# changelog

author: cx <cx22757@163.com> - 0.0.1-2
changelog:
  - fix: modify install permission for library and config file.
  - fix: update nullptr check.
  - fix: update VM consistency log.
  - fix: extend RPC transmission timeout to 20 seconds.
  - fix: clear const_cast in domain.cpp; solve memory leak.
  - fix: add debug log for TSB API.
  - fix: extend RPC transmission timeout


author: cx <cx22757@163.com> - 0.0.1-3
changelog:
  - 修改日志问题
  - fix: log ERROR when peer received a failure notification.
  - fix: remove unsupported flag in DomainMigrate log.
  - fix: remove redundant nullptr check.
  - fix: change measure item name from grub_cfg to grub.cfg.
  - 修改安全问题
  - fix: safety inspection.
  - 修改检视意见
  - 格式化代码
  - 修改安全排查
  - fix: remove option --undefinesource.
  - fix: add return value check for GetVRoots.
  - fix: remove `--allow-store-measurements` option in VM create.
  - fix: remove RPATH compile option.
  - fix: call MigrationNotify after migration success in source end.
  - 修改安全排查问题
  - fix: update doc.
  - fix: modify VM state to shutoff after migration.
  - fix: add memory free for error branch in foreign_mounter.cpp


author: cx <cx22757@163.com> - 0.0.1-4
changelog:
  - fix: adapt to new VerifyTrustReport API.
  - 增加start虚机耗时日志
  - 保持挂载和startVRoot进行异步，并且不可以让checkmeasure和startVRoot异步
  - delete no use function
  - 1: adapter mock 2：add time-consuming debug 3: async StartVRoot and CheckGuestBeforeStart
  - fix: update doc and CLI help info.


author: cx <cx22757@163.com> - 0.0.1-5
changelog:
  - fix: update TSB-agent mock implement.
  - docs: update supported OS version
  - fix: update download URL for libboundscheck.
  - fix: rename sessionId to uuid.
  - fix: add suggestion for edk2 version


author: cx <cx22757@163.com> - 0.0.1-6
changelog:
  - fix: update URL in scripts.
  - Merge branch 'remote_master'
  - 优化资料以及修改校验路径逻辑
  - 对readme中的TLS证书示例上加上特别说明：有安全问题
  - add mock for file_io, grpc, libguestfs, libvirt
  - 移除libvirt生成证书的脚本，移动到readme文


author: cx <cx22757@163.com> - 0.0.1-7
changelog:
  - cleancode清理
  - 修复CMakeLists.txt中的错误
  - 重构mock代码，编译成so文件用于测试，完成TSB-agent mock模块的编译方式整改，实现virtrust软件独立编译、不依赖TSB-agent mock程序编译方法的能力
  - 增加记录错误日志，便于定位
  - fix: change header file permissions to 440.
  - 优优安全配置的readme章节


author: cx <cx22757@163.com> - 0.0.1-8
changelog:
  - feature: 1、使用systemd服务管理virtrustd服务，手动编译情况下添加virtrustd服务的管理脚本，在rpm安装情况下修改spec文件，添加virtrustd服务的自动注册、卸载清理等动作 2、优化virtrustd服务管理文档，完善文件框架


author: Xu Zheng <xuzheng_yewu@cmss.chinamobile.com> - 0.1.0-32
changelog:
  - adapt to multiple qemu process 
  - virt_check update
  - optimize qemu_var and os_var matching formats


author: Wenhui Tang <wenhui.oerv@isrc.iscas.ac.cn> - 0.26.0-2
changelog:
  - Append flags to GOFLAGS to fix go linker bugs for riscv
  - Related issue: https://github.com/golang/go/issues/62465
  - This is a temporary solution that requires fixing the upstream riscv support for golang.


author: wenxin<wenxin32@foxmail.com> - v1.4.1-3
changelog:
  - fix the query error of cve associated host
  - update verification method for host ip fieldl;fix repo field filter error
  - update TimedCorrectTask method


author: wenxin<wenxin32@foxmail.com> - v2.0.0-3
changelog:
  - Added support for cluster features.
  - Adjusted Task Module logic to use Celery for task management and execution.


author: luxuexian<luxuexian@huawei.com> - v2.1.0-2
changelog:
  - Fixed exceptions in calling stored procedures and cases caused by SQLschema upgrade
  - Fixed errors reported in calling cve summary interface


author: liuchanggeng<liuchanggeng@huawei.com> - v1.3.4-12
changelog:
  - to maintain functional stability, da-tool only releases network related analysis
  - it is not allowed to modify the configuration file of the da-tool


author: wangguangge<wangguangge@huawei.com> - v1.4.1-1
changelog:
  - update to v1.4.1
  - update cve fix logic
  - support rollback operation for kernel hotpatch/coldpatch


author: zhuyuncheng<zhuyuncheng@huawei.com> - v1.1.3-3
changelog:
  - Bugfix: fix the alert count error
  - Bugfix: for ai model, increase queried data length and add
    a time range for error judgment.


author: gongzhengtang<gong_zhengtang@163.com> - v1.2.0-1
changelog:
  - update the structure of response body; update how to get session used to
  - connect to the database


author: Hu gang<18768366022@163.com> - v1.3.5-2
changelog:
  - Resolve the problem of host display of the expanded menu in the host management batch adding host interface
  - Optimize the logic of adding hosts in batches under different circumstances


author: Hu gang<18768366022@163.com> - v1.4.0-1
changelog:
  - adapt to NewRepair Tasks Including DetailsCreation TaskReports And TaskExecution
  - Modify the original rollback task to hot patch rollback
  - Added related rollback tasks


author: Hu gang<18768366022@163.com> - v1.4.0-2
changelog:
  - Added keyword search for host list
  - Fixed the problem of abnormal list rendering in task details task running state
  - Optimize some page copywriting
  - Adaptation rollback task related (creation, execution, detailed viewing, task report viewing, etc.)
  - Solve the problem of hot and cold patch execution tasks failing when creating a repair task.
  - Fix hotpatch remove list filter failed


author: Hu gang<18768366022@163.com> - v1.4.0-4
changelog:
  - Added an interface adaptation for host status
  - Added a field to determine whether the kernel changes after the host is restarted
  - Added a new hot patch prompt for creating a repair task
  - Fix some bug


author: Hu gang<18768366022@163.com> - v1.4.0-7
changelog:
  - Modify the task description copy of the create hot patch removal task
  - remove create rollback button in cve detail,add hotpatch button in cve detail


author: Hu gang<18768366022@163.com> - v2.1.2-4
changelog:
  - Update version to v2.1.2-4
  - Provides smart Q&A capabilities for big models
  - Provide vulnerability repair and configure traceability intelligent management
  - Supports traceability of file changes


author: wenxin<wenxin32@foxmail.com> - v2.0.0-1
changelog:
  - Adjusted configuration file loading method: changed format from INI to YAML.
  - Added support for reading and writing configuration through Zookeeper.
  - Added support for reading and writing cache through Redis, including logic for current cache keys.
  - Implemented RSA signature verification for data.
  - Removed deprecated files.
  - Optimized Prometheus import statements.
  - Added retry mechanism to `response` method.


author: wenxin<wenxin32@foxmail.com> - v2.0.0-1
changelog:
  - Split the existing service module into distinct modules:
    - Task Module: Handles task management and execution.
    - Host Module: Manages host configurations and interactions.
    - User Module: Manages user accounts and permissions.
    - Interface Dispatch Module: Manages the dispatching of requests to appropriate interfaces.
  - Added a new command line tool for enhanced functionality and management.
  - Introduced support for clustering, allowing for more robust and scalable deployments.
  - Reorganized the service architecture to improve modularity and maintainability.
  - Fixed various issues to enhance stability and performance.


author: yuanxing <yuanxing@kylinsec.com.cn> - 1.28.0-1
changelog:
  - Initial build
  - KYOS-F: allow root to use desktop manager
  - KYOS-F: feature(kiran): Support kiran desktop environment
  - KYOS-F: Support change desktop background image in kiran desktop(#I5I1HE)
  - KYOS-B: Fix the file rename error msg too long(#I5I8IM)
  - KYOS-B: Fix the file can be rename to only container space name(#I5I8KI)
  - KYOS-F: Let the location bar background change with theme(#I5I8V9)
  - KYOS-B: Not draw icon and text hight light color when icon not get force(#I5HRI0)
  - KYOS-B: Fix the open terminal can not correct to terminal icon


author: gaobo <gaobo@kylinsec.com.cn> - 1.28.0-2
changelog:
  - modify the logic that open kiran-control-panel when change the background (f:107366)
  - fix that background abnormal when change the scale to 200%. (b:121360)


author: wangdi <wangdi@kylinos.cn> - 0.15.0-3
changelog:
  - Change hardcoded deafult hash algorithm from legacy md4 to sha512
  - Change dependecy from ansible-2.9 to ansible since ansible version has bumped to 2.9


author: liheavy <lihaiwei8@huawei.com> - 1.0.0-3
changelog:
  - Disassemble yocto-embedded-tools and replace cjson, ninja, gn, openssl, libboundscheck
  - with openEuler software package


author: Yuying Mu <muyuying1@huawei.com> - 1.0.0-6
changelog:
  * Tue Nov 20 2023 Jiaqi Zhao <zhaojiaqi18@huawei.com> - 1.0.0-6
  - Update dsoftbus from 3.1.2 to 3.2
  - Rename package name from dsoftbus to communication_dsoftbus


author: liweiganga <liweiganga@uniontech.com> - 2021.06.30-2
changelog:
  - remove unused and duplicate packages
  - Delete and create a common user, log in with an existing user


author: yuxiaojun <yuxiaojun@uniontech.com> - 5.5.90-1.03
changelog:
  - fix: When root is disabled after creating an administrator account, the problem of being unable to enter the system through the graphical interface(bugid:203337)


author: dingjiahui <dingjiahui4@huawei.com> - 1.0.0-1
changelog:
  - Initial release of DevStore
  - Includes frontend Electron application
  - Includes backend Django application
  - Provides comprehensive development store management functionality
  - Added systemd service support for easy service management
  - Users can now start/stop DevStore using systemctl commands


author: dingjiahui <dingjiahui4@huawei.com> - 1.0.1-1
changelog:
  - Support search functionality
  - Fix the issue where the list is empty when returning to the homepage from the details page
  - Auto-enable and start dev-store service after installation
  - Add error handling to ensure service startup failures don't affect package installation


author: dingjiahui <dingjiahui4@huawei.com> - 1.0.3-1
changelog:
  - Replace MariaDB with SQLite database, optimize initialization process for faster startup
  - Optimize cleanup and write processes during data synchronization exceptions


author: dingjiahui <dingjiahui4@huawei.com> - 1.0.4-1
changelog:
  - Update desktop icon
  - Remove massive logs
  - Support for quickly adding MCP servers to PolyMind
  - Fix handling issue when oeDeploy plugin is duplicated
  - Optimize interface, support multiple tabs


author: Yuying Mu <muyuying1@huawei.com> - 1.0.0-1
changelog:
  * Tue Nov 21 2023 Jiaqi Zhao <zhaojiaqi18@huawei.com> - 1.0.0-1
  - Init and adapt device manager to openEuler


author: zhourenjian <zhourenjian@huawei.com> - 2025.36-1
changelog:
  - Adapt E2B to the arm64 architecture, remove its dependency on GCP, and add a one-click local installation script.Fix start-client process, use dnsmasq replace systemd-resolved, use paramater to decide current client belongs to which node pool, use glibc busybox,use provision.sh to install vm's deps while building template.Add arm vmlinux.bin and change x86 vmlinux.bin name.Make start-client process local.use dnsmasq replace systemd-resolved. Use paramater to decide current client belongs to which node pool. fix configure.sh run fail because busybox has no bash.change async to sync.complete readme.


author: Hongyu Shi <shywzt@iCloud.com> - 2.2.0-1
changelog:
  - Add main package alias witty-framework-lite
  - Add witty-mcp-manager subpackage (Nuitka-compiled binary)


author: Hongyu Shi <shywzt@iCloud.com> - 2.2.0-7
changelog:
  - Wait for network-online before starting witty-mcp-manager service
  - Warn explicitly when RPM post-install uv bootstrap fails


author: chenyanpanHW <chenyanpan@huawei.com> - 0.5.0-16
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Add-PL_ARCH-for-AArch64.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/coverity.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0001-add-loongarch64-support.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0002-add-riscv-support.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: wangkai <13474090681@163.com> - 3.18.0-13
changelog:
  - Fix CVE-2020-24292 CVE-2020-24293 CVE-2020-24295 CVE-2021-33367
    CVE-2021-40263 CVE-2021-40266 CVE-2023-47995 CVE-2023-47997


author: zhanglin <lin.zhang@turbolinux.com.cn> - 1:3.38.2-4
changelog:
  - fix build when Meson >= 0.61.5
  - add patch modify-meson-build-tepl6.patch
  - add patch fix-i18n-merge-file.patch


author: cx <cx22757@163.com> - 0.0.1-23
changelog:
  - fix:add tpm.rego,modify ut and agent_config
  - feat: fix log name
  - Revert "bugfix: add key_managerd.service to rpm"
  - bugfix: add key_managerd.service to rpm
  - feat: Adapting to the log of ascend npu
  - fix:fix server_config
  - feat: The virtCCA plugin supports log collection and verification in the dim format
  - feat:add TpmPlugin for attester and verfier dim_log
  - fix: cancel exporting unnecessary lib.
  - fix: clear magic number in CCA plugin.
  - fix: split the verify_logs func in CCA verifier.
  - fix: add UT for CCA verifier plugin.
  - fix: Optimize command-line options and their explanations
  - feat: update docs and RPM spec files for CCA.
  - feat: add CCA verifier plugin.
  - feat: Modify the input of the all policy to the output of the plugin.
  - feat: Modify the interface documentation
  - feat: The baseline generation tool supports dim baseline generation.
  - feat: Added all-type policy
  - feat: add CCA attester plugin.
  - fix: extract public log verify code.
  - fix:Fix failure to read IAK certificate
  - fix: Adapt to EAR token format for itrustee plugin.
  - fix: Adding the secure boot field to the token in the virtCCA plugin
  - fix: Remove unnecessary fields in itrustee.rego.
  - fix: Add public key information and display the realm challenge when no platform token exists.
  - Merge branch 'vcca' of git@gitcode.com:lyyyze/global-trust-authority.git into 'master' # Conflicts: #   conflict attestation_server/policy/src/services/policy_service.rs
  - fix: Add JWT signature verification when updating the policy
  - feat: Add platform token challenge field and refine software component serialization
  - fix: Modify the translated content of the document
  - fix: Modify the verification logic of the tpmboot plugin to validate digests only for specific events.
  - fix: Modified failed test cases
  - Merge remote-tracking branch 'origin/issue' into issue
  - fix: Capitalize the first letter of error messages
  - fix: Modify error messages to reduce module exceptions printed to the interface output.
  - fix: Add codecheck build script
  - fix: Modify error messages to reduce module exceptions printed to the interface output.
  - bugfix: add a chapter for readme
  - fix: add UT
  - feat(api): configure server limits and improve error handling
  - fix: Fixing some errors in the API documentation


author: cx <cx22757@163.com> - 0.0.1-24
changelog:
  - fix: declare dependency for ITrustee.
  - fix: add copyright notice.
  - test:add tpm and virtcca UT
  - fix: update descriptions of request params.
  - fix: fixes OpenSSL affected by CVE-2025-15467.
  - feat: add ascend_npu cbor data to policy
  - feat: Add the user policy for the TPM plugin


author: cx <cx22757@163.com> - 0.0.1-27
changelog:
  - Revert "feat: Added Compatibility Plugin"
  - Revert "feat: Add logic for the main plugin to retrieve information for each plugin."
  - feat: Added token verification interface, supporting custom public key input.
  - feat: Add logic for the main plugin to retrieve information for each plugin.
  - fix: update rustup source in code-check script.
  - fix: replace default rustup source in code-check script.
  - Merge remote-tracking branch 'upstream/master' into plugin
  - feat: add UT to key_manager
  - feat: Added Compatibility Plugin


author: cx <cx22757@163.com> - 0.0.1-28
changelog:
  - fix: Change the IP addresses in the document
  - fix: specify REM indexes when replaying boot log.
  - fix: Remove the parameters from the /global-trust-authority/service/v1/challenge endpoint
  - feat: Add logic for the main plugin to retrieve information for each plugin.
  - fix: address review comments
  - feat: add cca server unit tests
  - feat: remove obsolete CLI unit tests
  - feat: Add log data validation
  - feat: add unit test to endorserment, key and resource_provider
  - feat: expand client, validate, load_plugins, and error coverage
  - feat: add challenge and evidence verification handler coverage
  - feat: expand service, entities, utils, and signature update coverage
  - feat: add event log, parser, and serializer coverage
  - feat: add api-sub-key func
  - fix: move LICENSE to root directory.
  - fix: remove communication matrix in guide.
  - fix: add docs to tpm plugin
  - feat: delete Chinese for key_manager
  - feat: add UT to attestation_server
  - feat: add UT to attestation_common
  - feat: add UT to attestation_cli
  - Merge remote-tracking branch 'refs/remotes/origin/master'
  - Merge remote-tracking branch 'refs/remotes/origin/master'
  - add UT to attestation_agent


author: cx <cx22757@163.com> - 0.0.1-29
changelog:
  - feat: add attestation_client facade crate
  - refactor: move func process_nonce to NonceUtil
  - refactor: unify ascend npu evidence handling around base64 cbor
  - fix: Edit the cargo.toml file
  - fix: Change the agent's default setting to support HTTP one-way authentication; change the exist_time field in the configuration to expired_time.
  - Merge remote: openeuler/global-trust-authority master
  - fix: DICE verification configuration update
  - fix: move dependencies of cca to workspace level
  - feat: Added a new DICE verifier module
  - feat: Added SM2 and Ed25519 algorithm implementations and local configuration key mode for key management
  - feat: Added DICE authentication module and adapted CLI tool


author: cx <cx22757@163.com> - 0.0.1-30
changelog:
  - docs: fix typo ITrustee to itrustee in attestation_service.md
  - feat: add is_default field to ref_value API documentation
  - fix: Fix and refine attestation codebase and documentation
  - fix: Make the rate limiting for the agent service configurable
  - feat: Declare the dependencies of the policy_engine module separately
  - fix(agent): handle non-2xx HTTP responses to surface real error causes
  - fix: add restful configuration in attestation client
  - refactor(ref_value): remove redundant validate func
  - fix(docs): add cca type for ref_value and modify content size
  - test(attestation): add UTs for dice verifier and token
  - fix: modify dice uts
  - Merge atomgit/master into current branch
  - feat: Add documentation for dice plugin and support SM2 algorithm for token
  - test(attestation): add UTs for dice attester and verifier
  - perf: use AtomicBool for initialization check
  - fix: Modify the fields in the token so that the fields related to the log status become Boolean values
  - fix: Change the data type of the secureBoot field to boolean
  - fix: Remove the “ignore” field from all ref_value_match_status entries
  - fix: In the cca and virtCCA plugins, rename the configuration option “ccel_file_path” to “boot_log_file_p”


author: cx <cx22757@163.com> - 0.0.1-31
changelog:
  - feat: zeroize sensitive fields in DiceConfig and add dice_cert_format validation
  - fix(agent): remove redundant dependencies from challenge module
  - fix: fix vulnerability scanning issues
  - update: modify agent_config.yaml for KDC token interface performance
  - feat: refactor DICE certificate parsing and update API documentation
  - fix: The token limit has been changed to 8 KB
  - feat: Submit the sdd doc
  - feat:update attestation_server Dockerfile and GTA Usage Guidelines
  - fix(agent): remove extra quotes from get_token return value
  - update dockerfile when key_manager


author: cx <cx22757@163.com> - 0.0.1-32
changelog:
  - feat: enable PCR14 collection in agent config
  - feat: add A3/A5 compatible concurrent evidence collection for ascend_npu
  - fix: fix dice integration issues


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.38.2-4
changelog:
  - Add four patches to make gome-boxes avoid setting qemu unsupported modules
    add vnc instead of spice


author: wenlong ding <wenlong.ding@turbolinux.com.cn> - 43.2-2
changelog:
  - Move '%find_lang gnome-initial-setup' to %install, fix not found gnome-initial-setup.lang if disable %check build


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.36.0-1
changelog:
  - Upgrade to 3.36.0
  - Update Version, Release, Source0, stage 'build' and 'files'
  - Delete old patch that existed in new version, add new patch


author: laokz <zhangkai@iscas.ac.cn> - 44.5-2
changelog:
  - let BuildRequire valgrind depend on system i386 i486 i586 i686 pentium3 pentium4 athlon geode x86_64 armv3l armv4b armv4l armv4tl armv5tl armv5tel armv5tejl armv6l armv6hl armv7l armv7hl armv7hnl armv8l armv8hl armv8hnl armv8hcnl aarch64 loongarch64 powerpc64le ppc64le sw_64


author: yaoxin <1024769339@qq.com> - 9.2.10-1
changelog:
  - Update to 9.2.10 for fix cves:CVE-2022-36062,CVE-2022-35957
    CVE-2022-39201,CVE-2022-31130,CVE-2022-31123,CVE-2022-39306
    CVE-2022-39307,CVE-2022-23552,CVE-2022-39324,CVE-2022-31097


author: weijin deng <weijin.deng@turbolinux.com.cn> - 0.3.13-3
changelog:
  - Solve bug of "PANIC: unprotected error in call to Lua API
    (attempt to call a nil value) Aborted"


author: yaoxin <1024769339@qq.com> - 2.8.139-1
changelog:
  - Update to 2.8.139:
    * Minor improvement of the `SOAP_XML_IGNORENS` (ignore XML
      namespaces) logic when performing non-strict XML validation
      (`SOAP_XML_STRICT` is not enabled) when ignoring extra XML
      extensibility elements in an inbound SOAP/XML message; no
      longer produces validation errors for non-serializable XML to
      "safely" ignore, unless strict XML validation is enabled with
      `SOAP_XML_STRICT`, as expected.
    * Minor update to improve XML entity parsing within limits.
    * The wsdl2h tool with SSL/TLS enabled for https no longer
      supports legacy SSLv3, only TLS 1.0 to 1.3, this avoids
      potential TLS/SSL handshake errors.
    * Corrected a logic bug in wsdl2h for attribute/elemenet
      reference qualification for C++ class and C struct members in
      the generated header interface file for soapcpp2.


author: herengui <herengui@kylinsec.com.cn> - 1.50.2-9
changelog:
  - Fix CVE-2026-28296: reject paths containing CR/LF characters in FTP backend
  - ftp: Reject paths with CR/LF in g_vfs_ftp_file_new_from_ftp (server-supplied paths)


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-145.0.6.137
changelog:
  - !22093 sync OLK-6.6 CVE bugfix LTS from tag 6.6.0-148.0.0 to 6.6.0-149.0.0
  - gpio: rockchip: Stop calling pinctrl for set_direction
  - gpio: rockchip: mark the GPIO controller as sleeping
  - ext4: fix error message when rejecting the default hash
  - ext4: filesystems without casefold feature cannot be mounted with siphash
  - userfaultfd: fix kabi breakage due to struct userfaultfd_ctx
  - mm/mremap: fix WARN with uffd that has remap events disabled
  - mm: clear uffd-wp PTE/PMD state on mremap()
  - userfaultfd: move userfaultfd_ctx struct to header file
  - spi: fix statistics allocation
  - Revert "hwmon: (ibmpex) fix use-after-free in high/low store"
  - hwmon: (ibmpex) fix use-after-free in high/low store
  - icmp: fix NULL pointer dereference in icmp_tag_validation()
  - net/sched: act_ife: Fix metalist update behavior
  - net/sched: act_ife: avoid possible NULL deref
  - apparmor: fix missing bounds check on DEFAULT table in verify_dfa()
  - spi: fix use-after-free on controller registration failure
  - PM: runtime: Fix a race condition related to device removal
  - apparmor: fix side-effect bug in match_char() macro usage
  - urma: Kernel-mode file for bugfix to move hashtable from alloc to active
  - ipv6: avoid overflows in ip6_datagram_send_ctl()
  - netfilter: nfnetlink_log: account for netlink header size
  - netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp
  - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD
  - bpf: Fix incorrect pruning due to atomic fetch precision tracking
  - bpf: reject direct access to nullable PTR_TO_BUF pointers
  - bpf: Reject sleepable kprobe_multi programs at attach time
  - ub: udma: fix a bug related to free rcu mem
  - ub: ubase: Add a soft dependency declaration for the ubase driver
  - ub: ubase: Rectify the problem that the shutdown process ends and logs are printed
  - ub: ubase: Verify the length of ctrlq rq msg
  - ub: ubase: debugfs supports tpg context query
  - perf: Make sure to use pmu_ctx->pmu for groups
  - perf: Fix kabi breakage of perf_output_handle
  - perf: Avoid the read if the count is already updated
  - perf: Extract a few helpers
  - irqchip/mbigen: hardcode gicr_base for HIP12
  - irqchip/mbigen: add HIP12 support for vtimer irq bypass
  - irqchip/gic-v3-its: Read ITS_VERSION with vendor checking
  - KVM: arm64: fix mbigen vtimer interrupt loss in save/restore
  - irqchip/mbigen: add check for GICv4.1 before enabling vtimer
  - gpio: rockchip: Stop calling pinctrl for set_direction
  - gpio: pca953x: fix wrong error probe return value
  - scsi: sg: Fix occasional bogus elapsed time that exceeds timeout
  - ASoC: fsl_sai: Add missing registers to cache default
  - ASoC: amd: yc: Add quirk for Honor MagicBook X16 2025
  - ALSA: usb-audio: Update for native DSD support quirks
  - can: j1939: make j1939_session_activate() fail if device is no longer registered
  - drm/amd/display: Fix DP no audio issue
  - powercap: fix sscanf() error return value handling
  - powercap: fix race condition in register_control_type()
  - NFS: trace: show TIMEDOUT instead of 0x6e
  - ALSA: ac97: fix a double free in snd_ac97_controller_register()
  - ALSA: ac97bus: Use guard() for mutex locks
  - HID: quirks: work around VID/PID conflict for appledisplay
  - net: wwan: iosm: Fix memory leak in ipc_mux_deinit()
  - net/mlx5e: Don't print error message due to invalid module
  - netdev: preserve NETIF_F_ALL_FOR_ALL across TSO updates
  - inet: ping: Fix icmp out counting
  - net: mscc: ocelot: Fix crash when adding interface under a lag
  - bridge: fix C-VLAN preservation in 802.1ad vlan_tunnel egress
  - net: marvell: prestera: fix NULL dereference on devlink_alloc() failure
  - netfilter: nf_tables: fix memory leak in nf_tables_newrule()
  - gpio: pca953x: handle short interrupt pulses on PCAL devices
  - gpio: pca953x: Add support for level-triggered interrupts
  - gpio: pca953x: Utilise temporary variable for struct device
  - gpio: pca953x: Utilise dev_err_probe() where it makes sense
  - netfilter: nft_synproxy: avoid possible data-race on update operation
  - arm64: dts: imx8mp: Fix LAN8740Ai PHY reference clock on DH electronics i.MX8M Plus DHCOM
  - ARM: dts: imx6q-ba16: fix RTC interrupt level
  - arm64: dts: add off-on-delay-us for usdhc2 regulator
  - scsi: ufs: core: Fix EH failure after W-LUN resume error
  - scsi: ipr: Enable/disable IRQD_NO_BALANCING during reset
  - smb/client: fix NT_STATUS_NO_DATA_DETECTED value
  - smb/client: fix NT_STATUS_DEVICE_DOOR_OPEN value
  - smb/client: fix NT_STATUS_UNABLE_TO_FREE_VM value
  - NFS: Fix up the automount fs_context to use the correct cred
  - NFSv4: ensure the open stateid seqid doesn't go backwards
  - dm-snapshot: fix 'scheduling while atomic' on real-time kernels
  - alpha: don't reference obsolete termio struct for TC* constants
  - ARM: 9461/1: Disable HIGHPTE on PREEMPT_RT kernels
  - csky: fix csky_cmpxchg_fixup not working
  - nfsd: convert to new timestamp accessors
  - pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping
  - gpio: rockchip: mark the GPIO controller as sleeping
  - drm/radeon: Remove __counted_by from ClockInfoArray.clockInfo[]
  - drm/pl111: Fix error handling in pl111_amba_probe
  - counter: interrupt-cnt: Drop IRQF_NO_THREAD flag
  - counter: 104-quad-8: Fix incorrect return value in IRQ handler
  - lib/crypto: aes: Fix missing MMU protection for AES S-box
  - mei: me: add nova lake point S DID
  - btrfs: always detect conflicting inodes when logging inode refs
  - net: 3com: 3c59x: fix possible null dereference in vortex_probe1()
  - atm: Fix dma_free_coherent() size
  - NFSD: Fix permission check for read access to executable-only files
  - LoongArch: Add cpuhotplug hooks to fix high cpu usage of vCPU threads
  - cpufreq: loongson3-acpi-cpufreq: Expand cpu id field for 3C6000
  - LoongArch: Adapt upstream backport for openEuler
  - urma: add rate limit for high-frequency error logs in ubmad and ubcm
  - ub:hisi-ubus: add soft dep of ummu for hisi_ubus
  - kprobes: avoid crash when rmmod/insmod after ftrace killed
  - bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN
  - sched/fair: Clear rel_deadline when initializing forked entities
  - ub/ubmempfd: Fix issues from AI
  - ub/ubdevshm: Optimize print format
  - ub/ubdevshm: Fix issues from AI.
  - ub/ubdevshm: Bugfix for multi-Ops with same va.
  - ub/ubdevshm: Optimize functions to improve readability.
  - media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex
  - sched/ebpf: Fix bpf_sched_set_task_prefer_nid()
  - LoongArch: KVM: Clear LLBCTL if secondary mmu mapping is changed
  - LoongArch: KVM: rename extioi to eiointc
  - LoongArch: KVM: Remove duplicated cache attribute setting
  - LoongArch: KVM: Set page with write attribute if dirty track disabled
  - LoongArch: KVM: Simplify kvm_deliver_intr()
  - LoongArch: KVM: Rework kvm_send_pv_ipi()
  - LoongArch: KVM: Restore guest PMU if it is enabled
  - LoongArch: KVM: Add delay until timer interrupt injected
  - LoongArch: KVM: Move kvm_iocsr tracepoint out of generic code
  - LoongArch: KVM: Add PTW feature detection on new hardware
  - LoongArch: KVM: Remove unused returns and semicolons
  - LoongArch: KVM: Add tracepoints for CPUCFG and CSR emulation exits
  - LoongArch: KVM: Add ecode parameter for exception handlers
  - LoongArch: KVM: Fully clear some CSRs when VM reboot
  - LoongArch: KVM: Fix multiple typos of KVM code
  - LoongArch: KVM: Add stub for kvm_arch_vcpu_preempted_in_kernel()
  - LoongArch: KVM: Remove unnecessary header include path
  - LoongArch: KVM: Set host with kernel mode when switch to VM mode
  - LoongArch: KVM: Fix typo issue about GCFG feature detection
  - LoongArch: KVM: Protect kvm_check_requests() with SRCU
  - LoongArch: KVM: Fix GPA size issue about VM
  - LoongArch: KVM: Adapt pch_pic alignment check
  - LoongArch: KVM: Use kvm_get_vcpu_by_id() instead of kvm_get_vcpu()
  - LoongArch: KVM: Adapt send_ipi_data() stack protector fix
  - LoongArch: KVM: Make function kvm_own_lbt() robust
  - erofs: add GFP_NOIO in the bio completion if needed
  - mm/rmap: fix incorrect pte restoration for lazyfree folios
  - mm: introduce FPB_RESPECT_WRITE for PTE batching infrastructure
  - mm: remove boolean output parameters from folio_pte_batch_ext()
  - mm: split folio_pte_batch() into folio_pte_batch() and folio_pte_batch_flags()
  - mm: smaller folio_pte_batch() improvements
  - mm: convert FPB_IGNORE_* into FPB_RESPECT_*
  - mm: fix folio_pte_batch() on XEN PV


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-145.0.7.138
changelog:
  - !22148 CVE-2026-31431
  - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
  - crypto: authencesn - Fix src offset when decrypting in-place
  - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
  - crypto: authenc - use memcpy_sglist() instead of null skcipher
  - crypto: algif_aead - snapshot IV for async AEAD requests
  - crypto: algif_aead - Revert to operating out-of-place
  - crypto: algif_aead - use memcpy_sglist() instead of null skcipher
  - crypto: scatterwalk - Backport memcpy_sglist()
  - crypto: algif_aead - Fix minimum RX size check for decryption


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-145.0.8.139
changelog:
  - !22175 sync OLK-6.6 CVE bugfix LTS from tag 6.6.0-149.0.0 to 6.6.0-151.0.0
  - dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc()
  - netfilter: conntrack: add missing netlink policy validations
  - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP
  - net/sched: sch_hfsc: fix divide-by-zero in rtsc_min()
  - bridge: mrp: reject zero test interval to avoid OOM panic
  - netfilter: ipset: drop logically empty buckets in mtype_del
  - xfrm: prevent policy_hthresh.work from racing with netns teardown
  - netfilter: nft_ct: fix use-after-free in timeout object destroy
  - KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION
  - x86/platform/uv: Handle deconfigured sockets
  - x86/CPU: Fix FPDSS on Zen1
  - can: raw: fix ro->uniq use-after-free in raw_rcv()
  - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption
  - net: skb: fix cross-cache free of KFENCE-allocated skb head
  - iavf: fix out-of-bounds writes in iavf_get_ethtool_stats()
  - PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup
  - bfq: Lock when clearing the q->elevator entry
  - ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio
  - ext4: publish jinode after initialization
  - ext4: validate p_idx bounds in ext4_ext_correct_indexes
  - ext4: prevent partial update of the extents path
  - ext4: refactor ext4_ext_rm_idx() to index 'path'
  - ext4: reject mount if bigalloc with s_first_data_block != 0
  - ext4: fix use-after-free in update_super_work when racing with umount
  - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi()
  - platform/x86/amd/pmc: Add support for Van Gogh SoC
  - team: Move team device type change at the end of team_port_add
  - perf/x86: Fix potential bad container_of in intel_pmu_hw_config
  - x86/topo: Fix SNC topology mess
  - x86/topo: Replace x86_has_numa_in_package
  - x86/topo: Add topology_num_nodes_per_package()
  - x86/numa: Store extra copy of numa_nodes_parsed
  - x86/smpboot: avoid SMT domain attach/destroy if SMT is not enabled
  - x86/smpboot: moves x86_topology to static initialize and truncate
  - x86/smpboot: remove redundant CONFIG_SCHED_SMT
  - smpboot: introduce SDTL_INIT() helper to tidy sched topology setup
  - sched: Move sched domain name out of CONFIG_SCHED_DEBUG
  - x86/topology: Remove x86_smt_flags and use cpu_smt_flags directly
  - x86/mm: Don't print out SRAT table information
  - powerpc/smp: Dynamically build Powerpc topology
  - powerpc/smp: Avoid asym packing within thread_group of a core
  - powerpc/smp: Add __ro_after_init attribute
  - powerpc/smp: Disable MC domain for shared processor
  - powerpc/smp: Enable Asym packing for cores on shared processor
  - drm/i915/gt: Check set_default_submission() before deferencing
  - urma: change kzalloc into vzalloc for ubcore
  - ALSA: ctxfi: Limit PTP to a single page
  - Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv()
  - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete
  - Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb
  - Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del()
  - Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop
  - ext4: convert inline data to extents when truncate exceeds inline size
  - af_unix: read UNIX_DIAG_VFS data under unix_state_lock
  - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check()
  - net: ipv6: flowlabel: defer exclusive option free until RCU teardown
  - bridge: br_nd_send: linearize skb before parsing ND options
  - net: bonding: fix NULL deref in bond_debug_rlb_hash_show
  - can: gw: fix OOB heap access in cgw_csum_crc8_rel()
  - netfilter: ctnetlink: use netlink policy range checks
  - netfilter: nf_conntrack_expect: skip expectations in other netns via proc
  - mmc: vub300: fix NULL-deref on disconnect
  - X.509: Fix out-of-bounds access when parsing extensions
  - net: fix fanout UAF in packet_release() via NETDEV_UP race
  - af_key: validate families in pfkey_send_migrate()
  - openvswitch: defer tunnel netdev_put to RCU release
  - Bluetooth: hci_sync: fix double unlock in hci_discovery_filter_clear()
  - crypto: af_alg - limit RX SG extraction by receive buffer budget
  - perf/x86/intel: Add missing branch counters constraint apply
  - ub/ubdevshm: Remove KABI for compatible with Ubuntu x86, add version verification interface.
  - urma: move variable initialization before use in error branch


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-145.0.9.140
changelog:
  - !22247 sync pr 22246: Revert efi/cper ARM CPER type alignment
  - Revert "efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs"


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-145.0.10.141
changelog:
  - !22435 sync OLK-6.6 CVE bugfix LTS from tag 6.6.0-151.0.0 to 6.6.0-152.0.0
  - HID: core: Mitigate potential OOB by removing bogus memset()
  - HID: core: Add printk_ratelimited variants to hid_warn() etc
  - HID: multitouch: Check to ensure report responses match the request
  - Bluetooth: MGMT: validate LTK enc_size on load
  - ceph: fix i_nlink underrun during async unlink
  - hwmon: (pmbus/core) Protect regulator operations with mutex
  - hwmon: (pmbus/core) Declare regulator notification function as void
  - dmaengine: idxd: Fix not releasing workqueue on .release()
  - driver/core: Fix kabi broken of platform_device/bus_type/device
  - driver core: platform: use generic driver_override infrastructure
  - hwmon: axi-fan: don't use driver_override as IRQ name
  - driver core: generalize driver_override in struct device
  - ceph: fix memory leaks in ceph_mdsc_build_path()
  - ceph: supply snapshot context in ceph_zero_partial_object()
  - Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync
  - Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt
  - Bluetooth: SMP: derive legacy responder STK authentication from MITM state
  - Bluetooth: MGMT: validate mesh send advertising payload length
  - Bluetooth: hci_event: move wake reason storage into validated event handlers
  - ACPI: processor: Fix previous acpi_processor_errata_piix4() fix
  - ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4()
  - KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2()
  - KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block()
  - KVM: x86: WARN if a vCPU gets a valid wakeup that KVM can't yet inject
  - HID: core: clamp report_size in s32ton() to avoid undefined shift
  - HID: alps: fix NULL pointer dereference in alps_raw_event()
  - Input: uinput - fix circular locking dependency with ff-core
  - HID: apple: avoid memory leak in apple_report_fixup()
  - HID: magicmouse: avoid memory leak in magicmouse_report_fixup()
  - mm/userfaultfd: fix hugetlb fault mutex hash calculation
  - rxrpc: proc: size address buffers for %pISpc output
  - dmaengine: idxd: Fix memory leak when a wq is reset
  - net/mlx5: lag: Check for LAG device before creating debugfs
  - crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed
  - crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed
  - blk-iocost: fix busy_level reset when no IOs complete
  - block: use min() instead of min_t()
  - blk-throttle: fix lower bps rate by throtl_trim_slice()
  - block: flush all throttled bios when deleting the cgroup
  - jbd2: increase IO priority of checkpoint
  - blk-throttle: don't take carryover for prioritized processing of metadata
  - blk-throttle: support prioritized processing of metadata
  - blk-throttle: fix lower control under super low iops limit
  - gfs2: fiemap page fault fix
  - x86/apic: Disable x2apic on resume if the kernel expects so
  - USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts
  - USB: usbcore: Introduce usb_bulk_msg_killable()
  - dmaengine: idxd: Fix possible invalid memory access after FLR
  - drm/ioc32: stop speculation on the drm_compat_ioctl path
  - Revert "cpufreq: Fix re-boost issue after hotplugging a CPU"
  - drivers/ub/sentry: change the ub_mem_ras_handler function to always return 0
  - virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false
  - libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply()
  - urma: fix potential parameter overflow in initialization
  - mm/numa_remote: avoid numa_remote lock when onlining pre-onlined memory
  - crypto: af-alg - fix NULL pointer dereference in scatterwalk
  - tracing: Fix soft lockup when lseeking trace file
  - urma: query resource options by id.
  - bonding: remove unused bond_is_first_slave and bond_is_last_slave macros
  - net: bonding: fix use-after-free in bond_xmit_broadcast()
  - bonding: do not set usable_slaves for broadcast mode
  - net: bonding: update the slave array for broadcast mode
  - crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed
  - net/sched: cls_flow: fix NULL pointer dereference on shared blocks
  - net: sched: act_csum: validate nested VLAN headers
  - netfilter: ip6t_eui64: reject invalid MAC header for all packets
  - wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler()
  - xfrm: esp: avoid in-place decrypt on shared skb frags
  - net/sched: sch_netem: fix out-of-bounds access in packet corruption
  - esp: fix skb leak with espintcp and async crypto
  - xfrm: Fix the usage of skb->sk
  - net/sched: cls_fw: fix NULL dereference of "old" filters before change()
  - net/sched: cls_fw: fix NULL pointer dereference on shared blocks
  - mm: memcontrol: don't throttle dying tasks on memory.high
  - futex: Clear stale exiting pointer in futex_lock_pi() retry path
  - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib
  - EDAC/mc: Fix error path ordering in edac_mc_alloc()
  - perf/x86/intel/uncore: Skip discovery table for offline dies


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-145.3.13.143
changelog:
  - !22970 sync OLK-6.6 CVE bugfix LTS from tag 6.6.0-154.0.0 to 6.6.0-155.0.0
  - Revert "net: unic: adapt to the change for ETS tsa and bw configuration permission"
  - Revert "net: unic: Notify MAMI when the LACP status changes"
  - Revert "net: unic: The unsupported VL rate limit value is displayed as 0"
  - Revert "driver core: enforce device_lock for driver_match_device()"
  - gpio: omap: do not register driver in probe()
  - vsock/test: verify socket options after setting them
  - net: sfp: Fix quirk for Ubiquiti U-Fiber Instant SFP module
  - scsi: qla2xxx: Query FW again before proceeding with login
  - scsi: qla2xxx: Allow recovery for tape devices
  - wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon()
  - nilfs2: Fix potential block overflow that cause system hang
  - crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req
  - crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly
  - crypto: octeontx - Fix length check to avoid truncation in ucode_load_store
  - Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXB
  - driver core: enforce device_lock for driver_match_device()
  - usb: typec: ucsi: skip connector validation before init
  - usb: typec: ucsi: validate connector number in ucsi_notify_common()
  - nouveau/dpcd: return EBUSY for aux xfer if the device is asleep
  - ip6_tunnel: clear skb2->cb[] in ip4ip6_err()
  - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()
  - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak
  - net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback
  - lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl()
  - crypto: pcrypt - Fix handling of MAY_BACKLOG requests
  - dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler
  - dpaa2-switch: do not clear any interrupts automatically
  - wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom
  - ALSA: hda/realtek: Really fix headset mic for TongFang X6AR55xU.
  - spi: tegra114: Preserve SPI mode bits in def_command1_reg
  - spi: tegra: Fix a memory leak in tegra_slink_probe()
  - btrfs: fix racy bitfield write in btrfs_clear_space_info_full()
  - hwmon: (occ) Mark occ_init_attribute() as __printf
  - drm/mgag200: fix mgag200_bmc_stop_scanout()
  - net: ethernet: adi: adin1110: Check return value of devm_gpiod_get_optional() in adin1110_check_spi()
  - tipc: use kfree_sensitive() for session key material
  - net: don't touch dev->stats in BPF redirect paths
  - dpaa2-switch: add bounds check for if_id in IRQ handler
  - net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup
  - net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup
  - net: liquidio: Initialize netdev pointer before queue setup
  - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero
  - platform/x86: hp-bioscfg: Skip empty attribute names
  - platform/x86: intel_telemetry: Fix PSS event register mask
  - platform/x86: toshiba_haps: Fix memory leaks in add/remove routines
  - wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice
  - wifi: mac80211: correctly check if CSA is active
  - ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU
  - wifi: cfg80211: Fix bitrate calculation overflow for HE rates
  - ASoC: tlv320adcx140: Propagate error codes during probe
  - ASoC: amd: yc: Fix microphone on ASUS M6500RE
  - ASoC: davinci-evm: Fix reference leak in davinci_evm_probe
  - wifi: mac80211: collect station statistics earlier when disconnect
  - ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free
  - HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101)
  - HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report()
  - HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list
  - netfilter: replace -EEXIST with -EBUSY
  - ALSA: hda/realtek: add HP Laptop 15s-eq1xxx mute LED quirk
  - HID: playstation: Center initial joystick axes to prevent spurious events
  - HID: intel-ish-hid: Reset enum_devices_done before enumeration
  - btrfs: fix reservation leak in some error paths when inserting inline extent
  - HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL
  - HID: intel-ish-hid: Update ishtp bus match to support device ID table
  - LoongArch: Enable exception fixup for specific ADE subcode
  - LoongArch: Set correct protection_map[] for VM_NONE/VM_SHARED
  - block,bfq: fix aux stat accumulation destination
  - net: usb: sr9700: support devices with virtual driver CD
  - wifi: wlcore: ensure skb headroom before skb_push
  - wifi: mac80211: ocb: skip rx_no_sta when interface is not joined
  - tracing: Fix ftrace event field alignments
  - KVM: selftests: Add -U_FORTIFY_SOURCE to avoid some unpredictable test failures
  - binderfs: fix ida_alloc_max() upper bound
  - binder: fix BR_FROZEN_REPLY error log
  - ublk: fix deadlock when reading partition table
  - Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem"
  - ARM: 9468/1: fix memset64() on big-endian
  - rbd: check for EOD after exclusive lock is ensured to be held
  - pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains
  - pmdomain: imx8mp-blk-ctrl: Keep usb phy power domain on for system wakeup
  - pmdomain: imx: gpcv2: Fix the imx8mm gpu hang due to wrong adb400 reset
  - pmdomain: imx8mp-blk-ctrl: Keep gpc power domain on for system wakeup
  - pmdomain: qcom: rpmpd: fix off-by-one error in clamping to the highest state
  - platform/x86: intel_telemetry: Fix swapped arrays in PSS output
  - !22896 arm64/ras: Firmware-first SEI error handling w
  - arm64: openeuler_defconfig: enable CONFIG_ARM64_SYNC_SEI by default
  - ACPI/APEI/arm64: add vendor SEI handling for firmware-first RAS
  - arm64: Add runtime switch to control ESB for SEI synchronization
  - arm64/entry: Add support to synchronize SEI at the exception boundary
  - !22834 config: x86: Fix openeuler_defconfig to resolve CI failure
  - config: x86: Restore CONFIG_INIT_STACK_ALL_{PATTERN,ZERO} in openeuler_defconfig
  - config: x86: Fix CI "checkdefconfig" warning by updating defconfig
  - !22789 critical err extend
  - numa: add critical_err sysfs interface for remote node recovery
  - mm: mark node as critical_err on remote RAS error
  - !22776 revert mpam from openEuler-24.03-LTS_SP3
  - Revert "x86: Decouple resctrl with resctrl-mpam"
  - Revert "x86/resctrl: Fix unused variable warning in cache_alloc_hsw_probe()"
  - Revert "x86/resctrl: Remove hard-coded memory bandwidth limit"
  - Revert "x86/resctrl: Read supported bandwidth sources from CPUID"
  - Revert "x86/resctrl: Implement new mba_MBps throttling heuristic"
  - Revert "x86/resctrl: Remove redundant variable in mbm_config_write_domain()"
  - Revert "x86/resctrl: Free rmid_ptrs from resctrl_exit()"
  - Revert "x86/resctrl: Create helper for RMID allocation and mondata dir creation"
  - Revert "x86/resctrl: Move RMID allocation out of mkdir_rdt_prepare()"
  - Revert "x86/resctrl: Track the closid with the rmid"
  - Revert "x86/resctrl: Access per-rmid structures by index"
  - Revert "x86/resctrl: Allow RMID allocation to be scoped by CLOSID"
  - Revert "x86/resctrl: Track the number of dirty RMID a CLOSID has"
  - Revert "x86/resctrl: Use __set_bit()/__clear_bit() instead of open coding"
  - Revert "x86/resctrl: Allocate the cleanest CLOSID by searching closid_num_dirty_rmid"
  - Revert "x86/resctrl: Move CLOSID/RMID matching and setting to use helpers"
  - Revert "x86/resctrl: Add cpumask_any_housekeeping() for limbo/overflow"
  - Revert "x86/resctrl: Queue mon_event_read() instead of sending an IPI"
  - Revert "x86/resctrl: Allow resctrl_arch_rmid_read() to sleep"
  - Revert "x86/resctrl: Allow arch to allocate memory needed in resctrl_arch_rmid_read()"
  - Revert "x86/resctrl: Make resctrl_mounted checks explicit"
  - Revert "x86/resctrl: Move alloc/mon static keys into helpers"
  - Revert "x86/resctrl: Make rdt_enable_key the arch's decision to switch"
  - Revert "x86/resctrl: Add helpers for system wide mon/alloc capable"
  - Revert "x86/resctrl: Add CPU online callback for resctrl work"
  - Revert "x86/resctrl: Allow overflow/limbo handlers to be scheduled on any-but CPU"
  - Revert "x86/resctrl: Add CPU offline callback for resctrl work"
  - Revert "x86/resctrl: Move domain helper migration into resctrl_offline_cpu()"
  - Revert "x86/resctrl: Separate arch and fs resctrl locks"
  - Revert "x86/resctrl: Remove lockdep annotation that triggers false positive"
  - Revert "Documentation/x86: Document that resctrl bandwidth control units are MiB"
  - Revert "Documentation/x86: Fix title underline length"
  - Revert "x86/resctrl: Fix uninitialized memory read when last CPU of domain goes offline"
  - Revert "x86/resctrl: Switch to new Intel CPU model defines"
  - Revert "x86/resctrl: Pass domain to target CPU"
  - Revert "x86/resctrl: Simplify call convention for MSR update functions"
  - Revert "x86/resctrl: Rename pseudo_lock_event.h to trace.h"
  - Revert "x86/resctrl: Add tracepoint for llc_occupancy tracking"
  - Revert "x86/resctrl: Don't try to free nonexistent RMIDs"
  - Revert "cpu: Move CPU hotplug function declarations into their own header"
  - Revert "cpu: Drop "extern" from function declarations in cpuhplock.h"
  - Revert "cacheinfo: Add function to get cacheinfo for a given CPU and cache level"
  - Revert "x86/resctrl: Replace open coded cacheinfo searches"
  - Revert "x86/resctrl: Prepare for new domain scope"
  - Revert "x86/resctrl: Prepare to split rdt_domain structure"
  - Revert "x86/resctrl: Prepare for different scope for control/monitor operations"
  - Revert "x86/resctrl: Split the rdt_domain and rdt_hw_domain structures"
  - Revert "x86/resctrl: Add node-scope to the options for feature scope"
  - Revert "x86/resctrl: Introduce snc_nodes_per_l3_cache"
  - Revert "x86/resctrl: Block use of mba_MBps mount option on Sub-NUMA Cluster (SNC) systems"
  - Revert "x86/resctrl: Prepare for new Sub-NUMA Cluster (SNC) monitor files"
  - Revert "x86/resctrl: Add a new field to struct rmid_read for summation of domains"
  - Revert "x86/resctrl: Initialize on-stack struct rmid_read instances"
  - Revert "x86/resctrl: Refactor mkdir_mondata_subdir() with a helper function"
  - Revert "x86/resctrl: Allocate a new field in union mon_data_bits"
  - Revert "x86/resctrl: Create Sub-NUMA Cluster (SNC) monitor files"
  - Revert "x86/resctrl: Handle removing directories in Sub-NUMA Cluster (SNC) mode"
  - Revert "x86/resctrl: Fill out rmid_read structure for smp_call*() to read a counter"
  - Revert "x86/resctrl: Make __mon_event_count() handle sum domains"
  - Revert "x86/resctrl: Enable shared RMID mode on Sub-NUMA Cluster (SNC) systems"
  - Revert "x86/resctrl: Detect Sub-NUMA Cluster (SNC) mode"
  - Revert "x86/resctrl: Update documentation with Sub-NUMA cluster changes"
  - Revert "x86/resctrl: Fix arch_mbm_* array overrun on SNC"
  - Revert "x86/resctrl: Avoid overflow in MB settings in bw_validate()"
  - Revert "x86/resctrl: Annotate get_mem_config() functions as __init"
  - Revert "x86/resctrl: Slightly clean-up mbm_config_show()"
  - Revert "x86/resctrl: Support Sub-NUMA cluster mode SNC6"
  - Revert "x86/resctrl: Use kthread_run_on_cpu()"
  - Revert "x86/resctrl: Introduce resctrl_file_fflags_init() to initialize fflags"
  - Revert "x86/resctrl: Prepare for per-CTRL_MON group mba_MBps control"
  - Revert "x86/resctrl: Modify update_mba_bw() to use per CTRL_MON group event"
  - Revert "x86/resctrl: Compute memory bandwidth for all supported events"
  - Revert "x86/resctrl: Make mba_sc use total bandwidth if local is not supported"
  - Revert "x86/resctrl: Add "mba_MBps_event" file to CTRL_MON directories"
  - Revert "x86/resctrl: Add write option to "mba_MBps_event" file"
  - Revert "x86/resctrl: Document the new "mba_MBps_event" file"
  - Revert "x86/resctrl: Fix allocation of cleanest CLOSID on platforms with no monitors"
  - Revert "x86/resctrl: Add a helper to avoid reaching into the arch code resource list"
  - Revert "x86/resctrl: Remove fflags from struct rdt_resource"
  - Revert "x86/resctrl: Use schema type to determine how to parse schema values"
  - Revert "x86/resctrl: Use schema type to determine the schema format string"
  - Revert "x86/resctrl: Remove data_width and the tabular format"
  - Revert "x86/resctrl: Add max_bw to struct resctrl_membw"
  - Revert "x86/resctrl: Generate default_ctrl instead of sharing it"
  - Revert "x86/resctrl: Add helper for setting CPU default properties"
  - Revert "x86/resctrl: Remove rdtgroup from update_cpu_closid_rmid()"
  - Revert "x86/resctrl: Expose resctrl fs's init function to the rest of the kernel"
  - Revert "x86/resctrl: Move rdt_find_domain() to be visible to arch and fs code"
  - Revert "x86/resctrl: Move resctrl types to a separate header"
  - Revert "x86/resctrl: Add an arch helper to reset one resource"
  - Revert "x86/resctrl: Move monitor exit work to a resctrl exit call"
  - Revert "x86/resctrl: Move monitor init work to a resctrl init call"
  - Revert "x86/resctrl: Rewrite and move the for_each_*_rdt_resource() walkers"
  - Revert "x86/resctrl: Move the is_mbm_*_enabled() helpers to asm/resctrl.h"
  - Revert "x86/resctrl: Add resctrl_arch_is_evt_configurable() to abstract BMEC"
  - Revert "x86/resctrl: Change mon_event_config_{read,write}() to be arch helpers"
  - Revert "x86/resctrl: Move mba_mbps_default_event init to filesystem code"
  - Revert "x86/resctrl: Move mbm_cfg_mask to struct rdt_resource"
  - Revert "x86/resctrl: Add resctrl_arch_ prefix to pseudo lock functions"
  - Revert "x86/resctrl: Allow an architecture to disable pseudo lock"
  - Revert "x86/resctrl: Make prefetch_disable_bits belong to the arch code"
  - Revert "x86/resctrl: Make resctrl_arch_pseudo_lock_fn() take a plr"
  - Revert "x86/resctrl: Move RFTYPE flags to be managed by resctrl"
  - Revert "x86/resctrl: Handle throttle_mode for SMBA resources"
  - Revert "x86/resctrl: Move get_config_index() to a header"
  - Revert "x86/resctrl: Move get_{mon,ctrl}_domain_from_cpu() to live with their callers"
  - Revert "cpumask: kernel-doc cleanups and additions"
  - Revert "cpumask: add cpumask_any_and_but()"
  - Revert "cpumask: add cpumask_weight_andnot()"
  - Revert "cpumask: Introduce cpumask_first_and_and()"
  - Revert "cpumask: Switch from inline to __always_inline"
  - Revert "cpumask: Relax cpumask_any_but()"
  - Revert "find: Add find_first_andnot_bit()"
  - Revert "cpumask: Add cpumask_{first,next}_andnot() API"
  - Revert "ptrace: Convert ptrace_attach() to use lock guards"
  - Revert "kernfs: sysfs: support custom llseek method for sysfs entries"
  - Revert "kernfs: Convert kernfs_walk_ns() from strlcpy() to strscpy()"
  - Revert "kernfs: Convert kernfs_name_locked() from strlcpy() to strscpy()"
  - Revert "kernfs: mount: Remove unnecessary ‘NULL’ values from knparent"
  - Revert "kernfs: Acquire kernfs_rwsem in kernfs_notify_workfn()."
  - Revert "kernfs: Acquire kernfs_rwsem in kernfs_get_parent_dentry()."
  - Revert "kernfs: Acquire kernfs_rwsem in kernfs_node_dentry()."
  - Revert "kernfs: Convert kernfs_path_from_node_locked() from strlcpy() to strscpy()"
  - Revert "kernfs: Use RCU to access kernfs_node::parent."
  - Revert "kernfs: Use RCU to access kernfs_node::name."
  - Revert "kernfs: annotate different lockdep class for of->mutex of writable files"
  - Revert "kernfs: Drop kernfs_rwsem while invoking lookup_positive_unlocked()."
  - Revert "kernfs: Move dput() outside of the RCU section."
  - Revert "x86/resctrl: Optimize cpumask_any_housekeeping()"
  - Revert "x86/resctrl: Remove the limit on the number of CLOSID"
  - Revert "x86/resctrl: Rename resctrl_sched_in() to begin with "resctrl_arch_""
  - Revert "x86/resctrl: Check all domains are offline in resctrl_exit()"
  - Revert "x86/resctrl: Resctrl_exit() teardown resctrl but leave the mount point"
  - Revert "x86/resctrl: Drop __init/__exit on assorted symbols"
  - Revert "x86/resctrl: Move is_mba_sc() out of core.c"
  - Revert "x86/resctrl: Add end-marker to the resctrl_event_id enum"
  - Revert "x86/resctrl: Expand the width of domid by replacing mon_data_bits"
  - Revert "x86/resctrl: Split trace.h"
  - Revert "x86/resctrl: Add 'resctrl' to the title of the resctrl documentation"
  - Revert "fs/resctrl: Add boiler plate for external resctrl code"
  - Revert "x86/resctrl: Move the filesystem bits to headers visible to fs/resctrl"
  - Revert "x86/resctrl: Move enum resctrl_event_id to resctrl.h"
  - Revert "x86/resctrl: Fix types in resctrl_arch_mon_ctx_{alloc,free}() stubs"
  - Revert "x86/resctrl: Move pseudo lock prototypes to include/linux/resctrl.h"
  - Revert "x86/resctrl: Squelch whitespace anomalies in resctrl core code"
  - Revert "x86/resctrl: Prefer alloc(sizeof(*foo)) idiom in rdt_init_fs_context()"
  - Revert "x86/resctrl: Relax some asm #includes"
  - Revert "x86/resctrl: Always initialise rid field in rdt_resources_all[]"
  - Revert "x86/resctrl: Fix rdtgroup_mkdir()'s unlocked use of kernfs_node::name"
  - Revert "x86,fs/resctrl: Move the resctrl filesystem code to live in /fs/resctrl"
  - Revert "MAINTAINERS: Add reviewers for fs/resctrl"
  - Revert "fs/resctrl: Restore the rdt_last_cmd_clear() calls after acquiring rdtgroup_mutex"
  - Revert "x86,fs/resctrl: Remove inappropriate references to cacheinfo in the resctrl subsystem"
  - Revert "resctrl: get rid of pointless debugfs_file_{get,put}()"
  - Revert "fs/resctrl: Eliminate false positive lockdep warning when reading SNC counters"
  - Revert "fs/resctrl: Optimize code in rdt_get_tree()"
  - Revert "x86/resctrl: Support Sub-NUMA Cluster (SNC) mode on Clearwater Forest"
  - Revert "x86,fs/resctrl: Consolidate monitor event descriptions"
  - Revert "x86,fs/resctrl: Replace architecture event enabled checks"
  - Revert "x86/resctrl: Remove the rdt_mon_features global variable"
  - Revert "x86,fs/resctrl: Prepare for more monitor events"
  - !22703 sync pr 21834 22206 from OLK-6.6: net: add sockopt TCP_UBS_HANDSHAKE
  - !22727 sync OLK-6.6 CVE bugfix LTS from tag 6.6.0-152.0.0 to 6.6.0-154.0.0
  - Bluetooth: hci_sync: annotate data-races around hdev->req_status
  - Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ
  - fbcon: check return value of con2fb_acquire_newinfo()
  - media: pvrusb2: fix URB leak in pvr2_send_request_ex
  - unshare: fix unshare_fs() handling
  - bridge: br_nd_send: validate ND option lengths
  - obmm: add VMA access for ptrace/GDB on PFNMAP regions
  - obmm: support VMA split with ownership-aligned attributes
  - obmm: refactor ownership tracking for PMD-granularity support
  - obmm: fix PTE protection bits for READWRITE mappings
  - mm: export split_vma for module use
  - USB: core: Limit the length of unkillable synchronous timeouts
  - udp: Fix wildcard bind conflict check when using hash2
  - tcp: Rearrange tests in inet_csk_bind_conflict().
  - usb: dwc3: gadget: Move vbus draw to workqueue context
  - usb: class: cdc-wdm: fix reordering issue in read code path
  - x86,fs/resctrl: Prepare for more monitor events
  - x86/resctrl: Remove the rdt_mon_features global variable
  - x86,fs/resctrl: Replace architecture event enabled checks
  - x86,fs/resctrl: Consolidate monitor event descriptions
  - x86/resctrl: Support Sub-NUMA Cluster (SNC) mode on Clearwater Forest
  - fs/resctrl: Optimize code in rdt_get_tree()
  - fs/resctrl: Eliminate false positive lockdep warning when reading SNC counters
  - resctrl: get rid of pointless debugfs_file_{get,put}()
  - x86,fs/resctrl: Remove inappropriate references to cacheinfo in the resctrl subsystem
  - fs/resctrl: Restore the rdt_last_cmd_clear() calls after acquiring rdtgroup_mutex
  - MAINTAINERS: Add reviewers for fs/resctrl
  - x86,fs/resctrl: Move the resctrl filesystem code to live in /fs/resctrl
  - x86/resctrl: Fix rdtgroup_mkdir()'s unlocked use of kernfs_node::name
  - x86/resctrl: Always initialise rid field in rdt_resources_all[]
  - x86/resctrl: Relax some asm #includes
  - x86/resctrl: Prefer alloc(sizeof(*foo)) idiom in rdt_init_fs_context()
  - x86/resctrl: Squelch whitespace anomalies in resctrl core code
  - x86/resctrl: Move pseudo lock prototypes to include/linux/resctrl.h
  - x86/resctrl: Fix types in resctrl_arch_mon_ctx_{alloc,free}() stubs
  - x86/resctrl: Move enum resctrl_event_id to resctrl.h
  - x86/resctrl: Move the filesystem bits to headers visible to fs/resctrl
  - fs/resctrl: Add boiler plate for external resctrl code
  - x86/resctrl: Add 'resctrl' to the title of the resctrl documentation
  - x86/resctrl: Split trace.h
  - x86/resctrl: Expand the width of domid by replacing mon_data_bits
  - x86/resctrl: Add end-marker to the resctrl_event_id enum
  - x86/resctrl: Move is_mba_sc() out of core.c
  - x86/resctrl: Drop __init/__exit on assorted symbols
  - x86/resctrl: Resctrl_exit() teardown resctrl but leave the mount point
  - x86/resctrl: Check all domains are offline in resctrl_exit()
  - x86/resctrl: Rename resctrl_sched_in() to begin with "resctrl_arch_"
  - x86/resctrl: Remove the limit on the number of CLOSID
  - x86/resctrl: Optimize cpumask_any_housekeeping()
  - kernfs: Move dput() outside of the RCU section.
  - kernfs: Drop kernfs_rwsem while invoking lookup_positive_unlocked().
  - kernfs: annotate different lockdep class for of->mutex of writable files
  - kernfs: Use RCU to access kernfs_node::name.
  - kernfs: Use RCU to access kernfs_node::parent.
  - kernfs: Convert kernfs_path_from_node_locked() from strlcpy() to strscpy()
  - kernfs: Acquire kernfs_rwsem in kernfs_node_dentry().
  - kernfs: Acquire kernfs_rwsem in kernfs_get_parent_dentry().
  - kernfs: Acquire kernfs_rwsem in kernfs_notify_workfn().
  - kernfs: mount: Remove unnecessary ‘NULL’ values from knparent
  - kernfs: Convert kernfs_name_locked() from strlcpy() to strscpy()
  - kernfs: Convert kernfs_walk_ns() from strlcpy() to strscpy()
  - kernfs: sysfs: support custom llseek method for sysfs entries
  - ptrace: Convert ptrace_attach() to use lock guards
  - cpumask: Add cpumask_{first,next}_andnot() API
  - find: Add find_first_andnot_bit()
  - cpumask: Relax cpumask_any_but()
  - cpumask: Switch from inline to __always_inline
  - cpumask: Introduce cpumask_first_and_and()
  - cpumask: add cpumask_weight_andnot()
  - cpumask: add cpumask_any_and_but()
  - cpumask: kernel-doc cleanups and additions
  - x86/resctrl: Move get_{mon,ctrl}_domain_from_cpu() to live with their callers
  - x86/resctrl: Move get_config_index() to a header
  - x86/resctrl: Handle throttle_mode for SMBA resources
  - x86/resctrl: Move RFTYPE flags to be managed by resctrl
  - x86/resctrl: Make resctrl_arch_pseudo_lock_fn() take a plr
  - x86/resctrl: Make prefetch_disable_bits belong to the arch code
  - x86/resctrl: Allow an architecture to disable pseudo lock
  - x86/resctrl: Add resctrl_arch_ prefix to pseudo lock functions
  - x86/resctrl: Move mbm_cfg_mask to struct rdt_resource
  - x86/resctrl: Move mba_mbps_default_event init to filesystem code
  - x86/resctrl: Change mon_event_config_{read,write}() to be arch helpers
  - x86/resctrl: Add resctrl_arch_is_evt_configurable() to abstract BMEC
  - x86/resctrl: Move the is_mbm_*_enabled() helpers to asm/resctrl.h
  - x86/resctrl: Rewrite and move the for_each_*_rdt_resource() walkers
  - x86/resctrl: Move monitor init work to a resctrl init call
  - x86/resctrl: Move monitor exit work to a resctrl exit call
  - x86/resctrl: Add an arch helper to reset one resource
  - x86/resctrl: Move resctrl types to a separate header
  - x86/resctrl: Move rdt_find_domain() to be visible to arch and fs code
  - x86/resctrl: Expose resctrl fs's init function to the rest of the kernel
  - x86/resctrl: Remove rdtgroup from update_cpu_closid_rmid()
  - x86/resctrl: Add helper for setting CPU default properties
  - x86/resctrl: Generate default_ctrl instead of sharing it
  - x86/resctrl: Add max_bw to struct resctrl_membw
  - x86/resctrl: Remove data_width and the tabular format
  - x86/resctrl: Use schema type to determine the schema format string
  - x86/resctrl: Use schema type to determine how to parse schema values
  - x86/resctrl: Remove fflags from struct rdt_resource
  - x86/resctrl: Add a helper to avoid reaching into the arch code resource list
  - x86/resctrl: Fix allocation of cleanest CLOSID on platforms with no monitors
  - x86/resctrl: Document the new "mba_MBps_event" file
  - x86/resctrl: Add write option to "mba_MBps_event" file
  - x86/resctrl: Add "mba_MBps_event" file to CTRL_MON directories
  - x86/resctrl: Make mba_sc use total bandwidth if local is not supported
  - x86/resctrl: Compute memory bandwidth for all supported events
  - x86/resctrl: Modify update_mba_bw() to use per CTRL_MON group event
  - x86/resctrl: Prepare for per-CTRL_MON group mba_MBps control
  - x86/resctrl: Introduce resctrl_file_fflags_init() to initialize fflags
  - x86/resctrl: Use kthread_run_on_cpu()
  - x86/resctrl: Support Sub-NUMA cluster mode SNC6
  - x86/resctrl: Slightly clean-up mbm_config_show()
  - x86/resctrl: Annotate get_mem_config() functions as __init
  - x86/resctrl: Avoid overflow in MB settings in bw_validate()
  - x86/resctrl: Fix arch_mbm_* array overrun on SNC
  - x86/resctrl: Update documentation with Sub-NUMA cluster changes
  - x86/resctrl: Detect Sub-NUMA Cluster (SNC) mode
  - x86/resctrl: Enable shared RMID mode on Sub-NUMA Cluster (SNC) systems
  - x86/resctrl: Make __mon_event_count() handle sum domains
  - x86/resctrl: Fill out rmid_read structure for smp_call*() to read a counter
  - x86/resctrl: Handle removing directories in Sub-NUMA Cluster (SNC) mode
  - x86/resctrl: Create Sub-NUMA Cluster (SNC) monitor files
  - x86/resctrl: Allocate a new field in union mon_data_bits
  - x86/resctrl: Refactor mkdir_mondata_subdir() with a helper function
  - x86/resctrl: Initialize on-stack struct rmid_read instances
  - x86/resctrl: Add a new field to struct rmid_read for summation of domains
  - x86/resctrl: Prepare for new Sub-NUMA Cluster (SNC) monitor files
  - x86/resctrl: Block use of mba_MBps mount option on Sub-NUMA Cluster (SNC) systems
  - x86/resctrl: Introduce snc_nodes_per_l3_cache
  - x86/resctrl: Add node-scope to the options for feature scope
  - x86/resctrl: Split the rdt_domain and rdt_hw_domain structures
  - x86/resctrl: Prepare for different scope for control/monitor operations
  - x86/resctrl: Prepare to split rdt_domain structure
  - x86/resctrl: Prepare for new domain scope
  - x86/resctrl: Replace open coded cacheinfo searches
  - cacheinfo: Add function to get cacheinfo for a given CPU and cache level
  - cpu: Drop "extern" from function declarations in cpuhplock.h
  - cpu: Move CPU hotplug function declarations into their own header
  - x86/resctrl: Don't try to free nonexistent RMIDs
  - x86/resctrl: Add tracepoint for llc_occupancy tracking
  - x86/resctrl: Rename pseudo_lock_event.h to trace.h
  - x86/resctrl: Simplify call convention for MSR update functions
  - x86/resctrl: Pass domain to target CPU
  - x86/resctrl: Switch to new Intel CPU model defines
  - x86/resctrl: Fix uninitialized memory read when last CPU of domain goes offline
  - Documentation/x86: Fix title underline length
  - Documentation/x86: Document that resctrl bandwidth control units are MiB
  - x86/resctrl: Remove lockdep annotation that triggers false positive
  - x86/resctrl: Separate arch and fs resctrl locks
  - x86/resctrl: Move domain helper migration into resctrl_offline_cpu()
  - x86/resctrl: Add CPU offline callback for resctrl work
  - x86/resctrl: Allow overflow/limbo handlers to be scheduled on any-but CPU
  - x86/resctrl: Add CPU online callback for resctrl work
  - x86/resctrl: Add helpers for system wide mon/alloc capable
  - x86/resctrl: Make rdt_enable_key the arch's decision to switch
  - x86/resctrl: Move alloc/mon static keys into helpers
  - x86/resctrl: Make resctrl_mounted checks explicit
  - x86/resctrl: Allow arch to allocate memory needed in resctrl_arch_rmid_read()
  - x86/resctrl: Allow resctrl_arch_rmid_read() to sleep
  - x86/resctrl: Queue mon_event_read() instead of sending an IPI
  - x86/resctrl: Add cpumask_any_housekeeping() for limbo/overflow
  - x86/resctrl: Move CLOSID/RMID matching and setting to use helpers
  - x86/resctrl: Allocate the cleanest CLOSID by searching closid_num_dirty_rmid
  - x86/resctrl: Use __set_bit()/__clear_bit() instead of open coding
  - x86/resctrl: Track the number of dirty RMID a CLOSID has
  - x86/resctrl: Allow RMID allocation to be scoped by CLOSID
  - x86/resctrl: Access per-rmid structures by index
  - x86/resctrl: Track the closid with the rmid
  - x86/resctrl: Move RMID allocation out of mkdir_rdt_prepare()
  - x86/resctrl: Create helper for RMID allocation and mondata dir creation
  - x86/resctrl: Free rmid_ptrs from resctrl_exit()
  - x86/resctrl: Remove redundant variable in mbm_config_write_domain()
  - x86/resctrl: Implement new mba_MBps throttling heuristic
  - x86/resctrl: Read supported bandwidth sources from CPUID
  - x86/resctrl: Remove hard-coded memory bandwidth limit
  - x86/resctrl: Fix unused variable warning in cache_alloc_hsw_probe()
  - x86: Decouple resctrl with resctrl-mpam
  - crypto: hisilicon - remove unused and non-public APIs for qm and sec
  - crypto: hisilicon/qm - drop redundant variable initialization
  - crypto: hisilicon/qm - remove else after return
  - crypto: hisilicon/qm - add const qualifier to info_name in struct qm_cmd_dump_item
  - crypto: hisilicon - fix the format string type error
  - crypto: hisilicon/sec2 - prevent req used-after-free for sec
  - crypto: hisilicon - add device load query functionality to debugfs
  - crypto: hisilicon/qm - increase wait time for mailbox
  - crypto: hisilicon/qm - obtain the mailbox configuration at one time
  - crypto: hisilicon/qm - remove unnecessary code in qm_mb_write()
  - Revert "crypto: hisilicon/qm - obtain the mailbox configuration at one time"
  - Revert "hisi_acc_vfio_pci: obtain the mailbox configuration at one time"
  - crypto: hisilicon/qm - move the barrier before writing to the mailbox register
  - crypto: hisilicon/zip - add lz4 algorithm for hisi_zip
  - virtCCA-Live-Migration: Add host agent support for CVM live migration
  - fix migvm_queue_dev_mmap buffer check
  - gpiolib: acpi: Fix potential out-of-boundary left shift
  - bpf/selftests: test_select_reuseport_kern: Remove unused header
  - Revert "net: Remove conditional threaded-NAPI wakeup based on task state."
  - Revert "net: Allow to use SMP threads for backlog NAPI."
  - ksmbd: fix recursive locking in RPC handle list access
  - pinctrl: qcom: sm8350-lpass-lpi: Merge with SC7280 to fix I2S2 and SWR TX pins
  - mptcp: avoid dup SUB_CLOSED events after disconnect
  - writeback: fix 100% CPU usage when dirtytime_expire_interval is 0
  - drm/msm/a6xx: fix bogus hwcg register updates
  - pinctrl: lpass-lpi: implement .get_direction() for the GPIO driver
  - ALSA: usb-audio: Fix missing unlock at error path of maxpacksize check
  - net/sched: act_ife: convert comma to semicolon
  - btrfs: prevent use-after-free on page private data in btrfs_subpage_clear_uptodate()
  - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock
  - wifi: mac80211: move TDLS work to wiphy work
  - ksmbd: Fix race condition in RPC handle list access
  - drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV
  - ksmbd: smbd: fix dma_unmap_sg() nents
  - mei: trace: treat reg parameter as string
  - mm/kfence: randomize the freelist on initialization
  - drm/amdgpu/gfx11: fix wptr reset in KGQ init
  - drm/amdgpu/gfx10: fix wptr reset in KGQ init
  - drm/amdgpu/soc21: fix xclk for APUs
  - drm/imx/tve: fix probe device leak
  - scripts: generate_rust_analyzer: Add compiler_builtins -> core dep
  - flex_proportions: make fprop_new_period() hardirq safe
  - selftests: mptcp: join: fix local endp not being tracked
  - mptcp: only reset subflow errors when propagated
  - scsi: qla2xxx: edif: Fix dma_free_coherent() size
  - gpio: pca953x: mask interrupts in irq shutdown
  - ASoC: amd: yc: Add DMI quirk for Acer TravelMate P216-41-TCO
  - scsi: be2iscsi: Fix a memory leak in beiscsi_boot_get_sinfo()
  - ASoC: fsl: imx-card: Do not force slot width to sample width
  - rust: kbuild: give `--config-path` to `rustfmt` in `.rsi` target
  - riscv: compat: fix COMPAT_UTS_MACHINE definition
  - pinctrl: meson: mark the GPIO controller as sleeping
  - dma/pool: distinguish between missing and exhausted atomic pools
  - gpiolib: acpi: use BIT_ULL() for u64 mask in address space handler
  - ASoC: Intel: sof_es8336: fix headphone GPIO logic inversion
  - scsi: firewire: sbp-target: Fix overflow in sbp_make_tpg()
  - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload
  - net: bridge: fix static key check
  - nfc: nci: Fix race between rfkill and nci_unregister_device().
  - net/mlx5e: Account for netdev stats in ndo_get_stats64
  - net/mlx5e: Report rx_discards_phy via rx_dropped
  - ice: stop counting UDP csum mismatch as rx_errors
  - nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame().
  - rocker: fix memory leak in rocker_world_port_post_fini()
  - net: wwan: t7xx: fix potential skb->frags overflow in RX path
  - ipv6: use the right ifindex when replying to icmpv6 from localhost
  - net: mvpp2: cls: Fix memory leak in mvpp2_ethtool_cls_rule_ins()
  - octeon_ep: Fix memory leak in octep_device_setup()
  - net: bcmasp: fix early exit leak with fixed phy
  - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup()
  - Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work
  - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated
  - net/oenetcls: free sk entry hash on ntuple cleanup
  - sched/fair: Fix overflow in vruntime_eligible()
  - sched/fair: Introduce and use the vruntime_cmp() and vruntime_op() wrappers for wrapped-signed aritmetics
  - sched/fair: Mark m*_vruntime() with __maybe_unused
  - sched/fair: Clear rel_deadline when initializing forked entities
  - Revert "sched/fair: Clear rel_deadline when initializing forked entities"
  - LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODE
  - ceph: add a bunch of missing ceph_path_info initializers
  - blk-cgroup: skip dying blkg in blkcg_activate_policy()
  - urma: fix the panic when ipourma module is repeatedly loaded
  - net: ipa: fix event ring index not programmed for IPA v5.0+
  - net/oenetcls: remove duplicated linux/inet.h include
  - net/oenetcls: fix mode-0 init rollback for ntuple resources
  - net/oenetcls: fix RPS CPU index scaling bias
  - net/oenetcls: Add rps policy switch for phy NIC
  - net/oenetcls: Make OENETCLS default as module
  - net/oenetcls: Support ipv6 for ntuple mode
  - net/oenetcls: Supports rxq multiplexing
  - net/oenetcls: Add local flow NUMA-aware rps
  - net/oenetcls: Fix possible hash collision issue
  - net/oenetcls: Prioritize oenetcls hooks over rps
  - net/oenetcls: Add mode 2 for rps numa affinity
  - usb: cdns3: gadget: fix NULL pointer dereference in ep_queue
  - ptrace: Fix kabi breakage in struct task_struct
  - ptrace: slightly saner 'get_dumpable()' logic
  - urma: Enable RH2D streaming by IPoURMA
  - urma: fix spinlock usage in ubagg_get_seg_info function
  - smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path
  - apei: use blocking notifier for page offline policy chain
  - urma: fix reference count imbalance in ubagg and uburma modules
  - powerpc, perf: Check that current->mm is alive before getting user callchain
  - ub:ubus: Add KABI_RESERVE to struct ub_decoder and message_device
  - ub:ubus: Will not enable decoder if matt jurisdiction is UBFM
  - ub:ubus: change the condition of io decoder creating page table or not
  - net: unic: The unsupported VL rate limit value is displayed as 0
  - net: unic: Notify MAMI when the LACP status changes
  - net: unic: adapt to the change for ETS tsa and bw configuration permission
  - iommu/ummu-core: fix uaf in ummu_core_invalidate_cfg()
  - iommu: Optimize the iommu PLBI Framework
  - iommu/ummu: remove swap operation when ungrant
  - iommu/ummu-core: ummu_fill_pages interface provides GFP flags for memory allocation
  - perf/x86/intel/uncore: Fix die ID init and look up bugs
  - scsi: target: tcm_loop: Drain commands in target_reset handler
  - net: make CONFIG_UB_SOCKET_HANDSHAKE independent of CONFIG_UB_UMS
  - net: add sockopt TCP_UBS_HANDSHAKE


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-145.3.13.143.20260530.1c4ae507d1ee
changelog:
  - !23085 sync CVE LTS and bugfix from OLK-6.6 from 8238b832b9ac to 14ed6c3948b1
  - net: skbuff: preserve shared-frag marker during coalescing
  - net: skbuff: propagate shared-frag marker through frag-transfer helpers
  - powerpc/smp: Add check for kcalloc() failure in parse_thread_groups()


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-145.3.14.145
changelog:
  - !23496 sync CVE LTS and bugfix from OLK-6.6 from 8238b832b9ac to 354122fd6c91
  - urma: refactor connect_bonding from ubcore to ubagg
  - urma: change wk1 to wk2 to send data and add responsibility
  - APEI/GHES: ARM processor Error: don't go past allocated memory
  - mm/vmalloc: prevent RCU stalls in kasan_release_vmalloc_node
  - obmm: validate VMA identity via vm_ops before accessing vm_file
  - obmm: add PMD huge entry support for ptrace/GDB vma access
  - obmm: fix VMA access for ptrace/GDB on export regions
  - obmm: fix page table walk for ownership permission updates
  - obmm: reject MAP_PRIVATE
  - urma: increase topo max node limit to 1024
  - usb: cdns3: fix role switching during resume
  - iommu/ummu: Fix reading command value in check_pa_continuity_nop_exec
  - iommu/ummu: Fix incorrect xarray index in map_pages error path
  - ACPICA: Fix NULL pointer dereference in acpi_ev_address_space_dispatch()
  - riscv: kvm: fix vector context allocation leak
  - KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0
  - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1
  - io_uring/kbuf: check if target buffer list is still legacy on recycle
  - drm/amdgpu: Fix memory leak in amdgpu_acpi_enumerate_xcc()
  - ext4: move ext4_percpu_param_init() before ext4_mb_init()
  - drm/nouveau: fix u32 overflow in pushbuf reloc bounds check
  - md/bitmap: fix GPF in write_page caused by resize race
  - serial: 8250: Fix TX deadlock when using DMA
  - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()
  - refcount: provide ops for cases when object's memory can be reused
  - urma: fix jetty_grp count boundary check and pass opt_mask to check_jetty_check_dev_cap
  - mm/vmalloc: take vmap_purge_lock in shrinker
  - libceph: prevent potential out-of-bounds reads in process_message_header()
  - sched/cputime: Fix time overflow in cputime_adjust()
  - ub: udma: change default value of set dev name
  - openvswitch: vport: fix self-deadlock on release of tunnel ports
  - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery
  - crypto: authencesn - reject short ahash digests during instance creation
  - net/mlx5: Fix deadlock between devlink lock and esw->wq
  - md/raid5: fix soft lockup in retry_aligned_read()
  - ipmi:ssif: NULL thread on error
  - ipmi:ssif: Clean up kthread on errors
  - net: yt6801: fix link info for yt6801
  - urma: fix main_ue_eid flush ioctl argument
  - net: usb: pegasus: enable basic endpoint checking
  - mm/damon/sysfs-schemes: protect memcg_path kfree() with damon_sysfs_lock
  - bpf-rvi: Fix possible AA deadlock pidns_list_lock
  - RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq()
  - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb()
  - Bluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_complete_evt
  - usb: ulpi: fix memory leak on ulpi_register() error paths
  - usb: ulpi: fix double free in ulpi_register_interface() error path
  - x86/kexec: add a sanity check on previous kernel's ima kexec buffer
  - ima: verify the previous kernel's IMA buffer lies in addressable RAM
  - usb: usblp: fix heap leak in IEEE 1284 device ID via short response
  - usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl
  - mtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show()
  - wifi: rsi: fix kthread lifetime race between self-exit and external-stop
  - vsock/virtio: fix accept queue count leak on transport mismatch
  - net: caif: clear client service pointer on teardown
  - net: qrtr: ns: Fix use-after-free in driver remove()
  - xen-netback: reject zero-queue configuration from guest
  - openeuler_defconfig: disable CONFIG_USERSWAP by default
  - mm/userswap: remove boot param
  - ceph: only d_add() negative dentries when they are unhashed
  - net: hibmcge: move dma_rmb() after dma_sync_single_for_cpu() in RX path
  - net: hibmcge: disable Relaxed Ordering to fix RX packet corruption
  - thermal: core: Fix thermal zone governor cleanup issues
  - soc cache: Fix unsafe shift left
  - urma: fix device change namespace calltrace
  - urma: topology supports parallel planes
  - urma: fix main_ue_eid query table configuration path
  - bpf: Fix variable length stack write over spilled pointers
  - bpf: Do not allow deleting local storage in NMI
  - bpf: Convert bpf_selem_unlink to failable
  - bpf: Convert bpf_selem_link_map to failable
  - bpf: Convert bpf_selem_unlink_map to failable
  - bpf: Select bpf_local_storage_map_bucket based on bpf_local_storage
  - eventfs: Hold eventfs_mutex and SRCU when remount walks events
  - gfs2: Fix use-after-free in iomap inline data write path
  - gfs2: Add metapath_dibh helper
  - erofs: fix inline data read failure for ztailpacking pclusters
  - gfs2: Fix slab-use-after-free in qd_put
  - gfs2: fix memory leaks in gfs2_fill_super error path
  - erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap()
  - erofs: fix the out-of-bounds nameoff handling for trailing dirents
  - ipv4: icmp: fix null-ptr-deref in icmp_build_probe()
  - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data()
  - net: consume xmit errors of GSO frames
  - ub:ubfi: add numa node get from firmware mode
  - urma: fix the scenario-specific message processing interface
  - ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop()
  - arm64: topology: Fix false warning in counters_read_on_cpu() for same-CPU reads
  - cpufreq: CPPC: Update FIE arch_freq_scale in ticks for non-PCC regs
  - cpufreq: CPPC: Factor out cppc_fie_kworker_init()
  - ACPI: CPPC: Factor out and export per-cpu cppc_perf_ctrs_in_pcc_cpu()
  - cpufreq: CPPC: Don't warn if FIE init fails to read counters
  - Revert "cpufreq: CPPC: Don't warn on failing to read perf counters on offline cpus"
  - PM / devfreq: use _visible attribute to replace create/remove_sysfs_files()
  - cpufreq: Replace magic number
  - cpufreq: Update sscanf() to kstrtouint()
  - update to sysfs_emit() for safer buffer handling
  - urma: fix resource leaks in uburma and ubcore error paths
  - ub:ubfi: fix the resource maintenance issue in the ubfi ummu node parsing
  - cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path
  - tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG
  - Bluetooth: SMP: force responder MITM requirements before building the pairing response
  - mm: fix some minor per-VMA lock issues in userfaultfd
  - userfaultfd: use per-vma locks in userfaultfd operations
  - mm: add vma_assert_locked() for !CONFIG_PER_VMA_LOCK
  - userfaultfd: protect mmap_changing with rw_sem in userfaulfd_ctx
  - userfaultfd: fix operator precedence bug in UFFDIO_COPY mode check
  - ub/ubmem-vmmu: optimize prints
  - ub/ubmempfd: update note and optimize format
  - ub/ubdevshm: Fix spelling errors and optimize prints
  - urma: Introduce EID patricia trie for primary EID lookup
  - urma: move capability of querying physical devices from ubcore to ubagg
  - ub:ubus: add error return when send config message
  - iommu/arm-smmu-v3: Fix pgsize_bit for sva domains
  - tools/dma: Add dma_map_sg support
  - dma-mapping: benchmark: add support for dma_map_sg
  - dma-mapping: benchmark: modify the framework to adapt to more map modes
  - net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode
  - net/oenetcls: validate module params and reject zero table sizes
  - net/oenetcls: make rps policy module params read-only
  - net/oenetcls: fix async delete race with pending rule add
  - net/oenetcls: move listen-time tuple resolution to worker context
  - !23145 sync CVE LTS and bugfix from OLK-6.6 from 14ed6c3948b1 to b39d11626963
  - sched: idle: Make skipping governor callbacks more consistent
  - cpuidle: Skip governor when only one idle state is available
  - vxlan: validate ND option lengths in vxlan_na_create
  - net: use skb_header_pointer() for TCPv4 GSO frag_off check
  - ASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put()
  - USB: serial: option: add Telit FN920C04 RNDIS compositions
  - f2fs: fix to avoid mapping wrong physical block for swapfile
  - f2fs: fix zoned block device information initialization
  - f2fs: fix to avoid UAF in f2fs_write_end_io()
  - f2fs: fix IS_CHECKPOINTED flag inconsistency issue caused by concurrent atomic commit and checkpoint writes
  - f2fs: fix out-of-bounds access in sysfs attribute read/write
  - f2fs: fix to add gc count stat in f2fs_gc_range
  - fbdev: smscufx: properly copy ioctl memory to kernelspace
  - fbdev: rivafb: fix divide error in nv3_arb()
  - Revert "wireguard: device: enable threaded NAPI"
  - gpiolib: acpi: Fix gpio count with string references
  - ASoC: fsl_xcvr: fix missing lock in fsl_xcvr_mode_put()
  - ASoC: cs42l43: Correct handling of 3-pole jack load detection
  - platform/x86: panasonic-laptop: Fix sysfs group leak in error path
  - platform/x86/amd/pmc: Add quirk for MECHREVO Wujie 15X Pro
  - ASoC: amd: yc: Add quirk for HP 200 G2a 16
  - ASoC: Intel: sof_es8336: Add DMI quirk for Huawei BOD-WXX9
  - drm/tegra: hdmi: sor: Fix error: variable ‘j’ set but not used
  - romfs: check sb_set_blocksize() return value
  - ASoC: cs35l45: Corrects ASP_TX5 DAPM widget channel
  - ALSA: hda/realtek: Add quirk for Inspur S14-G1
  - gpio: sprd: Change sprd_gpio lock to raw_spin_lock
  - ASoC: amd: yc: Add ASUS ExpertBook PM1503CDA to quirks list
  - ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU
  - PCI: endpoint: Avoid creating sub-groups asynchronously
  - PCI: endpoint: Remove unused field in struct pci_epf_group
  - Revert "driver core: enforce device_lock for driver_match_device()"
  - driver core: enforce device_lock for driver_match_device()


author: laokz <zhangkai@iscas.ac.cn> - 6.6.0-124.0.0.10
changelog:
  - remove riscv64 from ExclusiveArch(no current support).
    This change prevents unnecessary builds on unsupported architectures.


author: ChenYanpan <chenyanpan@xfusion.com> - 23.08.4-2
changelog:
  - use 
    /usr/bin/cmake --build "aarch64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/kf5-ksmtp-23.08.4-2.oe2403sp3.aarch64" /usr/bin/cmake --install "aarch64-openEuler-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 23.08.4-2
changelog:
  - use 
    /usr/bin/cmake --build "aarch64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/kf5-libgravatar-23.08.4-2.oe2403sp3.aarch64" /usr/bin/cmake --install "aarch64-openEuler-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 23.08.4-2
changelog:
  - use 
    /usr/bin/cmake --build "aarch64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/kf5-libkleo-23.08.4-2.oe2403sp3.aarch64" /usr/bin/cmake --install "aarch64-openEuler-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 23.08.4-2
changelog:
  - use 
    /usr/bin/cmake --build "aarch64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/kf5-messagelib-23.08.4-3.oe2403sp3.aarch64" /usr/bin/cmake --install "aarch64-openEuler-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 5.113.0-2
changelog:
  - use 
    /usr/bin/cmake --build "aarch64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/kf5-modemmanager-qt-5.113.0-2.oe2403sp3.aarch64" /usr/bin/cmake --install "aarch64-openEuler-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 5.113.0-2
changelog:
  - use 
    /usr/bin/cmake --build "aarch64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/kf5-plasma-5.113.0-2.oe2403sp3.aarch64" /usr/bin/cmake --install "aarch64-openEuler-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 5.113.0-2
changelog:
  - use 
    /usr/bin/cmake --build "aarch64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/kf5-prison-5.113.0-2.oe2403sp3.aarch64" /usr/bin/cmake --install "aarch64-openEuler-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 5.113.0-2
changelog:
  - use 
    /usr/bin/cmake --build "aarch64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/kf5-purpose-5.113.0-2.oe2403sp3.aarch64" /usr/bin/cmake --install "aarch64-openEuler-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 5.113.0-2
changelog:
  - use 
    /usr/bin/cmake --build "aarch64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/kf5-sonnet-5.113.0-2.oe2403sp3.aarch64" /usr/bin/cmake --install "aarch64-openEuler-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 5.113.0-2
changelog:
  - use 
    /usr/bin/cmake --build "aarch64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    /usr/bin/cmake --build "aarch64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose


author: ChenYanpan <chenyanpan@xfusion.com> - 5.113.0-2
changelog:
  - use 
    /usr/bin/cmake --build "aarch64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/kf5-syntax-highlighting-5.113.0-2.oe2403sp3.aarch64" /usr/bin/cmake --install "aarch64-openEuler-linux-gnu" to fix build failure


author: yangfeng <yangfeng@kylinsec.com.cn> - 2.6.0-2
changelog:
  - KYOS-B: Fix touch screen taskbar button click judged as drag.(#23600)
  - KYOS-F: Other workspace Windows are not displayed by default.
  - KYOS-B: Fixed an issue where recent documents were not sorted.(#24803)
  - KYOS-B: Fixed an issue where the x11 tray icon did not match the size of the icon container, causing the tray icon to display abnormally.(#22117)
  - KYOS-B: Fix Pinyin search failed when /etc/locale.conf is not LANG="zh_CN.UTF-8".(#21369)
  - KYOS-F: Replace "mate-panel --run-dialog" with "kiran-panel --run-dialog".(#24810)


author: luoqing <luoqing@kylinsec.com.cn> - 2.6.0-3
changelog:
  - KYOS-B: Fixed the issue where the taskbar close window used the wrong timestamp.(#26368)
  - KYOS-B: Fix win key popup Start menu does not get focus, can not directly keyboard operation (#21246)
  - KYOS-B: :when resize icon window, it is necessary to consider the impact of the scale factor.The correct resize height is the height of the container multiplied by the scale factor of the container (#30889)


author: yangfeng <yangfeng@kylinsec.com.cn> - 2.6.0-4
changelog:
  - KYOS-B: Fixed an issue where taskbar page-turning ICONS cover each other(#19588)
  - KYOS-B: Fixed the taskbar page-turning ICONS hiding each other when zoom rate was 200
  - KYOS-F: The plugin button loads the icon from the system theme
  - KYOS-B: Fixed xnest connection crash
  - KYOS-B: Fixed an issue where the taskbar does not drag smoothly
  - KYOS-B: Fixed start Menu without icon application drag and drop causes the bottom panel to crash(#34719)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.6.0-8
changelog:
  - KYOS-B: Fix window thumbnails not being fetched by window manager takeover(#56152)
  - KYOS-B: fix some memory leak(#54376)
  - KYOS-B: Fix some related issues in recent documents(#55119)
  - KYOS-F: adding apps to the desktop, copy them to a temporary file and change the permissions.(#37790)
  - KYOS-F: Added configuration items: Fixed application to the taskbar(#37152)
  - KYOS-B: change 'Recently files' to 'Recent files'(#38303)
  - kYOS-B: fix interference caused by tooltip and popup type windows
  - KYOS-F: taskbar add "simply window previewer" mode(only show window title)(#45321) 
  - KYOS-B: Fixed an issue where taskbar page-turning ICONS cover each other(#19588)
  - KYOS-B: Fixed the taskbar page-turning ICONS hiding each other when zoom rate was 200
  - KYOS-F: The plugin button loads the icon from the system theme
  - KYOS-B: Fixed xnest connection crash
  - KYOS-B: Fixed an issue where the taskbar does not drag smoothly
  - KYOS-B: Fixed start Menu without icon application drag and drop causes the bottom panel to crash(#34719)
  - KYOS-B: Fixed the issue where the taskbar close window used the wrong timestamp.(#26368)
  - KYOS-B: Fix win key popup Start menu does not get focus, can not directly keyboard operation (#21246)
  - KYOS-B: :when resize icon window, it is necessary to consider the impact of the scale factor.The correct resize height is the height of the container multiplied by the scale factor of the container (#30889)


author: luoqing <luoqing@kylinsec.com.cn> - 2.5.1-1
changelog:
  - KYOS-F: add Ukey management tool.
  - KYOS-F: added iristar device , supporting iris and facial enroll and identify.
  - KYOS-F: fix some defects.


author: luoqing <luoqing@kylinsec.com.cn> - 2.5.1-4
changelog:
  - KYOS-F: Fix the issue of not obtaining features from the database when deviceSerialNumber is empty


author: luoqing <luoqing@kylinsec.com.cn> - 2.5.2-1
changelog:
  - KYOS-F: Fixed an issue where fish's UKey device could not Verify on arm machines
  - KYOS-F: Remove the context class;
  - KYOS-F: ConfigHelper is responsible for obtaining device configuration information based on the id, and DeviceCreator is responsible for creating the device；
  - KYOS-F: After the vid and pid are obtained, the configuration file is read. The driver name in the configuration file can generate the specific driver object and device object


author: luoqing <luoqing@kylinsec.com.cn> - 2.5.2-3
changelog:
  - KYOS-B: Fixed a crash caused by repeatedly calling disConnectDev in resetUkey and destructor to release the same device handle
  - KYOS-R: Modify the code according to the https://gitee.com/openeuler/kiran-authentication-devices/pulls/17 review opinions
  - KYOS-B: when the iris face integrated device is removed, the memory cannot be released and the process is blocked.When the face iris device object is removed, restart the service to release resources (#25243)
  - KYOS-B: When the driver is enabled, the device is scanned and the corresponding device object is created.When the driver is disabled,the corresponding device object is released. (#25387)
  - KYOS-B: fix file install path error


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.5.2-5
changelog:
  - KYOS-B: delete blank cmake_target_link_directories
  - KYOS-B: remove rpath (#37243)
  - KYOS-F: suitable for zhi ang fingerprint device (#24532)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.5.1-1
changelog:
  - KYOS-F: Update translation file and modify the pam configuration file
  - KYOS-F: Adjust enumeration values to accommodate some of the prompt messages during entry
  - KYOS-F: Supports UKey, Iris,face authentication, support mulit-factory auth,update error count recording mode
  - KYOS-F: Add the Ukey authentication,DeviceAdaptor occupy device timer , Number of user binding feature


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.5.1-3
changelog:
  - KYOS-B: fix terminl authentication type check (#I792B4)
  - KYOS-B: Adjust the number of non-password authentication failures recorded in the PAM configuration file(#I7937W)
  - KYOS-B: Upgrade the permission of some interfaces of the authentication service(#I795QI)
  - KYOS-B: Fixed an authentication failure caused by disabling all authentication modes during multi-factor authentication(#I79I33)
  - KYOS-B: Adjust the authentication sequence(#I79FVY)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.5.1-4
changelog:
  - KYOS-B: Device adapters do not update default devices that do not exist
  - KYOS-B: Multifactor authentication, handling only password authentication
  - KYOS-B: Update the logic of the default authentication device
  - KYOS-B: multi-factor no jump login


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.5.1-6
changelog:
  - KYOS-B: Subdivide the cause of the error and determine whether to record the error according to the cause and mode(#I7DCKL)


author: luoqing <luoqing@kylinsec.com.cn> - 2.2.1-1
changelog:
  - KYOS-F: Add light theme
  - KYOS-F: Fix C99 standard compilation problem and change to gnu99 standard


author: wangyucheng <wangyucheng@kylinsec.om.cn> - 2.3.0-2
changelog:
  - Add some translation & Fix translation file containing build directory
  - KYOS-T: add some translation


author: meizhigang <meizhigang@kylinsec.com.cn> - 2.6.1-10
changelog:
  - KYOS-B: Change the light theme name to Kiran-white (#24747)
  - KYOS-B: Fix coredump while log print in power (#31141)
  - KYOS-B: ref new CI entry point
  - KYOS-B: Fix audio stream volume retain while set mute (#33694)


author: meizhigang <meizhigang@kylinsec.com.cn> - 2.6.1-11
changelog:
  - KYOS-B: Add battery charging and discharging time (#28618)
  - KYOS-B: Fix sys backlight set only in notebook with battery (#31917)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.6.1-24
changelog:
  - KYOS-F: Decrease the priority of override file configurations(#52881)
  - KYOS-F: Marking the configuration as not to be replaced
  - KYOS-B: Enrichment of error messages in pw_history module when changing passwords(#52096)
  - KYOS-B: Fix crash caused by the previous commit due to the existence of a schema but the absence of a color-schema (#35120)
  - KYOS-B: Fix the issue where switching between light and dark themes does not work in Gnome 41 and later versions.(#35120)
  - KYSO-B: Fix the ntp service load order logic error
  - KYSO-B: Fix std::regex can not run in gcc version < 4.9(#48386)
  - KYSO-F: Use glibmm's regex to replace glib's regex
  - KYSO-B: Fix failure to get disk information in virtual machine(#46645)
  - KYOS-B: Fixed the issue where Unglab was not executed in a timely manner, causing subsequent Xclient connections to XServer to fail
  - KYOS-B: fix the graphical and network hardware info no display problem.(#37289)
  - KYOS-B: Remove the duplicate graphical and network hardware info.
  - KYOS-B: The shutdown shortcut cannot be found.(#44337)
  - KYOS-F: add shutdown keybinding
  - KYOS-B: perform adaptive settings when connection status or monitor uid is changed.(#37289)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.6.1-25
changelog:
  - KYOS-B: fix the passwd command compatible problem for KY3.3-9-Server(#46550)
  - KYOS-F: Add icon and cursor theme changing when enable auto switch theme.(#73665)
  - KYOS-F: Modify gtk and icon theme to light theme defaultly.


author: luoqing <luoqing@kylinsec.com.cn> - 2.6.0-6.kb1
changelog:
  - KYOS-B: Fix the issue of setting default selection sidebar errors (#24761)
  - KYOS-B: Fix the issue of ineffective font changes (#25084)
  - KYOS-B: change the light and dark theme name (#24747)
  - KYOS-B: add custom app icon,Error prompt for modifying input shortcut keys (#25199,#25198)
  - KYOS-B: profile mode using kiran-cc-daemon power interface (#25242)
  - KYOS-B: Fix the space before the parameter causing a jump event when the launcher jumps (#24794)
  - KYOS-B: fixed volume tray icon level display not meeting requirements (#25235)


author: luoqing <luoqing@kylinsec.com.cn> - 2.6.1-1.kb1
changelog:
  - KYOS-B: The network connection icon is displayed only in the fully Connected state.The connection icon is not displayed in the ConnectedLinkLocal state (#27750)
  - KYOS-B: fixed an issue where tray page expansion size changed incorrectly when multiple network cards were used (#25239)
  - KYOS-B: fixed incorrect connectivity results when frequent network connectivity checks are triggered (#29475)
  - KYOS-F: Filter conditions are added to the tray status display,and activation icons are displayed only when there are supported activation devices;The tray icon update is triggered when the device status changes to active or disconnected (#29441)
  - KYOS-B: Fix translation of shortcut key types Accessibility
  - KYOS-B: change ci config
  - KYOS-F: New feature to restore font default settings (#20203)


author: luoqing <luoqing@kylinsec.com.cn> - 2.6.1-2.kb1
changelog:
  - KYOS-B: when the tray is initialized, determine whether there is asound card,if not, the volume icon is disabled (#22865)
  - KYOS-B: fix(keybinding):don't convert normal key if use shift modifier in keybinding (#30978)


author: meizhigang <meizhigang@kylinsec.com.cn> - 2.6.1-3
changelog:
  - KYOS-B: Compatible for versions below 5.15
  - KYOS-B: Fix has really battery while it is present (#31917)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.6.1-7
changelog:
  - KYOS-B: Fix Crash caused by mismatch between registered search terms and actual content(#35252)
  - KYOS-B: Adjusting the display style of manually registered search keywords and subfunctional keywords(#35340,#35278)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.6.4-2
changelog:
  - KYOS-B: Fix crash when ipv6 address can't be retrieved(#75993)
  - KYOS-F: Supports dimming the monitor during idle time(#76040)
  - KYOS-F: Supports Meta and Window theme settings(#73665)
  - KYOS-F: Support for sound testing(#73668)
  - KYOS-B: compatible with different versions of open-source cursor to prevent program crashes(#IBV1XG)
  - KYOS-F: Split Screensaver and locking concepts, add support for embedded xscreensaver(#73664)
  - KYOS-F:Fix the problem of web details supporting large layouts.(#72894)
  - KYOS-F:improve code in group plugin.(#73623)
  - KYOS-F: Fix the problem of getting the return value of a device via NetworkManager DBus interface under stress test(#70121)
  - KYOS-B: Fix password input limit of 20（#57392）
  - KYOS-B: power management front-end server version determination to runtime configuration(#52885)
  - KYOS-B: Fixes an issue with determining connection and NIC Mac configuration matches when a connection configuration change is active(#51089)
  - KYOS-B: Fix the message that the tray service is not registered when the tray is registered.(#50967)
  - KYOS-B: shared Networks Add Configuration Invisible (#51089)
  - KYOS-B: shared Networks Add Configuration Invisible(#51089)
  - KYOS-B: Fix the message that the tray service is not registered when the tray is registered.(#50967)
  - KYOS-F: hide privacy_policy(#35818)
  - KYOS-F: adjusting the default configuration of the PG version to the server configuration(#51253)
  - KYOS-B: Fix Control Center NIC duplication when restarting NetworkManager(#50967)
  - KYOS-B: Add DISPLAY as one of the conditions for determining a user process singleton.(#48260)
  - KYOS-B: remove NetworkManager-l2tp Requires
  - KYOS-F: network details page supports multiple IP masks(#46740)
  - KYOS-B: Fix DBusServiceWatcher lifecycle not bound to slot object(#46755)
  - KYOS-B: Fix that the maximum height of KiranCollapse will not be adjusted under the list of available connections in the network plugin(#47197)
  - KYOS-F: network plugin support wired carrier check(#36646)
  - KYOS-F: netowrk plugin support single configuration multiple IP addresses(#46740)
  - KYOS-B:  add Obsoletes kiran-timedate-manager  
  - KYOS-F: fix build in 339
  - KYOS-B: Adapt to Qt5.9.7 NativeScanCode to QtKey
  - KYOS-F: new network card Carrier status check as tray connection condition judgment(#36646)
  - KYOS-F: Reserved idle lock screen related configurations for server versions(#31787)
  - KYOS-B: fix gateway display not configured tray icon show disconnection(#36646)
  - KYOS-B: Fix the issue where the initial letters of certain categories are not capitalized.(#36266)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.6.0-7
changelog:
  - KYOS-F: kylinsec-server set default theme to kiran-dark
  - KYOS-B: remove dependencies(kiran-themes),change dependencies(gvfs-fuse3)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.6.0-9
changelog:
  - KYOS-B: Update kiran-mimeapps.list to adapt to the new default opening method for blank files (#35528)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.6.0-22
changelog:
  - KYOS-F: Setting the default white theme for the desktop version
  - KYOS-F: Override configuration, split screen saver as well as lock screen(#73664)
  - KYOS-B: adjusting gvfs dependency judgments for v6 releases
  - KYOS-B: Increase Server Version Disable DPMS Configuration Priority(#53822)
  - Change configuration only at installation time
  - Fix the issue that executing the post script twice causes the touchpad backend plugin to be disabled
  - Specify configuration file %config(noreplace)
  - KYOS-B: Fix post stage change unlock box power configuration error report
  - KYOS-F: Adjust the default configuration of window screenshot shortcuts to kiran-flameshot
  - KYOS-B: Decrease override file priority(#52881)
  - KYOS-F: adjusting the default configuration of the PG version to the server configuration(#51253)
  - KYOS-F: server versions enable locking on idle by default
  - KYOS-B: fix install error in KY3.3-9
  - KYOS-F: Reserved idle lock screen related configurations for server versions(#31787)
  - KYOS-F: remove kiran-authentication-devices-sdk dependency (#35156)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.6.0.23
changelog:
  - KYOS-F: Add 51_kiran-desktop.gschema.override to distinguish desktop and server.
  - KYOS-B: Add package dependencies xscreensaver for V6(#73664)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.6.0-24
changelog:
  - KYOS-B: Enable split screen saver and lock screen only for V6 version
  - KYOS-B: remove dep initial-setup-gui


author: yuanxing <yuanxing@kylinsec.com.cn> - 2.6.0-2
changelog:
  - KYOS-B: add icon of gnome software with correct icon name in Kiran.(#28021)
  - KYOS-B: update icons to smaller size to fix the slowly problem when open caja.(#33978)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.4.0-4
changelog:
  - fix zlog use program log rotation lock rules to avoid log file is locked by other process(b: 113752)
  - change cmake minimum version to range


author: yuanxing <yuanxing@kylinsec.com.cn> - 2.6.1-1.kb2
changelog:
  - KYOS-F: Fix error caused by missing overload implementation on lower version C++standard library.
  - KYOS-F: Adapt to lower version STDC++.
  - KYOS-F: Fix the sonarqube bugs.(#76290)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.5.1-8.kb1
changelog:
  - KYOS-B: fix the issue of manual scaling not taking effect(#25011)
  - KYOS-B: fix issues caused by automatic login timeout(#25015)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.5.1-11
changelog:
  - KYOS-B: Fix ci issues
  - KYOS-B: Add virtual keyboard detection(#29712)
  - KYOS-B: incorrect scaling cursor size(#29286)
  - KYOS-B: fix untranslated text from polkit-agent(#29452)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.5.1-13
changelog:
  - KYOS-B: Adjusting the Greeter Control Center plugin to use a new version of the interface for keyword search(#35280)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.5.2-4
changelog:
  - KYOS-F: Fix destructor crash when VirtualKeyboard is not initialized.(#71359)
  - KYOS-F: greeter and unlock dialog support fullname(#40540)
  - KYOS-F: Add detection for whether to install a virtual keyboard
  - KYOS-F: Hide triple-authorized users by default(#53743)
  - KYOS-B: processing screen from scratch, configuration screen(#51999)
  - Fix the power menu showing on the top left when disabling all power options
  - KYOS-B: Fix the crash caused by receiving two signals from Polkit completion(#49904)
  - KYOS-B: When disabling all power settings, the power button should not be displayed(#49764)
  - KYOS-B: Add DISPLAY as one of the conditions for determining a user process singleton.(#48260)
  - KYOS-F: Support default preferred login user configurable(#47534)
  - KYOS-B: fix crash in xserver without randr (#41284)
  - KYOS-B: Fix the issue of lowercase first letters in sub-feature items(#36266)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.4.0-20
changelog:
  - KYOS-B: replace ParentStyle with QProxyStyle and adapt to QT5.9.7 version
  - KYOS-B: theme support custom library name
  - KYOS-B: Adapting to lower version Qt, autorcc not correctly associating dependencies
  - KYOS-B: Fix theme error when session dbus service is not registered(#35760)
  - kYOS-B: fix build in Qt5.9.2(#45382)
  - KYOS-B: adjust the height of the QCompleter Popup pop-up(#42329)
  - KYOS-B: fix the failure of dynamic theme switching in low version of Qt.(#51353)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.2.3-6
changelog:
  - KYOS-B: Fix abnormal situations where windows managed by the window manager are stacked on top of ScreenSaver(#41399)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.2.3-12
changelog:
  - KYOS-B: Fix the problem of closing the screensaver window in idle shutdown/logout process after locking the screen


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.2.4-1
changelog:
  - KYOS-B: fix sonarqube scanning problem.
  - KYOS-B: Fix conflict with Display dims when idle
  - KYOS-F: Support XEmbed Screensaver theme(#78377,#73664)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.2.4-2
changelog:
  - rebuild for KiranUI-2.6-next
  - KYOS-B: Fix AutoRestart not working due to disabling session management


author: tangjie02 <tangjie02@kylinsec.com.cn> - 2.5.0-7
changelog:
  - KYOS-B: Fix fork other session program failed by adding GDK_BACKEND and QT_QPA_FLATFORM environment variables.


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.5.0-14
changelog:
  - KYOS-B: Session management pulled up child process forwards standard errors to the master process(#50844)
  - KYOS-B: Repair the situation that Key cannot be matched when receiving QGSettings changed signals(#51570)
  - KYOS-F: Add kiran-session-quit to support shutdown shortcut (#44337)
  - KYOS-B: fix build error
  - KYOS-B: extend the dbus call timeout to 10s to fix the restart failure caused by the CanReboot call timeout
  - KYOS-B: fix the problem that inhibitor window is show when the number of inhibitor is zero.(#24564)
  - KYOS-B: repair defects about theme not right when into livecd mode (#8146)
  - KYOS-B: change QCoreApplication to QGui/QApplication to fix the issue of SM not auto exit when XDMCP connection is disconnected.(#31631,#31796)


author: Build System <tangzhengliang1@huawei.com> - 1.0.0-1
changelog:
  - Initial package build
  - Provide libknet_core.so, libknet_frame.so, libdpstack.so
  - Include knet_mp_daemon binary
  - Add configuration files for knet communication, rsyslog, and logrotate


author: ChenYanpan <chenyanpan@xfusion.com> - 1.5.2-2
changelog:
  - use 
    /usr/bin/cmake --build "aarch64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/ktextaddons-1.5.2-2.oe2403sp3.aarch64" /usr/bin/cmake --install "aarch64-openEuler-linux-gnu" to fix build failure


author: shenzhongwei <shenzhongwei@kylinos.cn> - 1.29.1-10
changelog:
  - TypeLbugfix
  - CVE:NA
  - SUG:NA
  - DECS:remove the architecture judgment in the patches section;
         include all patches in the source package.


author: jade_t <yzd50036@gmail.com> - 1.29.1-17
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix the installation conflict between kubernetes-kubelet and kubernetes-node


author: lvfei <lvfei@kylinos.cn> - 1.0.34-4
changelog:
  - Type:bugfix
  - CVE:
  - SUG:NA
  - DESC: add patch:0001-update-desktop-file-and-add-sdk-translate.patch


author: lvfei <lvfei@kylinos.cn> - 1.0.4-6
changelog:
  - add patch:0001-kylin-user-guide-add-bo-desktop-translate.patch
  - kylin user guide add desktop zangwen support


author: weijin deng <weijin.deng@turbolinux.com.cn> - 0.18.1-1
changelog:
  - Upgrade to 0.18.1
  - Update Version, Release, Source0, stage 'files'
  - Stage 'build' use meson build


author: Yafen Fang<yafen@iscas.ac.cn> - 20230318-1
changelog:
  - update upstream to last commit (54fd97ae4066a10b6b02089bc769ceed328737e0): mmal: Add mapping for IL OMX_IndexParamBrcmEnableIJGTableScaling param


author: Yafen Fang<yafen@iscas.ac.cn> - 20240422-1
changelog:
  - update upstream to last commit (96a7334ae9d5fc9db7ac92e59852377df63f1848): README: Update to make it clear that most code in this repo is deprecated


author: peijiankang <peijiankang@kylinos.cn> - 3.1.2-31
changelog:
  - Type:bugfix
  - ID  :NA
  - SUG :NA
  - DESC:add ukui-control-center-3.1.2-repair-freelogin-autologin-not-available.patch


author: huayadong <huayadong@kylinos.cn> - 3.1.2-33
changelog:
  - Type:bugfix
  - ID  :NA
  - SUG :NA
  - DESC:Patch203:fix-the-display-resolution-does-not-match-the-actual-resolution.patch


author: Wenlong Ding <wenlong.ding@turbolinux.com.cn> - 2.0.8-1
changelog:
  - Update to 2.0.8, using BuildRequires xfce4-dev-tools replace exo-devel(new version of exo not contains exo-csource).


author: yuanxing <yuanxing@kylinsec.com.cn> - 1.28.0-1
changelog:
  - Initial build
  - KYOS-F: change workspace titlebar and font and composite
  - KYOS-B: fix disabled Alt+F1 to popop mate menu
  - KYOS-F: feature [menu] : pop up start menu when press super key


author: longcheng <longcheng@kylinos.com.cn> - 1.24.0-2
changelog:
  - KYOS-F: draw mask for whole screen except the selection area
  - KYOS-F: add X-System-Server category for mate-system-log
  - KYOS-F: add X-KIRAN-NoDisplay=true in mate-system-log.desktop.in.in
  - KYOS-T: change chinese translation.(#28543)
  - KYOS-F: fix mate system log is not displayed in the control panel (#48482)


author: yuanxing <yuanxing@kylinsec.com.cn> - 1.28.0-1
changelog:
  - Initial build
  - Properly update the set of monitors when it changes
  - KYOS-F: add kiran theme
  - KYOS-F: set default position to right-bottom


author: yuanxing <yuanxing@kylinsec.com.cn> - 1.28.1-1
changelog:
  - Initial build
  - KYOS-F: modify desktop and modify mate system monitor
  - KYOS-B: fix resource abnormal caused by excessive CPUs and solve crash when switch CPU display color in CPU > 31
  - KYOS-B: fix get pcpu with double to solve the cpu% don't changed
  - KYOS-B: fix could not get name information of Loongson processor
  - KYOS-B: fix cpuinfo mate-system-monitor hardware-cpuinfo display


author: yuanxing <yuanxing@kylinsec.com.cn> - 1.28.1-1
changelog:
  - initial build
  - KYOS-B: add kylin mask and part of translations
  - KYOS-B: set text preview content
  - KYOS-B: add a action in mate-terminal.desktop.in.in
  - KYOS-B: change default color and system color to Dracula Dark(#30872)
  - KYOS-B: select the default charset by locale


author: yaoxin <yao_xin001@hoperun.com> - 2.0.20-1
changelog:
  - Update to 2.0.20
    * Fix QoS 1 / QoS 2 publish incorrectly returning "no subscribers". Closes #3128.
    * Open files with appropriate access on Windows. Closes #3119.
    * Don't allow invalid response topic values.
    * Fix some strict protocol compliance issues. Closes #3052.
    * Fix cmake build on OS X. Closes #3125.
    * Fix build on NetBSD
    * Fix mismatched subscribe/unsubscribe with normal/shared topics.
    * Fix crash on bridge using remapped topic being sent a crafted packet.
    * Don't allow SUBACK with missing reason codes in client library.
    * Fix crash on subscribe under certain unlikely conditions. Closes #2885. Closes #2881.
    * Fix mosquitto_rr not honouring -R. Closes #2893.
    * Fix max_queued_messages 0 stopping clients from receiving messages. Closes #2879.
    * Fix max_inflight_messages not being set correctly. Closes #2876.
    * Fix mosquitto_passwd -U backup file creation. Closes #2873.


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 0.35.1-1
changelog:
  - Update to 0.35.1
  - Enabled VA-API support
  - Enabled Wayland backend & native PipeWire output support


author: liweiganga <liweiganga@uniontech.com> - 1.2.0-1
changelog:
  - upstream release 1.2.0
  - fix: fix CVE-2016-10141、CVE-2016-7504、CVE-2016-9136、CVE-2017-5628、CVE-2016-9017、\
         CVE-2016-7506、CVE-2017-5627、CVE-2016-9108、CVE-2016-9294


author: zhangxingrong <zhangxingrong@uniontech.cn> - 44.6-4
changelog:
  - delete: Don't wrongly set window as not alive when pings are disabled
  - window: Add IS_ALIVE to get_property
  - core/window: Propagate focus appearance to all ancestors
  - clutter/actor: Don't write uninitialized out values on failed transform
  - clutter/pick-stack: Add an allocation check to calculate_clear_area ()


author: zhangbowei <zhangbowei@kylinos.cn> - 0.3.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: implement a pure Go solution to eliminate iproute dependencies


author: Liu Jiangbin <liujiangbin3@h-partners.com> - 1.1.0-1
changelog:
  - Support configurable plugin sources
  - Support one-click initialization
  - Fix the log permission bug


author: Ding Jiahui <dingjiahui4@huawei.com> - 1.1.3-0
changelog:
  - Downlowd details when repo updating.
  - The operation log will be recorded in the plugin directory.


author: Ding Jiahui <dingjiahui4@huawei.com> - 1.1.5-0
changelog:
  - Use /opt/oedp/plugins directory as the local plugin repository for oeDeploy.
  - Add plugin repository creation functionality to the oedp command.


author: will_niutao <niutao2@huawei.com> - 1.5.1-1
changelog:
  - Change upstream to https://github.com/orocos/orocos_kinematics_dynamics, and rename the package to orocos-kdl


author: jiangxinyu <jiangxinyu@kylinos.cn> - 4.4.4.1-2
changelog:
  - Change requires from postgresql-13-contrib and postgresql-13-server to postgresql-contrib and postgresql-server


author: tangjie02 <tangjie02@kylinsec.com.cn> - 5.27.11-2
changelog:
  - adapt to the new CMake macros to fix build failure
  - disable snap plugin because of snapd-glib required qt6, but plasma-discover required qt5


author: yuanxing <yuanxing@kylinsec.com.cn> - 1.28.0-1
changelog:
  - Initial build
  - KYOS-F: add chinese translation
  - KYOS-B: Fixed garbled toolTips path in tab page with GB18030 encoding(#7248)


author: PolyMind ftboy <futao10@huawei.com> - 1.0.0-1
changelog:
  - Initial package for openEuler
  - Support for both x86_64 and aarch64 architectures
  - Built with electron-builder for Linux


author: jiangxinyu <jiangxinyu@kylinos.cn> - 2.53.3-1
changelog:
  - Update package to version 2.53.3
    * Fix metric name include histogram error
    * TSDB: Let queries with heavy regex matches be cancelled and not use up the CPU
    * Scraping: allow multiple samples on same series, with explicit timestamps


author: jiangxinyu <jiangxinyu@kylinos.cn> - 0.15.0-2
changelog:
  - Type: CVE
  - CVE: CVE-2023-39326 CVE-2024-24789 CVE-2024-24791
  - SUG: NA
  - DESC: Rebuild to fix CVE-2023-39326 CVE-2024-24789 CVE-2024-24791


author: gongzhengtang<gong_zhengtang@163.com> - 1.3.2-1
changelog:
  - update to v1.3.2
  - Prevent ever-growing session size for OAuth clients.
  - Revert quote client id and secret.
  - unquote basic auth header for authorization server.
  - fix a bug in module 'importlib' has no attribute 'metadata'


author: wanglianjun<wanglianjun@xfusion.com> - 1.6.9-1
changelog:
  - Upgrade to 1.6.9 to fix CVE-2026-28802
  - Remove "none" algorithm from default jwt instance to prevent signature bypass
  - Includes fixes for CVE-2025-62706 (JWE decompression limit)
  - Includes OctKey security import fix
  - See: https://github.com/authlib/authlib/commit/b87c32ed


author: yaoxin <yao_xin001@hoperun.com> - 5.0.0-1
changelog:
  - Update to 5.0.0:
    * Breaking: Change default to disable private network access
      This effectively resolves GHSA-hxwh-jpp2-84pm https://osv.dev/vulnerability/PYSEC-2024-71


author: guochao <guochao@kylinos.cn> - 24.1.0-1
changelog:
  - Update package to version 24.1.0
  - Import os.link conditionally to fix importing on android
  - Add aiofiles.os.path.abspath and aiofiles.os.getcwd.


author: GuoCe <guoce@kylinso.cn> - 3.8.1-1
changelog:
  - Update package to version 3.8.1
  - Corrects WSGI adapter handling of root path.
  - Handles case where `"client"` is ``None`` in WsgiToAsgi adapter.


author: jiangxinyu <jiangxinyu@kylinos.cn> - 4.2.1-1
changelog:
  - Update package to version 4.2.1
  - Adapt for logging lock internal changes in Python3.13
    Remove SIGUSR2 from TERMSIGS_DEAULT


author: chenyanpanHW <chenyanpan@huawei.com> - 0.30.1-2
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0001-fix-build-erro.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0002-delete-import-m2r.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


author: songliyang <songliyang@kylinos.cn> - 5.3.4-1
changelog:
  - update to 5.3.4
  - Use string value for CELERY_SKIP_CHECKS envvar
  - Document need for CELERY_ prefix on CLI env vars
  - Fixed AttributeError: 'str' object has no attribute


author: lilu <lilu@kylinos.cn> - 0.3.1-1
changelog:
  - Update package to version 0.3.1
  - Update pyproject.toml, remove upper bound from Python version specifier and so on


author: Hann <hannannan@kylinos.cn> - 30.8.0-1
changelog:
  - Update package to version 30.8.0
  - Update city names for uk_UA
  - Fix issue where Faker does not properly convert min/max float values to Decimal


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 33.0.0-1
changelog:
  - Update package with version 33.0.0
    Revert "Make pytest fixture session-scoped".
    Add jobs for locale de_AT; added methods job_female and job_male
    Added Providers for uz_UZ language


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 37.3.0-1
changelog:
  - Update package with version 37.3.0
    Fix remove duplicate cities in de_DE address provider
    Add support for unique complex value types Fixes
    Add hash functions overloads with no params
    Overload hash generation functions to make return types more specific
    Add stub support for overloaded methods
    Add phone numbers for de_CH and it_CH
    Fix date_time provider with end_datetime in the past
    Add support for Zulu (zu_ZA) address provider and corresponding tests
    Declare support for Python 3.13


author: sqfu <dev01203@linx-info.com> - 0.7.0-1
changelog:
  - update to 0.7.0
  - adding GH dependabot
  - Bump the pip group with 2 updates
  - Update hypothesis requirement from <6.62.0 to <6.100.0 in /.github/scripts


author: xu_ping <707078654@qq.com> - 1.14.0-1
changelog:
  - Update to 1.14.0
  - Add support for pyhon3.11 and python3.12
  - Added a new valid PGP key to sign the package
  - python3.7 is not supported and Remove support for python3.6


author: jiangxinyu <jiangxinyu@kylinos.cn> - 5.3.5-1
changelog:
  - Update package to version 5.3.5
    Fix crash when using global_keyprefix with a sentinel connection


author: zhaoshuang <zhaoshuang@uniontech.com> - 2.5.0-1
changelog:
  - Update package to version 2.5.0
    Add support for custom extras
    Drop Python 3.5\3.6\3.7 support
    Add prepend arg to toc extra
    Process HTML comments as markdown in 'escape' safe mode
    Fix syntax warnings in test suite
    Process inline tags as HTML blocks when they span multiple lines
    Add new LaTeX Extra
    Fix html, head and body tags being wrapped in <p> tags
    Graceful handling of broken lists when cuddled-lists extra is enabled
    Add type hints
    Drop Python 3.6 and 3.7 support
    Fix fenced code blocks breaking lists
    Fix #583 by tweaking incomplete tag regex
    Fix AssertionError on malformed HTML


author: songliyang <songliyang@kylinos.cn> - 2.5.1-1
changelog:
  - Update package to version 2.5.1
  - Add option to output to file in CLI
  - Add support for Python 3.13
  - Remove redundant version checks
  - Fix tox: 'failed with make is not allowed, use allowlist_externals to allow it'


author: xu_ping <707078654@qq.com> - 9.0.1-1
changelog:
  - Upgrade version to 9.0.1
  - add Raw UDP and DTLS support.
  - Deprecate add_log event hook and mitmproxy.ctx.log.


author: xieyanlong <xieyanlong@kylinos.cn> - 3.1.5-1
changelog:
  - bugfix: Workbook files not properly closed on Python ≥ 3.11.8 and Windows
  - bugfix: Column name caches are slow and use a lot of memory
  - bugfix: Rich-text can be saved if lxml is not installed


author: tanyulong <tanyulong@kylinos.cn> - 2.4.0-2
changelog:
  - delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/opentracing.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


author: lvfei <lvfei@kylinos.cn> - 3.9.15-1
changelog:
  - upgrade to 3.9.15 fix CVE-2024-27454
  - Fix crash serializing str introduced
  - Fix Serialization str escape uses only 128-bit SIMD 
  - Minimal musllinux_1_1 build due to sporadic CI failure
  - Improve performance of serializing. str is significantly faster. Documents
     using dict, list, and tuple are somewhat faster.
  - orjson module metadata explicitly marks subinterpreters as not supported


author: liutao1 <liutao1@kylinos.cn> - 3.10.0-1
changelog:
  - Update package to version 3.10.0
    Support serializing numpy.float16 (numpy.half).
    sdist uses metadata 2.3 instead of 2.1.
    Improve Windows PyPI builds.


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 3.10.11-1
changelog:
  - Update package with version 3.10.11
    Improve performance of UUIDs.
    Publish PyPI wheels with trusted publishing and PEP 740 attestations.
    Compatibility with CPython 3.14 alpha 1.
    Drop support for arm7.
    Serializing numpy.ndarray with non-native endianness raises orjson.JSONEncodeError.


author: zhaojingyu <zhaojingyu@klinos.cn> - 5.4.1-1
changelog:
  - Update package to version 5.4.1
    fixed a regression from version 5.4.0 that incorrectly handled files opened twice via file descripto


author: jiangxinyu <jiangxinyu@kylinos.cn> - 1.1.2-1
changelog:
  - Update package to version 1.1.2
    * fix: accommodate docxtpl use of Part._rels
    * fix: XmlPart._rel_ref_count


author: jiangxinyu <jiangxinyu@kylinos.cn> - 0.15.0-1
changelog:
  - Update package to version 0.15.0
  - FIX Copy JupyterLite contents early so it runs before jupyterlite_sphinx build-finished


author: xiaozai <xiaozai@kylinos.cn> - 1.7.0-1
changelog:
  - Update package to version 1.7.0
    - Remove deprecated plugins
    - Remove python 2 declaration
    - Add static method Tree.from_map


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 0.21.0-1
changelog:
  - Update package to version 0.21.0
    Add cleanup_socket param on create_unix_server
    Use cythonized SO_REUSEPORT rather than the unwrapped native one
    UDP errors should result in protocol.error_received
    Updates for Cython3
    Test with Python 3.13


author: wangkai <13474090681@163.com> - 1.1.0-3
changelog:
  - Compling package with pyproject
  - Obsoletes subpackage python-blurb-help
  - Add check for blurb command


author: Miro Hrončok <mhroncok@redhat.com> - 3.3.4-5
changelog:
  - Subpackage python2-empy has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: zhaosaisai <zhaosaisai@kylinos.cn> - 2.0.0-1
changelog:
  - Upgrade to the latest version 2.0.0
  - Add new writer methods and namespace elements/resolvers
  - Separate new write functionality from elements that have namespaces
  - Split everything except the closing tag into a separate fn
  - Improve performance with inline qname splitting
  - Local refactoring/performance improvements
  - Example Change the default write value of the root only ns keyword
  - Deprecate python 3.6 and 3.7 because nsetree requires the updated XMLParser
  - Disable coveralls unless you know exactly how to get access tokens


author: wangjunqi <wangjunqi@kylinos.cn> - 2.1.0-1
changelog:
  - Update package to version 2.1.0 
  	Add support for sys/policies endpoint (GH-1100)
  	add quota support to system backend (GH-1092)
  	Add support to PKI class to perform CRUD on issuers (GH-1102)


author: wangkai <13474090681@163.com> - 0.4.4-1
changelog:
  - Update package to version 0.4.4
  - Fix CVE-2023-30608
  - Compling package with pyproject
  - Obsoletes subpackage python-sqlparse-help


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 0.46.1-1
changelog:
  - Update package with version 0.46.1
    Fix: Allow relative directory path when follow_symlinks=True
    Add: GZipMiddleware: Make sure Vary header is always added if a response can be compressed
    Fix: Raise exception from background task on BaseHTTPMiddleware
    Fix: GZipMiddleware: Don't compress on server sent events
    Mod: MultiPartParser: Rename max_file_size to spool_max_size
    Drop Python 3.8 support
    Remove ExceptionMiddleware import proxy from starlette.exceptions module
    Remove deprecated WS_1004_NO_STATUS_RCVD and WS_1005_ABNORMAL_CLOSURE
    Add client parameter to TestClient
    Add max_part_size parameter to Request.form()
    Remove deprecated allow_redirects argument from TestClient
    Make UUID path parameter conversion more flexible
    Raise ClientDisconnect on StreamingResponse


author: liyue01 <liyue01@kylinos.cn> - 0.30.1-1
changelog:
  - Update package to version 0.30.1
  - Fixed ：Allow horizontal tabs in response header values
  - Added New multiprocess manager and Allow ConfigParser or a io.IO[Any] on log_config
  - Fixed：Suppress side-effects of signal propagation ，Send content-length header on 5xx
  - Added Cooperative signal handling
  - Fixed ：Revert raise ClientDisconnected on HTTP
  - Added Raise ClientDisconnected on send() when client disconnected


author: shaoning <shaoning@kylinos.cn> - 0.32.0-1
changelog:
  - Update package to version 0.32.0
      * Add reason support on WebSocketDisconnectEvent
      * Add pragma: full coverage to Process.is_alive
      * Remove signal testing order dependency
      * Improve ProxyHeadersMiddleware
      * Add support for [*] in trusted hosts


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 0.34.0-1
changelog:
  - Update package to version 0.34.0
    Add content-length to 500 response in wsproto implementation
    Drop support for Python 3.8
    Remove WatchGod support for --reload


author: wangziliang<wangziliang@kylinos.cn> - 0.9.1-1
changelog:
  - Change the baseline version to 0.9.1
  - Add dllm kv cache protect support
  - Add dllm deploy and clean command support


author: Yafen Fang<yafen@iscas.ac.cn> - 20220318-5
changelog:
  - update pi-bluetooth to commit(23af66cff597c80523bf9581d7f75d387227f183): Add AA:AA:AA:AA:AA:AA as an "unprogrammed" address


author: Yafen Fang <yafen@iscas.ac.cn> - 2023.01.11-1
changelog:
  - update upstream version to 2023.01.11-138c0
  - update patch for rpi-eeprom-update: use 'tr' instead of 'strings'


author: Yafen Fang <yafen@iscas.ac.cn> - 2024.04.20-1
changelog:
  - update upstream version to 2024.04.20-2712
  - add Raspberry Pi 5 bootloader EEPROMs
  - add rpi-bootloader-key-convert, rpi-otp-private-key, rpi-sign-bootcode
  - remove patch for rpi-eeprom-update: use 'tr' instead of 'strings'


author: Yafen Fang<yafen@iscas.ac.cn> - 20230315-7
changelog:
  - update firmware to version 1.20230306
  - update bluez-firmware to the latest commit (9556b08ace2a1735127894642cc8ea6529c04c90): 1.2-4+rpt10 release


author: Yafen Fang<yafen@iscas.ac.cn> - 20240419-9
changelog:
  - update firmware to version 1.20240306
  - update bluez-firmware to the latest commit (5a204dae9b3dc521842c56d93f6b4ecfbe4ff44d): 1.2-4+rpt11 release


author: Yafen Fang<yafen@iscas.ac.cn> - 20241207-11
changelog:
  - update firmware version to 1.20241126
  - update bluez-firmware to the latest commit (78d6a07730e2d20c035899521ab67726dc028e1c): Update changelog for 1.2-9+rpt3 release
  - update firmware-nonfree to the latest commit (4b356e134e8333d073bd3802d767a825adec3807): Update changelog for 1:20230625-2+rpt3 release


author: Yafen Fang<yafen@iscas.ac.cn> - 20241207-13
changelog:
  - add license: broadcom_bcm43xx
  - preserve the symbolic link format when installing firmwares of brcm


author: Yafen Fang <yafen@iscas.ac.cn> - 6.6.0-84.0.0.12
changelog:
  - update kernel version to openEuler 6.6.0-84.0.0
  - update Raspberry Pi patch, last commit (f1076a9d7a269d72b6707283560d0d38203cb07a): delete the comment


author: Yafen Fang<yafen@iscas.ac.cn> - 20241104-2
changelog:
  - update upstream version to the latest commit: "ovmerge: Disable Perl warnings about portability"
  - update patch0002


author: Yafen Fang <yafen@iscas.ac.cn> - 20230320-1
changelog:
  - update to upstream's last commit (408bde537671de6df2d9b91564e67132f98ffa71): do_wifi_ssid_passphrase: set scan_ssid on hidden network in dhcpcd case
  - adjust for openEuler
  - disable A9 Wayland and AA Network Config
  - remove legacy autologin cruft


author: weiyucheng <weiyucheng@kylinos.cn> - 2.0.0-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:sync upstream patches to support isulad container engine and systemd cgroup driver


author: wutao <wutao61@huawei.com> - 0.7.0-2
changelog:
  - Move .so file from /usr/lib64/gems/ruby/http_parser.rb-0.7.0/http_parser.rb/ to
    /usr/lib64/gems/ruby/http_parser.rb-0.7.0/ to solve fluentd loaderror problem


author: wutao <wutao61@huawei.com> - 1.4.1-2
changelog:
  - Move .so file from /usr/lib64/gems/ruby/yajl-ruby-1.4.1/yajl-ruby/
    to /usr/lib64/gems/ruby/yajl-ruby-1.4.1/yajl/ to solve fluentd loaderror problem


author: YuYing Mu <muyuying1@huawei.com> - 1.0.0-1
changelog:
  * Tue Nov 21 2023 JiaQi Zhao <zhaojiaqi18@huawei.com> - 1.0.0-1
  - Init and adapt device auth to openEuler


author: Peng He <hepeng68@huawei.com> - 1.0.0-1
changelog:
  * Tue Nov 21 2023 JiaQi Zhao <zhaojiaqi18@huawei.com> - 1.0.0-1
  - adapt compilation, tailor dependencies on hitrace and hisysevent


author: <918688502@qq.com> - 0.2.0-1
changelog:
  - Initial skeleton of the sysHAX heterogeneous collaborative acceleration runtime, including core modules, configuration management, logging system, command-line tool, API routing, application entry point, documentation, and dependency declaration


author: donglihao <donglihao1@huawei.com> - 1.2-1
changelog:
  - Add new detection algorithms for improved AI training monitoring
  - Update collection modules with enhanced performance tracing capabilities


author: donglihao <donglihao1@huawei.com> - 1.2-4
changelog:
  - Integrated previous updates:
  - remove usage of cxxfilt
  - disable HAS_BTF_SUPPORT in build.sh
  - Add new detection algorithms for improved AI training monitoring
  - Update collection modules with enhanced performance tracing capabilities


author: Funda Wang <fundawang@yeah.net> - 140.5.0-1
changelog:
  - update to 140.5.0
  - build with system cbindgen
  - drop useless post scripts, they will be done automaticaly by triggers


author: yaoxin <1024769339@qq.com> - 3.4.1-1
changelog:
  - Update to 3.4.1:
    * Fix manpage path in pyproject.toml
    * Fallback to common if a platform is specified using -p flag,
      but a page doesn't exist for that platform
    * Drop support for EOL Python 3.8 version
    * Fix broken --render option
    * Fix duplicate platform information shown in pages like du, cd, w


author: chukaiping <chukaiping@baidu.com> - 3.4.3-1
changelog:
  - Update to 3.4.3
    * Fixed unpredictable platform selection when displaying pages 
    * fix: unpredictable platform selection introduced
    * Added a warning when a page is not available for the current platform


author: zhang_jian <zhang_jian7@hoperun.com> - 3.4.4-1
changelog:
  - update to 3.4.4
  - Drop support for EOL Python 3.9 version
  - Allow cache updating and command displaying on the same command
  - fix: only raise URLError or HTTPError when there are no results at all


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.38.0-1
changelog:
  - Upgrade to 3.38.0
  - Sub package totem-nautilus becomes empty
    in version 3.31.91 Move nautilus properties page to nautilus module


author: houhongxun <houhongxun@kylinos.cn> - 3.1.0-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: add 0001-ukui-panel-fix-incorrect-usage-of-deallocation-func.patch


author: douyan<douyan@kylinos.cn> - 3.1.2-6
changelog:
  - Type: bugfix
  - ID  : NA
  - SUG : NA
  - DESC: add patch03: ukui-power-manager-3.1.2-disable-computer-sleep.patch


author: huayadong <huayadong@kylinos.cn> - 3.1.0-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add patch2:ukui-session-manager-3.1.0-kylin-fix-ukui-kwin-x11-coredump.patch


author: peijiankang <peijiankang@kylinos.cn> - 3.1.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add patch3:add-switchuser-no-limits-ukui-session.patch
         rm disable-Suspend-and-Sleep-of-ukui-session-manager.patch


author: huayadong <huayadong@kylinos.cn> - 3.1.2-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add Patch4:ukui-settings-daemon-3.1.2-kylin-fix-coredump.patch


author: bianguangze <bianguangze@uniontech.com> - 0.0.1.01
changelog:
  - Add Patch: 0001-Add-utpam_client.rs-and-modify-utpam_misc.rs.patch.
  - Add Patch: 0002-Modify-pam_strerror-function.patch.
  - Add Patch: 0003-refactor-add-utpam_get_authtok.rs-file.patch.


author: bianguangze <bianguangze@uniontech.com> - 0.0.1.02
changelog:
  - Add Patch: 0004-refactor-fix-include-flag-error.patch.
  - Add Patch: 0005-add-pam_strerror.rs-and-fix-utpam_rootok-modules.patch.


author: wanglujun <wanglujun@uniontech.com> - 0.0.1.04
changelog:
  - spec: del SOURCE8 and package ./lib/libpam_c/include/utpam.h.
  - Add Patch:0007-change-log-path.patch.


author: wangmeng <wangmengc@uniontech.com> - 0.5.0-3
changelog:
  - feat: add patch 0003-fix-echo-a.z.patch
  - feat: add patch 0004-fix-type-return-error.patch
  - 修复echo {a..z} 执行错误和type命令返回值错误


author: gcw_X8YNlwar <wangjintao1@xfusion.com> - 1.20.4-1
changelog:
  - Update to 1.20.4
  - Fix CVE-2026-40354: Prevent trashing of arbitrary host files via symlink attack


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 1.2.15-7
changelog:
  - Reorganize patch numbers in spec file
  - Add "program" option to rotate lock file configuration for finer-grained rotation locks(b: 113752)


author: gaobo <gaobo@kylinsec.com.cn> - 1.2.15-8
changelog:
  - Modify the Patch1005, change lock file path and correct the error logic for creating the lock path. (b:113752)


