# changelog

author: cx <cx22757@163.com> - 0.0.1-2
changelog:
  - fix: modify install permission for library and config file.
  - fix: update nullptr check.
  - fix: update VM consistency log.
  - fix: extend RPC transmission timeout to 20 seconds.
  - fix: clear const_cast in domain.cpp; solve memory leak.
  - fix: add debug log for TSB API.
  - fix: extend RPC transmission timeout


author: cx <cx22757@163.com> - 0.0.1-3
changelog:
  - 修改日志问题
  - fix: log ERROR when peer received a failure notification.
  - fix: remove unsupported flag in DomainMigrate log.
  - fix: remove redundant nullptr check.
  - fix: change measure item name from grub_cfg to grub.cfg.
  - 修改安全问题
  - fix: safety inspection.
  - 修改检视意见
  - 格式化代码
  - 修改安全排查
  - fix: remove option --undefinesource.
  - fix: add return value check for GetVRoots.
  - fix: remove `--allow-store-measurements` option in VM create.
  - fix: remove RPATH compile option.
  - fix: call MigrationNotify after migration success in source end.
  - 修改安全排查问题
  - fix: update doc.
  - fix: modify VM state to shutoff after migration.
  - fix: add memory free for error branch in foreign_mounter.cpp


author: cx <cx22757@163.com> - 0.0.1-4
changelog:
  - fix: adapt to new VerifyTrustReport API.
  - 增加start虚机耗时日志
  - 保持挂载和startVRoot进行异步，并且不可以让checkmeasure和startVRoot异步
  - delete no use function
  - 1: adapter mock 2：add time-consuming debug 3: async StartVRoot and CheckGuestBeforeStart
  - fix: update doc and CLI help info.


author: cx <cx22757@163.com> - 0.0.1-5
changelog:
  - fix: update TSB-agent mock implement.
  - docs: update supported OS version
  - fix: update download URL for libboundscheck.
  - fix: rename sessionId to uuid.
  - fix: add suggestion for edk2 version


author: cx <cx22757@163.com> - 0.0.1-6
changelog:
  - fix: update URL in scripts.
  - Merge branch 'remote_master'
  - 优化资料以及修改校验路径逻辑
  - 对readme中的TLS证书示例上加上特别说明：有安全问题
  - add mock for file_io, grpc, libguestfs, libvirt
  - 移除libvirt生成证书的脚本，移动到readme文


author: cx <cx22757@163.com> - 0.0.1-7
changelog:
  - cleancode清理
  - 修复CMakeLists.txt中的错误
  - 重构mock代码，编译成so文件用于测试，完成TSB-agent mock模块的编译方式整改，实现virtrust软件独立编译、不依赖TSB-agent mock程序编译方法的能力
  - 增加记录错误日志，便于定位
  - fix: change header file permissions to 440.
  - 优优安全配置的readme章节


author: cx <cx22757@163.com> - 0.0.1-8
changelog:
  - feature: 1、使用systemd服务管理virtrustd服务，手动编译情况下添加virtrustd服务的管理脚本，在rpm安装情况下修改spec文件，添加virtrustd服务的自动注册、卸载清理等动作 2、优化virtrustd服务管理文档，完善文件框架


author: Xu Zheng <xuzheng_yewu@cmss.chinamobile.com> - 0.1.0-32
changelog:
  - adapt to multiple qemu process 
  - virt_check update
  - optimize qemu_var and os_var matching formats


author: yaoxin <1024769339@qq.com> - 5.19.7-1
changelog:
  - Update to 5.19.7 for fix CVEs: CVE-2026-42253, CVE-2026-42588,
    CVE-2026-45505, CVE-2026-46605, CVE-2026-49157, CVE-2026-49270


author: Wenhui Tang <wenhui.oerv@isrc.iscas.ac.cn> - 0.26.0-2
changelog:
  - Append flags to GOFLAGS to fix go linker bugs for riscv
  - Related issue: https://github.com/golang/go/issues/62465
  - This is a temporary solution that requires fixing the upstream riscv support for golang.


author: wenxin<wenxin32@foxmail.com> - v1.4.1-3
changelog:
  - fix the query error of cve associated host
  - update verification method for host ip fieldl;fix repo field filter error
  - update TimedCorrectTask method


author: wenxin<wenxin32@foxmail.com> - v2.0.0-3
changelog:
  - Added support for cluster features.
  - Adjusted Task Module logic to use Celery for task management and execution.


author: luxuexian<luxuexian@huawei.com> - v2.1.0-2
changelog:
  - Fixed exceptions in calling stored procedures and cases caused by SQLschema upgrade
  - Fixed errors reported in calling cve summary interface


author: liuchanggeng<liuchanggeng@huawei.com> - v1.3.4-12
changelog:
  - to maintain functional stability, da-tool only releases network related analysis
  - it is not allowed to modify the configuration file of the da-tool


author: wangguangge<wangguangge@huawei.com> - v1.4.1-1
changelog:
  - update to v1.4.1
  - update cve fix logic
  - support rollback operation for kernel hotpatch/coldpatch


author: zhuyuncheng<zhuyuncheng@huawei.com> - v1.1.3-3
changelog:
  - Bugfix: fix the alert count error
  - Bugfix: for ai model, increase queried data length and add
    a time range for error judgment.


author: gongzhengtang<gong_zhengtang@163.com> - v1.2.0-1
changelog:
  - update the structure of response body; update how to get session used to
  - connect to the database


author: Hu gang<18768366022@163.com> - v1.3.5-2
changelog:
  - Resolve the problem of host display of the expanded menu in the host management batch adding host interface
  - Optimize the logic of adding hosts in batches under different circumstances


author: Hu gang<18768366022@163.com> - v1.4.0-1
changelog:
  - adapt to NewRepair Tasks Including DetailsCreation TaskReports And TaskExecution
  - Modify the original rollback task to hot patch rollback
  - Added related rollback tasks


author: Hu gang<18768366022@163.com> - v1.4.0-2
changelog:
  - Added keyword search for host list
  - Fixed the problem of abnormal list rendering in task details task running state
  - Optimize some page copywriting
  - Adaptation rollback task related (creation, execution, detailed viewing, task report viewing, etc.)
  - Solve the problem of hot and cold patch execution tasks failing when creating a repair task.
  - Fix hotpatch remove list filter failed


author: Hu gang<18768366022@163.com> - v1.4.0-4
changelog:
  - Added an interface adaptation for host status
  - Added a field to determine whether the kernel changes after the host is restarted
  - Added a new hot patch prompt for creating a repair task
  - Fix some bug


author: Hu gang<18768366022@163.com> - v1.4.0-7
changelog:
  - Modify the task description copy of the create hot patch removal task
  - remove create rollback button in cve detail,add hotpatch button in cve detail


author: Hu gang<18768366022@163.com> - v2.1.2-4
changelog:
  - Update version to v2.1.2-4
  - Provides smart Q&A capabilities for big models
  - Provide vulnerability repair and configure traceability intelligent management
  - Supports traceability of file changes


author: wenxin<wenxin32@foxmail.com> - v2.0.0-1
changelog:
  - Adjusted configuration file loading method: changed format from INI to YAML.
  - Added support for reading and writing configuration through Zookeeper.
  - Added support for reading and writing cache through Redis, including logic for current cache keys.
  - Implemented RSA signature verification for data.
  - Removed deprecated files.
  - Optimized Prometheus import statements.
  - Added retry mechanism to `response` method.


author: wenxin<wenxin32@foxmail.com> - v2.0.0-1
changelog:
  - Split the existing service module into distinct modules:
    - Task Module: Handles task management and execution.
    - Host Module: Manages host configurations and interactions.
    - User Module: Manages user accounts and permissions.
    - Interface Dispatch Module: Manages the dispatching of requests to appropriate interfaces.
  - Added a new command line tool for enhanced functionality and management.
  - Introduced support for clustering, allowing for more robust and scalable deployments.
  - Reorganized the service architecture to improve modularity and maintainability.
  - Fixed various issues to enhance stability and performance.


author: yuanxing <yuanxing@kylinsec.com.cn> - 1.28.0-1
changelog:
  - Initial build
  - KYOS-F: allow root to use desktop manager
  - KYOS-F: feature(kiran): Support kiran desktop environment
  - KYOS-F: Support change desktop background image in kiran desktop(#I5I1HE)
  - KYOS-B: Fix the file rename error msg too long(#I5I8IM)
  - KYOS-B: Fix the file can be rename to only container space name(#I5I8KI)
  - KYOS-F: Let the location bar background change with theme(#I5I8V9)
  - KYOS-B: Not draw icon and text hight light color when icon not get force(#I5HRI0)
  - KYOS-B: Fix the open terminal can not correct to terminal icon


author: gaobo <gaobo@kylinsec.com.cn> - 1.28.0-2
changelog:
  - modify the logic that open kiran-control-panel when change the background (f:107366)
  - fix that background abnormal when change the scale to 200%. (b:121360)


author: wangdi <wangdi@kylinos.cn> - 0.15.0-3
changelog:
  - Change hardcoded deafult hash algorithm from legacy md4 to sha512
  - Change dependecy from ansible-2.9 to ansible since ansible version has bumped to 2.9


author: liheavy <lihaiwei8@huawei.com> - 1.0.0-3
changelog:
  - Disassemble yocto-embedded-tools and replace cjson, ninja, gn, openssl, libboundscheck
  - with openEuler software package


author: Yuying Mu <muyuying1@huawei.com> - 1.0.0-6
changelog:
  * Tue Nov 20 2023 Jiaqi Zhao <zhaojiaqi18@huawei.com> - 1.0.0-6
  - Update dsoftbus from 3.1.2 to 3.2
  - Rename package name from dsoftbus to communication_dsoftbus


author: Shi Quan <shiq10@chinaunicom.cn> - 1.0-3
changelog:
  - Drop the python3-pam RPM dependency (not available in openEuler); the python
    pam module is installed at runtime via pip and used with a graceful fallback.


author: liweigang <liweiganga@uniontech.com> - 5.6.36-3
changelog:
  - fix: Memory units in Device Manager do not match the memory rate units queried by typing dmidecode17 in the terminal


author: songmingliang <songmingliang@uniontech.com> - 5.6.36-4
changelog:
  - spec: change xorg-x11-server-utils to xrandr(https://gitee.com/src-openeuler/xorg-x11-server-utils/issues/IAKWIZ)


author: dingjiahui <dingjiahui4@huawei.com> - 1.0.0-1
changelog:
  - Initial release of DevStore
  - Includes frontend Electron application
  - Includes backend Django application
  - Provides comprehensive development store management functionality
  - Added systemd service support for easy service management
  - Users can now start/stop DevStore using systemctl commands


author: dingjiahui <dingjiahui4@huawei.com> - 1.0.1-1
changelog:
  - Support search functionality
  - Fix the issue where the list is empty when returning to the homepage from the details page
  - Auto-enable and start dev-store service after installation
  - Add error handling to ensure service startup failures don't affect package installation


author: dingjiahui <dingjiahui4@huawei.com> - 1.0.3-1
changelog:
  - Replace MariaDB with SQLite database, optimize initialization process for faster startup
  - Optimize cleanup and write processes during data synchronization exceptions


author: dingjiahui <dingjiahui4@huawei.com> - 1.0.4-1
changelog:
  - Update desktop icon
  - Remove massive logs
  - Support for quickly adding MCP servers to PolyMind
  - Fix handling issue when oeDeploy plugin is duplicated
  - Optimize interface, support multiple tabs


author: Yuying Mu <muyuying1@huawei.com> - 1.0.0-1
changelog:
  * Tue Nov 21 2023 Jiaqi Zhao <zhaojiaqi18@huawei.com> - 1.0.0-1
  - Init and adapt device manager to openEuler


author: zhourenjian <zhourenjian@huawei.com> - 2025.36-1
changelog:
  - Adapt E2B to the arm64 architecture, remove its dependency on GCP, and add a one-click local installation script.Fix start-client process, use dnsmasq replace systemd-resolved, use paramater to decide current client belongs to which node pool, use glibc busybox,use provision.sh to install vm's deps while building template.Add arm vmlinux.bin and change x86 vmlinux.bin name.Make start-client process local.use dnsmasq replace systemd-resolved. Use paramater to decide current client belongs to which node pool. fix configure.sh run fail because busybox has no bash.change async to sync.complete readme.


author: Hongyu Shi <shywzt@iCloud.com> - 2.2.0-1
changelog:
  - Add main package alias witty-framework-lite
  - Add witty-mcp-manager subpackage (Nuitka-compiled binary)


author: Hongyu Shi <shywzt@iCloud.com> - 2.2.0-7
changelog:
  - Wait for network-online before starting witty-mcp-manager service
  - Warn explicitly when RPM post-install uv bootstrap fails


author: chenyanpanHW <chenyanpan@huawei.com> - 0.5.0-16
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Add-PL_ARCH-for-AArch64.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/coverity.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0001-add-loongarch64-support.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0002-add-riscv-support.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: wangkai <13474090681@163.com> - 3.18.0-13
changelog:
  - Fix CVE-2020-24292 CVE-2020-24293 CVE-2020-24295 CVE-2021-33367
    CVE-2021-40263 CVE-2021-40266 CVE-2023-47995 CVE-2023-47997


author: luxuexian<luxuexian@huawei.com> - v2.1.0-3
changelog:
  - Optimize the query of the number of unsynchronized service domains
  - unified conftrace record in English


author: zhanglin <lin.zhang@turbolinux.com.cn> - 1:3.38.2-4
changelog:
  - fix build when Meson >= 0.61.5
  - add patch modify-meson-build-tepl6.patch
  - add patch fix-i18n-merge-file.patch


author: renjunkai1@example.com - 0.0.1-21
changelog:
  - fix: Add a cargo.lock file to lock dependency versions.
  - fix:[plugin manager] replace unwrap with results
  - fix:[policy engine] forbid custom functions and loop with number range
  - fix: Add libboundscheck library for building RPM agent and cli.
  - fix:[policy engine] forbid custom functions and loop with number range
  - feat: Modify the URL paths in the API documentation
  - feat: Add a default value for executables_value in the tpm_boot.rego file.
  - fix:fix key managerd workers


author: renjunkai1@example.com - 0.0.1-22
changelog:
  - feat: add compilation options for security requirements
  - fix: [attestation server] fix unwrap problem in initialization process
  - fix: strengthen the policy injection proctection
  - fix: delete tests that are commented out
  - fix: [endorsement] fix unwrap problem
  - fix: add more strict parameter validation for user id
  - feat:modify register white box inspection
  - fix:fix apikey block_on
  - Merge openeuler/master: resolve conflicts and integrate upstream changes
  - perf: optimize PCR index validation
  - config: update PCR banks config for batch processing
  - test: add test cases for TPM plugin improvements
  - fix:fix apikey block_on
  - fix:[attestation_agent][attestation_cli]Clean up Clippy scan warnings, rm -rf deletion issues, and unsafe code problems.
  - fix: optimize TPM NV reading and PCR collection


author: cx <cx22757@163.com> - 0.0.1-23
changelog:
  - fix:add tpm.rego,modify ut and agent_config
  - feat: fix log name
  - Revert "bugfix: add key_managerd.service to rpm"
  - bugfix: add key_managerd.service to rpm
  - feat: Adapting to the log of ascend npu
  - fix:fix server_config
  - feat: The virtCCA plugin supports log collection and verification in the dim format
  - feat:add TpmPlugin for attester and verfier dim_log
  - fix: cancel exporting unnecessary lib.
  - fix: clear magic number in CCA plugin.
  - fix: split the verify_logs func in CCA verifier.
  - fix: add UT for CCA verifier plugin.
  - fix: Optimize command-line options and their explanations
  - feat: update docs and RPM spec files for CCA.
  - feat: add CCA verifier plugin.
  - feat: Modify the input of the all policy to the output of the plugin.
  - feat: Modify the interface documentation
  - feat: The baseline generation tool supports dim baseline generation.
  - feat: Added all-type policy
  - feat: add CCA attester plugin.
  - fix: extract public log verify code.
  - fix:Fix failure to read IAK certificate
  - fix: Adapt to EAR token format for itrustee plugin.
  - fix: Adding the secure boot field to the token in the virtCCA plugin
  - fix: Remove unnecessary fields in itrustee.rego.
  - fix: Add public key information and display the realm challenge when no platform token exists.
  - Merge branch 'vcca' of git@gitcode.com:lyyyze/global-trust-authority.git into 'master' # Conflicts: #   conflict attestation_server/policy/src/services/policy_service.rs
  - fix: Add JWT signature verification when updating the policy
  - feat: Add platform token challenge field and refine software component serialization
  - fix: Modify the translated content of the document
  - fix: Modify the verification logic of the tpmboot plugin to validate digests only for specific events.
  - fix: Modified failed test cases
  - Merge remote-tracking branch 'origin/issue' into issue
  - fix: Capitalize the first letter of error messages
  - fix: Modify error messages to reduce module exceptions printed to the interface output.
  - fix: Add codecheck build script
  - fix: Modify error messages to reduce module exceptions printed to the interface output.
  - bugfix: add a chapter for readme
  - fix: add UT
  - feat(api): configure server limits and improve error handling
  - fix: Fixing some errors in the API documentation


author: cx <cx22757@163.com> - 0.0.1-24
changelog:
  - fix: declare dependency for ITrustee.
  - fix: add copyright notice.
  - test:add tpm and virtcca UT
  - fix: update descriptions of request params.
  - fix: fixes OpenSSL affected by CVE-2025-15467.
  - feat: add ascend_npu cbor data to policy
  - feat: Add the user policy for the TPM plugin


author: cx <cx22757@163.com> - 0.0.1-27
changelog:
  - Revert "feat: Added Compatibility Plugin"
  - Revert "feat: Add logic for the main plugin to retrieve information for each plugin."
  - feat: Added token verification interface, supporting custom public key input.
  - feat: Add logic for the main plugin to retrieve information for each plugin.
  - fix: update rustup source in code-check script.
  - fix: replace default rustup source in code-check script.
  - Merge remote-tracking branch 'upstream/master' into plugin
  - feat: add UT to key_manager
  - feat: Added Compatibility Plugin


author: cx <cx22757@163.com> - 0.0.1-28
changelog:
  - fix: Change the IP addresses in the document
  - fix: specify REM indexes when replaying boot log.
  - fix: Remove the parameters from the /global-trust-authority/service/v1/challenge endpoint
  - feat: Add logic for the main plugin to retrieve information for each plugin.
  - fix: address review comments
  - feat: add cca server unit tests
  - feat: remove obsolete CLI unit tests
  - feat: Add log data validation
  - feat: add unit test to endorserment, key and resource_provider
  - feat: expand client, validate, load_plugins, and error coverage
  - feat: add challenge and evidence verification handler coverage
  - feat: expand service, entities, utils, and signature update coverage
  - feat: add event log, parser, and serializer coverage
  - feat: add api-sub-key func
  - fix: move LICENSE to root directory.
  - fix: remove communication matrix in guide.
  - fix: add docs to tpm plugin
  - feat: delete Chinese for key_manager
  - feat: add UT to attestation_server
  - feat: add UT to attestation_common
  - feat: add UT to attestation_cli
  - Merge remote-tracking branch 'refs/remotes/origin/master'
  - Merge remote-tracking branch 'refs/remotes/origin/master'
  - add UT to attestation_agent


author: cx <cx22757@163.com> - 0.0.1-29
changelog:
  - feat: add attestation_client facade crate
  - refactor: move func process_nonce to NonceUtil
  - refactor: unify ascend npu evidence handling around base64 cbor
  - fix: Edit the cargo.toml file
  - fix: Change the agent's default setting to support HTTP one-way authentication; change the exist_time field in the configuration to expired_time.
  - Merge remote: openeuler/global-trust-authority master
  - fix: DICE verification configuration update
  - fix: move dependencies of cca to workspace level
  - feat: Added a new DICE verifier module
  - feat: Added SM2 and Ed25519 algorithm implementations and local configuration key mode for key management
  - feat: Added DICE authentication module and adapted CLI tool


author: cx <cx22757@163.com> - 0.0.1-30
changelog:
  - docs: fix typo ITrustee to itrustee in attestation_service.md
  - feat: add is_default field to ref_value API documentation
  - fix: Fix and refine attestation codebase and documentation
  - fix: Make the rate limiting for the agent service configurable
  - feat: Declare the dependencies of the policy_engine module separately
  - fix(agent): handle non-2xx HTTP responses to surface real error causes
  - fix: add restful configuration in attestation client
  - refactor(ref_value): remove redundant validate func
  - fix(docs): add cca type for ref_value and modify content size
  - test(attestation): add UTs for dice verifier and token
  - fix: modify dice uts
  - Merge atomgit/master into current branch
  - feat: Add documentation for dice plugin and support SM2 algorithm for token
  - test(attestation): add UTs for dice attester and verifier
  - perf: use AtomicBool for initialization check
  - fix: Modify the fields in the token so that the fields related to the log status become Boolean values
  - fix: Change the data type of the secureBoot field to boolean
  - fix: Remove the “ignore” field from all ref_value_match_status entries
  - fix: In the cca and virtCCA plugins, rename the configuration option “ccel_file_path” to “boot_log_file_p”


author: cx <cx22757@163.com> - 0.0.1-2
changelog:
  - feat(rbs-cli): add verbose tracing and refresh client command docs
  - feat(rbs):Added parameter validation to the User Management and Policy Management modules
  - feat(rbc,rbs-cli): unify token flow and extend resource auth modes
  - feat(rbs):Add logs for business logic processing
  - feat(rbs):Modify the URL for the certificate management interface
  - feat(rbs):Supports elliptic curve algorithms
  - feat(rbs):Change the key input parameter to Base64 encoding
  - Modify the business logic of the retrieve interface
  - feat(rbs):The export mode only supports JWE.
  - feat(rbs): add resource management module with JWE encryption and unified DB schema
  - feat(rbs): add policy management module with API documentation


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.38.2-4
changelog:
  - Add four patches to make gome-boxes avoid setting qemu unsupported modules
    add vnc instead of spice


author: wenlong ding <wenlong.ding@turbolinux.com.cn> - 43.2-2
changelog:
  - Move '%find_lang gnome-initial-setup' to %install, fix not found gnome-initial-setup.lang if disable %check build


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.36.0-1
changelog:
  - Upgrade to 3.36.0
  - Update Version, Release, Source0, stage 'build' and 'files'
  - Delete old patch that existed in new version, add new patch


author: laokz <zhangkai@iscas.ac.cn> - 44.5-2
changelog:
  - let BuildRequire valgrind depend on system i386 i486 i586 i686 pentium3 pentium4 athlon geode x86_64 armv3l armv4b armv4l armv4tl armv5tl armv5tel armv5tejl armv6l armv6hl armv7l armv7hl armv7hnl armv8l armv8hl armv8hnl armv8hcnl aarch64 loongarch64 powerpc64le ppc64le sw_64


author: yaoxin <1024769339@qq.com> - 9.2.10-1
changelog:
  - Update to 9.2.10 for fix cves:CVE-2022-36062,CVE-2022-35957
    CVE-2022-39201,CVE-2022-31130,CVE-2022-31123,CVE-2022-39306
    CVE-2022-39307,CVE-2022-23552,CVE-2022-39324,CVE-2022-31097


author: weijin deng <weijin.deng@turbolinux.com.cn> - 0.3.13-3
changelog:
  - Solve bug of "PANIC: unprotected error in call to Lua API
    (attempt to call a nil value) Aborted"


author: yaoxin <1024769339@qq.com> - 2.8.139-1
changelog:
  - Update to 2.8.139:
    * Minor improvement of the `SOAP_XML_IGNORENS` (ignore XML
      namespaces) logic when performing non-strict XML validation
      (`SOAP_XML_STRICT` is not enabled) when ignoring extra XML
      extensibility elements in an inbound SOAP/XML message; no
      longer produces validation errors for non-serializable XML to
      "safely" ignore, unless strict XML validation is enabled with
      `SOAP_XML_STRICT`, as expected.
    * Minor update to improve XML entity parsing within limits.
    * The wsdl2h tool with SSL/TLS enabled for https no longer
      supports legacy SSLv3, only TLS 1.0 to 1.3, this avoids
      potential TLS/SSL handshake errors.
    * Corrected a logic bug in wsdl2h for attribute/elemenet
      reference qualification for C++ class and C struct members in
      the generated header interface file for soapcpp2.


author: herengui <herengui@kylinsec.com.cn> - 1.50.2-9
changelog:
  - Fix CVE-2026-28296: reject paths containing CR/LF characters in FTP backend
  - ftp: Reject paths with CR/LF in g_vfs_ftp_file_new_from_ftp (server-supplied paths)


author: Liu Wang <1823363429@qq.com> - 6.6.0-120.0.0.98
changelog:
  - Split kernel modules into kernel-extra-modules subpackage
  - Prioritizes core kmod (networking/drm/block/modesetting) in main kernel package
  - All extra modules and their dependencies are isolated to kernel-extra-modules
  - Added module-filelist generation scripts for both packages
  - Updated post-install scripts to handle extra modules dependency


author: Li Nan <linan122@huawei.com> - 6.6.0-122.0.0.99
changelog:
  - !19317 ub: ubase: Remove useless character '+'
  - ub: ubase: Remove useless character '+'
  - !18870 add sentry kmod
  - drivers/ub/sentry: add sentry_remote_reporter module
  - drivers/ub/sentry: add sentry_uvb_comm module
  - drivers/ub/sentry: add sentry_urma_comm module
  - drivers/ub/sentry: add sentry_reporter and sentry_msg_help
  - !19306  net: Netdev use RCU protection
  - !19290 urma: bugfix the issue of urma stream generation failure
  - !19292  blk-ioinf: accumulate total latency properly across sampling periods
  - !19230  drm/vmwgfx: Fix Use-after-free in validation
  - !19291  usbnet: Fix using smp_processor_id() in preemptible code warnings
  - net: use dst_dev_rcu() in sk_setup_caps()
  - ipv4: use RCU protection in ip_dst_mtu_maybe_forward()
  - ipv6: use RCU in ip6_output()
  - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().
  - net: dst: Fix kabi-breakage for struct dst_entry
  - ipv6: use RCU in ip6_xmit()
  - ipv4: start using dst_dev_rcu()
  - tcp_metrics: use dst_dev_net_rcu()
  - net: dst: introduce dst->dev_rcu
  - net: Add locking to protect skb->dev access in ip_output
  - net: dst: add four helpers to annotate data-races around dst->dev
  - !19191  Fix CVE-2025-40200
  - urma: bugfix the issue of urma stream generation failure
  - acpi: provides acpi power notifier chain
  - !19303  pid: Add a judgment for ns null in pid_nr_ns
  - !19282  fix cves
  - !19211  ACPI: video: Fix use-after-free in acpi_video_switch_brightness()
  - !19175 [OLK-6.6] Fix CVE-2025-38666
  - !18496 [OLK-6.6] Fix CVE-2025-22107
  - !18029 [OLK-6.6] Fix CVE-2025-37892
  - !19151 [OLK-6.6] Fix CVE-2025-40055
  - !19131 [OLK-6.6] Fix CVE-2025-40012
  - !19125 [OLK-6.6] Fix CVE-2025-39692
  - !19124 [OLK-6.6] Fix CVE-2025-39694
  - !19133 [OLK-6.6] Fix CVE-2025-40082
  - !19118 [OLK-6.6] Fix CVE-2025-39703
  - !19113 [OLK-6.6] Fix CVE-2025-39938
  - !19111 [OLK-6.6] Fix CVE-2025-40043
  - !19100 obmm: Ownership Based Memory Management framework
  - pid: Add a judgment for ns null in pid_nr_ns
  - !19285  xsched: XCU Partition
  - !19293  sched/rt: Fix race in push_rt_task
  - !19294  dm-stripe: fix a possible integer overflow
  - !19278 ub: ubase: Improve performance and fix some bug
  - dm-stripe: fix a possible integer overflow
  - sched/rt: Fix race in push_rt_task
  - blk-ioinf: accumulate total latency properly across sampling periods
  - usbnet: Fix using smp_processor_id() in preemptible code warnings
  - xsched: move stream_lock into xsched_vsm_add_tail() to avoid sleeping in atomic context
  - xsched: rename vstream->id to vstream->sq_id
  - xsched: add null check for sched in xsched_xse_set_class
  - xsched: modify the logic for inc and dec the count value
  - xsched: replace hard-coded numeric values
  - xsched: unify root detection logic for cgroups
  - xsched: remove parent->lock and rely on cgroup_mutex for shares update
  - xsched: avoid sleeping while holding spinlock in xcu_move_task()
  - xsched: add missing spin_unlock() in xcu_move_task() error path
  - xsched: enforce valid xsched scheduler config dependencies
  - xsched: unify log prefix format and remove duplicated prefix macros
  - mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead()
  - mm: zswap: move allocations during CPU init outside the lock
  - mm: zswap: properly synchronize freeing resources during CPU hotunplug
  - mm/zswap: change per-cpu mutex and buffer to per-acomp_ctx
  - mm/hugetlb: unshare page tables during VMA split, not before
  - !19194  ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping
  - !19195  iommu/vt-d: debugfs: Fix legacy mode page table dump logic
  - !19273  net/ip6_tunnel: Prevent perpetual tunnel growth
  - !19272  tls: wait for pending async decryptions if tls_strp_msg_hold fails
  - !19274  netfilter: nft_objref: validate objref and objrefmap expressions
  - !19052  arm64/mpam: Add build dependencies for CONFIG_RESCTRL_IOMMU
  - !19182  ALSA: ump: Fix buffer overflow at UMP SysEx message conversion
  - !19179  x86/iopl: Cure TIF_IO_BITMAP inconsistencies
  - !19178  fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var
  - !19177  ACPICA: fix acpi parse and parseext cache leaks
  - !19176  crypto: ccp - Fix crash when rebind ccp device for ccp.ko
  - ub: ubase: change cmdq/mbx timeout val & fix spell error
  - ub: ubase: adapt to response message structure change for ctrlq sl query
  - net: unic: Fix UE deactivate message cleaning
  - net: unic: Use copy instead of ummu map in tx
  - netfilter: nft_objref: validate objref and objrefmap expressions
  - net/ip6_tunnel: Prevent perpetual tunnel growth
  - tls: wait for pending async decryptions if tls_strp_msg_hold fails
  - !19257  init/Kconfig: Move ARCH_SUPPORTS_SCHED_SOFT_QUOTA to drop CGROUPS dependency
  - obmm: Add resource management support for imported memory
  - obmm: Add sysfs interface for configuration and monitoring
  - obmm: Add low memory management support
  - obmm: Add ownership management and transfer mechanisms
  - obmm: Add mmap support for shared memory regions
  - obmm: Add shared memory device interface
  - obmm: Add pre-import support for performance optimization
  - obmm: Add memory region import functionality
  - obmm: Add address validation and checking
  - obmm: Add user address export support
  - obmm: Add memory region export functionality
  - obmm: Implement memory pool allocator
  - obmm: Add continuous memory allocator for OBMM framework
  - obmm: Add cache maintenance helpers for inter-node consistency
  - obmm: Add region definitions and core data structures
  - obmm: Add Ownership Based Memory Management framework
  - ub:hisi-ubus: Support for ub memory decoder ras handle
  - ub:hisi-ubus: Support for UB Memory Decoder Initialization
  - ub:ubus: Support for UB Memory Decoder general layer implementation
  - !19227  bpf: Avoid RCU context warning when unpinning htab with internal structs
  - !18830  mm: swap: check for stable address space before operating on the VMA
  - init/Kconfig: Move ARCH_SUPPORTS_SCHED_SOFT_QUOTA to drop CGROUPS dependency
  - !19165 Documentation: Add opensource document for ubase&unic&ubl
  - !19243 Revert "net: hns3: add support for queue bonding mode of flow director"
  - !19115  nvmet-fc: move lsop put work to nvmet_fc_ls_req_op
  - !19222  sctp: Fix MAC comparison to be constant-time
  - !19223  net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce()
  - !19224  bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}
  - !19226  sunrpc: fix null pointer dereference on zero-length checksum
  - Revert "net: hns3: add support for queue bonding mode of flow director"
  - Revert "net: hns3: add queue bonding mode support for VF"
  - Revert "net: hns3: refactor the debugfs for dumping FD tcam"
  - Revert "net: hns3: correct the logic of hclge_sync_vf_qb_mode()"
  - Revert "net: hns3: allocate fd counter for queue bonding"
  - !19166 [OLK-6.6][linux-6.6.y sync] Backport 6.6.89-6.6.90 LTS Patches
  - !19116 Fix SPI registration failure logging level
  - !19216  net: usb: asix: hold PM usage ref to avoid PM/MDIO + RTNL deadlock
  - drm/vmwgfx: Fix Use-after-free in validation
  - Fix SPI registration failure logging level
  - !19072 [OLK-6.6] Fix CVE-2025-39827
  - !18647 [OLK-6.6] Fix CVE-2025-38729
  - !19117 [OLK-6.6] Fix CVE-2025-40088
  - !19114 [OLK-6.6] Fix CVE-2025-40084
  - !19048 [OLK-6.6] Fix CVE-2025-39839
  - !18615 [OLK-6.6] Fix CVE-2025-39737
  - !18791 【OLK-6.6】fix CVE-2025-39736
  - !18644 [OLK-6.6] Fix CVE-2025-38717
  - !18653 [OLK-6.6] Fix CVE-2025-38705
  - !18780 【OLK-6.6】fix  CVE-2025-38712
  - !18613 [OLK-6.6] Fix CVE-2025-38713
  - !18632 [OLK-6.6] Fix CVE-2025-38714
  - !18861 [OLK-6.6] Fix CVE-2025-38697
  - !18345 [OLK-6.6] Fix CVE-2025-38663
  - !18948 [OLK-6.6] Fix CVE-2025-38105
  - !18661 [OLK-6.6] Fix CVE-2025-39790
  - !18867 [OLK-6.6] Fix CVE-2025-39766
  - !18636 [OLK-6.6]Fix CVE-2025-39751
  - !19110  CVE-2025-40198
  - !19212  CVE-2025-40179
  - !19057  blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx
  - !19213  Fix CVE-2025-39964
  - !19189  KVM: arm64: ipiv: change declaration argument
  - bpf: Avoid RCU context warning when unpinning htab with internal structs
  - sunrpc: fix null pointer dereference on zero-length checksum
  - bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}
  - net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce()
  - sctp: Fix MAC comparison to be constant-time
  - !19214 ub: udma: recent bugfix for udma.
  - !19209  Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak
  - !19193  crypto: af_alg - Set merge to zero early in af_alg_sendmsg
  - !19206  net: dlink: handle copy_thresh allocation failure
  - !19207  net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast
  - net: usb: asix: hold PM usage ref to avoid PM/MDIO + RTNL deadlock
  - ub: ubase: Introduces the functions and data structures exposed by the ubase driver
  - ub: ubase: Add ubase opensource document
  - net: unic: Add a doc for unic driver
  - ub: udma: Resolve issues related to stream logout and interrupt lock.
  - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx
  - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg
  - ext4: align max orphan file size with e2fsprogs limit
  - ext4: free orphan info with kvfree
  - ext4: verify orphan file size is not too big
  - ext4: use kmalloc_array() for array space allocation
  - ub: udma: reset and segment permission issues are resolved.
  - !19203  Fix CVE-2025-40202
  - ACPI: video: Fix use-after-free in acpi_video_switch_brightness()
  - Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak
  - net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast
  - net: dlink: handle copy_thresh allocation failure
  - spi: tegra114: Use value to check for invalid delays
  - platform/x86/amd: pmc: Clear metrics table at start of cycle
  - dm: fix copying after src array boundaries
  - iommu/arm-smmu-v3: Fix iommu_device_probe bug due to duplicated stream ids
  - drivers: base: handle module_kobject creation
  - kernel: globalize lookup_or_create_module_kobject()
  - kernel: param: rename locate_module_kobject
  - xhci: split free interrupter into separate remove and free parts
  - xhci: Clean up stale comment on ERST_SIZE macro
  - xhci: Use more than one Event Ring segment
  - xhci: Set DESI bits in ERDP register correctly
  - Revert "drm/meson: vclk: fix calculation of 59.94 fractional rates"
  - arm64: dts: st: Use 128kB size for aliased GIC400 register access on stm32mp25 SoCs
  - arm64: dts: st: Adjust interrupt-controller for stm32mp25 SoCs
  - ARM: dts: opos6ul: add ksz8081 phy properties
  - firmware: arm_ffa: Skip Rx buffer ownership release if not acquired
  - firmware: arm_scmi: Balance device refcount when destroying devices
  - sch_htb: make htb_qlen_notify() idempotent
  - ASoC: soc-core: Stop using of_property_read_bool() for non-boolean properties
  - ASoC: Use of_property_read_bool()
  - net: vertexcom: mse102x: Fix RX error handling
  - net: vertexcom: mse102x: Add range check for CMD_RTS
  - net: vertexcom: mse102x: Fix LEN_MASK
  - net: vertexcom: mse102x: Fix possible stuck of SPI interrupt
  - net: fec: ERR007885 Workaround for conventional TX
  - net: ipv6: fix UDPv6 GSO segmentation with NAT
  - net: dsa: felix: fix broken taprio gate states after clock jump
  - net: mdio: mux-meson-gxl: set reversed bit when using internal phy
  - net: dlink: Correct endianness handling of led_mode
  - nvme-pci: fix queue unquiesce check on slot_reset
  - ALSA: ump: Fix buffer overflow at UMP SysEx message conversion
  - pds_core: make pdsc_auxbus_dev_del() void
  - pds_core: delete VF dev on reset
  - pds_core: check health in devcmd wait
  - net: ethernet: mtk-star-emac: rearm interrupts in rx_poll only when advised
  - net: mscc: ocelot: delete PVID VLAN when readding it as non-PVID
  - net: mscc: ocelot: treat 802.1ad tagged traffic as 802.1Q-untagged
  - !19190  Revert "ipmi: fix msg stack when IPMI is disconnected"
  - !19167  drm/vmwgfx: Fix a null-ptr access in the cursor snooper
  - ipmi: Fix handling of messages with provided receive message pointer
  - ipmi: Rework user message limit handling
  - !19134  Bluetooth: ISO: Fix possible UAF on iso_conn_free
  - !19119  dm: fix NULL pointer dereference in __dm_suspend()
  - !19137  ext4: guard against EA inode refcount underflow in xattr update
  - iommu/vt-d: debugfs: Fix legacy mode page table dump logic
  - ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping
  - crypto: af_alg - Set merge to zero early in af_alg_sendmsg
  - Bluetooth: btusb: avoid NULL pointer dereference in skb_dequeue()
  - net/mlx5: E-switch, Fix error handling for enabling roce
  - net/mlx5: E-Switch, Initialize MAC Address for Default GID
  - powerpc/boot: Fix dash warning
  - drm/i915/pxp: fix undefined reference to `intel_pxp_gsccs_is_ready_for_sessions'
  - powerpc/boot: Check for ld-option support
  - ASoC: soc-pcm: Fix hw_params() and DAPM widget sequence
  - Squashfs: reject negative file sizes in squashfs_read_inode()
  - Squashfs: add additional inode sanity checking
  - Revert "ipmi: fix msg stack when IPMI is disconnected"
  - KVM: arm64: ipiv: change declaration argument
  - !19030  cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()
  - ALSA: ump: Fix buffer overflow at UMP SysEx message conversion
  - !19045 net: fix the compile problem introduced by AF_UB
  - x86/iopl: Cure TIF_IO_BITMAP inconsistencies
  - fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var
  - ACPICA: fix acpi parse and parseext cache leaks
  - crypto: ccp - Fix crash when rebind ccp device for ccp.ko
  - net: appletalk: Fix use-after-free in AARP proxy probe
  - net: ubl: Add a doc for ubl module
  - !19161 uburma: add tp_type in urma ioctl operation.
  - drm/vmwgfx: Fix a null-ptr access in the cursor snooper
  - PCI: imx6: Skip controller_id generation logic for i.MX7D
  - Revert "PCI: imx6: Skip controller_id generation logic for i.MX7D"
  - selftests/bpf: extend changes_pkt_data with cases w/o subprograms
  - selftests/bpf: validate that tail call invalidates packet pointers
  - selftests/bpf: freplace tests for tracking of changes_packet_data
  - cpufreq: Fix setting policy limits when frequency tables are used
  - cpufreq: Avoid using inconsistent policy->min and policy->max
  - smb: client: fix zero length for mkdir POSIX create context
  - platform/x86/intel-uncore-freq: Fix missing uncore sysfs during CPU hotplug
  - platform/x86/amd: pmc: Require at least 2.5 seconds between HW sleep cycles
  - iommu/vt-d: Apply quirk_iommu_igfx for 8086:0044 (QM57/QS57)
  - iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid
  - dm: always update the array size in realloc_argv on success
  - dm-integrity: fix a warning on invalid table line
  - dm-bufio: don't schedule in atomic context
  - tracing: Do not take trace_event_sem in print_event_fields()
  - spi: tegra114: Don't fail set_cs_timing when delays are zero
  - mmc: renesas_sdhi: Fix error handling in renesas_sdhi_probe
  - mm/memblock: repeat setting reserved region nid if array is doubled
  - mm/memblock: pass size instead of end to memblock_set_node()
  - amd-xgbe: Fix to ensure dependent features are toggled with RX checksum offload
  - i2c: imx-lpi2c: Fix clock count when probe defers
  - EDAC/altera: Set DDR and SDMMC interrupt mask before registration
  - EDAC/altera: Test the correct error reg offset
  - drm/fdinfo: Protect against driver unbind
  - btrfs: fix COW handling in run_delalloc_nocow()
  - ALSA: usb-audio: Add second USB ID for Jabra Evolve 65 headset
  - ALSA: usb-audio: Add retry on -EPROTO from usb_set_interface()
  - !19143 [OLK-6.6][linux-6.6.y sync] Backport 6.6.88-6.6.89 LTS Patches
  - uburma: add tp_type in urma ioctl operation.
  - !19132  IPIV: fix bug in live migration
  - ocfs2: fix double free in user_cluster_connect()
  - !17056 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.68-6.6.69 LTS Conflicts Patches
  - !18479 [OLK-6.6] xhci: fix memory leak regression when freeing xhci vdev devices depth first
  - !19007  uio_hv_generic: Let userspace take care of interrupt mask
  - ACPI: PPTT: Fix processor subtable walk
  - scsi: pm80xx: Fix array-index-out-of-of-bounds on rmmod
  - cifs: Query EA $LXMOD in cifs_query_path_info() for WSL reparse points
  - dmaengine: Revert "dmaengine: dmatest: Fix dmatest waiting less when interrupted"
  - Revert "usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running"
  - ata: libata-scsi: Fix CDL control
  - net: fix the compile problem introduced by AF_UB
  - objtool: Silence more KCOV warnings, part 2
  - objtool: Ignore end-of-section jumps for KCOV/GCOV
  - nvme: fixup scan failure for non-ANA multipath controllers
  - MIPS: cm: Fix warning if MIPS_CM is disabled
  - net: dsa: mv88e6xxx: enable STU methods for 6320 family
  - net: dsa: mv88e6xxx: enable .port_set_policy() for 6320 family
  - net: dsa: mv88e6xxx: enable PVT for 6321 switch
  - net: dsa: mv88e6xxx: fix atu_move_port_mask for 6341 family
  - comedi: jr3_pci: Fix synchronous deletion of timer
  - driver core: introduce device_set_driver() helper
  - x86/pvh: Call C code via the kernel virtual mapping
  - md/raid1: Add check for missing source disk in process_checks()
  - x86/cpu: Add CPU model number for Bartlett Lake CPUs with Raptor Cove cores
  - ubsan: Fix panic from test_ubsan_out_of_bounds
  - spi: tegra210-quad: add rate limiting and simplify timeout error message
  - spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts
  - loop: aio inherit the ioprio of original request
  - riscv: Provide all alternative macros all the time
  - iomap: skip unnecessary ifs_block_is_uptodate check
  - x86/i8253: Call clockevent_i8253_disable() with interrupts disabled
  - scsi: pm80xx: Set phy_attached to zero when device is gone
  - scsi: ufs: exynos: Ensure pre_link() executes before exynos_ufs_phy_init()
  - ext4: make block validity check resistent to sb bh corruption
  - cifs: Fix querying of WSL CHR and BLK reparse points over SMB1
  - timekeeping: Add a lockdep override in tick_freeze()
  - cifs: Fix encoding of SMB1 Session Setup Kerberos Request in non-UNICODE mode
  - nvmet-fc: put ref when assoc->del_work is already scheduled
  - nvmet-fc: take tgtport reference only once
  - x86/bugs: Don't fill RSB on context switch with eIBRS
  - x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
  - x86/bugs: Use SBPB in write_ibpb() if applicable
  - selftests/mincore: Allow read-ahead pages to reach the end of the file
  - gpiolib: of: Move Atmel HSMCI quirk up out of the regulator comment
  - objtool: Stop UNRET validation on UD2
  - nvme: multipath: fix return value of nvme_available_path
  - nvme: re-read ANA log page after ns scan completes
  - ACPI PPTT: Fix coding mistakes in a couple of sizeof() calls
  - ACPI: EC: Set ec_no_wakeup for Lenovo Go S
  - nvme: requeue namespace scan on missed AENs
  - xen: Change xen-acpi-processor dom0 dependency
  - selftests: ublk: fix test_stripe_04
  - udmabuf: fix a buf size overflow issue during udmabuf creation
  - KVM: s390: Don't use %pK through debug printing
  - KVM: s390: Don't use %pK through tracepoints
  - sched/isolation: Make CONFIG_CPU_ISOLATION depend on CONFIG_SMP
  - io_uring: always do atomic put from iowq
  - rtc: pcf85063: do a SW reset if POR failed
  - ntb_hw_amd: Add NTB PCI ID for new gen CPU
  - ntb: reduce stack usage in idt_scan_mws
  - objtool, lkdtm: Obfuscate the do_nothing() pointer
  - objtool, regulator: rk808: Remove potential undefined behavior in rk806_set_mode_dcdc()
  - objtool, ASoC: codecs: wcd934x: Remove potential undefined behavior in wcd934x_slim_irq_handler()
  - objtool, panic: Disable SMAP in __stack_chk_fail()
  - objtool: Silence more KCOV warnings
  - thunderbolt: Scan retimers after device router has been enumerated
  - usb: host: xhci-plat: mvebu: use ->quirks instead of ->init_quirk() func
  - usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev()
  - usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running
  - dmaengine: dmatest: Fix dmatest waiting less when interrupted
  - sound/virtio: Fix cancel_sync warnings on uninitialized work_structs
  - usb: dwc3: gadget: Avoid using reserved endpoints on Intel Merrifield
  - usb: dwc3: gadget: Refactor loop to avoid NULL endpoints
  - fs/ntfs3: Fix WARNING in ntfs_extend_initialized_size
  - usb: host: max3421-hcd: Add missing spi_device_id table
  - bpf: Reject attaching fexit/fmod_ret to __noreturn functions
  - bpf: Only fails the busy counter check in bpf_cgrp_storage_get if it creates storage
  - bpf: bpftool: Setting error code in do_loader()
  - s390/tty: Fix a potential memory leak bug
  - s390/sclp: Add check for get_zeroed_page()
  - parisc: PDT: Fix missing prototype warning
  - clk: check for disabled clock-provider in of_clk_get_hw_from_clkspec()
  - crypto: ccp - Add support for PCI device 0x1134
  - MIPS: cm: Detect CM quirks from device tree
  - pinctrl: renesas: rza2: Fix potential NULL pointer dereference
  - USB: wdm: add annotation
  - USB: wdm: wdm_wwan_port_tx_complete mutex in atomic context
  - USB: wdm: close race between wdm_open and wdm_wwan_port_stop
  - USB: wdm: handle IO errors in wdm_wwan_port_start
  - USB: VLI disk crashes if LPM is used
  - usb: quirks: Add delay init quirk for SanDisk 3.2Gen1 Flash Drive
  - usb: quirks: add DELAY_INIT quirk for Silicon Motion Flash Drive
  - usb: dwc3: xilinx: Prevent spike in reset signal
  - USB: OHCI: Add quirk for LS7A OHCI controller (rev 0x02)
  - usb: chipidea: ci_hdrc_imx: implement usb_phy_init() error handling
  - usb: chipidea: ci_hdrc_imx: fix call balance of regulator routines
  - usb: cdns3: Fix deadlock when using NCM gadget
  - USB: serial: simple: add OWON HDS200 series oscilloscope support
  - USB: serial: option: add Sierra Wireless EM9291
  - USB: serial: ftdi_sio: add support for Abacus Electrics Optical Probe
  - serial: sifive: lock port in startup()/shutdown() callbacks
  - serial: msm: Configure correct working mode before starting earlycon
  - misc: microchip: pci1xxxx: Fix incorrect IRQ status handling during ack
  - misc: microchip: pci1xxxx: Fix Kernel panic during IRQ handler registration
  - char: misc: register chrdev region with all possible minors
  - KVM: x86: Explicitly treat routing entry type changes as changes
  - mei: me: add panther lake H DID
  - scsi: Improve CDL control
  - USB: storage: quirk for ADATA Portable HDD CH94
  - ata: libata-scsi: Fix ata_msense_control_ata_feature()
  - ata: libata-scsi: Fix ata_mselect_control_ata_feature() return type
  - ata: libata-scsi: Improve CDL control
  - cxl/core/regs.c: Skip Memory Space Enable check for RCD and RCH Ports
  - KVM: SVM: Allocate IR data using atomic allocation
  - io_uring: fix 'sync' handling of io_fallback_tw()
  - LoongArch: Remove a bogus reference to ZONE_DMA
  - drm/amd/display: Force full update in gpu reset
  - drm/amd/display: Fix gpu reset in multidisplay config
  - net: phy: microchip: force IRQ polling mode for lan88xx
  - net: selftests: initialize TCP header and skb payload with zero
  - crypto: atmel-sha204a - Set hwrng quality to lowest possible
  - virtio_console: fix missing byte order handling for cols and rows
  - LoongArch: Make do_xyz() exception handlers more robust
  - LoongArch: Make regs_irqs_disabled() more clear
  - LoongArch: Select ARCH_USE_MEMTEST
  - splice: remove duplicate noinline from pipe_clear_nowait
  - iommu/amd: Return an error if vCPU affinity is set for non-vCPU IRTE
  - pds_core: Remove unnecessary check in pds_client_adminq_cmd()
  - net: dsa: mt7530: sync driver-specific behavior of MT7531 variants
  - net: ethernet: mtk_eth_soc: net: revise NETSYSv3 hardware configuration
  - scsi: core: Clear flags for scsi_cmnd that did not complete
  - btrfs: avoid page_lockend underflow in btrfs_punch_hole_lock_range()
  - cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate()
  - dma/contiguous: avoid warning about unused size_bytes
  - ceph: Fix incorrect flush end position calculation
  - scsi: ufs: qcom: fix dev reference leaked through of_qcom_ice_get
  - of: resolver: Fix device node refcount leakage in of_resolve_phandles()
  - of: resolver: Simplify of_resolve_phandles() using __free()
  - clk: renesas: r9a07g043: Fix HP clock source for RZ/Five
  - clk: renesas: r9a07g04[34]: Fix typo for sel_shdi variable
  - clk: renesas: r9a07g04[34]: Use SEL_SDHI1_STS status configuration for SD1 mux
  - clk: renesas: rzg2l: Refactor SD mux driver
  - clk: renesas: rzg2l: Remove CPG_SDHI_DSEL from generic header
  - clk: renesas: rzg2l: Add struct clk_hw_data
  - clk: renesas: rzg2l: Use u32 for flag and mux_flags
  - arm64: tegra: Remove the Orin NX/Nano suspend key
  - iio: adc: ad7768-1: Fix conversion result sign
  - iio: adc: ad7768-1: Move setting of val a bit later to avoid unnecessary return value check
  - ASoC: q6apm-dai: make use of q6apm_get_hw_pointer
  - ASoC: qcom: Fix trivial code style issues
  - ASoC: qcom: lpass: Make asoc_qcom_lpass_cpu_platform_remove() return void
  - ASoC: q6apm-dai: schedule all available frames to avoid dsp under-runs
  - ASoC: qcom: q6apm-dai: drop unused 'q6apm_dai_rtd' fields
  - net: dsa: mv88e6xxx: fix VTU methods for 6320 family
  - net: dsa: mv88e6xxx: fix internal PHYs for 6320 family
  - auxdisplay: hd44780: Fix an API misuse in hd44780.c
  - auxdisplay: hd44780: Convert to platform remove callback returning void
  - mmc: sdhci-msm: fix dev reference leaked through of_qcom_ice_get
  - soc: qcom: ice: introduce devm_of_qcom_ice_get
  - module: sign with sha512 instead of sha1 by default
  - !18797 [OLK-6.6] Fix CVE-2025-38331
  - !18978 [OLK-6.6][linux-6.6.y sync] Backport 6.6.87-6.6.88 LTS Patches
  - !19141  crash: fix crashkernel resource shrink
  - !19136  ext4: detect invalid INLINE_DATA + EXTENTS flag combination
  - crash: fix crashkernel resource shrink
  - ext4: guard against EA inode refcount underflow in xattr update
  - ext4: detect invalid INLINE_DATA + EXTENTS flag combination
  - net: rose: fix a typo in rose_clear_routes()
  - Bluetooth: ISO: Fix possible UAF on iso_conn_free
  - net: nfc: nci: Add parameter validation for packet data
  - KVM: arm64: ipiv: fix bug in live migration
  - KVM: arm64: ipiv: Change parameter from vcpu to kvm
  - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
  - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
  - net/smc: fix warning in smc_rx_splice() when calling get_page()
  - smb: server: split ksmbd_rdma_stop_listening() out of ksmbd_rdma_destroy()
  - s390/sclp: Fix SCCB present check
  - net: rose: include node references in rose_neigh refcount
  - net: rose: convert 'use' field to refcount_t
  - net: rose: split remove and free operations in rose_remove_neigh()
  - dm: fix NULL pointer dereference in __dm_suspend()
  - net, hsr: reject HSR frame if skb can't hold tag
  - hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp()
  - nvmet-fc: move lsop put work to nvmet_fc_ls_req_op
  - ksmbd: transport_ipc: validate payload size before reading handle
  - ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed
  - ext4: fix string copying in parse_apply_sb_mount_options()
  - ext4: avoid potential buffer over-read in parse_apply_sb_mount_options()
  - blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx
  - arm64/mpam: Add build dependencies for CONFIG_RESCTRL_IOMMU
  - batman-adv: fix OOB read/write in network-coding decode
  - cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()
  - md/md-bitmap: fix GPF in bitmap_get_stats()
  - igc: fix lock order in igc_ptp_reset
  - Reapply "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()"
  - xen/x86: fix initial memory balloon target
  - pwm: mediatek: Ensure to disable clocks in error path
  - ALSA: hda/realtek: Fix built-in mic on another ASUS VivoBook model
  - drm/tests: Build KMS helpers when DRM_KUNIT_TEST_HELPERS is enabled
  - btrfs: fix the length of reserved qgroup to free
  - MIPS: ds1287: Match ds1287_set_base_clock() function types
  - MIPS: cevt-ds1287: Add missing ds1287.h include
  - MIPS: dec: Declare which_prom() as static
  - sign-file,extract-cert: use pkcs11 provider for OPENSSL MAJOR >= 3
  - sign-file,extract-cert: avoid using deprecated ERR_get_error_line()
  - sign-file,extract-cert: move common SSL helper functions to a header
  - nvmet-fc: Remove unused functions
  - landlock: Add the errata interface
  - wifi: rtw89: pci: disable PCIE wake bit when PCIE deinit
  - wifi: rtw89: pci: add pre_deinit to be called after probe complete
  - LoongArch: Eliminate superfluous get_numa_distances_cnt()
  - x86/split_lock: Fix the delayed detection logic
  - x86/xen: fix memblock_reserve() usage on PVH
  - x86/xen: move xen_reserve_extra_memory()
  - Fix mmu notifiers for range-based invalidates
  - misc: pci_endpoint_test: Fix 'irq_type' to convey the correct type
  - misc: pci_endpoint_test: Fix displaying 'irq_type' after 'request_irq' error
  - kbuild: Add '-fno-builtin-wcslen'
  - cpufreq: Reference count policy in cpufreq_update_limits()
  - io_uring/net: fix accept multishot handling
  - drm/i915/gvt: fix unterminated-string-initialization warning
  - drm/sti: remove duplicate object names
  - drm/amdgpu/dma_buf: fix page_link check
  - drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero
  - drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero
  - drm/amd/pm/smu11: Prevent division by zero
  - drm/amd/pm/powerplay: Prevent division by zero
  - drm/amd/pm: Prevent division by zero
  - drm/amd: Handle being compiled without SI or CIK support better
  - drm/msm/a6xx: Fix stale rpmh votes from GPU
  - drm/repaper: fix integer overflows in repeat functions
  - perf/x86/intel/uncore: Fix the scale of IIO free running counters on SPR
  - perf/x86/intel/uncore: Fix the scale of IIO free running counters on ICX
  - perf/x86/intel/uncore: Fix the scale of IIO free running counters on SNR
  - perf/x86/intel: Allow to update user space GPRs from PEBS records
  - scsi: ufs: exynos: Ensure consistent phy reference counts
  - scsi: megaraid_sas: Block zero-length ATA VPD inquiry
  - x86/boot/sev: Avoid shared GHCB page for early memory acceptance
  - x86/cpu/amd: Fix workaround for erratum 1054
  - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches
  - string: Add load_unaligned_zeropad() code path to sized_strscpy()
  - smb3 client: fix open hardlink on deferred close file error
  - selftests/mm: generate a temporary mountpoint for cgroup filesystem
  - riscv: Avoid fortify warning in syscall_get_arguments()
  - ksmbd: fix the warning from __kernel_write_iter
  - ksmbd: Prevent integer overflow in calculation of deadtime
  - ksmbd: fix use-after-free in smb_break_all_levII_oplock()
  - ovl: don't allow datadir only
  - mm: fix apply_to_existing_page_range()
  - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable()
  - loop: LOOP_SET_FD: send uevents for partitions
  - loop: properly send KOBJ_CHANGED uevent for disk device
  - crypto: caam/qi - Fix drv_ctx refcount bug
  - btrfs: correctly escape subvol in btrfs_show_options()
  - Bluetooth: vhci: Avoid needless snprintf() calls
  - Bluetooth: l2cap: Process valid commands in too long frame
  - ftrace: fix incorrect hash size in register_ftrace_direct()
  - i2c: atr: Fix wrong include
  - nfs: add missing selections of CONFIG_CRC32
  - asus-laptop: Fix an uninitialized variable
  - ASoC: codecs:lpass-wsa-macro: Fix logic of enabling vi channels
  - ASoC: codecs:lpass-wsa-macro: Fix vi feedback rate
  - writeback: fix false warning in inode_to_wb()
  - cpufreq/sched: Fix the usage of CPUFREQ_NEED_UPDATE_LIMITS
  - riscv: KGDB: Remove ".option norvc/.option rvc" for kgdb_compiled_break
  - riscv: KGDB: Do not inline arch_kgdb_breakpoint()
  - kunit: qemu_configs: SH: Respect kunit cmdline
  - riscv: Properly export reserved regions in /proc/iomem
  - net: ethernet: mtk_eth_soc: revise QDMA packet scheduler settings
  - net: ethernet: mtk_eth_soc: correct the max weight of the queue limit for 100Mbps
  - ptp: ocp: fix start time alignment in ptp_ocp_signal_set
  - net: dsa: avoid refcount warnings when ds->ops->tag_8021q_vlan_del() fails
  - net: bridge: switchdev: do not notify new brentries as changed
  - net: b53: enable BPDU reception for management port
  - netlink: specs: rt-link: adjust mctp attribute naming
  - netlink: specs: rt-link: add an attr layer around alt-ifname
  - ata: libata-sata: Save all fields from sense data descriptor
  - net: ethernet: ti: am65-cpsw: fix port_np reference counting
  - net: ethernet: ti: am65-cpsw-nuss: rename phy_node -> port_np
  - pds_core: fix memory leak in pdsc_debugfs_add_qcq()
  - test suite: use %zu to print size_t
  - igc: add lock preventing multiple simultaneous PTM transactions
  - igc: cleanup PTP module if probe fails
  - igc: handle the IGC_PTP_ENABLED flag correctly
  - igc: move ktime snapshot into PTM retry loop
  - igc: increase wait time before retrying PTM
  - Revert "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()"
  - Bluetooth: hci_event: Fix sending MGMT_EV_DEVICE_FOUND for invalid address
  - ASoC: cs42l43: Reset clamp override on jack removal
  - RDMA/usnic: Fix passing zero to PTR_ERR in usnic_ib_pci_probe()
  - ovl: remove unused forward declaration
  - ASoC: Intel: avs: Fix null-ptr-deref in avs_component_probe()
  - ASoC: dwc: always enable/disable i2s irqs
  - md/md-bitmap: fix stats collection for external bitmaps
  - md/raid10: fix missing discard IO accounting
  - scsi: iscsi: Fix missing scsi_host_put() in error path
  - wifi: wl1251: fix memory leak in wl1251_tx_work
  - wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()
  - Bluetooth: hci_uart: Fix another race during initialization
  - media: mediatek: vcodec: mark vdec_vp9_slice_map_counts_eob_coef noinline
  - x86/e820: Fix handling of subpage regions when calculating nosave ranges in e820__register_nosave_regions()
  - ACPI: platform-profile: Fix CFI violation when accessing sysfs files
  - selftests: mptcp: fix incorrect fd checks in main_loop
  - selftests: mptcp: close fd_in before returning in main_loop
  - pinctrl: qcom: Clear latched interrupt status when changing IRQ type
  - phy: freescale: imx8m-pcie: assert phy reset and perst in power off
  - PCI: Fix reference leak in pci_alloc_child_bus()
  - PCI: brcmstb: Fix missing of_node_put() in brcm_pcie_probe()
  - of/irq: Fix device node refcount leakages in of_irq_init()
  - of/irq: Fix device node refcount leakage in API irq_of_parse_and_map()
  - of/irq: Fix device node refcount leakages in of_irq_count()
  - of/irq: Fix device node refcount leakage in API of_irq_parse_raw()
  - of/irq: Fix device node refcount leakage in API of_irq_parse_one()
  - ntb: use 64-bit arithmetic for the MSI doorbell mask
  - KVM: x86: Explicitly zero-initialize on-stack CPUID unions
  - gve: handle overflow when reporting TX consumed descriptors
  - gpio: zynq: Fix wakeup source leaks on device unbind
  - gpio: tegra186: fix resource handling in ACPI probe path
  - dt-bindings: coresight: qcom,coresight-tpdm: Fix too many 'reg'
  - dt-bindings: coresight: qcom,coresight-tpda: Fix too many 'reg'
  - dm-verity: fix prefetch-vs-suspend race
  - dm-integrity: set ti->error on memory allocation failure
  - dm-ebs: fix prefetch-vs-suspend race
  - crypto: ccp - Fix check for the primary ASP device
  - clk: qcom: gdsc: Set retain_ff before moving to HW CTRL
  - clk: qcom: gdsc: Capture pm_genpd_add_subdomain result code
  - clk: qcom: gdsc: Release pm subdomains in reverse add order
  - clk: qcom: clk-branch: Fix invert halt status bit check for votable clocks
  - cifs: fix integer overflow in match_server()
  - cifs: avoid NULL pointer dereference in dbg call
  - thermal/drivers/rockchip: Add missing rk3328 mapping entry
  - x86/xen: fix balloon target initialization for PVH dom0
  - mm/hugetlb: move hugetlb_sysctl_init() to the __init section
  - mm/userfaultfd: fix release hang over concurrent GUP
  - ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free
  - ALSA: usb-audio: Kill timer properly at removal
  - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
  - uio_hv_generic: Let userspace take care of interrupt mask
  - mm/mremap: correctly handle partial mremap() of VMA starting at 0
  - mm: fix lazy mmu docs and usage
  - mm: make page_mapped_in_vma() hugetlb walk aware
  - mm/rmap: reject hugetlb folios in folio_make_device_exclusive()
  - sparc/mm: avoid calling arch_enter/leave_lazy_mmu() in set_ptes
  - sparc/mm: disable preemption in lazy mmu mode
  - iommufd: Fix uninitialized rc in iommufd_access_rw()
  - btrfs: zoned: fix zone finishing with missing devices
  - btrfs: zoned: fix zone activation with missing devices
  - btrfs: fix non-empty delayed iputs list on unmount due to compressed write workers
  - arm64: dts: mediatek: mt8173: Fix disp-pwm compatible string
  - arm64: mm: Correct the update of max_pfn
  - mtd: rawnand: Add status chack in r852_ready()
  - mtd: inftlcore: Add error check for inftl_read_oob()
  - mptcp: only inc MPJoinAckHMacFailure for HMAC failures
  - lib: scatterlist: fix sg_split_phys to preserve original scatterlist offsets
  - locking/lockdep: Decrease nr_unused_locks if lock unused in zap_class()
  - mailbox: tegra-hsp: Define dimensioning masks in SoC data
  - leds: rgb: leds-qcom-lpg: Fix calculation of best period Hi-Res PWMs
  - leds: rgb: leds-qcom-lpg: Fix pwm resolution max for Hi-Res PWMs
  - jbd2: remove wrong sb->s_sequence check
  - i3c: Add NULL pointer check in i3c_master_queue_ibi()
  - i3c: master: svc: Use readsb helper for reading MDB
  - smb311 client: fix missing tcon check when mounting with linux/posix extensions
  - udf: Fix inode_getblk() return value
  - vdpa/mlx5: Fix oversized null mkey longer than 32bit
  - f2fs: fix to avoid atomicity corruption of atomic file
  - ext4: fix off-by-one error in do_split
  - ASoC: qdsp6: q6asm-dai: fix q6asm_dai_compr_set_params error path
  - ASoC: qdsp6: q6apm-dai: fix capture pipeline overruns.
  - ASoC: qdsp6: q6apm-dai: set 10 ms period and buffer alignment.
  - ASoC: q6apm: add q6apm_get_hw_pointer helper
  - io_uring/kbuf: reject zero sized provided buffers
  - wifi: mac80211: fix integer overflow in hwmp_route_info_get()
  - wifi: mt76: Add check for devm_kstrdup()
  - clocksource/drivers/stm32-lptimer: Use wakeup capable instead of init wakeup
  - mtd: Replace kcalloc() with devm_kcalloc()
  - net: dsa: mv88e6xxx: workaround RGMII transmit delay erratum for 6320 family
  - mtd: Add check for devm_kcalloc()
  - mptcp: sockopt: fix getting IPV6_V6ONLY
  - media: i2c: imx219: Rectify runtime PM handling in probe and remove
  - media: venus: hfi_parser: add check to avoid out of bound access
  - media: i2c: ov7251: Introduce 1 ms delay between regulators and en GPIO
  - media: i2c: ov7251: Set enable GPIO low in probe
  - media: i2c: ccs: Set the device's runtime PM status correctly in probe
  - media: i2c: ccs: Set the device's runtime PM status correctly in remove
  - media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf()
  - media: platform: stm32: Add check for clk_enable()
  - media: visl: Fix ERANGE error when setting enum controls
  - media: streamzap: prevent processing IR data on URB failure
  - tpm, tpm_tis: Fix timeout handling when waiting for TPM status
  - spi: cadence-qspi: Fix probe on AM62A LP SK
  - xenfs/xensyms: respect hypervisor's "next" indication
  - media: siano: Fix error handling in smsdvb_module_init()
  - media: vim2m: print device name after registering device
  - media: venus: hfi: add check to handle incorrect queue size
  - media: venus: hfi: add a check to handle OOB in sfr region
  - media: i2c: adv748x: Fix test pattern selection mask
  - media: mtk-vcodec: venc: avoid -Wenum-compare-conditional warning
  - media: mediatek: vcodec: Fix a resource leak related to the scp device in FW initialization
  - dt-bindings: media: st,stmipid02: correct lane-polarities maxItems
  - ext4: don't treat fhandle lookup of ea_inode as FS corruption
  - bpf: support SKF_NET_OFF and SKF_LL_OFF on skb frags
  - pwm: fsl-ftm: Handle clk_get_rate() returning 0
  - pwm: rcar: Improve register calculation
  - pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config()
  - tpm, tpm_tis: Workaround failed command reception on Infineon devices
  - ktest: Fix Test Failures Due to Missing LOG_FILE Directories
  - drm/amdgpu: grab an additional reference on the gang fence v2
  - drm/mediatek: mtk_dpi: Explicitly manage TVD clock in power on/off
  - drm/mediatek: mtk_dpi: Move the input_2p_en bit to platform data
  - drm/amdkfd: debugfs hang_hws skip GPU with MES
  - drm/amdkfd: Fix pqm_destroy_queue race with GPU reset
  - drm/amdkfd: clamp queue size to minimum
  - drivers: base: devres: Allow to release group on device release
  - drm/bridge: panel: forbid initializing a panel with unknown connector type
  - drm: panel-orientation-quirks: Add quirk for OneXPlayer Mini (Intel)
  - drm: panel-orientation-quirks: Add new quirk for GPD Win 2
  - drm: panel-orientation-quirks: Add quirk for AYA NEO Slide
  - drm: panel-orientation-quirks: Add quirks for AYA NEO Flip DS and KB
  - drm: panel-orientation-quirks: Add support for AYANEO 2S
  - drm/amd/display: add workaround flag to link to force FFE preset
  - drm/amd/display: Update Cursor request mode to the beginning prefetch always
  - drm: allow encoder mode_set even when connectors change for crtc
  - Bluetooth: qca: simplify WCN399x NVM loading
  - Bluetooth: hci_uart: fix race during initialization
  - tracing: fix return value in __ftrace_event_enable_disable for TRACE_REG_UNREGISTER
  - net: vlan: don't propagate flags on open
  - wifi: mt76: mt76x2u: add TP-Link TL-WDN6200 ID to device table
  - cdc_ether|r8152: ThinkPad Hybrid USB-C/A Dock quirk
  - Revert "f2fs: rebuild nat_bits during umount"
  - ext4: protect ext4_release_dquot against freezing
  - ahci: add PCI ID for Marvell 88SE9215 SATA Controller
  - net: sfp: add quirk for 2.5G OEM BX SFP
  - ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode
  - jfs: add sanity check for agwidth in dbMount
  - fs/jfs: cast inactags to s64 to prevent potential overflow
  - net: usb: asix_devices: add FiberGecko DeviceID
  - scsi: target: spc: Fix RSOC parameter data header size
  - f2fs: don't retry IO for corrupted data scenario
  - wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process
  - ASoC: amd: yc: update quirk data for new Lenovo model
  - ASoC: amd: Add DMI quirk for ACP6X mic support
  - ALSA: usb-audio: Fix CME quirk for UF series keyboards
  - mmc: dw_mmc: add a quirk for accessing 64-bit FIFOs in two halves
  - media: uvcvideo: Add quirk for Actions UVC05
  - ASoC: fsl_audmix: register card device depends on 'dais' property
  - ALSA: hda: intel: Add Lenovo IdeaPad Z570 to probe denylist
  - ALSA: hda: intel: Fix Optimus when GPU has no sound
  - HID: pidff: Add FIX_WHEEL_DIRECTION quirk
  - HID: pidff: Add hid_pidff_init_with_quirks and export as GPL symbol
  - HID: pidff: Add PERMISSIVE_CONTROL quirk
  - HID: pidff: Add MISSING_PBO quirk and its detection
  - HID: pidff: Add MISSING_DELAY quirk and its detection
  - HID: pidff: Do not send effect envelope if it's empty
  - HID: pidff: Convert infinite length from Linux API to PID standard
  - ASoC: SOF: topology: Use krealloc_array() to replace krealloc()
  - zstd: Increase DYNAMIC_BMI2 GCC version cutoff from 4.8 to 11.0 to work around compiler segfault
  - xen/mcelog: Add __nonstring annotations for unterminated strings
  - arm64: cputype: Add QCOM_CPU_PART_KRYO_3XX_GOLD
  - x86/cpu: Don't clear X86_FEATURE_LAHF_LM flag in init_amd_k8() on AMD when running in a virtual machine
  - x86/ia32: Leave NULL selector values 0~3 unchanged
  - x86/mm: Clear _PAGE_DIRTY for kernel mappings when we clear _PAGE_RW
  - pm: cpupower: bench: Prevent NULL dereference on malloc failure
  - umount: Allow superblock owners to force umount
  - iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group
  - nft_set_pipapo: fix incorrect avx2 match of 5th field octet
  - nvmet-fcloop: swap list_add_tail arguments
  - ata: sata_sx4: Add error handling in pdc20621_i2c_read()
  - drm/tests: probe-helper: Fix drm_display_mode memory leak
  - drm/tests: modes: Fix drm_display_mode memory leak
  - drm/tests: cmdline: Fix drm_display_mode memory leak
  - drm/tests: helpers: Create kunit helper to destroy a drm_display_mode
  - drm/tests: helpers: Fix compiler warning
  - drm/tests: helpers: Add helper for drm_display_mode_from_cea_vic()
  - drm/tests: Add helper to create mock crtc
  - drm/tests: Add helper to create mock plane
  - drm/tests: helpers: Add atomic helpers
  - drm/tests: modeset: Fix drm_display_mode memory leak
  - net: ethtool: Don't call .cleanup_data when prepare_data fails
  - tc: Ensure we have enough buffer space when sending filter netlink notifications
  - net/sched: cls_api: conditional notification of events
  - rtnl: add helper to check if a notification is needed
  - rtnl: add helper to check if rtnl group has listeners
  - octeontx2-pf: qos: fix VF root node parent queue index
  - net: tls: explicitly disallow disconnect
  - objtool: Fix INSN_CONTEXT_SWITCH handling in validate_unret()
  - ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe()
  - drm/i915: Disable RPG during live selftest
  - drm/i915/dg2: wait for HuC load completion before running selftests
  - drm/i915/xelpg: Extend driver code of Xe_LPG to Xe_LPG+
  - drm/i915/mocs: use to_gt() instead of direct &i915->gt
  - selftests/futex: futex_waitv wouldblock test should fail
  - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit
  - jfs: upper bound check of tree index in dbAllocAG
  - mm: swap: check for stable address space before operating on the VMA
  - net: ethernet: cortina: Use TOE/TSO on all TCP
  - mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock
  - hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file()
  - bus: mhi: host: Detect events pointing to unexpected TREs
  - drm/amd/pm: fix null pointer access
  - ALSA: usb-audio: Validate UAC3 power domain descriptors, too
  - net: kcm: Fix race condition in kcm_unattach()
  - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control
  - hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read()
  - mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup()
  - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
  - xhci: fix memory leak regression when freeing xhci vdev devices depth first
  - usb: xhci: Fix slot_id resource race conflict
  - net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry()
  - nilfs2: reject invalid file types when reading inodes
  - mtd: inftlcore: Add error check for inftl_read_oob()
  - freezer, sched: Report frozen tasks as 'D' instead of 'R'
  - io_uring/sqpoll: fix sqpoll error handling races
  - i2c: microchip-core: actually use repeated sends
  - PCI/MSI: Handle lack of irqdomain gracefully
  - i2c: imx: add imx7d compatible string for applying erratum ERR007805
  - i2c: microchip-core: fix "ghost" detections


author: Li Nan <linan122@huawei.com> - 6.6.0-123.0.0.100
changelog:
  - !19327 ub: ub_fwctl: add ub_fwctl driver-api documentation description
  - !19338 iommu/ummu: Fix UMMU documentation error
  - !19287 net: unic: Add support for uboe and ethernet related tools
  - !19337 ub: udma: Support retrieving the migr field.
  - ub: ub_fwctl: add ub_fwctl driver-api documentation description
  - iommu/ummu: Fix UMMU documentation error
  - !19332 ub: udma: add requirement about document and tp attr.
  - !19330 iommu/ummu: Add UMMU documentation description
  - ub: udma: Support retrieving the migr field.
  - !18794 【OLK-6.6】fix CVE-2025-39801
  - ub: udma: Support eid and guid updates.
  - ub: udma: bugfix for set and get tp attr.
  - !18453 [OLK-6.6] ALSA: HDA: Add Zhaoxin HDMI Controller and Codec support
  - !18483 [OLK-6.6] x86/hpet: Set dynamic IRQ feature for HPET for KH-50000
  - iommu/ummu: Add UMMU-PMU devicetree file
  - iommu/ummu: Add UMMU devicetree file
  - iommu/ummu: Add UMMU documentation description
  - ub: udma: mask jetty context addr info.
  - ub: udma: add udma driver module doc.
  - ub: ubase: Remove non-cluster mode code
  - net: unic: Add support for uboe reset
  - net: unic: Add support for MAC statistics
  - net: unic: Add pause frame support.
  - net: unic: Add Priority Flow Control (PFC) support
  - net: unic: Add debugfs support for dumping MAC tables.
  - net: unic: Supports MAC filter, and allows users to add and delete MAC
  - net: unic: Add debugfs support for dumping vlan table
  - net: unic: Integrate valn filtering features with network device operations.
  - net: unic: Add valn filtering support.
  - net: unic: Add support for querying link diagnosis status
  - net: unic: Extend loopback test support to include external loopback modes
  - net: unic: Extend loopback test support to include serdes loopback modes.
  - net: unic: Add loopback test support.
  - net: unic: Add debugfs support for dumping hardware MAC tables.
  - net: unic: Add support for setting link speed, duplex, and autonegotiation via ethtool.
  - !19328 ub:hisi-ubus: Adding compatibility Interfaces for ub memory
  - !19264 ub: cdma: add CDMA userspace-api documentation description
  - ub:hisi-ubus: Adding compatibility Interfaces for ub memory
  - ub: cdma: add CDMA userspace-api documentation description
  - ub: cdma: add CDMA kernel driver design document specification
  - ub: cdma: add CDMA driver-api documentation description
  - !19305 ub:ubus: Add ubus and ubfi opensource document
  - !19320 urma: added functions for getting and setting TP attribute fields.
  - ub:ubus: Add ubus devicetree file
  - urma: added functions for getting and setting TP attribute fields.
  - ub:ubus: Add ubus and ubfi opensource document
  - usb: dwc3: Remove WARN_ON for device endpoint command timeouts
  - ALSA: HDA: Add Zhaoxin HDMI Controller and Codec support
  - x86/hpet: Set dynamic IRQ feature for HPET for KH-50000
  - ALSA: HDA: Roll back the old version for consistency with the mainline


author: Li Nan <linan122@huawei.com> - 6.6.0-124.0.0.101
changelog:
  - !19152  Fix CVE-2025-39810 fix CVE-2025-39810
  - !19359 ub: hisi-ubus: Fix ub memory decoder create
  - !19346  sched: Fix race between yield_to() and try_to_wake_up()
  - ub: hisi-ubus: Fix ub memory decoder create
  - !19341 v7  bugfix for xcall2.0
  - sched: Fix race between yield_to() and try_to_wake_up()
  - !17661 kvm: Only enable shadow mode for ioeventfd and Align the lifecycle of …
  - !19334  bpf: Sync pending IRQ work before freeing ring buffer
  - xcall2.0: prefetch: introduce struct prefetch_mm_data
  - xcall2.0: Fix mem leak in proc_xcall_command
  - xcall2.0: add xcall_subdir_create help to create subdir below /proc/xcall
  - xcall2.0: prefetch: keep prefetch module name same with file name
  - xcall2.0: prefetch: fix value name typos in __do_sys_epoll_pwait
  - !19339  zcopy: Fix context switch within RCU read-side
  - !19300  Add Support for Disabling Hugetlb in soft_offline_page
  - zcopy: Fix context switch within RCU read-side error
  - bpf: Sync pending IRQ work before freeing ring buffer
  - kvm: Only enable shadow mode for ioeventfd and Align the lifecycle of KVM shadow with KVM
  - mm/memory-failure: support disabling soft offline for HugeTLB pages
  - mm/memory-failure: userspace controls soft-offlining pages
  - bnxt_en: Fix memory corruption when FW resources change during ifdown
  - bnxt_en: Fix possible crash after creating sw mqprio TCs


author: Li Nan <linan122@huawei.com> - 6.6.0-126.0.0.102
changelog:
  - !19468 urma: Bugfix for ubcore_get_route_list implement
  - urma: Bugfix for ubcore_get_route_list implement
  - !19329 hisi_acc_vfio_pci: adapt to new migration configuration
  - !19435 crypto: hisilicon/qm - fix incorrect judgment in qm_get_complete_eqe_num()
  - !19383 [OLK-6.6] backport important bugfix for Broadcom NIC driver from upstream linux-6.6.y
  - !19460  xsched: XCU Partition
  - !19316  Fix cves CVE-2025-40040 & CVE-2025-40058
  - !19447 net: hns3: remove VF multi-TC compat bit
  - xsched: add throttling statistics for xsched groups
  - xsched: fix task stall when quota is disabled
  - xsched: suppress excessive error logs during cgroup file retry
  - xsched: fix shares misaccounting when multiple tasks run in one cgroup
  - xsched: switch xcu cgroup subsystem from domain mode to thread mode
  - !19439 obmm: remove redundant code and fix log issues
  - !18481 [OLK-6.6] Add platform-specific quirks for ZX-200 device
  - !19085 scsi: mpi3mr: Add support for status reply descriptor
  - !19078 scsi: mpi3mr: Split off bus_reset function from host_reset
  - !19416  kernfs: Fix UAF in polling when open file is released
  - !19415  smb: client: fix race with concurrent opens in rename(2)
  - !19446  net/mlx5: Fix ECVF vports unload on shutdown flow
  - obmm: remove redundant code and fix log issues
  - !19441  rv: Use strings in da monitors tracepoints
  - !19411  CVE-2025-39697
  - !19442  CVE-2025-22022
  - net: hns3: remove VF multi-TC compat bit
  - net/mlx5: Fix ECVF vports unload on shutdown flow
  - usb: xhci: Apply the link chain quirk on NEC isoc endpoints
  - usb: xhci: move link chain bit quirk checks into one helper function.
  - !19429  net/sched: Abort __tc_modify_qdisc if parent class does not exist
  - rv: Use strings in da monitors tracepoints
  - !19438  drm/scheduler: signal scheduled fence when kill job
  - !19410  Fix CVE-2025-39994
  - !17888 [OLK-6.6] Fix CVE-2025-37777
  - drm/scheduler: signal scheduled fence when kill job
  - !19371  RDMA/rxe: Fix race in do_task() when draining
  - !19393  usb: typec: ucsi: displayport: Fix NULL pointer access
  - obmm: set up default mem allocator granule
  - !19377 [OLK-6.6] Fix CVE-2025-23133
  - !18704 [OLK-6.6] Fix CVE-2024-58095
  - !19401  smb: client: fix crypto buffers in non-linear memory
  - !19323  nfsd: don't ignore the return code of svc_proc_register()
  - crypto: hisilicon/qm - fix incorrect judgment in qm_get_complete_eqe_num()
  - crypto: hisilicon/qm - add missing default in switch in qm_vft_data_cfg
  - crypto: hisilicon/sgl - remove unnecessary checks for curr_hw_sgl error
  - crypto: hisilicon/qm - add concurrency protection for variable err_threshold
  - crypto: hisilicon/qm - add the save operation of eqe and aeqe
  - crypto: hisilicon/qm - restore original qos values
  - crypto: hisilicon/qm - Fix device reference leak in qm_get_qos_value
  - !19386  x86/mm: Check return value from memblock_phys_alloc_range()
  - !19433 urma: bugfix ubagg drivers refent error
  - urma: bugfix ubagg drivers refent error
  - !19391 urma: fixing ubcore hash table initialization failure.
  - !19263 [OLK-6.6]Fix CVE-2025-37861
  - !19253 [OLK-6.6] Fix CVE-2025-37973
  - !19252 [OLK-6.6] Fix CVE-2025-37972
  - !19251 [OLK-6.6] Fix CVE-2025-37956
  - !19374 [OLK-6.6] Fix CVE-2025-37899
  - net/sched: Abort __tc_modify_qdisc if parent class does not exist
  - kernfs: Fix UAF in polling when open file is released
  - !19402  sched: Fix incorrect cluster mask
  - smb: client: fix race with concurrent opens in rename(2)
  - !19414  xsched: fix compile error when CONFIG_XCU_SCHEDULER is disabled
  - !19398 v2  bugfix for xcall2.0
  - !19412  sunrpc: fix handling of server side tls alerts
  - !19409  smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().
  - !19405 [OLK-6.6]:update patches for sw64 architecture
  - xsched: fix compile error when CONFIG_XCU_SCHEDULER is disabled
  - !19266  __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock
  - !19358  Fix CVE-2025-40016
  - sunrpc: fix handling of server side tls alerts
  - NFS: Fix a race when updating an existing write
  - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests
  - media: tuner: xc5000: Fix use-after-free in xc5000_release
  - media: tunner: xc5000: Refactor firmware load
  - urma: fixing ubcore hash table initialization failure.
  - smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().
  - !19365  net/mlx5e: Harden uplink netdev access against device unbind
  - sw64: config: add initial openeuler_defconfig for sw64
  - sw64: fix compile error of pte_pgprot()
  - sw64: add missing definition of MAP_PEER_SHARED
  - sched: Fix incorrect cluster mask
  - smb: client: fix crypto buffers in non-linear memory
  - !19392  Fixes and cleanup of page cache limit
  - !18760  CVE-2025-38501
  - !19390 v3  xsched: add xsched_{set,get}attr syscall
  - xcall2.0: fix panic while detaching xcall found in DT case
  - xcall2.0: prefetch: fix access NULL ptr in __do_sys_epoll_pwait()
  - xcall2.0: prefetch: get prefetch_mm_data once in get_pfi()
  - !19311  nbd: fix uaf in nbd_genl_connect() error path
  - !19310  fs: writeback: fix use-after-free in __mark_inode_dirty()
  - !19256  efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
  - !19237  nfsd: provide locking for v4_end_grace
  - !19247  dmaengine: ti: k3-udma: Add missing locking
  - !19220  NFSv4: Fix deadlock during the running of state manager
  - !19248  nfsd: Initialize ssc before laundromat_work to prevent NULL dereference
  - usb: typec: ucsi: displayport: Fix NULL pointer access
  - !19378 net: hibmcge: add support for pagepool on rx
  - mm: Add page cache limit check before queueing shrink worker
  - mm: Move vm_cache_limit_mbytes check to page_cache_over_limit()
  - mm: Replace deferrable timer with delay timer for shrink worker
  - !19388 [sync] PR-19363:  Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed"
  - !19368  net/sched: Fix backlog accounting in qdisc_dequeue_internal
  - !19367  net/sched: sch_qfq: Fix CVE-2025-38477
  - !19366  i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path
  - !19364  ixgbevf: Fix CVE-2025-40104
  - xsched: add xsched_{set,get}attr syscall
  - Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed"
  - x86/mm: Check return value from memblock_phys_alloc_range()
  - bnxt_en: Fix a possible memory leak in bnxt_ptp_init
  - net: hibmcge: add support for pagepool on rx
  - net: hibmcge: reduce packet drop under stress testing
  - net: hibmcge: add support for tracepoint to dump some fields of rx_desc
  - Revert "net: hibmcge: reduce packet drop under stress testing"
  - Revert "net: hibmcge: support pagepool for rx"
  - wifi: ath11k: update channel list in reg notifier instead reg worker
  - !18451 RDMA/bnxt_re: Fix budget handling of notification queue
  - ksmbd: fix use-after-free in session logoff
  - !18837  CVE-2025-37997
  - !19361  media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove
  - RDMA/rxe: Fix race in do_task() when draining
  - !19353 ubcore: fix query route list by eid pair.
  - ubcore: fix query route list by eid pair.
  - net/sched: Fix backlog accounting in qdisc_dequeue_internal
  - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class
  - net/sched: sch_qfq: Fix race condition on qfq_aggregate
  - i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path
  - net/mlx5e: Harden uplink netdev access against device unbind
  - ixgbevf: fix mailbox API compatibility by negotiating supported features
  - ixgbevf: fix getting link speed data for E610 devices
  - ixgbevf: Add support for Intel(R) E610 device
  - PCI: Add PCI_VDEVICE_SUB helper macro
  - media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove
  - media: uvcvideo: Use heuristic to find stream entity
  - media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID
  - hisi_acc_vfio_pci: adapt to new migration configuration
  - crypto: hisilicon - qm updates BAR configuration
  - hisi_acc_vfio_pci: Fix reference leak in hisi_acc_vfio_debug_init
  - Revert "migration: update BAR space size"
  - Revert "migration: qm updates BAR configuration"
  - Revert "migration: adapt to new migration configuration"
  - nfsd: don't ignore the return code of svc_proc_register()
  - iommu/vt-d: Disallow dirty tracking if incoherent page walk
  - mm/ksm: fix flag-dropping behavior in ksm_madvise
  - nbd: fix uaf in nbd_genl_connect() error path
  - fs: writeback: fix use-after-free in __mark_inode_dirty()
  - RDMA/bnxt_re: Remove unusable nq variable
  - RDMA/bnxt_re: Fix budget handling of notification queue
  - __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock
  - scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue
  - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
  - wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentation
  - Input: mtk-pmic-keys - fix possible null pointer dereference
  - ksmbd: prevent rename with empty string
  - ksmbd: move leading slash check to smb2_get_name()
  - nfsd: Initialize ssc before laundromat_work to prevent NULL dereference
  - dmaengine: ti: k3-udma: Add missing locking
  - nfsd: provide locking for v4_end_grace
  - NFSv4: Fix deadlock during the running of state manager
  - scsi: mpi3mr: Add support for status reply descriptor
  - scsi: mpi3mr: Split off bus_reset function from host_reset
  - netfilter: ipset: Remove unused htable_bits in macro ahash_region
  - netfilter: ipset: fix region locking in hash types
  - Add platform-specific quirks for ZX-200 device
  - ksmbd: add max ip connections parameter
  - ksmbd: extend the connection limiting mechanism to support IPv6
  - ksmbd: limit repeated connections from clients with the same IP
  - jfs: add check read-only before txBeginAnon() call
  - ksmbd: add free_transport ops in ksmbd connection
  - ksmbd: fix use-after-free in __smb2_lease_break_noti()


author: Mingzheng Xing <xingmingzheng@iscas.ac.cn> - 6.6.0-126.0.0.103
changelog:
  - RISC-V kernel upgrade to 6.6.0-126.0.0
  - Add support for LRW, DP1000
  - Add IOMMU related support
  - Backport mainline RISC-V features.


author: laokz <zhangkai@iscas.ac.cn> - 6.6.0-126.0.0.105
changelog:
  - remove unsupported arches in ExclusiveArch:
    - haoc-kernel: remove riscv64, ppc64le, loongarch64 (no current support)
    This change prevents unnecessary builds on unsupported architectures.


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-159.4.1.151
changelog:
  - !23994 urma：sync  bugfix from OLK-6.6 from aece31cb793f to 9903e03cdae5
  - urma: ubcore add CNA-level shared-CTP
  - urma: move topo query api from ubcore to ubagg
  - urma: fix post send failure when msn cfg is different
  - urma: add multi-transport types,FLUSH_DMA opcode,device config extensions
  - urma: Fix the issue of DFX functionality missing some header files during compilation
  - !23991 [sync] PR-23978: iommu/ummu: Fix the problem of the shared identity page
  - !23981 [sync] PR-23935: iommu/ummu: Mask the impact of the iommu.passthrough=1 configuration
  - !23980 [sync] PR-23979: iommu/ummu: Add dedicated Kconfig for GFP_HIGHUSER_MOVABLE support
  - !23990 [sync] PR-23966: ub:ubus: modify ub virt notify
  - !23973 [sync] PR-23932:ub: ub_fwctl: Modify TA layer to obtain WQE delay related registers.
  - urma: ubagg add GET_RJETTY and GET_SEG_CTX ioctl handlers
  - urma: fix err log to info and change query to create
  - urma: Optimize the adaptability of the ubagg NL commands
  - urma: move v2p resource query api from ubcore to ubagg
  - urma: Optimize the adaptability of the NL commands
  - urma: remove uvs_get_route_list and standardize uvs tlv formats
  - iommu/ummu: Fix the problem of the shared identity page
  - iommu/ummu: Fix the adapt disable DVM issue
  - urma: change the enum in ubcore_cmd.h for set_sl and genl_pid
  - !23977 [sync] PR-23936: iommu/ummu: Improve code quality and fix potential issues
  - !23971 [sync] PR-23934: iommu/ummu: Add the tect cache synchronization operation
  - !23968 ub: udma: fix issues of safe mode
  - ub:ubus: modify ub virt notify
  - iommu/ummu: Improve code quality and fix potential issues
  - iommu/ummu: Add the tect cache synchronization operation
  - ub: udma: Optimize the duplicate registration
  - ub: udma: fix issues of safe mode
  - iommu/ummu: Mask the impact of the iommu.passthrough=1 configuration
  - iommu/ummu: Add dedicated Kconfig for GFP_HIGHUSER_MOVABLE support
  - ub: ub_fwctl: Modify TA layer to obtain WQE delay related registers.


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-159.4.1.151.20260617.dfab73ba6002
changelog:
  - !24044 ub: udma: fix the bug in the eid update process.
  - ub: udma: fix the bug in the eid update process.
  - !24013 urma：sync bugfix from OLK-6.6 from 89f644fcaef5 to 1a84f02f7c1a
  - urma: support failback notification in 1:N and N:1 scenarios
  - urma: ubcore fix missing topo CNA field in topology structs
  - urma: add multi-transport types,FLUSH_DMA opcode,device config extensions
  - urma: using nlattr to query tp information


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-159.4.1.151.20260618.d40e962887b4
changelog:
  - !24053 [sync]urma: sync bugfix from OLK-6.6 from 5e53cc1565dd to 22e73566bc40
  - urma: ubcore fix potential null pointer dereference on cnas
  - urma: add new query information of TP
  - urma: fix the incorrect reference count of tpid_list
  - urma: add order_type validation for UM+CTP in import functions
  - urma: Fix the issue of missing timing logic in the delete_jfc path
  - urma: fix missing lock when query tp_reuse info
  - urma: no error reported when failed to query host EID during shared-ctp


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-159.4.1.151.20260622.e6e0123dfc00
changelog:
  - !24100 CVE-2026-46331
  - !24101 ub: udma: Resolve the issue of repeated va not being recognized.
  - !24085 ub: cdma: replace ummu_alloc_tdev_separated with ummu_core_alloc_separate_tdev
  - net/sched: fix pedit partial COW leading to page cache corruption
  - ub: udma: Resolve the issue of repeated va not being recognized.
  - ub: cdma: replace ummu_alloc_tdev_separated with ummu_core_alloc_separate_tdev


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-159.4.2.153
changelog:
  - !24161 [sync]urma: sync bugfix from OLK-6.6 from c0d6d9b69d56 to aaee8af1d6e3
  - !24163 sync CVE LTS and bugfix from OLK-6.6 from ba6ab2982f30 to 6fa977028ccf
  - net: Fix kabi breakage of struct nf_queue_entry
  - netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation
  - xfrm: Fix dev use-after-free in xfrm async resumption
  - xfrm: hold dev ref until after transport_finish NF_HOOK
  - xfrm: hold device only for the asynchronous decryption
  - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump
  - net: Fix kabi breakage of struct nf_conntrack_expect
  - netfilter: nf_conntrack_expect: restore helper propagation via expectation
  - netfilter: ctnetlink: ignore explicit helper on new expectations
  - netfilter: nf_conntrack_expect: store netns and zone in expectation
  - config: Enable ARM64_ERRATUM_4193714 ARM64_ERRATUM_4118414
  - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU
  - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  - arm64: errata: Mitigate TLBI errata on various Arm CPUs
  - arm64: cputype: Add C1-Premium definitions
  - arm64: cputype: Add C1-Ultra definitions
  - arm64: cputype: Add NVIDIA Olympus definitions
  - md raid: fix hang when stopping arrays with metadata through dm-raid
  - xfs: avoid dereferencing log items after push callbacks
  - xfs: save ailp before dropping the AIL lock in push callbacks
  - Revert "xfs: fix a UAF when inode item push"
  - ASoC: simple-card-utils: Don't use __free(device_node) at graph_util_parse_dai()
  - cifs: Fix busy dentry used after unmounting
  - wifi: cw1200: Revert "Fix locking in error paths"
  - drm/ssd130x: Fix atomic_check for disabled planes
  - cifs: open files should not hold ref on superblock
  - mm/kfence: disable KFENCE upon KASAN HW tags enablement
  - regulator: pca9450: Make IRQ optional
  - ASoC: simple-card-utils: fix graph_util_is_ports0() for DT overlays
  - ASoC: simple-card-utils: use __free(device_node) for device node
  - ASoC: soc-core: flush delayed work before removing DAIs and widgets
  - ASoC: soc-core: drop delayed_work_pending() check before flush
  - wifi: cw1200: Fix locking in error paths
  - drm/solomon: Fix page start when updating rectangle in page addressing mode
  - drm/ssd130x: Replace .page_height field in device info with a constant
  - drm/ssd130x: Store the HW buffer in the driver-private CRTC state
  - drm/ssd130x: Use bool for ssd130x_deviceinfo flags
  - ALSA: usb-audio: Cap the packet size pre-calculations
  - smb: client: require a full NFS mode SID before reading mode bits
  - netfilter: nft_inner: Fix IPv6 inner_thoff desync
  - tun: free page on short-frame rejection in tun_xdp_one()
  - net: gro: don't merge zcopy skbs
  - Bluetooth: l2cap: fix MPS check in l2cap_ecred_reconf_req
  - nfc: nxp-nci: i2c: use rising-edge IRQ on ACPI systems
  - wifi: libertas: don't kill URBs in interrupt context
  - wifi: libertas: use USB anchors for tracking in-flight URBs
  - x86/kexec: add a sanity check on previous kernel's ima kexec buffer
  - Bluetooth: L2CAP: Fix not checking output MTU is acceptable on L2CAP_ECRED_CONN_REQ
  - Bluetooth: L2CAP: Fix response to L2CAP_ECRED_CONN_REQ
  - Bluetooth: hci_qca: Cleanup on all setup failures
  - Bluetooth: L2CAP: Fix invalid response to L2CAP_ECRED_RECONF_REQ
  - nfc: nxp-nci: remove interrupt trigger type
  - PCI: Enable ACS after configuring IOMMU for OF platforms
  - wifi: libertas: fix WARNING in usb_tx_block
  - Revert "net/smc: Introduce TCP ULP support"
  - tap: free page on error paths in tap_get_user_xdp()
  - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache
  - urma: fix ubcore device attr sl flag
  - urma: urma: use ctp+um to support large-scale D2D communications
  - urma: set tpid_status after deactive tp failed
  - urma: fix tpid reuse ref wrong
  - urma: fix jfr nullptr in ubcore_delete_jfr_batch
  - urma: fix ubagg topo bonding device name
  - urma: ubcore restrict CNA-level shared-CTP to RM+CTP only
  - urma: fix solves the UAF issue in the uburma_release_comp_event
  - !24157 [sync] PR-24151:ub: ub_fwctl: Modify the way ub_fwctl obtains device type and port type.
  - ub: ub_fwctl: Modify the way ub_fwctl obtains device type and port type.
  - !24122 [sync]urma: sync bugfix from OLK-6.6 from ada53dfa3e0b to c9fd87d2f510
  - urma: fix mm_struct leakage in concurrent mmu_notifier release
  - urma: fix obj_arr memory leak
  - urma: fix tpid memory leak
  - urma: move ubagg failback req/result to user_ctl
  - urma: fix exist tpid reuse use cnt
  - urma: fix ubagg failback device lookup and teardown
  - !24115 [openEuler-24.03-LTS-SP4]net: unic: 2 bugfixes
  - !24095 [sync]Backport the patch that fixes load imbalance by updating stats for allowed CPUs in sched/fair from upstream
  - !24116 [sync] PR-24110:ub: ub_fwctl: Modify the index for retrieving port historical status in ub_fwctl.
  - sched/fair: Only update stats for allowed CPUs when looking for dst group
  - net: unic: Fix the DSCP-TC mapping is reset by the UNIC driver when the UNIC driver is reloaded
  - net: unic: Fix the issue of the first up network port reporting the netdev_change event
  - ub: ub_fwctl: Modify the index for retrieving port historical status in ub_fwctl.


author: Zihang Luo <luozihang2@huawei.com> - 6.6.0-159.4.2.153.20260624.9e7b708a0357
changelog:
  - !24182 [sync] urma: fix ubcore device attr sl flag error
  - urma: fix ubcore device attr sl flag error
  - !24173 [sync]urma: sync bugfix from OLK-6.6 from 1ac4d401e863 to cbbe52c8c74d
  - urma: fix tpid status and state reset
  - urma: fix reuse use cnt not balance cause dead lock
  - urma: fix deadlock when using loopback mode
  - urma: add order_type conversion for jfs/jfr/jetty/tjetty config


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-159.4.2.153.20260625.abca3926d80c
changelog:
  - !24201 mm/numa_remote: fix variable undeclared error whe
  - mm/numa_remote: fix variable undeclared error when CONFIG_MEMORY_RELIABLE isn't enabled
  - !24187 [sync] PR-24170: ub:ubus: Optimize the initialization performance of USI INT_TYPE2
  - ub:ubus: Optimize the initialization performance of USI INT_TYPE2
  - ub:ubus: Resolve the link change message is not reported before sending notify message
  - !24183 ub: udma: Intercept unsupported operations.
  - ub: udma: Intercept unsupported operations.


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-159.4.2.153.20260626.9bafeaf4201f
changelog:
  - !24240 ub: ubase: clear FE reset status register during probe
  - !24233 [sync]urma: sync bugfix from OLK-6.6 from 8f7de4b6 to 6483ac53
  - ub: ubase: clear FE reset status register during probe
  - !24232 [sync] PR-24231: ub:ubus: Always invalidate tlb during decoder unmap
  - urma: fix isref send no rsp to confirm state
  - urma: add huge lock in create tpid
  - urma: fix ref in ubmad and fix UAF in ubmad_rt_work_handler
  - urma: fix flush done event dispatch
  - ub:ubus: Always invalidate tlb during decoder unmap
  - !24218 urma: optimize sleep and logging in TPID reuse and rate-limited logs
  - urma: optimize sleep and logging in TPID reuse and rate-limited logs
  - !24214 ub: udma: Optimize the process of refcount_inc
  - ub: udma: Optimize the process of refcount_inc


author: ChenYanpan <chenyanpan@xfusion.com> - 23.08.4-2
changelog:
  - use 
    /usr/bin/cmake --build "x86_64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/kf5-ksmtp-23.08.4-2.oe2403sp4.x86_64" /usr/bin/cmake --install "x86_64-openEuler-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 23.08.4-2
changelog:
  - use 
    /usr/bin/cmake --build "x86_64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/kf5-libgravatar-23.08.4-2.oe2403sp4.x86_64" /usr/bin/cmake --install "x86_64-openEuler-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 23.08.4-2
changelog:
  - use 
    /usr/bin/cmake --build "x86_64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/kf5-libkleo-23.08.4-2.oe2403sp4.x86_64" /usr/bin/cmake --install "x86_64-openEuler-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 23.08.4-2
changelog:
  - use 
    /usr/bin/cmake --build "x86_64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/kf5-messagelib-23.08.4-3.oe2403sp4.x86_64" /usr/bin/cmake --install "x86_64-openEuler-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 5.113.0-2
changelog:
  - use 
    /usr/bin/cmake --build "x86_64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/kf5-modemmanager-qt-5.113.0-2.oe2403sp4.x86_64" /usr/bin/cmake --install "x86_64-openEuler-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 5.113.0-2
changelog:
  - use 
    /usr/bin/cmake --build "x86_64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/kf5-plasma-5.113.0-2.oe2403sp4.x86_64" /usr/bin/cmake --install "x86_64-openEuler-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 5.113.0-2
changelog:
  - use 
    /usr/bin/cmake --build "x86_64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/kf5-prison-5.113.0-2.oe2403sp4.x86_64" /usr/bin/cmake --install "x86_64-openEuler-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 5.113.0-2
changelog:
  - use 
    /usr/bin/cmake --build "x86_64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/kf5-purpose-5.113.0-2.oe2403sp4.x86_64" /usr/bin/cmake --install "x86_64-openEuler-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 5.113.0-2
changelog:
  - use 
    /usr/bin/cmake --build "x86_64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/kf5-sonnet-5.113.0-2.oe2403sp4.x86_64" /usr/bin/cmake --install "x86_64-openEuler-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 5.113.0-2
changelog:
  - use 
    /usr/bin/cmake --build "x86_64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    /usr/bin/cmake --build "x86_64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose


author: ChenYanpan <chenyanpan@xfusion.com> - 5.113.0-2
changelog:
  - use 
    /usr/bin/cmake --build "x86_64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/kf5-syntax-highlighting-5.113.0-2.oe2403sp4.x86_64" /usr/bin/cmake --install "x86_64-openEuler-linux-gnu" to fix build failure


author: yangfeng <yangfeng@kylinsec.com.cn> - 2.6.0-2
changelog:
  - KYOS-B: Fix touch screen taskbar button click judged as drag.(#23600)
  - KYOS-F: Other workspace Windows are not displayed by default.
  - KYOS-B: Fixed an issue where recent documents were not sorted.(#24803)
  - KYOS-B: Fixed an issue where the x11 tray icon did not match the size of the icon container, causing the tray icon to display abnormally.(#22117)
  - KYOS-B: Fix Pinyin search failed when /etc/locale.conf is not LANG="zh_CN.UTF-8".(#21369)
  - KYOS-F: Replace "mate-panel --run-dialog" with "kiran-panel --run-dialog".(#24810)


author: luoqing <luoqing@kylinsec.com.cn> - 2.6.0-3
changelog:
  - KYOS-B: Fixed the issue where the taskbar close window used the wrong timestamp.(#26368)
  - KYOS-B: Fix win key popup Start menu does not get focus, can not directly keyboard operation (#21246)
  - KYOS-B: :when resize icon window, it is necessary to consider the impact of the scale factor.The correct resize height is the height of the container multiplied by the scale factor of the container (#30889)


author: yangfeng <yangfeng@kylinsec.com.cn> - 2.6.0-4
changelog:
  - KYOS-B: Fixed an issue where taskbar page-turning ICONS cover each other(#19588)
  - KYOS-B: Fixed the taskbar page-turning ICONS hiding each other when zoom rate was 200
  - KYOS-F: The plugin button loads the icon from the system theme
  - KYOS-B: Fixed xnest connection crash
  - KYOS-B: Fixed an issue where the taskbar does not drag smoothly
  - KYOS-B: Fixed start Menu without icon application drag and drop causes the bottom panel to crash(#34719)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.6.0-8
changelog:
  - KYOS-B: Fix window thumbnails not being fetched by window manager takeover(#56152)
  - KYOS-B: fix some memory leak(#54376)
  - KYOS-B: Fix some related issues in recent documents(#55119)
  - KYOS-F: adding apps to the desktop, copy them to a temporary file and change the permissions.(#37790)
  - KYOS-F: Added configuration items: Fixed application to the taskbar(#37152)
  - KYOS-B: change 'Recently files' to 'Recent files'(#38303)
  - kYOS-B: fix interference caused by tooltip and popup type windows
  - KYOS-F: taskbar add "simply window previewer" mode(only show window title)(#45321) 
  - KYOS-B: Fixed an issue where taskbar page-turning ICONS cover each other(#19588)
  - KYOS-B: Fixed the taskbar page-turning ICONS hiding each other when zoom rate was 200
  - KYOS-F: The plugin button loads the icon from the system theme
  - KYOS-B: Fixed xnest connection crash
  - KYOS-B: Fixed an issue where the taskbar does not drag smoothly
  - KYOS-B: Fixed start Menu without icon application drag and drop causes the bottom panel to crash(#34719)
  - KYOS-B: Fixed the issue where the taskbar close window used the wrong timestamp.(#26368)
  - KYOS-B: Fix win key popup Start menu does not get focus, can not directly keyboard operation (#21246)
  - KYOS-B: :when resize icon window, it is necessary to consider the impact of the scale factor.The correct resize height is the height of the container multiplied by the scale factor of the container (#30889)


author: luoqing <luoqing@kylinsec.com.cn> - 2.5.2-3
changelog:
  - KYOS-B: Fixed a crash caused by repeatedly calling disConnectDev in resetUkey and destructor to release the same device handle
  - KYOS-R: Modify the code according to the https://gitee.com/openeuler/kiran-authentication-devices/pulls/17 review opinions
  - KYOS-B: when the iris face integrated device is removed, the memory cannot be released and the process is blocked.When the face iris device object is removed, restart the service to release resources (#25243)
  - KYOS-B: When the driver is enabled, the device is scanned and the corresponding device object is created.When the driver is disabled,the corresponding device object is released. (#25387)
  - KYOS-B: fix file install path error


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.5.2-5
changelog:
  - KYOS-B: delete blank cmake_target_link_directories
  - KYOS-B: remove rpath (#37243)
  - KYOS-F: suitable for zhi ang fingerprint device (#24532)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.6.1-24
changelog:
  - KYOS-F: Decrease the priority of override file configurations(#52881)
  - KYOS-F: Marking the configuration as not to be replaced
  - KYOS-B: Enrichment of error messages in pw_history module when changing passwords(#52096)
  - KYOS-B: Fix crash caused by the previous commit due to the existence of a schema but the absence of a color-schema (#35120)
  - KYOS-B: Fix the issue where switching between light and dark themes does not work in Gnome 41 and later versions.(#35120)
  - KYSO-B: Fix the ntp service load order logic error
  - KYSO-B: Fix std::regex can not run in gcc version < 4.9(#48386)
  - KYSO-F: Use glibmm's regex to replace glib's regex
  - KYSO-B: Fix failure to get disk information in virtual machine(#46645)
  - KYOS-B: Fixed the issue where Unglab was not executed in a timely manner, causing subsequent Xclient connections to XServer to fail
  - KYOS-B: fix the graphical and network hardware info no display problem.(#37289)
  - KYOS-B: Remove the duplicate graphical and network hardware info.
  - KYOS-B: The shutdown shortcut cannot be found.(#44337)
  - KYOS-F: add shutdown keybinding
  - KYOS-B: perform adaptive settings when connection status or monitor uid is changed.(#37289)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.6.1-25
changelog:
  - KYOS-B: fix the passwd command compatible problem for KY3.3-9-Server(#46550)
  - KYOS-F: Add icon and cursor theme changing when enable auto switch theme.(#73665)
  - KYOS-F: Modify gtk and icon theme to light theme defaultly.


author: gaobo <gaobo@kylinsec.com.cn> - 2.6.1-27
changelog:
  - Update the patch0035's description (f:155085)
  - modify the ntp service selected rule.(b:77953)
  - Fix the signal parameter parsing of added/deleted Upower devices.(b:81563)
  - Disable capslock and numlock by default(b:155085)
  - Fix cpu model name with BIOS while it is empty(b:91787)
  - Fix translation typo (b:90671)
  - Fix issue caused by delayed synchronization when disabling repeat keys (b:90671)
  - Fix build issues caused by recent commits (f:155085)
  - Fix incorrect remaining time in discharge notification after unplugging at full charge(b:108231)
  - Export symbols of exec application(b:109925)
  - Auto theme switching not disabled after manual theme switch.(b:115404)
  - add "--" before user name in spawn calls to prevent option injection. (b:121814)
  - avoid treating VMware VMMouse as touchpad. (b:34878)
  - resolve multiple resource and memory leaks. (b:123369)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.6.4-2
changelog:
  - KYOS-B: Fix crash when ipv6 address can't be retrieved(#75993)
  - KYOS-F: Supports dimming the monitor during idle time(#76040)
  - KYOS-F: Supports Meta and Window theme settings(#73665)
  - KYOS-F: Support for sound testing(#73668)
  - KYOS-B: compatible with different versions of open-source cursor to prevent program crashes(#IBV1XG)
  - KYOS-F: Split Screensaver and locking concepts, add support for embedded xscreensaver(#73664)
  - KYOS-F:Fix the problem of web details supporting large layouts.(#72894)
  - KYOS-F:improve code in group plugin.(#73623)
  - KYOS-F: Fix the problem of getting the return value of a device via NetworkManager DBus interface under stress test(#70121)
  - KYOS-B: Fix password input limit of 20（#57392）
  - KYOS-B: power management front-end server version determination to runtime configuration(#52885)
  - KYOS-B: Fixes an issue with determining connection and NIC Mac configuration matches when a connection configuration change is active(#51089)
  - KYOS-B: Fix the message that the tray service is not registered when the tray is registered.(#50967)
  - KYOS-B: shared Networks Add Configuration Invisible (#51089)
  - KYOS-B: shared Networks Add Configuration Invisible(#51089)
  - KYOS-B: Fix the message that the tray service is not registered when the tray is registered.(#50967)
  - KYOS-F: hide privacy_policy(#35818)
  - KYOS-F: adjusting the default configuration of the PG version to the server configuration(#51253)
  - KYOS-B: Fix Control Center NIC duplication when restarting NetworkManager(#50967)
  - KYOS-B: Add DISPLAY as one of the conditions for determining a user process singleton.(#48260)
  - KYOS-B: remove NetworkManager-l2tp Requires
  - KYOS-F: network details page supports multiple IP masks(#46740)
  - KYOS-B: Fix DBusServiceWatcher lifecycle not bound to slot object(#46755)
  - KYOS-B: Fix that the maximum height of KiranCollapse will not be adjusted under the list of available connections in the network plugin(#47197)
  - KYOS-F: network plugin support wired carrier check(#36646)
  - KYOS-F: netowrk plugin support single configuration multiple IP addresses(#46740)
  - KYOS-B:  add Obsoletes kiran-timedate-manager  
  - KYOS-F: fix build in 339
  - KYOS-B: Adapt to Qt5.9.7 NativeScanCode to QtKey
  - KYOS-F: new network card Carrier status check as tray connection condition judgment(#36646)
  - KYOS-F: Reserved idle lock screen related configurations for server versions(#31787)
  - KYOS-B: fix gateway display not configured tray icon show disconnection(#36646)
  - KYOS-B: Fix the issue where the initial letters of certain categories are not capitalized.(#36266)


author: gaobo <gaobo@kylinsec.com.cn> - 2.6.4-4
changelog:
  - Network connectivity checking is not enabled by default(f:77265)
  - Fix monitor dimming translation when idle(f:76040)
  - Fix incorrect icon color for more options (f:155085)
  - hide the option to dim when general settings are idle(f:76040)
  - Screen saver setting screen is not enabled by default (f:155085)
  - add message dialog while input only modifies or input super key for keybinding.(f:79211)
  - handle Super_R same with Super_L.(f:79211)
  - improve translation of "Window Themes Setting".(f:84434)
  - Repair strftime results in LANG=zh_CN environment in the graphical interface display messy code(f:86656)
  - Fix build error on 336 system(f:88924)
  - Fix crash caused by failure to obtain primary or active connection when network device state changes(f:90564)
  - fix the default position of the Hostname dialog and slightly adjust the content layout. (b:90839)
  - Fix translation issues in authentication configuration interface. (b:90773)
  - Fix Incorrect Anchor Information Update When Virtual Screen Resolution Changes Leading to Position Abnormalities. (b:92973)
  - network unavailable prompt still exists after restarting NetworkManager service on system startup(f:94129)
  - Update window positions when a single display's resolution changes to prevent gaps between screens. (b:103625)
  - Fix the issue where the prompt content is not fully displayed when changing from a low resolution to a higher one. (b:108453)
  - compatible with kylinsec and kylin release dir,and show agreement only if file exists.(b:107748)
  - fix can't load logging category in audio and power. (b:118262)
  - hide license version. (b:126107)
  - Add zh_CN translations for devel and launcher packages (f:155085)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.6.0-22
changelog:
  - KYOS-F: Setting the default white theme for the desktop version
  - KYOS-F: Override configuration, split screen saver as well as lock screen(#73664)
  - KYOS-B: adjusting gvfs dependency judgments for v6 releases
  - KYOS-B: Increase Server Version Disable DPMS Configuration Priority(#53822)
  - Change configuration only at installation time
  - Fix the issue that executing the post script twice causes the touchpad backend plugin to be disabled
  - Specify configuration file %config(noreplace)
  - KYOS-B: Fix post stage change unlock box power configuration error report
  - KYOS-F: Adjust the default configuration of window screenshot shortcuts to kiran-flameshot
  - KYOS-B: Decrease override file priority(#52881)
  - KYOS-F: adjusting the default configuration of the PG version to the server configuration(#51253)
  - KYOS-F: server versions enable locking on idle by default
  - KYOS-B: fix install error in KY3.3-9
  - KYOS-F: Reserved idle lock screen related configurations for server versions(#31787)
  - KYOS-F: remove kiran-authentication-devices-sdk dependency (#35156)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.6.0.23
changelog:
  - KYOS-F: Add 51_kiran-desktop.gschema.override to distinguish desktop and server.
  - KYOS-B: Add package dependencies xscreensaver for V6(#73664)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.6.0-24
changelog:
  - KYOS-B: Enable split screen saver and lock screen only for V6 version
  - KYOS-B: remove dep initial-setup-gui


author: yuanxing <yuanxing@kylinsec.com.cn> - 2.6.0-2
changelog:
  - KYOS-B: add icon of gnome software with correct icon name in Kiran.(#28021)
  - KYOS-B: update icons to smaller size to fix the slowly problem when open caja.(#33978)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.4.0-4
changelog:
  - fix zlog use program log rotation lock rules to avoid log file is locked by other process(b: 113752)
  - change cmake minimum version to range


author: yuanxing <yuanxing@kylinsec.com.cn> - 2.6.1-1.kb2
changelog:
  - KYOS-F: Fix error caused by missing overload implementation on lower version C++standard library.
  - KYOS-F: Adapt to lower version STDC++.
  - KYOS-F: Fix the sonarqube bugs.(#76290)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.5.1-8.kb1
changelog:
  - KYOS-B: fix the issue of manual scaling not taking effect(#25011)
  - KYOS-B: fix issues caused by automatic login timeout(#25015)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.5.1-11
changelog:
  - KYOS-B: Fix ci issues
  - KYOS-B: Add virtual keyboard detection(#29712)
  - KYOS-B: incorrect scaling cursor size(#29286)
  - KYOS-B: fix untranslated text from polkit-agent(#29452)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.5.1-13
changelog:
  - KYOS-B: Adjusting the Greeter Control Center plugin to use a new version of the interface for keyword search(#35280)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.5.2-4
changelog:
  - KYOS-F: Fix destructor crash when VirtualKeyboard is not initialized.(#71359)
  - KYOS-F: greeter and unlock dialog support fullname(#40540)
  - KYOS-F: Add detection for whether to install a virtual keyboard
  - KYOS-F: Hide triple-authorized users by default(#53743)
  - KYOS-B: processing screen from scratch, configuration screen(#51999)
  - Fix the power menu showing on the top left when disabling all power options
  - KYOS-B: Fix the crash caused by receiving two signals from Polkit completion(#49904)
  - KYOS-B: When disabling all power settings, the power button should not be displayed(#49764)
  - KYOS-B: Add DISPLAY as one of the conditions for determining a user process singleton.(#48260)
  - KYOS-F: Support default preferred login user configurable(#47534)
  - KYOS-B: fix crash in xserver without randr (#41284)
  - KYOS-B: Fix the issue of lowercase first letters in sub-feature items(#36266)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.4.0-20
changelog:
  - KYOS-B: replace ParentStyle with QProxyStyle and adapt to QT5.9.7 version
  - KYOS-B: theme support custom library name
  - KYOS-B: Adapting to lower version Qt, autorcc not correctly associating dependencies
  - KYOS-B: Fix theme error when session dbus service is not registered(#35760)
  - kYOS-B: fix build in Qt5.9.2(#45382)
  - KYOS-B: adjust the height of the QCompleter Popup pop-up(#42329)
  - KYOS-B: fix the failure of dynamic theme switching in low version of Qt.(#51353)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.2.3-12
changelog:
  - KYOS-B: Fix the problem of closing the screensaver window in idle shutdown/logout process after locking the screen


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.2.4-1
changelog:
  - KYOS-B: fix sonarqube scanning problem.
  - KYOS-B: Fix conflict with Display dims when idle
  - KYOS-F: Support XEmbed Screensaver theme(#78377,#73664)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.2.4-2
changelog:
  - rebuild for KiranUI-2.6-next
  - KYOS-B: Fix AutoRestart not working due to disabling session management


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.5.0-14
changelog:
  - KYOS-B: Session management pulled up child process forwards standard errors to the master process(#50844)
  - KYOS-B: Repair the situation that Key cannot be matched when receiving QGSettings changed signals(#51570)
  - KYOS-F: Add kiran-session-quit to support shutdown shortcut (#44337)
  - KYOS-B: fix build error
  - KYOS-B: extend the dbus call timeout to 10s to fix the restart failure caused by the CanReboot call timeout
  - KYOS-B: fix the problem that inhibitor window is show when the number of inhibitor is zero.(#24564)
  - KYOS-B: repair defects about theme not right when into livecd mode (#8146)
  - KYOS-B: change QCoreApplication to QGui/QApplication to fix the issue of SM not auto exit when XDMCP connection is disconnected.(#31631,#31796)


author: ChenYanpan <chenyanpan@xfusion.com> - 1.5.2-2
changelog:
  - use 
    /usr/bin/cmake --build "x86_64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/ktextaddons-1.5.2-2.oe2403sp4.x86_64" /usr/bin/cmake --install "x86_64-openEuler-linux-gnu" to fix build failure


author: shenzhongwei <shenzhongwei@kylinos.cn> - 1.29.1-10
changelog:
  - TypeLbugfix
  - CVE:NA
  - SUG:NA
  - DECS:remove the architecture judgment in the patches section;
         include all patches in the source package.


author: jade_t <yzd50036@gmail.com> - 1.29.1-17
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix the installation conflict between kubernetes-kubelet and kubernetes-node


author: lvfei <lvfei@kylinos.cn> - 1.0.34-4
changelog:
  - Type:bugfix
  - CVE:
  - SUG:NA
  - DESC: add patch:0001-update-desktop-file-and-add-sdk-translate.patch


author: lvfei <lvfei@kylinos.cn> - 1.0.4-6
changelog:
  - add patch:0001-kylin-user-guide-add-bo-desktop-translate.patch
  - kylin user guide add desktop zangwen support


author: weijin deng <weijin.deng@turbolinux.com.cn> - 0.18.1-1
changelog:
  - Upgrade to 0.18.1
  - Update Version, Release, Source0, stage 'files'
  - Stage 'build' use meson build


author: peijiankang <peijiankang@kylinos.cn> - 3.1.2-31
changelog:
  - Type:bugfix
  - ID  :NA
  - SUG :NA
  - DESC:add ukui-control-center-3.1.2-repair-freelogin-autologin-not-available.patch


author: huayadong <huayadong@kylinos.cn> - 3.1.2-33
changelog:
  - Type:bugfix
  - ID  :NA
  - SUG :NA
  - DESC:Patch203:fix-the-display-resolution-does-not-match-the-actual-resolution.patch


author: Wenlong Ding <wenlong.ding@turbolinux.com.cn> - 2.0.8-1
changelog:
  - Update to 2.0.8, using BuildRequires xfce4-dev-tools replace exo-devel(new version of exo not contains exo-csource).


author: yuanxing <yuanxing@kylinsec.com.cn> - 1.28.0-1
changelog:
  - Initial build
  - KYOS-F: change workspace titlebar and font and composite
  - KYOS-B: fix disabled Alt+F1 to popop mate menu
  - KYOS-F: feature [menu] : pop up start menu when press super key


author: longcheng <longcheng@kylinos.com.cn> - 1.24.0-2
changelog:
  - KYOS-F: draw mask for whole screen except the selection area
  - KYOS-F: add X-System-Server category for mate-system-log
  - KYOS-F: add X-KIRAN-NoDisplay=true in mate-system-log.desktop.in.in
  - KYOS-T: change chinese translation.(#28543)
  - KYOS-F: fix mate system log is not displayed in the control panel (#48482)


author: yuanxing <yuanxing@kylinsec.com.cn> - 1.28.0-1
changelog:
  - Initial build
  - Properly update the set of monitors when it changes
  - KYOS-F: add kiran theme
  - KYOS-F: set default position to right-bottom


author: yuanxing <yuanxing@kylinsec.com.cn> - 1.28.1-1
changelog:
  - Initial build
  - KYOS-F: modify desktop and modify mate system monitor
  - KYOS-B: fix resource abnormal caused by excessive CPUs and solve crash when switch CPU display color in CPU > 31
  - KYOS-B: fix get pcpu with double to solve the cpu% don't changed
  - KYOS-B: fix could not get name information of Loongson processor
  - KYOS-B: fix cpuinfo mate-system-monitor hardware-cpuinfo display


author: yuanxing <yuanxing@kylinsec.com.cn> - 1.28.1-1
changelog:
  - initial build
  - KYOS-B: add kylin mask and part of translations
  - KYOS-B: set text preview content
  - KYOS-B: add a action in mate-terminal.desktop.in.in
  - KYOS-B: change default color and system color to Dracula Dark(#30872)
  - KYOS-B: select the default charset by locale


author: yaoxin <yao_xin001@hoperun.com> - 2.0.20-1
changelog:
  - Update to 2.0.20
    * Fix QoS 1 / QoS 2 publish incorrectly returning "no subscribers". Closes #3128.
    * Open files with appropriate access on Windows. Closes #3119.
    * Don't allow invalid response topic values.
    * Fix some strict protocol compliance issues. Closes #3052.
    * Fix cmake build on OS X. Closes #3125.
    * Fix build on NetBSD
    * Fix mismatched subscribe/unsubscribe with normal/shared topics.
    * Fix crash on bridge using remapped topic being sent a crafted packet.
    * Don't allow SUBACK with missing reason codes in client library.
    * Fix crash on subscribe under certain unlikely conditions. Closes #2885. Closes #2881.
    * Fix mosquitto_rr not honouring -R. Closes #2893.
    * Fix max_queued_messages 0 stopping clients from receiving messages. Closes #2879.
    * Fix max_inflight_messages not being set correctly. Closes #2876.
    * Fix mosquitto_passwd -U backup file creation. Closes #2873.


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 0.35.1-1
changelog:
  - Update to 0.35.1
  - Enabled VA-API support
  - Enabled Wayland backend & native PipeWire output support


author: liweiganga <liweiganga@uniontech.com> - 1.2.0-1
changelog:
  - upstream release 1.2.0
  - fix: fix CVE-2016-10141、CVE-2016-7504、CVE-2016-9136、CVE-2017-5628、CVE-2016-9017、\
         CVE-2016-7506、CVE-2017-5627、CVE-2016-9108、CVE-2016-9294


author: zhangxingrong <zhangxingrong@uniontech.cn> - 44.6-4
changelog:
  - delete: Don't wrongly set window as not alive when pings are disabled
  - window: Add IS_ALIVE to get_property
  - core/window: Propagate focus appearance to all ancestors
  - clutter/actor: Don't write uninitialized out values on failed transform
  - clutter/pick-stack: Add an allocation check to calculate_clear_area ()


author: zhangbowei <zhangbowei@kylinos.cn> - 0.3.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: implement a pure Go solution to eliminate iproute dependencies


author: will_niutao <niutao2@huawei.com> - 1.5.1-1
changelog:
  - Change upstream to https://github.com/orocos/orocos_kinematics_dynamics, and rename the package to orocos-kdl


author: jiangxinyu <jiangxinyu@kylinos.cn> - 4.4.4.1-2
changelog:
  - Change requires from postgresql-13-contrib and postgresql-13-server to postgresql-contrib and postgresql-server


author: tangjie02 <tangjie02@kylinsec.com.cn> - 5.27.11-2
changelog:
  - adapt to the new CMake macros to fix build failure
  - disable snap plugin because of snapd-glib required qt6, but plasma-discover required qt5


author: yuanxing <yuanxing@kylinsec.com.cn> - 1.28.0-1
changelog:
  - Initial build
  - KYOS-F: add chinese translation
  - KYOS-B: Fixed garbled toolTips path in tab page with GB18030 encoding(#7248)


author: jiangxinyu <jiangxinyu@kylinos.cn> - 2.53.3-1
changelog:
  - Update package to version 2.53.3
    * Fix metric name include histogram error
    * TSDB: Let queries with heavy regex matches be cancelled and not use up the CPU
    * Scraping: allow multiple samples on same series, with explicit timestamps


author: jiangxinyu <jiangxinyu@kylinos.cn> - 0.15.0-2
changelog:
  - Type: CVE
  - CVE: CVE-2023-39326 CVE-2024-24789 CVE-2024-24791
  - SUG: NA
  - DESC: Rebuild to fix CVE-2023-39326 CVE-2024-24789 CVE-2024-24791


author: gongzhengtang<gong_zhengtang@163.com> - 1.3.2-1
changelog:
  - update to v1.3.2
  - Prevent ever-growing session size for OAuth clients.
  - Revert quote client id and secret.
  - unquote basic auth header for authorization server.
  - fix a bug in module 'importlib' has no attribute 'metadata'


author: wanglianjun<wanglianjun@xfusion.com> - 1.6.9-1
changelog:
  - Upgrade to 1.6.9 to fix CVE-2026-28802
  - Remove "none" algorithm from default jwt instance to prevent signature bypass
  - Includes fixes for CVE-2025-62706 (JWE decompression limit)
  - Includes OctKey security import fix
  - See: https://github.com/authlib/authlib/commit/b87c32ed


author: yaoxin <yao_xin001@hoperun.com> - 5.0.0-1
changelog:
  - Update to 5.0.0:
    * Breaking: Change default to disable private network access
      This effectively resolves GHSA-hxwh-jpp2-84pm https://osv.dev/vulnerability/PYSEC-2024-71


author: guochao <guochao@kylinos.cn> - 24.1.0-1
changelog:
  - Update package to version 24.1.0
  - Import os.link conditionally to fix importing on android
  - Add aiofiles.os.path.abspath and aiofiles.os.getcwd.


author: GuoCe <guoce@kylinso.cn> - 3.8.1-1
changelog:
  - Update package to version 3.8.1
  - Corrects WSGI adapter handling of root path.
  - Handles case where `"client"` is ``None`` in WsgiToAsgi adapter.


author: jiangxinyu <jiangxinyu@kylinos.cn> - 4.2.1-1
changelog:
  - Update package to version 4.2.1
  - Adapt for logging lock internal changes in Python3.13
    Remove SIGUSR2 from TERMSIGS_DEAULT


author: chenyanpanHW <chenyanpan@huawei.com> - 0.30.1-2
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0001-fix-build-erro.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0002-delete-import-m2r.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


author: songliyang <songliyang@kylinos.cn> - 5.3.4-1
changelog:
  - update to 5.3.4
  - Use string value for CELERY_SKIP_CHECKS envvar
  - Document need for CELERY_ prefix on CLI env vars
  - Fixed AttributeError: 'str' object has no attribute


author: lilu <lilu@kylinos.cn> - 0.3.1-1
changelog:
  - Update package to version 0.3.1
  - Update pyproject.toml, remove upper bound from Python version specifier and so on


author: Hann <hannannan@kylinos.cn> - 30.8.0-1
changelog:
  - Update package to version 30.8.0
  - Update city names for uk_UA
  - Fix issue where Faker does not properly convert min/max float values to Decimal


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 33.0.0-1
changelog:
  - Update package with version 33.0.0
    Revert "Make pytest fixture session-scoped".
    Add jobs for locale de_AT; added methods job_female and job_male
    Added Providers for uz_UZ language


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 37.3.0-1
changelog:
  - Update package with version 37.3.0
    Fix remove duplicate cities in de_DE address provider
    Add support for unique complex value types Fixes
    Add hash functions overloads with no params
    Overload hash generation functions to make return types more specific
    Add stub support for overloaded methods
    Add phone numbers for de_CH and it_CH
    Fix date_time provider with end_datetime in the past
    Add support for Zulu (zu_ZA) address provider and corresponding tests
    Declare support for Python 3.13


author: sqfu <dev01203@linx-info.com> - 0.7.0-1
changelog:
  - update to 0.7.0
  - adding GH dependabot
  - Bump the pip group with 2 updates
  - Update hypothesis requirement from <6.62.0 to <6.100.0 in /.github/scripts


author: xu_ping <707078654@qq.com> - 1.14.0-1
changelog:
  - Update to 1.14.0
  - Add support for pyhon3.11 and python3.12
  - Added a new valid PGP key to sign the package
  - python3.7 is not supported and Remove support for python3.6


author: jiangxinyu <jiangxinyu@kylinos.cn> - 5.3.5-1
changelog:
  - Update package to version 5.3.5
    Fix crash when using global_keyprefix with a sentinel connection


author: zhaoshuang <zhaoshuang@uniontech.com> - 2.5.0-1
changelog:
  - Update package to version 2.5.0
    Add support for custom extras
    Drop Python 3.5\3.6\3.7 support
    Add prepend arg to toc extra
    Process HTML comments as markdown in 'escape' safe mode
    Fix syntax warnings in test suite
    Process inline tags as HTML blocks when they span multiple lines
    Add new LaTeX Extra
    Fix html, head and body tags being wrapped in <p> tags
    Graceful handling of broken lists when cuddled-lists extra is enabled
    Add type hints
    Drop Python 3.6 and 3.7 support
    Fix fenced code blocks breaking lists
    Fix #583 by tweaking incomplete tag regex
    Fix AssertionError on malformed HTML


author: songliyang <songliyang@kylinos.cn> - 2.5.1-1
changelog:
  - Update package to version 2.5.1
  - Add option to output to file in CLI
  - Add support for Python 3.13
  - Remove redundant version checks
  - Fix tox: 'failed with make is not allowed, use allowlist_externals to allow it'


author: xu_ping <707078654@qq.com> - 9.0.1-1
changelog:
  - Upgrade version to 9.0.1
  - add Raw UDP and DTLS support.
  - Deprecate add_log event hook and mitmproxy.ctx.log.


author: xieyanlong <xieyanlong@kylinos.cn> - 3.1.5-1
changelog:
  - bugfix: Workbook files not properly closed on Python ≥ 3.11.8 and Windows
  - bugfix: Column name caches are slow and use a lot of memory
  - bugfix: Rich-text can be saved if lxml is not installed


author: tanyulong <tanyulong@kylinos.cn> - 2.4.0-2
changelog:
  - delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/opentracing.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


author: lvfei <lvfei@kylinos.cn> - 3.9.15-1
changelog:
  - upgrade to 3.9.15 fix CVE-2024-27454
  - Fix crash serializing str introduced
  - Fix Serialization str escape uses only 128-bit SIMD 
  - Minimal musllinux_1_1 build due to sporadic CI failure
  - Improve performance of serializing. str is significantly faster. Documents
     using dict, list, and tuple are somewhat faster.
  - orjson module metadata explicitly marks subinterpreters as not supported


author: liutao1 <liutao1@kylinos.cn> - 3.10.0-1
changelog:
  - Update package to version 3.10.0
    Support serializing numpy.float16 (numpy.half).
    sdist uses metadata 2.3 instead of 2.1.
    Improve Windows PyPI builds.


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 3.10.11-1
changelog:
  - Update package with version 3.10.11
    Improve performance of UUIDs.
    Publish PyPI wheels with trusted publishing and PEP 740 attestations.
    Compatibility with CPython 3.14 alpha 1.
    Drop support for arm7.
    Serializing numpy.ndarray with non-native endianness raises orjson.JSONEncodeError.


author: zhaojingyu <zhaojingyu@klinos.cn> - 5.4.1-1
changelog:
  - Update package to version 5.4.1
    fixed a regression from version 5.4.0 that incorrectly handled files opened twice via file descripto


author: jiangxinyu <jiangxinyu@kylinos.cn> - 1.1.2-1
changelog:
  - Update package to version 1.1.2
    * fix: accommodate docxtpl use of Part._rels
    * fix: XmlPart._rel_ref_count


author: jiangxinyu <jiangxinyu@kylinos.cn> - 0.15.0-1
changelog:
  - Update package to version 0.15.0
  - FIX Copy JupyterLite contents early so it runs before jupyterlite_sphinx build-finished


author: xiaozai <xiaozai@kylinos.cn> - 1.7.0-1
changelog:
  - Update package to version 1.7.0
    - Remove deprecated plugins
    - Remove python 2 declaration
    - Add static method Tree.from_map


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 0.21.0-1
changelog:
  - Update package to version 0.21.0
    Add cleanup_socket param on create_unix_server
    Use cythonized SO_REUSEPORT rather than the unwrapped native one
    UDP errors should result in protocol.error_received
    Updates for Cython3
    Test with Python 3.13


author: wangkai <13474090681@163.com> - 1.1.0-3
changelog:
  - Compling package with pyproject
  - Obsoletes subpackage python-blurb-help
  - Add check for blurb command


author: Miro Hrončok <mhroncok@redhat.com> - 3.3.4-5
changelog:
  - Subpackage python2-empy has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: zhaosaisai <zhaosaisai@kylinos.cn> - 2.0.0-1
changelog:
  - Upgrade to the latest version 2.0.0
  - Add new writer methods and namespace elements/resolvers
  - Separate new write functionality from elements that have namespaces
  - Split everything except the closing tag into a separate fn
  - Improve performance with inline qname splitting
  - Local refactoring/performance improvements
  - Example Change the default write value of the root only ns keyword
  - Deprecate python 3.6 and 3.7 because nsetree requires the updated XMLParser
  - Disable coveralls unless you know exactly how to get access tokens


author: wangjunqi <wangjunqi@kylinos.cn> - 2.1.0-1
changelog:
  - Update package to version 2.1.0 
  	Add support for sys/policies endpoint (GH-1100)
  	add quota support to system backend (GH-1092)
  	Add support to PKI class to perform CRUD on issuers (GH-1102)


author: wangkai <13474090681@163.com> - 0.4.4-1
changelog:
  - Update package to version 0.4.4
  - Fix CVE-2023-30608
  - Compling package with pyproject
  - Obsoletes subpackage python-sqlparse-help


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 0.46.1-1
changelog:
  - Update package with version 0.46.1
    Fix: Allow relative directory path when follow_symlinks=True
    Add: GZipMiddleware: Make sure Vary header is always added if a response can be compressed
    Fix: Raise exception from background task on BaseHTTPMiddleware
    Fix: GZipMiddleware: Don't compress on server sent events
    Mod: MultiPartParser: Rename max_file_size to spool_max_size
    Drop Python 3.8 support
    Remove ExceptionMiddleware import proxy from starlette.exceptions module
    Remove deprecated WS_1004_NO_STATUS_RCVD and WS_1005_ABNORMAL_CLOSURE
    Add client parameter to TestClient
    Add max_part_size parameter to Request.form()
    Remove deprecated allow_redirects argument from TestClient
    Make UUID path parameter conversion more flexible
    Raise ClientDisconnect on StreamingResponse


author: liyue01 <liyue01@kylinos.cn> - 0.30.1-1
changelog:
  - Update package to version 0.30.1
  - Fixed ：Allow horizontal tabs in response header values
  - Added New multiprocess manager and Allow ConfigParser or a io.IO[Any] on log_config
  - Fixed：Suppress side-effects of signal propagation ，Send content-length header on 5xx
  - Added Cooperative signal handling
  - Fixed ：Revert raise ClientDisconnected on HTTP
  - Added Raise ClientDisconnected on send() when client disconnected


author: shaoning <shaoning@kylinos.cn> - 0.32.0-1
changelog:
  - Update package to version 0.32.0
      * Add reason support on WebSocketDisconnectEvent
      * Add pragma: full coverage to Process.is_alive
      * Remove signal testing order dependency
      * Improve ProxyHeadersMiddleware
      * Add support for [*] in trusted hosts


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 0.34.0-1
changelog:
  - Update package to version 0.34.0
    Add content-length to 500 response in wsproto implementation
    Drop support for Python 3.8
    Remove WatchGod support for --reload


author: weiyucheng <weiyucheng@kylinos.cn> - 2.0.0-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:sync upstream patches to support isulad container engine and systemd cgroup driver


author: wutao <wutao61@huawei.com> - 0.7.0-2
changelog:
  - Move .so file from /usr/lib64/gems/ruby/http_parser.rb-0.7.0/http_parser.rb/ to
    /usr/lib64/gems/ruby/http_parser.rb-0.7.0/ to solve fluentd loaderror problem


author: wutao <wutao61@huawei.com> - 1.4.1-2
changelog:
  - Move .so file from /usr/lib64/gems/ruby/yajl-ruby-1.4.1/yajl-ruby/
    to /usr/lib64/gems/ruby/yajl-ruby-1.4.1/yajl/ to solve fluentd loaderror problem


author: YuYing Mu <muyuying1@huawei.com> - 1.0.0-1
changelog:
  * Tue Nov 21 2023 JiaQi Zhao <zhaojiaqi18@huawei.com> - 1.0.0-1
  - Init and adapt device auth to openEuler


author: Peng He <hepeng68@huawei.com> - 1.0.0-1
changelog:
  * Tue Nov 21 2023 JiaQi Zhao <zhaojiaqi18@huawei.com> - 1.0.0-1
  - adapt compilation, tailor dependencies on hitrace and hisysevent


author: <918688502@qq.com> - 0.2.0-1
changelog:
  - Initial skeleton of the sysHAX heterogeneous collaborative acceleration runtime, including core modules, configuration management, logging system, command-line tool, API routing, application entry point, documentation, and dependency declaration


author: donglihao <donglihao1@huawei.com> - 1.2-1
changelog:
  - Add new detection algorithms for improved AI training monitoring
  - Update collection modules with enhanced performance tracing capabilities


author: donglihao <donglihao1@huawei.com> - 1.2-4
changelog:
  - Integrated previous updates:
  - remove usage of cxxfilt
  - disable HAS_BTF_SUPPORT in build.sh
  - Add new detection algorithms for improved AI training monitoring
  - Update collection modules with enhanced performance tracing capabilities


author: donglihao <donglihao1@huawei.com> - 1.3-1
changelog:
  - Refactor failslow to failslow-v3 with DDD-layered architecture
  - Rewrite spec to use failslow-v3 as the primary detection package
  - New architecture: application/, domain/, infrastructure/, task/, util/


author: yaoxin <1024769339@qq.com> - 3.4.1-1
changelog:
  - Update to 3.4.1:
    * Fix manpage path in pyproject.toml
    * Fallback to common if a platform is specified using -p flag,
      but a page doesn't exist for that platform
    * Drop support for EOL Python 3.8 version
    * Fix broken --render option
    * Fix duplicate platform information shown in pages like du, cd, w


author: chukaiping <chukaiping@baidu.com> - 3.4.3-1
changelog:
  - Update to 3.4.3
    * Fixed unpredictable platform selection when displaying pages 
    * fix: unpredictable platform selection introduced
    * Added a warning when a page is not available for the current platform


author: zhang_jian <zhang_jian7@hoperun.com> - 3.4.4-1
changelog:
  - update to 3.4.4
  - Drop support for EOL Python 3.9 version
  - Allow cache updating and command displaying on the same command
  - fix: only raise URLError or HTTPError when there are no results at all


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.38.0-1
changelog:
  - Upgrade to 3.38.0
  - Sub package totem-nautilus becomes empty
    in version 3.31.91 Move nautilus properties page to nautilus module


author: houhongxun <houhongxun@kylinos.cn> - 3.1.0-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: add 0001-ukui-panel-fix-incorrect-usage-of-deallocation-func.patch


author: douyan<douyan@kylinos.cn> - 3.1.2-6
changelog:
  - Type: bugfix
  - ID  : NA
  - SUG : NA
  - DESC: add patch03: ukui-power-manager-3.1.2-disable-computer-sleep.patch


author: huayadong <huayadong@kylinos.cn> - 3.1.0-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add patch2:ukui-session-manager-3.1.0-kylin-fix-ukui-kwin-x11-coredump.patch


author: peijiankang <peijiankang@kylinos.cn> - 3.1.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add patch3:add-switchuser-no-limits-ukui-session.patch
         rm disable-Suspend-and-Sleep-of-ukui-session-manager.patch


author: huayadong <huayadong@kylinos.cn> - 3.1.2-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add Patch4:ukui-settings-daemon-3.1.2-kylin-fix-coredump.patch


author: bianguangze <bianguangze@uniontech.com> - 0.0.1.01
changelog:
  - Add Patch: 0001-Add-utpam_client.rs-and-modify-utpam_misc.rs.patch.
  - Add Patch: 0002-Modify-pam_strerror-function.patch.
  - Add Patch: 0003-refactor-add-utpam_get_authtok.rs-file.patch.


author: bianguangze <bianguangze@uniontech.com> - 0.0.1.02
changelog:
  - Add Patch: 0004-refactor-fix-include-flag-error.patch.
  - Add Patch: 0005-add-pam_strerror.rs-and-fix-utpam_rootok-modules.patch.


author: wanglujun <wanglujun@uniontech.com> - 0.0.1.04
changelog:
  - spec: del SOURCE8 and package ./lib/libpam_c/include/utpam.h.
  - Add Patch:0007-change-log-path.patch.


author: wangmeng <wangmengc@uniontech.com> - 0.5.0-3
changelog:
  - feat: add patch 0003-fix-echo-a.z.patch
  - feat: add patch 0004-fix-type-return-error.patch
  - 修复echo {a..z} 执行错误和type命令返回值错误


author: openEuler <contact@openeuler.org> - 2.0.0-3
changelog:
  - feat: Add Witty Assistant welcome screen & LOGO
  - refactor: Improve Markdown rendering performance in TUI


author: openEuler <contact@openeuler.org> - 2.0.1-1
changelog:
  - feat: Set defautl chat model during installation
  - feat: Add shell completion installation command
  - fix: Markdown rendering issue in TUI
  - chore: Remove deprecated scripts in installer


author: openEuler <contact@openeuler.org> - 2.0.2-1
changelog:
  - feat: Add option to launch OpenCode through Witty Assistant
  - installer: Install OpenCode-AI during deployment


author: Weikang Xiang <xiangweikang3@huawei.com> - 0.1.0-2
changelog:
  - reorder cmake clean step after configure
  - fix issues in path/input/encoding verification
  - preserve explicit zero port in run_online


author: Weikang Xiang <xiangweikang3@huawei.com> - 0.1.0-4
changelog:
  - add --fast-fail/--no-fast-fail to control exit on invalid --pid
  - handle abnormal exits when target process dies or collection is interrupted
  - install witty-profiler in editable mode


author: Weikang Xiang <xiangweikang3@huawei.com> - 0.1.0-5
changelog:
  - defer logger initialization to prevent redundant output on -h/--help
  - remove slow keyword from bottleneck-identification skill
  - remove extra skills


author: gcw_X8YNlwar <wangjintao1@xfusion.com> - 1.20.4-1
changelog:
  - Update to 1.20.4
  - Fix CVE-2026-40354: Prevent trashing of arbitrary host files via symlink attack


author: yaoxin <1024769339@qq.com> - 1.15.3-1
changelog:
  - Update to 1.15.3:
    * Fix build against newer xdg-desktop-portal
    * Fix return value for the access portal


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 1.2.15-7
changelog:
  - Reorganize patch numbers in spec file
  - Add "program" option to rotate lock file configuration for finer-grained rotation locks(b: 113752)


author: gaobo <gaobo@kylinsec.com.cn> - 1.2.15-8
changelog:
  - Modify the Patch1005, change lock file path and correct the error logic for creating the lock path. (b:113752)


