not trim a device which is not writeable
  - nvme-multipath: set BIO_REMAPPED on bios remapped to per-path namespace disks
  - dm-ioctl: report an error if a device has no table
  - hwrng: jh7110 - fix refcount leak in starfive_trng_read()
  - iio: temperature: ltc2983: Fix n_wires default bypassing rotation check
  - usb: typec: ucsi: cancel pending work on system suspend
  - usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove
  - usb: typec: ucsi: Pass full DP config payload in SET_NEW_CAM for DP alt mode
  - usb: typec: ucsi: Invert DisplayPort role assignment
  - usb: typec: tcpm: Validate SVID index in svdm_consume_modes()
  - usb: typec: class: drop PD lookup reference
  - usb: typec: anx7411: use devm_pm_runtime_enable()
  - usbip: vudc: fix NULL deref in vep_dequeue()
  - usbip: tools: support SuperSpeedPlus devices
  - USB: usb-storage: ene_ub6250: restore media-ready check
  - USB: ulpi: fix memory leak on registration failure
  - USB: serial: digi_acceleport: fix write buffer corruption
  - USB: serial: digi_acceleport: fix hard lockup on disconnect
  - USB: serial: digi_acceleport: fix broken rx after throttle
  - USB: serial: option: add Telit Cinterion FE990D50 compositions
  - USB: serial: keyspan_pda: fix information leak
  - usb: mtu3: unmap request DMA on queue failure
  - USB: misc: uss720: unregister parport on probe failure
  - USB: storage: include US_FL_NO_SAME in quirks mask
  - usb: sl811-hcd: disable controller wakeup on remove
  - USB: legousbtower: fix use-after-free on disconnect race
  - USB: quirks: add NO_LPM for the Samsung T5 EVO Portable SSD
  - USB: ldusb: fix use-after-free on disconnect race
  - USB: idmouse: fix use-after-free on disconnect race
  - usb: gadget: f_printer: take kref only for successful open
  - usb: gadget: udc: Fix use-after-free in gadget_match_driver
  - usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler
  - usb: free iso schedules on failed submit
  - usb: dwc3: meson-g12a: fix refcount leak in dwc3_meson_g12a_resume()
  - USB: core: add USB_QUIRK_NO_LPM for VIA Labs USB 2.0 hub
  - usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info()
  - usb: cdc_acm: Add quirk for Uniden BC125AT scanner
  - net: usb: kalmia: bound RX frame length in kalmia_rx_fixup()
  - bpf: Restore sysctl new-value from 1 to 0
  - xfs: fix unreachable BIGTIME check in dquot flush validation
  - xfs: use null daddr for unset first bad log block
  - media: mtk-jpeg: cancel workqueue on release for supported platforms only
  - nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers
  - hfs/hfsplus: zero-initialize buffer in hfs_bnode_read
  - HID: sensor-hub: Add sensor_hub_input_attr_read_values() for multi-byte reads
  - HID: letsketch: fix UAF on inrange_timer at driver unbind
  - HID: wacom: stop hardware after post-start probe failures
  - tools/mm/slabinfo: fix total_objects attribute name
  - tools/mm/slabinfo: Fix trace disable logic inversion
  - X.509: Fix validation of ASN.1 certificate header
  - clocksource/drivers/timer-tegra186: Fix support for multiple watchdog instances
  - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path
  - cpufreq: pcc: fix use-after-free and double free in _OSC evaluation
  - cpufreq: Fix hotplug-suspend race during reboot
  - cpufreq: intel_pstate: Sync policy->cur during CPU offline
  - firmware_loader: fix device reference leak in firmware_upload_register()
  - OPP: of: Fix potential memory leak in opp_parse_supplies()
  - smb: client: use unaligned reads in parse_posix_ctxt()
  - smb: client: fix query directory replay double-free
  - ksmbd: use opener credentials for delete-on-close
  - ksmbd: enforce FILE_READ_ATTRIBUTES on SMB_FIND_FILE_POSIX_INFORMATION
  - ksmbd: run set info with opener credentials
  - ksmbd: require source read access for duplicate extents
  - ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellation
  - ksmbd: serialize QUERY_DIRECTORY requests per file
  - ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE
  - smb/client: Fix error code in smb2_aead_req_alloc()
  - coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer()
  - fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked()
  - fs/ntfs3: zero-fill folios beyond i_valid in ntfs_read_folio()
  - fs/ntfs3: handle attr_set_size() errors when truncating files
  - fs/ntfs3: fsync files by syncing parent inodes
  - Bluetooth: L2CAP: validate option length before reading conf opt value
  - Bluetooth: fix UAF in bt_accept_dequeue()
  - Bluetooth: btnxpuart: Fix out-of-bounds firmware read in nxp_recv_fw_req_v3()
  - Bluetooth: bnep: pin L2CAP connection during netdev registration
  - Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  - netfilter: ebtables: terminate table name before find_table_lock()
  - netfilter: ebtables: module names must be null-terminated
  - mm: shrinker: fix NULL pointer dereference in debugfs
  - mfd: cros_ec: Delay dev_set_drvdata() until probe success
  - net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes
  - ipv4: igmp: remove multicast group from hash table on device destruction
  - gpio: eic-sprd: use raw_spinlock_t in the irq startup path
  - NTB: epf: Avoid calling pci_irq_vector() from hardirq context
  - fs/ntfs3: validate Dirty Page Table capacity in log_replay copy_lcns
  - debugobjects: Plug race against a concurrent OOM disable
  - Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_complete
  - audit: Fix data races of skb_queue_len() readers on audit_queue
  - net: af_key: initialize alg_key_len for IPComp states
  - crypto: amlogic - avoid double cleanup in meson_crypto_probe()
  - staging: rtl8723bs: fix OOB write in HT_caps_handler()
  - staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop
  - staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl()
  - staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop
  - staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop
  - staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth()
  - staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie()
  - staging: media: atomisp: reduce load_primary_binaries() stack usage
  - media: staging: ipu3-imgu: Add range check for imgu_css_cfg_acc_stripe
  - staging: vme_user: fix location monitor leak in tsi148 bridge
  - staging: vme_user: fix location monitor leak in fake bridge
  - staging: vme_user: bound slave read/write to the kern_buf size
  - tipc: fix out-of-bounds read in broadcast Gap ACK blocks
  - 6lowpan: fix NHC entry use-after-free on error path
  - usb: dwc3: run gadget disconnect from sleepable suspend context
  - USB: chaoskey: Fix slab-use-after-free in chaoskey_release()
  - virtio-mmio: fix device release warning on module unload
  - netfilter: ipset: fix race between dump and ip_set_list resize
  - mm/damon/ops-common: handle extreme intervals in damon_hot_score()
  - PCI: host-common: Request bus reassignment when not probe-only
  - PCI: altera: Do not dispose parent IRQ mapping
  - usb: typec: tcpci_rt1711h: unregister TCPCI port with devres
  - usb: xhci: Fix sleep in atomic context in xhci_free_streams()
  - binder: fix UAF in binder_free_transaction()
  - binder: fix UAF in binder_thread_release()
  - Bluetooth: btusb: fix wakeup source leak on probe failure
  - Bluetooth: btusb: fix use-after-free on marvell probe failure
  - Bluetooth: btusb: fix use-after-free on registration failure
  - Bluetooth: btusb: Add USB ID 2c4e:0128 for Mercusys MA60XNB
  - vfio/pci: Release the VGA arbiter client on register_device() failure
  - ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after successful writes
  - ALSA: usb-audio: Update Babyface Pro control caches only after successful writes
  - ALSA: usb-audio: Roll back quirk control caches on write errors
  - ALSA: usb-audio: Propagate US-16x08 write errors in route/mix EQ-switch put callbacks
  - ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  - ALSA: usb-audio: avoid kobject path lookup in DualSense match
  - ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup()
  - ALSA: ice1712: check snd_ctl_new1() return value
  - ALSA: gus: check snd_ctl_new1() return value
  - ALSA: firewire: isight: bound the sample count to the packet payload
  - ALSA: es1938: check snd_ctl_new1() return value
  - ALSA: cmipci: check snd_ctl_new1() return value
  - ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser
  - ALSA: ymfpci: check snd_ctl_new1() return value
  - ALSA: virtio: Add missing 384 kHz PCM rate mapping
  - iio: temperature: ltc2983: Fix reinit_completion() called after conversion start
  - iio: magnetometer: ak8975: Add missed pm_runtime_put_autosuspend() call
  - iio: light: veml6030: fix channel type when pushing events
  - iio: light: tsl2591: return actual error from probe IRQ failure
  - iio: light: opt3001: fix missing state reset on timeout
  - iio: light: gp2ap002: fix runtime PM leak on read error
  - iio: light: al3010: fix incorrect scale for the highest gain range
  - iio: imu: st_lsm6dsx: deselect shub page before reading whoami
  - iio: imu: inv_icm42600: fix timestamp clock period by using lower value
  - iio: imu: bmi160: add IRQF_NO_THREAD to data-ready trigger IRQ
  - iio: gyro: bmg160: wait full startup time after mode change at probe
  - iio: gyro: bmg160: bail out when bandwidth/filter is not in table
  - iio: chemical: scd30: Cleanup initializations and fix sign-extension bug
  - iio: adc: ti-ads124s08: Return reset GPIO lookup errors
  - iio: adc: spear: Initialize completion before requesting IRQ
  - iio: adc: lpc32xx: Initialize completion before requesting IRQ
  - iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error
  - iio: accel: bmc150: clamp the device-reported FIFO frame count
  - usb: gadget: function: rndis: add length check for header
  - usb: gadget: function: rndis: add length check to response query
  - !25689 backport minios patches from linux mainline
  - !25661 Fix CVE-2026-64544
  - ACPI: CPPC: Fix uninitialized ref variable in cppc_get_perf_caps()
  - ACPI: CPPC: Move reference performance to capabilities
  - crypto: talitos - rename first/last to first_desc/last_desc
  - crypto: talitos - fix SEC1 32k ahash request limitation
  - crypto: talitos - stop using crypto_ahash::init
  - Revert "crypto: talitos - fix SEC1 32k ahash request limitation"
  - Revert "crypto: talitos - rename first/last to first_desc/last_desc"
  - ACPI: NFIT: core: Fix possible NULL pointer dereference
  - ACPI: CPPC: Suppress UBSAN warning caused by field misuse
  - perf trace beauty fcntl: Fix build with older kernel headers
  - Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID
  - xfs: move ->iop_recover to xfs_defer_op_type
  - xfs: use xfs_defer_finish_one to finish recovered work items
  - xfs: dump the recovered xattri log item if corruption happens
  - xfs: recreate work items when recovering intent items
  - net: add a common function to compute features for upper devices
  - bonding: Correctly support GSO ESP offload
  - bonding: add ESP offload features when slaves support
  - bonding: Fix initial {vlan,mpls}_feature set in bond_compute_features
  - net, team, bonding: Add netdev_base_features helper
  - net: team: rename team to team_core for linking
  - nfsd: change nfs4_client_to_reclaim() to allocate data
  - nfsd: move name lookup out of nfsd4_list_rec_dir()
  - apparmor: advertise the tcp fast open fix is applied
  - nfsd: Don't reset the write verifier on a commit EAGAIN
  - NFSv4/flexfiles: reject zero filehandle version count
  - fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font()
  - i2c: core: fix irq domain leak on adapter registration failure
  - block: Avoid mounting the bdev pseudo-filesystem in userspace
  - f2fs: fix listxattr handling of corrupted xattr entries
  - f2fs: fix potential deadlock in gc_merge path of f2fs_balance_fs()
  - f2fs: fix potential deadlock in f2fs_balance_fs()
  - f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  - f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  - f2fs: validate orphan inode entry count
  - device property: initialize the remaining fields of fwnode_handle in fwnode_init()
  - drm/amd: Fix set but not used warnings
  - slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngd
  - slimbus: Convert to platform remove callback returning void
  - slimbus: qcom-ngd-ctrl: Correct PDR and SSR cleanup ownership
  - slimbus: qcom-ngd-ctrl: Fix probe error path ordering
  - userfaultfd: gate must_wait writability check on pte_present()
  - Bluetooth: btusb: mediatek: return error for failed reg access
  - Bluetooth: btusb: mediatek: remove the unnecessary goto tag
  - Bluetooth: btusb: mediatek: add MT7922 subsystem reset
  - Bluetooth: btusb: mediatek: reset the controller before downloading the fw
  - Bluetooth: btmtk: apply the common btmtk_fw_get_filename
  - nfsd: reset write verifier on deferred writeback errors
  - nfsd: release layout stid on setlease failure
  - bpf, arm64: Reject out-of-range B.cond targets
  - ia64: Make acpi_cpufreq_cpu_exit return void
  - drivers/ub/sentry: avoid unaligned cast in cis_ubios_remote_msg_cb()
  - drivers/ub/sentry: add NULL check for g_kbuf_server_cna in proc show handler
  - arm64/hwcap: Define hwcaps for 2023 DPISA features
  - arm64/cpufeature: Hook new identification registers up to cpufeature
  - arm64/sysreg: Update ID_AA64SMFR0_EL1 definition for DDI0601 2023-09
  - arm64/sysreg: Update ID_AA64ISAR2_EL1 defintion for DDI0601 2023-09
  - arm64/sysreg: Update SCTLR_EL1 for DDI0601 2023-09
  - arm64/sysreg: Add definition for FPMR
  - arm64/sysreg: Add definition for ID_AA64FPFR0_EL1
  - arm64/sysreg: Add definition for ID_AA64ISAR3_EL1
  - arm64/sysreg: Add definition for ID_AA64PFR2_EL1
  - !25080  netfilter: ebtables: move to two-stage removal scheme
  - !25685  nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path
  - !25631  crypto: qat - protect service table iterations with service_lock
  - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path
  - Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock
  - drivers/ub/sentry: add count == 0 check in proc write handlers
  - drivers/ub/sentry: add bounds check for reason in oom_rate_limit_check()
  - drivers/ub/sentry: fix NULL pointer dereference in str_to_eid() error path
  - cgroup/cpuset.c: Adapt schduler dynamic affinity for hotplug scenarios with cgroup v2
  - cgroup/cpuset.c: Comment out early when prefer_cpus cpumask equals
  - cpuset: Fix prefer_cpus ineffectiveness by tracking prefer_cpus
  - crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents
  - crypto: qat - protect service table iterations with service_lock
  - sched_ext: Avoid UAF in scx_root_enable_workfn() init failure path
  - netfilter: bridge: eb_tables: close module init race
  - netfilter: ebtables: move to two-stage removal scheme


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-165.0.0.150.20260806.8a97fe374529
changelog:
  - !25764  KVM: SEV: Ignore Port I/O requests of length '0'
  - !25624  firmware_loader: fix device reference leak in firmware_upload_register()
  - !25741  net/mlx5e: xsk: Fix unlocked writing to ICOSQ
  - KVM: SEV: Ignore Port I/O requests of length '0'
  - !25744  Bluetooth: ISO: Fix data-race on iso_pi fields in hci_get_route calls
  - !25734  *** CVE-2026-64513 ***
  - !25563 [OLK-6.6] Fix CVE-2026-64542
  - !25712 Fix CVE-2026-64435
  - !25743  bpf: Copy per-CPU map value padding in copy_map_value_long()
  - !25243 [OLK-6.6] Fix CVE-2026-64265
  - !25120 [OLK-6.6] Fix CVE-2026-53393
  - !25121 [OLK-6.6] Fix CVE-2026-53399
  - Bluetooth: ISO: Fix data-race on iso_pi fields in hci_get_route calls
  - !25735  nbd: skip the capacity-change printk on device bringup and release
  - bpf: Copy per-CPU map value padding in copy_map_value_long()
  - net/mlx5e: xsk: Fix unlocked writing to ICOSQ
  - !25721  ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser
  - !25714  vfio: Remove device debugfs before releasing devres
  - !25647  i2c: i801: fix hardware state machine corruption in error path
  - !25244 [OLK-6.6] Fix CVE-2026-64266
  - !25558 [OLK-6.6] Fix CVE-2026-64537
  - !25387 [OLK-6.6] Fix CVE-2026-64411
  - !25069 [OLK-6.6] Fix CVE-2026-64189
  - !25566 [OLK-6.6] Fix CVE-2026-64545
  - !25569 [OLK-6.6] Fix CVE-2026-64548
  - !25575 [OLK-6.6] Fix CVE-2026-64554
  - !25394 [OLK-6.6] Fix CVE-2026-64422
  - !25573 [OLK-6.6] Fix CVE-2026-64552
  - !25396 [OLK-6.6] Fix CVE-2026-64424
  - !25388 [OLK-6.6] Fix CVE-2026-64412
  - !25470 [OLK-6.6] Fix CVE-2026-64530
  - !25404 [OLK-6.6] Fix CVE-2026-64436
  - !25395 [OLK-6.6] Fix CVE-2026-64423
  - !25559 [OLK-6.6] Fix CVE-2026-64538
  - nbd: skip the capacity-change printk on device bringup and release
  - KVM: x86: Unconditionally recompute CR8 intercept on PPR update
  - KVM: x86: Move update_cr8_intercept() to lapic.c
  - ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser
  - vfio: Remove device debugfs before releasing devres
  - audit: Fix data races of skb_queue_len() readers on audit_queue
  - i2c: i801: fix hardware state machine corruption in error path
  - firmware_loader: fix device reference leak in firmware_upload_register()
  - netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment()
  - virtio-net: fix len check in receive_big()
  - bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data()
  - net, bpf: check master for NULL in xdp_master_redirect()
  - ipv6: ndisc: fix NULL deref in accept_untracked_na()
  - ipv6: Fix null-ptr-deref in fib6_nh_mtu_change().
  - bridge: cfm: reject invalid CCM interval at configuration time
  - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle
  - net: af_key: initialize alg_key_len for IPComp states
  - netpoll: fix a use-after-free on shutdown path
  - ipv4: igmp: remove multicast group from hash table on device destruction
  - net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes
  - netfilter: ebtables: module names must be null-terminated
  - netfilter: ebtables: terminate table name before find_table_lock()
  - fuse: re-lock request before returning from fuse_ref_folio()
  - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req
  - netfilter: ipset: fix race between dump and ip_set_list resize
  - nfsd: release layout stid on setlease failure
  - nfsd: reset write verifier on deferred writeback errors


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-165.0.0.150.20260807.7863d54f9740
changelog:
  - !25766 obmm: fix few potential problems by code scan
  - !25777 [OLK-6.6] ub: ubase&unic: 8 related changes
  - !25784  CVE-2026-64405 fixes
  - !25537 ub: cdma: fix UAF in mmu notifier release/unregister path
  - !24200 【OLK-6.6】drm: add display driver for NEW H3C SEMI EG210 chip
  - !25621 Fix CVE-2026-64540
  - !25620 Fix CVE-2026-64553
  - !24839 ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then SMB2_CANCEL
  - !23915 [OLK-6.6] Fix CVE-2026-46275
  - !23148 [OLK-6.6] Fix CVE-2026-31462
  - !20584 [OLK-6.6] Fix CVE-2025-68736
  - !25778 ethtool: rss: fix indir_table and hkey leak on get_rxfh failure
  - !25141 [OLK-6.6] Fix CVE-2026-63807
  - !25073 [OLK-6.6] Fix CVE-2026-64146
  - !25260 [OLK-6.6] Fix CVE-2026-64284
  - !25262 [OLK-6.6] Fix CVE-2026-64287
  - Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn()
  - Bluetooth: hci_sync: Fix attempting to send HCI_Disconnect to BIS handle
  - Bluetooth: hci_core: Remove check of BDADDR_ANY in hci_conn_hash_lookup_big_state
  - Bluetooth: separate CIS_LINK and BIS_LINK link types
  - ub: cdma: fix ioctl vs remove race by widening ctx_mutex scope
  - ub: cdma: revert cdma_ioctl to pre-security-fix version
  - obmm: bound the local-node iterator and gatekeeper predicate by OBMM_MAX_LOCAL_NUMA_NODES
  - obmm: register /dev/obmm after subsystem init
  - obmm: mirror selected helpers' Kconfig dependencies
  - obmm: log preimport rollback and resource-release failures
  - obmm: accumulate nr_freed across reclaim notifiers
  - obmm: fix use-after-free in conti_free_memory debug print
  - ethtool: rss: fix indir_table and hkey leak on get_rxfh failure
  - !25765  fix amdgpu_hmm_range_get_pages
  - !25774  crypto: qat - remove unused character device and IOCTLs
  - !25723 irqchip/irq-gic-v4: Fix state inconsistency in same_affinity_group
  - !25216 [OLK-6.6] Fix CVE-2026-64036
  - crypto: qat - remove unused character device and IOCTLs
  - irqchip/irq-gic-v4: Fix state inconsistency in same_affinity_group
  - !25742  l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname
  - !25768 sched/soft_domain: Fix NULL deref in unset and move ctx inheritance to online
  - sched/soft_domain: Fix NULL deref in unset and move ctx inheritance to online
  - drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  - drm/amdgpu: fix amdgpu_hmm_range_get_pages
  - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname
  - drm-engiant: fix: correct formatting issues reported by checkpatch
  - usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup()
  - net: psample: fix info leak in PSAMPLE_ATTR_DATA
  - ub: cdma: fix UAF in mmu notifier release/unregister path
  - ub: cdma: fix security vulnerabilities in event/ioctl paths
  - ub: cdma: fix security vulnerabilities in ioctl/mmap/event/mmu paths
  - ub: cdma: add a process to update the adev status in cdma_probe
  - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU
  - KVM: x86: Ensure vendor's exit handler runs before fastpath userspace exits
  - erofs: fix metabuf leak in inode xattr initialization
  - cgroup/rstat: validate cpu before css_rstat_cpu() access
  - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level
  - ub: ubase&unic: fix an issue where logs are printed in
  - ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then SMB2_CANCEL
  - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled
  - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths
  - ub: ubase: Resolve the EQ destruction timeout issue
  - ub: ubase: Resolved the issue that the cmdq resources are
  - net: unic: Error scenarios in the IP management need to
  - net: unic: Abnormal cqe debugfs does not show status 0x0
  - ub: ubase: Add UNIC/CDMA support for DTU init
  - ub: ubase: Resolve working queue may be scheduled after
  - net: unic: JFC Destroy Process Adaptation
  - drm: Add build config to compile H3C SEMI display drivers
  - drm: add H3C SEMI display drivers, including Display Controller and DisplayPort phy driver
  - drm/amdgpu: replace PASID IDR with XArray
  - drm/amdgpu: fix the idr allocation flags
  - drm/amdgpu: prevent immediate PASID reuse case
  - drm/amdgpu: Remove usage of the deprecated ida_simple_xx() API
  - landlock: Fix handling of disconnected directories
  - landlock: Fix cosmetic change
  - landlock: Optimize file path walks and prepare for audit support
  - landlock: Optimize the number of calls to get_access_mask slightly
  - selftests/landlock: Add tests for FS topology changes with network rules
  - landlock: Refactor layer helpers
  - landlock: Refactor landlock_find_rule/insert_rule helpers
  - landlock: Move and rename layer helpers
  - landlock: Allow FS topology changes for domains without such rule type
  - landlock: Make ruleset's access masks more generic


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-165.0.0.150.20260808.48b7ad3037cd
changelog:
  - !25810  x86/bugs: Enable IBPB flush on BPF JIT allocation
  - !24886 arm64: rsi: skip NS IPA alias addresses in arm64_rsi_is_protected
  - x86/bugs: Enable IBPB flush on BPF JIT allocation
  - !25205 [OLK-6.6] Fix CVE-2026-63963
  - !25202 Fix CVE-2026-64424
  - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers
  - netpoll: fix a use-after-free on shutdown path
  - arm64: rsi: skip NS IPA alias addresses in arm64_rsi_is_protected


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-165.0.0.150.20260809.62211c5707a3
changelog:
  - !25111 Fix CVE-2026-63872
  - !25823 Fix CVE-2026-64116
  - ipv6: ioam: add NULL check for idev in ipv6_hop_ioam()
  - ipv6/addrconf: annotate data-races around devconf fields (II)
  - esp: fix page frag reference leak on skb_to_sgvec failure
  - Revert "esp: fix page frag reference leak on skb_to_sgvec failure"
  - esp: fix page frag reference leak on skb_to_sgvec failure


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-165.0.0.150.20260810.0c12d91f028e
changelog:
  - !25828  mm: refactor mm_access() to not return NULL
  - !25834  bpf, cgroup: Fix storage null-ptr-deref after replacing prog
  - bpf, cgroup: Fix storage null-ptr-deref after replacing prog
  - !24789 [OLK-6.6][linux-6.6.y sync] Backport 6.6.78-6.6.79 LTS conflict Patches
  - mm: refactor mm_access() to not return NULL
  - md/raid5: implement pers->bitmap_sector()
  - nvme: move error logging from nvme_end_req() to __nvme_end_req()
  - block: change blk_mq_add_to_batch() third argument type to bool
  - block: cleanup and fix batch completion adding conditions


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-165.0.0.150.20260811.329ccfac7afe
changelog:
  - !25880  net: core: synchronize link-watch when carrier is queried
  - !25883  x86,fs/resctrl: Prevent out-of-bounds access while offlining CPU when SNC enabled
  - !25194 [OLK-6.6] Fix CVE-2026-63950
  - !25710 [OLK-6.6] Fix CVE-2026-64562
  - !25709 [OLK-6.6] Fix CVE-2026-64561
  - x86,fs/resctrl: Prevent out-of-bounds access while offlining CPU when SNC enabled
  - !25795  Backport CVE-2026-64361 fixes from 6.6 LTS
  - net: sysfs: fix locking in carrier read
  - net: core: synchronize link-watch when carrier is queried
  - !25850 sched: Add the qos scheduler's cgroup v2 interface
  - !25852  Fix ringbuffer swap cpu buffer issue
  - !25785  CVE-2026-53120
  - sched: Add the qos scheduler's cgroup v2 interface
  - ring-buffer: Use current_context for safe per-CPU buffer swap
  - ring-buffer: Remove jump to out label in ring_buffer_swap_cpu()
  - hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length
  - hfs/hfsplus: prevent getting negative values of offset/length
  - PCI: Initialize temporary device in new_id_store()
  - PCI: fix kabi breakage due to driver_override removal
  - PCI: use generic driver_override infrastructure
  - KVM: nVMX: Hide shadow VMCS right after VMCLEAR
  - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available
  - mm/rmap: initialize nr_pages to 1 at loop start in try_to_unmap_one


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-165.0.0.150.20260818.891e2121139a
changelog:
  - !26166  cdrom: fix stack out-of-bounds read in CDROMVOLCTRL
  - !26169 ub: udma: use memory pool to manage reserved va.
  - !26070 iommu/ummu: Move the path of the hisi_ummu.h file
  - !26067 iommu/ummu: Write UMAU mem attr bits into ATE start_addr
  - !26069 iommu/ummu: Refactor EID bypass tecte construction
  - !26131 ub:ubus: add vport disable completion notify
  - !26135 [OLK-6.6] ub: ubase: 5 related changes
  - !26133 ub: ub_fwctl: Support SDC fault detection for switching chips.
  - ub: udma: use memory pool to manage reserved va.
  - ub: udma: fix safe mode related problem.
  - ub: udma: Adapt the SVM to query the PASpace interface.
  - cdrom: fix stack out-of-bounds read in CDROMVOLCTRL
  - !26112 perf tools: Fix config4 support in PMU event parsing
  - !25935 [OLK-6.6] Fix CVE-2026-68160
  - perf tools: Fix config4 support in PMU event parsing
  - !26123  tracing: Check return value of __register_event() in trace_module_add_events()
  - !26086 urma: support dev/eid sharing mode
  - ub: ub_fwctl: Support SDC fault detection for switching chips.
  - !26062 ub:ubus: Fix UAF in ub_cancel_retry_work_sync by draining retry_list from head
  - !25728 virtio_balloon: add memop virtqueue for host-initiated memory operations
  - ub: ubase: support firmware using PA address to access
  - !25692 urma: allow set priority for urma_ping
  - tracing: Check return value of __register_event() in trace_module_add_events()
  - ub: ubase: Supports debugfs interfaces for querying
  - ub: ubase: Supports version compatibility
  - urma: support dev/eid sharing mode
  - !26110 libceph: reject zero bucket types in crush_decode
  - !26055 Fix CVE-2026-64563
  - libceph: reject zero bucket types in crush_decode
  - !26084 ub: ub_fwctl: Enhance network communication maintenance information.
  - ub:ubus: add vport disable completion notify
  - ub: ub_fwctl: Enhance network communication maintenance information.
  - !26051 Ethernet: Linkdata: enable SXE2 Ethernet and RDMA driver modules on ARM64
  - !25958 [OLK-6.6] Fix CVE-2026-68255
  - !25960 [OLK-6.6] Fix CVE-2026-68271
  - !26047 ub/obmm: add per-node max_total cap for pooled memory
  - ub/obmm: fix max_total empty write silently clearing the cap
  - ub/obmm: add per-node max_total cap for pooled memory
  - !26050 ub/ubmem-vmmu: Fix parameter validation and initialization issues.
  - virtio_balloon: add memop virtqueue for host-initiated memory operations
  - !26054 ub: udma: fix log print problem.
  - !26061  smb/client: fix chown/chgrp with SMB3 POSIX Extensions
  - !26058  CVE-2026-64137
  - !26017 backport minios part2 patches from linux mainline.
  - iommu/ummu: Move the path of the hisi_ummu.h file
  - iommu/ummu: Refactor EID bypass tecte construction
  - mm: export reclaim/compaction interfaces and buddy stats for proactive memory management
  - vifo ub:ubus: vfio-ub: protect resmap lazymapping with resmap_lock mutex
  - ub:ubus: Fix UAF in ub_cancel_retry_work_sync by draining retry_list from head
  - ub:ubus: Clear TBA_L/H on ub_eu_table_init_common write failure before dma_free
  - ub:ubus: Fix concurrency UAF in ub_enum_bfs_route_cal by localizing BFS scratch
  - ub:ubus: Fix ub_intr_map_region offset+size winding risk
  - ub:ubus: debug ub_ioctl_bus_instance_bind
  - ub:ubus: Limit the frequency of log output
  - ub:ubus: Fix ubhp_put_slot not called if work is pending duing cancel_work issue
  - ub:ubus: Fix ub_route_sync_dev route_table_entry bit number not enough issue
  - ub:ubus: Test then assign priv flag are two steps not atomic
  - smb/client: fix chown/chgrp with SMB3 POSIX Extensions
  - ub:ubus: Fix configuration access concurrency hard dog panic issue
  - !25787 [OLK-6.6] Additional Venice Essential patches for openEuler OLK-6.6
  - iommu/ummu: Write UMAU mem attr bits into ATE start_addr
  - iommu/ummu: Strengthen ummu_idx_mask validation in tdev attr check
  - iommu/ummu: Update page table granule handling for UMAU
  - smb: client: require net admin for CIFS SWN netlink
  - genetlink: Use internal flags for multicast groups
  - !26053 ub:ubus: Implement the UBUS-FIRMWARE version exchange function.
  - urma: allow to set priority for urma_ping
  - rhashtable: clear stale iter->p on table restart
  - ub: udma: fix log print problem.
  - Ethernet: Linkdata: enable SXE2 Ethernet and RDMA driver modules on ARM64
  - ub:ubus: Implement the UBUS-FIRMWARE version exchange function.
  - ub/ubmem-vmmu: Fix parameter validation and initialization issues.
  - !26008 [OLK-6.6] net: ipv6: clear suppressed fib6 rule result
  - !26011 [OLK-6.6] backport important bugfix for igbvf driver from upstream linux-6.6.y
  - !26023  sctp: fix auth_hmacs array size in struct sctp_cookie
  - !25919 [OLK-6.6] Fix CVE-2026-68147
  - arm64: Kconfig: Add support for LSUI
  - arm64: armv8_deprecated: Disable swp emulation when FEAT_LSUI present
  - arm64: futex: Support futex with FEAT_LSUI
  - arm64: futex: Refactor futex atomic operation
  - arm64: cpufeature: Add FEAT_LSUI
  - !25944 [OLK-6.6] Fix CVE-2026-68186
  - !26026 urma: fix pointer API return value comments
  - sctp: fix auth_hmacs array size in struct sctp_cookie
  - !25978 urma: ratelimit JFC cleanup error logs
  - arm64/sysreg: Update ID_AA64ISAR3_EL1 to DDI0601 2024-09
  - arm64: sysreg: Add missing ID_AA64ISAR[13]_EL1 fields and variants
  - !25936  erofs: fix stack-out-of-bounds in erofs_put_metabuf
  - !26015  sctp: validate embedded INIT chunk and address list lengths in cookie
  - !26010  i2c: core: fix adapter deregistration race
  - sctp: validate embedded INIT chunk and address list lengths in cookie
  - !25881  net Fix CVE-2026-45905
  - i2c: core: fix adapter deregistration race
  - igbvf: Fix leak in TX DMA error cleanup
  - !24350 perf arm-spe: Extend branch operations
  - net: ipv6: clear suppressed fib6 rule result
  - !25885  netfilter: nf_tables: add hook transactions for device deletions
  - !25884  netfilter: Fix CVE-2026-64078
  - !25889 v2  bonding: Fix CVE-2026-52975
  - !25992 [OLK-6.6] Fix CVE-2026-68354
  - !24758 [OLK-6.6] KVM: SVM: Disable AVIC IPI virtualization on Hygon Family 18h (erratum #1235)
  - urma: fix pointer API return value comments
  - firewire: net: Fix fragmented datagram reassembly
  - urma: ratelimit JFC cleanup error logs
  - drm/nouveau: fix reversed error cleanup order in ucopy functions
  - drm/virtio: bound EDID block reads to the response buffer
  - !25940 v2  mm/memory: fix spurious warning when unmapping device-private/exclusive pages
  - !24883 scsi: hst2dr: Add driver for Sage HL3210 SAS HBA
  - binfmt_misc: set have_execfd only once the interpreter is opened
  - mm/memory: fix spurious warning when unmapping device-private/exclusive pages
  - erofs: fix stack-out-of-bounds in erofs_put_metabuf
  - ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps()
  - fscrypt: Avoid dynamic allocation in fscrypt_get_devices()
  - scsi: hst2dr: Fix sas_port cleanup in transport_port_add error path
  - bonding: annotate data-races arcound churn variables
  - bonding: fix NULL pointer dereference in actor_port_prio setting
  - bonding: 3ad: implement proper RCU rules for port->aggregator
  - bonding: print churn state via netlink
  - bonding: add support for per-port LACP actor priority
  - net: bonding: add broadcast_neighbor option for 802.3ad
  - netfilter: nf_tables: add hook transactions for device deletions
  - netfilter: x_tables: add and use xtables_unregister_table_exit
  - netfilter: x_tables: add and use xt_unregister_table_pre_exit
  - netfilter: x_tables: allocate hook ops while under mutex
  - netfilter: x_tables: allow initial table replace without emitting audit log message
  - net: Use __GENKSYMS__ to fix kabi breakage of icmp
  - xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path
  - net: Switch to skb_dstref_steal/skb_dstref_restore for ip_route_input callers
  - ipv4: Convert ip_route_input() to dscp_t.
  - ipv4: Convert icmp_route_lookup() to dscp_t.
  - ipv4: icmp: Unmask upper DSCP bits in icmp_route_lookup()
  - ipv4: icmp: Pass full DS field to ip_route_input()
  - net/ipv4: add tracepoint for icmp_send
  - scsi: hst2dr: Fix sas_port handling in transport_port_add
  - scsi: hst2dr: Fix multiple stability and correctness issues
  - scsi: hst2dr:  reorder config entries for SCSI drivers
  - arm-spe: Fix config4 KABI breakage
  - scsi:hst2dr:Modify some grammar formats
  - scsi: hst2dr: Add driver for Sage HL3210 SAS HBA
  - perf/x86/amd/uncore: Use Node ID to identify DF and UMC domains
  - perf/x86/amd/uncore: Fix DF and UMC domain identification
  - x86/amd_nb: Clean up early_is_amd_nb()
  - ub: ubase: add interface to query uboe_type UMV entries
  - ub: ubase: support to query a group of ub dl pkt stats
  - KVM: SVM: Disable AVIC IPI virtualization on Hygon Family 18h (erratum #1235)
  - KVM: SVM: Disable (x2)AVIC IPI virtualization if CPU has erratum #1235
  - KVM: SVM: Add enable_ipiv param, never set IsRunning if disabled
  - KVM: VMX: Move enable_ipiv knob to common x86
  - ARM: pmuv3: Add missing write_pmuacr()
  - perf: arm_pmu: Remove event index to counter remapping
  - perf/arm: Move 32-bit PMU drivers to drivers/perf/
  - ARM: Delete ARM11MPCore perf leftovers
  - ARM: Delete ARM11MPCore (ARM11 ARMv6K SMP) support
  - perf: arm_pmu: Use of_property_present()
  - arm64: sysreg: Update PMSIDR_EL1 description
  - perf docs: arm-spe: Document new SPE filtering features
  - perf tools: Add support for perf_event_attr::config4
  - tools headers UAPI: Sync linux/perf_event.h with the kernel sources
  - perf: arm_spe: Add support for filtering on data source
  - perf: Add perf_event_attr::config4
  - KVM: arm64: Add trap configs for PMSDSFR_EL1
  - KVM: arm64: nv: Add include containing the VNCR_EL2 offsets
  - arm64/boot: Enable EL2 requirements for SPE_FEAT_FDS
  - arm64/boot: Factor out a macro to check SPE version
  - perf: arm_spe: Add support for FEAT_SPE_EFT extended filtering
  - perf: arm_spe: Expose event filter
  - perf: arm_spe: Support FEAT_SPEv1p4 filters
  - arm64: sysreg: Add new PMSFCR_EL1 fields and PMSDSFR_EL1 register
  - perf: arm_spe: Add format option for discard mode
  - arm64: sysreg: Add registers trapped by HDFG{R,W}TR2_EL2
  - arm64/sysreg: Allow a 'Mapping' descriptor for system registers
  - arm64/boot: Enable EL2 requirements for FEAT_PMUv3p9
  - perf/arm_pmuv3: Add PMUv3.9 per counter EL0 access control
  - arm64/sysreg: Update ID_DFR0_EL1 register fields
  - arm64/sysreg: Add register fields for HFGWTR2_EL2
  - arm64/sysreg: Add register fields for HFGRTR2_EL2
  - arm64/sysreg: Add register fields for HFGITR2_EL2
  - arm64/sysreg: Add register fields for HDFGWTR2_EL2
  - arm64/sysreg: Add register fields for HDFGRTR2_EL2
  - arm64/sysreg: Update register fields for ID_AA64MMFR0_EL1
  - arm64: Handle BRBE booting requirements
  - arm64: el2_setup.h: Make __init_el2_fgt labels consistent, again
  - arm64: el2_setup.h: Rename some labels to be more diff-friendly
  - Revert "arm64/boot: Enable EL2 requirements for BRBE"
  - KVM: arm64: Shave a few bytes from the EL2 idmap code


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-167.0.0.151
changelog:
  - !26321 v4  irqbypass: Cleanups and a perf improvement
  - irqbypass: Require producers to pass in Linux IRQ number during registration
  - irqbypass: Use xarray to track producers and consumers
  - irqbypass: Use guard(mutex) in lieu of manual lock+unlock
  - irqbypass: Use paired consumer/producer to disconnect during unregister
  - irqbypass: Explicitly track producer and consumer bindings
  - irqbypass: Take ownership of producer/consumer token tracking
  - irqbypass: Drop superfluous might_sleep() annotations
  - irqbypass: Drop pointless and misleading THIS_MODULE get/put
  - !26256 [OLK-6.6][linux-6.6.y sync] Backport 6.6.148-6.6.150 LTS Patches
  - !26193 iommu/ummu: Move the mmu notifier TLBi to driver layer
  - !25930 etmem: fix page reference leak in add_page_for_swap()
  - !26205 ub: cdma: fix AB-BA lock inversion deadlock and remove dead unmap code
  - !26254 [OLK-6.6] Fix CVE-2026-74480
  - x86/bugs: Make Safe-RET robust against interrupt injection
  - Revert "x86/bugs: Make Safe-RET robust against interrupt injection"
  - x86/bugs: Make Safe-RET robust against interrupt injection
  - net: bridge: stop fast-leave after deleting a port group
  - ub: cdma: cdma: fix umem leak in jfs user-path entry_cnt power-of-2 check
  - !26204 ub: ub_fwctl: Provide a user interface for ubase query function.
  - !26042 [OLK-6.6][linux-6.6.y sync] Backport 6.6.147-6.6.148 LTS Patches
  - ub: ub_fwctl: Provide a user interface for ubase query function.
  - !25994 [OLK-6.6] Fix CVE-2026-68365
  - ub: cdma: fix AB-BA lock inversion deadlock and remove dead unmap code
  - ub: cdma: add RLIMIT_MEMLOCK/pinned_vm governance for user-space GUP pinning
  - ub: cdma: add power-of-2 check for jfc/jfs entry_cnt in user path
  - ub: cdma: fix UAF in debugfs show paths on queue->jfs/queue->jfc
  - iommu/ummu: Move the mmu notifier TLBi to driver layer
  - iommu/ummu: Add ummu platform erratum mechanism
  - iommu/ummu: Move ioplb_sync to flush.c
  - rxrpc: Fix irq-disabled in local_bh_enable()
  - Revert "drm/amdgpu: fix aperture mapping leak"
  - can: isotp: fix timer drain order, wakeup handling and tx_gen ordering
  - can: use skb hash instead of private variable in headroom
  - KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug
  - rxrpc: Disable IRQ, not BH, to take the lock for ->attend_link
  - udmabuf: Ensure to perform cache synchronisation in begin_cpu_udmabuf()
  - ASoC: mediatek: mt8195: Set ETDM1/2 IN/OUT to COMP_DUMMY()
  - ASoC: mediatek: mt8195: Add platform entry for ETDM1_OUT_BE dai link
  - mm/damon/core: disallow overlapping input ranges for damon_set_regions()
  - mm/damon/core: validate ranges in damon_set_regions()
  - net: ipa: fix SMEM state handle leaks in SMP2P init
  - net: macb: drop in-flight Tx SKBs on close
  - ata: libata-core: Reject an invalid concurrent positioning ranges count
  - octeontx2-pf: fix SQB pointer leak on init failure
  - ipmi: fix refcount leak in i_ipmi_request()
  - bootconfig: fix NULL-pointer arithmetic in xbc_snprint_cmdline()
  - bootconfig: move xbc_snprint_cmdline() to lib/bootconfig.c
  - bootconfig: do not put quotes on cmdline items unless necessary
  - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF
  - gpio: mt7621: avoid corruption of shared interrupt trigger state
  - net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink
  - net: mana: Validate the packet length reported by the NIC
  - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock()
  - wifi: libertas_tf: fix use-after-free in lbtf_free_adapter()
  - tracing/user_events: Fix use-after-free in user_event_mm_dup()
  - workqueue: Add system_percpu_wq and system_dfl_wq
  - workqueue: Factor out init_cpu_worker_pool()
  - Input: ims-pcu - fix firmware leak in async update
  - firmware_loader: introduce __free() cleanup hanler
  - dm-verity: make error counter atomic
  - dm-verity: avoid double increment of &use_bh_wq_enabled
  - ovl: use linked upper dentry in copy-up tmpfile
  - NFS: Charge unstable writes by request size, not folio size
  - nfs: remove dead code for the old swap over NFS implementation
  - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic)
  - i2c: imx: separate atomic, dma and non-dma use case
  - platform/x86: dell-laptop: fix missing cleanups in init error path
  - platform/x86: dell-smbios: Move request functions for reuse
  - dmaengine: dw-edma-pcie: Reject devices without driver data
  - dmaengine: dw-edma: Fix confusing cleanup.h syntax
  - dma: dw-edma: Fix build warning in dw_edma_pcie_probe()
  - taskstats: retain dead thread stats in TGID queries
  - taskstats: fill_stats_for_tgid: use for_each_thread()
  - mtd: rawnand: Pause continuous reads at block boundaries
  - mtd: rawnand: Ensure all continuous terms are always in sync
  - mtd: rawnand: Add a helper for calculating a page index
  - mm/mm_init: fix pageblock migratetype for ZONE_DEVICE compound pages
  - SUNRPC: Return an error from xdr_buf_to_bvec() on overflow
  - SUNRPC: Add helpers to convert xdr_buf byte ranges to scatterlists
  - sunrpc: allocate a separate bvec array for socket sends
  - NFSD: pass nfsd_file to nfsd_iter_read()
  - netfilter: nft_fib: reject fib expression on the netdev egress hook
  - netfilter: nf_tables: remove register tracking infrastructure
  - netfilter: nf_tables: Remove unused nft_reduce_is_readonly()
  - netfilter: nf_conntrack_sip: validate skb_dst() before accessing it
  - netfilter: nf_conntrack_sip: remove net variable shadowing
  - netfilter: nft_set_pipapo: move prove_locking helper around
  - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions
  - ASoC: mediatek: mt8183: Check runtime resume during probe
  - ASoC: mediatek: mt8192: Check runtime resume during probe
  - ASoC: mediatek: mt8192-afe-pcm: Simplify probe() with local dev variable
  - ASoC: mediatek: Use common mtk_afe_pcm_platform with common probe cb
  - ASoC: mediatek: mt8192-afe-pcm: Simplify with dev_err_probe()
  - ASoC: mediatek: mt8192-afe-pcm: Convert to devm_pm_runtime_enable()
  - ASoC: mediatek: mt8195: Remove afe-dai component and rework codec link
  - fbdev: efifb: fix memory leak in efifb_probe()
  - fbdev/efifb: Replace references to global screen_info by local pointer
  - octeontx2-vf: clear stale mailbox IRQ state before request_irq()
  - octeontx2-pf: clear stale mailbox IRQ state before request_irq()
  - octeontx2: Annotate mmio regions as __iomem
  - VDUSE: avoid leaking information to userspace
  - vduse: take out allocations from vduse_dev_alloc_coherent
  - vduse: remove unused vaddr parameter of vduse_domain_free_coherent
  - vduse: Use fixed 4KB bounce pages for non-4KB page size
  - rxrpc: Fix socket notification race
  - rxrpc: Fix notification vs call-release vs recvmsg
  - rxrpc: Use irq-disabling spinlocks between app and I/O thread
  - rxrpc: Don't need barrier for ->tx_bottom and ->acks_hard_ack
  - tipc: restrict socket queue dumps in enqueue tracepoints
  - fbcon: Use correct type for vc_resize() return value
  - fbcon: Rename struct fbcon_ops to struct fbcon_par
  - rxrpc: serialize kernel accept preallocation with socket teardown
  - rxrpc: Pull out certain app callback funcs into an ops table
  - afs: Turn the afs_addr_list address array into an array of structs
  - afs: Annotate struct afs_addr_list with __counted_by
  - serial: max310x: implement gpio_chip::get_direction()
  - serial: max310x: replace bare use of 'unsigned' with 'unsigned int' (checkpatch)
  - ALSA: hda: Fix cached processing coefficient verbs
  - ALSA: hda: conexant: Remove mic bias threshold override
  - i2c: davinci: Unregister cpufreq notifier on probe failure
  - fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region()
  - dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning
  - udmabuf: Do not create malformed scatterlists
  - net: pcs: xpcs: fix SGMII state reading
  - io_uring/rw: fix missing ERESTARTSYS conversion in read paths
  - drm/amd/display: Fix dcn32 DTB DTO update breaking live pixel rate sources
  - exfat: validate cluster allocation bits of the allocation bitmap
  - openvswitch: fix GSO userspace truncation underflow
  - ksmbd: validate ACE size against SID sub-authorities
  - ksmbd: restore DACL size on check_add_overflow() to avoid malformed ACL
  - ksmbd: validate num_subauth when copying ACE in set_ntacl_dacl
  - net: qrtr: ns: Raise node count limit to 512
  - drm/amdgpu: fix aperture mapping leak
  - drm/amdgpu: invoke pm_genpd_remove() before freeing genpd
  - drm/amdgpu: fix division by zero with invalid uvd dimensions
  - drm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe()
  - drm/amdgpu/vcn4: avoid rereading IB param length
  - drm/amdgpu/vce: fix integer overflow in image size
  - drm/amdgpu/sdma4.4.2: replace BUG_ON() with WARN_ON()
  - drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON()
  - drm/amdgpu/gfx9.4.3: replace BUG_ON() with WARN_ON()
  - drm/amdgpu/gfx8: drop unecessary BUG_ON()
  - drm/amdgpu/gfx11: replace BUG_ON() with WARN_ON()
  - drm/amdgpu/gfx10: replace BUG_ON() with WARN_ON()
  - drm/amd/pm: make pp_features read-only when scpm is enabled
  - vxlan: mdb: Fix source list corruption on a failed replace
  - tipc: clear sock->sk on the failed-insert path in tipc_sk_create()
  - pppoe: reload header pointer after dev_hard_header()
  - mctp: serial: handle zero-length frames to prevent rx buffer overflow
  - mac802154: llsec: reject frames shorter than the authentication tag
  - mac802154: hold an interface reference across the scan worker
  - ila: reload IPv6 header after pskb_may_pull in checksum adjust
  - ice: use READ_ONCE() to access cached PHC time
  - ksmbd: defer destroy_previous_session() until after NTLM authentication
  - rbd: Reset positive result codes to zero in object map update path
  - net: hip04: fix RX buffer leak on build_skb failure
  - net/x25: fix use-after-free in x25_kill_by_neigh()
  - net/iucv: fix use-after-free of a severed iucv_path
  - net/af_iucv: fix NULL deref in afiucv_hs_callback_syn()
  - geneve: require CAP_NET_ADMIN in the device netns for changelink
  - net: slip: serialize receive against buffer reallocation
  - vxlan: require CAP_NET_ADMIN in the device netns for changelink
  - phonet: pep: fix use-after-free in pep_get_sb()
  - iommu/vt-d: Disallow SVA if page walk is not coherent
  - fscrypt: Add missing superblock check in find_or_insert_direct_key()
  - fs: preserve ACL_DONT_CACHE state in forget_cached_acl()
  - binfmt_elf_fdpic: only honour the first PT_INTERP
  - libceph: remove debugfs files before client teardown
  - libceph: reject zero bucket types in crush_decode
  - libceph: Reject monmaps advertising zero monitors
  - libceph: refresh auth->authorizer_buf{,_len} after authorizer update
  - libceph: guard missing CRUSH type name lookup
  - libceph: Fix multiplication overflow in decode_new_up_state_weight()
  - libceph: bound get_version reply decode to front len
  - ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps()
  - sctp: don't free the ASCONF's own transport in DEL-IP processing
  - mptcp: only set DATA_FIN when a mapping is present
  - mptcp: decrement subflows counter on failed passive join
  - Revert "arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates"
  - arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates
  - tracing/probes: Prevent out-of-bounds write in __trace_probe_log_err()
  - tracing/probes: Fix potential underflow in LEN_OR_ZERO macro
  - tracing/probes: Avoid temporary buffer truncation in trace_probe_match_command_args()
  - tracing/eprobe: Fix exact system name matching in eprobe_dyn_event_match()
  - tracing: Fix resource leak on mmiotrace trace_pipe close
  - tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev
  - intel_th: fix MSC output device reference leak
  - mei: bus: access mei_device under device_lock on cleanup
  - serial: sc16is7xx: implement gpio get_direction() callback
  - comedi: comedi_parport: deal with premature interrupt
  - x86/boot/compressed: Disable jump tables
  - cdrom: fix stack out-of-bounds read in CDROMVOLCTRL
  - LoongArch: Fix oops during single-step debugging
  - platform/loongarch: laptop: Explicitly reset bl_powered state when suspend
  - exec: fix unsigned loop counter wrap in transfer_args_to_stack()
  - Bluetooth: RFCOMM: Fix session UAF in set_termios
  - Bluetooth: hci_sync: Protect UUID list traversal
  - staging: rtl8723bs: fix inverted HT40 secondary channel offset
  - staging: rtl8723bs: fix OOB reads in rtw_get_wps_ie()
  - wifi: brcmfmac: make release_scratchbuffers idempotent
  - wifi: mt76: mt7921: drop TXRX_NOTIFY on non-mmio buses
  - wifi: mt76: mt7615: drop TXRX_NOTIFY on non-mmio buses
  - wifi: wilc1000: validate assoc response length before subtracting header
  - wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper
  - wifi: ath6kl: fix OOB access from firmware ADDBA window size
  - ALSA: seq: close a re-opened queue timer in the destructor
  - media: vpif_capture: fix OF node reference imbalance
  - media: vivid: check for vb2_is_busy() when toggling caps
  - media: vivid: add vivid_update_reduced_fps()
  - media: vimc: fix reference leak on failed device registration
  - media: vidtv: fix reference leak on failed device registration
  - media: vb2: use ssize_t for vb2_read/vb2_write
  - media: v4l2-ctrls: validate HEVC active reference counts
  - media: v4l2-ctrls-request: add NULL check in v4l2_ctrl_request_complete()
  - media: ti: vpe: unwind v4l2 device registration on probe error
  - media: tegra-video: vi: fix invalid u32 return value in format lookup
  - media: sun4i-csi: Return queued buffers on start_streaming() failure
  - media: stm32: dcmi: unregister notifier on probe failure
  - media: saa7134: Fix a possible memory leak in saa7134_video_init1
  - media: rtl2832_sdr: Return queued buffers on start_streaming() failure
  - media: rtl2832: fix use-after-free in rtl2832_remove()
  - media: radio-si476x: Unregister v4l2_device on probe failure
  - media: pwc: Return queued buffers on start_streaming() failure
  - media: pwc: Drain fill_buf on start_streaming() failure
  - media: pci: dm1105: Free allocated workqueue
  - media: nxp: imx8-isi: Fix scale factor calculation for hardware rounding
  - media: nxp: imx8-isi: Fix potential out-of-bounds issues
  - media: nxp: imx8-isi: Fix missing v4l2_subdev_cleanup() in pipe init error path
  - media: nxp: imx8-isi: Clean up already-initialized pipes on probe failure
  - media: nxp: imx8-isi: Add missing v4l2_subdev_cleanup() in crossbar and pipe
  - media: msi2500: Return queued buffers on start_streaming() failure
  - media: meson: vdec: Fix memory leak in error path of vdec_open
  - media: marvell-cam: fix missing pci_disable_device() on remove
  - media: cx23885: add ioremap return check and cleanup
  - media: cx231xx: fix devres lifetime
  - media: cedrus: skip invalid H.264 reference list entries
  - media: cedrus: Fix missing cleanup in error path
  - media: cedrus: clean up media device on probe failure
  - media: cec: seco: unregister adapter on IR probe failure
  - media: aspeed: fix missing of_reserved_mem_device_release() on probe failure
  - media: airspy: Return queued buffers on start_streaming() failure
  - drm/vc4: Prevent shader BO mappings from becoming writable
  - drm/vmwgfx: Validate vmw_surface_metadata::array_size
  - drm/amdgpu: fix bo->pin leaking in amdgpu_bo_create_reserved
  - drm/amd/display: set new_stream to NULL after release
  - drm/amd/pm/ci: Don't disable MCLK DPM on Bonaire 0x6658 (R7 260X)
  - drm/amdgpu: Fix VFCT bus number matching with soft filter
  - drm/i915/gem: Fix NULL deref in I915_CONTEXT_PARAM_SSEU
  - drm/i915/gem: Do not leak siblings[] on proto context error
  - drm/i915: Return NULL on error in active_instance
  - drm/amdgpu/sdma5.0: replace BUG_ON() with WARN_ON()
  - drm/amdgpu/sdma5.2: replace BUG_ON() with WARN_ON()
  - drm/amdgpu/sdma6.0: replace BUG_ON() with WARN_ON()
  - drm/amd/display: detect_link_and_local_sink: DP alt mode timeout path leaks prev_sink reference
  - drm/amd/display: Handle struct drm_plane_state.ignore_damage_clips
  - drm/amdkfd: Check bounds in allocate_event_notification_slot
  - drm/radeon: fix r100_copy_blit for large BOs
  - drm/nouveau/acr: fix missing nvkm_done() in error path of nvkm_acr_oneinit()
  - drm/i915/gem: Add missing nospec on parallel submit slot
  - drm/amdgpu: validate CP_GFX_SHADOW chunk size in CS pass1
  - drm/amdgpu: Fix amdgpu_bo_move() when old_mem and new_mem are both GTT
  - drm/amdgpu/uvd: Place VCPU BO only in VRAM for UVD 4.x and older
  - drm/amdgpu/uvd: Fix forcing MSG, FB BOs into VCPU segment when it isn't at 0 (v2)
  - drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsers
  - drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  - drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply parsers
  - drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  - drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  - bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg()
  - ice: fix LAG recipe to profile association
  - net: ipv6: fix dif and sdif mismatch in raw6_icmp_error
  - net/mlx5e: Reject unsupported CB Shaper TSA in ETS validation
  - net/mlx5e: Report zero bandwidth for non-ETS traffic classes
  - net/mlx5: E-Switch, fix zero num_dest in prio_tag egress vlan rule
  - net: qrtr: restrict socket creation to the initial network namespace
  - ppp: annotate data races in ppp_generic
  - ppp: enable TX scatter-gather
  - ppp: convert to percpu netstats
  - ppp: use IFF_NO_QUEUE in virtual interfaces
  - ipv4: icmp: fill flow parameters in icmp_route_lookup decoy lookup
  - octeontx2-vf: set TC flower flag on MCAM entry allocation
  - net: stmmac: enable the MAC on link up for all supported speeds
  - net: stmmac: reset residual action in L3L4 filters on delete
  - net: stmmac: fix l3l4 filter rejecting unsupported offload requests
  - tipc: fix u16 MTU truncation in media and bearer MTU validation
  - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets
  - sctp: auth: verify auth requirement when auth_chunk is NULL
  - net: dpaa: fix mode setting
  - net: hsr: fix memory leak on slave unregistration by removing synced VLANs
  - net: bridge: vlan: fix vlan range dumps starting with pvid
  - amt: make the head writable before rewriting the L2 header
  - amt: re-read skb header pointers after every pull
  - wifi: brcmfmac: fix 802.1X-SHA256 call trace warning
  - wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996_mcu_sta_bfer_eht()
  - wifi: mt76: mt7996: check pointer returned by mt76_connac_get_he_phy_cap()
  - wifi: mt76: connac: fix possible NULL-pointer deref in mt76_connac_mcu_uni_bss_he_tlv()
  - wifi: mt76: mt7915: guard HE capability lookups
  - tipc: fix infinite loop in __tipc_nl_compat_dumpit
  - nexthop: initialize extack in nh_res_bucket_migrate()
  - gtp: check skb_pull_data() return in gtp1u_send_echo_resp()
  - selftests: openvswitch: add config file
  - selftests: af_unix: add USER_NS config
  - tls: device: push pending open record on splice EOF
  - sctp: validate stream count in sctp_process_strreset_inreq()
  - pds_core: check for workqueue allocation failure
  - pds_core: order completion reads after the ownership check
  - pds_core: yield the CPU while waiting for the adminq to drain
  - sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid
  - amd-xgbe: fix MAC_AUTO_SW handling in CL37 AN
  - pds_core: reject component parameter in legacy firmware update
  - wifi: mac80211: recalculate TIM when a station enters power save
  - iommu/intel: Fix out-of-bounds memset in dmar_latency_disable()
  - iommu/amd: Bound the early ACPI HID map
  - wifi: mwifiex: bound uAP association event IEs to the event buffer
  - wan: wanxl: Only reset hardware after BAR mapping
  - nfp: Check resource mutex allocation
  - wifi: mac80211: tear down new links on vif update error path
  - iommu/amd: Wait for completion instead of returning early in iommu_completion_wait()
  - dpaa2-eth: put MAC endpoint device on disconnect
  - dpaa2-switch: put MAC endpoint device on disconnect
  - rds: drop incoming messages that cross network namespace boundaries
  - bonding: fix devconf_all NULL dereference when IPv6 is disabled
  - net/packet: avoid fanout hook re-registration after unregister
  - Bluetooth: btusb: validate Realtek vendor event length
  - hwmon: occ: validate poll response sensor blocks
  - smb: client: validate DFS referral PathConsumed
  - hwmon: (asus-ec-sensors) add missed handle for ENOMEM
  - hwmon: (asus-ec-sensors) fix EC read intervals
  - hwmon: (asus-ec-sensors) fix looping over banks while reading from EC
  - wifi: iwlwifi: mvm: fix read in wake packet notification handler
  - wifi: iwlwifi: mvm: validate SAR GEO response payload size
  - ASoC: cs35l56: Use complete_all() to signal init_completion
  - ASoC: cs35l56: Fix potential probe() deadlock
  - ASoC: cs35l56: Don't use devres to unregister component
  - ASoC: bt-sco: fix duplicate DAPM widget names for wideband DAI
  - ASoC: tas2781: bound firmware description string parsing
  - btrfs: free mapping node on duplicate reloc root insert
  - btrfs: declare btrfs_ioctl_search_args_v2::buf as __u8
  - wifi: carl9170: fix buffer overflow in rx_stream failover path
  - wifi: carl9170: fix OOB read from off-by-two in TX status handler
  - wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read
  - wifi: ath6kl: fix OOB read from firmware IE lengths in connect event
  - wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler
  - wifi: ath12k: Flush the posted write after writing to PCIE_SOC_GLOBAL_RESET
  - wifi: ath11k: Flush the posted write after writing to PCIE_SOC_GLOBAL_RESET
  - wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get()
  - watchdog: pretimeout: Fix UAF in watchdog_unregister_governor()
  - hwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stop
  - hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop
  - hwmon: (corsair-psu) Stop device IO before calling hid_hw_stop
  - wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin
  - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request
  - usb: xhci-pci: Limit VIA VL805 DMA addressing to 36 bits
  - RISC-V: KVM: Serialize virtual interrupt pending state updates
  - Revert "drm/amd/display: Add missing kdoc for ALLM parameters"
  - crypto: rsa-pkcs1pad: Don't WARN on an empty digest
  - USB: serial: option: add TDTECH MT5710-CN
  - USB: serial: keyspan_pda: fix data loss on receive throttling
  - USB: serial: io_edgeport: cap received transmit credits
  - USB: serial: ftdi_sio: add support for E+H FXA291
  - usb: gadget: uvc: clamp SEND_RESPONSE length to the response buffer
  - usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown
  - usb: gadget: f_ncm: validate datagram bounds in ncm_unwrap_ntb()
  - USB: gadget: fsl-udc: fix device name leak on probe failure
  - USB: gadget: snps-udc: fix device name leak on probe failure
  - usb: gadget: printer: fix infinite loop in printer_read()
  - usb: gadget: f_midi: cancel pending IN work before freeing the midi object
  - usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback
  - usb: chipidea: fix usage_count leak when autosuspend_delay is negative
  - USB: storage: add NO_ATA_1X quirk for Longmai USB Key
  - wifi: at76c50x-usb: avoid length underflow in at76_guess_freq()
  - mpls: fix NULL deref in mpls_valid_fib_dump_req() on CONFIG_INET=n
  - net/sched: act_tunnel_key: Defer dst_release to RCU callback
  - drm/i915/selftests: Fix GT PM sort comparators
  - ksmbd: validate compound request size before reading StructureSize2
  - ksmbd: pin conn during async oplock break notification
  - can: j1939: fix lockless local-destination check
  - bpf, sockmap: Reject unhashed UDP sockets on sockmap update
  - powerpc/vtime: Initialize starttime at boot for native accounting
  - powerpc/time: Prepare to stop elapsing in dynticks-idle
  - sched/vtime: Get rid of generic vtime_task_switch() implementation
  - drm/i915/gt: use correct selftest config symbol
  - smb/client: handle overlapping allocated ranges in fallocate
  - Bluetooth: hci_qca: Clear memdump state on invalid dump size
  - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds
  - Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync
  - Bluetooth: qca: fix NVM tag length underflow in TLV parser
  - ALSA: usb-audio: Skip DSD quirk for Musical Fidelity M6s DAC
  - ata: sata_dwc_460ex: fix infinite loop in NCQ tag completion bit-scanning
  - ata: sata_dwc_460ex: fix clear_interrupt_bit() clearing all pending interrupts
  - ata: sata_dwc_460ex: use platform_get_irq()
  - ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered
  - net/iucv: take a reference on the socket found in afiucv_hs_rcv()
  - ipv4: fib: free fib_alias with kfree_rcu() on insert error path
  - ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF
  - firmware: arm_scmi: Rate-limit queue-full warnings in IRQ context
  - ASoC: tas2562: fix deprecated 'shut-down' GPIO always cleared after lookup
  - ASoC: cs42l43: Correct report for forced microphone jack
  - ASoC: amd: ps: fix wrong ACP version string in pci_request_regions()
  - ASoC: meson: aiu: fifo-spdif: soft reset the S/PDIF datapath on start/stop
  - wifi: cfg80211: bound element ID read when checking non-inheritance
  - wifi: brcmfmac: initialize SDIO data work before cleanup
  - wifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lock
  - wifi: cfg80211: reject unsupported PMSR FTM location requests
  - wifi: cfg80211: validate PMSR FTM preamble range
  - wifi: cfg80211: validate PMSR measurement type data
  - wifi: nl80211: validate nested MBSSID IE blobs
  - wifi: nl80211: free RNR data on MBSSID mismatch
  - wifi: p54: validate RX frame length in p54_rx_eeprom_readback()
  - wifi: libertas: fix memory leak in helper_firmware_cb()
  - wifi: mac80211_hwsim: clamp virtio RX length before skb_put
  - wifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one()
  - wifi: cfg80211: cancel sched scan results work on unregister
  - xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert
  - xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst()
  - RDMA/irdma: Prevent overflows in memory contiguity checks
  - selftests/alsa: Fix memory leak in find_controls error path
  - mtd: fix double free and WARN_ON in add_mtd_device() error paths
  - RDMA/siw: publish QP after initialization
  - RDMA/siw: Only check attrs->cap.max_send_wr in siw_create_qp
  - RDMA/hns: Fix potential integer overflow in mhop hem cleanup
  - RDMA/erdma: initialize ret for empty receive WR lists
  - RDMA/irdma: Prevent rereg_mr for non-mem regions
  - RDMA/umem: Add ib_umem_dmabuf_get_pinned_and_lock helper
  - RDMA/umem: Add support for creating pinned DMABUF umem with a given dma device
  - RDMA/cma: Fix hardware address comparison length in netevent callback
  - firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get()
  - btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots()
  - btrfs: reject free space cache with more entries than pages
  - mtd: nand: mtk-ecc: stop on ECC idle timeouts
  - mtd: mtdswap: remove debugfs stats file on teardown
  - IB/mad: Drop unmatched RMPP responses before reassembly
  - arm64: tegra: Fix CPU compatible string to cortex-a78ae on Tegra234
  - Input: ims-pcu - fix logic error in packet reset
  - Input: ims-pcu - fix heap-buffer-overflow in ims_pcu_process_data()
  - xprtrdma: Clear receive-side ownership pointers on release
  - gpu: host1x: Fix use-after-free in host1x_bo_clear_cached_mappings
  - accel/ivpu: Reject firmware log with size smaller than header
  - dmaengine: sh: rz-dmac: Move interrupt request after everything is set up
  - can: isotp: serialize TX state transitions under so->rx_lock
  - can: isotp: fix use-after-free race with concurrent NETDEV_UNREGISTER
  - can: bcm: track a single source interface for ANYDEV timeout/throttle ops
  - can: bcm: fix data race on rx_stamp/rx_ifindex in bcm_rx_handler()
  - can: bcm: fix stale rx/tx ops after device removal
  - can: bcm: add missing device refcount for CAN filter removal
  - can: bcm: validate frame length in bcm_rx_setup() for RTR replies
  - can: bcm: extend bcm_tx_lock usage for data and timer updates
  - can: bcm: fix CAN frame rx/tx statistics
  - can: bcm: add locking when updating filter and timer values
  - KVM: x86/mmu: Fix use-after-free on vendor module reload
  - seqlock: Allow UBSAN_ALIGNMENT to fail optimizing
  - seqlock: Allow KASAN to fail optimizing
  - seqlock: Cure some more scoped_seqlock() optimization fails
  - drm/virtio: fix deadlock in display_info_cb by removing hotplug from dequeue worker
  - USB: serial: io_edgeport: cap received transmit credits
  - etmem: fix page reference leak in add_page_for_swap()


author: Funda Wang <fundawang@yeah.net> - 2.0.26-20
changelog:
  - sync all branches
  - update makedumpfile to 1.7.9
  - reorder arch-dependent patches
  - cherry picked MR:
    * https://atomgit.com/src-openeuler/kexec-tools/pull/121
    * https://atomgit.com/src-openeuler/kexec-tools/pull/148
    * https://atomgit.com/src-openeuler/kexec-tools/pull/150
    * https://atomgit.com/src-openeuler/kexec-tools/pull/163


author: Liu Chao <liuchao173@huawei.com> - 30-7
changelog:
  - disable make test because cannot find /lib/modules/`uname -r`/build
  - add extramodules to depmod search path


author: jinsaihang <jinsaihang@h-partners.com> - 1:0.9.9-13
changelog:
  - Type:bugfix
  - CVE:NA  
  - SUG:NA  
  - DESC:check whether the directory is a user source code directory


author: fuanan <fuanan3@h-partners.com> - 1:0.9.9-19
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patch
         backport-lookup-fix-local-bind-check.patch


author: qujingling <qujingling@huawei.com> - 1:0.9.9-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:remove __find_parent_obj_in_dir_for_oot and support link in changed_obj


author: qujingling <qujingling@huawei.com> - 1:0.9.9-21
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:remove CONFIG_LIVEPATCH_PER_TASK_CONSISTENCY, which is not in 6.6 kernel anymore


author: zhangbinqin <zhangbinqin@h-partners.com> - 1:0.9.9-22
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:prevent global var ptr kpl relocation being removed by objcopy


author: xuxuepeng <xuxuepeng1@huawei.com> - 0.0.1-8
changelog:
  - Type:Enhancement
  - ID:NA
  - SUG:NA
  - DESC: Simplify Store api, remove unnecessary validation
          Check if a path is abstract before connection
          Add vsock support.


author: Wenlong Zhang <zhangwenlong@loongson.cn> - 0.0.1-12
changelog:
  - Type:Fix
  - ID:NA
  - SUG:NA
  - DESC:just use vendor on loongarch64
         add loongarch64 support for nix


author: lingsheng <lingsheng1@h-partners.com> - 3.7.1-7
changelog:
  - Type:CVE
  - ID:CVE-2025-5914,CVE-2025-5915,CVE-2025-5916,CVE-2025-5917,CVE-2025-5918
  - SUG:NA
  - DESC:fix CVE-2025-5914 CVE-2025-5915 CVE-2025-5916 CVE-2025-5917 CVE-2025-5918


author: yixiangzhike <yixiangzhike007@163.com> - 2.39.1-31
changelog:
  - backport community patches
      fix columns reduction
      fix memory leak issue in read_Subid_range
      fix off-by-one in maximum last sector calculation
      fix memory corruption in size calculation
      fix memory corruption in read buffers


author: wangzhiqiang <swangzhiqiang95@huawei.com> - 3.0.4-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Add BDPluginSpec constructor and use it in plugin_specs_from_names


author: tianmuyang <tianmuyang@huawei.com> 2:1.2.2-11
changelog:
  - Adaption for sched type eBPF program:
    backport-libbpf-Adaption-for-sched-type-eBPF-program.patch


author: zhaoyonghao10 <zhaoyonghao10@h-partners.com> - 0.70.2-7
changelog:
  - apply 2 patches: backport-Mark-all-protected-packages-as-user-installed-for-.patch, backport-fix--compare-RPMItem-in-transaction-with-rpmvercmp.patch


author: doupengda <doupengda@loongson.cn> 1.0.1-7
changelog:
  - update config.guess and config.sub
  - fix SOURCE1 file autoconf.h '__loongarch64__' to '__loongarch64'


author: yuanchao <1050706328@qq.com> - 2.1.12-13
changelog:
  - Fix function undeclared,incompatible pointer and parameter lack in 'add-testcases-for-event.c-apis.patch',support clang build


author: andy <liuyang01@kylinos.cn> - 2.1.12-14
changelog:
  - Fix leak in evbuffer_add_file() on empty files
  - evthread: fix NULL dereference in evthread_setup_global_lock_()
  - Fix potential null dereference in http-server


author: shixuantong <shixuantong1@h-partners.com> - 2.1.12-15
changelog:
  - fix: arc4_getword integer overflow, detected by -fsanitize=undefined
  - Fix divide-by-zero in ev_token_bucket_get_tick_
  - fixed missing check for null after strdup in evutil_inet_pton_scope
  - Fix integer-overflow in ev_token_bucket_cfg_new
  - Fix integer overflow in HTTP version
  - Fix potential Null pointer dereference in bufferevent_openssl.c
  - Fix potential Null pointer dereference in dns-example.c
  - Fix potential Null pointer dereference in event-read-fifo.c
  - Fix unlikely (for libevent) UB in HT_GROW()


author: Funda Wang <fundawang@yeah.net> - 2.1.12-16
changelog:
  - Don't use deprecated functions when building against OpenSSL 3.0
  - fix linkage of shared libraries


author: yanglongkang <yanglongkang@h-partners.com> - 3.4.4-5
changelog:
  - Fix x86/ffi64 calls with 6 gp and some sse registers
    Robustify floating point comparison in test
    Fix floating point compare


author: Yang Yanchao <yangyanchao6@huawei.com> - 0.1-3
changelog:
  - Check the return ptr of the malloc[#I7YV2X]
    add hnid in gmemPrefetch [#I7XQMW]
    free userData in stream to avoid async operations accessing illeagal address[#I7Z2RF]


author: wangkai <13474090681@163.com> - 2.5.31-3
changelog:
  - Fix CVE-2026-40334, CVE-2026-40334, CVE-2026-40338, CVE-2026-40339,
    CVE-2026-40340, CVE-2026-40341


author: yanglu <yanglu72@h-partners.com> - 3.0.17-2
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:avoid crashing in icalcomponent_normalize
         fix a memleak in icalcomponent_normalize


author: wangxiao <wangxiao184@qq.com> - 1.24.0-4
changelog:
  - add fix patch for CVE-2026-50292
  - CVE-2026-50265 is an invalid CVE, so delete the related information.


author: Xu Raoqing <609179072@qq.com> - 2.9.4-19
changelog:
  - oidc_child: fix wrong usage of printf format (a2bd434)
  - ad: use right memory context in GPO code (723a30b)
  - Responder: fix passkey auth when user-verification is off (4c6c010)
  - KRB5: fix mem leak in authenticate_stored_users (8b452b3)
  - KCM: fix use-after-free in kcm_read_options (50ae35f)
  - NSS: Fix wrong condition invalidating an optimization (6d71291)


author: Qin Fandong <qinfandong@kylinos.cn> - 2.9.4-22
changelog:
  - Type:CVE
  - ID:CVE-2026-14474
  - SUG:NA
  - DESC:fix CVE-2026-14474: warn when ldap_sudo_search_base falls back to root DN to prevent privilege escalation


author: liuchao <liuchao173@huawei.com> - 2.1-1
changelog:
  - Upgrade to 2.1:
    - a new tool 'ptseg' for finding the PSB segment for a given offset.
    - a new layer 'evt' representing the trace as a list of events.
    - event tracing (cfe and evd packets).
    - C11 threads, if available.
    - Bug fixes and support for latest processors.


author: Funda Wang <fundawang@yeah.net> - 1.5.8-2
changelog:
  - backport upstream patches
    * Bug fix: iso_image_set_ignore_aclea() inverted the setting
      for reading the XFS-style project id from disk files
    * Silenced error messages about ioctl(FS_IOC_FSGETXATTR)


author: yixiangzhike <yixiangzhike007@163.com> - 1.6.4-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch to fix possible uninitialized variable


author: chengyechun <chengyechun1@huawei.com> - 3.7.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:prevent segfault in af_request_type
         fix bridge info parsing


author: xinghe <xinghe2@h-partners.com> - 2:1.6.40-2
changelog:
  - Type:cves
  - CVE:CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720
  - SUG:NA
  - DESC:fix CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720


author: yixiangzhike <yixiangzhike007@163.com> - 1.4.5-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch to remove redundant inclusion of libintl.h


author: yixiangzhike <yixiangzhike007@163.com> - 1.15.2-3
changelog:
  - backport patches from upstream
      Fix a memory leak of the glib slist
      Add missing end callback for already downloaded zchunk files
      Fix memory leak of repo and repomd
      Fix a crash when the gnupghomedir is NULL or not specified on Python API


author: yinsist <jianhui.oerv@isrc.iscas.ac.cn> - 0.20.5-2
changelog:
  - Valgrind does not support certain architectures like RISC-V, Before depending on Valgrind, first check if Valgrind supports the architecture


author: yuanchao <1050706328@qq.com> - 0.20.5-3
changelog:
  - fix `incompatible function pointer types passing`errors in test-vala-unstable.vala and test-vala-lang.vala


author: xinghe <xingheyd@163.com> - 4.19.3-9
changelog:
  - Type:cves
  - ID:CVE-2026-3238 CVE-2026-3012 CVE-2026-4480 CVE-2026-4408
  - SUG:NA
  - DESC:fix CVE-2026-3238 CVE-2026-3012 CVE-2026-4480 CVE-2026-4408


author: xinghe <xingheyd@163.com> - 4.19.3-10
changelog:
  - Type:cves
  - ID:CVE-2026-6949 CVE-2026-58224 CVE-2026-58216 CVE-2026-58218 CVE-2026-58221 CVE-2026-58222
  - SUG:NA
  - DESC:fix CVE-2026-6949 CVE-2026-58224 CVE-2026-58216 CVE-2026-58218 CVE-2026-58221 CVE-2026-58222


author: zhangbinqin <zhangbinqin@h-partners.com> - 0.10.5-9
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:fix CVE-2026-0968 CVE-2026-0967 CVE-2026-0966 CVE-2026-0965 CVE-2026-0964 CVE-2025-14821


author: zhangbinqin <zhangbinqin@h-partners.com> - 1.11.0-6
changelog:
  - Type:CVE
  - CVE:CVE-2026-7598
  - SUG:NA
  - DESC:add username_len bounds checking to fix CVE-2026-7598


author: jiayuzhe <jiayuzhe@kylinos.cn> - 1.11.0-8
changelog:
  - Type:CVE
  - CVE:CVE-2026-66032,CVE-2026-66033,CVE-2026-66034
  - SUG:NA
  - DESC:fix CVE-2026-66032,CVE-2026-66033,CVE-2026-66034


author: laokz <zhangkai@iscas.ac.cn> - 1.9.6-2
changelog:
  - make with_mem_leak_test option following i386 i486 i586 i686 pentium3 pentium4 athlon geode x86_64 armv3l armv4b armv4l armv4tl armv5tl armv5tel armv5tejl armv6l armv6hl armv7l armv7hl armv7hnl armv8l armv8hl armv8hnl armv8hcnl aarch64 loongarch64 powerpc64le ppc64le sw_64


author: fundawang <fundawang@yeah.net> - 2.10.1-10
changelog:
  - Fix CVE-2026-7867 (as-user mount authorization bypass, local privilege escalation)
  - Normalize License field to SPDX identifiers (GPL-2.0-or-later, LGPL-2.0-or-later)
  - Drop unused 
  - Align BuildRequires versions with upstream configure.ac (systemd 209, libmount >= 2.30, add libblkid-devel)
  - Convert pkg-config style BuildRequires to pkgconfig() form
  - Drop unused intltool BuildRequires (i18n uses GNU gettext)


author: Funda Wang <fundawang@yeah.net> - 1.5-2
changelog:
  - add upstream patch supporting tracing for AV1 picture info
  - requires x11 as pkgconfig private, since vdpau_x11.h refers X11/Xlib.h
  - cleanup spec


author: Pengrui Zhang <zhangpengrui@huawei.com> - 9.10.0-33
changelog:
  - conf: Fix error message in virNetworkForwardDefParseXML
  - qemu: Fix guest-sync response time in qga command
  - virthreadpool: create threads from the newly expanded workers
  - qemu: Use g_autoptr in qemuProcessInit
  - qemu: Add kvm-vtimer-status support for AArch64 KVM guests


author: Pengrui Zhang <zhangpengrui@huawei.com> - 9.10.0-34
changelog:
  - qemu_driver: Don't handle the EOF event if vm get restarted
  - conf: add the hugepage allocation option
  - qemu: cgroup: Add /dev/ubmempfd to default device ACL


author: Fei Xu <xufei30@huawei.com> - 9.10.0-35
changelog:
  - qemu: Add capability for PCI high memory MMIO size
  - qemu: Add command line support for PCI high memory MMIO size
  - qemu: Relax check for memory device coldplug
  - qemu: migration: Validate migration XML
  - qemuMigrationDstPrecreateStorage: Improve error messages
  - qemuMonitorJSONQueryRxFilter: Allow @filter to be NULL
  - qemuMigrationDstPrecreateStorage: Refactor cleanup
  - qemuDomainStorageOpenStat: Remove unused 'driver' argument and untangle callers
  - qemuDomainChangeNet: Reflect trustGuestRxFilters change
  - qemu_monitor_json: Report error in error paths in SEV related code
  - conf: Move some members of virDomainSEVDef into virDomainSEVCommonDef
  - conf: Drop needless NULL checks guarding virBufferEscapeString()
  - conf: Separate SEV formatting into a function
  - Drop needless typecast to virDomainLaunchSecurity
  - src: Convert some _virDomainSecDef::sectype checks to switch()
  - qemu_monitor: Allow querying SEV-SNP state in 'query-sev'
  - qemu: Report snp-policy in virDomainGetLaunchSecurityInfo()
  - qemu: capabilities: Introduce QEMU_CAPS_VIRTIO_BLK_IOTHREAD_MAPPING
  - qemu_capabilities: Introduce QEMU_CAPS_SEV_SNP_GUEST
  - conf: Introduce SEV-SNP support
  - qemu: Build cmd line for SEV-SNP
  - qemu_firmware: Pick the right firmware for SEV-SNP guests
  - domain_validate: Add missing 'break' in virDomainDefLaunchSecurityValidate()
  - virtcca/cca: Fix CVM launch security fall-through in switch statements


author: Fei Xu <xufei30@huawei.com> - 9.10.0-37
changelog:
  - libvirt: support configuring cache size via cacheinfo element
  - memop: add balloon memop support
  - qemu_capabilities: Remove unused struct
  - qemu: block: fix error when blockcopy target is librbd encrypted
  - qemu: Fix a few comments
  - qemu: Add missing early returns


author: liujie-answer <liujie5@linkdatatechnology.com> - 20260410-2
changelog:
  - add linux-firmware-linkdata sub-package
  - This configuration file is from Linkdata, supporting Linkdata Ethernet Controller advanced feature configuration.


author: yueyuankun <yueyuankun@kylinos.cn> - 34.1-9
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC:Remove redundant ifarch blocks and obsolete patches
         Improve maintainability with architecture-agnostic configuration


author: Funda Wang <fundawang@yeah.net> - 4.99.6-1
changelog:
  - update to 4.99.6
  - switch to autotools based build system per suggested by upstream
   - new devel sub package, due to switching to autotools
   - add two security-related build switches from archlinux:
     - only allow root to list all open files
     - allow anyone to list anyone else's socket files


author: liuchao <liuchao173@huawei.com> - 2.13.7-1
changelog:
  - Update to 2.13.7:
    - fix: invoke MKDIR_P before changing directories
    - fix: -Wsingle-bit-bitfield-constant-conversion with clang16
    - fix: clean java inner class files in examples
    - Introduce sync vs unsync enablers
    - Fix: misaligned urcu reader accesses
    - ustfork: Fix warning about volatile qualifier
    - ustfork: Fix possible race conditions
    - Fix: tracepoint: Remove trailing \ at the end of macro
    - fix: python agent: use stdlib distutils when setuptools is installed
    - fix: python agent: install on Debian python >= 3.10
    - fix: python agent: Add a dependency on generated files
    - python: use setuptools with python >= 3.12


author: yuanchao <1050706328@qq.com> - 5.0.2-16
changelog:
  - Type: bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix error of cc.compiles in meson.build on aarch cased by '-fstack-clash-protection' and '-Werror'


author: wujichao <wujichao1@huawei.com> - 0.3-36
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:bugfix: Information in cpu directory is overwritten after lxcfs restart


author: Liu Qingtao <liu.qingtao2@zte.com.cn> - 1.9.4-3
changelog:
  - Add patch riscv_zicclsm_lz4_force_mem_access_2.patch to configure LZ4_FORCE_MEMORY_ACCESS=2 for RISC-V with Zicclsm extension


author: chenyanpanHW <chenyanpan@huawei.com> - 12.5-33
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/nail-11.25-config.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.3-pager.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-lzw.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-fname-null.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-collect.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-usage.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-man-page-fixes.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-outof-Introduce-expandaddr-flag.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-fio.c-Unconditionally-require-wordexp-support.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-globname-Invoke-wordexp-with-WRDE_NOCMD-CVE-2004-277.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-unpack-Disable-option-processing-for-email-addresses.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-empty-from.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-nss-hostname-matching.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-encsplit.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-openssl.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/backport-mailx-12.5-no-SSLv3.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/set-mail-defualt-did-not-record-failsend.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yanglu <yanglu72@h-partners.com> - 2:0.95-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Change UDP and ICMP sockets binding to accept a source IP from the -a CLI option


author: yaoxin <1024769339@qq.com> - 8.0.42-1
changelog:
  - Update to 8.0.42 for fix CVEs(CVE-2025-21574,CVE-2025-21575,CVE-2025-21577,
    CVE-2025-21580,CVE-2025-21581,CVE-2025-21584,CVE-2025-21585,CVE-2025-30681,
    CVE-2025-30682,CVE-2025-30683,CVE-2025-30684,CVE-2025-30685,CVE-2025-30687,
    CVE-2025-30688,CVE-2025-30689,CVE-2025-30693,CVE-2025-30695,CVE-2025-30696,
    CVE-2025-30699,CVE-2025-30703,CVE-2025-30704,CVE-2025-30705,CVE-2025-30710,
    CVE-2025-30715,CVE-2025-30721,CVE-2025-30722


author: yaoxin <1024769339@qq.com> - 8.0.43-1
changelog:
  - Update to 8.4.6 for fix CVEs (CVE-2025-50068,CVE-2025-50077,CVE-2025-50078,
    CVE-2025-50079,CVE-2025-50080,CVE-2025-50081,CVE-2025-50082,CVE-2025-50083,
    CVE-2025-50084,CVE-2025-50085,CVE-2025-50086,CVE-2025-50087,CVE-2025-50091,
    CVE-2025-50092,CVE-2025-50093,CVE-2025-50094,CVE-2025-50096,CVE-2025-50097,
    CVE-2025-50098,CVE-2025-50099,CVE-2025-50100,CVE-2025-50101,CVE-2025-50102,
    CVE-2025-50104,CVE-2025-53023)


author: wangkai <13474090681@163.com> - 8.0.44-1
changelog:
  - Update to 8.0.44 for fix CVEs (CVE-2025-53069,CVE-2025-53062,CVE-2025-53054,
    CVE-2025-53053,CVE-2025-53045,CVE-2025-53044,CVE-2025-53042,CVE-2025-53040)


author: yaoxin <1024769339@qq.com> - 8.0.45-1
changelog:
  - Update to 8.0.45 for fix CVEs (CVE-2026-21936,CVE-2026-21937,
    CVE-2026-21941,CVE-2026-21948,CVE-2026-21964,CVE-2026-21968)


author: wangkai <13474090681@163.com> - 8.0.46-1
changelog:
  - Update to 8.0.46 for fix CVEs (CVE-2026-21998, CVE-2026-22001, CVE-2026-22002,
    CVE-2026-22004, CVE-2026-22005, CVE-2026-22009, CVE-2026-22015, CVE-2026-22017,
    CVE-2026-34267, CVE-2026-34270, CVE-2026-34271, CVE-2026-34276, CVE-2026-34278,
    CVE-2026-34293, CVE-2026-34303, CVE-2026-34304, CVE-2026-34308, CVE-2026-35236,
    CVE-2026-35237, CVE-2026-35238, CVE-2026-35239, CVE-2026-35240)


author: gaihuiying <eaglegai@163.com> - 1:5.9.3-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Customized the anti-attacki/reset-last_engineTime function for IdeaUI
         change the permissions of passtest


author: xingwei <xingwei14@h-partners.com> - 1:5.9.3-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Migration patch from upstream, add compatibility to parse
  Linux 6.7 Ip header while keep support for previous versions.


author: chenyanpanHW <chenyanpan@huawei.com> - 0.2.8-19
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0000-netcf-call-aug_load-at-most-once-per-second.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0001-netcf-optimize-aug_match-query-for-all-ifcfg-files-related.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0002-netcf-linux-include-bond-element-for-bonds-with-no-slaves.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0003-netcf-Properly-classify-bond-devices-with-no-slaves.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Fix-memory-leak-in-aug-match-mac.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: lingsheng <lingsheng1@h-partners.com> - 1:1.0.8-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:datatype: don't return a const string from cgroupv2_get_path()
  datatype: fix leak and cleanup reference counting for struct datatype
  datatype: initialize TYPE_CT_EVENTBIT slot in datatype array
  datatype: initialize TYPE_CT_LABEL slot in datatype array
  evaluate: do not remove anonymous set with protocol flags and single element
  evaluate: don't crash if object map does not refer to a value
  evaluate: error out when expression has no datatype
  evaluate: error out when store needs more than one 128bit register of align fixup
  evaluate: fix check for truncation in stmt_evaluate_log_prefix()
  evaluate: fix double free on dtype release
  evaluate: fix memleak in prefix evaluation with wildcard interface name
  evaluate: reject set in concatenation
  evaluate: revisit anonymous set with single element optimization
  evaluate: skip anonymous set optimization for concatenations
  evaluate: stmt_nat: set reference must point to a map
  evaluate: tproxy: move range error checks after arg evaluation
  evaluate: validate chain max length
  evaluate: validate maximum log statement prefix length
  exthdr: prefer raw_type instead of desc->type
  json: expose dynamic flag
  json: fix use after free in table_flags_json()
  libnftables: Drop cache in -c/--check mode
  meta: fix tc classid parsing out-of-bounds access
  netlink: don't crash if prefix for < byte is requested
  netlink: fix leaking typeof_expr_data/typeof_expr_key in netlink_delinearize_set()
  netlink: handle invalid etype in set_make_key()
  parser_bison: fix ct scope underflow if ct helper section is duplicated
  parser_bison: fix memleak in meta set error handling
  parser_bison: make sure obj_free releases timeout policies
  parser_json: Catch nonsense ops in match statement
  parser_json: Default meter size to zero
  parser_json: Fix flowtable prio value parsing
  parser_json: Fix synproxy object mss/wscale parsing
  parser_json: Fix typo in json_parse_cmd_add_object()
  parser_json: Proper ct expectation attribute parsing
  parser_json: Wrong check in json_parse_ct_timeout_policy()
  py: fix exception during cleanup of half-initialized Nftables
  rule: fix sym refcount assertion


author: liweigang <liweiganga@uniontech.com> - 1:1.0.8-4
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: evaluate: guard against NULL basetype
  evaluate: error out if basetypes are different
  evaluate: reject attempt to update a set
  evaluate: release mpz type in expr_evaluate_list() error path
  expression: missing line in describe command with invalid expression
  evaluate: handle invalid mapping expressions in stateful object statements gracefully


author: gaihuiying <eaglegai@163.com> - 1:1.0.8-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         evaluate: disable meta set with ranges
         src: reject large raw payload and concat expressions
         evaluate: fix stack overflow with huge priority string
         tcpopt: don't create exthdr expression without datatype
         src: do not allow to chain more than 16 binops
         rule: fix ASAN errors in chain priority to textual names
         tests: shell: add regression test for double-free crash bug
         evaluate: handle invalid mapping expressions in stateful object
         evaluate: Fix incorrect checking the `base` variable in case of IPV6


author: gaihuiying <eaglegai@163.com> - 1:1.0.8-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:ct expectation: fix 'list object x' vs. 'list objects in table' confusion
         tests: shell: connect chains to hook point


author: gaihuiying <eaglegai@163.com> - 1:1.0.8-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         parser_json: release buffer returned by json_dumps
         parser_json: fix crash in json_parse_set_stmt_list
         parser_json: fix handle memleak from error path
         parser_json: fix several expression memleaks from error path
         libnftables: Zero ctx->vars after freeing it


author: eaglegai <eaglegai@163.com> - 1:1.0.8-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         evaluate: don't allow nat map with specified protocol
         rule: return error if table does not exist
         json: make sure timeout list is initialised
         evaluate: don't update cache for anonymous chains
         json: return error if table does not exist
         json: don't BUG when asked to list synproxies
         evaluate: compact STMT_F_STATEFUL checks
         evaluate: only allow stateful statements in set and map definitions
         optimize: expand expression list when merging into concatenation
         netlink: fix stack overflow due to erroneous rounding
         netlink: bogus concatenated set ranges with netlink message overrun
         netlink: fix crash when ops doesn't support udata
         netlink: Catch unknown types when deserializing objects
         netlink: Avoid potential NULL-ptr deref parsing set elem expressions
         netlink: Avoid crash upon missing NFTNL_OBJ_CT_TIMEOUT_ARRAY
         evaluate: don't BUG on unexpected base datatype
         src: BASECHAIN flag no longer implies presence of priority expression
         parser_bison: only reset by name is supported by now


author: gaihuiying <eaglegai@163.com> - 1:1.0.8-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         segtree: fix string data initialisation
         src: netlink: netlink_delinearize_table() may return NULL
         src: ensure chain policy evaluation when specified
         src: fix memory leak in anon chain error handling
         mnl: silence compiler warning
         datatype: Increase symbolic constant printer robustness
         evaluate: follow prefix expression recursively if needed


author: Qin Fandong <qinfandong@kylinos.cn> - 3.94.0-10
changelog:
  - Type:CVE
  - ID:CVE-2026-16389
  - SUG:NA
  - DESC:fix CVE-2026-16389: guard against integer overflow in CERT_Hexify


author: yixiangzhike <yixiangzhike007@163.com> - 0.9.12-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Move temporary files from /var/run to /run to delete warning in installing


author: wangkai <13474090681@163.com> - 2:2022.10.3-4
changelog:
  - Fix CVE-2026-42616, CVE-2026-42617, CVE-2026-42618, CVE-2026-46569,
    CVE-2026-46570, CVE-2026-46571, CVE-2026-46572, CVE-2026-56135, CVE-2026-56136


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p15-8
changelog:
  - Type:CVE
  - ID:CVE-2023-26551
  - SUG:NA
  - DESC:make sure the buffer has enough room for the input extra characters


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p15-10
changelog:
  - Type:CVE
  - ID:CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26554,CVE-2023-26555
  - SUG:NA
  - DESC:change the patch of CVE-2023-26551 and fix CVE-2023-26555


author: andy <liuyang01@kylinos.cn> - 2.0.16-12
changelog:
  - backport patches from upstream
  - libnuma: Make numa_available respect EPERM
  - libnuma: fix nodemask allocation size for get_mempolicy


author: yanglongkang <yanglongkang@h-partners.com> - 0.34.7-4
changelog:
  - Replace SELinux deprecated functions
  - Replace deprecated libxml2 calls
  - Fix implicit cast from const to non const


author: LHesperus <liuchanggeng@huawei.com> -v2.1.0-1
changelog:
  - remove the logger.h interface and add TRACE interface, increase safe_queue wait time to 5s
  - support reload log-level online
  - adapt analysis on riscv
  - add load base sched instance
  - v2.0.6-3 add adapt dynamicsmt analysis if smt is not enable
  - fix code check
  - add trace log and change level intf and delete logger
  - smc-d analysis fix inconsistency in the display of zero connection
  - v2.0.6-2 add realtime compile macro
  - v2.0.6-1 add smc_acc.yaml check and some logs
  - add net_hardirq_tune_data.h
  - fux binary coredump
  - v2.0.5-3 fix xcall analysis issues
  - v2.0.5-2 improve some output format
  - add xcall prefetch
  - network interface plugin : adapt same nic with different ifindex
  - v2.0.5-1 fix issues
  - v2.0.4-1 add docker coordination burst tune
  - add multi net path tune and analysis
  - add error log and params check
  - v2.0.3-3 oeaware-sdk enhances user permissions
  - v2.0.3-2 Fixed memory leak issues:
    - Fixed unsubscribeHandler topic deserialize memory leak
    - Fixed analysis module memory leak
  - Enhanced eBPF functionality:
    - Set memory lock limit to infinity for eBPF
    - Used eBPF to collect thread information
  - Network improvements:
    - Fixed ntoh port error
    - Added support for attaching all network interfaces
    - Used tcp-set-state to adapt k8s docker
  - New features:
    - Added xcall parameters
    - Added support for docker coordination burst analysis
    - Added parameter validation
    - Added NUMA parallel scheduler tuning support
  - Other improvements:
    - Fixed header files and added CI test
  - v2.0.3-1: Refactored and enhanced the analysis module:
    - Added scenario-aware analysis for multiple optimization plugins
    - Introduced command-line result viewing capability
    - Implemented Markdown format output support
  - Add new plugin: smt,binary,hirq


author: fly_1997 <flylove7@outlook.com> -v2.1.1-1
changelog:
  - add hwprobe_analysis for RISC-V
  - fix error logger info
  - support kernel cluster scheduler
  - adapt for kylin-v10-sp3
  - realtime tune add new tuning item
  - fix smc insmod err
  - realtime tune skip grubby update
  - add hwprobe_tune hwprobe_ext_zbb_tune for RISC-V
  - add high_load value check


author: yangchaohao <yangchaohao@huawei.com> - 1.0-4.5
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC:fix wrong metalink url of update-source

   * Thu Dec 25 2025 jchzhou <zhoujiacheng@iscas.ac.cn> - 1.0-4.4
   - Type:NA
   - ID:NA
   - SUG:NA
   - DESC:add riscv64 metalink fixes


author: Funda Wang <fundawang@yeah.net> - 30-63
changelog:
  - do not generate index file at all
  - add requirement on gen_digest_lists for /usr/lib/rpm/brp-digest-list
  - add shell completion macros


author: Funda Wang <fundawang@yeah.net> - 30-64
changelog:
  - enhance perl related macros
    * remove useless perl .packlist, empty .bs files and wrongly updated perllocal.pod
    * add helper macro for cpan projects
    * move perl relative macros into macros.perl


author: Funda Wang <fundawang@yeah.net> - 30-66
changelog:
  - convert to plain repository rather than messy patches
  - sync config.guess and config.sub with master branch
  - promote chrpath for openEuler distrib


author: Kai Liu <kai.liu@windriver.com> - 0.3.25-5
changelog:
  - Don't run make tasks in background sub-shell, as this causes
    severe issue. Use the _smp_mflags macro instead. See issue
    IB3EV0 for more detail.


author: Funda Wang <fundawang@yeah.net> - 0.23.0-7
changelog:
  - fix CVE-2024-8443, CVE-2024-45615, CVE-2024-45616,
    CVE-2024-45617, CVE-2024-45618, CVE-2024-45619, CVE-2024-45620


author: chenyanpanHW <chenyanpan@huawei.com> - 2.0.0-26
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-multicast-set.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-notify-systemd-of-start-up.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-null-pointer-deref.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-openssl-1.1-fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-cve-2016-7567.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-cve-2017-17833.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/CVE-2012-4428-fix-handling-of-string-list-in-slp_common-c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Fix-slp_iface-c-comma-expression-so-it-works-as-designed.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Daemon-sends-wrong-service-reply-when-security-is-enabled.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Fix-DAAddresses-hostname-resolution-issue.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Change-default-slpreg-connection-from-UDP-to-TCP.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Fix-interface-parsing-code-to-look-for-null-ifc-addrs.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Fix-broadcast-functionality.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Properly-initialize-xcastsocks-for-error-exit.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Fix-xrealloc-to-properly-free-original-pointer-on-resize.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/CVE-2019-5544.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: xingwei <xingwei14@h-partners.com> - 2.0.0-27
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Introduce epoch command to slove package upgrade failure problem


author: zhangbinqin<zhangbinqin@h-partners.com> - 9.6p1-13
changelog:
  - Type:CVE
  - CVE:CVE-2026-35414 CVE-2026-35385 CVE-2026-35386 CVE-2026-35387 CVE-2026-35388 
  - SUG:NA
  - DESC:fix CVE-2026-35414 CVE-2026-35385 CVE-2026-35386 CVE-2026-35387 CVE-2026-35388


author: wangkai <13474090681@163.com> - 2.6.9-8
changelog:
  - Fix CVE-2026-11771, CVE-2026-12932, CVE-2026-12996,
    CVE-2026-13117, CVE-2026-13122, CVE-2026-13698


author: baiguo <baiguo@kylinos.cn> - 0.4.34-2
changelog:
  - Use vasprintf() if available for error messages and otherwise vsnprintf();orccompiler, orcparse: Use secure UCRT printing functions on Windows


author: liweigang <liweiganga@uniontech.com> - 3.6-2
changelog:
  - remove patch support gpt_sync_mbr
  - file: huawei-bugfix-add-support-of-gpt_sync_mbr.patch
  - file: add support for gpt_sync_mbr and fix failure of it.


author: wangkai <13474090681@163.com> - 6.2.2-4
changelog:
  - Fix CVE-2024-45769,CVE-2024-45770
  - Fix buffer sizing checks in pmstore PDU handling (RHEL-57805)
  - Guard against symlink attacks in pmpost program (RHEL-57810)
  - Fix libpcp_web webgroup slow request refcounting (RHEL-58306)
  - Updated pmdahacluster for newer crm_mon versions (RHEL-50693)


author: hugel <gengqihu2@h-partners.com> - 10.42-12
changelog:
  - DESC:sync patches from upstream
         backport-Further-ASCII-tests-and-minor-bugfix-plus-ChangeLog-.patch
         backport-avoid-inconsistency-between-d-and-digit-when-using-a.patch
         backport-Fix-the-lookahead-after-d-or-posix-to-skip-whitespac.patch
         backport-Improve-error-offsets-for-character-classes-548.patch
         backport-Non-recursive-scan-prefix-in-JIT-560.patch


author: tangyuchen <tangyuchen5@huawei.com> - 2.0.0-1
changelog:
  - update to 2.0.0
    - Adjust USB drivers path at run-time via environment variable PCSCLITE_HP_DROPDIR
    - Add '--disable-polkit' option
    - Reset eventCounter when a reader is removed
    - Add "polkit" in "pcscd -v" output if enabled
    - Doxygen: document SCARD_E_INVALID_VALUE for some functions
    - use secure_getenv(3) if available
    - Some other minor improvements


author: Guofeng Yue <yueguofeng@h-partners.com> - 4.5-12
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: modify "--source_ip" to "--bind_source_ip" to fix init connection establishment with specific interface


author: Funda Wang <fundawang@yeah.net> - 4:5.38.0-11
changelog:
  - split out patch adding link to libperl.so into two separated patches,
    and sync it with mageia, which is a better version than fedora
  - disable cleaning empty perl directories
  - use git lfs storage


author: chenyanpanHW <chenyanpan@huawei.com> - 4.050-2
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/backport-DBD-mysql-4.050-Remove-a-useless-shebang-from-DBD-mysql.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: sqfu <dev01203@linx-info.com> - 1.647-1
changelog:
  - update version to 1.647
  - Fix Makefile rules for Changes
  - Another example to bind columns 
  - Fix fetchall_arrayref for undefined NAME


author: dongyuzhen <dongyuzhen@h-partners.com> - 2:3.51-1
changelog:
  - upgrade vertion to 3.51:
    - fix OVERLOAD and FALLBACK handling
    - fix ExtUtils::ParseXS compatibility with perl < 5.8.8
    - add support for elifdef and elifndef
    - allow symbolic alias of default function
    - better support for duplicate ALIASes
    - make versions in ExtUtils-ParseXS consistent


author: dongyuzhen <dongyuzhen@h-partners.com> - 1:2.57-1
changelog:
  - upgrade version to 2.57:
    - fix long standing bug that duplicate options were not detected when the options differ in case while ignore_case is in effect
    - allow periods in option names
    - move Getopt::Long::Parser to a separate module and add documentation
    - do not use Getopt::Long to establish Getopt::Long::Parser version
    - adapt tests for perl core


author: dongyuzhen <dongyuzhen@h-partners.com> - 0.42-1
changelog:
  - upgrade version to 0.42:
    - updated for Perl v5.14 - use `package NAME VERSION` syntax
    - fix typo 'behvior'
    - fix for DragonflyBSD and IPV6_V6ONLY from core perl


author: dongyuzhen <dongyuzhen@h-partners.com> - 2.084-1
changelog:
  - upgrade version to 2.084:
    - various fixes for edge cases
    - update documentation to reflect default SSL_version


author: Wenlong Zhang <zhangwenlong@loongson.cn> - 2.084-2
changelog:
  - Passing NO_NETWORK_TESTING=1 as an environment variable
    solves the interactive issue required for using rpmbuild locally


author: YangengLiu <dev01202@linx-info.com> - 2.098-1
changelog:
  - update version to 2.098
  - upgrading from plain socket (no object) by using correct fdopen mode +< instead of <+.
  - make sure that an unblessed sockets gets blessed in place instead of using new_from_fd.


author: zhangyao <zhangyao108@huawei.com> - 1:20231213-1
changelog:
  - Upgrade version to 20231213
  - Update certificates
  - Stop installing mk-ca-bundle.pl script
  - Switched tests from Test to Test::More


author: huyubiao <huyubiao@huawei.com> - 2:3.48-1
changelog:
  - update version to 3.48
    - Accept TAP version 14
    - Fix HARNESS_PERL_SWITCHES=-I handling in TAP::Harness::Env
    - Color the "ok"s as well.
    - Skip symlink tests on msys2
    - Use use absolute path for executable tests
    - Space-quote executable if has spaces
    - Avoid using Errno::EINTR directly for platforms without it
    - stop calling import on App::Prove plugins


author: kywqs <weiqingsong@kylinos.cn> - 1:0.908.0-1
changelog:
  - Update perl-YAML-LibYAML to v0.908.0
  - fix(OOP interface): Improve handling of mapping keys, for example numbers


author: Funda Wang <fundawang@yeah.net> - 1.16-8
changelog:
  - force stdin of analysor script
  - merge two META.json/yml analysors for runtime and buildtime into one
  - correctly dump content of META.yml files
  - dump build requires also
  - provide perlmeta_buildrequires script
  - use perl-generators to scan META.json for requirements
  - add perl_from_meta from mageia so that dependencies could be
    fetched from META.json/yml
  - update to 1.16
    * Squash multiple perl(:VERSION) symbols into one
    * Remove perl dependencies that are provided in the same file
    * Fix broken call to perl.prov when filenames contain spaces
    * Add perltest.attr to generate dependencies for tests sub-packages


author: zhangyao <zhangyao108@huawei.com> - 2:2.36-1
changelog:
  - DESC: Upgrade version to 2.36, test code modify, build optimization, avoid the use of magic numbers, deal compilation warning


author: gaihuiying <eaglegai@163.com> - 0.9.5-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add macros to control if need libdrm, pango, libpng and if need to exclude bootlog


author: shaojiansong <shaojiansong@kylinos.cn> - 3.5-5
changelog:
  - Drop seunshare -k/--kill support; the killall() helper is racy and redundant with killall -Z, replace the call site with an error message recommending killall -Z.


author: zhangxingrong <zhangxingrong@uniontech.cn> - 1.19-4
changelog:
  - Fix poptCallbackType documentation
  - Fix multiple typos in comments
  - Fix potential double-free in test3.c


author: Funda Wang <fundawang@yeah.net> - 2.15-2
changelog:
  - fix build with latest gettext
  - harden systemd service file from openSUSE
  - add patch regarding risc-v arch support


author: gaihuiying <eaglegai@163.com> - 2.5.0-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:pre-created upstream default lock dir
         Openssl engine API is deprecated for a while thus disable it


author: gaihuiying <eaglegai@163.com> - 2.5.0-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream
         Fixing up parsing in radiusclient.conf
         Add configure check to see if we have struct sockaddr_ll


author: chenyanpanHW <chenyanpan@huawei.com> - 3.22-52
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/procmail-3.24-rhconfig.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/procmail-3.15.1-man.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/procmail-3.22-truncate.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/procmail-3.24-ipv6.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Zhu Jin <zhujin18@huawei.com> - 4.0.4-8
changelog:
  - library: address a potential race resulting in a fault and avoid strdup() calls in sd2proc() if possible


author: dongyuzhen <dongyuzhen@h-partners.com> - 25.1-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: distinguish between statically and dynamically compiled pc files and cmake dir to prevent BEP binary differences


author: Funda Wang <fundawang@yeah.net> - 25.1-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: fix build with wrong permission
  - DESC: fix conflicts with protobuf2
  - DESC: revert:distinguish between statically and dynamically compiled pc files and cmake dir to prevent BEP binary differences


author: zhengxiaoxiao <zhengxiaoxiao2@huawei.com> - 25.1-13
changelog:
  - Type:CVE
  - CVE:CVE-2026-0994
  - SUG:NA
  - DESC:Fix Any recursion depth bypass in Python json_format.ParseDict


author: liuchao <liuchao173.huawei.com> - 1.5.0-1
changelog:
  - upgrade to 1.5.0:
    - Makefile.am: change link order
    - GitHub actions fail on Windows due to missing unzip command
    - Export and install CMake targets
    - Use CMAKE_CURRENT_BINARY_DIR instead of CMAKE_BINARY_DIR
    - remove deprecated functionality
    - Avoid "unused variable" compiler warning
    - Update autotools
    - Support for new Google protobuf 22.x, 23.x releases
    - Miscellaneous fixes
    - Remove protobuf 2.x support
    - Silence some compiler diagnostics
    - Fixing MSVC build for Msbuild and Makefile generators


author: Funda Wang <fundawang@yeah.net> - 17.0-2
changelog:
  - add upstream patch fixing running tests with impossible alignments
  - move language files into lib package
  - cleanup spec


author: Qin Fandong <qinfandong@kylinos.cn> - 3.11.6-42
changelog:
  - Type:CVE
  - CVE:CVE-2026-6879
  - SUG:NA
  - DESC:fix CVE-2026-6879: avoid quadratic behavior in xml.etree.ElementPath index predicates


author: Weifeng Su <suweifeng1@huawei.com> - 5.0.8-1
changelog:
  - upgrade to 5.0.8
    -fix a regression error in 5.0.7
    -update testing to validate against python version 2.7 and 3.5-3.11
    -update broken links / no-existent services and references


author: xu_ping <707078654@qq.com> - 7.0.0-1
changelog:
  - Upgrade version to 7.0.0
  - Python 3.12 support and python 3.7 no longer supported
  - Add support bind mount propagation.


author: xuchenchen <xuchenchen@kylinos.cn> - 3.1.3-2
changelog:
  - Type: CVE
  - CVE: CVE-2024-34064
  - SUG: NA
  - DESC: fix disallow invalid characters in keys to xmlattr filter


author: shixuantong <shixuantong1@huawei.com> - 1:1.24.3-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:remove f2py form python3-numpy package. It is in python3-numpy-f2py
         Do not pack open-source test case files


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 23.2-1
changelog:
  - Update package with version 23.2
    Add python 3.12 support.
    Add types for packaging.version._Version.
    Add platform tag support for LoongArch.
    Update pyupgrade to Python 3.7+
    Support enriched metadata.


author: kaijie Gu <jiekgu@foxmail.com> - 24.1-1
changelog:
  - Update package with version 24.1
    Add support for Python 3.13
    Fix typo in _parser docstring
    Modernise type annotations using FA rules from ruff
    Document markers.default_environment()


author: zhaojingyu <zhaojingyu@kylinos.cn> - 2.2.2-1
changelog:
  - Update to 2.2.2
  - Avoid issuing a spurious DeprecationWarning when a custom DataFrame or Series subclass method is called


author: yixiangzhike <yixiangzhike007@163.com> - 3.1.1-1
changelog:
  - update version to 3.1.1
    - Fixed bug in NotAny where expr parse action was not being run
    - Fix regex matching for Python quoted strings
    - Make create_diagram() code compatible with latest version of railroad-diagrams
    - Support Python 3.12
    - Small perf optimization for `expr | ""` mapping to `Optional(expr)`
    - Redo QuotedString '\' escape handling as a state machine
    - Add ParseResults.deepcopy()
    - Remove ^ and $ tags from pp.common.url regex
    - Added DelimitedList class, for better handling of naming and diagramming
    - Deprecate ParserElement.validate()
    - Added new class method ParserElement.using_each
    - Fix bug in delimited_list
    - Added python_quoted_string; fixed exception messages for ParseElementEnhance subclasses
    - Enable packrat in verilogParse.py by default
    - Add embed argument to create_diagram
    - Add support for slice in expr[] notation
    - Fixed bug in srange
    - Added Lox language parser


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 7.4.4-1
changelog:
  - Update package with version 7.4.4
    Fix non-string constants at the top of file being detected as docstrings on Python>=3.8.
    Removed unhelpful error message from assertion rewrite mechanism
    Updated documentation to refer to hyphenated options
    Markers are now considered in the reverse mro order to ensure base class markers are considered first
    Improved disclaimer on pytest plugin reference page to better indicate this is an automated
    Added ExceptionInfo.from_exception() <pytest.ExceptionInfo.from_exception>


author: Funda Wang <fundawang@yeah.net> - 4.18.2-34
changelog:
  - disable automatic maintenance when autopatching with git
    https://github.com/git/git/commit/1942d48380fec53f76361e9adebef15b5db9628a
  - sync patches within branches


author: gaihuiying <eaglegai@163.com> - 1.17.1-15
changelog:
  - Type:CVE
  - CVE:CVE-2025-11411
  - SUG:NA
  - DESC:Additional fix for CVE-2025-11411 to include YXDOMAIN and non-referral nodata answers in the mitigation


author: gaihuiying <eaglegai@163.com> - 1.17.1-16
changelog:
  - Type:cves
  - CVE:CVE-2026-33278,CVE-2026-42944,CVE-2026-41292,CVE-2026-42959,CVE-2026-42960
  - SUG:NA
  - DESC:fix CVE-2026-33278,CVE-2026-42944,CVE-2026-41292,CVE-2026-42959,CVE-2026-42960


author: gaihuiying <eaglegai@163.com> - 1.17.1-17
changelog:
  - Type:cves
  - CVE:CVE-2026-32792,CVE-2026-42923,CVE-2026-40622,CVE-2026-42534,CVE-2026-44390,CVE-2026-44608
  - SUG:NA
  - DESC:fix CVE-2026-32792,CVE-2026-42923,CVE-2026-40622,CVE-2026-42534,CVE-2026-44390,CVE-2026-44608


author: gaihuiying <eaglegai@163.com> - 1.17.1-19
changelog:
  - Type:CVE
  - CVE:CVE-2026-46582,CVE-2026-40691,CVE-2026-42955,CVE-2026-44621,CVE-2026-44687,CVE-2026-44690,CVE-2026-50046,CVE-2026-50243,CVE-2026-50248,CVE-2026-50251,CVE-2026-55708,CVE-2026-55717,CVE-2026-55990,CVE-2026-56416
  - SUG:NA
  - DESC:fix CVE-2026-46582,CVE-2026-40691,CVE-2026-42955,CVE-2026-44621,CVE-2026-44687,CVE-2026-44690,CVE-2026-50046,CVE-2026-50243,CVE-2026-50248,CVE-2026-50251,CVE-2026-55708,CVE-2026-55717,CVE-2026-55990,CVE-2026-56416


author: chengyechun <chengyechun1@huawei.com> - 1.26.18-2
changelog:
  - Type:CVE
  - CVE:CVE-2024-37891
  - SUG:NA
  - DESC:fix CVE-2024-37891 Strip Proxy-Authorizatioin header on redirects


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 1.26.18-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Prevent issue in HTTPResponse().read() when decoded_content is True and then False


author: Fei Xu <xufei30@huawei.com> - 11:8.2.0-79
changelog:
  - migration/cgs:fix stream leak on error in virtcca_mig_stream_setup
  - hw/ub:remove check after g_malloc0 in line_generator
  - target/i386: Add support for CPUID leaf 0x8000001A
  - target/i386: Add support for CPUID leaf 0x8c860000
  - target/i386: Add Hygon Chengdu-v2 CPU model
  - target/i386: Add Hygon Dharma-v2 CPU model
  - target/i386: Add tsc-adjust to Hygon Chengdu‑v2
  - target/i386: Add avx512-vp2intersect to Chengdu‑v2
  - target/i386: Expose CPUID 0x8000001A values to Dharma-v2 and Chengdu-v2
  - target/i386: Add xsaves to Dharma-v2 and Chengdu-v2
  - hw/arm/virt: Support larger highmem MMIO regions
  - vfio/pci: Ascend910B change to bar2 quirk
  - vfio/pci: support guest numa node for Ascend910B devices by bar quirk
  - vfio/pci: add NORMALNC bar quirk feature for Ascend910B
  - lsi53c895a: clear tag byte when processing messages
  - lsi53c895a: fix use-after-free of cancelled request
  - virtio-gpu: fix overflow check when allocating 2d image (CVE-2026-3886)
  - ui/vnc: fix OOB read updating VNC update frequency stats(CVE-2026-48003)
  - target/loongarch: Fix compilation errors when enabling the UB function
  - virtio-blk: add missing VIRTIO_BLK_T_SCSI_CMD size check (CVE-2026-48914)


author: Fei Xu <xufei30@huawei.com> - 11:8.2.0-80
changelog:
  - hw/net/rocker_of_dpa: Check group ID pointers are not NULL(CVE-2022-36648)
  - hw/net/rocker_of_dpa: Avoid unaligned accesses in _of_dpa_flow_match()
  - ub: support --enable-ub/--disable-ub configure option and update unit tests with reference ACPI tables
  - hw/ub: fix wrong log message in fill_cq/msgq_rq_init
  - block/graph-lock: fix missed wakeup in bdrv_graph_co_rdunlock()
  - target/riscv: clear mseccfg on reset for all dependent extensions
  - target/riscv: rvv: Handle source overlap of vector widening reduction instructions
  - hw/loongarch/virt: fix cpu hotplug issue
  - Fix compatibility issues with the upstream kernel
  - tests/avocado: Update LoongArch bios file
  - hw/mips/loongson3_virt: Emulate suspend function
  - hw/intc/loongarch_ipi: Remove pointless MAX_CPU check
  - hw/intc/loongarch_ipi: Rename as loongson_ipi
  - hw/intc/loongson_ipi: Implement IOCSR address space for MIPS
  - hw/intc: Remove loongarch_ipi.c
  - hw/intc/loongson_ipi: Provide per core MMIO address spaces
  - hw/intc/loongson_ipi: Replace ipi_getcpu with cpu_by_arch_id
  - hw/mips/loongson3_virt: Wire up loongson_ipi device
  - util/bufferiszero: Remove SSE4.1 variant
  - util/bufferiszero: Remove AVX512 variant
  - util/bufferiszero: Reorganize for early test for acceleration
  - util/bufferiszero: Remove useless prefetches
  - util/bufferiszero: Optimize SSE2 and AVX2 variants
  - util/bufferiszero: Improve scalar variant
  - util/bufferiszero: Introduce biz_accel_fn typedef
  - util/bufferiszero: Simplify test_buffer_is_zero_next_accel
  - util/bufferiszero: Add simd acceleration for aarch64
  - tests/bench: Add bufferiszero-bench
  - util/bufferiszero: Split out host include files
  - util/bufferiszero: Add loongarch64 vector acceleration
  - MAINTAINERS: Add myself as a reviewer of LoongArch virt machine
  - qemu/timer: Add host ticks function for LoongArch
  - target/loongarch/gdbstub: Add vector registers support
  - hw/intc/loongson_ipi: Access memory in little endian
  - hw/intc/loongson_ipi: Fix resource leak
  - hw/intc/loongson_ipi: Declare QOM types using DEFINE_TYPES() macro
  - docs: Correct Loongarch -> LoongArch
  - qapi/machine: Belatedly document target loongarch64 is since 7.1
  - hw/intc/loongson_ipi: Rename LoongsonIPI -> LoongsonIPIState
  - hw/intc/loongson_ipi: Extract loongson_ipi_common_realize()
  - hw/intc/loongson_ipi: Add TYPE_LOONGSON_IPI_COMMON stub
  - hw/intc/loongson_ipi: Move common definitions to loongson_ipi_common.h
  - hw/intc/loongson_ipi: Move IPICore::mmio_mem to LoongsonIPIState
  - hw/intc/loongson_ipi: Move IPICore structure to loongson_ipi_common.h
  - hw/intc/loongson_ipi: Pass LoongsonIPICommonState to send_ipi_data()
  - hw/intc/loongson_ipi: Add LoongsonIPICommonClass::get_iocsr_as handler
  - hw/intc/loongson_ipi: Add LoongsonIPICommonClass::cpu_by_arch_id handler
  - hw/intc/loongson_ipi: Expose loongson_ipi_core_read/write helpers
  - hw/intc/loongson_ipi: Move common code to loongson_ipi_common.c
  - hw/intc/loongarch_ipi: Add loongarch IPI support
  - hw/loongarch/virt: Replace Loongson IPI with LoongArch IPI
  - hw/intc/loongson_ipi: Restrict to MIPS
  - hw/intc/loongson_ipi: Remove unused headers
  - roms: Support compile the efi bios for loongarch
  - hw/loongarch/fw_cfg: Build in common_ss[]
  - linux-headers: Update to Linux v6.12-rc5
  - hw/intc/loongarch_extioi: Use set_bit32() and clear_bit32() for s->isr
  - MAINTAINERS: add myself as the maintainer for LoongArch VirtMachine
  - include: Add loongarch_pic_common header file
  - include: Move struct LoongArchPCHPIC to loongarch_pic_common header file
  - hw/intc/loongarch_pch: Merge instance_init() into realize()
  - hw/intc/loongarch_pch: Rename LoongArchPCHPIC with LoongArchPICCommonState
  - hw/intc/loongarch_pch: Move some functions to file loongarch_pic_common
  - hw/intc/loongarch_pch: Inherit from loongarch_pic_common
  - hw/intc/loongarch_pch: Add pre_save and post_load interfaces
  - hw/intc/loongarch_pch: Code cleanup about loongarch_pch_pic
  - include: Add loongarch_extioi_common header file
  - include: Move struct LoongArchExtIOI to header file loongarch_extioi_common
  - include: Rename LoongArchExtIOI with LoongArchExtIOICommonState
  - hw/intc/loongarch_extioi: Rename LoongArchExtIOI with LoongArchExtIOICommonState
  - hw/intc/loongarch_extioi: Add common realize interface
  - hw/intc/loongarch_extioi: Add unrealize interface
  - hw/intc/loongarch_extioi: Add common file loongarch_extioi_common
  - hw/intc/loongarch_extioi: Inherit from loongarch_extioi_common
  - hw/intc/loongarch_extioi: Add pre_save interface
  - hw/intc/loongarch_extioi: Code cleanup about loongarch_extioi
  - hw/acpi: Upgrade ACPI SPCR table to support SPCR table revision 4 format
  - hw/loongarch/virt: Create fdt table on machine creation done notification
  - hw/loongarch/virt: Improve fdt table creation for CPU object
  - target/loongarch: Use auto method with LSX feature
  - target/loongarch: Use auto method with LASX feature
  - hw/core/loader: Use ssize_t for efi zboot unpacker
  - hw/loongarch/boot: Support Linux raw boot image
  - hw/intc/loongarch_extioi: Get cpu number from possible_cpu_arch_ids
  - hw/intc/loongarch_extioi: Remove num-cpu property
  - hw/intc/loongarch_extioi: Add irq routing support from physical id
  - hw/loongarch/virt: Checkpatch cleanup
  - hw/intc/loongarch_ipi: Implement realize interface
  - hw/intc/loongson_ipi: Remove num_cpu from loongson_ipi_common
  - hw/intc/loongson_ipi: Remove property num_cpu from loongson_ipi_common
  - hw/intc/loongarch_ipi: Get cpu number from possible_cpu_arch_ids
  - hw/intc/loongson_ipi: Add more input parameter for cpu_by_arch_id
  - hw/intc/loongarch_ipi: Use alternative implemation for cpu_by_arch_id
  - target/loongarch: Add dynamic function access with CSR register
  - target/loongarch: Add generic csr function type
  - target/loongarch: Add common header file for CSR registers
  - target/loongarch: Dump all generic CSR registers
  - hw/loongarch/virt: Rename filename acpi-build with virt-acpi-build
  - hw/loongarch/virt: Rename function prefix name
  - hw/loongarch/virt: Add separate file for fdt building
  - hw/loongarch/virt: Set iocsr address space when CPU is created
  - hw/loongarch/virt: Remove unused ipistate
  - hw/loongarch/virt: CPU irq line connection improvement
  - target/loongarch/gdbstub: Fix gdbstub incorrectly handling some registers
  - target/loongarch: Correct maximum physical address in KVM mode
  - target/loongarch: Add post init function for kvm mode
  - target/loongarch: Move kvm specified vCPU property to kvm directory
  - target/loongarch: Add vCPU property for paravirt ipi feature
  - target/loongarch: Add paravirt ipi feature detection
  - target/loongarch: Add vCPU property for kvm steal time feature
  - target/loongarch: Add kvm steal time feature detection
  - target/loongarch: Enable virtual extioi feature
  - hw/intc/loongarch_ipi: Add basic hotplug framework
  - hw/intc/loongarch_ipi: Implment cpu hotplug interface
  - hw/intc/loongarch_ipi: Notify ipi object when cpu is plugged
  - hw/intc/loongarch_extioi: Move gpio irq initial to common code
  - hw/intc/loongarch_extioi: Add basic hotplug framework
  - hw/intc/loongarch_extioi: Implment cpu hotplug interface
  - hw/intc/loongarch_extioi: Use cpu plug notification
  - hw/loongarch/virt: Add CPU topology support
  - hw/loongarch/virt: Add topo properties on CPU object
  - hw/loongarch/virt: Add basic cpu plug interface framework
  - hw/loongarch/virt: Implement cpu unplug interface
  - hw/loongarch/virt: Implement cpu plug interface
  - hw/loongarch/virt: Update the ACPI table for hotplug cpu
  - hw/loongarch/virt: Enable cpu hotplug feature on virt machine
  - target/loongarch: fix make check-functional failed
  - target/loongarch: check tlb_ps
  - qemu/atomic: Rename atomic128-cas.h headers using .h.inc suffix
  - qemu/atomic: Rename atomic128-ldst.h headers using .h.inc suffix
  - qemu/atomic128: Include missing qemu/atomic.h header
  - host/include/loongarch64: Fix inline assembly compatibility with Clang
  - docs/system: Add entry for LoongArch system
  - target/loongarch: Fix error handling of KVM feature checks
  - hw/loongarch/virt: Eliminate error_propagate()
  - target/loongarch: Clean up virt_cpu_irq_init() error handling
  - target/loongarch: Fix the cpu unplug resource leak
  - hw/loongarch/virt: Fix cpuslot::cpu set at last in virt_cpu_plug()
  - hw/loongarch/virt: Replace destination error with error_abort
  - hw/intc/loongarch_pch_msi: Remove gpio input handler
  - linux-user/loongarch64: Decode BRK break codes for FPE signals
  - target/loongarch: Add CRC feature flag and use it to gate CRC instructions
  - target/loongarch: Guard BCEQZ/BCNEZ instructions with FP feature
  - hw/intc/loongarch_ipi: Add reset support
  - hw/intc/loongarch_extioi: Add reset support
  - hw/intc/loongarch_extioi: Replace legacy reset callback with new api
  - hw/intc/loongarch_pch: Add reset support
  - hw/intc/loongarch_pch: Replace legacy reset callback with new api
  - hw/loongarch/virt: Get physical entry address with elf file
  - hw/loongarch/virt: Replace RSDT with XSDT table
  - hw/loongarch/virt: Allow user to customize OEM ID and OEM table ID
  - hw/intc/loongarch_pch: Modify name of some registers
  - hw/intc/loongarch_pch: Modify register name PCH_PIC_xxx_OFFSET with PCH_PIC_xxx
  - hw/intc/loongarch_pch: Remove some duplicate macro
  - hw/intc/loongarch_pch: Set version information at initial stage
  - hw/intc/loongarch_pch: Use relative address in MemoryRegionOps
  - hw/intc/loongarch_pch: Discard write operation with ISR register
  - hw/intc/loongarch_pch: Use generic read callback for iomem32_low region
  - hw/intc/loongarch_pch: Use generic read callback for iomem32_high region
  - hw/intc/loongarch_pch: Use generic read callback for iomem8 region
  - hw/intc/loongarch_pch: Use generic write callback for iomem32_low region
  - hw/intc/loongarch_pch: Use generic write callback for iomem32_high region
  - hw/intc/loongarch_pch: Use generic write callback for iomem8 region
  - hw/intc/loongarch_pch: Use unified trace event for memory region ops
  - hw/intc/loongarch_pch: Rename memory region iomem32_low with iomem
  - hw/intc/loongarch_pch: Set flexible memory access size with iomem region
  - hw/intc/loongarch_pch: Merge three memory region into one
  - hw/loongarch/boot: Adjust the loading position of the initrd
  - hw/loongarch/virt: Fix big endian support with MCFG table
  - hw/intc/loongarch_pch: Convert to little endian with ID register
  - hw/intc/loongarch_extioi: Fix typo issue about register EXTIOI_COREISR_END
  - hw/loongarch/virt: inform guest of kvm
  - hw/loongarch/virt: Remove global variables about initrd
  - hw/loongarch/virt: Remove global variables about memmap tables
  - hw/intc/loongarch_extioi: Add kernel irqchip realize function
  - hw/intc/loongarch_extioi: Add kernel irqchip save and restore function
  - hw/intc/loongarch_ipi: Add kernel irqchip realize function
  - hw/intc/loongson_ipi: Add load and save interface with ipi_common class
  - hw/intc/loongarch_ipi: Add kernel irqchip save and restore function
  - hw/intc/loongarch_pch_msi: Inject MSI interrupt to kernel
  - hw/intc/loongarch_pch: Add kernel irqchip realize function
  - hw/intc/loongarch_pch: Add kernel irqchip save and restore function
  - hw/intc/loongarch_pch: Inject irq line interrupt to kernel
  - hw/loongarch/virt: Add reset support for kernel irqchip
  - target/loongarch: Report error with split kernel_irqchip option
  - hw/loongarch/virt: Disable emulation with IOCSR misc register
  - hw/loongarch/virt: Add kernel irqchip support
  - hw/intc/loongarch_extioi: Move unrealize function to common code
  - target/loongarch: Fix CSR STLBPS register write emulation
  - tests/acpi: Add empty ACPI data files for LoongArch
  - tests/qtest/bios-tables-test: Add basic testing for LoongArch
  - rebuild-expected-aml.sh: Add support for LoongArch
  - tests/acpi: Remove stale allowed tables
  - acpi: Add machine option to disable SPCR table
  - hw/intc/loongarch_extioi: Remove unnecessary qemu/typedefs.h include
  - hw/intc/loongarch_ipi: Fix start fail with smp cpu < smp maxcpus on KVM
  - target/loongarch: Guard 64-bit-only insn translation with TRANS64 macro
  - hw/intc/loongarch_pch_pic: Fix ubsan warning and endianness issue
  - target/loongarch: Move some function definition to kvm directory
  - target/loongarch: Define function loongarch_cpu_post_init as static
  - hw/loongarch/virt: Add BSP support with aux boot code
  - hw/loongarch/virt: Remove unnecessay pre-boot setting with BSP
  - hw/loongarch/virt: Register reset interface with cpu plug callback
  - target/loongarch: move some machine define to virt.h
  - hw/loongarch: add virt feature dmsi support
  - hw/loongarch: add misc register support dmsi
  - loongarch: add a direct interrupt controller device
  - target/loongarch: add msg interrupt CSR registers
  - hw/loongarch: DINTC add a MemoryRegion
  - hw/loongarch: Implement dintc realize and unrealize
  - hw/loongarch: Implement dintc set irq
  - target/loongarch: Add CSR_ESTAT.bit15 and CSR_ECFG.bit15 for msg interrupts.
  - hw/loongarch: Implement DINTC plug/unplug interfaces
  - target/loongarch: Fix page size set issue with CSR_STLBPS
  - bios-tables-test-allowed-diff.h: Allow LoongArch DSDT.*
  - hw/loongarch/virt: Align VIRT_GED_CPUHP_ADDR to 4 bytes
  - tests/data/acpi/loongarch64: Update expected DSDT.*
  - hw/loongarch/virt: Remove header file ls7a.h
  - hw/loongarch/virt: Sort order by hardware device base address
  - target/loongarch: Replace VMSTATE_UINTTL() -> VMSTATE_UINT64()
  - target/loongarch: Remove target_ulong use in gdb_write_register handler
  - target/loongarch: Use auto method with PTW feature
  - hw/int/loongarch: Include missing system/memory.h header
  - linux-headers: Update to Linux v6.18-rc3
  - target/loongarch: Add PTW feature support in KVM mode
  - target/loongarch: Add PMU migration support in KVM mode
  - target/loongarch: Call function loongarch_la464_init_csr() after realized
  - target/loongarch: Add PMU register dump support in KVM
  - hw/loongarch/virt: Add field ram_end in LoongArchVirtMachineState
  - hw/loongarch/virt: Add field gpex in LoongArchVirtMachineState
  - hw/loongarch/virt: Get irq number from gpex config info
  - hw/loongarch/virt: Get PCI info from gpex config info
  - hw/loongarch/virt: Add property highmem_mmio with virt machine
  - hw/loongarch/virt: Add high MMIO support with GPEX host
  - hw/loongarch/virt: Add property highmem-mmio-size with virt machine
  - hw/loongarch: Use explicit little-endian LD/ST API
  - hw/loongarch/virt: Modify the interrupt trigger type in fdt table
  - hw/loongarch/virt: Fix irq allocation failure with pci device from fdt
  - hw/loongarch/virt: Dont abort on access to unimplemented IOCSR
  - configs/targets: Forbid LoongArch to use legacy native endianness APIs
  - target/loongarch: Add LA v1.1 instructions to max cpu
  - target/loongarch: Fix query-cpu-model-expansion to reject props
  - target/loongarch: Add missing vCPU features with QMP method
  - target/loongarch: Add full type support with query-cpu-model-expansion
  - target/loongarch: Add property set with query-cpu-model-expansion
  - target/loongarch: Add detailed information with CPU Product ID
  - target/loongarch: Add default cpucfg3 with LA464 CPU
  - target/loongarch: Add generic CPU model information
  - target/loongarch: Add host CPU model in kvm mode
  - target/loongarch: Add some CPUCFG bits with host CPU model
  - hw/loongarch: Use loongarch_palen_mask()
  - bios-tables-test-allowed-diff.h: Allow LoongArch DSDT.*
  - hw/loongarch: add rtc acpi table
  - tests/qtest/bios-tables-test: Update DSDT blobs after loongarch rtc change
  - hw/loongarch: modify rtc fdt table
  - fix compile error
  - target/loongarch: Enable paravirt ipi feature
  - linux-headers: update loongarch linux headers from OLK-6.6
  - target/loongarch: disable msgint and dmsi features
  - add loongarch binaries for edk2-stable202408
  - qemu/atomic: Finish renaming atomic128-cas.h headers
  - Migration/urma: use uvs_get_path_set to replace uvs_get_route_list
  - migration/virtcca: add forward declaration for virtcca_mig_cleanup
  - ub_ummu: support CMD_TLBI_OS_ASID_U and CMD_TLBI_HYP_ASID_U command
  - Revert "target/riscv: clear mseccfg on reset for all dependent extensions"


author: Fei Xu <xufei30@huawei.com> - 11:8.2.0-81
changelog:
  - i386/kvm: Move architectural CPUID leaf generation to separate helper
  - pci-host/q35: Move PAM initialization above SMRAM initialization
  - q35: Introduce smm_ranges property for q35-pci-host
  - hw/i386/acpi: Set PCAT_COMPAT bit only when pic is not disabled
  - confidential guest support: Add kvm_init() and kvm_reset() in class
  - i386/sev: Switch to use confidential_guest_kvm_init()
  - ppc/pef: switch to use confidential_guest_kvm_init/reset()
  - s390: Switch to use confidential_guest_kvm_init()
  - scripts/update-linux-headers: Add setup_data.h to import list 
  - scripts/update-linux-headers: Add bits.h to file imports
  - linux-headers: Update to Linux v6.8-rc6
  - linux-headers: update to current kvm/next
  - runstate: skip initial CPU reset if reset is not actually possible
  - KVM: remove kvm_arch_cpu_check_are_resettable 
  - target/i386: introduce x86-confidential-guest
  - target/i386: Implement mc->kvm_type() to get VM type
  - target/i386: SEV: use KVM_SEV_INIT2 if possible
  - i386/pc: Drop pc_machine_kvm_type()
  - i386/sev: Add legacy-vm-type parameter for SEV guest objects
  - hw: Add compat machines for 9.0
  - hw: Add compat machines for 9.1
  - target/i386: add guest-phys-bits cpu property
  - hw/i386/sev: Use legacy SEV VM types for older machine types
  - trace/kvm: Split address space and slot id in trace_kvm_set_user_memory()
  - migration: prevent migration when VM has poisoned memory
  - kvm: Introduce support for memory_attributes
  - RAMBlock: Add support of KVM private guest memfd
  - kvm: Enable KVM_SET_USER_MEMORY_REGION2 for memslot
  - kvm/memory: Make memory type private by default if it has guest memfd backend
  - backends: Use g_autofree in HostMemoryBackendClass::alloc() handlers
  - backends: Simplify host_memory_backend_memory_complete()
  - HostMem: Add mechanism to opt in kvm guest memfd via MachineState
  - RAMBlock: make guest_memfd require uncoordinated discard
  - physmem: Introduce ram_block_discard_guest_memfd_range()
  - kvm: handle KVM_EXIT_MEMORY_FAULT 
  - linux-headers: riscv: add ptrace.h
  - scripts/update-linux-header.sh: be more src tree friendly
  - linux-headers: Update to current kvm/next
  - update-linux-headers: import linux/kvm_para.h header
  - machine: allow early use of machine_require_guest_memfd
  - i386/sev: Replace error_report with error_setg
  - i386/sev: Introduce "sev-common" type to encapsulate common SEV state
  - i386/sev: Move sev_launch_update to separate class method
  - i386/sev: Move sev_launch_finish to separate class method
  - i386/sev: Introduce sev-snp-guest object
  - i386/sev: Add a sev_snp_enabled() helper
  - i386/sev: Add sev_kvm_init() override for SEV class
  - i386/sev: Add snp_kvm_init() override for SNP class
  - i386/cpu: Set SEV-SNP CPUID bit when SNP enabled
  - i386/sev: Dont return launch measurements for SEV-SNP guests
  - i386/sev: Add a class method to determine KVM VM type for SNP guests
  - i386/sev: Update query-sev QAPI format to handle SEV-SNP
  - i386/sev: Add the SNP launch start context
  - i386/sev: Add handling to encrypt/finalize guest launch data
  - i386/sev: Set CPU state to protected once SNP guest payload is finalized
  - hw/i386/sev: Add function to get SEV metadata from OVMF header
  - i386/sev: Add support for populating OVMF metadata pages
  - i386/sev: Add support for SNP CPUID validation
  - system/cpus: rename qemu_mutex_lock_iothread() to bql_lock()
  - i386/tcg: implement x2APIC registers MSR access
  - apic: add support for x2APIC mode
  - hw/i386/x86: Reverse if statement
  - hw/i386/x86: Fix PIC interrupt handling if APIC is globally disabled
  - hw/i386/q35: Simplify pc_q35_init() since PCI is always enabled
  - hw/i386/x86: Let ioapic_init_gsi() take parent as pointer
  - hw/core: Declare CPUArchId::cpu as CPUState instead of Object
  - hw/i386/pc_sysfw: Remove unused parameter from pc_isa_bios_init()
  - hw/i386/x86: Eliminate two if statements in x86_bios_rom_init()
  - hw/i386: Have x86_bios_rom_init() take X86MachineState rather than MachineState
  - hw/i386/x86: Dont leak "isa-bios" memory regions
  - hw/i386/x86: Dont leak "pc.bios" memory region
  - hw/i386/x86: Extract x86_isa_bios_init() from x86_bios_rom_init()
  - hw/i386/sev: Add support to encrypt BIOS when SEV-SNP is enabled
  - i386/sev: Invoke launch_updata_data() for SEV class
  - i386/sev: Invoke launch_updata_data() for SNP class
  - i386/kvm: Add KVM_EXIT_HYPERCALL handling for KVM_HC_MAP_GPA_RANGE
  - i386/sev: Enable KVM_HC_MAP_GPA_RANGE hcall for SNP guests
  - i386/sev: Extract build_kernel_loader_hashes
  - i386/sev: Reorder struct declarations
  - i386/sev: Allow measured direct kernel boot on SNP
  - memory: Have memory_region_init_ram_flags_nomigrate() return a boolean
  - memory: Have memory_region_init_ram_nomigrate() handler return a boolean
  - memory: Have memory_region_init_rom_nomigrate() handler return a boolean
  - memory: Simplify memory_region_init_rom_nomigrate() calls
  - memory: Simplify memory_region_init_ram_from_fd() calls
  - memory: Have memory_region_init_ram() handler return a boolean
  - memory: Have memory_region_init_rom() handler return a boolean
  - memory: Have memory_region_init_rom_device_nomigrate() return a boolean
  - memory: Simplify memory_region_init_rom_device_nomigrate() calls
  - memory: Have memory_region_init_rom_device() handler return a boolean
  - memory: Have memory_region_init_resizeable_ram() return a boolean
  - memory: Have memory_region_init_ram_from_file() handler return a boolean
  - memory: Have memory_region_init_ram_from_fd() handler return a boolean
  - memory: Introduce memory_region_init_ram_guest_memfd()
  - hw/i386/pc_sysfw: Alias rather than copy isa-bios region
  - hw/i386/sev: Use guest_memfd for legacy ROMs
  - hw/i386: Add support for loading BIOS using guest_memfd
  - i386/sev: fix unreachable code coverity issue
  - i386/sev: Move SEV_COMMON null check before dereferencing
  - i386/sev: Return when sev_common is null
  - target/i386: SEV: do not assume machine->cgs is SEV
  - target/i386: SEV: rename sev_snp_guest->id_block
  - target/i386: SEV: store pointer to decoded id_block in SevSnpGuest
  - target/i386: SEV: rename sev_snp_guest->id_auth
  - target/i386: SEV: store pointer to decoded id_auth in SevSnpGuest
  - target/i386/sev: Use size_t for object sizes
  - target/i386/sev: Fix printf formats
  - target/i386: SEV: fix formatting of CPUID mismatch message
  - i386/sev: Fix error message in sev_get_capabilities()
  - i386/sev: Fallback to the default SEV device if none provided in sev_get_capabilities()
  - target/i386: add support for masking CPUID features in confidential guests
  - target/i386/SEV: implement mask_cpuid_features
  - i386/sev: Dont allow automatic fallback to legacy KVM_SEV*_INIT
  - target/i386: SEV: fix mismatch in vcek-disabled property name
  - scripts/update-linux-headers.sh: Fix the path of setup_data.h
  - accel/kvm: Zero out mem explicitly in kvm_set_user_memory_region()
  - backends/hostmem: Fix block comments style (checkpatch.pl warnings)
  - system/physmem: use return value of ram_block_discard_require() as errno
  - hw/intc/apic: fix memory leak
  - virtio-scsi: pass the same cdb_size to virtio_scsi_pop_req and virtio_scsi_handle_cmd_req_prepare(CVE-2026-5763)
  - target/i386/csv: include exec/hwaddr.h to fix CONFIG_CSV=off build


author: Fei Xu <xufei30@huawei.com> - 11:8.2.0-82
changelog:
  - tcg: move free_tcg_plugin_context to the correct macro range
  - hw/arm/virt: Fix build error on ARM
  - virtio-blk: fix zone report buffer out-of-memory (CVE-2026-5761)
  - vfio/spapr: Add some content to sPAPR VFIOIOMMU QOM interface
  - iotests/copy-before-write: lower throttle rate to fix cbw-timeout flakiness


author: Fei Xu <xufei30@huawei.com> - 11:8.2.0-83
changelog:
  - backport: accel/kvm: check for KVM_CAP_READONLY_MEM on VM
  - net/slirp: libslirp 4.9.0 compatibility
  - docs: fix invalid footnote syntax


author: Fei Xu <xufei30@huawei.com> - 11:8.2.0-84
changelog:
  - hw/arm: virt: Add CPU cache topology support for ACPI PPTT
  - hw/usb/hcd-xhci-sysbus: Fix OOB heap access in xhci_sysbus_intr_raise() (CVE-2026-16043)
  - hw/9pfs: add xattr FID limit to prevent memory exhaustion (CVE-2026-8348)
  - ui/vnc: validate SetPixelFormat field ranges (CVE-2026-15578)
  - usbredir: fix use-after-free on buffered bulk packet overflow (CVE-2026-15705)
  - usbredir: fix infinite loop and SIGFPE with zero max_packet_size (CVE-2026-63319)
  - hw/9pfs: add response_buffer_size transport callback
  - 9pfs/virtio: implement response_buffer_size callback
  - 9pfs/xen: implement response_buffer_size callback
  - hw/9pfs: cap Treaddir allocation (CVE-2026-9238)
  - ui/vnc: fix OOB write in VNC stats array (CVE-2026-48002)
  - ui/vnc: fix OOB write in lossy rect worker code (CVE-2026-48002)
  - ui/vnc: fix OOB write in vnc_refresh_lossy_rect (CVE-2026-48002)
  - ui/vnc: fix out-of-bounds write in lossy refresh dirty marking (CVE-2026-61475)
  - ui/vnc: remove redundant rows computation
  - hw/9pfs: fix O_TRUNC bypass on read-only export (CVE-2026-63318)
  - ub: support UBUS-FIRMWARE version exchange function
  - hw/arm: virt: Support configurable cache size via smp-cache option


author: Fei Xu <xufei30@huawei.com> - 11:8.2.0-85
changelog:
  - hw/arm/virt: add legacy_cpu_hotplug for virt-6.2 and older board
  - arm_gicv3: handle GICR propbaser correctly in cross-version migration


author: Fei Xu <xufei30@huawei.com> - 11:8.2.0-86
changelog:
  - hw/vfio/hct: Support forced hct process killing operation.
  - hw/vfio/hct: optmization for hct memory usage
  - hw/vfio/hct: update migrate_support flag after migration
  - hw/vfio/hct: memory bind optimization
  - hw/vfio/hct: dma mapping use daemon process
  - hw/vfio/hct: fix vm stuck during 2nd migration
  - hw/vfio/hct: compatible with older hct version
  - hw/vfio/hct: fix possible duplicate iova map for GPA
  - hw/vfio/hct: support rollback after live migration failure.
  - hw/vfio/hct: solve ci report format and code problems
  - ub:supprt call id service table
  - ub: update UBRT test reference table


author: Fei Xu <xufei30@huawei.com> - 11:8.2.0-87
changelog:
  - virtio-balloon: add host-initiated memory operation virtqueue
  - hw/block/pflash_cfi01: limit backing file size to 64MB and skip writes beyond 1MB on aarch64


author: lifeifei <lifeifei@kylinos.cn> - 2.19-3
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Add the socket option IPV6_MULTICAST_LOOP to prevent the interface from autoconfiguring using RA messages sent by itself.


author: andy <liuyang01@kylinos.cn> - 0.8.0-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patches
         Use the right dev_t decoding for diskerror handler


author: shixuantong <shixuantong1@huawei.com> - 8.2-4
changelog:
  - Add shell command to switch bracketed-paste mode from on to off to keep consistent with realine-8.0


author: sunsuwan <sunsuwan3@huawei.com> - 1.2.6-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:add a user directory when the rpc user directory does not exist


author: yaoxin <1024769339@qq.com> - 2.7.0-1
changelog:
  - Update to 2.7.0:
    * Don't mask rpm2cpio failure in Pkg._extract_rpm()
    * New warning about the usage of %suse_update_desktop_file
    * FilesCheck: Do not error about non-readable %ghost
    * Don't show suse-update-desktop-file-deprecated for yast packages
    * Handle the missing buildroot in rpm 4.20 gracefully
    * FilesCheck: Update FSF address check to match new only remote
    * Add declarative build support to SpecCheck


author: warlock <hunan@kylinos.cn> - 2.8.0-1
changelog:
  - Update to 2.8.0
    * Fix grammatical direction for unstripped-binary-or-object message
    * SpecCheck: Report rpm warnings on spec files
    * Fixup fallback regexp for buildroot detection
    * AlternativesCheck: Fix .conf files regex


author: dongyuzhen <dongyuzhen@h-partners.com> - 2.18-5
changelog:
  - revert: remove the require to rpm-build.For consistency with other community-released dependencies


author: Funda Wang <fundawang@yeah.net> - 3.2.7-6
changelog:
  - fix CVE-2024-12084, CVE-2024-12085, CVE-2024-12086, CVE-2024-12087,
    CVE-2024-12088, CVE-2024-12747


author: zhangyaqi <zhangyaqi@kylinos.cn> - 8.2312.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memory leak in omazureeventhubs on accepted PN_DELIVERY event


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 8.2312.0-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix passing the value to EscapeChar
         Do not free the uninitialized cstring
         Keep original free pattern
         network subsystem: improve connection failure error message
         Fix runConf NULL pointer refence
         rainerscript: do not try to call a function if it does not exist
         nsd_ptcp regression fix: remove debugging messages emited to stderr
         Fix legacy $ActionQueueDiscardMark parameter


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 8.2312.0-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:gnutls bugfix: Avoid blocking sockets during TLS handshake
         gnutls bugfix: Add timeout to GnuTLS handshake
         core: fix potential NULL ptr access on HUP in very early startup phase
         omfwd: fix segfault in UDP freeaddrinfo
         gnutls TLS driver: fix small memory leak
         rsyslog startup bugfix: cosmetic memory leak
         core: fix potential misadressing in sigmask
         covscan: remove defect type of RESOURCE_LEAK
         Fix a buffer overflow when the argument to replace is empty


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 8.2312.0-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:omusrmsg bugfix: potential null pointer dereference causes segfault
         omusrmsg bugfix: potential double free, which can cause segfault
         imjournal: fix double sd_journal_close() during thread cancellation
         imuxsock: Add statistics counter for discarded messages
         omjournal: Fix priority value
         fix stringop-overread warning in omusrmsg
         fix hashtable realloc memset range
         fix off-by-one buffer overflow


author: qujingling <qujingling@huawei.com> - 8.2312.0-10
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:imjournal: initialize instance fields to avoid invalid free
         imjournal: fix vulnerability in state file creation


author: xinghe <xinghe2@h-partners.com> - 8.17.2-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:extending the certificate validate period
         remove redundant patches


author: zhengxiaoxiao <zhengxiaoxiao2@huawei.com> - 2:4.14.3-1
changelog:
  - update version to 4.14.3
    -Avoid null pointer dereference
    -Update utmp at an initial login
    -Merge libshadow and libmisc into a single libshadow
    -Adding the userdel and groupdel hooks to release tarball


author: yueyuankun <yueyuankun@kylinos.cn> - 15.7-21
changelog:
  - spec: Remove debugsource requirement from debuginfo
  - Allow debuginfo to be installed alone without pulling in the debugsource package.


author: wjiang <app@cameyan.com> -15.7-22
changelog:
  - Backport bugfix patches from upstream
  - Fix build with binutils 2.46 (c4665d2)
  - Fix memory leak on TPM log error in mirror_one_mok_variable (92630f2)


author: liuqingtao <liu.qingtao2@zte.com.cn> -1.1.10-3
changelog:
  - optimized-RV-FindMatchLength-improving-compress-speed--upstream-accepted
  - DESC:Use-high-performance-FindMatchLength-to-Optimize for RV


author: zhengziyang <zheng.ziyang@zte.com.cn> -1.1.10-5
changelog:
  - backport：add rvv support for MemCopy64，upstream accepted
  - DESC:This PR add RVV to  optimize Memcopy64 function , improving compression speed


author: zhengziyang <zheng.ziyang@zte.com.cn> -1.1.10-6
changelog:
  - backport：gate__builtin_ctzll-behind-Zbb-to-avoid-10
  - DESC:RISC-V: use __builtin_ctzll only when Zbb is present


author: zhengziyang <zheng.ziyang@zte.com.cn> -1.1.10-7
changelog:
  - backport：refactor-Align-RISC-V-implementation-with-AArch64-branchless-mask-extraction
  - DESC:Align RISC-V with AArch64 by using the same branchless mask extraction
   	technique instead of the previous else-branch implementation.


author: zhengziyang <zheng.ziyang@zte.com.cn> -1.1.10-8
changelog:
  - backport:RISC-V-Optimize-decompression-with-branchless-AdvanceToNextTagRVOptimized.patch
  - DESC:Optimize decompression for RISC-V with branchless tag advancement


author: Maodi Ma <mamaodi@hygon.cn> -1.1.10-9
changelog:
  - Vendor-check-and-CMOV-opt-in-EmitCopy-for-Hygon.patch
  - CMOV-opt-in-AdvanceToNextTag-for-Hygon.patch
  - AVX-wildcopy-in-decompress-for-Hygon.patch
  - Change-hash-func-for-Hygon.patch
  - DESC:Optimization for Hygon CPU


author: xinghe <xingheyd@163.com> - 7:6.6-8
changelog:
  - Type:cves
  - ID:CVE-2026-33526 CVE-2026-33515 CVE-2026-32748
  - SUG:NA
  - DESC:fix CVE-2026-33526 CVE-2026-33515 CVE-2026-32748


author: yixiangzhike <yixiangzhike007@163.com> - 1.9.15p5-7
changelog:
  - apply 2 patches: backport-sudo_rfc1938_setup--fix-out-of-bounds-read-if-the-.patch, backport-sudo_auth_init--Fix-setting-FLAG_ONEANDONLY-if-onl.patch


author: zhangxianting <zhangxianting@uniontech.com> - 0.9-64
changelog:
  - Type:patch
  - CVE:NA
  - SUG:NA
  - DESC:patch hunk FAILED bacause of the arch judgement of sw_64 and loongarch64


author: laokz <zhangkai@iscas.ac.cn> - 0.9-67
changelog:
  - Type:fix
  - CVE:NA
  - SUG:NA
  - DESC:riscv64: reverse -static-pie patch due to unsupported tool-chains


author: lingsheng <lingsheng1@h-partners.com> - 6.04-16
changelog:
  - update libpng 1.6.36 to fix CVE-2011-2501 CVE-2011-2690 CVE-2011-2691
  - CVE-2011-2692 CVE-2011-3045 CVE-2011-3048 CVE-2012-3425 CVE-2015-7981
  - CVE-2015-8126 CVE-2015-8472 CVE-2015-8540 CVE-2016-10087 CVE-2017-12652


author: wjiang <app@cameyan.com> - 255-52
changelog:
  - backport community patches and skip bios_version test:
        backport-login-user-runtime-dir-free-ignored-sd_bus_error-avo.patch
        backport-login-user-runtime-dir-use-STRLEN-where-appropriate.patch
        backport-systemctl-gracefully-adjust-bus-transport-and-runtim.patch
        backport-journal-do-not-rotate-journal-when-MaxRetentionSec-i.patch
        backport-nspawn-use-strv_extend-and-friends-to-build-director.patch
        backport-nspawn-only-remount-usr-with-idmap-when-volatile-yes.patch
        backport-nspawn-mount-var-after-remount_idmap-when-volatile-s.patch
        backport-compress-avoid-a-bunch-of-div-by-zeroes.patch


author: Linux_zhang <244695981@qq.com> - 255-53
changelog:
  - sync community patches
    backport-journal-use-EBADMSG-for-invalid-data-in-file-mmap.patch
    backport-journal-replace-a-bunch-of-assert-with-friendlier-ch.patch


author: wulinfeng <wulinfeng@xfusion.com> - 255-55
changelog:
  - fix coredump generation when systemd-resolved and systemd-networkd service is started then uninstalled


author: Yu Peng <yupeng@kylinos.cn> - 5.0-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Make autoconf-utrace-via-tracepoints.c work with struct folio.


author: Funda Wang <fundawang@yeah.net> - 0.8.2-15
changelog:
  - move glib schemas into main package
  - drop static lib as it was not used by any other packages
  - drop uselss scriptlets as they are handled by rpm file trigger already


author: Yu Peng <yupeng@kylinos.cn> - 1:0.17-81
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix telnet crashes on stack overflow due to infinite recursion.


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com>- 0.6-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:The "cc:No such file or directroy" error message is displayed during compilation.Therefore,add buildrequires gcc.
         The macro unitdir is used.Therefore,add buildrequires systemd


author: chench <chench@hygon.cn> - 4.0.1-5
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:add SM4 algorithm support
    - Add support for udev to create tcm devices
    - add ecc encrypt/decrypt support
    - add bootstrap file from upstream


author: lizhuo <lizhuo@xfusion.com> - 4.0.1-6
changelog:
  - FAPI: Fix missing scanf checks.
    In several cases the return value of scanf was not checked.
    Thus afterwards acces to variables not initialized was possible.


author: lizhuo <lizhuo@xfusion.com> - 4.0.1-7
changelog:
  - FAPI: TCTI Device: Fix using of C string for byte array.
    On arch linux gcc did produce an error because a null terminator
    was added.


author: liuchao <liuchao173@huawei.com> - 2.21.0-1
changelog:
  - upgrade to 2.21.0:
    - api: fixed stop method not to require any parameter
    - plugin_scheduler: fix perf fd leaks
    - allow skipping rollback when restarting TuneD or switching profile
    - function_calc_isolated_cores: no errors for offline CPUs
    - sap-hana: new profile sap-hana-kvm-guest
    - serialized SIGHUP handler to prevent possible bootcmdline corruption
    - fixed possible traceback on SIGHUP
    - updated manual pages to be consistent
    - tuned-adm: better error message for unauthorized switch_profile
    - plugin_sysctl: report reapplied sysctls only on different values
    - plugin_cpu: added support for pm_qos_resume_latency_us
    - plugin_cpu: added support for intel_pstate scaling driver
    - plugin_scheduler: do not leak FDs from the perf
    - profiles: new cpu-partitioning-powersave profile
    - profiles: new profile for AWS EC2
    - throughput-performance: set net.core.somaxconn to at least 2048
    - API: added support for moving devices between instances
    - added support for the API access through the Unix Domain Socket
    - D-Bus: send tracebacks through D-Bus only in debug mode
    - Makefile: added fix for python-3.12
    - do not exit on duplicate config lines


author: ZhaoYu Jiang <jiangzhaoyu@kylinos.cn> - 2.24.1-1
changelog:
  - Upgrade to 2.24.1:
    - fixed privileged execution of arbitrary scripts by active local user. (CVE-2024-52336)
    - added sanity checks for API methods parameters. (CVE-2024-52337)
    - tuned-ppd: fixed controller init to correctly set_on_battery


author: tianmuyang <tianmuyang@huawei.com> - 2.24.1-4
changelog:
  - profiles: add programmable scheduling based on eBPF
  - package:  change package tuned to architecture-dependent


author: langfei <langfei@huawei.com> - 2024a-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Aysén Region moves from -04/-03 to -03; new zone;
  -	Improve recent commentary for Chilean decrees;
  -	No need for America/Coyhaique in zonenow.tab.


author: Liu Chao <liuchao173@huawei.com> - 2024a-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Moldova has used EU transition times since 2022
  	Most of BC moves from PDT to Pacific Time on 03-09
  	Delay America/Vancouver tm_isdst transition


author: liuchao <liuchao173@huawei.com> - 1.90.2-1
changelog:
  - Update to 1.90.2:
    - Fix wireless devices not disappearing from Settings when disconnected
    - Require a newer libgudev to avoid bugs related to newline stripping when reading sysfs attributes
    - Add installed-tests files for use with gnome-desktop-testing
    - Fix integration test to work with system installed upower binary and under jhbuild
    - Detect headsets with kernel batteries such as Logitech and Steelseries headsets, and make them automatically disappear if the headset is turned off (if the kernel driver supports the wireless_status attribute)
    - Hide duplicate Logitech Bluetooth devices (Bolt-compatible devices connected through Bluetooth would show as 2 batteries)
    - Hide duplicate Logitech wireless devices when they get connected through USB as well
    - Fix Bluetooth device names not synchronising, and use user-chosen names when available
    - Handle the "present" sysfs attribute changing
    - Fix iDevices not appearing
    - Fix reading capacity_level with newer libgudev
    - Fix OpenBSD backend
    - Refactor internal battery handling into separate classes
    - Guess charging/discharging state based on energy rate (#196)
    - Fix polling after resume (#198)
    - Fix battery state guessing (#146)
    - Reload history when battery ID changes
    - Test fixes
    - Move state guessing into DisplayDevice
    - Always use 90% threshold to consider a battery full
    - Various test improvements
    - Fix mice showing up as keyboards (#189)
    - Allow unit test inspector to fail (#187)
    - Fix test cases when daemon shuts down too slowly (#188)
    - Remove broken wakeup DBus API
    - Tag UPS hid devices using hwdb and update list from upstream
    - Only permit Refresh method when in debug mode
    - Refactor device polling
    - Refactor udev device discovery and sibling detection
    - Improved testing and CI
    - Handle SIGTERM to trigger a clean shutdown
    - Improve polling of batteries after line-power "online" status change
    - Multiple wacom tablet detection fixes
    - Fix updates after a BT hid power supply moves in sysfs
    - Fix enumeration of "Whats Up!" devices on startup
    - Accept USB power supplies without warning
    - Allow building without gtk-doc


author: yaoxin <1024769339@qq.com> - 0.9.9-1
changelog:
  - Update to 0.9.9:
    * Changed: Require CMake >=3.10.0
    * Fixed: Dissolve undefined behavior in parsing of URIs
    * Fixed: Normalized percent-encoded octets should have uppercase letters
      in the host
    * Fixed: Fix macros URI_VER_SUFFIX_UNICODE and URI_VER_UNICODE
    * Improved: CMake: Compile with -std=c90 by default
    * Improved: Convert remaining DOS (CR/LF) newlines to Unix newlines


author: zhanghongtao <zhanghongtao22@huawei.com> - 017-1
changelog:
  - update package to usbutils-017
  - lsusb: add fallback names for 'lsusb -v' output
  - Honor system libdir and includedir
  - usbutils: lsusb-t: print entries for devices with no interfaces
  - lsusb -t: sort in bus order, not reverse order
  - susb-t: if a driver is not bound to an interface, report "[none]"
  - Generate usbutils.pc pkgconfig file
  - usbreset: Allow idProduct and idVendor to be 0
  - susb: Add function that sorts the output by device ID.
  - lsusb: Additional sorting by bus number.
  - lsusb: This is a more compact implementation of the device list sort implemented within this pull request. The output remains the same as the one demonstrated in the previous commit.


author: liuchao <liuchao173@huawei.com> - 0.14.0-1
changelog:
  - upgrade to 0.14.0:
    - Fix: urcu-bp: only teardown call-rcu worker in destructor
    - Fix: rculfhash: urcu_die() takes positive error value
    - Fix: call_rcu: teardown default call_rcu worker on application exit
    - Fix: join worker thread in call_rcu_data_free
    - Docs: clarify grace period polling API
    - Document grace period polling in rcu-api.md
    - Implement poll rcu stress test in rcutorture
    - urcu-memb,mb,signal: Implement grace period polling
    - Fix: auto-resize hash table destroy deadlock
    - Fix building on MSYS2
    - rculfhash: Include rculfhash-internal.h from local directory
    - Remove "Darwin" from "should also work on list"
    - Merge branch 'adah1972-improve-md'
    - Add semicolons at the end of function prototypes
    - Wrap a file name in backticks
    - Wrap command-line options in backticks
    - Fix a wrong format
    - Wrap URLs in angle brackets
    - Fix Markdown issues
    - Fix: Always check pthread_create for failures
    - Disable signals in URCU background threads
    - Fix: futex.h: include headers outside extern C
    - Fix: add missing unused attribute to _rcu_dereference
    - Fix: change method used by _rcu_dereference to strip type constness
    - Fix: remove type constness in URCU_FORCE_CAST's C++ version
    - Move extern "C" down in include/urcu/urcu-bp.h
    - fix: ifdef linux specific cpu count compat
    - Add unit tests for possible_cpus_array_len
    - fix: sysconf(_SC_NPROCESSORS_CONF) can be less than max cpu id
    - Fix: revise obsolete command in README.md
    - Fix: workqueue: remove unused variable "ret"
    - Fix: urcu-qsbr: futex wait: handle spurious futex wakeups
    - Fix: urcu: futex wait: handle spurious futex wakeups
    - Fix: urcu-wait: futex wait: handle spurious futex wakeups
    - Fix: defer_rcu: futex wait: handle spurious futex wakeups
    - Fix: call_rcu: futex wait: handle spurious futex wakeups
    - Fix: workqueue: futex wait: handle spurious futex wakeups
    - Fix: Use %lu rather than %ld to print count
    - Update ABI definition files
    - Bump version current and age
    - alpha: allocate membarrier system call number
    - Bump version to 0.14.0-pre
    - Improved test framework
    - rculfhash: introduce cds_lfht_node_init_deleted
    - Fix: changelog: v0.13.0 was released in 2021
    - cleanup: i386 arch detection
    - fix: properly detect 'cmpxchg' on x86-32
    - fix: use urcu-tls compat with c++ compiler
    - Fix typo
    - fix: remove autoconf features default value in help message
    - fix: add missing pkgconfig file for memb flavour lib
    - Cleanup: Tests: Remove useless pre-C99 compatibility code from tap.h
    - Document C99 and C++11 requirement in README.md
    - Always use '__thread' for Thread local storage except on MSVC
    - Fix: powerpc32: transparent unions alter calling convention
    - fix: don't use C++ thread_local on MacOs
    - wfcqueue API: implement overloaded wrappers with templates
    - wfcqueue: combine C++ API cds_wfcq_head_cast with overloading
    - wfstack C++ API: implement overloaded wrappers with templates
    - lfstack C++ API: implement overloaded wrappers with templates
    - wfstack: combine C++ API cds_wfs_stack_cast with overloading
    - lfstack: combine C++ API cds_lfs_stack_cast with overloading
    - fix: test_build tap plan
    - Test C++ build of list head init
    - Fix order of initializers in CDS_LIST_HEAD_INIT
    - unit tests: test wfcqueue, wfstack, lfstack empty check functions in C++
    - wfcqueue: implement C++ API based on function overloading
    - wfstack: implement C++ API based on function overloading
    - lfstack: implement C++ API based on function overloading
    - Fix tap.h: remove extra semicolon in pass/fail macros
    - Add C++ build tests
    - Build and run regression and unit tests as C++ programs
    - Add --enable-Werror configure switch
    - Add `urcu_posix_assert()` as `assert()` replacement
    - Rename `urcu_assert()` to `urcu_assert_debug()`
    - cleanup: spelling fixes in comments
    - Make temporary variable in _rcu_dereference non-const
    - (tls-ie2) Fix: x86 and s390: uatomic __hp() macro C++ support
    - Fix: x86 and s390: uatomic __hp() macro clang support
    - Fix: x86 and s390 uatomic: __hp() macro warning with gcc 11


author: yueyuankun <yueyuankun@kylinos.cn> - 0.14.0-3
changelog:
  - Type: compile
  - ID: NA
  - SUG: NA
  - DESC: Fix compilation errors in loongarch architecture
          Replace setup with autosetup


author: zuohsh <zuohongsheng@kylinos.cn> - 2:9.0.2092-40
changelog:
  - fix 5 test failed: Test_ccomplete_no_exec_via_typeref, Test_ccomplete_typeref_completion_still_works, Test_find_completion_backtick_in_path, Test_path_modeline, Test_timer_oneshot.


author: yanjianqing <yanjianqing@kylinos.cn> - 4.1.0-7
changelog:
  - tests: testdriver: Add filesystem socket example
  - cli: Drop unnecessary --disk prop aliases
  - fsdetails: Fix an error with source.socket of virtiofs
  - tests: cli: Fix test output after previous commit
  - cli: --disk: Add driver.metadata_cache options


author: yanjianqing <yanjianqing@kylinos.cn> - 4.1.0-8
changelog:
  - diskbackend: Drop support for sheepdog
  - cli: support --boot loader.stateless=
  - virt-install: Reuse cli.fail_conflicting
  - virt-install: --unattended and --cloud-init conflict
  - cloner: Sync and system uuid
  - virt-install: --help required options are wrong
  - cli: --cpu: Add maxphysaddr.{mode,bits} options
  - tests: Add a compat check for linux2020 in amd-sev test case
  - virtinstall: fix regression with --boot and no install method
  - virtinstall: split no_install conditional apart to track code coverage


author: yangzhuangzhuang<yangzhuangzhuang1@huawei.com> - 0.3.12-3
changelog:
  - The "no acceptable C compiler found" error message is displayed during compilation.Therefore,add buildrequires gcc.


author: chenyanpan <chenyanpan@xfusion.com> - 1.21.4-4
changelog:
  - Fix CVE-2026-15146
  - Fix CVE-2026-58469
  - Fix CVE-2026-58470
  - Fix CVE-2026-58471
  - Fix CVE-2026-58472


author: John W. Linville <linville@redhat.com> - 2019.06.03-5
changelog:
  - Remove patch preventing install of regulatory.bin.5 man page
  - Include regulatory.bin.5 man page in distributed files


author: zhengziyang <zheng.ziyang@zte.com.cn> - 0.164-18.20231001git31e19f92_bootstrap
changelog:
  - riscv64:Add RVV-optimized implementation of VSAD and ASD8 to accelerate vector SAD and accumulated SAD computation.


author: zhengziyang <zheng.ziyang@zte.com.cn> - 0.164-19.20231001git31e19f92_bootstrap
changelog:
  - riscv64:Add RVV-optimized implementation of SATD to accelerate sum of absolute transformed differences for motion estimation.


author: zhengziyang <zheng.ziyang@zte.com.cn> - 0.164-20.20231001git31e19f92_bootstrap
changelog:
  - riscv64:Add RVV-optimized implementation of SSD NV12, SA8D, Hadamard AC and SSIM to accelerate multi-format distortion metrics.


author: zhengziyang <zheng.ziyang@zte.com.cn> - 0.164-21.20231001git31e19f92_bootstrap
changelog:
  - riscv64:Add RVV-optimized implementation of 8x8c intra prediction to accelerate chroma intra prediction for 8x8 blocks.


author: zhengziyang <zheng.ziyang@zte.com.cn> - 0.164-22.20231001git31e19f92_bootstrap
changelog:
  - riscv64:Add RVV-optimized implementation of 8x8 intra prediction to accelerate luma intra prediction for 8x8 blocks.


author: zhengziyang <zheng.ziyang@zte.com.cn> - 0.164-23.20231001git31e19f92_bootstrap
changelog:
  - riscv64:Add RVV-optimized implementation of 8x16c intra prediction to accelerate chroma intra prediction for 8x16 blocks.


author: zhengziyang <zheng.ziyang@zte.com.cn> - 0.164-24.20231001git31e19f92_bootstrap
changelog:
  - riscv64:Add RVV-optimized implementation of 16x16 intra prediction to accelerate luma intra prediction for 16x16 blocks.


author: zhengziyang <zheng.ziyang@zte.com.cn> - 0.164-25.20231001git31e19f92_bootstrap
changelog:
  - riscv64:Add RVV-optimized implementation of intra prediction comparison to accelerate best mode selection.


author: zhengziyang <zheng.ziyang@zte.com.cn> - 0.164-26.20231001git31e19f92_bootstrap
changelog:
  - riscv64:Add RVV-optimized implementation of deblock_strength to accelerate deblocking filter strength computation.


author: zhengziyang <zheng.ziyang@zte.com.cn> - 0.164-27.20231001git31e19f92_bootstrap
changelog:
  - riscv64:Add RVV-optimized implementation of deblock_v_luma and deblock_v_luma_intra to accelerate vertical luma deblocking.


author: mahailiang <mahailiang@uniontech.com> - 1.1.3-6
changelog:
  - xdg-email: Support for Deepin
  - Restore matching of older deepin names
  - Add new case for Deepin while detecting DE


author: Funda Wang <fundawang@yeah.net> - 1.2.42-1
changelog:
  - update to 1.2.42
  - disable md5 and ripemd160 per upstream
  - disable gcrypt backend per upstream
    (https://github.com/lsh123/xmlsec/pull/848)


author: xihaochen <xihaochen@huawei.com> - 2.5.0-1
changelog:
  - Type:requirements                                                                                                                                  
  - Id:NA
  - SUG:NA
  - DESC:update xorg-x11-drv-vesa to 2.5.0


author: Wang Kui <wangkui35@h-partners.com> - 1.20.11-41
changelog:
  - Fix CVE-2025-49176 CVE-2025-49179 CVE-2025-49180 CVE-2022-49737
    CVE-2025-62229 CVE-2025-62230 CVE-2025-62231


author: lingsheng <ultra_planet@qq.com> - 1.20.11-42
changelog:
  - fix CVE-2022-49737 CVE-2025-49175 CVE-2025-49176 CVE-2025-49178 CVE-2025-49179 CVE-2025-49180 CVE-2025-62229 CVE-2025-62230 CVE-2025-62231


author: lingsheng <ultra_planet@qq.com> - 1.20.11-45
changelog:
  - fix CVE-2026-50256 CVE-2026-50257 CVE-2026-50258 CVE-2026-50259 CVE-2026-50260 CVE-2026-50261 CVE-2026-50262 CVE-2026-50263 CVE-2026-50264


author: xingwei <xingwei14@h-partners.com> - 4.2.3-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add haveged requires and optimize random number function replacement patch


author: yanglu <yanglu72@huawei.com> - 4.1-6
changelog:
  - DESC:delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-2.5-nfsnobody2.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-2.13-ypxfr-zeroresp.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-2.13-nonedomain.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-2.19-slp-warning.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-4.0-manfix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-2.24-aliases.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-2.27-confpost.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-2.31-netgrprecur.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-4.0-headers.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-4.0-selinux-context.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  ,and delete BuildRequires git


author: xu_ping <707078654@qq.com> - 0.2.44-2
changelog:
  - Remove redundant fc-cache scriptlets, fontconfig provides global %transfiletrigger 
    to refresh font cache automatically


author: yuanchao <1050706328@qq.com> - 0.13.72-4
changelog:
  - backport:disable zzip_use_file_header_zip64_offset,and fix wrong format in changelog,to support clang build


