# changelog

author: zhoudong <zhoudong63@huawei.com> - 1.0.3-3.android
changelog:
  - switch UMDK offline headers to 25.12.0-B106.oe2403sp3 (gate has no umdk-urma RPM)
  - lower Mooncake build parallelism to mitigate gate OOM
  - fix Mooncake RPATH with patchelf ($ORIGIN) for check-rpaths


author: cx <cx22757@163.com> - 0.0.1-2
changelog:
  - fix: modify install permission for library and config file.
  - fix: update nullptr check.
  - fix: update VM consistency log.
  - fix: extend RPC transmission timeout to 20 seconds.
  - fix: clear const_cast in domain.cpp; solve memory leak.
  - fix: add debug log for TSB API.
  - fix: extend RPC transmission timeout


author: cx <cx22757@163.com> - 0.0.1-3
changelog:
  - 修改日志问题
  - fix: log ERROR when peer received a failure notification.
  - fix: remove unsupported flag in DomainMigrate log.
  - fix: remove redundant nullptr check.
  - fix: change measure item name from grub_cfg to grub.cfg.
  - 修改安全问题
  - fix: safety inspection.
  - 修改检视意见
  - 格式化代码
  - 修改安全排查
  - fix: remove option --undefinesource.
  - fix: add return value check for GetVRoots.
  - fix: remove `--allow-store-measurements` option in VM create.
  - fix: remove RPATH compile option.
  - fix: call MigrationNotify after migration success in source end.
  - 修改安全排查问题
  - fix: update doc.
  - fix: modify VM state to shutoff after migration.
  - fix: add memory free for error branch in foreign_mounter.cpp


author: cx <cx22757@163.com> - 0.0.1-4
changelog:
  - fix: adapt to new VerifyTrustReport API.
  - 增加start虚机耗时日志
  - 保持挂载和startVRoot进行异步，并且不可以让checkmeasure和startVRoot异步
  - delete no use function
  - 1: adapter mock 2：add time-consuming debug 3: async StartVRoot and CheckGuestBeforeStart
  - fix: update doc and CLI help info.


author: cx <cx22757@163.com> - 0.0.1-5
changelog:
  - fix: update TSB-agent mock implement.
  - docs: update supported OS version
  - fix: update download URL for libboundscheck.
  - fix: rename sessionId to uuid.
  - fix: add suggestion for edk2 version


author: Xu Zheng <xuzheng_yewu@cmss.chinamobile.com> - 0.1.0-32
changelog:
  - adapt to multiple qemu process 
  - virt_check update
  - optimize qemu_var and os_var matching formats


author: yaoxin <1024769339@qq.com> - 5.19.7-1
changelog:
  - Update to 5.19.7 for fix CVEs: CVE-2026-42253, CVE-2026-42588,
    CVE-2026-45505, CVE-2026-46605, CVE-2026-49157, CVE-2026-49270


author: yaoxin <1024769339@qq.com> - 5.19.8-1
changelog:
  - Update to 5.19.8 for fix CVEs: CVE-2026-49432, CVE-2026-49434,
    CVE-2026-49877, CVE-2026-50734, CVE-2026-52760, CVE-2026-53916,
    CVE-2026-53917


author: Wenhui Tang <wenhui.oerv@isrc.iscas.ac.cn> - 0.26.0-2
changelog:
  - Append flags to GOFLAGS to fix go linker bugs for riscv
  - Related issue: https://github.com/golang/go/issues/62465
  - This is a temporary solution that requires fixing the upstream riscv support for golang.


author: wenxin<wenxin32@foxmail.com> - v1.4.1-3
changelog:
  - fix the query error of cve associated host
  - update verification method for host ip fieldl;fix repo field filter error
  - update TimedCorrectTask method


author: wenxin<wenxin32@foxmail.com> - v2.0.0-3
changelog:
  - Added support for cluster features.
  - Adjusted Task Module logic to use Celery for task management and execution.


author: luxuexian<luxuexian@huawei.com> - v2.1.0-2
changelog:
  - Fixed exceptions in calling stored procedures and cases caused by SQLschema upgrade
  - Fixed errors reported in calling cve summary interface


author: liuchanggeng<liuchanggeng@huawei.com> - v1.3.4-12
changelog:
  - to maintain functional stability, da-tool only releases network related analysis
  - it is not allowed to modify the configuration file of the da-tool


author: wangguangge<wangguangge@huawei.com> - v1.4.1-1
changelog:
  - update to v1.4.1
  - update cve fix logic
  - support rollback operation for kernel hotpatch/coldpatch


author: zhuyuncheng<zhuyuncheng@huawei.com> - v1.1.3-3
changelog:
  - Bugfix: fix the alert count error
  - Bugfix: for ai model, increase queried data length and add
    a time range for error judgment.


author: gongzhengtang<gong_zhengtang@163.com> - v1.2.0-1
changelog:
  - update the structure of response body; update how to get session used to
  - connect to the database


author: Hu gang<18768366022@163.com> - v1.3.5-2
changelog:
  - Resolve the problem of host display of the expanded menu in the host management batch adding host interface
  - Optimize the logic of adding hosts in batches under different circumstances


author: Hu gang<18768366022@163.com> - v1.4.0-1
changelog:
  - adapt to NewRepair Tasks Including DetailsCreation TaskReports And TaskExecution
  - Modify the original rollback task to hot patch rollback
  - Added related rollback tasks


author: Hu gang<18768366022@163.com> - v1.4.0-2
changelog:
  - Added keyword search for host list
  - Fixed the problem of abnormal list rendering in task details task running state
  - Optimize some page copywriting
  - Adaptation rollback task related (creation, execution, detailed viewing, task report viewing, etc.)
  - Solve the problem of hot and cold patch execution tasks failing when creating a repair task.
  - Fix hotpatch remove list filter failed


author: Hu gang<18768366022@163.com> - v1.4.0-4
changelog:
  - Added an interface adaptation for host status
  - Added a field to determine whether the kernel changes after the host is restarted
  - Added a new hot patch prompt for creating a repair task
  - Fix some bug


author: Hu gang<18768366022@163.com> - v1.4.0-7
changelog:
  - Modify the task description copy of the create hot patch removal task
  - remove create rollback button in cve detail,add hotpatch button in cve detail


author: Hu gang<18768366022@163.com> - v2.1.2-4
changelog:
  - Update version to v2.1.2-4
  - Provides smart Q&A capabilities for big models
  - Provide vulnerability repair and configure traceability intelligent management
  - Supports traceability of file changes


author: wenxin<wenxin32@foxmail.com> - v2.0.0-1
changelog:
  - Adjusted configuration file loading method: changed format from INI to YAML.
  - Added support for reading and writing configuration through Zookeeper.
  - Added support for reading and writing cache through Redis, including logic for current cache keys.
  - Implemented RSA signature verification for data.
  - Removed deprecated files.
  - Optimized Prometheus import statements.
  - Added retry mechanism to `response` method.


author: wenxin<wenxin32@foxmail.com> - v2.0.0-1
changelog:
  - Split the existing service module into distinct modules:
    - Task Module: Handles task management and execution.
    - Host Module: Manages host configurations and interactions.
    - User Module: Manages user accounts and permissions.
    - Interface Dispatch Module: Manages the dispatching of requests to appropriate interfaces.
  - Added a new command line tool for enhanced functionality and management.
  - Introduced support for clustering, allowing for more robust and scalable deployments.
  - Reorganized the service architecture to improve modularity and maintainability.
  - Fixed various issues to enhance stability and performance.


author: yuanxing <yuanxing@kylinsec.com.cn> - 1.28.0-1
changelog:
  - Initial build
  - KYOS-F: allow root to use desktop manager
  - KYOS-F: feature(kiran): Support kiran desktop environment
  - KYOS-F: Support change desktop background image in kiran desktop(#I5I1HE)
  - KYOS-B: Fix the file rename error msg too long(#I5I8IM)
  - KYOS-B: Fix the file can be rename to only container space name(#I5I8KI)
  - KYOS-F: Let the location bar background change with theme(#I5I8V9)
  - KYOS-B: Not draw icon and text hight light color when icon not get force(#I5HRI0)
  - KYOS-B: Fix the open terminal can not correct to terminal icon


author: gaobo <gaobo@kylinsec.com.cn> - 1.28.0-2
changelog:
  - modify the logic that open kiran-control-panel when change the background (f:107366)
  - fix that background abnormal when change the scale to 200%. (b:121360)


author: wangdi <wangdi@kylinos.cn> - 0.15.0-3
changelog:
  - Change hardcoded deafult hash algorithm from legacy md4 to sha512
  - Change dependecy from ansible-2.9 to ansible since ansible version has bumped to 2.9


author: liheavy <lihaiwei8@huawei.com> - 1.0.0-3
changelog:
  - Disassemble yocto-embedded-tools and replace cjson, ninja, gn, openssl, libboundscheck
  - with openEuler software package


author: Yuying Mu <muyuying1@huawei.com> - 1.0.0-6
changelog:
  * Tue Nov 20 2023 Jiaqi Zhao <zhaojiaqi18@huawei.com> - 1.0.0-6
  - Update dsoftbus from 3.1.2 to 3.2
  - Rename package name from dsoftbus to communication_dsoftbus


author: Shi Quan <shiq10@chinaunicom.cn> - 1.0-3
changelog:
  - Drop the python3-pam RPM dependency (not available in openEuler); the python
    pam module is installed at runtime via pip and used with a graceful fallback.


author: mahailiang <mahailiang@uniontech.com> - 5.7.41.11-16
changelog:
  - fix: fix CMakeLists CMAKE_CXX_FLAGS override causing fstack-clash-protection dropped, add CMAKE_POSITION_INDEPENDENT_CODE and EXE_LINKER_FLAGS_INIT


author: mahailiang <mahailiang@uniontech.com> - 6.0.60.9-11
changelog:
  - fix: add -pie to CMAKE_EXE_LINKER_FLAGS for PIE link step, and add security flags stack-clash, FORTIFY to CMake targets


author: mahailiang <mahailiang@uniontech.com> - 5.7.30.2-10
changelog:
  - fix: add -pie to CMAKE_EXE_LINKER_FLAGS for PIE link step, and add security flags to pam-inhibit-autologin C module


author: mahailiang <mahailiang@uniontech.com> - 5.12.20.30-6
changelog:
  - Solve the issue where there is no banner notification when the root user ends the screen recording


author: dingjiahui <dingjiahui4@huawei.com> - 1.0.0-1
changelog:
  - Initial release of DevStore
  - Includes frontend Electron application
  - Includes backend Django application
  - Provides comprehensive development store management functionality
  - Added systemd service support for easy service management
  - Users can now start/stop DevStore using systemctl commands


author: dingjiahui <dingjiahui4@huawei.com> - 1.0.1-1
changelog:
  - Support search functionality
  - Fix the issue where the list is empty when returning to the homepage from the details page
  - Auto-enable and start dev-store service after installation
  - Add error handling to ensure service startup failures don't affect package installation


author: dingjiahui <dingjiahui4@huawei.com> - 1.0.3-1
changelog:
  - Replace MariaDB with SQLite database, optimize initialization process for faster startup
  - Optimize cleanup and write processes during data synchronization exceptions


author: dingjiahui <dingjiahui4@huawei.com> - 1.0.4-1
changelog:
  - Update desktop icon
  - Remove massive logs
  - Support for quickly adding MCP servers to PolyMind
  - Fix handling issue when oeDeploy plugin is duplicated
  - Optimize interface, support multiple tabs


author: Yuying Mu <muyuying1@huawei.com> - 1.0.0-1
changelog:
  * Tue Nov 21 2023 Jiaqi Zhao <zhaojiaqi18@huawei.com> - 1.0.0-1
  - Init and adapt device manager to openEuler


author: zhourenjian <zhourenjian@huawei.com> - 2025.36-1
changelog:
  - Adapt E2B to the arm64 architecture, remove its dependency on GCP, and add a one-click local installation script.Fix start-client process, use dnsmasq replace systemd-resolved, use paramater to decide current client belongs to which node pool, use glibc busybox,use provision.sh to install vm's deps while building template.Add arm vmlinux.bin and change x86 vmlinux.bin name.Make start-client process local.use dnsmasq replace systemd-resolved. Use paramater to decide current client belongs to which node pool. fix configure.sh run fail because busybox has no bash.change async to sync.complete readme.


author: chenyanpanHW <chenyanpan@huawei.com> - 0.5.0-16
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Add-PL_ARCH-for-AArch64.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/coverity.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0001-add-loongarch64-support.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0002-add-riscv-support.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: dongqi <dongqi1@kylinos.cn> - 1.4.10-1
changelog:
  - update to version 1.4.10
  - Rewrite locale migration to use fd-based traversal
  - Various improvements to tests


author: wangkai <13474090681@163.com> - 3.18.0-13
changelog:
  - Fix CVE-2020-24292 CVE-2020-24293 CVE-2020-24295 CVE-2021-33367
    CVE-2021-40263 CVE-2021-40266 CVE-2023-47995 CVE-2023-47997


author: luxuexian<luxuexian@huawei.com> - v2.1.0-3
changelog:
  - Optimize the query of the number of unsynchronized service domains
  - unified conftrace record in English


author: zhanglin <lin.zhang@turbolinux.com.cn> - 1:3.38.2-4
changelog:
  - fix build when Meson >= 0.61.5
  - add patch modify-meson-build-tepl6.patch
  - add patch fix-i18n-merge-file.patch


author: renjunkai1@example.com - 0.0.1-21
changelog:
  - fix: Add a cargo.lock file to lock dependency versions.
  - fix:[plugin manager] replace unwrap with results
  - fix:[policy engine] forbid custom functions and loop with number range
  - fix: Add libboundscheck library for building RPM agent and cli.
  - fix:[policy engine] forbid custom functions and loop with number range
  - feat: Modify the URL paths in the API documentation
  - feat: Add a default value for executables_value in the tpm_boot.rego file.
  - fix:fix key managerd workers


author: renjunkai1@example.com - 0.0.1-22
changelog:
  - feat: add compilation options for security requirements
  - fix: [attestation server] fix unwrap problem in initialization process
  - fix: strengthen the policy injection proctection
  - fix: delete tests that are commented out
  - fix: [endorsement] fix unwrap problem
  - fix: add more strict parameter validation for user id
  - feat:modify register white box inspection
  - fix:fix apikey block_on
  - Merge openeuler/master: resolve conflicts and integrate upstream changes
  - perf: optimize PCR index validation
  - config: update PCR banks config for batch processing
  - test: add test cases for TPM plugin improvements
  - fix:fix apikey block_on
  - fix:[attestation_agent][attestation_cli]Clean up Clippy scan warnings, rm -rf deletion issues, and unsafe code problems.
  - fix: optimize TPM NV reading and PCR collection


author: cx <cx22757@163.com> - 0.0.1-23
changelog:
  - fix:add tpm.rego,modify ut and agent_config
  - feat: fix log name
  - Revert "bugfix: add key_managerd.service to rpm"
  - bugfix: add key_managerd.service to rpm
  - feat: Adapting to the log of ascend npu
  - fix:fix server_config
  - feat: The virtCCA plugin supports log collection and verification in the dim format
  - feat:add TpmPlugin for attester and verfier dim_log
  - fix: cancel exporting unnecessary lib.
  - fix: clear magic number in CCA plugin.
  - fix: split the verify_logs func in CCA verifier.
  - fix: add UT for CCA verifier plugin.
  - fix: Optimize command-line options and their explanations
  - feat: update docs and RPM spec files for CCA.
  - feat: add CCA verifier plugin.
  - feat: Modify the input of the all policy to the output of the plugin.
  - feat: Modify the interface documentation
  - feat: The baseline generation tool supports dim baseline generation.
  - feat: Added all-type policy
  - feat: add CCA attester plugin.
  - fix: extract public log verify code.
  - fix:Fix failure to read IAK certificate
  - fix: Adapt to EAR token format for itrustee plugin.
  - fix: Adding the secure boot field to the token in the virtCCA plugin
  - fix: Remove unnecessary fields in itrustee.rego.
  - fix: Add public key information and display the realm challenge when no platform token exists.
  - Merge branch 'vcca' of git@gitcode.com:lyyyze/global-trust-authority.git into 'master' # Conflicts: #   conflict attestation_server/policy/src/services/policy_service.rs
  - fix: Add JWT signature verification when updating the policy
  - feat: Add platform token challenge field and refine software component serialization
  - fix: Modify the translated content of the document
  - fix: Modify the verification logic of the tpmboot plugin to validate digests only for specific events.
  - fix: Modified failed test cases
  - Merge remote-tracking branch 'origin/issue' into issue
  - fix: Capitalize the first letter of error messages
  - fix: Modify error messages to reduce module exceptions printed to the interface output.
  - fix: Add codecheck build script
  - fix: Modify error messages to reduce module exceptions printed to the interface output.
  - bugfix: add a chapter for readme
  - fix: add UT
  - feat(api): configure server limits and improve error handling
  - fix: Fixing some errors in the API documentation


author: cx <cx22757@163.com> - 0.0.1-24
changelog:
  - fix: declare dependency for ITrustee.
  - fix: add copyright notice.
  - test:add tpm and virtcca UT
  - fix: update descriptions of request params.
  - fix: fixes OpenSSL affected by CVE-2025-15467.
  - feat: add ascend_npu cbor data to policy
  - feat: Add the user policy for the TPM plugin


author: cx <cx22757@163.com> - 0.0.1-27
changelog:
  - Revert "feat: Added Compatibility Plugin"
  - Revert "feat: Add logic for the main plugin to retrieve information for each plugin."
  - feat: Added token verification interface, supporting custom public key input.
  - feat: Add logic for the main plugin to retrieve information for each plugin.
  - fix: update rustup source in code-check script.
  - fix: replace default rustup source in code-check script.
  - Merge remote-tracking branch 'upstream/master' into plugin
  - feat: add UT to key_manager
  - feat: Added Compatibility Plugin


author: cx <cx22757@163.com> - 0.0.1-28
changelog:
  - fix: Change the IP addresses in the document
  - fix: specify REM indexes when replaying boot log.
  - fix: Remove the parameters from the /global-trust-authority/service/v1/challenge endpoint
  - feat: Add logic for the main plugin to retrieve information for each plugin.
  - fix: address review comments
  - feat: add cca server unit tests
  - feat: remove obsolete CLI unit tests
  - feat: Add log data validation
  - feat: add unit test to endorserment, key and resource_provider
  - feat: expand client, validate, load_plugins, and error coverage
  - feat: add challenge and evidence verification handler coverage
  - feat: expand service, entities, utils, and signature update coverage
  - feat: add event log, parser, and serializer coverage
  - feat: add api-sub-key func
  - fix: move LICENSE to root directory.
  - fix: remove communication matrix in guide.
  - fix: add docs to tpm plugin
  - feat: delete Chinese for key_manager
  - feat: add UT to attestation_server
  - feat: add UT to attestation_common
  - feat: add UT to attestation_cli
  - Merge remote-tracking branch 'refs/remotes/origin/master'
  - Merge remote-tracking branch 'refs/remotes/origin/master'
  - add UT to attestation_agent


author: cx <cx22757@163.com> - 0.0.1-29
changelog:
  - feat: add attestation_client facade crate
  - refactor: move func process_nonce to NonceUtil
  - refactor: unify ascend npu evidence handling around base64 cbor
  - fix: Edit the cargo.toml file
  - fix: Change the agent's default setting to support HTTP one-way authentication; change the exist_time field in the configuration to expired_time.
  - Merge remote: openeuler/global-trust-authority master
  - fix: DICE verification configuration update
  - fix: move dependencies of cca to workspace level
  - feat: Added a new DICE verifier module
  - feat: Added SM2 and Ed25519 algorithm implementations and local configuration key mode for key management
  - feat: Added DICE authentication module and adapted CLI tool


author: cx <cx22757@163.com> - 0.0.1-30
changelog:
  - docs: fix typo ITrustee to itrustee in attestation_service.md
  - feat: add is_default field to ref_value API documentation
  - fix: Fix and refine attestation codebase and documentation
  - fix: Make the rate limiting for the agent service configurable
  - feat: Declare the dependencies of the policy_engine module separately
  - fix(agent): handle non-2xx HTTP responses to surface real error causes
  - fix: add restful configuration in attestation client
  - refactor(ref_value): remove redundant validate func
  - fix(docs): add cca type for ref_value and modify content size
  - test(attestation): add UTs for dice verifier and token
  - fix: modify dice uts
  - Merge atomgit/master into current branch
  - feat: Add documentation for dice plugin and support SM2 algorithm for token
  - test(attestation): add UTs for dice attester and verifier
  - perf: use AtomicBool for initialization check
  - fix: Modify the fields in the token so that the fields related to the log status become Boolean values
  - fix: Change the data type of the secureBoot field to boolean
  - fix: Remove the “ignore” field from all ref_value_match_status entries
  - fix: In the cca and virtCCA plugins, rename the configuration option “ccel_file_path” to “boot_log_file_p”


author: cx <cx22757@163.com> - 0.0.1-2
changelog:
  - feat(rbs-cli): add verbose tracing and refresh client command docs
  - feat(rbs):Added parameter validation to the User Management and Policy Management modules
  - feat(rbc,rbs-cli): unify token flow and extend resource auth modes
  - feat(rbs):Add logs for business logic processing
  - feat(rbs):Modify the URL for the certificate management interface
  - feat(rbs):Supports elliptic curve algorithms
  - feat(rbs):Change the key input parameter to Base64 encoding
  - Modify the business logic of the retrieve interface
  - feat(rbs):The export mode only supports JWE.
  - feat(rbs): add resource management module with JWE encryption and unified DB schema
  - feat(rbs): add policy management module with API documentation


author: cx <cx22757@163.com> - 0.0.1-3
changelog:
  - fix(rbs):Optimize log output for business modules
  - fix(rbs):Adjust the directory for api-types
  - fix(rbs):Added validation logic to the resource policy management query interface
  - feat(rbs):Add a locking mechanism to Bearer token authentication
  - feat(rbs):Add end-to-end test cases for RBS
  - fix(rbs):Remove hard-coded public keys and switch to dynamically generating key pairs
  - feat(rbs):Added ES512 algorithm for JWT verification


author: wenlong ding <wenlong.ding@turbolinux.com.cn> - 43.2-2
changelog:
  - Move '%find_lang gnome-initial-setup' to %install, fix not found gnome-initial-setup.lang if disable %check build


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.36.0-1
changelog:
  - Upgrade to 3.36.0
  - Update Version, Release, Source0, stage 'build' and 'files'
  - Delete old patch that existed in new version, add new patch


author: wenlong ding <wenlong.ding@turbolinux.com.cn> - 43.0-2
changelog:
  - Move '%find_lang gnome-photos' to %install, fix not found gnome-photos.lang if disable %check build


author: laokz <zhangkai@iscas.ac.cn> - 44.5-2
changelog:
  - let BuildRequire valgrind depend on system i386 i486 i586 i686 pentium3 pentium4 athlon geode x86_64 armv3l armv4b armv4l armv4tl armv5tl armv5tel armv5tejl armv6l armv6hl armv7l armv7hl armv7hnl armv8l armv8hl armv8hnl armv8hcnl aarch64 loongarch64 powerpc64le ppc64le sw_64


author: lvgenggeng <lvgenggeng@uniontech.com> - 44.0-2
changelog:
  - backport: Fix memory leak by unreffing the GtkNativeDialog.
  - backport: fix resource leak in page.


author: yaoxin <1024769339@qq.com> - 9.2.10-1
changelog:
  - Update to 9.2.10 for fix cves:CVE-2022-36062,CVE-2022-35957
    CVE-2022-39201,CVE-2022-31130,CVE-2022-31123,CVE-2022-39306
    CVE-2022-39307,CVE-2022-23552,CVE-2022-39324,CVE-2022-31097


author: yaoxin <1024769339@qq.com> - 2.8.139-1
changelog:
  - Update to 2.8.139:
    * Minor improvement of the `SOAP_XML_IGNORENS` (ignore XML
      namespaces) logic when performing non-strict XML validation
      (`SOAP_XML_STRICT` is not enabled) when ignoring extra XML
      extensibility elements in an inbound SOAP/XML message; no
      longer produces validation errors for non-serializable XML to
      "safely" ignore, unless strict XML validation is enabled with
      `SOAP_XML_STRICT`, as expected.
    * Minor update to improve XML entity parsing within limits.
    * The wsdl2h tool with SSL/TLS enabled for https no longer
      supports legacy SSLv3, only TLS 1.0 to 1.3, this avoids
      potential TLS/SSL handshake errors.
    * Corrected a logic bug in wsdl2h for attribute/elemenet
      reference qualification for C++ class and C struct members in
      the generated header interface file for soapcpp2.


author: herengui <herengui@kylinsec.com.cn> - 1.50.2-9
changelog:
  - Fix CVE-2026-28296: reject paths containing CR/LF characters in FTP backend
  - ftp: Reject paths with CR/LF in g_vfs_ftp_file_new_from_ftp (server-supplied paths)


author: liukuo <liukuo@kylinos.cn> - 2.18.0-1
changelog:
  - upgrade version to 2.18.0, featuring selective inclusion of the dracut module in initramfs upon request and added support for Scaleway


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-164.0.0.149.20260731.c5db09427020
changelog:
  - !25529  Fix CVE-2026-64352
  - !25524  NFSv4: include MAY_WRITE in open permission mask for O_TRUNC
  - !25523  udf: validate VAT header length against the VAT inode size
  - !25521  isofs: bound Rock Ridge symlink components to the SL record
  - !25520  udf: validate free block extents against the partition length
  - !25188 [OLK-6.6][linux-6.6.y sync] Backport 6.6.143-6.6.144 LTS Patches
  - !25519  iov_iter: Fix potential underflow in iov_iter_extract_xarray_pages()
  - !25511 ub: ub_fwctl: Support providing universal semantic interfaces.
  - bpf: Allow LPM map access from sleepable BPF programs
  - bpf: Consistently use bpf_rcu_lock_held() everywhere
  - config: arm64: update CONFIG_FTRACE_STARTUP_TEST not set
  - crypto: qat - Return pointer directly in adf_ctl_alloc_resources
  - crypto: qat - Replace kzalloc() + copy_from_user() with memdup_user()
  - drivers/base/memory: set mem->altmap after successful device registration
  - serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails
  - serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is zero
  - NFS: Prevent resource leak in nfs_alloc_server()
  - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  - nfsd: check get_user() return when reading princhashlen
  - fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  - fbdev: modedb: fix a possible UAF in fb_find_mode()
  - fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var
  - power: reset: linkstation-poweroff: fix use-after-free in the linkstation_poweroff_init()
  - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  - KVM: x86: hyper-v: Bound the bank index when querying sparse banks
  - 9p: avoid putting oldfid in p9_client_walk() error path
  - ocfs2: reject oversized group bitmap descriptors
  - rpmsg: char: Fix use-after-free on probe error path
  - fpga: region: fix use-after-free in child_regions_with_firmware()
  - irqchip/imgpdc: Fix resource leak, add missing chained handler cleanup on remove
  - pNFS: Fix use-after-free in pnfs_update_layout()
  - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  - hdlc_ppp: sync per-proto timers before freeing hdlc state
  - gfs2: fix use-after-free in gfs2_qd_dealloc
  - exfat: fix potential use-after-free in exfat_find_dir_entry()
  - MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  - bpf: use kvfree() for replaced sysctl write buffer
  - f2fs: keep atomic write retry from zeroing original data
  - f2fs: fix incorrect FI_NO_EXTENT handling in __destroy_extent_node()
  - f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  - f2fs: fix to round down start offset of fallocate for pin file
  - f2fs: validate compress cache inode only when enabled
  - wifi: iwlwifi: mvm: fix race condition in PTP removal
  - wifi: rtw88: usb: fix memory leaks on USB write failures
  - wifi: rtw88: increase TX report timeout to fix race condition
  - wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  - wifi: ath11k: fix warning when unbinding
  - wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  - keys: Pin request_key_auth payload in instantiate paths
  - KEYS: fix overflow in keyctl_pkey_params_get_2()
  - err.h: use __always_inline on all error pointer helpers
  - fbdev: fix use-after-free in store_modes()
  - NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and CONFIG share BAR
  - apparmor: mediate the implicit connect of TCP fast open sendmsg
  - net: skmsg: preserve sg.copy across SG transforms
  - mac802154: llsec: add skb_cow_data() before in-place crypto
  - af_unix: Set gc_in_progress to true in unix_gc().
  - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC
  - udf: validate VAT header length against the VAT inode size
  - isofs: bound Rock Ridge symlink components to the SL record
  - udf: validate free block extents against the partition length
  - iov_iter: Fix potential underflow in iov_iter_extract_xarray_pages()
  - ub: ub_fwctl: Support providing universal semantic interfaces.
  - ntfs3: reject direct userspace writes to reserved $LX* xattrs
  - ipv4: account for fraggap on the paged allocation path
  - inet: add indirect call wrapper for getfrag() calls
  - ipv6: account for fraggap on the paged allocation path
  - batman-adv: tvlv: avoid race of cifsnotfound handler state
  - batman-adv: tvlv: enforce 2-byte alignment
  - batman-adv: dat: prevent false sharing between VLANs
  - batman-adv: tt: track roam count per VID
  - batman-adv: tt: don't merge change entries with different VIDs
  - batman-adv: tp_meter: handle overlapping packets
  - batman-adv: tp_meter: prevent parallel modifications of last_recv
  - batman-adv: tp_meter: annotate last_recv_time access with READ/WRITE_ONCE
  - batman-adv: tp_meter: restrict number of unacked list entries
  - batman-adv: v: prevent OGM aggregation on disabled hardif
  - batman-adv: frag: avoid underflow of TTL
  - batman-adv: frag: ensure fragment is writable before modifying TTL
  - batman-adv: fix (m|b)cast csum after decrementing TTL
  - batman-adv: ensure bcast is writable before modifying TTL
  - batman-adv: tp_meter: initialize last_recv_time during init
  - batman-adv: prevent ELP transmission interval underflow
  - batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  - batman-adv: tp_meter: add only finished tp_vars to lists
  - batman-adv: tp_meter: handle seqno wrap-around for fast recovery detection
  - batman-adv: tp_meter: fix fast recovery precondition
  - batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  - batman-adv: tp_meter: avoid window underflow
  - batman-adv: tp_meter: initialize dec_cwnd explicitly
  - batman-adv: tp_meter: initialize dup_acks explicitly
  - batman-adv: tp_meter: keep unacked list in ascending ordered
  - eventpoll: rename ep_remove_safe() back to ep_remove()
  - file: add fput() cleanup helper
  - media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  - ksmbd: reject non-VALID session in compound request branch
  - scripts/sorttable: Fix endianness handling in build-time mcount sort
  - scripts/sorttable: Allow matches to functions before function entry
  - scripts/sorttable: Use normal sort if theres no relocs in the mcount section
  - ftrace: Check against is_kernel_text() instead of kaslr_offset()
  - ftrace: Test mcount_loc addr before calling ftrace_call_addr()
  - ftrace: Do not over-allocate ftrace memory
  - ftrace: Have ftrace pages output reflect freed pages
  - ftrace: Update the mcount_loc check of skipped entries
  - scripts/sorttable: Zero out weak functions in mcount_loc table
  - scripts/sorttable: Always use an array for the mcount_loc sorting
  - scripts/sorttable: Have mcount rela sort use direct values
  - arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64
  - scripts/sorttable: Use a structure of function pointers for elf helpers
  - scripts/sorttable: Get start/stop_mcount_loc from ELF file directly
  - scripts/sorttable: Move code from sorttable.h into sorttable.c
  - scripts/sorttable: Use uint64_t for mcount sorting
  - scripts/sorttable: Add helper functions for Elf_Sym
  - scripts/sorttable: Add helper functions for Elf_Shdr
  - scripts/sorttable: Add helper functions for Elf_Ehdr
  - scripts/sorttable: Convert Elf_Sym MACRO over to a union
  - scripts/sorttable: Replace Elf_Shdr Macro with a union
  - scripts/sorttable: Convert Elf_Ehdr to union
  - scripts/sorttable: Make compare_extable() into two functions
  - scripts/sorttable: Have the ORC code use the _r() functions to read
  - scripts/sorttable: Remove unneeded Elf_Rel
  - scripts/sorttable: Remove unused write functions
  - scripts/sorttable: Remove unused macro defines
  - fuse: re-lock request before replacing page cache folio
  - slimbus: qcom-ngd-ctrl: Balance pm_runtime enablement for NGD
  - slimbus: qcom-ngd-ctrl: Fix up platform_driver registration
  - rxrpc: Fix the ACK parser to extract the SACK table for parsing
  - net: phonet: free phonet_device after RCU grace period
  - phonet: Pass net and ifindex to phonet_address_notify().
  - phonet: Pass ifindex to fill_addr().
  - Drivers: hv: vmbus: Improve the logic of reserving fb_mmio on Gen2 VMs
  - hv: utils: handle and propagate errors in kvp_register
  - regulator: core: fix locking in regulator_resolve_supply() error path
  - ring-buffer: Remove ring_buffer_read_prepare_sync()
  - selftests/bpf: Update comments find_equal_scalars->sync_linked_regs
  - af_unix: Reject SIOCATMARK on non-stream sockets
  - selftests/bpf: Add test to ensure kprobe_multi is not sleepable
  - agp/amd64: Fix broken error propagation in agp_amd64_probe()
  - net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink()
  - i2c: stub: Reject I2C block transfers with invalid length
  - RDMA/bnxt_re: zero shared page before exposing to userspace
  - KVM: VMX: Update SVI during runtime APICv activation
  - ARM: fix branch predictor hardening
  - ARM: fix hash_name() fault
  - ARM: allow __do_kernel_fault() to report execution of memory faults
  - ARM: group is_permission_fault() with is_translation_fault()
  - debugobjects: Dont call fill_pool() in early boot hardirq context
  - debugobjects: Do not fill_pool() if pi_blocked_on
  - debugobjects: Use LD_WAIT_CONFIG instead of LD_WAIT_SLEEP
  - debugobjects: Allow to refill the pool before SYSTEM_SCHEDULING
  - batman-adv: tt: prevent TVLV entry number overflow
  - drm/v3d: Skip CSD when it has zeroed workgroups
  - drm/v3d: Store the active job inside the queue's state


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-164.0.0.149.20260803.145abda29400
changelog:
  - !25632 v2  bpf mainline
  - !24961  i2c: core: fix adapter registration race
  - !25633  ALSA: hda/cs35l41: Fix firmware load work teardown
  - !25635  vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc
  - !25636  iommufd: Break the loop on failure in iommufd_fault_fops_read()
  - !25605  posix-cpu-timers: Prevent UAF caused by non-leader exec() race
  - !25600 Fix CVE-2026-64496
  - !25602 Fix CVE-2026-64456
  - iommufd: Break the loop on failure in iommufd_fault_fops_read()
  - vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc
  - !25272 [OLK-6.6] Fix CVE-2026-64306
  - !25274 [OLK-6.6] Fix CVE-2026-64313
  - !25273 [OLK-6.6] Fix CVE-2026-64312
  - !25472 [OLK-6.6] Fix CVE-2026-64531
  - ALSA: hda/cs35l41: Fix firmware load work teardown
  - bpf: Clear rb node linkage when freeing bpf_rb_root
  - bpf: Add validation for bpf_set_retval argument
  - bpf: Reject sleepable BPF_LSM_CGROUP programs at load time
  - bpf: Fix setting retval to -EPERM for cgroup hooks not returning errno
  - bpf: Guard __get_user acesss with access_ok for uprobe_multi data
  - !25608  nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page
  - !25490  e1000e: Fix out-of-bounds MMIO access by validating BAR0 size
  - !25619 v2  bpf: Support for hardening against JIT spraying
  - !25618 sched/xsched: fix permission issues
  - !25504  i2c: stub: Reject I2C block transfers with invalid length
  - !25625 rme: use DMA API for virtio in realm world
  - !25612  udf: validate sparing table length as an entry count, not a byte count
  - !25611  smb: client: harden POSIX SID length parsing
  - !25610  smb: client: mask server-provided mode to 07777 in modefromsid
  - !25609  smb: client: Fix next buffer leak in receive_encrypted_standard()
  - !25607  nvmet-auth: validate reply message payload bounds against transfer length
  - !25131  bpf: Reject fragmented frames in devmap
  - !25064  bpf: use kvfree() for replaced sysctl write buffer
  - !25074  bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized
  - !24412 [OLK-6.6] Fix CVE-2026-53189
  - !24427 [OLK-6.6] Fix CVE-2026-53225
  - !24471 [OLK-6.6] Fix CVE-2026-53154
  - !24540 [OLK-6.6] Fix CVE-2026-52929
  - rme: use DMA API for virtio in realm world
  - !25429  Fix CVE-2026-64448
  - !25229 Fix CVE-2026-64425
  - !25416 v2  Fix CVE-2026-64378
  - !25179 Fix CVE-2026-64326
  - !25178 Fix CVE-2026-64294
  - !25584  tracing: Bound synthetic-field strings with seq_buf
  - !25517  perf/core: Detach event groups during remove_on_exec
  - bpf: Support for hardening against JIT spraying
  - xsched: enforce permissions on attribute access
  - xsched: restrict vstream management to privileged users
  - udf: validate sparing table length as an entry count, not a byte count
  - smb: client: harden POSIX SID length parsing
  - smb: client: mask server-provided mode to 07777 in modefromsid
  - smb: client: Fix next buffer leak in receive_encrypted_standard()
  - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page
  - nvmet-auth: validate reply message payload bounds against transfer length
  - posix-cpu-timers: Prevent UAF caused by non-leader exec() race
  - hwrng: virtio: clamp device-reported used.len at copy_data()
  - iio: event: Fix event FIFO reset race
  - tracing: Bound synthetic-field strings with seq_buf
  - perf/core: Detach event groups during remove_on_exec
  - i2c: stub: Reject I2C block transfers with invalid length
  - e1000e: Fix out-of-bounds MMIO access by validating BAR0 size
  - net: openvswitch: reject oversized nested action attrs
  - smb: client: reject overlapping data areas in SMB2 responses
  - smb: client: restrict implied bcc[0] exemption to responses without data area
  - writeback: drop now-unnecessary rcu_barrier() in cgroup_writeback_umount()
  - writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs()
  - writeback: Fix use after free in inode_switch_wbs_work_fn()
  - writeback: Avoid contention on wb->list_lock when switching inodes
  - crypto: ecc - Fix carry overflow in vli multiplication
  - crypto: pcrypt - restore callback for non-parallel fallback
  - crypto: drbg - Fix returning success on failure in CTR_DRBG
  - io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item
  - block: skip sync_blockdev() on surprise removal in bdev_mark_dead()
  - mm: do file ownership checks with the proper mount idmap
  - bpf: Reject fragmented frames in devmap
  - bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized
  - bpf: use kvfree() for replaced sysctl write buffer
  - i2c: core: fix adapter registration race
  - sctp: stream: fully roll back denied add-stream state
  - mm/hugetlb: restore reservation on error in hugetlb folio copy paths
  - sctp: fix uninit-value in __sctp_rcv_asconf_lookup()
  - mm/huge_memory: update file PMD counter before folio_put()


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-164.0.0.149.20260804.9e43d70e7ad5
changelog:
  - !25627 Fix CVE-2026-64539
  - !25567 [OLK-6.6] Fix CVE-2026-64546
  - !25641  proc: protect ptrace_may_access() with exec_update_lock (FD links)
  - !25637  vfio/pci: Latch disable_idle_d3 per device
  - !25649  mainline bpf
  - bpf: Fix UAF in sock clone early bailouts
  - bpf: Disable xfrm_decode_session hook attachment
  - bpf,fork: wipe ->bpf_storage before bailouts that access it
  - !25048  KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned()
  - !25593 Fix CVE-2026-64304
  - proc: protect ptrace_may_access() with exec_update_lock (FD links)
  - vfio/pci: Latch disable_idle_d3 per device
  - Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  - crypto: qat - validate RSA CRT component lengths
  - drm/edid: fix OOB read in drm_parse_tiled_block()
  - KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned()


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-165.0.0.150
changelog:
  - !25666 Fix some security issues
  - !24043 ACPI: CPPC: Move reference performance to capabilities
  - !25230 [OLK-6.6] Fix CVE-2026-64226
  - !25678 Fix: adapt DYNAMIC_AFFINITY for cgroup v2
  - !25683 Fix CVE-2026-64206
  - !25703  crypto: qat - fix VF2PF work teardown race in adf_disable_sriov()
  - !25615 [OLK-6.6][linux-6.6.y sync] Backport 6.6.144-6.6.145 LTS Patches
  - usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect
  - serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms
  - proc: Fix broken error paths for namespace links
  - selftests/bpf: Add simple strscpy() implementation
  - tools/testing: add linux/args.h header and fix radix, VMA tests
  - jiffies: Cast to unsigned long in secs_to_jiffies() conversion
  - jiffies: Define secs_to_jiffies()
  - xfs: fix stupid compiler warning
  - Bluetooth: btmtk: Fix btmtk.c undefined reference build error harder
  - selftests/hid: ensure CKI can compile our new tests on old kernels
  - Bluetooth: 6lowpan: Fix using chan->conn as indication to no remote netdev
  - ksmbd: fix durable reconnect double-bind race in ksmbd_reopen_durable_fd
  - seqlock: fix scoped_seqlock_read kernel-doc
  - KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers
  - !25686 Subject: [PATCH] x86/cpu/hygon: fix performance regression for hygon platform
  - x86/cpu/hygon: fix performance regression for hygon platform
  - !25218 [OLK-6.6] Fix CVE-2026-64076
  - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov()
  - Bluetooth: hci_core: Enable buffer flow control for SCO/eSCO
  - exfat: preserve benign secondary entries during rename and move
  - exfat: move exfat_chain_set() out of __exfat_resolve_path()
  - exfat: add exfat_get_dentry_set_by_ei() helper
  - exfat: rename argument name for exfat_move_file and exfat_rename_file
  - exfat: remove unnecessary read entry in __exfat_rename()
  - exfat: move free cluster out of exfat_init_ext_entry()
  - regulator: scmi: fix of_node refcount leak in scmi_regulator_probe()
  - regulator: scmi: Simplify with scoped for each OF child loop
  - audit: fix potential integer overflow in audit_log_n_hex()
  - audit: add audit_log_nf_skb helper function
  - crypto: qat - fix restarting state leak on allocation failure
  - btrfs: check and set EXTENT_DELALLOC_NEW before clearing EXTENT_DELALLOC
  - usb: gadget: f_fs: Tie read_buffer lifetime to ffs_epfile
  - nvmet: remove superfluous initialization
  - usb: gadget: f_fs: initialize reset_work at allocation time
  - crypto: atmel-sha204a - drop hwrng quality reduction for ATSHA204A
  - crypto: atmel - Drop explicit initialization of struct i2c_device_id::driver_data to 0
  - usb: typec: tcpm: Fix VDM type for Enter Mode commands
  - usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect()
  - serial: 8250_mid: Disable DMA for selected platforms
  - serial: 8250_mid: Remove 8250_pci usage
  - HID: appleir: fix UAF on pending key_up_timer in remove()
  - treewide: Switch/rename to timer_delete[_sync]()
  - proc: protect ptrace_may_access() with exec_update_lock (part 1)
  - seqlock: Change do_task_stat() to use scoped_seqlock_read()
  - seqlock: Introduce scoped_seqlock_read()
  - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled
  - HID: add haptics page defines
  - perf/x86/intel/uncore: Defer ADL global PMON enable to enable_box()
  - ksmbd: track the connection owning a byte-range lock
  - ksmbd: centralize ksmbd_conn final release to plug transport leak
  - ksmbd: use opener credentials for FSCTL mutations
  - smb: client: resolve SWN tcon from live registrations
  - smb: client: Improve unlocking of a mutex in cifs_get_swn_reg()
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb()
  - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister
  - netfilter: ebtables: zero chainstack array
  - netfilter: ebtables: Use vmalloc_array() to improve code
  - media: nxp: imx8-isi: Fix use-after-free on remove
  - media: nxp: imx8-isi: use devm_pm_runtime_enable() to simplify code
  - media: nxp: imx8-isi: Convert to platform remove callback returning void
  - gpio: sch: use raw_spinlock_t in the irq startup path
  - coresight: etb10: restore atomic_t for shared reading state
  - mm/shrinker: do not hold RCU lock in shrinker_debugfs_count_show()
  - staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr()
  - staging: rtl8723bs: fix spaces around binary operators
  - staging: rtl8723bs: core: move constants to right side in comparison
  - PCI: Free saved list without holding pci_bus_sem
  - PCI: Prevent resource tree corruption when BAR resize fails
  - PCI: mediatek: Fix IRQ domain leak when port fails to enable
  - PCI: mediatek: Use generic MACRO for TPVPERL delay
  - PCI: mediatek: Convert bool to single quirks entry and bitmap
  - PCI: controller: Use dev_fwnode() instead of of_fwnode_handle()
  - PCI: imx6: Fix IMX6SX_GPR12_PCIE_TEST_POWERDOWN handling
  - vfio/mlx5: Fix racy bitfields and tighten struct layout
  - PCI: altera: Fix resource leaks on probe failure
  - ALSA: aoa: check snd_ctl_new1() return value
  - iio: common: st_sensors: honour channel endianness in read_axis_data
  - iio: pressure: mpl115: fix runtime PM leak on read error
  - iio: imu: inv_icm42600: fix timestamping by limiting FIFO reading
  - iio: imu: inv_icm42600: stabilized timestamp in interrupt
  - iio: invensense: fix timestamp glitches when switching frequency
  - iio: invensense: remove redundant initialization of variable period
  - iio: hid-sensor-rotation: Fix stale or zero output when reading raw values
  - iio: imu: adis: add IRQF_NO_THREAD to non-FIFO trigger IRQ
  - ACPI: NFIT: core: Fix possible deadlock and missing notifications
  - ACPI: NFIT: core: Use devm_acpi_install_notify_handler()
  - ACPI: bus: Introduce devm_acpi_install_notify_handler()
  - ACPI: driver: Check ACPI_COMPANION() against NULL during probe
  - ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup
  - perf/x86/amd/brs: Fix kernel address leakage
  - mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout
  - mtd: rawnand: lpc32xx_mlc: fail DMA transfers on timeout
  - mtd: rawnand: fsl_ifc: return errors for failed page reads
  - mmc: vub300: defer reset until cmd_mutex is unlocked
  - mtd: mchp23k256: use SPI match data for chip caps
  - mtd: onenand: samsung: report DMA completion timeouts
  - wifi: mwifiex: fix permanently busy scans after multiple roam iterations
  - wifi: mac80211: free ack status frame on TX header build failure
  - powerpc/spufs: fix out-of-bounds access in spufs_mem_mmap_access()
  - reset: sunxi: fix memory region leak on ioremap failure
  - ipvs: reload ip header after head reallocation
  - ipvs: fix more places with wrong ipv6 transport offsets
  - memstick: ms_block: reject a card that reports too many blocks
  - macsec: fix promiscuity refcount leak in macsec_dev_open()
  - llc: fix SAP refcount leak when creating incoming sockets
  - Bluetooth: btrtl: validate firmware patch bounds
  - regulator: ltc3676: Fix incorrect IRQSTAT bit offsets
  - wifi: mac80211: fix memory leak in ieee80211_register_hw()
  - wifi: rt2x00: avoid full teardown before work setup in probe
  - powerpc/pseries: fix memory leak on krealloc failure in papr_init
  - pmdomain: imx: Fix i.MX8MP VC8000E power up sequence
  - pmdomain: imx: Fix i.MX8MP power notifier
  - cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed
  - tracing/osnoise: Call synchronize_rcu() when unregistering
  - riscv: Prevent NULL pointer dereference in machine_kexec_prepare()
  - drbd: reject data replies with an out-of-range payload size
  - macsec: don't read an unset MAC header in macsec_encrypt()
  - ipvs: reset full ip_vs_seq structs in ip_vs_conn_new
  - ipvs: use parsed transport offset in SCTP state lookup
  - llc: fix SAP refcount leak in llc_ui_autobind()
  - mac802154: remove interfaces with RCU list deletion
  - s390/monwriter: Reject buffer reuse with different data length
  - riscv: probes: save original sp in rethook trampoline
  - hwmon: (asus_atk0110) Check package count before accessing element
  - net: wwan: iosm: bound device offsets in the MUX downlink decoder
  - ata: pata_pxa: Fix DMA channel leak on probe error
  - orangefs: keep the readdir entry size 64-bit in fill_from_part()
  - tracing/probes: Fix double addition of offset for @+FOFFSET
  - net/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peeked
  - net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked
  - net: lan743x: Initialize eth_syslock spinlock before use
  - fsl/fman: Free init resources on KeyGen failure in fman_init()
  - hwmon: (occ) unregister sysfs devices outside occ lock
  - net: liquidio: fix BAR resource leak on PF number failure
  - hwmon: (w83793) remove vrm sysfs file on probe failure
  - hwmon: (w83627hf) remove VID sysfs files on error and remove
  - rtc: mpfs: fix counter upload completion condition
  - bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp()
  - espintcp: use sk_msg_free_partial to fix partial send
  - LoongArch: Fix missing dirty page tracking in {pte,pmd}_wrprotect()
  - batman-adv: clean untagged VLAN on netdev registration failure
  - batman-adv: ensure minimal ethernet header on TX
  - batman-adv: retrieve ethhdr after potential skb realloc on RX
  - net/sched: sch_teql: move rcu_read_lock()/spin_lock() from _bh variants
  - ieee802154: ca8210: fix pointer truncation in kfifo on 64-bit
  - ieee802154: ca8210: fix cas_ctl leak on spi_async failure
  - ieee802154: allow legacy LLSEC ADD/DEL ops to pass strict validation
  - ieee802154: admin-gate legacy LLSEC dump operations
  - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink
  - net: ipip: require CAP_NET_ADMIN in the device netns for changelink
  - net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink
  - net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink
  - net: ena: clean up XDP TX queues when regular TX setup fails
  - net/sched: act_ct: preserve tc_skb_cb across defragmentation
  - net: ixp4xx_hss: fix duplicate HDLC netdev allocation
  - net: wwan: t7xx: destroy DMA pool on CLDMA late init failure
  - net: sit: require CAP_NET_ADMIN in the device netns for changelink
  - gpios: palmas: add .get_direction() op
  - gpio-f7188x: Add support for NCT6126D version B
  - cpu: hotplug: Bound hotplug states sysfs output
  - cpu: hotplug: Preserve per instance callback errors
  - posix-cpu-timers: Use u64 multiplication in update_rlimit_cpu()
  - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete
  - Input: ims-pcu - fix type confusion in CDC union descriptor parsing
  - Input: ims-pcu - fix race condition in reset_device sysfs callback
  - Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing
  - Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq() debug logging
  - Input: ims-pcu - fix DMA mapping violation in line setup
  - Input: ims-pcu - add response length checks
  - Input: ims-pcu - validate control endpoint type
  - Input: ims-pcu - release data interface on disconnect
  - Input: ims-pcu - fix use-after-free and double-free in disconnect
  - scsi: elx: efct: Fix I/O leak on unsupported additional CDB
  - scsi: elx: efct: Fix refcount leak in efct_hw_io_abort()
  - scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE
  - scsi: target: Bound PR-OUT TransportID parsing to the received buffer
  - scsi: xen: scsiback: Free unsubmitted command instead of double-putting it
  - scsi: xen: scsiback: Free the command tag on the TMR submit-failure path
  - scsi: sg: Report request-table problems when any status is set
  - scsi: lpfc: Fix memory leak in lpfc_sli4_driver_resource_setup()
  - scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path
  - dm-verity: increase sprintf buffer size
  - dm-verity: fix a possible NULL pointer dereference
  - dm-integrity: don't increment hash_offset twice
  - dm_early_create: fix freeing used table on dm_resume failure
  - dm-stats: fix merge accounting
  - dm-stats: fix dm_jiffies_to_msec64
  - dm-log: fix a bitset_size overflow on 32bit machines
  - dm-ioctl: fix a possible overflow in list_version_get_info
  - dm-bufio: fix wrong count calculation in dm_bufio_issue_discard
  - dm era: fix out-of-bounds memory access for non-zero start sector
  - dm thin metadata: fix metadata snapshot consistency on commit failure
  - dm thin metadata: fix superblock refcount leak on snapshot shadow failure
  - net: sparx5: unregister blocking notifier on init failure
  - bpf: Add missing access_ok call to copy_user_syms
  - can: bcm: add missing rcu list annotations and operations
  - can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure
  - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF
  - can: isotp: use unconditional synchronize_rcu() in isotp_release()
  - can: esd_usb: kill anchored URBs before freeing netdevs
  - nvmet-rdma: handle inline data with a nonzero offset
  - sctp: validate STALE_COOKIE cause length before reading staleness
  - spi: uniphier: Fix completion initialization order before devm_request_irq()
  - tpm: Make the TPM character devices non-seekable
  - tpm: fix event_size output in tpm1_binary_bios_measurements_show
  - xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink
  - xfrm: use compat translator only for u64 alignment mismatch
  - xen/gntdev: fix error handling in ioctl
  - ice: fix ice_init_link() error return preventing probe
  - i2c: mlxbf: Fix use-after-free in mlxbf_i2c_init_resource()
  - i2c: mediatek: fix WRRD for SoCs without auto_restart option
  - hwmon: (ltc2992) add missing 'select REGMAP_I2C' to Kconfig
  - ksmbd: fix integer overflow in set_file_allocation_info()
  - smb: client: use kvzalloc() for megabyte buffer in simple fallocate
  - platform/x86/amd/pmc: Delay suspend for some Lenovo Laptops
  - platform/x86/amd/pmc: Check for intermediate wakeup in function
  - dmaengine: dw-edma: Add spinlock to protect DONE_INT_MASK and ABORT_INT_MASK
  - dmaengine: tegra: Fix burst size calculation
  - tpm: tpm_tis_spi: Use wait_woken() in wait_for_tmp_stat()
  - irqchip/crossbar: Use correct index in crossbar_domain_free()
  - mtd: maps: vmu-flash: fix NULL pointer dereference in initialization
  - mtd: spi-nor: swp: Improve locking user experience
  - fpga: microchip-spi: fix zero header_size OOB read in mpf_ops_parse_header()
  - net: thunderbolt: Fix frags[] overflow by bounding frame_count
  - bus: mhi: ep: Protect mhi_ep_handle_syserr() in the error path
  - fpga: dfl: add bounds check in dfh_get_param_size()
  - ocfs2: reject non-inline dinodes with i_size and zero i_clusters
  - ocfs2: reject dinodes whose i_rdev disagrees with the file type
  - ocfs2: reject dinodes with non-canonical i_mode type
  - ocfs2: add journal NULL check in ocfs2_checkpoint_inode()
  - ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits
  - ocfs2: avoid moving extents to occupied clusters
  - mtd: rawnand: fix condition in 'nand_select_target()'
  - net/9p: fix infinite loop in p9_client_rpc on fatal signal
  - mtd: rawnand: pl353: fix probe resource allocation
  - ocfs2: use kzalloc for quota recovery bitmap allocation
  - scsi: sas: Skip opt_sectors when DMA reports no real optimization hint
  - scsi: smartpqi: Use shost_to_hba() in pqi_scan_finished()
  - 9p: skip nlink update in cacheless mode to fix WARN_ON
  - mtd: slram: remove failed entries from the device list
  - mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE
  - proc: only bump parent nlink when registering directories
  - mm/damon/sysfs-schemes: put stats for scheme_add_dirs() internal error
  - mm/damon/sysfs-schemes: fix dir put orders in access_pattern_add_dirs()
  - riscv: cacheinfo: Fix node reference leak in populate_cache_leaves
  - mips: sched: Fix CPUMASK_OFFSTACK memory corruption
  - power: supply: charger-manager: fix refcount leak in is_full_charged()
  - ntfs3: fix out-of-bounds read in decompress_lznt
  - ntfs3: validate split-point offset in indx_insert_into_buffer
  - ntfs3: bound to_move in indx_insert_into_root before hdr_insert_head
  - ntfs3: cap RESTART_TABLE free-chain walker at rt->used
  - fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation}
  - fs/ntfs3: add depth limit to indx_find_buffer to prevent stack overflow
  - fs/ntfs3: validate lcns_follow in log_replay conversion
  - fs/ntfs3: bound attr_off in UpdateResidentValue against data_off
  - fs/ntfs3: bound copy_lcns dp->page_lcns[] index in analysis pass
  - fs/ntfs3: bound DeleteIndexEntryAllocation memmove length
  - fs/ntfs3: fix syncing wrong inode on DIRSYNC cross-directory rename
  - mm/damon/core: make charge_addr_from aware of end-address exclusivity
  - power: supply: cpcap-battery: Fix missing nvmem_device_put() causing reference leak
  - MIPS: DEC: Ensure 32-bit stack location for o32 prom_printf()
  - MIPS: ip22-gio: fix device reference leak in probe
  - MIPS: ip22-gio: fix kfree() of static object
  - MIPS: ip22-gio: fix gio device memory leak
  - remoteproc: qcom: Fix leak when custom dump_segments addition fails
  - SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing
  - lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure
  - lockd: Plug nlm_file leak when nlm_do_fopen() fails
  - sunrpc: wait for in-flight TLS handshake callback when cancel loses race
  - sunrpc: pin svc_xprt across the asynchronous TLS handshake callback
  - nvdimm/btt: Free arena sub-allocations on discover_arenas() error path
  - nvdimm/btt: Free arenas on btt_init() error paths
  - jbd2: fix integer underflow in jbd2_journal_initialize_fast_commit()
  - Bluetooth: SCO: hold sk properly in sco_conn_ready
  - Bluetooth: SCO: fix sleeping under spinlock in sco_conn_ready
  - HID: playstation: validate num_touch_reports in DualShock 4 reports
  - mfd: tps6586x: Fix OF node refcount
  - cifs: invalidate cfid on unlink/rename/rmdir
  - batman-adv: tt: prevent TVLV OOB check overflow
  - batman-adv: frag: fix primary_if leak on failed linearization
  - batman-adv: frag: free unfragmentable packet
  - batman-adv: fix VLAN priority offset
  - batman-adv: tt: avoid request storms during pending request
  - batman-adv: dat: fix tie-break for candidate selection
  - batman-adv: dat: ensure accessible eth_hdr proto field
  - batman-adv: bla: reacquire gw address after skb realloc
  - batman-adv: dat: acquire ARP hw source only after skb realloc
  - batman-adv: access unicast_ttvn skb->data only after skb realloc
  - batman-adv: gw: acquire ethernet header only after skb realloc
  - s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init()
  - perf/x86/amd/lbr: Fix kernel address leakage
  - x86/boot: Reject too long acpi_rsdp= values
  - x86/boot: Validate console=uart8250 baud rate to fix early boot hang
  - tools/power/x86/intel-speed-select: Harden daemon pidfile open
  - mfd: sm501: Fix reference leak on failed device registration
  - leds: uleds: Fix potential buffer overread
  - selinux: fix incorrect execmem checks on overlayfs
  - selinux: check connect-related permissions on TCP Fast Open
  - soc: fsl: qe: panic on ioremap() failure in qe_reset()
  - soc: ti: k3-ringacc: Fix access mode for k3_ringacc_ring_pop_tail_io/proxy
  - gpu: host1x: Fix device reference leak in host1x_device_parse_dt() error path
  - netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment()
  - netfilter: xt_nat: reject unsupported target families
  - netfilter: ecache: fix inverted time_after() check
  - netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag
  - netfilter: nf_nat_sip: reload possible stale data pointer
  - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst
  - netfilter: xt_cluster: reject template conntracks in hash match
  - netfilter: nfnl_cthelper: apply per-class values when updating policies
  - netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read
  - ASoC: qcom: q6apm: fix NULL pointer dereference in graph_callback
  - ASoC: mediatek: mt8183: Release reserved memory on cleanup
  - ASoC: mediatek: mt8192: Release reserved memory on cleanup
  - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  - fbdev: tridentfb: fix potential memory leak in trident_pci_probe()
  - fbdev: nvidia: fix potential memory leak in nvidiafb_probe()
  - fbdev: vesafb: fix memory leak in vesafb_probe()
  - fbdev: carminefb: fix potential memory leak in alloc_carmine_fb()
  - fbdev: tdfxfb: fix potential memory leak in tdfxfb_probe()
  - fbdev: uvesafb: fix potential memory leak in uvesafb_probe()
  - fbdev: s3fb: fix potential memory leak in s3_pci_probe()
  - fbdev: i740fb: fix potential memory leak in i740fb_probe()
  - fbdev: radeon: fix potential memory leak in radeonfb_pci_register()
  - fbdev: sm712: Fix operator precedence in big_swap macro
  - fbdev: hecubafb: fix potential memory leak in hecubafb_probe()
  - fbdev: broadsheetfb: fix potential memory leak in broadsheetfb_probe()
  - fbdev: metronomefb: fix potential memory leak in metronomefb_probe()
  - KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs
  - KVM: s390: pci: Fix handling of AIF enable without AISB
  - KVM: arm64: vgic: Check the interrupt is still ours before migrating it
  - KVM: s390: pci: Fix GISC refcount leak on AIF enable failure
  - arm64: dts: qcom: sdm630: describe adsp_mem region properly
  - arm64: fpsimd: Fix type mismatch in sve_{save,load}_state()
  - net: ife: require ETH_HLEN to be pullable in ife_decode()
  - net: atm: reject out-of-range traffic classes in QoS validation
  - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post()
  - ASoC: SOF: topology: validate vendor array size before parsing
  - ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  - ASoC: SOF: ipc3-control: Use overflow checks in control_update size calc
  - ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  - vduse: Fix race in vduse_dev_msg_sync and vduse_dev_read_iter
  - mlxsw: fix refcount leak in mlxsw_sp_vrs_lpm_tree_replace()
  - mlxsw: fix refcount leak in mlxsw_sp_port_lag_join()
  - smb: client: fix overflow in passthrough ioctl bounds check
  - octeontx2-af: fix VF bringup affecting PF promiscuous state
  - net/mlx5: Fix L3 tunnel entropy refcount leak
  - selftests/net: fix EVP_MD_CTX leak in tcp_mmap
  - regulator: core: regulator_lock_two() should test for EDEADLK not EDEADLOCK
  - dm era: fix NULL pointer dereference in metadata_open()
  - SUNRPC: pin upper rpc_clnt across the TLS connect_worker
  - SUNRPC: release lower rpc_clnt if killed waiting for XPRT_LOCKED
  - cifs: validate DFS referral string offsets
  - s390/zcrypt: Remove the empty file
  - ipvs: ensure inner headers in ICMP errors are in headroom
  - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors
  - ipvs: use parsed transport offset in TCP state lookup
  - ipvs: pass parsed transport offset to state handlers
  - ipv6: mcast: Fix potential UAF in MLD delayed work
  - ipv6: mcast: Replace locking comments with lockdep annotations.
  - ipv4: igmp: Fix potential UAF in igmp_gq_start_timer()
  - octeontx2-pf: check DMAC extraction support before filtering
  - net/sched: cake: reject overhead values that underflow length
  - net: usb: lan78xx: disable VLAN filter in promiscuous mode
  - net: usb: lan78xx: move functions to avoid forward definitions
  - net/tls: Consume empty data records in tls_sw_read_sock()
  - ring-buffer: Fix event length with forced 8-byte alignment
  - Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup()
  - Bluetooth: ISO: exclude RFU bits from ISO_SDU_Length
  - Bluetooth: MGMT: Fix adv monitor add failure cleanup
  - Bluetooth: 6lowpan: hold L2CAP conn across debugfs control
  - amt: fix size calculation in amt_get_size()
  - net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket
  - net/sched: act_pedit: fix TOCTOU heap OOB write in tc offload
  - net: qualcomm: rmnet: validate MAP frame length before ingress parsing
  - qede: fix off-by-one in BD ring consumption on build_skb failure
  - net: microchip: vcap: fix races on the shared Super VCAP block
  - net/mlx5e: Fix HV VHCA stats agent registration race
  - net/mlx5e: Fix HV VHCA stats zero-sized buffer allocation
  - netfilter: xt_connmark: reject invalid shift parameters
  - netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop
  - netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()
  - netfilter: xt_u32: reject invalid shift counts
  - gue: validate REMCSUM private option length
  - net: usb: net1080: validate packet_len before pad-byte access in rx_fixup
  - selftests/hid: Cover hid_bpf_get_data() size overflow
  - selftests/hid: convert the hid_bpf selftests with struct_ops
  - selftests/hid: force using our compiled libbpf headers
  - selftests/hid: do not manually call headers_install
  - selftests/hid: ensure we can compile the tests on kernels pre-6.3
  - HID: picolcd: prevent NULL pointer dereference in picolcd_send_and_wait()
  - ata: sata_gemini: unwind clocks on IDE pinctrl errors
  - minix: avoid overflow in bitmap block count calculation
  - afs: Fix unchecked-length string display in debug statement
  - afs: Fix the volume AFS_VOLUME_RM_TREE is set on
  - afs: Fix vllist leak
  - afs: Fix callback service message parsers to pass through -EAGAIN
  - afs: use kvfree() to free memory allocated by kvcalloc()
  - afs: Fix error code in afs_extract_vl_addrs()
  - fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid
  - net/sched: hhf: clear heavy-hitter state on reset
  - pinctrl: meson: restore non-sleeping GPIO access
  - gpio: timberdale: Return -ENOMEM on dynamic memory allocation in probe
  - ksmbd: fix use-after-free of fp->owner.name in durable handle owner check
  - smb: move some duplicate definitions to common/cifsglob.h
  - net/sched: act_bpf: use rcu_dereference_bh() to read the filter
  - cxgb4: Fix decode strings dump for T6 adapters
  - virtio_net: disable cb when NAPI is busy-polled
  - irqchip/ts4800: Fix missing chained handler cleanup on remove
  - irqchip/gic-v3-its: Fix OF node reference leak
  - tracing: eprobe: read the complete FILTER_PTR_STRING pointer
  - tracing/events: Fix to check the simple_tsk_fn creation
  - bridge: stp: Fix a potential use-after-free when deleting a bridge
  - net/sched: sch_teql: Introduce slaves_lock to avoid race condition and UAF
  - net: gianfar: dispose irq mappings on probe failure and device removal
  - net: phy: sfp: free mii_bus in sfp_i2c_mdiobus_destroy
  - usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup()
  - hwmon: (pmbus) Fix passing events to regulator core
  - hwmon: adm1275: Prevent reading uninitialized stack
  - MIPS: DEC: Ensure RTC platform device deregistration upon failure
  - sctp: fix SCTP_RESET_STREAMS stream list length limit
  - net: enetc: check the number of BDs needed for xdp_frame
  - qede: fix out-of-bounds check for cqe->len_list[]
  - seg6: validate SRH length before reading fixed fields
  - gpio: htc-egpio: use managed gpiochip registration
  - gpio: mvebu: fail probe if gpiochip registration fails
  - spi: sh-msiof: abort transfers when reset times out
  - tracing: probes: fix typo in a log message
  - dt-bindings: net: renesas,ether: Drop example "ethernet-phy-ieee802.3-c22" fallback
  - ASoC: fsl_asrc_dma: fix eDMA maxburst misalignment with channel count
  - net: ethernet: sunplus: spl2sw: fix phy_node refcount leak in remove
  - net: sungem: fix probe error cleanup
  - net: mvneta: re-enable percpu interrupt on resume
  - rtc: cmos: unregister HPET IRQ handler on probe failure
  - rtc: ds1307: Fix off-by-one issue with wday for rx8130
  - smb/client: preserve errors from smb2_set_sparse()
  - ipv6: fix error handling in disable_policy sysctl
  - ipv6: fix error handling in forwarding sysctl
  - ipv6: fix error handling in ignore_routes_with_linkdown sysctl
  - ipv6: fix error handling in disable_ipv6 sysctl
  - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle
  - veth: fix NAPI leak in XDP enable error path
  - net: dsa: sja1105: round up PTP perout pin duration
  - net, bpf: check master for NULL in xdp_master_redirect()
  - alpha/PCI: Fix __pci_mmap_fits() overflow for zero-length BARs
  - alpha/PCI: Add security_locked_down() check to pci_mmap_resource()
  - NTB: epf: Fix doorbell bitmask and IRQ vector handling
  - NTB: epf: Report 0-based doorbell vector via ntb_db_event()
  - NTB: epf: Make db_valid_mask cover only real doorbell bits
  - netfilter: nft_compat: ebtables emulation must reject non-bridge targets
  - netfilter: nft_synproxy: stop bypassing the priv->info snapshot
  - netfilter: nf_nat: avoid invalid nat_net pointer use on failed nf_nat_init()
  - ipv4: fib: Don't ignore error route in local/main tables.
  - ipv6: Fix null-ptr-deref in fib6_nh_mtu_change().
  - ksmbd: fix use-after-free of conn->preauth_info in concurrent SMB2 NEGOTIATE
  - rtc: msc313: fix NULL deref in shared IRQ handler at probe
  - i40e: Fix i40e_debug() to use struct i40e_hw argument
  - ice: fix AQ error code comparison in ice_set_pauseparam()
  - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs()
  - PCI: endpoint: pci-epf-ntb: Add check to detect 'db_count' value of 0
  - PCI: endpoint: pci-epf-vntb: Add check to detect 'db_count' value of 0
  - bpf: zero-initialize the fib lookup flow struct
  - bpf: Fix stack slot index in nospec checks
  - rtc: ds1307: handle oscillator stop flag for ds1337/ds1339/ds3231
  - rtc: abx80x: fix the RTC_VL_CLR clearing all status flags
  - octeontx2-pf: mcs: Fix mcs resources free on PF shutdown
  - octeontx2-pf: Clear stats of all resources when freeing resources
  - octeontx2-af: mcs: Fix unsupported secy stats read
  - net: ethernet: mtk_ppe: Fix rhashtable leak in mtk_ppe_init error paths
  - tipc: fix use-after-free of the discoverer in tipc_disc_rcv()
  - net: marvell: prestera: initialize err in prestera_port_sfp_bind
  - selftests/mm: fix exclusive_cow test fork() handling
  - selftests/mm: allow PUD-level entries in compound testcase of hmm tests
  - selftests/mm: clarify alternate unmapping in compaction_test
  - irqchip/crossbar: Fix parent domain resource leak
  - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak
  - netfilter: nf_reject: skip iphdr options when looking for icmp header
  - netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer()
  - netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types
  - netfilter: ipset: annotate "pos" for concurrent readers/writers
  - netfilter: ipset: Fix data race between add and dump in all hash types
  - md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry
  - ieee802154: fix kernel-infoleak in dgram_recvmsg()
  - ieee802154: Remove WARN_ON() in cfg802154_pernet_exit()
  - ACPI: IPMI: Fix inverted interface check in ipmi_bmc_gone()
  - ACPI: resource: Amend kernel-doc style
  - thermal: intel: Fix dangling resources on thermal_throttle_online() failure
  - arm64/hw_breakpoint: reject unaligned watchpoints that would truncate BAS
  - ALSA: usb-audio: Kill MIDI 2.0 URBs before freeing endpoints
  - flow_dissector: check device type before reading ETH_ADDRS
  - devlink: Fix parent ref leak in devl_rate_node_create()
  - dpaa2-switch: fix VLAN upper check not rejecting bridge join
  - virtio-net: fix len check in receive_big()
  - spi: rpc-if: Use correct device for hardware reinitialization on resume
  - PCI: iproc: Restore .map_irq() for the platform bus driver
  - sctp: hold socket lock when dumping endpoints in sctp_diag
  - net: psample: fix info leak in PSAMPLE_ATTR_DATA
  - octeontx2-pf: Fix leak of SQ timestamp buffer on teardown
  - drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm
  - drm/amdkfd: Avoid double-unpin of DOORBELL/MMIO BOs on free
  - ASoC: tlv320aic3x: restrict CLKDIV bypass Q values in dual-rate mode
  - xfrm: validate selector family and prefixlen during match
  - xfrm: annotate data-races around xfrm_policy_count[] and xfrm_policy_default[]
  - xfrm: Support crypto offload for inbound IPv6 ESP packets not in GRO path
  - xfrm: Use the XFRM_GRO to indicate a GRO call on input
  - spi: dw: fix wrong BAUDR setting after resume
  - gpio: mlxbf3: fail probe if gpiochip registration fails
  - sparc: led: avoid trimming a newline from empty writes
  - apparmor: fix label can not be immediately before a declaration
  - i3c: master: Prevent reuse of dynamic address on device add failure
  - apparmor: put secmark label after secid lookup
  - apparmor: aa_getprocattr free procattr leak on format failure
  - apparmor: fix potential UAF in aa_replace_profiles
  - apparmor: grab ns lock and refresh when looking up changehat child profiles
  - apparmor: fix rawdata_f_data implicit flex array
  - apparmor: aa_label_alloc use aa_label_free on alloc failure
  - apparmor: check label build before no_new_privs test
  - security/apparmor/apparmorfs.c: conditionally compile get_loaddata_common_ref()
  - Revert "PCI/MSI: Unmap MSI-X region on error"
  - PCI: mediatek: Use actual physical address instead of virt_to_phys()
  - PCI: mediatek: Fix possible truncation in mtk_pcie_parse_port()
  - tools lib api: Fix mount_overload() snprintf truncation and toupper range
  - tools lib api: Fix filename__write_int() writing uninitialized stack data
  - tools lib api: Fix missing null termination in filename__read_int/ull()
  - xprtrdma: Return sendctx slot after Send preparation failure
  - xprtrdma: Repost Receive buffers for malformed replies
  - xprtrdma: Sanitize the reply credit grant after parsing
  - xprtrdma: Fix bcall rep leak and unbounded peek
  - xprtrdma: Resize reply buffers before reposting receives
  - xprtrdma: Document and assert reply-handler invariants
  - xprtrdma: Check frwr_wp_create() during connect
  - PCI: rcar-host: Remove unused LIST_HEAD(res)
  - fs/ntfs3: resize log->one_page_buf when adopting on-disk page size
  - PCI: meson: Propagate devm_add_action_or_reset() failure
  - PCI: mediatek: Fix operator precedence in PCIE_FTS_NUM_L0 macro
  - NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS in pg_get_mirror_count_write
  - NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS on fatal DS connect errors
  - nfs: keep PG_UPTODATE clear after read errors in page groups
  - NFSv4/pnfs: defer return_range callbacks until after inode unlock
  - xprtrdma: Decouple req recycling from RPC completion
  - xprtrdma: Use sendctx DMA state for Send signaling
  - xprtrdma: Post receive buffers after RPC completion
  - xprtrdma: Close lost-wakeup race in xprt_rdma_alloc_slot
  - xprtrdma: Avoid 250 ms delay on backlog wakeup
  - xprtrdma: Remove temp allocation of rpcrdma_rep objects
  - pNFS/filelayout: fix cheking if a layout is striped
  - clk: qcom: a53: Corrected frequency multiplier for 1152MHz
  - dmaengine: Fix possible use after free
  - dmaengine: qcom: gpi: set DMA_PRIVATE capability
  - perf: Fix off-by-one stack buffer overflow in kallsyms__parse()
  - dmaengine: imx-sdma: Refine spba bus searching in probe
  - drm/amd/display: Add missing kdoc for ALLM parameters
  - fs/ntfs3: fix mount failure on 64K page-size kernels
  - fs/ntfs3: add bounds check to run_get_highest_vcn()
  - HID: logitech-hidpp: remove excess kernel-doc member in hidpp_scroll_counter
  - clk: at91: keep securam node alive while mapping it
  - iio: tcs3472: power down chip on probe failure
  - iio: accel: mma8452: handle I2C read error(s) in mma8452_read()
  - iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling
  - iio: magnetometer: ak8975: fix potential kernel stack memory leak
  - iio: light: si1133: prevent race condition on timeout
  - iio: light: si1133: reset counter to prevent race condition
  - char: tlclk: fix use-after-free in tlclk_cleanup()
  - usb: host: max3421: Reject hub port requests for non-existent ports
  - usb: host: max3421: Fix shift-out-of-bounds in max3421_hub_control()
  - staging: most: video: avoid double free on video register failure
  - mailbox: mtk-adsp: fix UAF during device teardown
  - phy: phy-can-transceiver: Check driver match and driver data against NULL
  - bus: mhi: ep: Fix potential deadlock in mhi_ep_reset_worker()
  - platform/x86: xo15-ebook: Fix wakeup source and GPE handling
  - x86/platform/olpc: xo15: Drop wakeup source on driver removal
  - PCI/ASPM: Don't reconfigure ASPM entering low-power state
  - coresight: etm4x: Correct TRCVMIDCCTLR1 save and restore
  - coresight: cti: Fix DT filter signals silently ignored
  - staging: nvec: fix use-after-free in nvec_rx_completed()
  - net/9p: fix race condition on rdma->state in trans_rdma.c
  - ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write
  - mfd: cs42l43: Sanity check firmware size
  - ksmbd: fix use-after-free in same_client_has_lease()
  - ionic: Fix check in ionic_get_link_ext_stats
  - tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF)
  - tipc: fix UAF in tipc_l2_send_msg()
  - KEYS: Use acquire when reading state in keyring search
  - powerpc/kexec: fix double get_cpu() imbalance in kexec_prepare_cpus
  - powerpc/powernv: fix preempt count leak in pnv_kexec_wait_secondaries_down
  - MIPS: mm: Fix out-of-bounds write in maar_res_walk()
  - bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check
  - bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data()
  - bpf: Fix bpf_get/setsockopt to tos for ipv4-mapped ipv6 socket
  - selftests/bpf: Initialize operation name before use
  - smb/client: always return a value for FS_IOC_GETFLAGS
  - cifs: remove all cifs files before kill super
  - ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  - netfilter: nf_conncount: callers must hold rcu read lock
  - kcm: use WRITE_ONCE() when changing lower socket callbacks
  - net: bcmgenet: Use weighted round-robin TX DMA arbitration
  - net: wwan: t7xx: check skb_clone in control TX
  - net/mlx5: Check max_macs devlink param value against max capability
  - bpf: Run generic devmap egress prog on private skb
  - net: mana: guard TX wq object destroy with INVALID_MANA_HANDLE check
  - net: mana: initialize gdma queue id to INVALID_QUEUE_ID
  - net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen
  - net/sched: sch_fq_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen
  - handshake: Require admin permission for DONE command
  - power: supply: core: fix supplied_from allocations
  - ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset GPIO
  - spi: xilinx: use FIFO occupancy register to determine buffer size
  - crypto: rng - Free default RNG on module exit
  - crypto: cavium/cpt - fix DMA cleanup using wrong loop index
  - crypto: marvell/octeontx - fix DMA cleanup using wrong loop index
  - cxl/test: Add check after kzalloc() memory in alloc_mock_res()
  - tipc: reject inverted service ranges from peer bindings
  - tipc: prevent snt_unacked underflow on CONN_ACK
  - tipc: require net admin for TIPCv2 netlink mutators
  - net/sched: sch_hfsc: Don't make class passive twice
  - sctp: validate embedded address parameter length
  - bridge: cfm: reject invalid CCM interval at configuration time
  - net: fib_rules: Don't dump dying fib_rule in fib_rules_dump().
  - net/sched: cls_flow: Dont expose folded kernel pointers
  - ASoC: tegra: tegra210_ahub: Validate written enum value
  - ASoC: fsl: fsl_audmix: Validate written enum values
  - ASoC: codecs: hdac_hdmi: Validate written enum value
  - RDMA/mlx5: Release the HW‑provided UAR index rather than the SW one
  - RDMA/mlx5: Fix undefined shift of user RQ WQE size
  - RDMA/mlx5: Remove raw RSS QP restrack tracking
  - fs: efs: remove unneeded debug prints
  - Bluetooth: vhci: validate devcoredump state before side effects
  - Bluetooth: hci: validate codec capability element length
  - Bluetooth: hci_qca: fix NULL pointer dereference in qca_dmp_hdr() for non-serdev device
  - s390/process: Fix kernel thread function pointer type
  - bpf: Tighten cgroup storage cookie checks for prog arrays
  - of: cpu: add check in __of_find_n_match_cpu_property()
  - cxl/test: Zero out LSA backing memory to avoid leaking to user
  - cxl/test: Fix integer overflow in mock LSA bounds checks
  - selftests/bpf: Fix bpf_iter/task_vma test
  - ext4: fix kernel BUG in ext4_write_inline_data_end
  - bonding: 3ad: fix mux port state on oper down
  - ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend fails
  - tools/virtio: check mmap return value in vringh_test
  - vhost/net: complete zerocopy ubufs only once
  - vduse: Requeue failed read to send_list head
  - vhost/vdpa: validate virtqueue index in mmap and fault paths
  - vduse: hold vduse_lock across IDR lookup in open path
  - ASoC: codecs: aw88261: fix incorrect masks for boost regs
  - spi: meson-spifc: fix runtime PM leak on remove
  - IB/mlx4: Fill in the access_flags if IB_MR_REREG_ACCESS is not specified
  - btrfs: zoned: don't account data relocation space-info in statfs free space
  - hwmon: (it87) Clamp negative values to zero in set_fan()
  - fbdev: sm501fb: Fix buffer errors in OF binding code
  - btrfs: fix invalid pointer dereference in __btrfs_run_delayed_refs()
  - wifi: mt76: mt7921: fix potential tx_retries underflow
  - wifi: mt76: mt7915: fix potential tx_retries underflow
  - wifi: mt76: fix argument to ieee80211_is_first_frag()
  - hwspinlock: qcom: avoid uninitialized struct members
  - vmalloc: fix NULL pointer dereference in is_vm_area_hugepages()
  - pinctrl: mediatek: mt8167: Fix Schmitt trigger register offset of pins 34-39
  - pinctrl: mediatek: mt8516: Fix Schmitt trigger register offset of pins 34-39
  - scsi: target: Remove tcm_loop target reset handling
  - watchdog: unregister PM notifier on watchdog unregister
  - configfs: fix lockless traversals of ->s_children
  - firmware_loader: Fix recursive lock in device_cache_fw_images()
  - spi: ep93xx: fix double-free of zeropage on DMA setup failure
  - IB/mlx5: Properly support implicit ODP rereg_mr
  - IB/mlx5: Don't take the rereg_mr fallback without a new translation
  - ACPI: IPMI: Fix message kref handling on dead device
  - ALSA: seq: Clear variable event pointer on read
  - riscv: stacktrace: Remove bogus -0x4 offset in non-FP walk_stackframe
  - ALSA: seq: Fix partial userptr event expansion
  - wifi: wcn36xx: fix OOB read from short trigger BA firmware response
  - wifi: wcn36xx: fix OOB read from firmware count in PRINT_REG_INFO indication
  - wifi: wcn36xx: fix heap overflow from oversized firmware HAL response
  - bpf: Update transport_header when encapsulating UDP tunnel in lwt
  - arm64: dts: tqma8mpql-mba8mpxl: configure sai clock in audio codec as well
  - RDMA/irdma: Initialize iwmr->access during MR registration
  - RDMA/irdma: Fix OOB read during CQ MR registration
  - IB/cm: Fix av cm device leak on an error path in cm_init_av_by_path()
  - netfilter: conntrack: call nf_ct_gre_keymap_destroy() if master helper is pptp
  - netfilter: synproxy: protect nf_ct_seqadj_init() with conntrack lock
  - netfilter: nfnetlink_osf: fix mss parsing on big-endian architectures
  - ocfs2: fix race between ocfs2_control_install_private() and ocfs2_control_release()
  - ocfs2/dlm: require a ref for locking_state debugfs open
  - ocfs2: reject FITRIM ranges shorter than a cluster
  - ocfs2: fix buffer head management in ocfs2_read_blocks()
  - ocfs2: rebase copied fsdlm LVB pointers in locking_state
  - perf/x86/amd/core: Always use the NMI latency mitigation
  - bpftool: Use libbpf error code for flow dissector query
  - drm/amdgpu: set sub_block_index for mca ras sub-blocks
  - configfs_lookup(): don't leave ->s_dentry dangling on failure
  - lib/test_meminit: use && for bools
  - sched: restore timer_slack_ns when resetting RT policy on fork
  - ext2: fix ignored return value of generic_write_sync()
  - mm/fake-numa: fix under-allocation detection in uniform split
  - scsi: ufs: Fix wrong value printed in unexpected UPIU response case
  - scsi: pm8001: Fix error code in non_fatal_log_show()
  - scsi: Revert "scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans"
  - nvdimm/btt: Handle preemption in BTT lane acquisition
  - ARM: imx31: Fix IIM mapping leak in revision check
  - ata: libata: Fix ata_exec_internal()
  - HID: wiimote: Fix table layout and whitespace errors
  - ARM: imx3: Fix CCM node reference leak
  - ASoC: rsnd: Fix RSND_SOC_MASK width to single nibble
  - ext4: fix LOGFLUSH shutdown ordering to allow ordered-mode data writeback
  - md/raid10: reset read_slot when reusing r10bio for discard
  - rpmsg: use generic driver_override infrastructure
  - media: qcom: venus: relax encoder frame/blur step size on v6
  - media: qcom: venus: relax encoder frame/blur dimension steps on v4
  - media: qcom: venus: drop extra padding in NV12 raw size calculation
  - RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path
  - RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe
  - EDAC/{skx_common,skx}: Fix UBSAN shift-out-of-bounds in skx_get_dimm_info
  - drm/msm/dp: Fix the ISR_* enum values
  - drm/msm/dp: fix HPD state status bit shift value
  - ocfs2: kill osb->system_file_mutex lock
  - ocfs2: don't BUG_ON an invalid journal dinode
  - rapidio/tsi721: prevent a bad dereference in tsi721_db_dpc()
  - dax/kmem: account for partial discontiguous resource upon removal
  - libbpf: Fix UAF in strset__add_str()
  - libbpf: Harden parse_vma_segs() path parsing
  - drm/nouveau/bios: specify correct display fuse register for Ampere and Ada
  - drm/tegra: Fix iommu_map_sgtable() return value check
  - gpu: host1x: Fix iommu_map_sgtable() return value check
  - drm/tegra: dc: Fix device node reference leak in tegra_dc_has_output()
  - gpu: host1x: Allow entries in BO caches to be freed
  - drm/tegra: gr2d/gr3d: Contain PM in the gr*d_probe/gr*d_remove
  - drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered
  - net/sched: cls_bpf: prevent unbounded recursion in offload rollback
  - ipv6: guard against possible NULL deref in __in6_dev_stats_get()
  - workqueue: drop spurious '*' from print_worker_info() fn declaration
  - nvme-multipath: fix flex array size in struct nvme_ns_head
  - pinctrl: cs42l43: Fix polarity on debounce
  - ALSA: seq: midi: Serialize output teardown with event_input
  - mtd: spi-nor: Drop duplicate Kconfig dependency
  - mips: n64: add __iomem for writel call
  - mips: ralink: mt7621: add missing __iomem
  - MIPS: DEC: Remove do_IRQ() call indirection
  - MIPS: Fix big-endian stack argument fetching in o32 wrapper
  - PM: sleep: Use complete() in device_pm_sleep_init()
  - RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup
  - IB/mlx4: Fix refcount leak in add_port() error path
  - RDMA/rxe: Fix a use-after-free problem in rxe_mmap
  - RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs
  - bus: sunxi-rsb: Always check register address validity
  - pwm: imx27: Fix variable truncation in .apply()
  - device property: fix fwnode reference leak in fwnode_graph_get_endpoint_by_id()
  - arm64: dts: qcom: sm8450: Add power-domain and iface clk for ice node
  - firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  - media: rockchip: rga: fix too small buffer size
  - net/sched: sch_drr: annotate data-races around cl->deficit
  - regulator: dt-bindings: mt6359: Drop regulator-name pattern restrictions
  - bitops: use common function parameter names
  - sysfs: clamp show() return value in sysfs_kf_read()
  - firmware: arm_scmi: Read sensor config as 32-bit value
  - media: atomisp: Fix memory leak in atomisp_fixed_pattern_table()
  - RDMA/srpt: fix integer overflow in immediate data length check
  - RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference
  - RDMA/hns: Fix arithmetic overflow in calc_hem_config()
  - IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier
  - ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD
  - net/sched: sch_htb: annotate data-races (I)
  - net/sched: sch_htb: do not change sch->flags in htb_dump()
  - crypto: ccp - Treat zero-length cert chain as query for blob lengths
  - net/sched: sch_hfsc: annotate data-races in hfsc_dump_class_stats()
  - clk: scpi: Unregister child clock providers on remove
  - thermal: hwmon: Fix critical temperature attribute removal
  - evm: terminate and bound the evm_xattrs read buffer
  - drm/hisilicon/hibmc: use clock to look up the PLL value
  - drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  - arm64: dts: qcom: sm8450: Fix ICE reg size
  - clk: scmi: Fix clock rate rounding
  - arm64: dts: mediatek: mt8192-asurada: Move PCIe DMA bounce buffer to host
  - iommu/amd: Fix a stale comment about which legacy mode is user visible
  - nilfs2: fix backing_dev_info reference leak
  - dlm: fix add msg handle in send_queue ordered
  - crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents
  - crypto: ecrdsa - fix unknown OID check in ecrdsa_param_curve
  - crypto: atmel-sha204a - fix blocking and non-blocking rng logic
  - vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive().
  - arm64: dts: imx8x-colibri: Correct SODIMM PAD settings
  - arm64: dts: rockchip: fix rk809 interrupt pin on rk3566-roc-pc
  - pinctrl: sunxi: fix regulator leak in sunxi_pmx_request() error path
  - media: v4l2-common: Add YUV24 format info
  - media: cedrus: Fix failure to clean up hardware on probe failure
  - watchdog: sprd_wdt: Remove redundant sprd_wdt_disable() on register failure
  - watchdog: sama5d4_wdt: Fix WDDIS detection on SAM9X60 and SAMA7G5
  - watchdog: sp5100_tco: Use EFCH MMIO for newer Hygon FCH
  - ARM: dts: am335x-sl50: Fix audio bitclock and frame master endpoint
  - wifi: ath9k: fix OOB access from firmware tx status queue ID
  - kconfig: fix potential NULL pointer dereference in conf_askvalue
  - wifi: rtw88: fix OOB read from firmware RX descriptor exceeding DMA buffer
  - wifi: rtw89: Correct data type for scan index to avoid infinite loop
  - driver core: use READ_ONCE() for dev->driver in dev_has_sync_state()
  - drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  - dt-bindings: pinctrl: nvidia,tegra234: Add missing required block
  - arm64: tegra: Fix Tegra234 MGBE PTP clock
  - wifi: cfg80211: fix grammar in MLO group key error message
  - arm64: dts: qcom: sdm845-mezzanine: Fix camss ports unit_address_vs_reg warning
  - arm64: dts: rockchip: Fix gmac0 reset pin for NanoPi R5S
  - Documentation: proc: fix section numbering in table of contents
  - libbpf: Report error when a negative kprobe offset is specified
  - drm/radeon: fix memory leak in radeon_ring_restore() on lock failure
  - drm/radeon: fix integer overflow in radeon_align_pitch()
  - drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  - drm/tidss: Drop extra drm_mode_config_reset() call
  - drm/rockchip: Test for imported buffers with drm_gem_is_imported()
  - clocksource/drivers/sun5i: Handle error returns from devm_reset_control_get_optional_exclusive()
  - afs: Fix further netns teardown to cancel the preallocation charger
  - afs: fix NULL pointer dereference in afs_get_tree()
  - afs: Fix netns teardown to cancel the preallocation charger
  - rxrpc: Fix leak of released call in recvmsg(MSG_PEEK)
  - serial: 8250_omap: clear rx_running on zero-length DMA completes
  - serial: msm: Disable DMA for kernel console UART
  - dt-bindings: power: imx93: Add MIPI PHY power domain
  - dt-bindings: media: sun4i-a10-video-engine: Add interconnect properties
  - media: uvcvideo: Fix sequence number when no EOF
  - media: uvcvideo: Fix buffer sequence in frame gaps
  - media: uvcvideo: Avoid partial metadata buffers
  - crypto: crypto4xx - Remove insecure and unused rng_alg
  - crypto: crypto4xx - Remove ahash-related code
  - crypto: sun4i-ss - Remove insecure and unused rng_alg
  - nvmet-tcp: Fix potential UAF when ddgst mismatch
  - KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU
  - crypto: algif_skcipher - force synchronous processing on trees without ctx->state
  - fuse: re-lock request before returning from fuse_ref_folio()
  - fuse: fix device node leak in cuse_process_init_reply()
  - RDMA/siw: bound Read Response placement to the RREAD length
  - RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg
  - Input: maplecontrol - set driver data before registering input device
  - Input: maplemouse - set driver data before registering input device
  - Input: maple_keyb - set driver data before registering input device
  - Input: mms114 - fix multi-touch slot corruption
  - Input: maplemouse - fix NULL pointer dereference in open()
  - Input: mms114 - reject an oversized device packet size
  - Input: touchwin - reset the packet index on every complete packet
  - Input: mms114 - fix touch indexing for MMS134S and MMS136
  - Input: iforce - bound the device-reported force-feedback effect index
  - Input: goodix - clamp the device-reported contact count
  - Input: elan_i2c - prevent division by zero and arithmetic underflow
  - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count
  - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count
  - Input: synaptics-rmi4 - unregister function handlers on physical driver registration failure
  - i2c: stm32f7: truncate clock period instead of rounding it
  - i2c: mpc: Fix timeout calculations
  - udmabuf: fix DMA direction mismatch in release_udmabuf()
  - KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode
  - KVM: VMX: Refresh GUEST_PENDING_DBG_EXCEPTIONS.BS on all injected #DBs
  - NTB: epf: Fix request_irq() unwind in ntb_epf_init_isr()
  - exfat: bound uniname advance in exfat_find_dir_entry()
  - module: decompress: check return value of module_extend_max_pages()
  - watchdog: apple: Add "apple,t8103-wdt" compatible
  - EDAC/i10nm: Don't fail probing if ADXL is missing
  - spi: fsl-lpspi: terminate the RX channel on TX prepare failure path
  - spi: fsl-lpspi: replace dmaengine_terminate_all() with dmaengine_terminate_sync()
  - arm64: fpsimd: Fix type mismatch in sme_{save,load}_state()
  - crypto: talitos/hash - fix SEC2 64k - 1 ahash request limitation
  - crypto: talitos/hash - remove useless wrapper
  - crypto: talitos/hash - rename first_desc/last_desc to first_request/last_request
  - crypto: talitos/hash - drop workqueue mechanism for SEC1
  - crypto: talitos/hash - use descriptor chaining for SEC1 instead of workqueue
  - crypto: talitos/hash - prepare SEC1 descriptor chaining, remove additional descriptor
  - crypto: talitos - move code in current_desc_hdr() into a standalone function
  - crypto: talitos - move dma mapping code in talitos_submit() into a standalone dma_map_request() function
  - crypto: talitos - move dma unmapping code in flush_channel() into a standalone dma_unmap_request() function
  - crypto: talitos - add chaining of arbitrary number of descriptor for the SEC1
  - crypto: talitos - use dma_sync_single_for_cpu() before reading descriptor header
  - crypto: drbg - Fix the fips_enabled priority boost
  - crypto: drbg - Fix drbg_max_addtl() on 64-bit kernels
  - crypto: caam - use print_hex_dump_devel to guard key hex dumps again
  - crypto: caam - use print_hex_dump_devel to guard key hex dumps
  - crypto: af_alg - Remove zero-copy support from skcipher and aead
  - partitions: aix: bound the pp_count scan to the ppe array
  - btrfs: do not trim a device which is not writeable
  - nvme-multipath: set BIO_REMAPPED on bios remapped to per-path namespace disks
  - dm-ioctl: report an error if a device has no table
  - hwrng: jh7110 - fix refcount leak in starfive_trng_read()
  - iio: temperature: ltc2983: Fix n_wires default bypassing rotation check
  - usb: typec: ucsi: cancel pending work on system suspend
  - usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove
  - usb: typec: ucsi: Pass full DP config payload in SET_NEW_CAM for DP alt mode
  - usb: typec: ucsi: Invert DisplayPort role assignment
  - usb: typec: tcpm: Validate SVID index in svdm_consume_modes()
  - usb: typec: class: drop PD lookup reference
  - usb: typec: anx7411: use devm_pm_runtime_enable()
  - usbip: vudc: fix NULL deref in vep_dequeue()
  - usbip: tools: support SuperSpeedPlus devices
  - USB: usb-storage: ene_ub6250: restore media-ready check
  - USB: ulpi: fix memory leak on registration failure
  - USB: serial: digi_acceleport: fix write buffer corruption
  - USB: serial: digi_acceleport: fix hard lockup on disconnect
  - USB: serial: digi_acceleport: fix broken rx after throttle
  - USB: serial: option: add Telit Cinterion FE990D50 compositions
  - USB: serial: keyspan_pda: fix information leak
  - usb: mtu3: unmap request DMA on queue failure
  - USB: misc: uss720: unregister parport on probe failure
  - USB: storage: include US_FL_NO_SAME in quirks mask
  - usb: sl811-hcd: disable controller wakeup on remove
  - USB: legousbtower: fix use-after-free on disconnect race
  - USB: quirks: add NO_LPM for the Samsung T5 EVO Portable SSD
  - USB: ldusb: fix use-after-free on disconnect race
  - USB: idmouse: fix use-after-free on disconnect race
  - usb: gadget: f_printer: take kref only for successful open
  - usb: gadget: udc: Fix use-after-free in gadget_match_driver
  - usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler
  - usb: free iso schedules on failed submit
  - usb: dwc3: meson-g12a: fix refcount leak in dwc3_meson_g12a_resume()
  - USB: core: add USB_QUIRK_NO_LPM for VIA Labs USB 2.0 hub
  - usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info()
  - usb: cdc_acm: Add quirk for Uniden BC125AT scanner
  - net: usb: kalmia: bound RX frame length in kalmia_rx_fixup()
  - bpf: Restore sysctl new-value from 1 to 0
  - xfs: fix unreachable BIGTIME check in dquot flush validation
  - xfs: use null daddr for unset first bad log block
  - media: mtk-jpeg: cancel workqueue on release for supported platforms only
  - nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers
  - hfs/hfsplus: zero-initialize buffer in hfs_bnode_read
  - HID: sensor-hub: Add sensor_hub_input_attr_read_values() for multi-byte reads
  - HID: letsketch: fix UAF on inrange_timer at driver unbind
  - HID: wacom: stop hardware after post-start probe failures
  - tools/mm/slabinfo: fix total_objects attribute name
  - tools/mm/slabinfo: Fix trace disable logic inversion
  - X.509: Fix validation of ASN.1 certificate header
  - clocksource/drivers/timer-tegra186: Fix support for multiple watchdog instances
  - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path
  - cpufreq: pcc: fix use-after-free and double free in _OSC evaluation
  - cpufreq: Fix hotplug-suspend race during reboot
  - cpufreq: intel_pstate: Sync policy->cur during CPU offline
  - firmware_loader: fix device reference leak in firmware_upload_register()
  - OPP: of: Fix potential memory leak in opp_parse_supplies()
  - smb: client: use unaligned reads in parse_posix_ctxt()
  - smb: client: fix query directory replay double-free
  - ksmbd: use opener credentials for delete-on-close
  - ksmbd: enforce FILE_READ_ATTRIBUTES on SMB_FIND_FILE_POSIX_INFORMATION
  - ksmbd: run set info with opener credentials
  - ksmbd: require source read access for duplicate extents
  - ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellation
  - ksmbd: serialize QUERY_DIRECTORY requests per file
  - ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE
  - smb/client: Fix error code in smb2_aead_req_alloc()
  - coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer()
  - fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked()
  - fs/ntfs3: zero-fill folios beyond i_valid in ntfs_read_folio()
  - fs/ntfs3: handle attr_set_size() errors when truncating files
  - fs/ntfs3: fsync files by syncing parent inodes
  - Bluetooth: L2CAP: validate option length before reading conf opt value
  - Bluetooth: fix UAF in bt_accept_dequeue()
  - Bluetooth: btnxpuart: Fix out-of-bounds firmware read in nxp_recv_fw_req_v3()
  - Bluetooth: bnep: pin L2CAP connection during netdev registration
  - Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  - netfilter: ebtables: terminate table name before find_table_lock()
  - netfilter: ebtables: module names must be null-terminated
  - mm: shrinker: fix NULL pointer dereference in debugfs
  - mfd: cros_ec: Delay dev_set_drvdata() until probe success
  - net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes
  - ipv4: igmp: remove multicast group from hash table on device destruction
  - gpio: eic-sprd: use raw_spinlock_t in the irq startup path
  - NTB: epf: Avoid calling pci_irq_vector() from hardirq context
  - fs/ntfs3: validate Dirty Page Table capacity in log_replay copy_lcns
  - debugobjects: Plug race against a concurrent OOM disable
  - Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_complete
  - audit: Fix data races of skb_queue_len() readers on audit_queue
  - net: af_key: initialize alg_key_len for IPComp states
  - crypto: amlogic - avoid double cleanup in meson_crypto_probe()
  - staging: rtl8723bs: fix OOB write in HT_caps_handler()
  - staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop
  - staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl()
  - staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop
  - staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop
  - staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth()
  - staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie()
  - staging: media: atomisp: reduce load_primary_binaries() stack usage
  - media: staging: ipu3-imgu: Add range check for imgu_css_cfg_acc_stripe
  - staging: vme_user: fix location monitor leak in tsi148 bridge
  - staging: vme_user: fix location monitor leak in fake bridge
  - staging: vme_user: bound slave read/write to the kern_buf size
  - tipc: fix out-of-bounds read in broadcast Gap ACK blocks
  - 6lowpan: fix NHC entry use-after-free on error path
  - usb: dwc3: run gadget disconnect from sleepable suspend context
  - USB: chaoskey: Fix slab-use-after-free in chaoskey_release()
  - virtio-mmio: fix device release warning on module unload
  - netfilter: ipset: fix race between dump and ip_set_list resize
  - mm/damon/ops-common: handle extreme intervals in damon_hot_score()
  - PCI: host-common: Request bus reassignment when not probe-only
  - PCI: altera: Do not dispose parent IRQ mapping
  - usb: typec: tcpci_rt1711h: unregister TCPCI port with devres
  - usb: xhci: Fix sleep in atomic context in xhci_free_streams()
  - binder: fix UAF in binder_free_transaction()
  - binder: fix UAF in binder_thread_release()
  - Bluetooth: btusb: fix wakeup source leak on probe failure
  - Bluetooth: btusb: fix use-after-free on marvell probe failure
  - Bluetooth: btusb: fix use-after-free on registration failure
  - Bluetooth: btusb: Add USB ID 2c4e:0128 for Mercusys MA60XNB
  - vfio/pci: Release the VGA arbiter client on register_device() failure
  - ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after successful writes
  - ALSA: usb-audio: Update Babyface Pro control caches only after successful writes
  - ALSA: usb-audio: Roll back quirk control caches on write errors
  - ALSA: usb-audio: Propagate US-16x08 write errors in route/mix EQ-switch put callbacks
  - ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  - ALSA: usb-audio: avoid kobject path lookup in DualSense match
  - ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup()
  - ALSA: ice1712: check snd_ctl_new1() return value
  - ALSA: gus: check snd_ctl_new1() return value
  - ALSA: firewire: isight: bound the sample count to the packet payload
  - ALSA: es1938: check snd_ctl_new1() return value
  - ALSA: cmipci: check snd_ctl_new1() return value
  - ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser
  - ALSA: ymfpci: check snd_ctl_new1() return value
  - ALSA: virtio: Add missing 384 kHz PCM rate mapping
  - iio: temperature: ltc2983: Fix reinit_completion() called after conversion start
  - iio: magnetometer: ak8975: Add missed pm_runtime_put_autosuspend() call
  - iio: light: veml6030: fix channel type when pushing events
  - iio: light: tsl2591: return actual error from probe IRQ failure
  - iio: light: opt3001: fix missing state reset on timeout
  - iio: light: gp2ap002: fix runtime PM leak on read error
  - iio: light: al3010: fix incorrect scale for the highest gain range
  - iio: imu: st_lsm6dsx: deselect shub page before reading whoami
  - iio: imu: inv_icm42600: fix timestamp clock period by using lower value
  - iio: imu: bmi160: add IRQF_NO_THREAD to data-ready trigger IRQ
  - iio: gyro: bmg160: wait full startup time after mode change at probe
  - iio: gyro: bmg160: bail out when bandwidth/filter is not in table
  - iio: chemical: scd30: Cleanup initializations and fix sign-extension bug
  - iio: adc: ti-ads124s08: Return reset GPIO lookup errors
  - iio: adc: spear: Initialize completion before requesting IRQ
  - iio: adc: lpc32xx: Initialize completion before requesting IRQ
  - iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error
  - iio: accel: bmc150: clamp the device-reported FIFO frame count
  - usb: gadget: function: rndis: add length check for header
  - usb: gadget: function: rndis: add length check to response query
  - !25689 backport minios patches from linux mainline
  - !25661 Fix CVE-2026-64544
  - ACPI: CPPC: Fix uninitialized ref variable in cppc_get_perf_caps()
  - ACPI: CPPC: Move reference performance to capabilities
  - crypto: talitos - rename first/last to first_desc/last_desc
  - crypto: talitos - fix SEC1 32k ahash request limitation
  - crypto: talitos - stop using crypto_ahash::init
  - Revert "crypto: talitos - fix SEC1 32k ahash request limitation"
  - Revert "crypto: talitos - rename first/last to first_desc/last_desc"
  - ACPI: NFIT: core: Fix possible NULL pointer dereference
  - ACPI: CPPC: Suppress UBSAN warning caused by field misuse
  - perf trace beauty fcntl: Fix build with older kernel headers
  - Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID
  - xfs: move ->iop_recover to xfs_defer_op_type
  - xfs: use xfs_defer_finish_one to finish recovered work items
  - xfs: dump the recovered xattri log item if corruption happens
  - xfs: recreate work items when recovering intent items
  - net: add a common function to compute features for upper devices
  - bonding: Correctly support GSO ESP offload
  - bonding: add ESP offload features when slaves support
  - bonding: Fix initial {vlan,mpls}_feature set in bond_compute_features
  - net, team, bonding: Add netdev_base_features helper
  - net: team: rename team to team_core for linking
  - nfsd: change nfs4_client_to_reclaim() to allocate data
  - nfsd: move name lookup out of nfsd4_list_rec_dir()
  - apparmor: advertise the tcp fast open fix is applied
  - nfsd: Don't reset the write verifier on a commit EAGAIN
  - NFSv4/flexfiles: reject zero filehandle version count
  - fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font()
  - i2c: core: fix irq domain leak on adapter registration failure
  - block: Avoid mounting the bdev pseudo-filesystem in userspace
  - f2fs: fix listxattr handling of corrupted xattr entries
  - f2fs: fix potential deadlock in gc_merge path of f2fs_balance_fs()
  - f2fs: fix potential deadlock in f2fs_balance_fs()
  - f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  - f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  - f2fs: validate orphan inode entry count
  - device property: initialize the remaining fields of fwnode_handle in fwnode_init()
  - drm/amd: Fix set but not used warnings
  - slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngd
  - slimbus: Convert to platform remove callback returning void
  - slimbus: qcom-ngd-ctrl: Correct PDR and SSR cleanup ownership
  - slimbus: qcom-ngd-ctrl: Fix probe error path ordering
  - userfaultfd: gate must_wait writability check on pte_present()
  - Bluetooth: btusb: mediatek: return error for failed reg access
  - Bluetooth: btusb: mediatek: remove the unnecessary goto tag
  - Bluetooth: btusb: mediatek: add MT7922 subsystem reset
  - Bluetooth: btusb: mediatek: reset the controller before downloading the fw
  - Bluetooth: btmtk: apply the common btmtk_fw_get_filename
  - nfsd: reset write verifier on deferred writeback errors
  - nfsd: release layout stid on setlease failure
  - bpf, arm64: Reject out-of-range B.cond targets
  - ia64: Make acpi_cpufreq_cpu_exit return void
  - drivers/ub/sentry: avoid unaligned cast in cis_ubios_remote_msg_cb()
  - drivers/ub/sentry: add NULL check for g_kbuf_server_cna in proc show handler
  - arm64/hwcap: Define hwcaps for 2023 DPISA features
  - arm64/cpufeature: Hook new identification registers up to cpufeature
  - arm64/sysreg: Update ID_AA64SMFR0_EL1 definition for DDI0601 2023-09
  - arm64/sysreg: Update ID_AA64ISAR2_EL1 defintion for DDI0601 2023-09
  - arm64/sysreg: Update SCTLR_EL1 for DDI0601 2023-09
  - arm64/sysreg: Add definition for FPMR
  - arm64/sysreg: Add definition for ID_AA64FPFR0_EL1
  - arm64/sysreg: Add definition for ID_AA64ISAR3_EL1
  - arm64/sysreg: Add definition for ID_AA64PFR2_EL1
  - !25080  netfilter: ebtables: move to two-stage removal scheme
  - !25685  nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path
  - !25631  crypto: qat - protect service table iterations with service_lock
  - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path
  - Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock
  - drivers/ub/sentry: add count == 0 check in proc write handlers
  - drivers/ub/sentry: add bounds check for reason in oom_rate_limit_check()
  - drivers/ub/sentry: fix NULL pointer dereference in str_to_eid() error path
  - cgroup/cpuset.c: Adapt schduler dynamic affinity for hotplug scenarios with cgroup v2
  - cgroup/cpuset.c: Comment out early when prefer_cpus cpumask equals
  - cpuset: Fix prefer_cpus ineffectiveness by tracking prefer_cpus
  - crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents
  - crypto: qat - protect service table iterations with service_lock
  - sched_ext: Avoid UAF in scx_root_enable_workfn() init failure path
  - netfilter: bridge: eb_tables: close module init race
  - netfilter: ebtables: move to two-stage removal scheme


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-165.0.0.150.20260806.8a97fe374529
changelog:
  - !25764  KVM: SEV: Ignore Port I/O requests of length '0'
  - !25624  firmware_loader: fix device reference leak in firmware_upload_register()
  - !25741  net/mlx5e: xsk: Fix unlocked writing to ICOSQ
  - KVM: SEV: Ignore Port I/O requests of length '0'
  - !25744  Bluetooth: ISO: Fix data-race on iso_pi fields in hci_get_route calls
  - !25734  *** CVE-2026-64513 ***
  - !25563 [OLK-6.6] Fix CVE-2026-64542
  - !25712 Fix CVE-2026-64435
  - !25743  bpf: Copy per-CPU map value padding in copy_map_value_long()
  - !25243 [OLK-6.6] Fix CVE-2026-64265
  - !25120 [OLK-6.6] Fix CVE-2026-53393
  - !25121 [OLK-6.6] Fix CVE-2026-53399
  - Bluetooth: ISO: Fix data-race on iso_pi fields in hci_get_route calls
  - !25735  nbd: skip the capacity-change printk on device bringup and release
  - bpf: Copy per-CPU map value padding in copy_map_value_long()
  - net/mlx5e: xsk: Fix unlocked writing to ICOSQ
  - !25721  ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser
  - !25714  vfio: Remove device debugfs before releasing devres
  - !25647  i2c: i801: fix hardware state machine corruption in error path
  - !25244 [OLK-6.6] Fix CVE-2026-64266
  - !25558 [OLK-6.6] Fix CVE-2026-64537
  - !25387 [OLK-6.6] Fix CVE-2026-64411
  - !25069 [OLK-6.6] Fix CVE-2026-64189
  - !25566 [OLK-6.6] Fix CVE-2026-64545
  - !25569 [OLK-6.6] Fix CVE-2026-64548
  - !25575 [OLK-6.6] Fix CVE-2026-64554
  - !25394 [OLK-6.6] Fix CVE-2026-64422
  - !25573 [OLK-6.6] Fix CVE-2026-64552
  - !25396 [OLK-6.6] Fix CVE-2026-64424
  - !25388 [OLK-6.6] Fix CVE-2026-64412
  - !25470 [OLK-6.6] Fix CVE-2026-64530
  - !25404 [OLK-6.6] Fix CVE-2026-64436
  - !25395 [OLK-6.6] Fix CVE-2026-64423
  - !25559 [OLK-6.6] Fix CVE-2026-64538
  - nbd: skip the capacity-change printk on device bringup and release
  - KVM: x86: Unconditionally recompute CR8 intercept on PPR update
  - KVM: x86: Move update_cr8_intercept() to lapic.c
  - ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser
  - vfio: Remove device debugfs before releasing devres
  - audit: Fix data races of skb_queue_len() readers on audit_queue
  - i2c: i801: fix hardware state machine corruption in error path
  - firmware_loader: fix device reference leak in firmware_upload_register()
  - netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment()
  - virtio-net: fix len check in receive_big()
  - bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data()
  - net, bpf: check master for NULL in xdp_master_redirect()
  - ipv6: ndisc: fix NULL deref in accept_untracked_na()
  - ipv6: Fix null-ptr-deref in fib6_nh_mtu_change().
  - bridge: cfm: reject invalid CCM interval at configuration time
  - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle
  - net: af_key: initialize alg_key_len for IPComp states
  - netpoll: fix a use-after-free on shutdown path
  - ipv4: igmp: remove multicast group from hash table on device destruction
  - net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes
  - netfilter: ebtables: module names must be null-terminated
  - netfilter: ebtables: terminate table name before find_table_lock()
  - fuse: re-lock request before returning from fuse_ref_folio()
  - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req
  - netfilter: ipset: fix race between dump and ip_set_list resize
  - nfsd: release layout stid on setlease failure
  - nfsd: reset write verifier on deferred writeback errors


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-165.0.0.150.20260807.7863d54f9740
changelog:
  - !25766 obmm: fix few potential problems by code scan
  - !25777 [OLK-6.6] ub: ubase&unic: 8 related changes
  - !25784  CVE-2026-64405 fixes
  - !25537 ub: cdma: fix UAF in mmu notifier release/unregister path
  - !24200 【OLK-6.6】drm: add display driver for NEW H3C SEMI EG210 chip
  - !25621 Fix CVE-2026-64540
  - !25620 Fix CVE-2026-64553
  - !24839 ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then SMB2_CANCEL
  - !23915 [OLK-6.6] Fix CVE-2026-46275
  - !23148 [OLK-6.6] Fix CVE-2026-31462
  - !20584 [OLK-6.6] Fix CVE-2025-68736
  - !25778 ethtool: rss: fix indir_table and hkey leak on get_rxfh failure
  - !25141 [OLK-6.6] Fix CVE-2026-63807
  - !25073 [OLK-6.6] Fix CVE-2026-64146
  - !25260 [OLK-6.6] Fix CVE-2026-64284
  - !25262 [OLK-6.6] Fix CVE-2026-64287
  - Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn()
  - Bluetooth: hci_sync: Fix attempting to send HCI_Disconnect to BIS handle
  - Bluetooth: hci_core: Remove check of BDADDR_ANY in hci_conn_hash_lookup_big_state
  - Bluetooth: separate CIS_LINK and BIS_LINK link types
  - ub: cdma: fix ioctl vs remove race by widening ctx_mutex scope
  - ub: cdma: revert cdma_ioctl to pre-security-fix version
  - obmm: bound the local-node iterator and gatekeeper predicate by OBMM_MAX_LOCAL_NUMA_NODES
  - obmm: register /dev/obmm after subsystem init
  - obmm: mirror selected helpers' Kconfig dependencies
  - obmm: log preimport rollback and resource-release failures
  - obmm: accumulate nr_freed across reclaim notifiers
  - obmm: fix use-after-free in conti_free_memory debug print
  - ethtool: rss: fix indir_table and hkey leak on get_rxfh failure
  - !25765  fix amdgpu_hmm_range_get_pages
  - !25774  crypto: qat - remove unused character device and IOCTLs
  - !25723 irqchip/irq-gic-v4: Fix state inconsistency in same_affinity_group
  - !25216 [OLK-6.6] Fix CVE-2026-64036
  - crypto: qat - remove unused character device and IOCTLs
  - irqchip/irq-gic-v4: Fix state inconsistency in same_affinity_group
  - !25742  l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname
  - !25768 sched/soft_domain: Fix NULL deref in unset and move ctx inheritance to online
  - sched/soft_domain: Fix NULL deref in unset and move ctx inheritance to online
  - drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  - drm/amdgpu: fix amdgpu_hmm_range_get_pages
  - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname
  - drm-engiant: fix: correct formatting issues reported by checkpatch
  - usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup()
  - net: psample: fix info leak in PSAMPLE_ATTR_DATA
  - ub: cdma: fix UAF in mmu notifier release/unregister path
  - ub: cdma: fix security vulnerabilities in event/ioctl paths
  - ub: cdma: fix security vulnerabilities in ioctl/mmap/event/mmu paths
  - ub: cdma: add a process to update the adev status in cdma_probe
  - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU
  - KVM: x86: Ensure vendor's exit handler runs before fastpath userspace exits
  - erofs: fix metabuf leak in inode xattr initialization
  - cgroup/rstat: validate cpu before css_rstat_cpu() access
  - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level
  - ub: ubase&unic: fix an issue where logs are printed in
  - ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then SMB2_CANCEL
  - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled
  - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths
  - ub: ubase: Resolve the EQ destruction timeout issue
  - ub: ubase: Resolved the issue that the cmdq resources are
  - net: unic: Error scenarios in the IP management need to
  - net: unic: Abnormal cqe debugfs does not show status 0x0
  - ub: ubase: Add UNIC/CDMA support for DTU init
  - ub: ubase: Resolve working queue may be scheduled after
  - net: unic: JFC Destroy Process Adaptation
  - drm: Add build config to compile H3C SEMI display drivers
  - drm: add H3C SEMI display drivers, including Display Controller and DisplayPort phy driver
  - drm/amdgpu: replace PASID IDR with XArray
  - drm/amdgpu: fix the idr allocation flags
  - drm/amdgpu: prevent immediate PASID reuse case
  - drm/amdgpu: Remove usage of the deprecated ida_simple_xx() API
  - landlock: Fix handling of disconnected directories
  - landlock: Fix cosmetic change
  - landlock: Optimize file path walks and prepare for audit support
  - landlock: Optimize the number of calls to get_access_mask slightly
  - selftests/landlock: Add tests for FS topology changes with network rules
  - landlock: Refactor layer helpers
  - landlock: Refactor landlock_find_rule/insert_rule helpers
  - landlock: Move and rename layer helpers
  - landlock: Allow FS topology changes for domains without such rule type
  - landlock: Make ruleset's access masks more generic


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-165.0.0.150.20260808.48b7ad3037cd
changelog:
  - !25810  x86/bugs: Enable IBPB flush on BPF JIT allocation
  - !24886 arm64: rsi: skip NS IPA alias addresses in arm64_rsi_is_protected
  - x86/bugs: Enable IBPB flush on BPF JIT allocation
  - !25205 [OLK-6.6] Fix CVE-2026-63963
  - !25202 Fix CVE-2026-64424
  - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers
  - netpoll: fix a use-after-free on shutdown path
  - arm64: rsi: skip NS IPA alias addresses in arm64_rsi_is_protected


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-165.0.0.150.20260809.62211c5707a3
changelog:
  - !25111 Fix CVE-2026-63872
  - !25823 Fix CVE-2026-64116
  - ipv6: ioam: add NULL check for idev in ipv6_hop_ioam()
  - ipv6/addrconf: annotate data-races around devconf fields (II)
  - esp: fix page frag reference leak on skb_to_sgvec failure
  - Revert "esp: fix page frag reference leak on skb_to_sgvec failure"
  - esp: fix page frag reference leak on skb_to_sgvec failure


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-165.0.0.150.20260810.0c12d91f028e
changelog:
  - !25828  mm: refactor mm_access() to not return NULL
  - !25834  bpf, cgroup: Fix storage null-ptr-deref after replacing prog
  - bpf, cgroup: Fix storage null-ptr-deref after replacing prog
  - !24789 [OLK-6.6][linux-6.6.y sync] Backport 6.6.78-6.6.79 LTS conflict Patches
  - mm: refactor mm_access() to not return NULL
  - md/raid5: implement pers->bitmap_sector()
  - nvme: move error logging from nvme_end_req() to __nvme_end_req()
  - block: change blk_mq_add_to_batch() third argument type to bool
  - block: cleanup and fix batch completion adding conditions


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-165.0.0.150.20260811.329ccfac7afe
changelog:
  - !25880  net: core: synchronize link-watch when carrier is queried
  - !25883  x86,fs/resctrl: Prevent out-of-bounds access while offlining CPU when SNC enabled
  - !25194 [OLK-6.6] Fix CVE-2026-63950
  - !25710 [OLK-6.6] Fix CVE-2026-64562
  - !25709 [OLK-6.6] Fix CVE-2026-64561
  - x86,fs/resctrl: Prevent out-of-bounds access while offlining CPU when SNC enabled
  - !25795  Backport CVE-2026-64361 fixes from 6.6 LTS
  - net: sysfs: fix locking in carrier read
  - net: core: synchronize link-watch when carrier is queried
  - !25850 sched: Add the qos scheduler's cgroup v2 interface
  - !25852  Fix ringbuffer swap cpu buffer issue
  - !25785  CVE-2026-53120
  - sched: Add the qos scheduler's cgroup v2 interface
  - ring-buffer: Use current_context for safe per-CPU buffer swap
  - ring-buffer: Remove jump to out label in ring_buffer_swap_cpu()
  - hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length
  - hfs/hfsplus: prevent getting negative values of offset/length
  - PCI: Initialize temporary device in new_id_store()
  - PCI: fix kabi breakage due to driver_override removal
  - PCI: use generic driver_override infrastructure
  - KVM: nVMX: Hide shadow VMCS right after VMCLEAR
  - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available
  - mm/rmap: initialize nr_pages to 1 at loop start in try_to_unmap_one


author: ChenYanpan <chenyanpan@xfusion.com> - 23.08.4-2
changelog:
  - use 
    /usr/bin/cmake --build "aarch64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/kf5-ksmtp-23.08.4-2.oe2403next.aarch64" /usr/bin/cmake --install "aarch64-openEuler-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 23.08.4-2
changelog:
  - use 
    /usr/bin/cmake --build "aarch64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/kf5-libgravatar-23.08.4-2.oe2403next.aarch64" /usr/bin/cmake --install "aarch64-openEuler-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 23.08.4-2
changelog:
  - use 
    /usr/bin/cmake --build "aarch64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/kf5-libkleo-23.08.4-2.oe2403next.aarch64" /usr/bin/cmake --install "aarch64-openEuler-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 23.08.4-2
changelog:
  - use 
    /usr/bin/cmake --build "aarch64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/kf5-messagelib-23.08.4-3.oe2403next.aarch64" /usr/bin/cmake --install "aarch64-openEuler-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 5.113.0-2
changelog:
  - use 
    /usr/bin/cmake --build "aarch64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/kf5-modemmanager-qt-5.113.0-2.oe2403next.aarch64" /usr/bin/cmake --install "aarch64-openEuler-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 5.113.0-2
changelog:
  - use 
    /usr/bin/cmake --build "aarch64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/kf5-plasma-5.113.0-2.oe2403next.aarch64" /usr/bin/cmake --install "aarch64-openEuler-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 5.113.0-2
changelog:
  - use 
    /usr/bin/cmake --build "aarch64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/kf5-prison-5.113.0-2.oe2403next.aarch64" /usr/bin/cmake --install "aarch64-openEuler-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 5.113.0-2
changelog:
  - use 
    /usr/bin/cmake --build "aarch64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/kf5-purpose-5.113.0-2.oe2403next.aarch64" /usr/bin/cmake --install "aarch64-openEuler-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 5.113.0-2
changelog:
  - use 
    /usr/bin/cmake --build "aarch64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/kf5-sonnet-5.113.0-2.oe2403next.aarch64" /usr/bin/cmake --install "aarch64-openEuler-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 5.113.0-2
changelog:
  - use 
    /usr/bin/cmake --build "aarch64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    /usr/bin/cmake --build "aarch64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose


author: ChenYanpan <chenyanpan@xfusion.com> - 5.113.0-2
changelog:
  - use 
    /usr/bin/cmake --build "aarch64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/kf5-syntax-highlighting-5.113.0-2.oe2403next.aarch64" /usr/bin/cmake --install "aarch64-openEuler-linux-gnu" to fix build failure


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.6.0-8
changelog:
  - KYOS-B: Fix window thumbnails not being fetched by window manager takeover(#56152)
  - KYOS-B: fix some memory leak(#54376)
  - KYOS-B: Fix some related issues in recent documents(#55119)
  - KYOS-F: adding apps to the desktop, copy them to a temporary file and change the permissions.(#37790)
  - KYOS-F: Added configuration items: Fixed application to the taskbar(#37152)
  - KYOS-B: change 'Recently files' to 'Recent files'(#38303)
  - kYOS-B: fix interference caused by tooltip and popup type windows
  - KYOS-F: taskbar add "simply window previewer" mode(only show window title)(#45321) 
  - KYOS-B: Fixed an issue where taskbar page-turning ICONS cover each other(#19588)
  - KYOS-B: Fixed the taskbar page-turning ICONS hiding each other when zoom rate was 200
  - KYOS-F: The plugin button loads the icon from the system theme
  - KYOS-B: Fixed xnest connection crash
  - KYOS-B: Fixed an issue where the taskbar does not drag smoothly
  - KYOS-B: Fixed start Menu without icon application drag and drop causes the bottom panel to crash(#34719)
  - KYOS-B: Fixed the issue where the taskbar close window used the wrong timestamp.(#26368)
  - KYOS-B: Fix win key popup Start menu does not get focus, can not directly keyboard operation (#21246)
  - KYOS-B: :when resize icon window, it is necessary to consider the impact of the scale factor.The correct resize height is the height of the container multiplied by the scale factor of the container (#30889)


author: gaobo <gaobo@kylinsec.com.cn> - 2.6.0-10
changelog:
  - Fix non-existent make_managed definitions in low versions of gtkmm (f:155085)
  - add CI (f:155085)
  - fix crash caused by double free(b:90168)
  - update test/test-all-apps.cpp (f:155085)
  - hidden menu to display the power dialog(f:29589)
  - Hide start menu before showing warning dialog (b:107763)
  - fix a memory leak problem. (b:121165)
  - fix crash caused by GSettings idle callback after KiranTray destruction. (b:139019)
  - fix some memory leaks. (b:139488)
  - add debounce when system app monitor changed and update window pixmap frequently (b:139488)
  - fix memory leaks of kiran x11 tray icon. (b:139488)
  - fix memory leak of sn icon menu and tray (b:120470)
  - fix memory leak of RecentFileItem context menu (b:120470)


author: luoqing <luoqing@kylinsec.com.cn> - 2.5.2-3
changelog:
  - KYOS-B: Fixed a crash caused by repeatedly calling disConnectDev in resetUkey and destructor to release the same device handle
  - KYOS-R: Modify the code according to the https://gitee.com/openeuler/kiran-authentication-devices/pulls/17 review opinions
  - KYOS-B: when the iris face integrated device is removed, the memory cannot be released and the process is blocked.When the face iris device object is removed, restart the service to release resources (#25243)
  - KYOS-B: When the driver is enabled, the device is scanned and the corresponding device object is created.When the driver is disabled,the corresponding device object is released. (#25387)
  - KYOS-B: fix file install path error


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.5.2-5
changelog:
  - KYOS-B: delete blank cmake_target_link_directories
  - KYOS-B: remove rpath (#37243)
  - KYOS-F: suitable for zhi ang fingerprint device (#24532)


author: longcheng <longcheng@kylinos.com.cn> - 0.0.2-2.kb3
changelog:
  - KYOS-B: remove BuildRequires: fingerprint-sdk-devel in openeuler 
  - KYOS-F：Add the enable zlog ex macro for zlog.
  - KYOS-B: Add BuildRequires: gcc-c++ in openeuler


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.6.1-24
changelog:
  - KYOS-F: Decrease the priority of override file configurations(#52881)
  - KYOS-F: Marking the configuration as not to be replaced
  - KYOS-B: Enrichment of error messages in pw_history module when changing passwords(#52096)
  - KYOS-B: Fix crash caused by the previous commit due to the existence of a schema but the absence of a color-schema (#35120)
  - KYOS-B: Fix the issue where switching between light and dark themes does not work in Gnome 41 and later versions.(#35120)
  - KYSO-B: Fix the ntp service load order logic error
  - KYSO-B: Fix std::regex can not run in gcc version < 4.9(#48386)
  - KYSO-F: Use glibmm's regex to replace glib's regex
  - KYSO-B: Fix failure to get disk information in virtual machine(#46645)
  - KYOS-B: Fixed the issue where Unglab was not executed in a timely manner, causing subsequent Xclient connections to XServer to fail
  - KYOS-B: fix the graphical and network hardware info no display problem.(#37289)
  - KYOS-B: Remove the duplicate graphical and network hardware info.
  - KYOS-B: The shutdown shortcut cannot be found.(#44337)
  - KYOS-F: add shutdown keybinding
  - KYOS-B: perform adaptive settings when connection status or monitor uid is changed.(#37289)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.6.1-25
changelog:
  - KYOS-B: fix the passwd command compatible problem for KY3.3-9-Server(#46550)
  - KYOS-F: Add icon and cursor theme changing when enable auto switch theme.(#73665)
  - KYOS-F: Modify gtk and icon theme to light theme defaultly.


author: gaobo <gaobo@kylinsec.com.cn> - 2.6.1-27
changelog:
  - Update the patch0035's description (f:155085)
  - modify the ntp service selected rule.(b:77953)
  - Fix the signal parameter parsing of added/deleted Upower devices.(b:81563)
  - Disable capslock and numlock by default(b:155085)
  - Fix cpu model name with BIOS while it is empty(b:91787)
  - Fix translation typo (b:90671)
  - Fix issue caused by delayed synchronization when disabling repeat keys (b:90671)
  - Fix build issues caused by recent commits (f:155085)
  - Fix incorrect remaining time in discharge notification after unplugging at full charge(b:108231)
  - Export symbols of exec application(b:109925)
  - Auto theme switching not disabled after manual theme switch.(b:115404)
  - add "--" before user name in spawn calls to prevent option injection. (b:121814)
  - avoid treating VMware VMMouse as touchpad. (b:34878)
  - resolve multiple resource and memory leaks. (b:123369)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.6.4-2
changelog:
  - KYOS-B: Fix crash when ipv6 address can't be retrieved(#75993)
  - KYOS-F: Supports dimming the monitor during idle time(#76040)
  - KYOS-F: Supports Meta and Window theme settings(#73665)
  - KYOS-F: Support for sound testing(#73668)
  - KYOS-B: compatible with different versions of open-source cursor to prevent program crashes(#IBV1XG)
  - KYOS-F: Split Screensaver and locking concepts, add support for embedded xscreensaver(#73664)
  - KYOS-F:Fix the problem of web details supporting large layouts.(#72894)
  - KYOS-F:improve code in group plugin.(#73623)
  - KYOS-F: Fix the problem of getting the return value of a device via NetworkManager DBus interface under stress test(#70121)
  - KYOS-B: Fix password input limit of 20（#57392）
  - KYOS-B: power management front-end server version determination to runtime configuration(#52885)
  - KYOS-B: Fixes an issue with determining connection and NIC Mac configuration matches when a connection configuration change is active(#51089)
  - KYOS-B: Fix the message that the tray service is not registered when the tray is registered.(#50967)
  - KYOS-B: shared Networks Add Configuration Invisible (#51089)
  - KYOS-B: shared Networks Add Configuration Invisible(#51089)
  - KYOS-B: Fix the message that the tray service is not registered when the tray is registered.(#50967)
  - KYOS-F: hide privacy_policy(#35818)
  - KYOS-F: adjusting the default configuration of the PG version to the server configuration(#51253)
  - KYOS-B: Fix Control Center NIC duplication when restarting NetworkManager(#50967)
  - KYOS-B: Add DISPLAY as one of the conditions for determining a user process singleton.(#48260)
  - KYOS-B: remove NetworkManager-l2tp Requires
  - KYOS-F: network details page supports multiple IP masks(#46740)
  - KYOS-B: Fix DBusServiceWatcher lifecycle not bound to slot object(#46755)
  - KYOS-B: Fix that the maximum height of KiranCollapse will not be adjusted under the list of available connections in the network plugin(#47197)
  - KYOS-F: network plugin support wired carrier check(#36646)
  - KYOS-F: netowrk plugin support single configuration multiple IP addresses(#46740)
  - KYOS-B:  add Obsoletes kiran-timedate-manager  
  - KYOS-F: fix build in 339
  - KYOS-B: Adapt to Qt5.9.7 NativeScanCode to QtKey
  - KYOS-F: new network card Carrier status check as tray connection condition judgment(#36646)
  - KYOS-F: Reserved idle lock screen related configurations for server versions(#31787)
  - KYOS-B: fix gateway display not configured tray icon show disconnection(#36646)
  - KYOS-B: Fix the issue where the initial letters of certain categories are not capitalized.(#36266)


author: gaobo <gaobo@kylinsec.com.cn> - 2.6.4-4
changelog:
  - Network connectivity checking is not enabled by default(f:77265)
  - Fix monitor dimming translation when idle(f:76040)
  - Fix incorrect icon color for more options (f:155085)
  - hide the option to dim when general settings are idle(f:76040)
  - Screen saver setting screen is not enabled by default (f:155085)
  - add message dialog while input only modifies or input super key for keybinding.(f:79211)
  - handle Super_R same with Super_L.(f:79211)
  - improve translation of "Window Themes Setting".(f:84434)
  - Repair strftime results in LANG=zh_CN environment in the graphical interface display messy code(f:86656)
  - Fix build error on 336 system(f:88924)
  - Fix crash caused by failure to obtain primary or active connection when network device state changes(f:90564)
  - fix the default position of the Hostname dialog and slightly adjust the content layout. (b:90839)
  - Fix translation issues in authentication configuration interface. (b:90773)
  - Fix Incorrect Anchor Information Update When Virtual Screen Resolution Changes Leading to Position Abnormalities. (b:92973)
  - network unavailable prompt still exists after restarting NetworkManager service on system startup(f:94129)
  - Update window positions when a single display's resolution changes to prevent gaps between screens. (b:103625)
  - Fix the issue where the prompt content is not fully displayed when changing from a low resolution to a higher one. (b:108453)
  - compatible with kylinsec and kylin release dir,and show agreement only if file exists.(b:107748)
  - fix can't load logging category in audio and power. (b:118262)
  - hide license version. (b:126107)
  - Add zh_CN translations for devel and launcher packages (f:155085)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.6.0-22
changelog:
  - KYOS-F: Setting the default white theme for the desktop version
  - KYOS-F: Override configuration, split screen saver as well as lock screen(#73664)
  - KYOS-B: adjusting gvfs dependency judgments for v6 releases
  - KYOS-B: Increase Server Version Disable DPMS Configuration Priority(#53822)
  - Change configuration only at installation time
  - Fix the issue that executing the post script twice causes the touchpad backend plugin to be disabled
  - Specify configuration file %config(noreplace)
  - KYOS-B: Fix post stage change unlock box power configuration error report
  - KYOS-F: Adjust the default configuration of window screenshot shortcuts to kiran-flameshot
  - KYOS-B: Decrease override file priority(#52881)
  - KYOS-F: adjusting the default configuration of the PG version to the server configuration(#51253)
  - KYOS-F: server versions enable locking on idle by default
  - KYOS-B: fix install error in KY3.3-9
  - KYOS-F: Reserved idle lock screen related configurations for server versions(#31787)
  - KYOS-F: remove kiran-authentication-devices-sdk dependency (#35156)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.6.0.23
changelog:
  - KYOS-F: Add 51_kiran-desktop.gschema.override to distinguish desktop and server.
  - KYOS-B: Add package dependencies xscreensaver for V6(#73664)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.6.0-24
changelog:
  - KYOS-B: Enable split screen saver and lock screen only for V6 version
  - KYOS-B: remove dep initial-setup-gui


author: yuanxing <yuanxing@kylinsec.com.cn> - 2.6.0-2
changelog:
  - KYOS-B: add icon of gnome software with correct icon name in Kiran.(#28021)
  - KYOS-B: update icons to smaller size to fix the slowly problem when open caja.(#33978)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.4.0-7
changelog:
  - fix zlog use program log rotation lock rules to avoid log file is locked by other process(b: 113752)


author: yuanxing <yuanxing@kylinsec.com.cn> - 2.6.1-1.kb2
changelog:
  - KYOS-F: Fix error caused by missing overload implementation on lower version C++standard library.
  - KYOS-F: Adapt to lower version STDC++.
  - KYOS-F: Fix the sonarqube bugs.(#76290)


author: gaobo <gaobo@kylinsec.com.cn> - 1.22.4-8
changelog:
  - fix memory leak from upstream and valgrind. (b:126226)
  - add show desktop function in panel context menu.(f:94564)
  - remove locker of panel-profile(f:72513)
  - Lock when initializing gsettings(f:72141)
  - fix some memory leaks(f:48935)
  - fix run-dialog issue(f:24810)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.5.2-4
changelog:
  - KYOS-F: Fix destructor crash when VirtualKeyboard is not initialized.(#71359)
  - KYOS-F: greeter and unlock dialog support fullname(#40540)
  - KYOS-F: Add detection for whether to install a virtual keyboard
  - KYOS-F: Hide triple-authorized users by default(#53743)
  - KYOS-B: processing screen from scratch, configuration screen(#51999)
  - Fix the power menu showing on the top left when disabling all power options
  - KYOS-B: Fix the crash caused by receiving two signals from Polkit completion(#49904)
  - KYOS-B: When disabling all power settings, the power button should not be displayed(#49764)
  - KYOS-B: Add DISPLAY as one of the conditions for determining a user process singleton.(#48260)
  - KYOS-F: Support default preferred login user configurable(#47534)
  - KYOS-B: fix crash in xserver without randr (#41284)
  - KYOS-B: Fix the issue of lowercase first letters in sub-feature items(#36266)


author: gaobo <gaobo@kylinsec.com.cn> - 2.5.2-6
changelog:
  - Fix the problem that the login screen cannot be popped up by clicking the menu on the right screen (f:155085)
  - Setting focus when switching control buttons or input boxes on the authentication screen (f:155085)
  - Adjusting zlog category name, output to standard error, will redirect to lightdm/seat-greeter.log (f:155085)
  - Fix the problem of input box losing focus when the screensaver is switched (f:155085)
  - greeter disable dpms(f:80240)
  - Repair the garbled display of PAM prompts in the lock screen interface under LANG=zh_CN env(f:86656)
  - Fix incorrect icon paths in resource files(f:90917,f:90840)
  - Fix HoverTips display occlusion issue(f:94259)
  - Fix memory leak and double free issue in screensaver authentication program (f:101394)
  - add virtual face auth (f:86337)
  - modify KAD_AUTH_TYPE_VIRTUAL_FACE value (f:155085)
  - add auth code function (f:105803)
  - change the minimum version of CMake to a range. (b:105353)
  - fix the issue of incorrect authentication method translation. (b:120281)
  - Fix memory leaks in auth dialog and animation. (b:121166)
  - Migrate server power config to kiran-session-guard(b:126789)
  - hidden netadm user (f:79593)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.4.0-20
changelog:
  - KYOS-B: replace ParentStyle with QProxyStyle and adapt to QT5.9.7 version
  - KYOS-B: theme support custom library name
  - KYOS-B: Adapting to lower version Qt, autorcc not correctly associating dependencies
  - KYOS-B: Fix theme error when session dbus service is not registered(#35760)
  - kYOS-B: fix build in Qt5.9.2(#45382)
  - KYOS-B: adjust the height of the QCompleter Popup pop-up(#42329)
  - KYOS-B: fix the failure of dynamic theme switching in low version of Qt.(#51353)


author: gaobo <gaobo@kylinsec.com.cn> - 2.4.0-22
changelog:
  - fix event leak and harden svg load fallback. (b:131613)
  - add support of custom plugins dir (f:85372)
  - change requires, pkgconfig(pkg-config) (f:155085)
  - adjusting spec file parameters (f:155085)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.2.3-12
changelog:
  - KYOS-B: Fix the problem of closing the screensaver window in idle shutdown/logout process after locking the screen


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.2.4-1
changelog:
  - KYOS-B: fix sonarqube scanning problem.
  - KYOS-B: Fix conflict with Display dims when idle
  - KYOS-F: Support XEmbed Screensaver theme(#78377,#73664)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.2.4-2
changelog:
  - rebuild for KiranUI-2.6-next
  - KYOS-B: Fix AutoRestart not working due to disabling session management


author: gaobo <gaobo@kylinsec.com.cn> - 2.2.4-4
changelog:
  - Embedded XScreensaver screensaver without the cursor to enhance the viewing experience (f:155085)
  - improve gamma setting reliability with error handling(b:91531)
  - Improve compatibility by reading lock background directly via GSettings (f:118607)
  - update CMake structure and add basic unit test functionality (f:113505)
  - fix sonarqube scanning problem (b:118607)
  - simplify visibility monitor restack handling.(b:115411)
  - fix animation parent for screensaver and remove redundant xcb_connect call. (b:121166)
  - fix gamma buffer release and translator lifecycle(b:131613)
  - run tests with explicit QApplication(b:131613)
  - improve generateCookie compatibility and robustness(b:123369)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.5.0-14
changelog:
  - KYOS-B: Session management pulled up child process forwards standard errors to the master process(#50844)
  - KYOS-B: Repair the situation that Key cannot be matched when receiving QGSettings changed signals(#51570)
  - KYOS-F: Add kiran-session-quit to support shutdown shortcut (#44337)
  - KYOS-B: fix build error
  - KYOS-B: extend the dbus call timeout to 10s to fix the restart failure caused by the CanReboot call timeout
  - KYOS-B: fix the problem that inhibitor window is show when the number of inhibitor is zero.(#24564)
  - KYOS-B: repair defects about theme not right when into livecd mode (#8146)
  - KYOS-B: change QCoreApplication to QGui/QApplication to fix the issue of SM not auto exit when XDMCP connection is disconnected.(#31631,#31796)


author: gaobo <gaobo@kylinsec.com.cn> - 2.5.0-16
changelog:
  - add translation for main.cpp (f:155085)
  - Fix memory growth caused by caching standard output into memory when QProcess pulls up a child process(f:83175)
  - Fix session exit confirmation dialog JSON response parsing failure caused by unexpected stdout output(f:96728)
  - Remove Qt graphics dependency for service connection management(f:97507,f:31631,f:31796)
  - fix session manager end session phase1 failed issue during logout. (b:119781)
  - fix some memory leak problem. (b:121165)
  - add multi-screen support for session exit window. (b:121359)
  - Enhance display server monitoring and session management. (f:117344)
  - fall back for QGuiApplication::screenAt on Qt before 5.10(b:121359)
  - fix the memory leak for IceConn and coredump when call SmsCleanUp because of iceConn is already closed. (b:116395)
  - check startup id before adding XSMP client, avoid session manager coredump. (b:121806)
  - cleanup ConnectionWatch and fix client object/property memory leaks. (b:154642)
  - fix Use-After-Free when IceProcessMessages returns non-Success after client disconnects(b:154642)


author: gaobo <gaobo@kylinsec.com.cn> - 2.4.2-8
changelog:
  - use QRectF to adjusted floating value (f:76290)
  - Fix HoverTips display occlusion issue (f:94259)
  - window menu right-click trigger position detection. (b:103627)
  - When changing from a low resolution to a higher one, the prompt content displays line breaks. (b:108453)
  - Fix memory leak of d-pointer in KiranPasswdEdit. (b:121166)
  - Add Qt version compatibility for obtaining the screen where the widget is located. (f:131613)
  - Change the minimum version of CMake to a supported range. (b:105353)


author: ChenYanpan <chenyanpan@xfusion.com> - 1.5.2-2
changelog:
  - use 
    /usr/bin/cmake --build "aarch64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/ktextaddons-1.5.2-2.oe2403next.aarch64" /usr/bin/cmake --install "aarch64-openEuler-linux-gnu" to fix build failure


author: shenzhongwei <shenzhongwei@kylinos.cn> - 1.29.1-10
changelog:
  - TypeLbugfix
  - CVE:NA
  - SUG:NA
  - DECS:remove the architecture judgment in the patches section;
         include all patches in the source package.


author: jade_t <yzd50036@gmail.com> - 1.29.1-17
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix the installation conflict between kubernetes-kubelet and kubernetes-node


author: lvfei <lvfei@kylinos.cn> - 1.0.34-4
changelog:
  - Type:bugfix
  - CVE:
  - SUG:NA
  - DESC: add patch:0001-update-desktop-file-and-add-sdk-translate.patch


author: lvfei <lvfei@kylinos.cn> - 1.0.4-6
changelog:
  - add patch:0001-kylin-user-guide-add-bo-desktop-translate.patch
  - kylin user guide add desktop zangwen support


author: dongqi <dongqi1@kylinos.cn> - 1.5.0-1
changelog:
  - Update package version to 1.5.0
  - Make it possible to fetch the pid of a client in socket mode
  - Avoid trailing full stops in regex search for protocol names
  - use already computed strlen
  - print missing event types in the demo client


author: weijin deng <weijin.deng@turbolinux.com.cn> - 0.18.1-1
changelog:
  - Upgrade to 0.18.1
  - Update Version, Release, Source0, stage 'files'
  - Stage 'build' use meson build


author: Funda Wang <fundawang@yeah.net> - 1.10.0-3
changelog:
  - Fix CVE-2026-48829: NULL pointer dereference in DIGEST-MD5 parser
  - Fix CVE-2026-56968: memory disclosure via short NTLM challenge


author: Yafen Fang<yafen@iscas.ac.cn> - 20230318-1
changelog:
  - update upstream to last commit (54fd97ae4066a10b6b02089bc769ceed328737e0): mmal: Add mapping for IL OMX_IndexParamBrcmEnableIJGTableScaling param


author: Yafen Fang<yafen@iscas.ac.cn> - 20240422-1
changelog:
  - update upstream to last commit (96a7334ae9d5fc9db7ac92e59852377df63f1848): README: Update to make it clear that most code in this repo is deprecated


author: peijiankang <peijiankang@kylinos.cn> - 3.1.2-31
changelog:
  - Type:bugfix
  - ID  :NA
  - SUG :NA
  - DESC:add ukui-control-center-3.1.2-repair-freelogin-autologin-not-available.patch


author: huayadong <huayadong@kylinos.cn> - 3.1.2-33
changelog:
  - Type:bugfix
  - ID  :NA
  - SUG :NA
  - DESC:Patch203:fix-the-display-resolution-does-not-match-the-actual-resolution.patch


author: yuanxing <yuanxing@kylinsec.com.cn> - 1.28.0-1
changelog:
  - Initial build
  - KYOS-F: change workspace titlebar and font and composite
  - KYOS-B: fix disabled Alt+F1 to popop mate menu
  - KYOS-F: feature [menu] : pop up start menu when press super key


author: longcheng <longcheng@kylinos.com.cn> - 1.24.0-2
changelog:
  - KYOS-F: draw mask for whole screen except the selection area
  - KYOS-F: add X-System-Server category for mate-system-log
  - KYOS-F: add X-KIRAN-NoDisplay=true in mate-system-log.desktop.in.in
  - KYOS-T: change chinese translation.(#28543)
  - KYOS-F: fix mate system log is not displayed in the control panel (#48482)


author: yuanxing <yuanxing@kylinsec.com.cn> - 1.28.0-1
changelog:
  - Initial build
  - Properly update the set of monitors when it changes
  - KYOS-F: add kiran theme
  - KYOS-F: set default position to right-bottom


author: yuanxing <yuanxing@kylinsec.com.cn> - 1.28.1-1
changelog:
  - Initial build
  - KYOS-F: modify desktop and modify mate system monitor
  - KYOS-B: fix resource abnormal caused by excessive CPUs and solve crash when switch CPU display color in CPU > 31
  - KYOS-B: fix get pcpu with double to solve the cpu% don't changed
  - KYOS-B: fix could not get name information of Loongson processor
  - KYOS-B: fix cpuinfo mate-system-monitor hardware-cpuinfo display


author: yuanxing <yuanxing@kylinsec.com.cn> - 1.28.1-1
changelog:
  - initial build
  - KYOS-B: add kylin mask and part of translations
  - KYOS-B: set text preview content
  - KYOS-B: add a action in mate-terminal.desktop.in.in
  - KYOS-B: change default color and system color to Dracula Dark(#30872)
  - KYOS-B: select the default charset by locale


author: yaoxin <yao_xin001@hoperun.com> - 2.0.20-1
changelog:
  - Update to 2.0.20
    * Fix QoS 1 / QoS 2 publish incorrectly returning "no subscribers". Closes #3128.
    * Open files with appropriate access on Windows. Closes #3119.
    * Don't allow invalid response topic values.
    * Fix some strict protocol compliance issues. Closes #3052.
    * Fix cmake build on OS X. Closes #3125.
    * Fix build on NetBSD
    * Fix mismatched subscribe/unsubscribe with normal/shared topics.
    * Fix crash on bridge using remapped topic being sent a crafted packet.
    * Don't allow SUBACK with missing reason codes in client library.
    * Fix crash on subscribe under certain unlikely conditions. Closes #2885. Closes #2881.
    * Fix mosquitto_rr not honouring -R. Closes #2893.
    * Fix max_queued_messages 0 stopping clients from receiving messages. Closes #2879.
    * Fix max_inflight_messages not being set correctly. Closes #2876.
    * Fix mosquitto_passwd -U backup file creation. Closes #2873.


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 0.35.1-1
changelog:
  - Update to 0.35.1
  - Enabled VA-API support
  - Enabled Wayland backend & native PipeWire output support


author: liweiganga <liweiganga@uniontech.com> - 1.2.0-1
changelog:
  - upstream release 1.2.0
  - fix: fix CVE-2016-10141、CVE-2016-7504、CVE-2016-9136、CVE-2017-5628、CVE-2016-9017、\
         CVE-2016-7506、CVE-2017-5627、CVE-2016-9108、CVE-2016-9294


author: zhangxingrong <zhangxingrong@uniontech.cn> - 44.6-4
changelog:
  - delete: Don't wrongly set window as not alive when pings are disabled
  - window: Add IS_ALIVE to get_property
  - core/window: Propagate focus appearance to all ancestors
  - clutter/actor: Don't write uninitialized out values on failed transform
  - clutter/pick-stack: Add an allocation check to calculate_clear_area ()


author: zhangbowei <zhangbowei@kylinos.cn> - 0.3.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: implement a pure Go solution to eliminate iproute dependencies


author: will_niutao <niutao2@huawei.com> - 1.5.1-1
changelog:
  - Change upstream to https://github.com/orocos/orocos_kinematics_dynamics, and rename the package to orocos-kdl


author: jiangxinyu <jiangxinyu@kylinos.cn> - 4.4.4.1-2
changelog:
  - Change requires from postgresql-13-contrib and postgresql-13-server to postgresql-contrib and postgresql-server


author: liweigang <liweiganga@gmail.com> - 4.2.12-2
changelog:
  - Fix launcher: use JAVACMD instead of hardcoded JAVA_HOME
  - Pass "$@" through to pdfsam.sh
  - Correct License to AGPLv3
  - Ship static desktop file, drop gendesk
  - Add %check with desktop-file-validate


author: tangjie02 <tangjie02@kylinsec.com.cn> - 5.27.11-2
changelog:
  - adapt to the new CMake macros to fix build failure
  - disable snap plugin because of snapd-glib required qt6, but plasma-discover required qt5


author: yuanxing <yuanxing@kylinsec.com.cn> - 1.28.0-1
changelog:
  - Initial build
  - KYOS-F: add chinese translation
  - KYOS-B: Fixed garbled toolTips path in tab page with GB18030 encoding(#7248)


author: jiangxinyu <jiangxinyu@kylinos.cn> - 2.53.3-1
changelog:
  - Update package to version 2.53.3
    * Fix metric name include histogram error
    * TSDB: Let queries with heavy regex matches be cancelled and not use up the CPU
    * Scraping: allow multiple samples on same series, with explicit timestamps


author: jiangxinyu <jiangxinyu@kylinos.cn> - 0.15.0-2
changelog:
  - Type: CVE
  - CVE: CVE-2023-39326 CVE-2024-24789 CVE-2024-24791
  - SUG: NA
  - DESC: Rebuild to fix CVE-2023-39326 CVE-2024-24789 CVE-2024-24791


author: gongzhengtang<gong_zhengtang@163.com> - 1.3.2-1
changelog:
  - update to v1.3.2
  - Prevent ever-growing session size for OAuth clients.
  - Revert quote client id and secret.
  - unquote basic auth header for authorization server.
  - fix a bug in module 'importlib' has no attribute 'metadata'


author: yaoxin <yao_xin001@hoperun.com> - 5.0.0-1
changelog:
  - Update to 5.0.0:
    * Breaking: Change default to disable private network access
      This effectively resolves GHSA-hxwh-jpp2-84pm https://osv.dev/vulnerability/PYSEC-2024-71


author: guochao <guochao@kylinos.cn> - 24.1.0-1
changelog:
  - Update package to version 24.1.0
  - Import os.link conditionally to fix importing on android
  - Add aiofiles.os.path.abspath and aiofiles.os.getcwd.


author: GuoCe <guoce@kylinso.cn> - 3.8.1-1
changelog:
  - Update package to version 3.8.1
  - Corrects WSGI adapter handling of root path.
  - Handles case where `"client"` is ``None`` in WsgiToAsgi adapter.


author: jiangxinyu <jiangxinyu@kylinos.cn> - 4.2.1-1
changelog:
  - Update package to version 4.2.1
  - Adapt for logging lock internal changes in Python3.13
    Remove SIGUSR2 from TERMSIGS_DEAULT


author: chenyanpanHW <chenyanpan@huawei.com> - 0.30.1-2
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0001-fix-build-erro.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0002-delete-import-m2r.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


author: songliyang <songliyang@kylinos.cn> - 5.3.4-1
changelog:
  - update to 5.3.4
  - Use string value for CELERY_SKIP_CHECKS envvar
  - Document need for CELERY_ prefix on CLI env vars
  - Fixed AttributeError: 'str' object has no attribute


author: lilu <lilu@kylinos.cn> - 0.3.1-1
changelog:
  - Update package to version 0.3.1
  - Update pyproject.toml, remove upper bound from Python version specifier and so on


author: Hann <hannannan@kylinos.cn> - 30.8.0-1
changelog:
  - Update package to version 30.8.0
  - Update city names for uk_UA
  - Fix issue where Faker does not properly convert min/max float values to Decimal


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 33.0.0-1
changelog:
  - Update package with version 33.0.0
    Revert "Make pytest fixture session-scoped".
    Add jobs for locale de_AT; added methods job_female and job_male
    Added Providers for uz_UZ language


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 37.3.0-1
changelog:
  - Update package with version 37.3.0
    Fix remove duplicate cities in de_DE address provider
    Add support for unique complex value types Fixes
    Add hash functions overloads with no params
    Overload hash generation functions to make return types more specific
    Add stub support for overloaded methods
    Add phone numbers for de_CH and it_CH
    Fix date_time provider with end_datetime in the past
    Add support for Zulu (zu_ZA) address provider and corresponding tests
    Declare support for Python 3.13


author: sqfu <dev01203@linx-info.com> - 0.7.0-1
changelog:
  - update to 0.7.0
  - adding GH dependabot
  - Bump the pip group with 2 updates
  - Update hypothesis requirement from <6.62.0 to <6.100.0 in /.github/scripts


author: xu_ping <707078654@qq.com> - 1.14.0-1
changelog:
  - Update to 1.14.0
  - Add support for pyhon3.11 and python3.12
  - Added a new valid PGP key to sign the package
  - python3.7 is not supported and Remove support for python3.6


author: jiangxinyu <jiangxinyu@kylinos.cn> - 5.3.5-1
changelog:
  - Update package to version 5.3.5
    Fix crash when using global_keyprefix with a sentinel connection


author: zhaoshuang <zhaoshuang@uniontech.com> - 2.5.0-1
changelog:
  - Update package to version 2.5.0
    Add support for custom extras
    Drop Python 3.5\3.6\3.7 support
    Add prepend arg to toc extra
    Process HTML comments as markdown in 'escape' safe mode
    Fix syntax warnings in test suite
    Process inline tags as HTML blocks when they span multiple lines
    Add new LaTeX Extra
    Fix html, head and body tags being wrapped in <p> tags
    Graceful handling of broken lists when cuddled-lists extra is enabled
    Add type hints
    Drop Python 3.6 and 3.7 support
    Fix fenced code blocks breaking lists
    Fix #583 by tweaking incomplete tag regex
    Fix AssertionError on malformed HTML


author: songliyang <songliyang@kylinos.cn> - 2.5.1-1
changelog:
  - Update package to version 2.5.1
  - Add option to output to file in CLI
  - Add support for Python 3.13
  - Remove redundant version checks
  - Fix tox: 'failed with make is not allowed, use allowlist_externals to allow it'


author: xu_ping <707078654@qq.com> - 9.0.1-1
changelog:
  - Upgrade version to 9.0.1
  - add Raw UDP and DTLS support.
  - Deprecate add_log event hook and mitmproxy.ctx.log.


author: xieyanlong <xieyanlong@kylinos.cn> - 3.1.5-1
changelog:
  - bugfix: Workbook files not properly closed on Python ≥ 3.11.8 and Windows
  - bugfix: Column name caches are slow and use a lot of memory
  - bugfix: Rich-text can be saved if lxml is not installed


author: tanyulong <tanyulong@kylinos.cn> - 2.4.0-2
changelog:
  - delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/opentracing.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


author: lvfei <lvfei@kylinos.cn> - 3.9.15-1
changelog:
  - upgrade to 3.9.15 fix CVE-2024-27454
  - Fix crash serializing str introduced
  - Fix Serialization str escape uses only 128-bit SIMD 
  - Minimal musllinux_1_1 build due to sporadic CI failure
  - Improve performance of serializing. str is significantly faster. Documents
     using dict, list, and tuple are somewhat faster.
  - orjson module metadata explicitly marks subinterpreters as not supported


author: liutao1 <liutao1@kylinos.cn> - 3.10.0-1
changelog:
  - Update package to version 3.10.0
    Support serializing numpy.float16 (numpy.half).
    sdist uses metadata 2.3 instead of 2.1.
    Improve Windows PyPI builds.


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 3.10.11-1
changelog:
  - Update package with version 3.10.11
    Improve performance of UUIDs.
    Publish PyPI wheels with trusted publishing and PEP 740 attestations.
    Compatibility with CPython 3.14 alpha 1.
    Drop support for arm7.
    Serializing numpy.ndarray with non-native endianness raises orjson.JSONEncodeError.


author: zhaojingyu <zhaojingyu@klinos.cn> - 5.4.1-1
changelog:
  - Update package to version 5.4.1
    fixed a regression from version 5.4.0 that incorrectly handled files opened twice via file descripto


author: jiangxinyu <jiangxinyu@kylinos.cn> - 1.1.2-1
changelog:
  - Update package to version 1.1.2
    * fix: accommodate docxtpl use of Part._rels
    * fix: XmlPart._rel_ref_count


author: jiangxinyu <jiangxinyu@kylinos.cn> - 0.15.0-1
changelog:
  - Update package to version 0.15.0
  - FIX Copy JupyterLite contents early so it runs before jupyterlite_sphinx build-finished


author: xiaozai <xiaozai@kylinos.cn> - 1.7.0-1
changelog:
  - Update package to version 1.7.0
    - Remove deprecated plugins
    - Remove python 2 declaration
    - Add static method Tree.from_map


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 0.21.0-1
changelog:
  - Update package to version 0.21.0
    Add cleanup_socket param on create_unix_server
    Use cythonized SO_REUSEPORT rather than the unwrapped native one
    UDP errors should result in protocol.error_received
    Updates for Cython3
    Test with Python 3.13


author: wangkai <13474090681@163.com> - 1.1.0-3
changelog:
  - Compling package with pyproject
  - Obsoletes subpackage python-blurb-help
  - Add check for blurb command


author: Miro Hrončok <mhroncok@redhat.com> - 3.3.4-5
changelog:
  - Subpackage python2-empy has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: zhaosaisai <zhaosaisai@kylinos.cn> - 2.0.0-1
changelog:
  - Upgrade to the latest version 2.0.0
  - Add new writer methods and namespace elements/resolvers
  - Separate new write functionality from elements that have namespaces
  - Split everything except the closing tag into a separate fn
  - Improve performance with inline qname splitting
  - Local refactoring/performance improvements
  - Example Change the default write value of the root only ns keyword
  - Deprecate python 3.6 and 3.7 because nsetree requires the updated XMLParser
  - Disable coveralls unless you know exactly how to get access tokens


author: wangjunqi <wangjunqi@kylinos.cn> - 2.1.0-1
changelog:
  - Update package to version 2.1.0 
  	Add support for sys/policies endpoint (GH-1100)
  	add quota support to system backend (GH-1092)
  	Add support to PKI class to perform CRUD on issuers (GH-1102)


author: Liu Hui <2224621664@qq.com> - 0.0.32-1
changelog:
  - Update package to version 0.0.32
  - Fix CVE-2026-40347, CVE-2026-42561, CVE-2026-53537, CVE-2026-53538, CVE-2026-53539 and CVE-2026-53540


author: wangkai <13474090681@163.com> - 0.4.4-1
changelog:
  - Update package to version 0.4.4
  - Fix CVE-2023-30608
  - Compling package with pyproject
  - Obsoletes subpackage python-sqlparse-help


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 0.46.1-1
changelog:
  - Update package with version 0.46.1
    Fix: Allow relative directory path when follow_symlinks=True
    Add: GZipMiddleware: Make sure Vary header is always added if a response can be compressed
    Fix: Raise exception from background task on BaseHTTPMiddleware
    Fix: GZipMiddleware: Don't compress on server sent events
    Mod: MultiPartParser: Rename max_file_size to spool_max_size
    Drop Python 3.8 support
    Remove ExceptionMiddleware import proxy from starlette.exceptions module
    Remove deprecated WS_1004_NO_STATUS_RCVD and WS_1005_ABNORMAL_CLOSURE
    Add client parameter to TestClient
    Add max_part_size parameter to Request.form()
    Remove deprecated allow_redirects argument from TestClient
    Make UUID path parameter conversion more flexible
    Raise ClientDisconnect on StreamingResponse


author: liyue01 <liyue01@kylinos.cn> - 0.30.1-1
changelog:
  - Update package to version 0.30.1
  - Fixed ：Allow horizontal tabs in response header values
  - Added New multiprocess manager and Allow ConfigParser or a io.IO[Any] on log_config
  - Fixed：Suppress side-effects of signal propagation ，Send content-length header on 5xx
  - Added Cooperative signal handling
  - Fixed ：Revert raise ClientDisconnected on HTTP
  - Added Raise ClientDisconnected on send() when client disconnected


author: shaoning <shaoning@kylinos.cn> - 0.32.0-1
changelog:
  - Update package to version 0.32.0
      * Add reason support on WebSocketDisconnectEvent
      * Add pragma: full coverage to Process.is_alive
      * Remove signal testing order dependency
      * Improve ProxyHeadersMiddleware
      * Add support for [*] in trusted hosts


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 0.34.0-1
changelog:
  - Update package to version 0.34.0
    Add content-length to 500 response in wsproto implementation
    Drop support for Python 3.8
    Remove WatchGod support for --reload


author: Yafen Fang<yafen@iscas.ac.cn> - 20220318-5
changelog:
  - update pi-bluetooth to commit(23af66cff597c80523bf9581d7f75d387227f183): Add AA:AA:AA:AA:AA:AA as an "unprogrammed" address


author: Yafen Fang <yafen@iscas.ac.cn> - 2024.04.20-1
changelog:
  - update upstream version to 2024.04.20-2712
  - add Raspberry Pi 5 bootloader EEPROMs
  - add rpi-bootloader-key-convert, rpi-otp-private-key, rpi-sign-bootcode
  - remove patch for rpi-eeprom-update: use 'tr' instead of 'strings'


author: Yafen Fang<yafen@iscas.ac.cn> - 20240419-9
changelog:
  - update firmware to version 1.20240306
  - update bluez-firmware to the latest commit (5a204dae9b3dc521842c56d93f6b4ecfbe4ff44d): 1.2-4+rpt11 release


author: Yafen Fang<yafen@iscas.ac.cn> - 20241207-11
changelog:
  - update firmware version to 1.20241126
  - update bluez-firmware to the latest commit (78d6a07730e2d20c035899521ab67726dc028e1c): Update changelog for 1.2-9+rpt3 release
  - update firmware-nonfree to the latest commit (4b356e134e8333d073bd3802d767a825adec3807): Update changelog for 1:20230625-2+rpt3 release


author: Yafen Fang<yafen@iscas.ac.cn> - 20241207-13
changelog:
  - add license: broadcom_bcm43xx
  - preserve the symbolic link format when installing firmwares of brcm


author: Xun Lai<chainsx@isrc.iscas.ac.cn> - 20260330-14
changelog:
  - update firmware version to 1.20250915
  - update bluez-firmware to the latest commit (cdf61dc691a49ff01a124752bd04194907f0f9cd): Update changelog for 1.2-13+rpt2 release
  - update firmware-nonfree to the latest commit (9794282eb9f4a2de1f23b41a738926740e975d83): Update changelog for 1:20250410-2+rpt1 release


author: Yafen Fang<yafen@iscas.ac.cn> - 20241104-2
changelog:
  - update upstream version to the latest commit: "ovmerge: Disable Perl warnings about portability"
  - update patch0002


author: Yafen Fang <yafen@iscas.ac.cn> - 20230320-1
changelog:
  - update to upstream's last commit (408bde537671de6df2d9b91564e67132f98ffa71): do_wifi_ssid_passphrase: set scan_ssid on hidden network in dhcpcd case
  - adjust for openEuler
  - disable A9 Wayland and AA Network Config
  - remove legacy autologin cruft


author: weiyucheng <weiyucheng@kylinos.cn> - 2.0.0-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:sync upstream patches to support isulad container engine and systemd cgroup driver


author: wutao <wutao61@huawei.com> - 0.7.0-2
changelog:
  - Move .so file from /usr/lib64/gems/ruby/http_parser.rb-0.7.0/http_parser.rb/ to
    /usr/lib64/gems/ruby/http_parser.rb-0.7.0/ to solve fluentd loaderror problem


author: wutao <wutao61@huawei.com> - 1.4.1-2
changelog:
  - Move .so file from /usr/lib64/gems/ruby/yajl-ruby-1.4.1/yajl-ruby/
    to /usr/lib64/gems/ruby/yajl-ruby-1.4.1/yajl/ to solve fluentd loaderror problem


author: Funda Wang <fundawang@yeah.net> - 0.42.4-6
changelog:
  - Split tracker plugin into a separate rygel-tracker subpackage
  - Add systemd user unit scriptlets and 
  Requires(post): systemd 
  Requires(preun): systemd 
  Requires(postun): systemd


author: YuYing Mu <muyuying1@huawei.com> - 1.0.0-1
changelog:
  * Tue Nov 21 2023 JiaQi Zhao <zhaojiaqi18@huawei.com> - 1.0.0-1
  - Init and adapt device auth to openEuler


author: Peng He <hepeng68@huawei.com> - 1.0.0-1
changelog:
  * Tue Nov 21 2023 JiaQi Zhao <zhaojiaqi18@huawei.com> - 1.0.0-1
  - adapt compilation, tailor dependencies on hitrace and hisysevent


author: lvgenggeng <lvgenggeng@uniontech.com> - 1.13.12-3
changelog:
  - backport: Fix WSS secondary tport destroy.
  - backport: Fix WS next timer.
  - spec: move to SPDX license


author: <918688502@qq.com> - 0.2.0-1
changelog:
  - Initial skeleton of the sysHAX heterogeneous collaborative acceleration runtime, including core modules, configuration management, logging system, command-line tool, API routing, application entry point, documentation, and dependency declaration


author: donglihao <donglihao1@huawei.com> - 1.2-1
changelog:
  - Add new detection algorithms for improved AI training monitoring
  - Update collection modules with enhanced performance tracing capabilities


author: donglihao <donglihao1@huawei.com> - 1.2-4
changelog:
  - Integrated previous updates:
  - remove usage of cxxfilt
  - disable HAS_BTF_SUPPORT in build.sh
  - Add new detection algorithms for improved AI training monitoring
  - Update collection modules with enhanced performance tracing capabilities


author: yaoxin <1024769339@qq.com> - 5.5.1-1
changelog:
  - Update to 5.5.1:
    * Fix linear congruential random number generator
    * Extend elf_aux_info() support for RISC-V on FreeBSD and OpenBSD
    * Fix building elf_aux_info() support on OpenBSD/arm
    * Fix invalid empty interval in punct_stripped() for all-punctuation words
    * Fix function addAvailableLanguages
    * Avoid error in pixSauvolaBinarizeTiled
    * Fix duplicated IDs in ALTO XML when multiple pages are present
    * Remove unused include statements for tprintf.h


author: zhang_jian <zhang_jian7@hoperun.com> - 5.5.2-1
changelog:
  - update to 5.5.2
    * Fix and improve configuration for cmake builds
    * Move version info. to appropriate ALTO element
    * Bump mikepenz/action-junit-report from 4 to 6


author: yaoxin <1024769339@qq.com> - 3.4.1-1
changelog:
  - Update to 3.4.1:
    * Fix manpage path in pyproject.toml
    * Fallback to common if a platform is specified using -p flag,
      but a page doesn't exist for that platform
    * Drop support for EOL Python 3.8 version
    * Fix broken --render option
    * Fix duplicate platform information shown in pages like du, cd, w


author: chukaiping <chukaiping@baidu.com> - 3.4.3-1
changelog:
  - Update to 3.4.3
    * Fixed unpredictable platform selection when displaying pages 
    * fix: unpredictable platform selection introduced
    * Added a warning when a page is not available for the current platform


author: zhang_jian <zhang_jian7@hoperun.com> - 3.4.4-1
changelog:
  - update to 3.4.4
  - Drop support for EOL Python 3.9 version
  - Allow cache updating and command displaying on the same command
  - fix: only raise URLError or HTTPError when there are no results at all


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.38.0-1
changelog:
  - Upgrade to 3.38.0
  - Sub package totem-nautilus becomes empty
    in version 3.31.91 Move nautilus properties page to nautilus module


author: houhongxun <houhongxun@kylinos.cn> - 3.1.0-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: add 0001-ukui-panel-fix-incorrect-usage-of-deallocation-func.patch


author: douyan<douyan@kylinos.cn> - 3.1.2-6
changelog:
  - Type: bugfix
  - ID  : NA
  - SUG : NA
  - DESC: add patch03: ukui-power-manager-3.1.2-disable-computer-sleep.patch


author: huayadong <huayadong@kylinos.cn> - 3.1.0-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add patch2:ukui-session-manager-3.1.0-kylin-fix-ukui-kwin-x11-coredump.patch


author: peijiankang <peijiankang@kylinos.cn> - 3.1.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add patch3:add-switchuser-no-limits-ukui-session.patch
         rm disable-Suspend-and-Sleep-of-ukui-session-manager.patch


author: huayadong <huayadong@kylinos.cn> - 3.1.2-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add Patch4:ukui-settings-daemon-3.1.2-kylin-fix-coredump.patch


author: bianguangze <bianguangze@uniontech.com> - 0.0.1.01
changelog:
  - Add Patch: 0001-Add-utpam_client.rs-and-modify-utpam_misc.rs.patch.
  - Add Patch: 0002-Modify-pam_strerror-function.patch.
  - Add Patch: 0003-refactor-add-utpam_get_authtok.rs-file.patch.


author: bianguangze <bianguangze@uniontech.com> - 0.0.1.02
changelog:
  - Add Patch: 0004-refactor-fix-include-flag-error.patch.
  - Add Patch: 0005-add-pam_strerror.rs-and-fix-utpam_rootok-modules.patch.


author: wanglujun <wanglujun@uniontech.com> - 0.0.1.04
changelog:
  - spec: del SOURCE8 and package ./lib/libpam_c/include/utpam.h.
  - Add Patch:0007-change-log-path.patch.


author: wangmeng <wangmengc@uniontech.com> - 0.5.0-3
changelog:
  - feat: add patch 0003-fix-echo-a.z.patch
  - feat: add patch 0004-fix-type-return-error.patch
  - 修复echo {a..z} 执行错误和type命令返回值错误


author: openEuler <contact@openeuler.org> - 2.0.2-1
changelog:
  - feat: Add option to launch OpenCode through Witty Assistant
  - installer: Install OpenCode-AI during deployment


author: Witty Team <intelligence@openeuler.org> - 3.0.0-1
changelog:
  - Rename source package to euler-copilot-shell; binary subpackage is witty
  - Provides/Obsoletes euler-copilot-shell and witty-assistant for upgrade from 1.x/2.x
  - Vendor + Go toolchain bundling; static build with CGO_ENABLED=0, GOAMD64=v1


author: Witty Team <intelligence@openeuler.org> - 3.1.0-1
changelog:
  - Add witty-builtin-agent subpackage with built-in agent, skills, and MCP config
  - Ship Role Prompt and config.d fragment for Witty Assistant as default agent (mode=primary)
  - Download 5 SkillHub skills (manpage-skill, log-anomaly-detector, html-report-generator,
    brainstorm-beagle, plantuml-skill) at build time via prepare-release.sh
  - witty now Requires witty-builtin-agent for out-of-the-box agent experience
  - Skill versions centralized in skill-versions.sh, spec Sources use real URLs for CI


author: Witty Team <intelligence@openeuler.org> - 3.1.1-1
changelog:
  - feat: Prompt for provider API key interactively on TTY
  - fix: Make permission handling synchronous to prevent terminal desync
  - refactor: permission display with multi-line title support
  - fix: Change QuestionInfo.Custom from bool to *bool with helper method
  - fix: Refine shell command routing with precise NL detection and Bash generation
  - chore: Adjust builtin agent permissions for read, external directory, and bash
  - chore: Widen witty-builtin-agent permissions and refine prompt
  - chore: Allow witty dirs and experience-skill by default


author: Witty Team <intelligence@openeuler.org> - 3.1.2-1
changelog:
  - fix: Refactor doctor to treat not-running server as OK, remove agent-packages check
  - fix: Move /new force-next detection into dispatch
  - chore: Allow context, websearch, and grep MCPs in builtin agent
  - chore: Extract dev setup dependencies into a shared script
  - chore: Add Go PATH to profile for all setup scripts
  - chore: Clean old release artifacts before building


author: Witty Team <intelligence@openeuler.org> - 3.1.3-1
changelog:
  - feat: Handle session.error events from opencode
  - fix: add bare /session command help in REPL
  - feat(shellbridge): route bare /session to session usage help
  - docs: clarify shell routing, session list, and server status behavior
  - docs: Add comprehensive usage documentation for Witty CLI
  - feat: Stream reasoning echo in EchoRenderer


author: Weikang Xiang <xiangweikang3@huawei.com> - 0.1.0-2
changelog:
  - reorder cmake clean step after configure
  - fix issues in path/input/encoding verification
  - preserve explicit zero port in run_online


author: Weikang Xiang <xiangweikang3@huawei.com> - 0.1.0-4
changelog:
  - add --fast-fail/--no-fast-fail to control exit on invalid --pid
  - handle abnormal exits when target process dies or collection is interrupted
  - install witty-profiler in editable mode


author: Weikang Xiang <xiangweikang3@huawei.com> - 0.1.0-5
changelog:
  - add infra runtime key threads and interrupts
  - defer logger initialization to prevent redundant output on -h/--help
  - remove slow keyword from bottleneck-identification skill


author: maqi <maqi@uniontech.com> - 1.37-1
changelog:
  - update to version 1.37
    No longer failing to load CHMs silently.
    Minor build system refresh.
    Updated Romanian and Swedish translations.


author: gcw_X8YNlwar <wangjintao1@xfusion.com> - 1.20.4-1
changelog:
  - Update to 1.20.4
  - Fix CVE-2026-40354: Prevent trashing of arbitrary host files via symlink attack


author: yaoxin <1024769339@qq.com> - 1.15.3-1
changelog:
  - Update to 1.15.3:
    * Fix build against newer xdg-desktop-portal
    * Fix return value for the access portal


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 1.2.15-7
changelog:
  - Reorganize patch numbers in spec file
  - Add "program" option to rotate lock file configuration for finer-grained rotation locks(b: 113752)


author: gaobo <gaobo@kylinsec.com.cn> - 1.2.15-8
changelog:
  - Modify the Patch1005, change lock file path and correct the error logic for creating the lock path. (b:113752)


